From mboxrd@z Thu Jan 1 00:00:00 1970 Delivery-date: Tue, 05 Oct 2021 19:20:07 +0200 Received: from metis.ext.pengutronix.de ([2001:67c:670:201:290:27ff:fe1d:cc33]) by lore.white.stw.pengutronix.de with esmtp (Exim 4.92) (envelope-from ) id 1mXo6p-0002VS-BB for lore@lore.pengutronix.de; Tue, 05 Oct 2021 19:20:07 +0200 Received: from localhost ([127.0.0.1] helo=metis.ext.pengutronix.de) by metis.ext.pengutronix.de with esmtp (Exim 4.92) (envelope-from ) id 1mXo6o-0005yw-Mh; Tue, 05 Oct 2021 19:20:06 +0200 Received: from mail-db8eur05on2083.outbound.protection.outlook.com ([40.107.20.83] helo=EUR05-DB8-obe.outbound.protection.outlook.com) by metis.ext.pengutronix.de with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.92) (envelope-from ) id 1mXo6E-0005yn-Ke for ptxdist@pengutronix.de; Tue, 05 Oct 2021 19:19:31 +0200 ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=KC19aLEOwnGWrSGYPv/Qud2pAwCsj0drjDne2f5rmmICwlQ5ZJGUbPdyr1RnI/jtu4YIQq4RWWA5oFF7hD3iLMGo+ybF2jThibkqDykP7r0NB59ScjEh1WdpByrU7iQURnONd3o0MQ+xFdAng+b+nSI1fbTzPLTT/VjPZLycpVhvV1DI9M4r6GFJsnPhThO5jkBOdULiJ7PHzK2JscWBCJry5Dmse0FlDnmz2COd5ELL/In/BHYqxRPxubMmO8IdzqoCeICCbGmPW4U+20sSfngaJ+DLfysrR0R8Qk12E7VSP/MHevySFhm5INS3IBFTx5r98Lw/3SiDE1HoFfyGaA== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1; bh=uItbWxgaS9nA+6HmFpEzzvZDo/XvhBm5XjE1voLfvRE=; b=XOSSJZxppKfNrkHE93gn4FIZd+6n2PM4QuvOdugWtC2rHCDC+as/aRGt3H0Limwj+hpTiE/mu9QtQ4jU1CKEw02UQO9T34T3bsrusVqoSbYL6i5PpxfV1Nu11S58z5sF9DADT4tmG/zW9pDId/A5YhkFEhoSpIoMf9McZt1FGFxHR+YIDsSY9KfglyVTGjP/HH9dJr1MAWAoVaRZeK09HWoqlAhBBOUS4upmtbZDQzmEnjbXp04671VfWTbDVe4InNy7ukAO4VdUZF+73OH7Kgyioh+uLu9SOxwaDi6l8+2h7adyQxNaUvLoQRi8bR2NaJGjH1pz7qYUR2rWl/OrMg== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=t2data.com; dmarc=pass action=none header.from=t2data.com; dkim=pass header.d=t2data.com; arc=none DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=t2datacom.onmicrosoft.com; s=selector1-t2datacom-onmicrosoft-com; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=uItbWxgaS9nA+6HmFpEzzvZDo/XvhBm5XjE1voLfvRE=; b=B5EKOI5SGsVNz0QyaAsAwsBmqJoT5RDRxJx/LaMfs1nM7tidNDMC9YjgEuinxEwkB8tvKEX6lhybXqB7ZeR8MH3kt4AYVRLF27p8YJ3RThH9lF51xYDPbNYhFXQDK8airMlv+eEJ7fcuCNab8nDVL+rxZlBq4LGc3ChTvih5jZ8= Authentication-Results: pengutronix.de; dkim=none (message not signed) header.d=none;pengutronix.de; dmarc=none action=none header.from=t2data.com; Received: from AS8P251MB0167.EURP251.PROD.OUTLOOK.COM (2603:10a6:20b:403::21) by AS8P251MB0247.EURP251.PROD.OUTLOOK.COM (2603:10a6:20b:407::20) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.4566.13; Tue, 5 Oct 2021 17:19:28 +0000 Received: from AS8P251MB0167.EURP251.PROD.OUTLOOK.COM ([fe80::dd37:4003:79e5:4b70]) by AS8P251MB0167.EURP251.PROD.OUTLOOK.COM ([fe80::dd37:4003:79e5:4b70%8]) with mapi id 15.20.4566.022; Tue, 5 Oct 2021 17:19:28 +0000 Message-ID: Date: Tue, 5 Oct 2021 19:19:53 +0200 User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:91.0) Gecko/20100101 Thunderbird/91.1.1 Content-Language: en-US To: ptxdist@pengutronix.de References: <20211005135815.dalyv3zl6i7737yk@falbala.internal.home.lespocky.de> From: Christian Melki In-Reply-To: <20211005135815.dalyv3zl6i7737yk@falbala.internal.home.lespocky.de> X-ClientProxiedBy: HE1PR09CA0058.eurprd09.prod.outlook.com (2603:10a6:7:3c::26) To AS8P251MB0167.EURP251.PROD.OUTLOOK.COM (2603:10a6:20b:403::21) MIME-Version: 1.0 Received: from [192.168.7.217] (81.234.39.46) by HE1PR09CA0058.eurprd09.prod.outlook.com (2603:10a6:7:3c::26) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.4566.14 via Frontend Transport; Tue, 5 Oct 2021 17:19:28 +0000 X-MS-PublicTrafficType: Email X-MS-Office365-Filtering-Correlation-Id: 64c66427-4173-4c2e-4628-08d988244987 X-MS-TrafficTypeDiagnostic: AS8P251MB0247: X-Microsoft-Antispam-PRVS: X-MS-Oob-TLC-OOBClassifiers: OLM:8273; X-MS-Exchange-SenderADCheck: 1 X-MS-Exchange-AntiSpam-Relay: 0 X-Microsoft-Antispam: BCL:0; X-Microsoft-Antispam-Message-Info: i1FZIBfVjIKjJojW7yfo2VKZyGI++rzCkDYtrQgUMCOSfE4RgN6fhzH4+5dB4FtZk6NOSfjlLxeiIVhA/cPznDdA3s4q9TYHsl1UgkK7WVBPJEf8cyj19QQt1eCfIYUWB5ywJw2Czoe/wDdxtp1+f37dk+rUA6HB3NK+PpE16XMhmhFV0O44cUfIVfb7h2+pYN14Dzf65fMsugiPtUPbd1k+3aQtAslvz3qCjyJL6u+8oCOvqXa5YJeA8iFYiE01+gQs5Ns7LczQ2rsEvbvM1cxTWZUb0NEXd4HmpgmmLCB/gKNrIqinPl7kuzgQQ8ns6gb/hnpKNWM77NFjDVMozZbehVEAvYGEpFH3OjZR8IsQRBt7EFfgdvI2Dr4hE6jvL/znauda6/GDqHpjmW4ZJlSjWjPu1yNDYPqjGBbD8E4Txn5dedqGXZLF6XIRU3VJPSTA3a1UfkRp3y4aT+Cfja++vERkKn44cmscqFyAp3w7igaifpMZUMwgM/iMkKKuNAm530jHhmOAm2PjYRhGrNB4rKDzeQS0YyHVnBS8pEhc9QIrR8yM/LgCOIT81W9LSlpPO/juyaJKP9NxxHM1MLMkbO3xBmcWhKqOYIGAgHaImDo74A/Kc0SeX4kzZ9YlD/G6NPJD0wpJRIyCLsAbBson09nrBTc7qsgf5pqHoZY3CtU/YtdQLxn5RDij5zHqLkPrXh7wNTszRctfwCe8YhTcHVm/eqd95wB+V5CjVu+nyypiDc2R5JnFIR6UX0MCjQsmThDAUuFq8ACdUoZQy2Jyh+XXTecmOC27r4j1GsF5CYPoKI1Q3Pjp1R7wMUpYatnPrqGOAGQjn34A61XZQcUAmaVoZSsDu7NwetLuNns= X-Forefront-Antispam-Report: CIP:255.255.255.255; CTRY:; LANG:en; SCL:1; SRV:; IPV:NLI; SFV:NSPM; H:AS8P251MB0167.EURP251.PROD.OUTLOOK.COM; PTR:; CAT:NONE; SFS:(42606007)(39830400003)(346002)(366004)(376002)(136003)(396003)(52116002)(86362001)(38350700002)(186003)(508600001)(6486002)(6666004)(31696002)(38100700002)(966005)(8936002)(316002)(16576012)(6916009)(44832011)(3450700001)(66476007)(31686004)(2906002)(66946007)(36756003)(83380400001)(66556008)(956004)(53546011)(2616005)(8676002)(5660300002)(26005)(45980500001)(43740500002); DIR:OUT; SFP:1101; X-MS-Exchange-AntiSpam-MessageData-ChunkCount: 1 X-MS-Exchange-AntiSpam-MessageData-0: =?utf-8?B?YkE4eXpBQW1TWlFNekwrc0Z4ZFF5SFQ2dGp0aWgwWDRvQnREV1ExcXN0YlpN?