[{"id":3674379,"web_url":"http://patchwork.ozlabs.org/comment/3674379/","msgid":"<3deeef5d-fe26-4935-b127-f1ac64ad3e93@rnout.be>","list_archive_url":null,"date":"2026-04-07T19:25:03","subject":"Re: [Buildroot] [PATCH 0/4] make utils/generate-cyclonedx runnable\n with Buildroot host packages","submitter":{"id":90612,"url":"http://patchwork.ozlabs.org/api/people/90612/","name":"Arnout Vandecappelle","email":"arnout@rnout.be"},"content":"Hi Quentin,\n\n I didn't look at your series in any detail, but one thing jumped out at me.\n\nOn 07/04/2026 19:37, Quentin Schulz via buildroot wrote:\n> It may be beneficial to be able to run the script from Buildroot host\n> packages to avoid external dependencies. I for example build Buildroot\n> within some ancient container where I don't have a recent-enough Python\n> to run generate-cyclonedx with. I already build host Python as part of\n> my build, so it seems like a good opportunity to reuse it for running\n> generate-cyclonedx with it instead of going for a separate container\n> just for running that script.\n> \n> This however required a few changes. First, I needed to enable\n> BR2_PACKAGE_HOST_PYTHON3_BZIP2 otherwise importing the bz2 module would\n> fail.\n> However after looking at the code deeper, there isn't a way right now\n> for this script to actually receive a compressed patch to parse,\n> therefore instead of requiring that option to be selected, the\n> compression \"support\" is removed from the script entirely.\n> \n> Then, I got hit by Python telling me it does not know what HTTPS is. The\n> issue was that the ssl (well, technically _ssl) module wasn't built\n> unless BR2_PACKAGE_HOST_PYTHON3_SSL is enabled and without that, no\n> HTTPS support.\n> \n> Going further, Python would then complain that it cannot verify the\n> certificates. The answer was to build a host variant of ca-certificates\n> for host Python to use.\n\n In other words, host-python's _ssl doesn't use the system-installed \ncertificates? I think that's pretty bad. We generally want host tools to be \nrather hermetic, but specifically ca-certificates need to be up to date. If \nyou're using an unmodified Buildroot 2026.05 ten years from now, then it's \nlikely that some of the certificates in current ca-certificates bundle have \nexpired, and you again get download failures... And if the system's \nca-certificates is not up to date, there will be stuff that you won't be able to \ndownload anyway - maybe you can't even download ca-certificates itself, so we \n_have_ to assume the system ca-certificates is up-to-date.\n\n In other words - I think the better option is to make sure that _ssl uses the \nsystem certificates.\n\n (Of course, I may have completely misunderstood the issue.)\n\n Oh, I actually see what the problem is: host-openssl sets\n--openssldir=$(HOST_DIR)/etc/ssl - and it has to, because it installs a bunch of \nfiles in there. So perhaps the solution is to symlink /etc/ssl/certs to \n$(HOST_DIR)/etc/ssl?\n\n Regards,\n Arnout\n\n> Another option is to go for host-python-certifi\n> instead, with the following diff:\n> \n> diff --git a/utils/generate-cyclonedx b/utils/generate-cyclonedx\n> index fad0671166..461743692e 100755\n> --- a/utils/generate-cyclonedx\n> +++ b/utils/generate-cyclonedx\n> @@ -51,7 +51,13 @@ if not SPDX_SCHEMA_PATH.exists():\n> # Download the CycloneDX SPDX schema JSON, and cache it locally\n> cyclonedxpath.mkdir(parents=True, exist_ok=True)\n> try:\n> - urllib.request.urlretrieve(SPDX_SCHEMA_URL, SPDX_SCHEMA_PATH)\n> + import ssl\n> + import certifi\n> +\n> + context = ssl.create_default_context(cafile=certifi.where())\n> + with urllib.request.urlopen(SPDX_SCHEMA_URL, context=context) as response, \\\n> + open(SPDX_SCHEMA_PATH, \"wb\") as f:\n> + f.write(response.read())\n> except urllib.error.URLError as e:\n> if \"CERTIFICATE_VERIFY_FAILED\" in str(e.reason):\n> raise Exception(\"Couldn't verify certificate. Try enabling BR2_PACKAGE_HOST_CA_CERTIFICATES.