From mboxrd@z Thu Jan 1 00:00:00 1970 Delivery-date: Tue, 05 Oct 2021 15:58:58 +0200 Received: from metis.ext.pengutronix.de ([2001:67c:670:201:290:27ff:fe1d:cc33]) by lore.white.stw.pengutronix.de with esmtp (Exim 4.92) (envelope-from ) id 1mXkyA-0006Ku-Gj for lore@lore.pengutronix.de; Tue, 05 Oct 2021 15:58:58 +0200 Received: from localhost ([127.0.0.1] helo=metis.ext.pengutronix.de) by metis.ext.pengutronix.de with esmtp (Exim 4.92) (envelope-from ) id 1mXkyA-0006Vn-47; Tue, 05 Oct 2021 15:58:58 +0200 Received: from mout.kundenserver.de ([212.227.126.187]) by metis.ext.pengutronix.de with esmtps (TLS1.3:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.92) (envelope-from ) id 1mXkxl-0006VF-Qi for ptxdist@pengutronix.de; Tue, 05 Oct 2021 15:58:34 +0200 Received: from methusalix.internal.home.lespocky.de ([92.117.49.48]) by mrelayeu.kundenserver.de (mreue012 [212.227.15.167]) with ESMTPSA (Nemesis) id 1Mcpz0-1n7dkI2tqU-00Zx2P for ; Tue, 05 Oct 2021 15:58:32 +0200 Received: from falbala.internal.home.lespocky.de ([192.168.243.94]) by methusalix.internal.home.lespocky.de with esmtpsa (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (Exim 4.94.2) (envelope-from ) id 1mXkxa-0002OM-09 for ptxdist@pengutronix.de; Tue, 05 Oct 2021 15:58:26 +0200 Date: Tue, 5 Oct 2021 15:58:15 +0200 From: Alexander Dahl To: ptxdist@pengutronix.de Message-ID: <20211005135815.dalyv3zl6i7737yk@falbala.internal.home.lespocky.de> Mail-Followup-To: ptxdist@pengutronix.de References: MIME-Version: 1.0 In-Reply-To: User-Agent: NeoMutt/20170113 (1.7.2) X-Scan-Signature: 90a14319f408ee23dfd41c44680c3a76 X-Provags-ID: V03:K1:y0fPFdN6JXcbO4VdNEtGNWQpfmUwNYtFFu0FXohD5gpA7IzF8+Z 8Db5WY6KU57MRkGYwkHrWTlLaRQRBr9rSo8nNSMN3lNCYEeNCbxZdaVp3UM+TdcY3u1ueUF SxYV0EHJtdccZFh19/9vwUhDa5J44kF8/uEQLdmMBPGMOxGF2kLA3+zgWGf0a9nFAl4fDmP Pn73e287oEsed1RuW7b1Q== X-UI-Out-Filterresults: notjunk:1;V03:K0:YeEIXjYwZp8=:nnE0upd8NUp1xArFazIzHd 3Vav+HRkGh3gsiA8WmH2DO1wLdt8Cm1st1vksTbqItW7mFQf6sr8/+HZUcnzgjaYN/SRWFQhs 6IegmBmqAjCBX/SSxRVs0YcbeHujS6SUV3Nn/Qa1qOyOChiCH1zxS77Tdcms89uS2sg8jXaa9 /WU8I3rn5/uydtUMbteLsI0p0/pKwS+fITFLWzdhtz82WYkTNDwm7qr7LqaBZp3/lTQwGmQjR hHLjkHFAPnO09zu+srl+b2t32jF1ZttxMIU179ROfSgFr8eiu/P0RiihvdSS/Js36+Bbjrks6 MrFkNRQHMoe09oVPzWL3Hrg7NOQRr31lZzEJBBxSwsXexRIim8iNX8A1R6RJ248op6fz/2qIZ Z1VaQB/rWVOrBhOMPrJ6rjhgKtzyj4q6wjZ+GMPDiELAj9RHa+oeIMwIFMfUistXJkvLhE5Eo vRJJSJVx8SVKuzZ1/7rnYMRbso75UIT5Dx7t/mUMo/FGFfqxuFMr19P5YfUbwcpga8/jGmdTB khgxOoeomIcr03C+pnDjNbLjbXgWR1ASG98OxquPRc3OXtHBtqNAA795KJ8ng3mllqXEQcvDX BKBQS1y7jtc+W7sHq/p0R+Uf1ayGH54itxENJof78DOf7gd0/wOLo5JUETOLRasVYQZixGxbW xTJsxAYMzX0ZVp4Q7AbDLvo9Ot9dNeb9qrUXrm3ydksdNXJDOr1RYtmogpnloD+xG9mT5+9ht YI0AsHNfRGSU7pryKwBr5krps9WTHSUCfoDWJQ== X-Spam-Checker-Version: SpamAssassin 3.4.2 (2018-09-13) on metis.ext.pengutronix.de X-Spam-Level: X-Spam-Status: No, score=-2.3 required=4.0 tests=AWL,BAYES_00, RCVD_IN_DNSWL_NONE,RCVD_IN_MSPIKE_H2,SPF_HELO_NONE,SPF_NONE, URIBL_BLOCKED autolearn=ham autolearn_force=no version=3.4.2 Subject: Re: [ptxdist] SBOM / manifest X-BeenThere: ptxdist@pengutronix.de X-Mailman-Version: 