From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from shymkent.ilbers.de ([unix socket]) by shymkent (Cyrus 2.5.10-Debian-2.5.10-3+deb9u2) with LMTPA; Wed, 18 Feb 2026 17:50:50 +0100 X-Sieve: CMU Sieve 2.4 Received: from mail-pf1-f183.google.com (mail-pf1-f183.google.com [209.85.210.183]) by shymkent.ilbers.de (8.15.2/8.15.2/Debian-8+deb9u1) with ESMTPS id 61IGomw7025934 (version=TLSv1.2 cipher=ECDHE-RSA-AES256-GCM-SHA384 bits=256 verify=NOT) for ; Wed, 18 Feb 2026 17:50:49 +0100 Received: by mail-pf1-f183.google.com with SMTP id d2e1a72fcca58-824f75913c4sf1567301b3a.1 for ; Wed, 18 Feb 2026 08:50:49 -0800 (PST) ARC-Seal: i=3; a=rsa-sha256; t=1771433442; cv=pass; d=google.com; s=arc-20240605; b=E61L2qrxhVPZgGBmW6NfFgBQGEGfMG0fFjIZEUmfhbl5Au1Nlw0W5KVNJiVFSOmj93 siUtYQHDBD8oxKhLTvCbDmNHDTjdicVuHlhjh5IoqIkw5pQsqryJljbzaaGTj7qyVSHs yClq/WtLEsiN9e59lfL8OuSFSEBtH/n9nxvYP9uDSRW1cM0H9oSiU28VTcfZWAxW5Z1v BqqD1vhc0wug+D8JRXShG9MBKYgByahnm+tgvn69yXKr/2Ly0gEll3dZo8Q6iWGqT5Y+ oYmOM0adyom1yIJQBfOu/DhHWpc1AL6Fi/Hqzm1o90S7ThFiTIsl2Nbdcnk5LiqoZqu5 SZkA== ARC-Message-Signature: i=3; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20240605; h=list-unsubscribe:list-subscribe:list-archive:list-help:list-post :list-id:mailing-list:precedence:reply-to:mime-version:in-reply-to :autocrypt:content-language:from:references:cc:to:subject:user-agent :date:message-id:dkim-signature; bh=SOKrZziwZpuaQijIGHjPM3HF3byMIH++h3Aa18f29qU=; fh=EAs/Q5IAM5LvMo52PpjFMEsNavKs+fE/11l22JGsYuI=; b=AmOZiprCMKIEmmojuI++LBkmaVpaZw73+tbNDe4nxP11+TWXOGXoVXZuTwPXfhYp2+ OTX9fdYwGdQZKQgwt67zD+odtm74PDKZCasKOO+WqvZnup62T1x86jFjjPnhl1kkwlox dAzsWhmUboiekA8iEUGbyhf7Fj2BGLfOddjxCE92Dcd2czyTwLkqiIWpdgUzWH0XJpkw af4YnzIdnXMh7NCB3DdhoVGnD4ufyPEIbs2lvaubZniM6nSAtFjWDOc+Cn+R8mGomF1L 3eQwBYHtPIXU1cbrDodKGnSEIJ9YXUh0YCqw/ngAw3Na3P7YRt51NaXoaSL2PU2xsAeX UnRw==; darn=ilbers.de ARC-Authentication-Results: i=3; gmr-mx.google.com; dkim=pass header.i=@siemens.com header.s=selector2 header.b=fC2gB+I8; arc=pass (i=1 spf=pass spfdomain=siemens.com dkim=pass dkdomain=siemens.com dmarc=pass fromdomain=siemens.com); spf=pass (google.com: domain of jan.kiszka@siemens.com designates 2a01:111:f403:c207::3 as permitted sender) smtp.mailfrom=jan.kiszka@siemens.com; dmarc=pass (p=REJECT sp=REJECT dis=NONE) header.from=siemens.com DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=googlegroups.com; s=20230601; t=1771433442; x=1772038242; darn=ilbers.de; h=list-unsubscribe:list-subscribe:list-archive:list-help:list-post :list-id:mailing-list:precedence:reply-to :x-original-authentication-results:x-original-sender:mime-version :in-reply-to:autocrypt:content-language:from:references:cc:to :subject:user-agent:date:message-id:from:to:cc:subject:date :message-id:reply-to; bh=SOKrZziwZpuaQijIGHjPM3HF3byMIH++h3Aa18f29qU=; b=KhJGaxMQP6ODOLwfbftj2CLJxEQAWkukbhzlT+VFyrB2o23G6bk9YGm/iCk0Updcmk 