From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from shymkent.ilbers.de ([unix socket]) by shymkent (Cyrus 2.5.10-Debian-2.5.10-3+deb9u2) with LMTPA; Wed, 25 Jun 2025 21:59:11 +0200 X-Sieve: CMU Sieve 2.4 Received: from mail-oo1-f56.google.com (mail-oo1-f56.google.com [209.85.161.56]) by shymkent.ilbers.de (8.15.2/8.15.2/Debian-8+deb9u1) with ESMTPS id 55PJx3Ta007814 (version=TLSv1.2 cipher=ECDHE-RSA-AES256-GCM-SHA384 bits=256 verify=NOT) for ; Wed, 25 Jun 2025 21:59:04 +0200 Received: by mail-oo1-f56.google.com with SMTP id 006d021491bc7-6114d2ae259sf442460eaf.2 for ; Wed, 25 Jun 2025 12:59:04 -0700 (PDT) ARC-Seal: i=3; a=rsa-sha256; t=1750881538; cv=pass; d=google.com; s=arc-20240605; b=L0guDWy8MwOKwtwYbHcAVdPD4jY0QaOicbLd+aXJEjt5XjSaXlpnuWyy8Q1xZunP2B kGG+KoktyerhMosy2AfEE0COLGHRfYuHu0jLTI5NU16XPXWo1k1ANbB6cNBg8GrgST3m yRhf9iHYvy/C2YQrMIxi9RapDvB95Xk6+3/KXMRLD81icN/v2YUSSyvaF9M8qxiOuWm/ THi7mM4EOtYKgWY+YztoW8C86KGzVliQT8rk/B+A20nf59qlZgP2djIlLS2G7GWzUdsS 7OiyCFxTrZWVnVIL16RCcMs+igP+C04eA61eZ9IfRxmwJbpivb6v4DogXm4J7jj+YXk2 /Uhw== ARC-Message-Signature: i=3; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20240605; h=list-unsubscribe:list-subscribe:list-archive:list-help:list-post :list-id:mailing-list:precedence:reply-to:mime-version:in-reply-to :from:content-language:references:to:subject:user-agent:date :message-id:dkim-signature; bh=FQGvm5M48sqV5IeHGkSgLgWz0fpkrSFtL/2mv7xVQfM=; fh=EGugh8uVr3qlUnj1Sbc7mrPW3zm1tTImVpLKyX3S1JI=; b=f3AmqrWeRU7DCbNyRrUo/ivXCeSpNyeNIFTZde5TDVF3OmvrwnBbWGMmqLOcG28iIO gxKdKrZ3HCD9k2YKgszJXWMaY2pKU6OIHhm3VMLPgBl2XPNfswvb/jmJgzTpyEUW2LVc P5HrUX2bRtJd4GGLBMqxqjWYVZwpReoGM1vy15EwUvB68+IUWd76jsz6d4046yC2qUQs SmJQ0WVLwSgQVNSplg9s6ttUwvC9fznehRcG2+NzCjIANr+QD6vh+3jynAuBIo0BbZ+K OWH8R4yHmcUii0+XjUEB41qCQ9H2bSig8B2sV+F9q4LSQErhnwpMJAyjAxtSuhmDOiyF C70w==; darn=ilbers.de ARC-Authentication-Results: i=3; gmr-mx.google.com; dkim=pass header.i=@siemens.com header.s=selector2 header.b=lHMD6sb1; arc=pass (i=1 spf=pass spfdomain=siemens.com dkim=pass dkdomain=siemens.com dmarc=pass fromdomain=siemens.com); spf=pass (google.com: domain of clara.kowalsky@siemens.com designates 2a01:111:f403:c200::3 as permitted sender) smtp.mailfrom=clara.kowalsky@siemens.com; dmarc=pass (p=REJECT sp=REJECT dis=NONE) header.from=siemens.com DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=googlegroups.com; s=20230601; t=1750881538; x=1751486338; darn=ilbers.de; h=list-unsubscribe:list-subscribe:list-archive:list-help:list-post :list-id:mailing-list:precedence:reply-to :x-original-authentication-results:x-original-sender:mime-version :in-reply-to:from:content-language:references:to:subject:user-agent :date:message-id:from:to:cc:subject:date:message-id:reply-to; bh=FQGvm5M48sqV5IeHGkSgLgWz0fpkrSFtL/2mv7xVQfM=; b=xjILd14UUxZ/C3S42T5pehRkjzuw1d/8c/bqq7tNcrSaGr5zpauxXwt9/VRXjDwUzp wyquwq0oS1UKKTfOtFk1ljeN7vGRX/Tu71toIDDMTE1jQRtjzhDJVRFDyiqZOiwkwwVi zM6e/ziy6GRRYxXKC32/pH/kOh+/eOvSSGJmsgSftz+3ZT/LzIG0aZj2unQyTR1MsTUk ++Y1eThq0oAlk1nZRgRJpbTa92D0ciFsQTSsWhpGyFXikG+69N0kRKAohe0B+aDcdoPB VBgWDAHWva8qiQMh4z6lvV1YmahXL63FEvyI59yiI6qws8zspGYGQM3pPGBuE0wyVO7g pJWg== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20230601; t=1750881538; x=1751486338; h=list-unsubscribe:list-subscribe:list-archive:list-help:list-post :x-spam-checked-in-group:list-id:mailing-list:precedence:reply-to :x-original-authentication-results:x-original-sender:mime-version :in-reply-to:from:content-language:references:to:subject:user-agent :date:message-id:x-beenthere:x-gm-message-state:from:to:cc:subject :date:message-id:reply-to; bh=FQGvm5M48sqV5IeHGkSgLgWz0fpkrSFtL/2mv7xVQfM=; b=SDlqvLTV4h+S/2B9pxhu15m5M037+TO0HF2v6xP3fYGPjzGqHoilmorfUk2ch26BNu s2ECm7K2JF2u9q93qI2WH7tinFQemWvbrwSCsk3sKs+RKheRwu6cXXINdO21H4Vw8xEK YAUwOJLA7lsKFclJUo7Oy7I9xFkYBuBxNfU6OwYchWB3oU2Oev5Rf1E46NKDy8VJVPKx IEsMAP4/uVoFUQKLt2KCiPo84RlRRkwvbvYmebPZ9r1SIDvhUlYtbwwRZqu7XsG6EEPU hdKV6sFQXfFsHcxFKoLC9GCOEw+PiUtSd3PXawUa1lPJhtGzN3Ow2CiCyUzMIdpU4ruz 7jCg== X-Forwarded-Encrypted: i=3; AJvYcCV3T/cLtW2Zz7XHOdGDv+/rufUBjXZ7JpJIafu4kgthcKAUWxHs0miA/fX+etQOAyeu++Hl@ilbers.de X-Gm-Message-State: AOJu0YwtCX/QAHmqNf99Ph/c3LEekLFPmHNBftg6m6Byw7lXSXXvxSTm fIt0oRJzChj8XY2Mt1QvF8y8hwpYkjiIshIBMWhHaG/1UtfJtRVOrdZw X-Google-Smtp-Source: AGHT+IFj3ahQf3V97PylpigRCgCR9+WZF0qy9WU1I+QV2hvgFTbbRWKkA6gQZnRFwCYfn9iOmVG/IQ== X-Received: by 2002:a05:6820:2905:b0:611:a1e4:59bf with SMTP id 006d021491bc7-611a1e45fe9mr2613156eaf.3.1750881537868; Wed, 25 Jun 2025 12:58:57 -0700 (PDT) X-BeenThere: isar-users@googlegroups.com; h=AZMbMZecxdMRBR0gkSoeVpH/upiJsthUDf0SOSxyTjwK5jwEBA== Received: by 2002:a05:6820:6704:b0:611:7896:558b with SMTP id 006d021491bc7-611ab00393fls272493eaf.0.