\")\n> \n> The downside is that users running this script externally from Buildroot\n> will need to install certifi Python module to run the script. I guess\n> we could run urlretrieve first and if it fails, then fallback to\n> certifi. What do you think?\n> \n> So, this adds a couple of messages hinting at the user what may be\n> missing for generate-cyclonedx to run. Note that\n> BR2_PACKAGE_HOST_PYTHON3_SSL and BR2_PACKAGE_HOST_CA_CERTIFICATES are\n> optional, they only are needed if the SPDX schema isn't available yet.\n> One can also decide to download it externally with wget/curl in the\n> appropriate location and avoid having to build host ca-certificates\n> and/or host Python with ssl support (it does bring host-libopenssl\n> after all!).\n> \n> Signed-off-by: Quentin Schulz \n> ---\n> Quentin Schulz (4):\n> utils/generate-cyclonedx: remove \"support\" for bz2 and gzip compressed patches\n> utils/generate-cyclonedx: better error message when host Python is built without ssl\n> package/ca-certificates: enable host package variant\n> utils/generate-cyclonedx: hint at missing Buildroot host package on a specific error\n> \n> package/Config.in.host | 1 +\n> package/ca-certificates/Config.in.host | 12 ++++++++++++\n> package/ca-certificates/ca-certificates.mk | 30 ++++++++++++++++++++++++++++++\n> utils/generate-cyclonedx | 29 +++++++++++++++--------------\n> 4 files changed, 58 insertions(+), 14 deletions(-)\n> ---\n> base-commit: ac4c32f6f839d1b813125e64f0e23a98922ac602\n> change-id: 20260407-generate-cyclonedx-br-2b2d2561072c\n> \n> Best regards,\n> --\n> Quentin Schulz \n> \n> _______________________________________________\n> buildroot mailing list\n> buildroot@buildroot.org\n> https://lists.buildroot.org/mailman/listinfo/buildroot","headers":{"Return-Path":"","X-Original-To":["incoming-buildroot@patchwork.ozlabs.org","buildroot@buildroot.org"],"Delivered-To":["patchwork-incoming-buildroot@legolas.ozlabs.org","buildroot@buildroot.org"],"Authentication-Results":["legolas.ozlabs.org;\n\tdkim=pass (2048-bit key;\n unprotected) header.d=buildroot.org header.i=@buildroot.org\n header.a=rsa-sha256 header.s=default header.b=kSJ8KHYK;\n\tdkim-atps=neutral","legolas.ozlabs.org;\n spf=pass (sender SPF authorized) smtp.mailfrom=buildroot.org\n (client-ip=2605:bc80:3010::137; helo=smtp4.osuosl.org;\n envelope-from=buildroot-bounces@buildroot.org; receiver=patchwork.ozlabs.org)"],"Received":["from smtp4.osuosl.org (smtp4.osuosl.org [IPv6:2605:bc80:3010::137])\n\t(using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)\n\t key-exchange x25519 server-signature ECDSA (secp384r1) server-digest SHA384)\n\t(No client certificate requested)\n\tby legolas.ozlabs.org (Postfix) with ESMTPS id 4fqx3x6StRz1yGM\n\tfor ;\n Wed, 08 Apr 2026 05:25:16 +1000 (AEST)","from localhost (localhost [127.0.0.1])\n\tby smtp4.osuosl.org (Postfix) with ESMTP id 11BB5403C5;\n\tTue, 7 Apr 2026 19:25:15 +0000 (UTC)","from smtp4.osuosl.org ([127.0.0.1])\n by localhost (smtp4.osuosl.org [127.0.0.1]) (amavis, port 10024) with ESMTP\n id MRIZrmoAqK_v; Tue, 