5UOJVJbVatf5Ca4ZbylT6kVj6GnCR8+e0RnGu4AJCAxrwUvqtKtUgvQ9EngfzCWTyeHo q/b+ea1Pf1gjf96LQ8/2jJPrpNUvf4wkJPm9idhjcdTYMDxoXGAqD2iDjtUramSZok8H Xy5E2ALNdDE6APUcWk+MLhe+adEmHNSw+8ea0ncgIuAfkkx7vSyvyRtWtO477t60Dulk yny87hP+pg4F3jLjNiRe7ItWIOCcSM5emBFMWzPhcYxsMPUz3vAtzYtdP45myr2bJupl yRGw== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20230601; t=1771433442; x=1772038242; h=list-unsubscribe:list-subscribe:list-archive:list-help:list-post :x-spam-checked-in-group:list-id:mailing-list:precedence:reply-to :x-original-authentication-results:x-original-sender:mime-version :in-reply-to:autocrypt:content-language:from:references:cc:to :subject:user-agent:date:message-id:x-beenthere:x-gm-message-state :from:to:cc:subject:date:message-id:reply-to; bh=SOKrZziwZpuaQijIGHjPM3HF3byMIH++h3Aa18f29qU=; b=e0QplN6xFRgC4Ok55gMRquHafLMZq5ECjMdbgLaj7Hz1TfbEoZJ8KHDc7xWhKjjgYM TMjg5+vazXAiyPwSKmAP48LBOOzVu2+Z71XOHEveMgmS/Y8OkM768bwWprtCC7bNhKe4 lomQGIVEqJsYBOUVgHFeFwTh6JfjSE5R8H/4np+AQayGyIF+gJRoWhuZVhPq/rTMypVL 93d+u99oD3inkQL3w7vp4HuW0CM8qUhgDTGwyY9C1XAGNG5GEy16xTZLRYYZeiNMff6u W4hTE9SP+mQfBJZaQmLXSwg0FfMTh3scMJ7sG2u6juw9LWjBgQRMfgyeS7PBUyjUSJ4t 1zAw== X-Forwarded-Encrypted: i=3; AJvYcCWbTcuIOkz8rZwdDIBmLeypOPKaz1wJbEp6+FgojPZI2UrIPh//sH4FCXpz9zt2O7K9oCUg@ilbers.de X-Gm-Message-State: AOJu0YxfxC91r22on0g4Cnf8zCxiD5b+DQFV8HUHUct2u78SIZ8BxHK0 Ki9L5U4IEpz7NKDd7TElNiUYtwK1SLd3zDmgtwyHrHr+/ecJtcxNr9dM X-Received: by 2002:a05:6a00:3d86:b0:81f:4769:6fde with SMTP id d2e1a72fcca58-824c947bbeamr12277636b3a.17.1771433442319; Wed, 18 Feb 2026 08:50:42 -0800 (PST) X-BeenThere: isar-users@googlegroups.com; h="AV1CL+Eq5ZH1kW7BTX6ftvYlwnENTJLlkfQw7LTWHFb+JVpjsA==" Received: by 2002:a05:6a00:284:b0:81f:42ba:2002 with SMTP id d2e1a72fcca58-824b1faa1e7ls5439352b3a.2.-pod-prod-02-us; Wed, 18 Feb 2026 08:50:41 -0800 (PST) X-Forwarded-Encrypted: i=3; AJvYcCXQlPWYUA11Zg75DMXXv4Znd20TSDpEp2bKvE7BMtT/EN7fEvGbh+vO1wgQIKhljV+9H7PCQheoo3Gd@googlegroups.com X-Received: by 2002:a05:6a00:6c93:b0:824:a8a9:e08b with SMTP id d2e1a72fcca58-824c944486cmr14593159b3a.5.1771433440812; Wed, 18 Feb 2026 08:50:40 -0800 (PST) ARC-Seal: i=2; a=rsa-sha256; t=1771433440; cv=pass; d=google.com; s=arc-20240605; b=WI8tE2WQibvIz8uiOCxgwhNQAvpr0Wt9sTR3xSiHgTEXStdcCFIDF8aGsypeefxQ/o uPnBcMG6xcrWENMz8x7DWVH0BnI/qJHMZL3A3t5nxlABV2ohxnd72qbaCrXdXq0An+Pi UwnHhfESLC5sU7zP7l88j8+bOgHoXCz7c6FvB2VDNf+7R5uZnDDoxxxh8l5hR9deT7M4 gbBPCPCeyl0wNzvjAnfnv5sRPht7F20zJFQc9/NNFXXFQxEqD3i2PJCkvbZgbovd9NzT OZo+PSVN06FL3gmNutc89phdBLV5hmCDfEhw9bOt3VUzU+w5Dfc/IMKe9ot4F9ZVADNl dXEQ== ARC-Message-Signature: i=2; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20240605; h=mime-version:content-transfer-encoding:in-reply-to:autocrypt :content-language:from:references:cc:to:subject:user-agent:date :message-id:dkim-signature; bh=xdlWRM3EBppA4plqmy/gx2U2l5hCzT2mcw14Au+UrJA=; fh=OPAseo6bwwFPu0Z/TgqZ37S26U8kSSi3ubVyFPIawCA=; b=TUMhkxAMWwC4J47W+G47jd4+fIRO/oXc73z8gdbxTRN5HT46SrFFwVSur27qSPBuIO IWX63fJzVbSsSgHWoPT7JJSlCrUKtQH69oUch1U+HmOQ/YFrkBx8f4mnepMw7tfzkV/0 FDnTqYaIS4XbVPpRab4jj9oygKZ09aUlStKy14cDezqHSNzeXLHBOqdSBkjzLq6KNamH Y+PhCBqiEcBmumGWchoiprRmITT/HrIXzcP8ljB7e/ImkGJ1QpwmXC49sRpdOu/t50yY K1nUkr717HFmCxNBkApHGUS8dRbGpge7pWKsqfoDfv7U307ZUU6TtdIkm/OApzlnRmjS 6xTQ==; dara=google.com ARC-Authentication-Results: i=2; gmr-mx.google.com; dkim=pass header.i=@siemens.com header.s=selector2 header.b=fC2gB+I8; arc=pass (i=1 spf=pass spfdomain=siemens.com dkim=pass dkdomain=siemens.com dmarc=pass fromdomain=siemens.com); spf=pass (google.com: domain of jan.kiszka@siemens.com designates 2a01:111:f403:c207::3 as permitted sender) smtp.mailfrom=jan.kiszka@siemens.com; dmarc=pass (p=REJECT sp=REJECT dis=NONE) header.from=siemens.com Received: from MRWPR03CU001.outbound.protection.outlook.com (mail-francesouthazlp170110003.outbound.protection.outlook.com. [2a01:111:f403:c207::3]) by gmr-mx.google.com with ESMTPS id d2e1a72fcca58-824c6b0b623si685318b3a.3.2026.02.18.08.50.40 for (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Wed, 18 Feb 2026 08:50:40 -0800 (PST) Received-SPF: pass (google.com: domain of jan.kiszka@siemens.com designates 2a01:111:f403:c207::3 as permitted sender) client-ip=2a01:111:f403:c207::3; ARC-Seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none; b=BkSweCHuFNGqnsBva20doAN8zOM/qIE4ZuHJQoNovhNS7nBOiCSjo/OOXN85oWTzWvsfGiLohpUmGU/RvK/zAT7EXmHU9IYfL953fXf21edyyS0ecmBALc8R/k2kn2PNrY3n2uxr94068kiKrL8QHHiZAXmSALHukkrR0/Nnf3mAvgJ0d8Hz4HuPDn65yaJeq+yKu49J9oQ5X27Ien4ouFNMq3xFC/D3chbGTBG34CTvrQxNgUs7T6j3wOwJMrn/wtjpEU4BrDbJaV69bf9oIFXt+szVRFUfLR7G2FrSpKiopWhvKfxAFjSh+7fcYv0ppp4YdAaT/KCQKD/kSsLR+w== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector10001; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1; bh=xdlWRM3EBppA4plqmy/gx2U2l5hCzT2mcw14Au+UrJA=; b=hq/gHRlgzDAcYBz6NmSOUPn+7xr8+kKiNw0KUXnAJuBHXC3C4Ozo3ezV0qpo0ch54gpdCF5zbYuPfcCaJHOzYkpLyr+KAohnzQoL1WFjEZird0pVziNEFhhEQrDCrb8fZEzkIZ8ykA0incXts3uf6CgDeHMzNIk1AC1wYcJ4lViR4snepiJKfOXLRd9FryEkp1x29ihDN5dRYrSctxAHxVI5+uPZzhpFx1V76d2MfkMcFKgvR3BAx1erzVAcipOUiho+lkWKJ1Lop4R17dSS1veHoeKDYwzhxLcjREAxWCXGpE07UXJe8z0m/FdcvDeDxmIVI4nS4B43+ESRUXiqwA== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=siemens.com; dmarc=pass action=none header.from=siemens.com; dkim=pass header.d=siemens.com; arc=none Received: from AS4PR10MB6181.EURPRD10.PROD.OUTLOOK.COM (2603:10a6:20b:588::19) by AS2PR10MB7710.EURPRD10.PROD.OUTLOOK.COM (2603:10a6:20b:64c::18) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.9632.13; Wed, 18 Feb 2026 16:50:38 +0000 Received: from AS4PR10MB6181.EURPRD10.PROD.OUTLOOK.COM ([fe80::be9f:e8ca:ee9:83e1]) by AS4PR10MB6181.EURPRD10.PROD.OUTLOOK.COM ([fe80::be9f:e8ca:ee9:83e1%6]) with mapi id 15.20.9632.010; Wed, 18 Feb 2026 16:50:38 +0000 Message-ID: Date: Wed, 18 Feb 2026 17:50:37 +0100 User-Agent: Mozilla Thunderbird Subject: Re: [RFC 11/12] add support for fully rootless builds To: Felix Moessbauer , isar-users@googlegroups.com Cc: quirin.gylstorff@siemens.com References: <20260218115827.3947145-1-felix.moessbauer@siemens.com> <20260218115827.3947145-12-felix.moessbauer@siemens.com> From: "'Jan Kiszka' via isar-users" Content-Language: en-US Autocrypt: addr=jan.kiszka@siemens.com; keydata= xsFNBGZY+hkBEACkdtFD81AUVtTVX+UEiUFs7ZQPQsdFpzVmr6R3D059f+lzr4Mlg6KKAcNZ uNUqthIkgLGWzKugodvkcCK8Wbyw+1vxcl4Lw56WezLsOTfu7oi7Z0vp1XkrLcM0tofTbClW xMA964mgUlBT2m/J/ybZd945D0wU57k/smGzDAxkpJgHBrYE/iJWcu46jkGZaLjK4xcMoBWB I6hW9Njxx3Ek0fpLO3876bszc8KjcHOulKreK+ezyJ01Hvbx85s68XWN6N2ulLGtk7E/sXlb 79hylHy5QuU9mZdsRjjRGJb0H9Buzfuz0XrcwOTMJq7e7fbN0QakjivAXsmXim+s5dlKlZjr L3ILWte4ah7cGgqc06nFb5jOhnGnZwnKJlpuod3pc/BFaFGtVHvyoRgxJ9tmDZnjzMfu8YrA +MVv6muwbHnEAeh/f8e9O+oeouqTBzgcaWTq81IyS56/UD6U5GHet9Pz1MB15nnzVcyZXIoC roIhgCUkcl+5m2Z9G56bkiUcFq0IcACzjcRPWvwA09ZbRHXAK/ao/+vPAIMnU6OTx3ejsbHn oh6VpHD3tucIt+xA4/l3LlkZMt5FZjFdkZUuAVU6kBAwElNBCYcrrLYZBRkSGPGDGYZmXAW/ VkNUVTJkRg6MGIeqZmpeoaV2xaIGHBSTDX8+b0c0hT/Bgzjv8QARAQABzSNKYW4gS2lzemth IDxqYW4ua2lzemthQHNpZW1lbnMuY29tPsLBlAQTAQoAPhYhBABMZH11cs99cr20+2mdhQqf QXvYBQJmWPvXAhsDBQkFo5qABQsJCAcCBhUKCQgLAgQWAgMBAh4BAheAAAoJEGmdhQqfQXvY zPAP/jGiVJ2VgPcRWt2P8FbByfrJJAPCsos+SZpncRi7tl9yTEpS+t57h7myEKPdB3L+kxzg K3dt1UhYp4FeIHA3jpJYaFvD7kNZJZ1cU55QXrJI3xu/xfB6VhCs+VAUlt7XhOsOmTQqCpH7 pRcZ5juxZCOxXG2fTQTQo0gfF5+PQwQYUp0NdTbVox5PTx5RK3KfPqmAJsBKdwEaIkuY9FbM 9lGg8XBNzD2R/13cCd4hRrZDtyegrtocpBAruVqOZhsMb/h7Wd0TGoJ/zJr3w3WnDM08c+RA 5LHMbiA29MXq1KxlnsYDfWB8ts3HIJ3ROBvagA20mbOm26ddeFjLdGcBTrzbHbzCReEtN++s gZneKsYiueFDTxXjUOJgp8JDdVPM+++axSMo2js8TwVefTfCYt0oWMEqlQqSqgQwIuzpRO6I ik7HAFq8fssy2cY8Imofbj77uKz0BNZC/1nGG1OI9cU2jHrqsn1i95KaS6fPu4EN6XP/Gi/O 0DxND+HEyzVqhUJkvXUhTsOzgzWAvW9BlkKRiVizKM6PLsVm/XmeapGs4ir/U8OzKI+SM3R8 VMW8eovWgXNUQ9F2vS1dHO8eRn2UqDKBZSo+qCRWLRtsqNzmU4N0zuGqZSaDCvkMwF6kIRkD ZkDjjYQtoftPGchLBTUzeUa2gfOr1T4xSQUHhPL8zsFNBGZY+hkBEADb5quW4M0eaWPIjqY6 aC/vHCmpELmS/HMa5zlA0dWlxCPEjkchN8W4PB+NMOXFEJuKLLFs6+s5/KlNok/kGKg4fITf Vcd+BQd/YRks3qFifckU+kxoXpTc2bksTtLuiPkcyFmjBph/BGms35mvOA0OaEO6fQbauiHa QnYrgUQM+YD4uFoQOLnWTPmBjccoPuiJDafzLxwj4r+JH4fA/4zzDa5OFbfVq3ieYGqiBrtj tBFv5epVvGK1zoQ+Rc+h5+dCWPwC2i3cXTUVf0woepF8mUXFcNhY+Eh8vvh1lxfD35z2CJeY txMcA44Lp06kArpWDjGJddd+OTmUkFWeYtAdaCpj/GItuJcQZkaaTeiHqPPrbvXM361rtvaw XFUzUlvoW1Sb7/SeE/BtWoxkeZOgsqouXPTjlFLapvLu5g9MPNimjkYqukASq/+e8MMKP+EE v3BAFVFGvNE3UlNRh+ppBqBUZiqkzg4q2hfeTjnivgChzXlvfTx9M6BJmuDnYAho4BA6vRh4 Dr7LYTLIwGjguIuuQcP2ENN+l32nidy154zCEp5/Rv4K8SYdVegrQ7rWiULgDz9VQWo2zAjo TgFKg3AE3ujDy4V2VndtkMRYpwwuilCDQ+Bpb5ixfbFyZ4oVGs6F3jhtWN5Uu43FhHSCqUv8 