-pod-prod-08-us; Wed, 25 Jun 2025 12:58:57 -0700 (PDT) X-Forwarded-Encrypted: i=3; AJvYcCWtPgGEXfm0QvQvLg+brdkfQVFXoNxzHLCInUKu+sVX/eWr0gTsbLPLdtgLDWD3si53ndIWNdEvbIVJ@googlegroups.com X-Received: by 2002:a05:6808:219a:b0:409:10a6:41a2 with SMTP id 5614622812f47-40b0580f8a5mr3745769b6e.39.1750881537069; Wed, 25 Jun 2025 12:58:57 -0700 (PDT) ARC-Seal: i=2; a=rsa-sha256; t=1750881537; cv=pass; d=google.com; s=arc-20240605; b=DbIREKHxXr79Si/9+v0mNa7iM6Uz+4mLhTt8hl0JDEwKJHA/0Nr+kFyNgFksM+WO5j Rx2vCkTKJakUHr7t3TKre2KTC64Go0uvXm81OBFEXdApWJP1RNZ7L6AhWzICG2ap3q1q o8mfAqCjITNjTLGuL8ChvdTdj1k/2PMYVkKevXECJ2ex+6o0HAoCrNMn3UCU57LpCkRD x0bu5KmIe8VDYUi0+xro4tWW1ECDFMf2aa8/4M6KCP2ODsJh5QU2lEfsIdOd1tErhUYl O4XJvMIBYPp/lj6mq2KWrZUGLmCleKm7OhXP5oJvNOqs00R9DJtWUdTCJ8jFqVOROZzv tgRQ== ARC-Message-Signature: i=2; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20240605; h=mime-version:content-transfer-encoding:in-reply-to:from :content-language:references:to:subject:user-agent:date:message-id :dkim-signature; bh=9TkdV8keoiuJcgJ9uIAjuCXsvARIa7Lftp+0qkN3HsQ=; fh=O+ZMFUiiuyZKsfz7Fw8hsdknZlxcSFSsLsCydBEGD0o=; b=LxxKQjfEOutF+yxviWSHD9LqojEVmuB1Q5DJvDCsKkpGtf1t4HvbXy1ZY1EUpTdA7G eQQq/MPTO7i+oarfAk1e9Ank8tRWjrBiyk1TShS3R275D+b4TsG5qkWdv6iL0ydROj+c E1HpJ+SJjtXOItbg/1OpWSVxh370xGNg27U0uGc4fxpTUXS6eaDbSJzXhFEXTf9cBmJj 1AEh7wAa/lI5xtivmVajitEnXWHnGCVc4EqJ9xiDwgXPD7D1JdnYgj6L1VC5UnrkLAf0 SthsVICyTZWafpcbZkZlg5MRjwzxXU6i1xPtuXquvzBhTI68ui18MeJujiybrmcDhiKf OSKg==; dara=google.com ARC-Authentication-Results: i=2; gmr-mx.google.com; dkim=pass header.i=@siemens.com header.s=selector2 header.b=lHMD6sb1; arc=pass (i=1 spf=pass spfdomain=siemens.com dkim=pass dkdomain=siemens.com dmarc=pass fromdomain=siemens.com); spf=pass (google.com: domain of clara.kowalsky@siemens.com designates 2a01:111:f403:c200::3 as permitted sender) smtp.mailfrom=clara.kowalsky@siemens.com; dmarc=pass (p=REJECT sp=REJECT dis=NONE) header.from=siemens.com Received: from DU2PR03CU002.outbound.protection.outlook.com (mail-northeuropeazlp170110003.outbound.protection.outlook.com. [2a01:111:f403:c200::3]) by gmr-mx.google.com with ESMTPS id 5614622812f47-40ac6b57d0dsi655552b6e.0.2025.06.25.12.58.56 for (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Wed, 25 Jun 2025 12:58:57 -0700 (PDT) Received-SPF: pass (google.com: domain of clara.kowalsky@siemens.com designates 2a01:111:f403:c200::3 as permitted sender) client-ip=2a01:111:f403:c200::3; ARC-Seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none; b=QmpIIwpjDIaDsLCtbxV+MOyy/jC5hdsW+8Km/8Mf5s0eBX6ys6ikK3GE/XiIVr7h/RouoH8dEHyknJvFMX5huiY5x23tUJk/IBNiq8QvjXkjZdButiNVDWcB+EAa3wgF0DBiCG64B4O1yCzYJhq8eo+UAQyv/Cepld2CSIpL+qqThTmtJppUEcA9+sGWqEtjd7xs5oaSucPpMfsUqs9MGD76EVCdtdu+9HNRkyTrlvuAzQdNK6BD/pSPQn+L2Bj13c6XxttTQx7NGh93Kgp13m3WJX8RD2hOpwaHVtSa+cZAAZVf8x/4ZZp1dneB3M4fkZoTFy93fypFbQ+bswoQ6w== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector10001; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1; bh=9TkdV8keoiuJcgJ9uIAjuCXsvARIa7Lftp+0qkN3HsQ=; b=d8vHFBtHtwADyPxSf1iSu2Wh6g6Ihl6fI+xKJ8zWm4dk0FNjVmwAyg4xysNyzQ/13rHflqxdM9bvZn72jQgf+xqrIjWBd9Y7iIm6fn1F6lrD9qGvonsD/VDkyTdtUcwzg2g9807ss8CmHthRd16RtEXJxi+VYNyOC2+WS8DizOJiSu5YaE8VPtgP/8+Osj2+tkgIM62JCslQt801jTHm2rd43Q3SwChKRlWg9UncPGDkGq7iSSW+ucJh8M1Tp4DaGRUdudMrBhm84dvupmH/amtLLZZmMejEoSutYUDIQKaWLNaeZYrOJ3QGmuHuTMDlxNkJGwy4OE+Js+IEkxFncA== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=siemens.com; dmarc=pass action=none header.from=siemens.com; dkim=pass header.d=siemens.com; arc=none Received: from AS5PR10MB8173.EURPRD10.PROD.OUTLOOK.COM (2603:10a6:20b:672::17) by GV1PR10MB8028.EURPRD10.PROD.OUTLOOK.COM (2603:10a6:150:81::19) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.8857.28; Wed, 25 Jun 2025 19:58:52 +0000 Received: from AS5PR10MB8173.EURPRD10.PROD.OUTLOOK.COM ([fe80::184c:3bea:5551:1c43]) by AS5PR10MB8173.EURPRD10.PROD.OUTLOOK.COM ([fe80::184c:3bea:5551:1c43%4]) with mapi id 15.20.8857.026; Wed, 25 Jun 2025 19:58:52 +0000 Message-ID: Date: Wed, 25 Jun 2025 21:58:50 +0200 User-Agent: Mozilla Thunderbird Subject: Re: [PATCH 2/2] container_fetcher: Verify that tag and digest match To: Jan Kiszka , isar-users@googlegroups.com References: <20250625135442.1420977-1-clara.kowalsky@siemens.com> <20250625135442.1420977-2-clara.kowalsky@siemens.com> <6871c387-5857-4cd7-ab93-fbd27d740cc2@siemens.com> Content-Language: en-US From: "'Clara Kowalsky' via isar-users" In-Reply-To: <6871c387-5857-4cd7-ab93-fbd27d740cc2@siemens.com> Content-Type: text/plain; charset="UTF-8"; format=flowed X-ClientProxiedBy: FRYP281CA0009.DEUP281.PROD.OUTLOOK.COM (2603:10a6:d10::19) To AS5PR10MB8173.EURPRD10.PROD.OUTLOOK.COM (2603:10a6:20b:672::17) MIME-Version: 1.0 X-MS-PublicTrafficType: Email X-MS-TrafficTypeDiagnostic: AS5PR10MB8173:EE_|GV1PR10MB8028:EE_ X-MS-Office365-Filtering-Correlation-Id: dabaec85-c528-4e32-1c22-08ddb422b597 X-MS-Exchange-AtpMessageProperties: SA X-MS-Exchange-SenderADCheck: 1 X-MS-Exchange-AntiSpam-Relay: 0 X-Microsoft-Antispam: BCL:0;ARA:13230040|376014|366016|1800799024; X-Microsoft-Antispam-Message-Info: =?utf-8?B?MXBQL2JyWG9NM0dNb2dzYlMzR2UzOU5OTGFXT3VCNEowR2MzV3VremdSb1l3?= =?utf-8?B?RlQ2Z01JZ0hrMnJqOHh0ZWpxU1Z2WmFtTFpaUUViV1gyZXZqVkwxbFRsakR5?= =?utf-8?B?OXZkZjZuRGRNZng2T3dhenl4eEp1Z3JOOUxvNTVRRlFUWU4yNC8zdGIwY0t6?