7 Apr 2026 19:25:13 +0000 (UTC)","from lists1.osuosl.org (lists1.osuosl.org [140.211.166.142])\n\tby smtp4.osuosl.org (Postfix) with ESMTP id BAE0B403B1;\n\tTue, 7 Apr 2026 19:25:13 +0000 (UTC)","from smtp3.osuosl.org (smtp3.osuosl.org [IPv6:2605:bc80:3010::136])\n by lists1.osuosl.org (Postfix) with ESMTP id B73D9237\n for ; Tue, 7 Apr 2026 19:25:11 +0000 (UTC)","from localhost (localhost [127.0.0.1])\n by smtp3.osuosl.org (Postfix) with ESMTP id A880E606F4\n for ; Tue, 7 Apr 2026 19:25:11 +0000 (UTC)","from smtp3.osuosl.org ([127.0.0.1])\n by localhost (smtp3.osuosl.org [127.0.0.1]) (amavis, port 10024) with ESMTP\n id 7MJeR_izqCJp for ;\n Tue, 7 Apr 2026 19:25:10 +0000 (UTC)","from mail.nubo.coop (mail2.nubo.coop [79.99.201.12])\n by smtp3.osuosl.org (Postfix) with ESMTPS id 74FBE6063F\n for ; Tue, 7 Apr 2026 19:25:10 +0000 (UTC)","from [127.0.0.1] (localhost [127.0.0.1]) by localhost (Mailerdaemon)\n with ESMTPSA id 1031EB97BBAD; Tue, 7 Apr 2026 21:25:05 +0200 (CEST)"],"X-Virus-Scanned":["amavis at osuosl.org","amavis at osuosl.org"],"X-Comment":"SPF check N/A for local connections - client-ip=140.211.166.142;\n helo=lists1.osuosl.org; envelope-from=buildroot-bounces@buildroot.org;\n receiver= ","DKIM-Filter":["OpenDKIM Filter v2.11.0 smtp4.osuosl.org BAE0B403B1","OpenDKIM Filter v2.11.0 smtp3.osuosl.org 74FBE6063F"],"DKIM-Signature":"v=1; a=rsa-sha256; c=relaxed/relaxed; d=buildroot.org;\n\ts=default; t=1775589913;\n\tbh=bS1dy7vtsc3BrBHUKjimZjyUHXsdA7ZOuDQFZMyibcw=;\n\th=Date:To:Cc:References:In-Reply-To:Subject:List-Id:\n\t List-Unsubscribe:List-Archive:List-Post:List-Help:List-Subscribe:\n\t From:Reply-To:From;\n\tb=kSJ8KHYKjF8NTuLUqq5GZDhdpHQzIcAUf/6hdJBkQ7dkalQhp7IbZhsA0OuKNyKzd\n\t JFwBfrRtxsGnCAvYGhqLSd6FLo+lcFgFwnqmiSzuS2GhVvI/0OY876+yTIGVuaS16v\n\t I7EEQG53mpioZdqeCgl8VrbX031+0O4m56UP74H9dUwSlnPCmpDlzk6BJ6DOAApuka\n\t sIG7+rjgLQBfHFVd5fZjbXfms3Vl67WsZkryEB8nZ4T0wg4GNYjmjdSiEv2ED5c25B\n\t 2vM/6RtpPEGZ0QKgbUajFahhzRlB1N8fulZ+5bWttcsrMzS5A6I2rDG3yUIDjO5h0R\n\t Sb0Da4mngQy5g==","Received-SPF":"Pass (mailfrom) identity=mailfrom; client-ip=79.99.201.12;\n helo=mail.nubo.coop; envelope-from=arnout@rnout.be; receiver=","DMARC-Filter":"OpenDMARC Filter v1.4.2 smtp3.osuosl.org 74FBE6063F","Message-ID":"<3deeef5d-fe26-4935-b127-f1ac64ad3e93@rnout.be>","Date":"Tue, 7 Apr 2026 21:25:03 +0200","MIME-Version":"1.0","User-Agent":"Mozilla Thunderbird","To":"Quentin Schulz , buildroot@buildroot.org","Cc":"Thomas Perale , Martin Bark ,\n Thomas Petazzoni ,\n Quentin Schulz ","References":"<20260407-generate-cyclonedx-br-v1-0-03c45ccba2ed@cherry.de>","Content-Language":"en-GB, fr-BE","In-Reply-To":"<20260407-generate-cyclonedx-br-v1-0-03c45ccba2ed@cherry.de>","X-Last-TLS-Session-Version":"TLSv1.3","X-Mailman-Original-DKIM-Signature":"v=1; a=rsa-sha256; c=relaxed/relaxed;\n d=rnout.be; s=dkim;\n t=1775589907; h=from:subject:date:message-id:to:cc:mime-version:content-type:\n content-transfer-encoding:content-language:in-reply-to:references;\n bh=qEYf7J8rMa7timwKBnq/UHG33bmtFDHXDEZq5TXrevg=;\n b=X5K5I+T4APpw0/CWuFSIXUSv50GOk28kkxLYbqzCMNqz/4pIGD4G49lPsyInll7kKFSJ7Y\n WGxNKiXwUyd3HzGGqcxcBID5Ec3nqs9vCAV1tux9zTdPyo+mB2PdnC4nDkY19InwrKVORS\n 7O6HKj3VfWJRCUdb35/MlpvwzuBrd2ERJmpgR+qlgnEtKmtKVDEkKmfAaMhUihftxhQ/AR\n zox2TzcUJ/WLieyrhSRK9EixLiM9FUvCLP8BMPlnJJ9BFHNMSoqkg1Nw3umRiXY2lNqtoJ\n z+WiNO6AztEw087JpKhEVYBFh9VEYxDJnCYCauV1u2D3GPz7+v9Ig84JsOGwvw==","X-Mailman-Original-Authentication-Results":["smtp3.osuosl.org;\n dmarc=pass (p=reject dis=none)\n header.from=rnout.be","smtp3.osuosl.org;\n