FCzl44AyGulVYU7hTQARAQABwsF8BBgBCgAmFiEEAExkfXVyz31yvbT7aZ2FCp9Be9gFAmZY +hkCGwwFCQWjmoAACgkQaZ2FCp9Be9hN3g/8CdNqlOfBZGCFNZ8Kf4tpRpeN3TGmekGRpohU bBMvHYiWW8SvmCgEuBokS+Lx3pyPJQCYZDXLCq47gsLdnhVcQ2ZKNCrr9yhrj6kHxe1Sqv1S MhxD8dBqW6CFe/mbiK9wEMDIqys7L0Xy/lgCFxZswlBW3eU2Zacdo0fDzLiJm9I0C9iPZzkJ gITjoqsiIi/5c3eCY2s2OENL9VPXiH1GPQfHZ23ouiMf+ojVZ7kycLjz+nFr5A14w/B7uHjz uL6tnA+AtGCredDne66LSK3HD0vC7569sZ/j8kGKjlUtC+zm0j03iPI6gi8YeCn9b4F8sLpB lBdlqo9BB+uqoM6F8zMfIfDsqjB0r/q7WeJaI8NKfFwNOGPuo93N+WUyBi2yYCXMOgBUifm0 T6Hbf3SHQpbA56wcKPWJqAC2iFaxNDowcJij9LtEqOlToCMtDBekDwchRvqrWN1mDXLg+av8 qH4kDzsqKX8zzTzfAWFxrkXA/kFpR3JsMzNmvextkN2kOLCCHkym0zz5Y3vxaYtbXG2wTrqJ 8WpkWIE8STUhQa9AkezgucXN7r6uSrzW8IQXxBInZwFIyBgM0f/fzyNqzThFT15QMrYUqhhW ZffO4PeNJOUYfXdH13A6rbU0y6xE7Okuoa01EqNi9yqyLA8gPgg/DhOpGtK8KokCsdYsTbk= In-Reply-To: <20260218115827.3947145-12-felix.moessbauer@siemens.com> Content-Type: text/plain; charset="UTF-8" X-ClientProxiedBy: FR4P281CA0313.DEUP281.PROD.OUTLOOK.COM (2603:10a6:d10:f6::7) To AS4PR10MB6181.EURPRD10.PROD.OUTLOOK.COM (2603:10a6:20b:588::19) MIME-Version: 1.0 X-MS-PublicTrafficType: Email X-MS-TrafficTypeDiagnostic: AS4PR10MB6181:EE_|AS2PR10MB7710:EE_ X-MS-Office365-Filtering-Correlation-Id: 7af126e7-c217-4636-7e97-08de6f0dd7ad X-MS-Exchange-AtpMessageProperties: SA X-MS-Exchange-SenderADCheck: 1 X-MS-Exchange-AntiSpam-Relay: 0 X-Microsoft-Antispam: BCL:0;ARA:13230040|1800799024|366016|376014; X-Microsoft-Antispam-Message-Info: =?utf-8?B?SG5jdlNtYmV1N3dIdTNNM1Fhdzk1K2ZJUytQTUg2bklpRkZSd3k3OW4vRGFF?= =?utf-8?B?aFRsLzdRN2N3OEhKSFB6enBqUXNERUo3QmN2ZHFRRGZHOFVTbWNhV015aDFB?= =?utf-8?B?bkUyYXY1OG1kR1hGaVdJNWFGWmVya29UR3pEUzRuODQ2UHg1cVZickNzL01F?= =?utf-8?B?RE1kbS90QkZrUVZtMGlzc3V3aE5NcGViY3FpOFhoUmp4SDFFL0JFNG80WlpG?= =?utf-8?B?cnlYTXBqK2xpU1cxL1hDUHlFeUxGZE51dGtGbVdFYjduRjV5SjBNSjNWVE5v?= =?utf-8?B?VUhGVyt5Q3BwYm5ROEp2N1pDdGtnbFNFOGdraGluTkpDdjlVOHdjMW5ia04r?= =?utf-8?B?YzB5ZHQyQmZJQVhtcklJUkFTblpYeDhWUlcwSUdDN0lHbFhBQlZNRFNNUTYz?= =?utf-8?B?c0hqN1VvN0dHTGVyK3R2YlNScUFUeUZiRXM3MmRVQ00xcWU4Uk93VTBZaUNN?= =?utf-8?B?MnhWTlczRGtzczZ0cFJ5V1lkcFRETlFrSmxrV01zNzkvbmkwZHBYZ1A5alhE?= =?utf-8?B?QjVSY0k1NGVLMjhPZUdNQ2g2NVd3TGpXTHJLN0c5UHpwcTlnV1FkaksvMW5p?= =?utf-8?B?aFRTZmNlYVlvb1AzQmdhc3VCeDJmZmlGRy9ZY1dGK1RKeG5sZzNKM05waHRE?= =?utf-8?B?NXJ5VWZlRURXV2xzSWNHRnNqanJkWmQvSUQvMmp1TXBnV0VTK1huK0dSeTd6?= =?utf-8?B?YjRQM3VINzY0RkM3Y3RPanFOMUlBT3Bsb0J3eWMrbU1YQlhLaHZqRHBKZnp4?= =?utf-8?B?YjgzL1p2NWRPRVpqQkFnbXNtaHpkeDBuT2Y4UFFpNUVyUnRYZ1A4dWt6cmJC?= =?utf-8?B?MEVDYWFxdkR2VHhmZEF2QVJibXRBYWhiSS9zQTZqL0FSbGJEYmNWbUsxZ09t?= =?utf-8?B?ZU1rM3VhUWtRUWkyeHhUV29WUm9MOTd1dlBpRnZMNGI3WjlCNUZWc0tqZ0lV?= =?utf-8?B?dDBIZktNUEZ0SEdQenJtakdmQXdoVFhxUERyVFFxQUlIbDBxblZrT2hhdXNN?= =?utf-8?B?c0Nqay92a3NoaXJNQzhVT2JLK0dMNXNicGRLaUp1YWN5cTZpYmFxUmRudlho?= =?utf-8?B?dmxCQlhudjNpNTMvTU4wNW50TTVRZERlT0ZzcXRuSXpHVHVxZlFmSVB6elBq?