= =?utf-8?B?cXdTTGdZOTNYSkJhVjI5VFFDcEhmcHVzWURRTzlIUzkxR2hNWElQUGRVc2dC?= =?utf-8?B?R3JkdjAvdDBTQUcwVnRUQ1VpK3pGNXJHY2RlMVRreGpBeHA2SmlidjFjNEZD?= =?utf-8?B?V3FrZE9NVUE0L0R0Wm9oRzZ0OEdvWitoSi9KMWpQUEFTMlJ4M25lTUtRZzB5?= =?utf-8?B?YlJzTGc5dHJhTE55ekJaUE9qUE0yRE02TkIwZmF3U3JRL0ZWZGlMd0I3bGU3?= =?utf-8?B?TWg5bW5Eblc2TjRTUDc3cTE4S2ZxNXV5MnBOby8xd3V1REhtQTFHS2RGMU5s?= =?utf-8?B?UlowUUlRMjZNcFVYUnRGMXhhekEreFlkM0h0NURuQkUvV05LemlGRXBtTVJv?= =?utf-8?B?V3JlL2c2VnJSZmkwQjdNbFV2VSt1VGV6MDFIdkMwcHAwd0lveDJmUVk4MTl0?= =?utf-8?B?NmszeW96SDNReUVLZjBZTnRaZndrUnpLQzFXaXFMeXVQbEdCcUUyQWw2T25Y?= =?utf-8?B?RDduL1lHUmliWlg1Zk84dHcvb0JpVkhNTitKQktaNCtseWhLR3I5aURramhD?= =?utf-8?B?RFhsV1BrZVJXNzhWREFnS2RhbGZ2bVROWktONWlBOFBMdy91b3ovMFhnTlh0?= =?utf-8?B?THNtZjVzUldoeGsyRElZQ1dzMFRMWXRMd2hVRVZzZFZyTjlWWE1NUXFLczcv?= =?utf-8?B?bjlLV0d2M0NCQytWMUx5TmxVUEdRUXZxY3lKb21XU0JuWkhpZWF6VXdWUU91?= =?utf-8?B?VnZrRzBEdUFwZ0Zldk13c1hqWHlGN1V2bmg5UXBpMjhuMW1URzhUeVIvY1p5?= =?utf-8?B?RHh0d0R2cTQ2T1JFbW8wUnp0Z3hUVFE0VFhLd0JLbU4zRnNYem1mYXQxa1J0?= =?utf-8?B?L1lzaHJCWXozVmV3ODRtRGxTUyt0MFlsbjNqSzRVcXNiVFFxUkRrODBXN0FK?= =?utf-8?B?Q0RQeEJQMWZNb2tCK09LMlA1Nld0cllpSGRiVzErVzRXSjh1S1NuNEtyNXlF?= =?utf-8?B?VUZFUzRxQVZyMHNpUUV4b0pEbGRYb05zdGljc0NkSTJ1MFpaWlJkallaMWFM?= =?utf-8?B?SWxhNkRWUHo5alBNWmRNNTVkbUNkYUtRZTFoZmhqdDA0cHdUa1NjVzVYUHdM?= =?utf-8?B?NUJWbzFiVk9VdXI4aGtWTDBtVm00aUI1Z3cxbVRrZVNBby8xVkdXcHd4RXBZ?= =?utf-8?B?TllSRGdNbkNGRDNIMFJSNzVQZHJNZGthUXVBa21ZM0dFemwyTDVtZCtIQjhF?= =?utf-8?B?UlJrN0tDY1MxMEs3U2RaYngrM0MvUEc4c3liMVArOE5uenJhY1YzZnRndjN3?= =?utf-8?B?NXpOZGd0UHlJWXRjd2hGVnR6MjlENWpWb05RRG82d2dQUmtaYWZ3U2RoN2Zq?= =?utf-8?B?ZXFqUGlaTHdwczd3R2dmOWZyRUJtNDQ1OGdnNDkyQ0hMMjJSMlo4bWxVTkpY?= =?utf-8?B?UTk4TTNMbnlXb0d2NDZDMVNaNDI1TngzbFVrdE9LY2dDa3VDcHcyaTVXSWxD?= =?utf-8?B?Rnd0UU9KYkVoNlRoQUFRbWlLS05LRndzRnFyQ2toM2dQeWwwNWpyMnF2U29a?= =?utf-8?B?T2daODJmT3VmOTAvVW9veTM5TVhhVGdhSzBFU2g5YXdPajVxa00wZ1pWblRw?= =?utf-8?B?K3NhcEx4NTM3S0IwT1Z5dUxFeGtqNlFUMkN0dXAxVVVHY3FLd1RtUFlSNnpP?= =?utf-8?Q?MlvB3rJb1xToqoN4fZrdEWal6yMuimBTXZxaA=3D?= X-Forefront-Antispam-Report: CIP:255.255.255.255;CTRY:;LANG:en;SCL:1;SRV:;IPV:NLI;SFV:NSPM;H:AS5PR10MB8173.EURPRD10.PROD.OUTLOOK.COM;PTR:;CAT:NONE;SFS:(13230040)(376014)(366016)(1800799024);DIR:OUT;SFP:1101; X-MS-Exchange-AntiSpam-MessageData-ChunkCount: 1 X-MS-Exchange-AntiSpam-MessageData-0: =?utf-8?B?MlBBTnVhSmZYQWhDOEQ4ZVRuUDVDNGJRQjM2ZVFyRWRjeFo2MFNJRWZkQnRE?= =?utf-8?B?N3o2bVJCeHAwUG51MU1zby92c1RJWGhYaUd0ZzRSSHFJVnVUSWU1Ly9NaHFN?