dkim=pass (2048-bit key) header.d=rnout.be header.i=@rnout.be\n header.a=rsa-sha256 header.s=dkim header.b=X5K5I+T4"],"Subject":"Re: [Buildroot] [PATCH 0/4] make utils/generate-cyclonedx runnable\n with Buildroot host packages","X-BeenThere":"buildroot@buildroot.org","X-Mailman-Version":"2.1.30","Precedence":"list","List-Id":"Discussion and development of buildroot ","List-Unsubscribe":",\n ","List-Archive":"","List-Post":"","List-Help":"","List-Subscribe":",\n ","From":"Arnout Vandecappelle via buildroot ","Reply-To":"Arnout Vandecappelle ","Content-Transfer-Encoding":"7bit","Content-Type":"text/plain; charset=\"us-ascii\"; Format=\"flowed\"","Errors-To":"buildroot-bounces@buildroot.org","Sender":"\"buildroot\" "}},{"id":3674704,"web_url":"http://patchwork.ozlabs.org/comment/3674704/","msgid":"","list_archive_url":null,"date":"2026-04-08T10:28:09","subject":"Re: [Buildroot] [PATCH 0/4] make utils/generate-cyclonedx runnable\n with Buildroot host packages","submitter":{"id":88431,"url":"http://patchwork.ozlabs.org/api/people/88431/","name":"Fiona Klute","email":"fiona.klute@gmx.de"},"content":"Hi Quentin!\n\nAm 07.04.26 um 19:37 schrieb Quentin Schulz via buildroot:\n> It may be beneficial to be able to run the script from Buildroot host\n> packages to avoid external dependencies. I for example build Buildroot\n> within some ancient container where I don't have a recent-enough Python\n> to run generate-cyclonedx with. I already build host Python as part of\n> my build, so it seems like a good opportunity to reuse it for running\n> generate-cyclonedx with it instead of going for a separate container\n> just for running that script.\n> \n> This however required a few changes. First, I needed to enable\n> BR2_PACKAGE_HOST_PYTHON3_BZIP2 otherwise importing the bz2 module would\n> fail.\n> However after looking at the code deeper, there isn't a way right now\n> for this script to actually receive a compressed patch to parse,\n> therefore instead of requiring that option to be selected, the\n> compression \"support\" is removed from the script entirely.\n> \n> Then, I got hit by Python telling me it does not know what HTTPS is. The\n> issue was that the ssl (well, technically _ssl) module wasn't built\n> unless BR2_PACKAGE_HOST_PYTHON3_SSL is enabled and without that, no\n> HTTPS support.\n\nHow about creating host packages for generate-cyclonedx and the \nCycloneDX schema (in a way that the script still works standalone, if \nall dependencies are available)? That'd completely sidestep the HTTPS \nissue and work offline after \"make source\".\n\nI'm very much in favor of clear errors and removing broken, unused code \nin any case. :-)\n\nBest regards,\nFiona\n\n> Going further, Python would then complain that it cannot verify the\n> certificates. The answer was to build a host variant of ca-certificates\n> for host Python to use. Another option is to go for host-python-certifi\n> instead, with the following diff:\n> \n> diff --git a/utils/generate-cyclonedx b/utils/generate-cyclonedx\n> index fad0671166..461743692e 100755\n> --- a/utils/generate-cyclonedx\n> +++ b/utils/generate-cyclonedx\n> @@ -51,7 +51,13 @@ if not SPDX_SCHEMA_PATH.exists():\n> # Download the CycloneDX SPDX schema JSON, and cache it locally\n> cyclonedxpath.mkdir(parents=True, exist_ok=True)\n> try:\n> - urllib.request.urlretrieve(SPDX_SCHEMA_URL, SPDX_SCHEMA_PATH)\n> + import ssl\n> + import certifi\n> +\n> + context = ssl.create_default_context(cafile=certifi.where())\n> + with urllib.request.urlopen(SPDX_SCHEMA_URL, context=context) as response, \\\n> + open(SPDX_SCHEMA_PATH, \"wb\") as f:\n> + f.write(response.read())\n> except urllib.error.URLError as e:\n> if \"CERTIFICATE_VERIFY_FAILED\" in str(e.reason):\n> raise Exception(\"Couldn't verify certificate. Try enabling BR2_PACKAGE_HOST_CA_CERTIFICATES.