2.1.29 Precedence: list List-Id: PTXdist Development Mailing List List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Reply-To: ptxdist@pengutronix.de Content-Type: multipart/mixed; boundary="===============0123964211==" Sender: "ptxdist" X-SA-Exim-Connect-IP: 127.0.0.1 X-SA-Exim-Mail-From: ptxdist-bounces@pengutronix.de X-SA-Exim-Scanned: No (on metis.ext.pengutronix.de); SAEximRunCond expanded to false --===============0123964211== Content-Type: multipart/signed; micalg=pgp-sha256; protocol="application/pgp-signature"; boundary="tsqg47d3o6obq3pr" Content-Disposition: inline --tsqg47d3o6obq3pr Content-Type: text/plain; charset=iso-8859-1 Content-Disposition: inline Content-Transfer-Encoding: quoted-printable Hei hei, On Tue, Oct 05, 2021 at 09:38:55AM -0400, Akshay Bhat wrote: > Is there a way of generating a SBOM (Software Bill of Materials) i.e. > list all the software packages installed on the target with the > associated version and license info for a ptx-dist? Something similar > 'make legal-info' in buildroot. You can generate a license report like this: ptxdist make license-report You'll find the report in platform-foo/report as .pdf afterwards. > The closest I could find was: > ptxdist list-packages | xargs ptxdist package-info | grep -e package: > -e version: -e license: >=20 > Also are there any plans in the roadmap for supporting a SPDX SBOM? Not sure. But the documentation has some hints:=20 https://www.ptxdist.org/doc/dev_licenses.html HTH & Greets Alex --=20 /"\ ASCII RIBBON | =BBWith the first link, the chain is forged. The first \ / CAMPAIGN | speech censured, the first thought forbidden, the X AGAINST | first freedom denied, chains us all irrevocably.=AB / \ HTML MAIL | (Jean-Luc Picard, quoting Judge Aaron Satie) --tsqg47d3o6obq3pr Content-Type: application/pgp-signature; name="signature.asc" -----BEGIN PGP SIGNATURE----- iQIzBAABCAAdFiEEwo7muQJjlc+Prwj6NK3NAHIhXMYFAmFcWfMACgkQNK3NAHIh XMZuTA//Vrry9tsMxbkCEK+h082czahHMZkJk6oIVZNLRXUA7L+krDtNQhsfjl+O P3tGm16X/AXBCC058MaqJxe9McC7crBzlrCSrDzb7lDHSD4e34CdP8eVYe3xmO7/ mZvoOqXUyXcee4lUdK4aW7+r9ASyL472aVxPNIJENAOfPVQBb9CxG7BZfUzHnDMo +aH6/koNJaiNVvAuaj7HyhTOBsFcCpZS/djgmiufSyuGLlgHNXIFi5KvbX6ah7oL rehBZ1OflopKEOikRiBCUiVZICL85UIfKcbZcNGIhYz58w20k5T5cWIeDH8dBdpM oDBVPvtYI9mU54hpd1guPRYLaMRjsVOyqvZpIRBhFfA8AH2UGKA4wkfCSkcm179h kpMtuo1KS5/Js/AXgnn4t5yhu+Aj9Dzqwe5QG1CLWzqwglyjgXKPlYpirT6a/CQZ tiIN5KJhaNVhBmQRJjkUB6ADEbK0+hpZMxbS5+AfHr7MzSviQX0b6weQI0mq59a2 UAda0dHXEMWiOlq/V+VYeBMCa2KfNXCKFuGgHhnemJn0yYyosBvFRmZzc6ORQShe SWYbkT/JxvBPyYxeVd2e4cbpBIk0KecXaZff/zWXpJj3aJTAdio2sHK5/pUCgX82 EZZYpmjGRKBc21/8Ttwcpv2RLMHFRLhdeDiAOVahDntjsZvpTKU= =cTLl -----END PGP SIGNATURE----- --tsqg47d3o6obq3pr-- --===============0123964211== Content-Type: text/plain; charset="us-ascii" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit Content-Disposition: inline _______________________________________________ ptxdist mailing list ptxdist@pengutronix.de To unsubscribe, send a mail with subject "unsubscribe" to ptxdist-request@pengutronix.de --===============0123964211==--