= =?utf-8?B?ZGNYVDhFRk9NZVNKUC9IMm9WZzJRRUt0cFU3UG5EVlNFMDdsZ25KdUEzWElw?= =?utf-8?B?TzNvdkF5Tmc5aU02UHNOWlB4czNWKytJczEyTU5EaXFZU3dMM2x3WGZaTWhM?= =?utf-8?B?K2N0eDQvS3Qrd2xIRlRxWWJmK0JnaEowY0hycWQ4YUZSVWxMZk94RGhRT1ln?= =?utf-8?B?bDFCeEtleTJ2cUZRcnZYdTdFdHBtZVJHMWxDYzhqQ0hKL2pwbWZ1SEtibnND?= =?utf-8?B?c0NUMVZOMSsra1BzbWlTOVQrM043TEMrNDhsOCtqbFRieGdRRmEwaVFBUWFa?= =?utf-8?B?TWR1OVRCTjNlZXgybWtZME5hU0FocDNVSlZWUVlvNzBGQTdYR1g2Vk5KQjNM?= =?utf-8?B?MHVreFZCbWVOM2JQUWZWaHoycXVhRGVzSllzRWRXYzhpTll5aU1mYzREREJX?= =?utf-8?B?RllaRktJRGJKTkZJYjNyaXZpSWNpYVp2dHRrdWNYZHJ4WS8zeTc1dTN4c0ZD?= =?utf-8?B?OXlDNklMUE9kWDdkdHZKWU5JTFlBVGRGWWRhUkZ1SW5LZDhLSGptekZNQjRk?= =?utf-8?B?Z3ZaMEt1Y0NQVk5ueVZKQjRRaXVVWURFVFhMWXU0ckxoTHpZQWFVU3Z4d3Zl?= =?utf-8?B?Z2tFbDJVbUtpRnZYbktEUTRIMzJPTmNjTzYzZkt0K0NYQlFpMWJhRldrOHpI?= =?utf-8?B?ODhTbzZCV1Y5VW5qdHRPOEsxVitVaUlNd2xVZ28ybGlWbzJPVjdNdWlSSi9w?= =?utf-8?B?UDg4OG1ZK1kvYTExNytRaHgrZVQ1dkw0dG03TnBlUit5cGNuclFDYXVRcWNq?= =?utf-8?B?ZjRKSWhrR1EyTDBlai9TQzl4MGozTWFHOFJqT2lSS1creklMQkJuRHBnUUxs?= =?utf-8?B?eUttV1lWdXp6UzVKd0VmVkJ2SnN2WFRLUkZGWVl6UnJXcjJaOEJvK3JEeTMw?= =?utf-8?B?cFRzd2xKbjh6N29qalN4VjNXUVJwVDFzTHRVdXZwVWF1RUtGMlBNRWQ1YXFP?= =?utf-8?B?MkFSdVFQZEJpeHo2V1Q0QTJkOGMrVnhJbDFrWkRBSzFMN05PU3Q5MFEvZHo2?= =?utf-8?B?ZmVCM1dXMXZQN2pzdW8wS1lkeDlRUlgwL2hsQ2oybW16bG02ZTk4SzFhUWo3?= =?utf-8?B?dUFMT2w3N1VTYU9mY0p3enZIcFpCMVdhZFJ2MlVIMzFCakNDV0wxS0FRemJK?= =?utf-8?B?OUFKWUVZOVE4OXV0S2FkTkJhUVhONUxHL1pnbUFZWG9QWU1oM01iK2l4NTBw?= =?utf-8?B?R2lzUWtrWGJ0N3JMeWp1WmFyQVIxdTJ2Qi94N0t1bWNwc0FHNDhkWnA5YVhU?= =?utf-8?B?MVpRUmM0L2QvSm5hZ2MvV0ZON0MwcmRSOW9rR0pRaHVsQW9JcWZ2bGF0enE1?= =?utf-8?B?aGpaRS9JbC9sTmVjRnd6NlNqUUUrOFFKajJtTGhCM29rVERENTkwVU9NczRF?= =?utf-8?B?Ym9teWNNeWtEUWRmMGNRd2xuNjljdkQ3NHpkVUgzMWRlaWxBSzJES0VRbnc5?= =?utf-8?B?WTcwZWk0clZzYUZtK2ZqN0xmZXE0ano1NUVZbzV2ZC93amg1RVp0WEVaNmRr?= =?utf-8?B?MkYwS0dhdi9pejhUQktwN1h4SnpWdzhtb3N3ck1WczJYQVRiTGNSamVTaE85?= =?utf-8?B?ME1YRW9rVTkycDVMOGJnWmdXUmdIWnI3d2wzREY5UHd3L25yaml5VnFEaXBl?= =?utf-8?B?cHgxUzJmdWJNeUE2RGZjQk53Nkp3TmFqSmdXaXZUODhYOUpsNnprc2t5Zmpz?= =?utf-8?B?Vlc2bGRhVU9EQ2ZSR0VWalBMUXRxYmhESHR2ZUxjWHdsVjdWd05rYWJEaWUz?= =?utf-8?B?elFFRGhRYUJCYTZFK3hxaXYvVVFNRVNhcVd3dVN2dVFOd3RWeHVFelZMc2h5?= =?utf-8?B?MkxJcC96dkFLdFFXQ3doYTRYU3kyY0ljUVp4c3hZTnpkVXhCc1pSOHk2R09x?= =?utf-8?B?RHluVFAreURWWHA1dEQxRmVLdHFDb1Y2NmwreWgwVGZPVHQ2dTFNZStnUnNC?= =?utf-8?B?Z1ExSVFiTzdwcTdETlEwS0hkclI3c0hYamdtSXRSa2F3dk5WcjV3c1FvUEQ5?= =?utf-8?B?OUFxTkR2RnBTVWVsWjByc1poOCtuNlY4bUVWckNQSVFjTFJHTzgzV3h6Zko2?= =?utf-8?B?dmc9PQ==?