\")\n> \n> The downside is that users running this script externally from Buildroot\n> will need to install certifi Python module to run the script. I guess\n> we could run urlretrieve first and if it fails, then fallback to\n> certifi. What do you think?\n> \n> So, this adds a couple of messages hinting at the user what may be\n> missing for generate-cyclonedx to run. Note that\n> BR2_PACKAGE_HOST_PYTHON3_SSL and BR2_PACKAGE_HOST_CA_CERTIFICATES are\n> optional, they only are needed if the SPDX schema isn't available yet.\n> One can also decide to download it externally with wget/curl in the\n> appropriate location and avoid having to build host ca-certificates\n> and/or host Python with ssl support (it does bring host-libopenssl\n> after all!).\n> \n> Signed-off-by: Quentin Schulz \n> ---\n> Quentin Schulz (4):\n> utils/generate-cyclonedx: remove \"support\" for bz2 and gzip compressed patches\n> utils/generate-cyclonedx: better error message when host Python is built without ssl\n> package/ca-certificates: enable host package variant\n> utils/generate-cyclonedx: hint at missing Buildroot host package on a specific error\n> \n> package/Config.in.host | 1 +\n> package/ca-certificates/Config.in.host | 12 ++++++++++++\n> package/ca-certificates/ca-certificates.mk | 30 ++++++++++++++++++++++++++++++\n> utils/generate-cyclonedx | 29 +++++++++++++++--------------\n> 4 files changed, 58 insertions(+), 14 deletions(-)\n> ---\n> base-commit: ac4c32f6f839d1b813125e64f0e23a98922ac602\n> change-id: 20260407-generate-cyclonedx-br-2b2d2561072c\n> \n> Best regards,\n> --\n> Quentin Schulz \n> \n> _______________________________________________\n> buildroot mailing list\n> buildroot@buildroot.org\n> https://lists.buildroot.org/mailman/listinfo/buildroot","headers":{"Return-Path":"","X-Original-To":["incoming-buildroot@patchwork.ozlabs.org","buildroot@buildroot.org"],"Delivered-To":["patchwork-incoming-buildroot@legolas.ozlabs.org","buildroot@buildroot.org"],"Authentication-Results":["legolas.ozlabs.org;\n\tdkim=pass (2048-bit key;\n unprotected) header.d=buildroot.org header.i=@buildroot.org\n header.a=rsa-sha256 header.s=default header.b=ZA0FCpAK;\n\tdkim-atps=neutral","legolas.ozlabs.org;\n spf=pass (sender SPF authorized) smtp.mailfrom=buildroot.org\n (client-ip=2605:bc80:3010::138; helo=smtp1.osuosl.org;\n envelope-from=buildroot-bounces@buildroot.org; receiver=patchwork.ozlabs.org)"],"Received":["from smtp1.osuosl.org (smtp1.osuosl.org [IPv6:2605:bc80:3010::138])\n\t(using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)\n\t key-exchange x25519 server-signature ECDSA (secp384r1) server-digest SHA384)\n\t(No client certificate requested)\n\tby legolas.ozlabs.org (Postfix) with ESMTPS id 4frK5t2BBxz1yD3\n\tfor ;\n Wed, 08 Apr 2026 20:28:18 +1000 (AEST)","from localhost (localhost [127.0.0.1])\n\tby smtp1.osuosl.org (Postfix) with ESMTP id A4A168217A;\n\tWed, 8 Apr 2026 10:28:16 +0000 (UTC)","from smtp1.osuosl.org ([127.0.0.1])\n by localhost (smtp1.osuosl.org [127.0.0.1]) (amavis, port 10024) with ESMTP\n id U_MU12BBlc3z; Wed, 8 Apr 2026 10:28:15 +0000 (UTC)","from lists1.osuosl.org (lists1.osuosl.org [140.211.166.142])\n\tby smtp1.osuosl.org (Postfix) with