= =?utf-8?B?MzdWRTRFblQxbVVDRXBvSTErNW4wV3RDMnZxSnY4Z3hCS1h5TXBhOTRtRGVM?= =?utf-8?B?VE14M2F4bkVnRUQ2VVdNNkMyMHA2MzJMb1ViOGxuSzFFTHhQV3NXK21zN05N?= =?utf-8?B?WHM5SksvdW9aVkNoMUFlTDFCeWZhc2s2RkVBenFFOFlqVXJUOWxnV0NGMHI3?= =?utf-8?B?UFUvYjVuRzh0b05QenphUC9Hb2xZekd1SnA0bHUvUmZORE1RRHVJaDlhZHhq?= =?utf-8?B?M29xV3pOeVlDTFpLZXBVK3BoazZ4Mk1PaHpUcEZYVjRRWjlJbXZiUGo3UXJv?= =?utf-8?B?YURwSlViL3g5Q202TmoxTldxNDMxdlI3WUZ1dGJDN1pReVhiaHlhTkRKTGpo?= =?utf-8?B?QXdicHVlUmV2c2tsZjI4YXFuMk9EdndiOVc4UzB6VkpjSlkrUHF0SmZWZFhS?= =?utf-8?B?dFFFQnRnakhOVTdOYjFuaGp5b3VFVUFzeHhFdEp1OU1FamNMZnB5VHhLc2lL?= =?utf-8?B?eHNKUlVCeWR1aWxUZlJ4RDhzZ3kyNFZIeFU0RUVCUUhhMlo1dDRrWkU4ck1W?= =?utf-8?B?djBMd1lJT1NNUFc1THRGK3U3eXVWSnhIVkUvWm90emkrTDhkSjMvQ3QwQXgr?= =?utf-8?B?OXRGdGoyOXhaTURrSjkram1oRmY5bEZWNi9XUE1aNk9OaEFETldxY1R1c0VG?= =?utf-8?B?NjdZT0MxUGkwVUF5WjlGdmd4bU9tdlhYNndYUEswR01zc3l4ejFOMFQrQk00?= =?utf-8?B?RXNibmsvL2Nqek9MSS9xQ295WE1aeFpiMHk4aHU4dy9xLzRXSjNrNXNnK0Jh?= =?utf-8?B?R3VoQzFYNmVuOUlveDdha09EWnRDNGtIRGNrRE9YOVlyNjVPZHVQK1lHenJI?= =?utf-8?B?eWNhMFRHTkppSTduaXR0WktPdmtyTTJnQ3FPNWtJekJlNFRBVys1eFc3eUJK?= =?utf-8?B?VjBnS0dKVGprNFQySktCWlhPUDJ4WjJsMnJ6UFViWFhaVllHMmFudGFSMGFC?= =?utf-8?Q?AZXQ=3D?= X-Forefront-Antispam-Report: CIP:255.255.255.255;CTRY:;LANG:en;SCL:1;SRV:;IPV:NLI;SFV:NSPM;H:AS4PR10MB6181.EURPRD10.PROD.OUTLOOK.COM;PTR:;CAT:NONE;SFS:(13230040)(1800799024)(366016)(376014);DIR:OUT;SFP:1101; X-MS-Exchange-AntiSpam-MessageData-ChunkCount: 1 X-MS-Exchange-AntiSpam-MessageData-0: =?utf-8?B?YnBab0pOdGdaTDJ6M2N3NGNJdU5vemFHY1VMNDlkbnBDWUc4OVlCWWNnRHV1?= =?utf-8?B?RE45THA2SlIwMXBIQk5EcEQ3Vmdrc3F2V290Mkk3L2FEZmh5SWJHcFJPbERa?= =?utf-8?B?aUUxcGlUYWNscjR3VU1xVUt2N3lsNVRSU05rSklNOXhTNmszd2FCOWxGazBM?= =?utf-8?B?U2R3K3ROaHZRVFpMd2hVdHhtNDRvQTdiSEpaRW4xaFEwVXZwZStvMVptbkFH?= =?utf-8?B?WUhlbGVWQlBLY1h4cVJyOUMrRUNhTWFHSHZJcnFUVVlCd3BXcjhtcHUvRWlq?= =?utf-8?B?WTRIcVkvZFF2Nit5NXRnQytIN1dhUkNuaGFtMzZ5WG9MNzNpeUVKS3RqR2dO?= =?utf-8?B?R1FFQ1ZDSlBEUjhzZXFjajcvVHFtWkNjZFBaOENtM2ttOE5qUFRxYi9tcXNz?= =?utf-8?B?UW9hTnpiTEtZR04xL1JPRko3MWVYQmxmRGdDTGdGd2w5bUlkdml5Tkd0RzJ5?= =?utf-8?B?WllDc0tGbVBUdXhmM3Z5M08rOVBFeHQwQUdBRTVDUjh4elQ4SVFlT3IySnhR?= =?utf-8?B?VjV3K2V5UlJCWkhsWERXNWFTa3I5d0hvZHQ1KzdpNVY3MEpNcU11YnhKZUJV?= =?utf-8?B?cnZYMjc4ME01eWovcFpHRlhlZWx3Zmd2YkFNWkl1cEFwRmMzZnViRm1ZenVE?= =?utf-8?B?U1d2Zm9wK0kyRlBTMWdSa01KcWNQU3U4bFlkcjJxTE9XQmFUK3dLNTBtd2c0?= =?utf-8?B?R1d2RHdicks4czRIS1pOVksxTktMVFhmdG9lci9tNStleXFUcGEvVmU4QkxV?= =?utf-8?B?M3dBdi9JN2VvemYvS1RuV3lMaHo5aTVMV3VCVkRvU09DYnJFcXNaYm8rejla?= =?utf-8?B?MTZyZzQ3SFNQTFBxSFNJdXZKUEY3VVhUeDNiTndnUE05LzFSOWZ5Qk9SN3lN?= =?utf-8?B?L3VkUW5JcDlnNmY4UTBFelJTZEhiYXJ4ZlFFSFV0SnErZEJPTkdzenVYOUZB?= =?utf-8?B?cldyYmdaYXl4RHFRaFpxRE9qT2lqL1FOdUsxbENkUVFBc3o4MU5MMTdKZE5P?= =?utf-8?B?a09wNjdVLzBpdUJpRXdsSHN0d0pqRUhsa2NsY3R0ZXpuN2lFZGpzZWdjT1NP?= =?utf-8?B?amg1UTdZOC9Vak5EMnFMWFRJQ09GWlBhUHdnSGpGTHNlVHVJUkdRZ2l4S2hx?