= X-OriginatorOrg: siemens.com X-MS-Exchange-CrossTenant-Network-Message-Id: dabaec85-c528-4e32-1c22-08ddb422b597 X-MS-Exchange-CrossTenant-AuthSource: AS5PR10MB8173.EURPRD10.PROD.OUTLOOK.COM X-MS-Exchange-CrossTenant-AuthAs: Internal X-MS-Exchange-CrossTenant-OriginalArrivalTime: 25 Jun 2025 19:58:52.6118 (UTC) X-MS-Exchange-CrossTenant-FromEntityHeader: Hosted X-MS-Exchange-CrossTenant-Id: 38ae3bcd-9579-4fd4-adda-b42e1495d55a X-MS-Exchange-CrossTenant-MailboxType: HOSTED X-MS-Exchange-CrossTenant-UserPrincipalName: ub0ZPh04Yl0x2XlBZbmLaV1WoVyxym2Ps8IsAHTTCJlm5fqOhc3KgAjmPOs9Qx7fe113dGMIPs8ejFvoYaR8n3kjcpUmEp7WTHhQ/p79MXM= X-MS-Exchange-Transport-CrossTenantHeadersStamped: GV1PR10MB8028 X-Original-Sender: clara.kowalsky@siemens.com X-Original-Authentication-Results: gmr-mx.google.com; dkim=pass header.i=@siemens.com header.s=selector2 header.b=lHMD6sb1; arc=pass (i=1 spf=pass spfdomain=siemens.com dkim=pass dkdomain=siemens.com dmarc=pass fromdomain=siemens.com); spf=pass (google.com: domain of clara.kowalsky@siemens.com designates 2a01:111:f403:c200::3 as permitted sender) smtp.mailfrom=clara.kowalsky@siemens.com; dmarc=pass (p=REJECT sp=REJECT dis=NONE) header.from=siemens.com X-Original-From: Clara Kowalsky Reply-To: Clara Kowalsky Precedence: list Mailing-list: list isar-users@googlegroups.com; contact isar-users+owners@googlegroups.com List-ID: X-Spam-Checked-In-Group: isar-users@googlegroups.com X-Google-Group-Id: 914930254986 List-Post: , List-Help: , List-Archive: , List-Unsubscribe: , X-Spam-Status: No, score=-4.9 required=5.0 tests=DKIMWL_WL_MED,DKIM_SIGNED, DKIM_VALID,DKIM_VALID_AU,DKIM_VALID_EF,MAILING_LIST_MULTI, RCVD_IN_MSPIKE_H3,RCVD_IN_MSPIKE_WL,RCVD_IN_RP_CERTIFIED, RCVD_IN_RP_RNBL,RCVD_IN_RP_SAFE,T_SPF_TEMPERROR autolearn=unavailable autolearn_force=no version=3.4.2 X-Spam-Checker-Version: SpamAssassin 3.4.2 (2018-09-13) on shymkent.ilbers.de X-TUID: vEIyj7MOVCJa On 25.06.25 17:47, Jan Kiszka wrote: > On 25.06.25 15:54, Clara Kowalsky wrote: >> If a tag and digest are specified for a container image in the SRC_URI, >> the tag is ignored until now and the container image with the matching >> digest is fetched. >> With this change, the container image is fetched based on the specified >> tag and it is checked whether the digest matches. If not, an error is >> thrown. >> >> Signed-off-by: Clara Kowalsky >> --- >> meta/lib/container_fetcher.py | 17 +++++++++++++++++ >> 1 file changed, 17 insertions(+) >> >> diff --git a/meta/lib/container_fetcher.py