From mboxrd@z Thu Jan 1 00:00:00 1970 Delivery-date: Fri, 01 Mar 2024 08:34:46 +0100 Received: from metis.whiteo.stw.pengutronix.de ([2a0a:edc0:2:b01:1d::104]) by lore.white.stw.pengutronix.de with esmtps (TLS1.3) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (Exim 4.96) (envelope-from ) id 1rfxPp-001DPI-3C for lore@lore.pengutronix.de; Fri, 01 Mar 2024 08:34:46 +0100 Received: from localhost ([127.0.0.1] helo=metis.whiteo.stw.pengutronix.de) by metis.whiteo.stw.pengutronix.de with esmtp (Exim 4.92) (envelope-from ) id 1rfxPp-0002EN-A1; Fri, 01 Mar 2024 08:34:45 +0100 Received: from mail-gv0che01on2114.outbound.protection.outlook.com ([40.107.23.114] helo=CHE01-GV0-obe.outbound.protection.outlook.com) by metis.whiteo.stw.pengutronix.de with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.92) (envelope-from ) id 1rfxPP-0002Dz-R3 for ptxdist@pengutronix.de; Fri, 01 Mar 2024 08:34:20 +0100 ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=oaPssRhoQQLrNTmgwSAMiNZSKMdkH5eaqawR0BtLP1I9kSp3roJMlPdBl4kZjeOEV7eCaHy8DgrtNpI9Iav+N0X1hIr+2VvU4cCZPYymEu0GyE+VNErim66lh8MYWKPlA8EJPhvpo67m0cBKcWEccV2dd+iEUnf3qzamHPaFZOxlPqIAa3G4xQSMVcdLYNsIhHvlOKC4xUrJ518ZPUW0rMz/1Tb+o6GWcXvVV4C5B0tNBHrw17oCXCT3BfnAwgYFCJZLv/4yeL5lXyo7d9dmU2sYgMZv+TXL2WY1vqfivobOYbmHjN5qZ8a6aOKvqfrybBHy9TW4nGLqaIxXbALMWQ== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1; bh=iD+SQ3ea/NsoFu5xbrmENUnLbuiRfjl85dx67zVBDVw=; b=H6lmw04fUx1YfXXU7cTE0Twcv8T72nco1EBTGJLn6EnyQXY3XVt04izFhyzrVEZCIi0kgUfjG7a7hrVvFNwfkhh/3gvEX6igX7zFUuuX9UoYhTeIbaiuGtT4vfQbW4px/p9Td+n+66/Ce+I6OGuwjI9IDpkz08t8sO8k+p4quLhTUPAi63liEbKE8REuKIcowVldSLMgrvfZErYSf6XrC3IEZ3AccZPzJIazcsf3bya1cUQTMag3y1wdz0FtDGB2gN98kMYpIc+lIFVGKY1mD9J6fNqKEEXgE7HGeX8E2c4NdUz0NNKUXa6JX6zusGNDswm8enmy3Y6uj6oHsq0J+A== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=verity.net; dmarc=pass action=none header.from=verity.net; dkim=pass header.d=verity.net; arc=none DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=verity.net; s=selector1; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=iD+SQ3ea/NsoFu5xbrmENUnLbuiRfjl85dx67zVBDVw=; b=DpXE/JdEWT4mClVhR26jehIbKhwDuSoJMnZMZ32HUDK0d1kRwSfUqMzDSktgq7exm6k+6vAwTugSTCitcPUtfwfTjBognrUhdMc1lfz+JeFu0lIKEiZaKqeXBTOwxzKCabzHJl5FCkL0bTCVH3k4EyZ45U4dhgFXHRIaOZzDTXAjKm9FZEd4+aJARq5cC3OkPz4ERmos21KCGm0AzCBenWdwQ+9KUoUoRSAbqMDz71wWTJJqh6PfvH7V+l27A3KMbTkR+DuGKnpZqdCDNGoX07xhu7WaRKnjiW4Aku+x+9MbfraDejpJa2sDTukSttAVEjDi53x+67Vvc8/KGosk/Q== Received: from GV0P278MB0994.CHEP278.PROD.OUTLOOK.COM (2603:10a6:710:4e::12) by ZR2P278MB0988.CHEP278.PROD.OUTLOOK.COM (2603:10a6:910:61::10) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.7316.41; Fri, 1 Mar 2024 07:34:17 +0000 Received: from GV0P278MB0994.CHEP278.PROD.OUTLOOK.COM ([fe80::5629:23fb:b3ef:244f]) by GV0P278MB0994.CHEP278.PROD.OUTLOOK.COM ([fe80::5629:23fb:b3ef:244f%3]) with mapi id 15.20.7316.039; Fri, 1 Mar 2024 07:34:17 +0000 From: Simon Falsig To: "ptxdist@pengutronix.de" Thread-Topic: SBOM support