ESMTP id A7A3F821B6;\n\tWed, 8 Apr 2026 10:28:15 +0000 (UTC)","from smtp2.osuosl.org (smtp2.osuosl.org [IPv6:2605:bc80:3010::133])\n by lists1.osuosl.org (Postfix) with ESMTP id DC49B237\n for ; Wed, 8 Apr 2026 10:28:14 +0000 (UTC)","from localhost (localhost [127.0.0.1])\n by smtp2.osuosl.org (Postfix) with ESMTP id CDD55400C2\n for ; Wed, 8 Apr 2026 10:28:14 +0000 (UTC)","from smtp2.osuosl.org ([127.0.0.1])\n by localhost (smtp2.osuosl.org [127.0.0.1]) (amavis, port 10024) with ESMTP\n id sxFlNGNk8rCI for ;\n Wed, 8 Apr 2026 10:28:14 +0000 (UTC)","from mout.gmx.net (mout.gmx.net [212.227.17.21])\n by smtp2.osuosl.org (Postfix) with ESMTPS id 3D24E40057\n for ; Wed, 8 Apr 2026 10:28:12 +0000 (UTC)","from client.hidden.invalid by mail.gmx.net (mrgmx104\n [212.227.17.168]) with ESMTPSA (Nemesis) id 1MYNJq-1vwj1s1PXO-00RpoO; Wed, 08\n Apr 2026 12:28:10 +0200"],"X-Virus-Scanned":["amavis at osuosl.org","amavis at osuosl.org"],"X-Comment":"SPF check N/A for local connections - client-ip=140.211.166.142;\n helo=lists1.osuosl.org; envelope-from=buildroot-bounces@buildroot.org;\n receiver= ","DKIM-Filter":["OpenDKIM Filter v2.11.0 smtp1.osuosl.org A7A3F821B6","OpenDKIM Filter v2.11.0 smtp2.osuosl.org 3D24E40057"],"DKIM-Signature":"v=1; a=rsa-sha256; c=relaxed/relaxed; d=buildroot.org;\n\ts=default; t=1775644095;\n\tbh=9EPp1q0RNaVkeWm2ijjhSKRIVYWSLW5dqZoxSW64VcA=;\n\th=Date:To:Cc:References:In-Reply-To:Subject:List-Id:\n\t List-Unsubscribe:List-Archive:List-Post:List-Help:List-Subscribe:\n\t From:Reply-To:From;\n\tb=ZA0FCpAKe3Zj+Zo8HZqo5VwZrMcVD7XD47AQJ9XNy6UOumvNfhtJLe7rXhJAxg9KG\n\t +zDbAfQIWYix2RZKzr4dUo10eIIkuCW//kxL9p7Jxd+F0c0EZ++7Gr6XjfYPnvhSYi\n\t N5D8gcftsRG58VLLi01xqQt9uNpxKt7a8o1NNWUQ3vDgIwxiusAh6HaqCKpFfg5PYu\n\t q9pNa21az9SMD65quV8n2Mc2rsKaaEcYISIWyxa2NscMTndvTHnlRVsgOESNp6HBCJ\n\t N81Dyhjp9lko63U6AohjAOHSN4mG7fM/YXjVKyucstudKopsZyE5rPkXNpu/ixAvXM\n\t ngIlRMWn0wYtw==","Received-SPF":"Pass (mailfrom) identity=mailfrom; client-ip=212.227.17.21;\n helo=mout.gmx.net; envelope-from=fiona.klute@gmx.de; receiver=","DMARC-Filter":"OpenDMARC Filter v1.4.2 smtp2.osuosl.org 3D24E40057","X-UI-Sender-Class":"724b4f7f-cbec-4199-ad4e-598c01a50d3a","Message-ID":"","Date":"Wed, 8 Apr 2026 12:28:09 +0200","MIME-Version":"1.0","User-Agent":"Mozilla Thunderbird","To":"Quentin Schulz , buildroot@buildroot.org","Cc":"Thomas Perale , Martin Bark ,\n Thomas Petazzoni ,\n Quentin Schulz ","References":"<20260407-generate-cyclonedx-br-v1-0-03c45ccba2ed@cherry.de>","Content-Language":"en-US, de-DE-1901, de-DE","Autocrypt":"addr=fiona.klute@gmx.de; keydata=\n xsFNBFrLsicBEADA7Px5KipL9zM7AVkZ6/U4QaWQyxhqim6MX88TxZ6KnqFiTSmevecEWbls\n ppqPES8FiSl+M00Xe5icsLsi4mkBujgbuSDiugjNyqeOH5iqtg69xTd/r5DRMqt0K93GzmIj\n 7ipWA+fomAMyX9FK3cHLBgoSLeb+Qj28W1cH94NGmpKtBxCkKfT+mjWvYUEwVdviMymdCAJj\n Iabr/QJ3KVZ7UPWr29IJ9Dv+SwW7VRjhXVQ5IwSBMDaTnzDOUILTxnHptB9ojn7t6bFhub9w\n xWXJQCsNkp+nUDESRwBeNLm4G5D3NFYVTg4qOQYLI/k/H1N3NEgaDuZ81NfhQJTIFVx+h0eT\n pjuQ4vATShJWea6N7ilLlyw7K81uuQoFB6VcG5hlAQWMejuHI4UBb+35r7fIFsy95ZwjxKqE\n QVS8P7lBKoihXpjcxRZiynx/Gm2nXm9ZmY3fG0fuLp9PQK9SpM9gQr/nbqguBoRoiBzONM9H\n pnxibwqgskVKzunZOXZeqyPNTC63wYcQXhidWxB9s+pBHP9FR+qht//8ivI29aTukrj3WWSU\n Q2S9ejpSyELLhPT9/gbeDzP0dYdSBiQjfd5AYHcMYQ0fSG9Tb1GyMsvh4OhTY7QwDz+1zT3x\n EzB0I1wpKu6m20C7nriWnJTCwXE6XMX7xViv6h8ev+uUHLoMEwARAQABzSBGaW9uYSBLbHV0\n ZSA8ZmlvbmEua2x1dGVAZ214LmRlPsLBlAQTAQgAPgIbIwULCQgHAwUVCgkICwUWAgMBAAIe\n AQIXgBYhBOTTE4/i2fL6gVL9ke6nJs4hI1pYBQJn9S5IBQkQ6+MhAAoJEO6nJs4hI1pYvz0P\n /34nPCo/g0WbeJB6N75/1EkM9gDD1+lT4GdFEYYnCzslSxrIsL3kWuzG2kpqrErU8i7Ao/B2\n