b/meta/lib/container_fetcher.py >> index 16467abb..75366988 100644 >> --- a/meta/lib/container_fetcher.py >> +++ b/meta/lib/container_fetcher.py >> @@ -11,6 +11,7 @@ from bb.fetch2 import FetchMethod >> from bb.fetch2 import logger >> from bb.fetch2 import MissingChecksumEvent >> from bb.fetch2 import NoChecksumError >> +from bb.fetch2 import ChecksumError >> from bb.fetch2 import runfetchcmd >> >> class Container(FetchMethod): >> @@ -47,6 +48,22 @@ class Container(FetchMethod): >> def download(self, ud, d): >> tarball = ud.localfile[:-len('.zst')] >> with tempfile.TemporaryDirectory(dir=d.getVar('DL_DIR')) as tmpdir: >> + # If both tag and digest are provided, verify they match >> + if ud.digest and ud.tag != "latest": > > Instead of "latest" (which could have been specified explicitly): > > and not "tag" in ud.parm Ok, I'll change that in v2. > >> + inspect_output = runfetchcmd(f"skopeo inspect docker://{ud.container_name}:{ud.tag}", d, True) >> + actual_digest = json.loads(inspect_output)["Digest"] >> + if actual_digest != ud.digest: >> + messages = [] >> + messages.append(f"Checksum mismatch for {ud.container_name}:{ud.tag}") >> + messages.append("If this change is expected (e.g. you have upgraded " \ >> + "to a new version without updating the checksums) " \ >> + "then you can use these lines within the recipe:") >> + messages.append(f'SRC_URI = "docker://{ud.container_name};digest={actual_digest};tag={ud.tag}"') >> + messages.append("Otherwise you should retry the download and/or " \ >> + "check with upstream to determine if the container image has " \ >> + "become corrupted or otherwise unexpectedly modified.") > > Rather long. Is bitbake similarly verbose when detecting a checksum > mismatch? > Yes, this is actually exactly the same message bitbake is printing in case of checksum mismatch: https://github.com/ilbers/isar/blob/master/bitbake/lib/bb/fetch2/__init__.py#L633 BR, Clara >> + raise ChecksumError("\n".join(messages), ud.url, actual_digest) >> + >> # Take a two steps for downloading into a docker archive because >> # not all source may have the required Docker schema 2 manifest. >> runfetchcmd("skopeo copy --preserve-digests " + \ > > jan > -- You received this message because you are subscribed to the Google Groups "isar-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to isar-users+unsubscribe@googlegroups.com. To view this discussion visit https://groups.google.com/d/msgid/isar-users/ec41400d-46ea-4e6f-8570-7b91330efd77%40siemens.com.