Thread-Index: AdnhnHsNiqon0zJeSR+/uNVF6SJp1CBto6HgAhXesZA= Date: Fri, 1 Mar 2024 07:34:17 +0000 Message-ID: References: In-Reply-To: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: authentication-results: dkim=none (message not signed) header.d=none;dmarc=none action=none header.from=verity.net; x-ms-publictraffictype: Email x-ms-traffictypediagnostic: GV0P278MB0994:EE_|ZR2P278MB0988:EE_ x-ms-office365-filtering-correlation-id: 6c0717a5-a790-408f-2078-08dc39c20044 x-ms-exchange-senderadcheck: 1 x-ms-exchange-antispam-relay: 0 x-microsoft-antispam: BCL:0; x-microsoft-antispam-message-info: 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 x-forefront-antispam-report: CIP:255.255.255.255; CTRY:; LANG:en; SCL:1; SRV:; IPV:NLI; SFV:NSPM; H:GV0P278MB0994.CHEP278.PROD.OUTLOOK.COM; PTR:; CAT:NONE; SFS:(13230031)(38070700009); DIR:OUT; SFP:1102; x-ms-exchange-antispam-messagedata-chunkcount: 1 x-ms-exchange-antispam-messagedata-0: =?us-ascii?Q?hQGx73sYKaHlKIIBJ2vijb/ixzCG9RdVnsNcpZPQvdNb8p1vXaYyaNn2CmHH?= =?us-ascii?Q?JwbLpH/wzGESmZQL4XDxE7rn8TAafFyDUjLeEIxj9E6HgTklKxYScX+bT3jO?= =?us-ascii?Q?4+1YHjy8VRqfLrE1+4e6eFePRJXNheLdhpkVYNTo6JWYYf6xL9SmCBcvoX80?= =?us-ascii?Q?l3KRabG13opUn6b7l/dJozVv1nNqjR+FA9SVSDdqUsoecc7D8QvKhK3PSbce?= =?us-ascii?Q?u9Tv4sL1gJpP+08Hm7RhMP9AK+hIo/aENnml9zi2hlB/XFzqOo6Mg+k2HjAx?= =?us-ascii?Q?/YQ+ClOALWXfAiinHQFcIm2xhjk3OIsJeslD4B+jarcQr6uxI8VGI+Gogvo6?= =?us-ascii?Q?NYPO0inRw3KHcegEy9ZGuxLoHxfPICWZ4EUDwITgLUe3pa8uBkhyW9wJrpBx?= =?us-ascii?Q?N30MUCDzgboC8SaFAlB846c7cdyVt5vV6uOS3YwRElWTD/94A1EMx24Xd+Wc?= =?us-ascii?Q?5XZqEdJIiGtwxU/TeRe2D6aQm+hUD4oiUMBf8YB5IaWA5+gFbbqB700Kn1MD?= =?us-ascii?Q?44vROcpyxGKXEqX2f8TyBBHlbetyGVBmAR2yLGzvHHdRl0Q3XRcgJnT8Stgc?= =?us-ascii?Q?tWw+eJd65cdpGfLxEWsfdWuqi0jRrcUltgPELvnscYG6Lbrl2XlhS98oIRQh?= =?us-ascii?Q?MB3IIyTCLVsKQ7tVhhLlw3U51MLVxctqUaa7U2R21nOCJf64d4vdiidowBpx?= =?us-ascii?Q?PKIZbPcPRreyuKLb6pK6LMD/9DxpMSGPTGrvMFwTN2ZMjpS1I0USchbOrqmn?= =?us-ascii?Q?QNxD2DonvjfgRFsHpBXKwUFxrbgzWLN4niSfxpFKOc2eSQStb80ca+T2Dpss?= =?us-ascii?Q?kBRqAd7nMT6dSpkjUbpNYAzr0UAKxS5+qbBm2RhZG2iMoy7t53dCyY7ZqWIa?= =?us-ascii?Q?WUYysHn+yLWJOW8aLVW4MKWW5qx1Vk+s1AQYiQbAn5y6iHH41YnGknwpm8ex?= =?us-ascii?Q?QmNn2VlUc7MTRWkpi0/OHQGQDlFYX+q7iKeIAcx8Gzg1UnNZBs2AoWVXHnLW?= =?us-ascii?Q?ZC76zcEGZ35JvxbAfu221Otjh2ldy0CMz9Glby4A98gO7RoR9hM0WKQFjr29?= =?us-ascii?Q?xMgGRhVGP8/3Y35LRiT1J2S7hLXAFxuqoutTxMpBcTtURWZyO00+L8b9W4RO?= =?us-ascii?Q?Lg/Y0Nqac09/9fMDnJatLU80eUqyA8Mf1HsR89PBhSSD7/5+aBzmGdMxhaUC?= =?us-ascii?Q?bVzYuCoRFGs2jGiWa6KR6WWtCs5iWQZ24PewJ9HirWyp425KISOG238iTk4Q?= =?us-ascii?Q?CQ8B0pZGCu5NuL9vP1AkjS+9mIhivw6BDnE/OV1XW39RUwRU2PG4IMZriluG?= =?us-ascii?Q?FaUYpM2h539NADH6t/L1cEF9xZAIYFzyeX47/FttEVPIoJD4fGsXBeo8Bdfz?= =?us-ascii?Q?DpgoTVBCmEESZ+Q8ydC8OFPUZ5pRMhC5pSg+0XbMYtxQhk0G89xeq0ve/Hi3?= =?us-ascii?Q?uCiNB9BaoegRMSw4RD3so4db7JzbqIynSwy0bg2H8+qEB0d1ecTMTebDNs+y?= =?us-ascii?Q?5Y2TjohXZJHoVbfR0iHhERvGZYb/xnPjjUArZQ4UtFi1FJ/nl8Goj5+0Gvat?= =?us-ascii?Q?dhu+WXiT935xo6cpak7SiYC7CjEfm7Rk6T11vShz?= Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 X-OriginatorOrg: verity.net X-MS-Exchange-CrossTenant-AuthAs: Internal X-MS-Exchange-CrossTenant-AuthSource: GV0P278MB0994.CHEP278.PROD.OUTLOOK.COM X-MS-Exchange-CrossTenant-Network-Message-Id: 6c0717a5-a790-408f-2078-08dc39c20044 X-MS-Exchange-CrossTenant-originalarrivaltime: 01 Mar 2024 07:34:17.0620 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: 06487c72-7d88-4632-bf56-071603defa0a X-MS-Exchange-CrossTenant-mailboxtype: HOSTED X-MS-Exchange-CrossTenant-userprincipalname: r1+kL7IEpFyBPpv35DOok2ma+s2WGKevlfNlXNLiFUmqjMr8xEIi8jD/Q9zgZQpHpzTgxZ1F/tdzZCs7FPWjuw== X-MS-Exchange-Transport-CrossTenantHeadersStamped: ZR2P278MB0988 X-Spam-Checker-Version: SpamAssassin 3.4.2 (2018-09-13) on metis.whiteo.stw.pengutronix.de X-Spam-Level: X-Spam-Status: No, score=-2.0 required=4.0 tests=AWL,BAYES_00,DKIM_SIGNED, DKIM_VALID,DKIM_VALID_AU,DKIM_VALID_EF,RCVD_IN_DNSWL_NONE, RCVD_IN_MSPIKE_H2,SPF_HELO_PASS,SPF_PASS,T_SCC_BODY_TEXT_LINE autolearn=ham autolearn_force=no version=3.4.2 Subject: Re: [ptxdist] SBOM support X-BeenThere: ptxdist@pengutronix.de X-Mailman-Version: 2.1.29 Precedence: list List-Id: PTXdist Development Mailing List List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Reply-To: ptxdist@pengutronix.de Sender: "ptxdist" X-SA-Exim-Connect-IP: 127.0.0.1 X-SA-Exim-Mail-From: ptxdist-bounces@pengutronix.de X-SA-Exim-Scanned: No (on metis.whiteo.stw.pengutronix.de); SAEximRunCond expanded to false > Hi, >=20 > > I'd be happy to get a bit of initial feedback on the approach. I'll > > have a look at putting up some initial patches in the coming days too. > > > > Thanks in advance and best regards, >=20 > Sorry for the silence around this, but I've been busy with other things i= n > the last months. >=20 > Finally managed to get something working, that integrates with the > existing > host-system-python3 handling. I'll be sending some patches right after > this. >=20 > Main open questions would be: > - Currently HOST_SYSTEM_PYTHON3 and (the new) > HOST_SYSTEM_PYTHON3_CYCLONEDX > packages need to be enabled manually through the "enable sbom report > generation" option in PTXdist options. Not sure if that is the right > place > for it, or if there is a nicer way of handling it? (for instance, if > it's > not enabled, 'ptxdist sbom-report' will just fail with a not-so-helpful > error message...) > - It looks a bit like a local venv is being set up (in sysroot-host), but > I can't really figure out how to use it. A nice change could be to > install > whatever host-system packages are needed in that venv automatically? > Right > now the functionality requires users to manually install the required > python library with pip. >=20 >=20 > Happy to hear of any input! > Thanks in advance, > Simon >=20 Just bumping this in case it got lost over the last weeks. Would appreciate any input, both on code and further process to move this ahead. Thanks in advance! Simon