= =?utf-8?B?eFNmTEpmQms3bjBWMFNzMmxGY2luYVRXZEVlS2NkbTljZ2VOODh0WTBXdUJR?= =?utf-8?B?OSsrSDE5dTMxV1hWZVVIQjFDejhldGxYZnBENUxJUTZmM0FDbTJFTXdXNnVv?= =?utf-8?B?VGcrUy9GTzdJNHNTUnU0VnRtV2d2V0tTR0FOTC8rTklMcHg1dlRzUnJtejRa?= =?utf-8?B?dWRWY2RqZ3dkb2grMmtYUkRLaHJiZ3krdzZaU3l2dGo1Q2YyQkNWY2xtaEli?= =?utf-8?B?clBZWGQ3OCthOEQ0cGpYU3VjU2d5WGsvVFNiN1A1eWM1T0F4WFA3Z3FGNGdy?= =?utf-8?B?OXVIc2hSbVlDeU9sbmhsR2JxWmJrVklDK2hXeGVmeWs1TllRZEJlckwydS9u?= =?utf-8?B?MWRnb1ZDVGJEa2d1R0htdDM2NHZ1L1NnRm5rMjdCNTdmMjYwRjRrWUNSSWd5?= =?utf-8?B?b00xK2hrQ2MveWRxaXN2anhqaFNLbk8ybWFSTE5tN0NTWnhtNTFqZldnaktw?= =?utf-8?B?WmJkZCtMYmxZcm0xalNvVEdJS0d0eEVoR1IrdCtCZ2NJU2VRUExGTVlmY2Z2?= =?utf-8?B?aGw5Z2xRTjBUdUpMWW5hRkk1MHU2WUdDWGxIT2NIM1pzV2wvdXc1THpiSUJ5?= =?utf-8?B?aWF6d3E5MEgxQUpnNEJLdWp3Y05GdGJIcUVGY25wUjFoYWJDemJHcjNTd0hT?= =?utf-8?B?V1FMcE9ITlY0bFJVVDdYZDE3Zmo2cTB6aWhJVDUyQkxVaUdVWDhtcTR1dlNC?= =?utf-8?B?cDlhOEhIbUQwKzM4eWZUN3JYT3M4Mm5HbnVGd05sUlVyaFN3Y0w0Vk1OYlNp?= =?utf-8?B?S3hRZC85UUcvWlRXK20zSHJTZmsxelFxNVJyLzh1R1ZWZ2g3Q0wvMnBzRis0?= =?utf-8?B?NlRGWmVjUzhydlhId0U2RUJrREsrcG4wTnJxejJGWXFrRGlDMzBBb2RnbmtY?= =?utf-8?B?VG9aU242Mys3V1VsL3hMZnhBdEZjZE95UVlaeVZ1eGd0MDl4STk1OVlKVmV1?= =?utf-8?B?UU4wdEhrcTM2RzlUVEJqaVNzWis5ajZ1YmhuVGpKUisvVDhoQ2JZdCtKYW5o?= =?utf-8?B?dHpPdVlNRGF3S3dxWUFTdmViNEpoeHJ5VkZpRTZpNEUzbGVFT2dwcWwwdFlx?= =?utf-8?B?YVk0N2xEaXBEcnBwdURnWVIxYUFNQnBvWVZWbUFNOHovbk9mTWxkUUFzWDRV?= =?utf-8?B?dUx3UC9BcytpcHZEWVA2UGdXYlpzZFZQWTVWamJUSGpJZnV3eXpwZz09?= X-OriginatorOrg: siemens.com X-MS-Exchange-CrossTenant-Network-Message-Id: 7af126e7-c217-4636-7e97-08de6f0dd7ad X-MS-Exchange-CrossTenant-AuthSource: AS4PR10MB6181.EURPRD10.PROD.OUTLOOK.COM X-MS-Exchange-CrossTenant-AuthAs: Internal X-MS-Exchange-CrossTenant-OriginalArrivalTime: 18 Feb 2026 16:50:37.9182 (UTC) X-MS-Exchange-CrossTenant-FromEntityHeader: Hosted X-MS-Exchange-CrossTenant-Id: 38ae3bcd-9579-4fd4-adda-b42e1495d55a X-MS-Exchange-CrossTenant-MailboxType: HOSTED X-MS-Exchange-CrossTenant-UserPrincipalName: MCa9dXbDwzeDdhI58q/EvlA/DRs/4llNlwq58mnrK1DXwxLtV6SrDyMPIeTj/h9epLZjPc+iTTivmTeeBn4BXg== X-MS-Exchange-Transport-CrossTenantHeadersStamped: AS2PR10MB7710 X-Original-Sender: jan.kiszka@siemens.com X-Original-Authentication-Results: gmr-mx.google.com; dkim=pass header.i=@siemens.com header.s=selector2 header.b=fC2gB+I8; arc=pass (i=1 spf=pass spfdomain=siemens.com dkim=pass dkdomain=siemens.com dmarc=pass fromdomain=siemens.com); spf=pass (google.com: domain of jan.kiszka@siemens.com designates 2a01:111:f403:c207::3 as permitted sender) smtp.mailfrom=jan.kiszka@siemens.com; dmarc=pass (p=REJECT sp=REJECT dis=NONE) header.from=siemens.com X-Original-From: Jan Kiszka Reply-To: Jan Kiszka Precedence: list Mailing-list: list isar-users@googlegroups.com; contact isar-users+owners@googlegroups.com List-ID: X-Spam-Checked-In-Group: isar-users@googlegroups.com X-Google-Group-Id: 914930254986 List-Post: , List-Help: , List-Archive: , List-Unsubscribe: , X-Spam-Status: No, score=-4.9 required=5.0 tests=DKIMWL_WL_MED,DKIM_SIGNED, DKIM_VALID,DKIM_VALID_AU,DKIM_VALID_EF,MAILING_LIST_MULTI, RCVD_IN_DNSWL_BLOCKED,RCVD_IN_MSPIKE_H3,RCVD_IN_MSPIKE_WL, RCVD_IN_RP_CERTIFIED,RCVD_IN_RP_RNBL,RCVD_IN_RP_SAFE,SPF_PASS autolearn=unavailable autolearn_force=no version=3.4.2 X-Spam-Checker-Version: SpamAssassin 3.4.2 (2018-09-13) on shymkent.ilbers.de X-TUID: PFx9xAW+ijy5 On 18.02.26 12:58, 'Felix Moessbauer' via isar-users wrote: > Currently isar requires passwordless sudo and an environment > where mounting file systems is possible. This has proven problematic > for security reasons, both when running in a privileged container or > locally. > > To solve this, we implement fully rootless builds that rely on the > unshare syscall which allows us to avoid sudo and instead operate in > temporary kernel namespaces as a user that is just privileged within > that namespace. This comes with some challenges regarding the handling > of mounts (they are cleared when leaving the namespace), as well as > cross namespace deployments (the outer user might not be able to access > the inner data). For that, we rework the handling of mounts and artifact > passing to make it compatible with both chroot modes (schroot and > unshare). > > Signed-off-by: Felix Moessbauer > --- > Kconfig | 2 +- > RECIPE-API-CHANGELOG.md | 29 +++++++ > doc/user_manual.md | 2 + > meta/classes-global/base.bbclass | 67 ++++++++++++++- > meta/classes-recipe/deb-dl-dir.bbclass | 9 +- > meta/classes-recipe/dpkg-base.bbclass | 16 +++- > meta/classes-recipe/dpkg.bbclass | 14 +++- > .../image-locales-extension.bbclass | 9 +- > .../image-tools-extension.bbclass | 82 +++++++++++++++++++ > meta/classes-recipe/rootfs.bbclass | 53 +++++++++--- > meta/classes-recipe/sbuild.bbclass | 27 +++++- > meta/classes-recipe/sdk.bbclass | 11 ++- > meta/conf/bitbake.conf | 7 +- > .../isar-mmdebstrap/isar-mmdebstrap.inc | 12 ++- > .../sbuild-chroot/sbuild-chroot.inc | 24 +++++- > 15 files changed, 332 insertions(+), 32 deletions(-) > > diff --git a/Kconfig b/Kconfig > index 683c0da5..5ef2bfcb 100644 > --- a/Kconfig > +++ b/Kconfig > @@ -14,7 +14,7 @@ config KAS_INCLUDE_MAIN > > config KAS_BUILD_SYSTEM > string > - default "isar" > + default "isar-rootless" You didn't patch kas/isar.yaml as well - might be a trap for people not using the menu. Jan -- Siemens AG, Foundational Technologies Linux Expert Center -- You received this message because you are subscribed to the Google Groups "isar-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to isar-users+unsubscribe@googlegroups.com. To view this discussion visit https://groups.google.com/d/msgid/isar-users/fe587e5b-9d7d-432b-aee5-df18d10a5743%40siemens.com.