= =?utf-8?B?YzJxNWNZWnBqZUMrVjlaMHlCQUlMZWhPbnB1eFhDOXB1TTk1TURFRHNFNmN3?= =?utf-8?B?NkYrb0lXQStqQW1lYTc0cDd5QUxtUllIM1k0dUdxY0tBQjk4R1RYMDJHQVhC?= =?utf-8?B?MUxDWnFYYXVHcG04U3o2RzlzaU5zSnh4SFVmaDlBWk8wYmdXNHpvazRvSnFQ?= =?utf-8?B?QUZqQjdKRVRPNWpRYzJ4VG1pdWduMUVoMnpKNTVsVUtRd08vRVg5M2h4V04y?= =?utf-8?B?T1NkRkhtTlFVTHRpeHN1d24yVTBMYlNKNGs5ZnJwMXhwZHdyRHdmSUd6Y1RK?= =?utf-8?B?ZHRNS1d0MmhPOUs1bk1IaUhHMVdXcm1JVHhJUWZvV2ZXZ21NM0t2d1BtQ01q?= =?utf-8?B?VFo3UmQ3cy9VaVhtbVZ6UlFlcmdOdUxUZTRVbTNHRi9IWTErTU9WQnpOdE1u?= =?utf-8?B?am1tVmQvbVFNS2hsRktyTUJKZWZQak1WMzZIK0RsY2QyWG5oY1p0MStQNzQ0?= =?utf-8?B?UmkzbU1obHVDZmsxOWo1N0tLOG5pcktueml0QVcvUzJuOUhsanFIS0FnemFE?= =?utf-8?B?cXIrbEl4T1dtOFZ2blRpNEFBaFhYRU5tbit5OXRXR1YvMENld0lBODZoRkpv?= =?utf-8?B?VHBoSzBMWGVDVjRBYi9lUkFnN0NBT09ENkwwSTVxb3dsRE5hMlRGeTBwOWd0?= =?utf-8?B?OCs0czJFakE0ZjlwL3pJMXhtY3VHZXNmVno0a2RZbnV2N2VLM3BhUWNtWnN2?= =?utf-8?B?QmZxZlRRcXY3NzZMQUhHa2RrWXZqeHUvWVowRVE5MFRNdGkxWURHQ3VGK2hQ?= =?utf-8?B?dXdHaFI4WnZDWlB2SllOTUlrNzVMM29tWFdhb2xLMEQyTk8wOG9MRHN6bm91?= =?utf-8?B?NVVvemhnYlBjZXdYTzFlc21PcVUydlp5a2NtU3QwVWMwMUMwTktNdTNoNC9F?= =?utf-8?B?ZDE5KzROTGRSSWdUUEtNVVZNY3BSaDYvV1lJekZ1dlMwYUhJczgvMjNwOWNw?= =?utf-8?B?eFQ1MnVFSGdKbEM0Rkc5Z1ZHVG5pczByUGxOQUQrNzFIMi9tVGhhZlJyNkZn?= =?utf-8?B?VmhxZ1dPR3dyN3hrM0k2NjdFd2xoQWpOb1NtVFFEeUZmOXB6T3I4ZnU2NFFX?= =?utf-8?B?M0hDclF1M3JhbGR6eUE0N2V3Si9WM2gwU3R1aWQ1akNkdW9ub2tmWlkvcDNW?= =?utf-8?B?cmhYcUUrTzZxbnF1ZXZFbDNzMDRMNnp2QVNFRnJWdDJ3UVluMkxmbnNoQzB0?= =?utf-8?B?eW5uV2dIcS8zYlU2QUpBSUJ0M3lQSlZVRGkzMWpFaGNMOGNQRVc0MXNNK1N0?= =?utf-8?B?dkIvdmlhbnY2MlR6TVJFb3UzVThSYW1CdStqZXIrZWg4R2gvQ1BCenY5ak84?= =?utf-8?B?UGJpWko2WEpld2pYSDVLQkxpb0d6L2RzTUJ1dzl3YnNLR2JhZ0NUOWtoR0Q2?= =?utf-8?B?VHpDVHBxeEpVSERLRndSd0lJQzlXZmtLYlFsc044UllDc3R1YW5ROUFPYXdl?= =?utf-8?B?VklDOUxqSmNZQ29lM2ZDS2xqbVp3cW5nZ1NKM2JMcmI0TVo5bDNlZFVPS2RN?= =?utf-8?B?QjQ2azBJaTc2b0ErUFcyVUE4Rk9uSXNXMWF2bFR2aFRHN1FSNWlyN2dPa2Z6?= =?utf-8?B?d3NzL1RGUkczOVk0V1N2TGRETXZldHVZZDg4T1hLMTVub1JDUzBrNXpCbDMv?= =?utf-8?B?clpZdkRtWXZkcU1zK0dTR0c2dDNjcmhRNUhmNlhVNVBOcDdTT25QdVYvOHJt?= =?utf-8?Q?6STFDSu10GWFLje+6WQTA6XeFpco5noAqWBrZPX?= X-OriginatorOrg: t2data.com X-MS-Exchange-CrossTenant-Network-Message-Id: 64c66427-4173-4c2e-4628-08d988244987 X-MS-Exchange-CrossTenant-AuthSource: AS8P251MB0167.EURP251.PROD.OUTLOOK.COM X-MS-Exchange-CrossTenant-AuthAs: Internal X-MS-Exchange-CrossTenant-OriginalArrivalTime: 05 Oct 2021 17:19:28.4991 (UTC) X-MS-Exchange-CrossTenant-FromEntityHeader: Hosted X-MS-Exchange-CrossTenant-Id: 27928da5-aacd-4ba1-9566-c748a6863e6c X-MS-Exchange-CrossTenant-MailboxType: HOSTED X-MS-Exchange-CrossTenant-UserPrincipalName: kHc1SE3Li3zm6oXxAMBy3lKFxmCkfbbmEw1hXc4osHF0st5X7VyHSDYp4IKG5ers96xm/Gt+aj+S69DkrTkIry+kp6LRBXqcKp/4hISgz+U= X-MS-Exchange-Transport-CrossTenantHeadersStamped: AS8P251MB0247 X-Spam-Checker-Version: SpamAssassin 3.4.2 (2018-09-13) on metis.ext.pengutronix.de X-Spam-Level: X-Spam-Status: No, score=-2.2 required=4.0 tests=AWL,BAYES_00,DKIM_SIGNED, DKIM_VALID,MSGID_FROM_MTA_HEADER,NICE_REPLY_A,RCVD_IN_DNSWL_NONE, RCVD_IN_MSPIKE_H2,SPF_HELO_PASS,SPF_PASS,URIBL_BLOCKED autolearn=ham autolearn_force=no version=3.4.2 Subject: Re: [ptxdist] SBOM / manifest X-BeenThere: ptxdist@pengutronix.de X-Mailman-Version: 2.1.29 Precedence: list List-Id: PTXdist Development Mailing List List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Reply-To: ptxdist@pengutronix.de, christian.melki@t2data.com Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit Sender: "ptxdist" X-SA-Exim-Connect-IP: 127.0.0.1 X-SA-Exim-Mail-From: ptxdist-bounces@pengutronix.de X-SA-Exim-Scanned: No (on metis.ext.pengutronix.de); SAEximRunCond expanded to false On 10/5/21 15:58, Alexander Dahl wrote: > Hei hei, > > On Tue, Oct 05, 2021 at 09:38:55AM -0400, Akshay Bhat wrote: >> Is there a way of generating a SBOM (Software Bill of Materials) i.e. >> list all the software packages installed on the target with the >> associated version and license info for a ptx-dist? Something similar >> 'make legal-info' in buildroot. > > You can generate a license report like this: > > ptxdist make license-report > > You'll find the report in platform-foo/report as .pdf afterwards. > >> The closest I could find was: >> ptxdist list-packages | xargs ptxdist package-info | grep -e package: >> -e version: -e license: >> >> Also are there any plans in the roadmap for supporting a SPDX SBOM? I'd second an implementation of a SPDX export of package usage, licence, patch modifications and link dependencies. It's much more usable with something like SPDX instead of a pdf. > > Not sure. But the documentation has some hints: > > https://www.ptxdist.org/doc/dev_licenses.html > > HTH & Greets > Alex > > > _______________________________________________ > ptxdist mailing list > ptxdist@pengutronix.de > To unsubscribe, send a mail with subject "unsubscribe" to ptxdist-request@pengutronix.de > _______________________________________________ ptxdist mailing list ptxdist@pengutronix.de To unsubscribe, send a mail with subject "unsubscribe" to ptxdist-request@pengutronix.de