iE3J9NinRe613xlVUy2CU1VKaekm3YTkcfR7u8G/STNEQ42S46+3JRBMlLg1YldRsfVXq8tc\n jdwo193h4zrEeEmUDm8n43BPBhhwNRf+igtI8cNVyn9nBt6BrDnSswg497lrRjGjoP2zTkLT\n Q/Sb/6rCHoyFAxVcicA7n2xvaW0Pg0rTOrtA9mVku5J3zqyS4ABtoUwPmyoTLa7vpZdC33hy\n g7+srYNdo9a1i9OKF+CK9q/4auf3bMMeJB472Q5N8yuthM+Qx8ICySElyVDYSbbQIle/h/L7\n XYgm4oE1CxwiVCi8/Y/GOqhHt+RHLRGG1Ic+btNTiW+R+4W4yGUxL7qLwepIMY9L/0UcdnUa\n OBJk4waEX2mgOTmyjKR0FAGtaSH1ebz2UbY6pz5H9tZ4BIX7ZcQN0fLZLoi/SbbF+WJgT4cd\n 8BooqbaNRoglaNCtTsJ7oyDesL9l0pzQb/ni1HGAXKW3WBq49r7uPOsDBP8ygyoAOYw4b/TX\n qUjJYpp9HcoQHv0sybSbXCFUMnL1E5WUhy8bBjA9fNtU43Fv3OR2n5/5xSn6o33XVMYMtkrN\n 0AvEfAOGGOMJWktEYA7rxy0TQiy0ttUq0eQszsFNBGQ1Nr0BEADTlcWyLC5GoRfQoYsgyPgO\n Z4ANz31xoQf4IU4i24b9oC7BBFDE+WzfsK5hNUqLADeSJo5cdTCXw5Vw3eSSBSoDP0Q9OUdi\n PNEbbblZ/tSaLadCm4pyh1e+/lHI4j2TjKmIO4vw0K59Kmyv44mW38KJkLmGuZDg5fHQrA9G\n 4oZLnBUBhBQkPQvcbwImzWWuyGA+jDEoE2ncmpWnMHoc4Lzpn1zxGNQlDVRUNnRCwkeclm55\n Dz4juffDWqWcC2NrY5KkjZ1+UtPjWMzRKlmItYlHF1vMqdWAskA6QOJNE//8TGsBGAPrwD7G\n cv4RIesk3Vl2IClyZWgJ67pOKbLhu/jz5x6wshFhB0yleOp94I/MY8OmbgdyVpnO7F5vqzb1\n LRmfSPHu0D8zwDQyg3WhUHVaKQ54TOmZ0Sjl0cTJRZMyOmwRZUEawel6ITgO+QQS147IE7uh\n Wa6IdWKNQ+LGLocAlTAi5VpMv+ne15JUsMQrHTd03OySOqtEstZz2FQV5jSS1JHivAmfH0xG\n fwxY6aWLK2PIFgyQkdwWJHIaacj0Vg6Kc1/IWIrM0m3yKQLJEaL5WsCv7BRfEtd5SEkl9wDI\n pExHHdTplCI9qoCmiQPYaZM5uPuirA5taUCJEmW9moVszl6nCdBesG2rgH5mvgPCMAwsPOz9\n 7n+uBiMk0ZSyTQARAQABwsF8BBgBCAAmAhsMFiEE5NMTj+LZ8vqBUv2R7qcmziEjWlgFAmf1\n LrEFCQeCXvQACgkQ7qcmziEjWljtgBAAnsoRDd6TlyntiKS8aJEPnFjcFX/LqujnCT4/eIn1\n bpbIjNbGH9Toz63H5JkqqXWcX1TKmlZGHZT2xU/fKzjcyTJzji9JP+z1gQl4jNESQeqO1qEO\n kqYe6/hZ5v/yCjpv2Y1sqBnPXKcm21fkyzUwYKPuX9O1Sy1VmP1rMzIRQHXnNapJJWn0wJAW\n 079YqdX1NzESJyj4stoLxIcDMkIEvOy3uhco8Bm8wS88MquJoR0KlyBR30QZy9KoxmTiWKws\n Mn6sy4aX9nac3W0pD+EyR+j/J9SWSvOENAmn4Km+ONxz93+oVLWb+KHtQQloxOsadO0wwiaZ\n xUT7vJcxSgjrHugSs+mOLznX/D8PfG/+tYLFlddphcOGldzH0rxKfs53BplAUe+LEZY1AU8p\n 0WDK2h097ZQ0eZiVZlvAKSjwsjow2tpqwamtfNKrFg/GFRbNZcoQuYsf3vBW1CiZ5JQ6Vh2A\n bCn+vBDsJwD9Hcht1eVRxnIq745SQ0naL48Q3HGpKdXZpJoBQZ8bSAFhRSb3m+P4PE272rLY\n 6FCkqS+UeX7RBpPkkIDoL7WS9HdvDHuQ751D56WkTnIpoF+sgW6tOEcfgFrYf3rVvh6G3B8S\n FPSOJuHYnwzMFrDNxQQKb0uS/j1s2dnlS55MouCvd5pShM5iRFzE7k3CMeS4NkhFim0=","In-Reply-To":"<20260407-generate-cyclonedx-br-v1-0-03c45ccba2ed@cherry.de>","X-Provags-ID":"V03:K1:wPp4xlbe9IzaKcSOwK+7AMW2//RJ7qoSzsv9Xwl8rKwvqfzYju0\n zr6xxbvClEJNbV/jzJeUMyoiv7hgM+yUeDp/4AboiSGDmgWVrVb6piafmX0Ps7g3L9icEXu\n UVJT4zIkePIpfmmk+ebH8X406wesOKhchoOyOpZeeTt4VO9eud6bcYtU7NuJacESi5lpXqn\n uczuqWiO5YXLng6O+fO1g==","UI-OutboundReport":"notjunk:1;M01:P0:GfL+oWMDMo0=;smTPay04UXdqRGH7t7hmmEHPdko\n Dd0YRwqo65uYHrZVmQA2/+a7ashh1GZ3elyPIlwvwyS/8Oyy+ClkfeorEl5H1/5u0QCqgSNaP\n wNelKuIL6tr1MZO8gy9+5YGBNO/A//2oknHkf88wDqzm1G/3nFlKo75DLYb8CKynBboNEB9rL\n qWzebzxWykNlO9SuGLaGhZ0FZHT0rnpdpaUfEfnvsk2KBQnJ6j7yyu1Ltw4KUvDP5o/clrnsU\n XjVT9GpjzV4ct3+UtoT9BuqWJh4smXH8th80hSbG4RWi8z+/Q9eVTCRcN41c8sYfr/1fiIokz\n TvANqMnVusGUoXG8EHruVPfSUTHzJ82z2swqIEe5QTZdZDj0v5d96/B0W20KQsJIPoUqUPEji\n qWS+nM9qmyRQY+3pqP/Cg6JUPSZwI64A9mbxD7g4oqVU3Dh/QadSpCoPpE4PbYz+UlSfqn9hK\n Z/2Kfto4QTOhQi2IaGjCcJsTBlDGOKYoDlZOJ3fSmKG7Jcatxjbv5A52rU5H9922wLu11GeHX\n 2xldDYgGcQfaa26vXFnXE/Jyv1h4xhP5j61pE6uO7yo0uZHOI31baMkUezrK/U9Pcamm14QwG\n IwgIcK4nZvn/C0D7LwGCK0YAjeZDHqhj7jwO9lOWRRtfy0Zn3Ng2FYnRntLKuHXdAjkCpXhjF\n RRMrnMMlGYkbqFOLzO3JobeFIphHR87ur4ZCZNF0tAA3N3fk7gsoJ6bsuuWA8XFrj/o/3pRT7\n KP5SeP6V9r0XywbWtj9ogvftTdvWOiHHGBNEVvuGmN/ML3d85sjAmSioj0k1i/MAx/Ue+fHES\n jtXUZJyvsW4tuQbRaZfiz/gtQo5zWiMU4XZ1WC3btKGZKzcAksB9Nn/PSnb5OuaiYEMinv/3S\n /Ne9grYIzBVEuWTLMVH3qR9lKg3l6dz9h3H/yaOUyU4TGK6Oc8ccb9sm5fqyPLhgp8acS84r+\n WraY/YMilCg9vwsN+fTjt26UsYAI4MfR8ro00G7ozs5TgZUBACBec3/GYxRyZ8SmQgjc9nXBf\n 7gq5f5AHtBUBlVni+NJj9dmeLAUUbOH9okL+yFxY0k338JZ3vTaN6Y4cF1wIxJoWEp/Q7B8j8\n 1uQqcEQNP0BuYUqOYKLOdug0bo1tmJbMIZxsjLDsiqN6jGedMuRi61KdZr/6u/q3sIs9VxNtY\n 2f1Idcvu7mOtYI2sR3juJ1Jwg86MMQtdCyQmcekdwfrfBDDWfpy2vHKfNQfZPyMATBEBiLx2k\n 1iBypyasaf+Lng9VC2c+5i6QT7ShpqLxnvmet4MfIMXPtj881XPnGV4xhI+nq7y9bAFCVunYp\n f+ibrQNjbNpXIO2mLSCI1On7KUmw92QutCVXpyDHK750RcTQOkCW4jODxfKWCkuvPaLjupySC\n 7d063AT8Rda2f292LqWgNZHIVQjB0IGGfXkpIwSXIpjZmM4aMqR2sj5vAZRB0zIbqhnEM/ZeY\n jxu6IvSU8l8gevgQaK1HF43uROTps1hcxOCSzJghFI1FJWkihaO/Ztv2RN2H8a5rdW+2Cn90c\n db2q8GBQonQAMh9AGTFBWKcIFC1mKBJeRZuh6NTFXiJjk86ohuBmBOnnLmFerl+9EB9VJLIVn\n g4B6296r3l0L3Bll3S0/Dt9qsjY5YIJV5KzJby3mbe0ZHOKBYjaELQaPcYpUSitrIkSUjTrT9\n sSxpMhL92lw3VH3Uehy4DxREuOiAQzuzKqTQqwAIDyDZObuRtQZEu3UPa42KcKLelkiQo3HJb\n MI5jiJd8ZTByGuh7RzEP9fDBUROkaYfWQLnBSb4H+ynjmD5BOXWbpMaQ1HIqbAnkHVES2NbrY\n 6yjanSF8W9TQWMWo0ZKNNc9XAR2oS0iiLGfcsOWXytYx5UjpMk06TIL0fBgjNOjPTTAer2neu\n h8/xbo8L6tzgsZOV4scy0RAY+amgh6C4yvNfA1k/F6FOA2yYnVKuynzysEAneeOsbb+gTWjkD\n FyGBJBCCb7sqlmaSZfefMDNoxa6GkTGt69p6XmZdfO1rRIL1noXtn+NwAbOo+QJHLf2GoCu5H\n FSyw2VGqa6UYdCiRZR9EQ+e1X12cm42mwXomYbZNa8aWkRzSrDyYylOPNdXFjbdLXRXflBg5t\n aUzDJxsG+RGao30lJP//Th7JsTAmgBlm8XqI9RTKu7+JU9wg8C5oBcFXA990ak6+l10CrtgAZ\n gDlktxnTk5i7c3aW0PczeAC1RGRleb8z3v39WgA7IJyMj8T4NZiAmDOnPtQldNfqFmNJMNoA6\n nB8WQV0kib+Vj62Pb0JVYHmwHtVzCZY1Es9KA0Y/qQFiYK2mLhTy5TRA8WuTZSHKfT/84eQgY\n UVo6MLGuaaa+GPe6qJRGQE5mpLXeJ0crJsYhG9n11daWm/acULxAt/cr0amI3Rw3YMs4eP+vP\n D8AnXB88Ekw+Tk1YGRI5uKZFJTjjjBDq5DEm8nudgbjGVIoN5o3JW3XMVhLjj0pO1sLEbUyK/\n X7O23IMTdWHZiycvAMaa8Yy1swyZ0gfZ6/16qghtQ11Gi51GB48tn8sTw537T3U6Bo8y1y3a7\n +3dwSp9Bs9OTZChCNmaF0daRSKs4ANn57b/w1GueNTahbBdBoTC/5ssaGPSZUjcppgtoj1AIf\n 7CgSLpK6WKlWaKurl9DNfYqc6JwlUFkGlj3/CNqW9PEkIqqvpcQINjyjSV9vlnauao7wnl8F3\n RmcNrkPaSuSHbML8t/mS3suYF8Bw/P5ZJ1TG780jmMlEIryeSZlKZbgRwQbdxgwP/RksLeqJg\n n5OoClbNQezbFJ6KgSnEGR2XETt+e8TjuFQm0MVO0sGu2nh5VOnC72MoxmDJH2dBojqmy8K7+\n SEkmU16pWTvLGWb0yqgCCLRi8cw59aTr58ousFYsl2pdh7DgFBJMg22UKzoEb/7crTUn/ArnY\n PxmnZ2AUQp+smB/KYIsZc1WMzAxwqx45DlXJAN2UtgKUrdd5fbY34ZBH7wrxrAOUV/r8icdI6\n J2DHeH8eBEFbdaUajUF0iingk719meyJRuC4Ujh3l6dxNGRdhubIr4UKJBrKDyv7tW9rnrJqV\n wQt8L0EQjJp1fksKQFMQMnqbGlECizDntqD5/3Y/QNJf0un4Xt2QtayhAslvpN0PNYHpyUxB+\n +htGIqlpqBC6nNgR3mq9yoeiawM8EpwmCw5FKzLGFUjnq/LRdbP6RbL14tILQ+W7CF1MjzyJr\n xi9nzxQIdjJxAjQ93afSml1ZOxTDO7CjBi3XCaoXnW6Di3AannxP8Bb4jobOjkca+unL5TPg1\n +/1s/Y9YNpzikCqHLCYPC9LeN1W16hEnWnpgODG+vAX8RN1tOUXIE1JQDKd+BUHssCR6xLKc+\n LzF39dk1hQCLq1XfTfVY1+G6i6NS8iZ/rnDFy9GlUp7Nep8bL/tcCFx++jQZURUcIkYWiiAbs\n lqd8Wpi1n5wONblqUdJA2UPRrSwBRCBP7wY+ZdhH1BjcDnsWSzO6EaDHTViyLVo7YdJxAojqd\n DtfYA9jvrj1mvMLZBJdcjxPbjljwv/McDLUQdEVR4uhHHFMyG/HakiclGqdiuVnx1YvHQw4a3\n XeM6c/17lwuN0yNVbwFsdoMI8Ua3ns7xmHtM0435h2d+qmYDe+nBs11Xg+BHnEB0IrH6EAByM\n oyCAArPTvB4/cds3Ut+Jy1U0CJwQ5DlzaoTkA85E4G0hnbATIXVtAEc9VB0t43i52O1Arjn4Z\n oVxiFhCvBbnLjgGQskYJflggwWOfnEGUhD0Er/G5Yy6W2tO3vze94wVpVvOCmSTdooIWfhz1L\n 1Gnm78rIbKIG1AVV/EbfrgVPMdShNd/qYBrYFsFuvR93D7CsMSwatJjGmKDrSE4E+joUc5q14\n QVTY+W8QCl6jOOAFdnQWfN7a5s81lDGqcoTUUrWHLs1MXHhZisS7epTFKmifEZRnglUUJIO17\n OfLjx+ZnzfDO00RrKDb+XJfTfV+KQw5e2vPZHQh6wtF9HsqtKL4pI8WENA5gOH0ciKO16qxRD\n HBNSOWUg3RUuA+PgoKtCy5H7DYIfcC/9d2bw6wFoolJAJ4o1X3lNyqXKZKOBjnYuZNRCS39jU\n 54XKvDrJopMpzS/Xye0AzBdx/cPHjBPyPb/TFzYXe6LOYDE5+iyyk8hU3sZcNgwL7NjHuv6Lx\n nJfSm8wXa9+vm5B7XYhQK3P9MmjPfeSoXcnu31h4vyMGYBHEt7VqCH8z3nXPdRoaeOheXbSgX\n EJ/FQpsn00x43yLLoGiwVQUOF4pprXI1VuY+KSHYuR9FRbN/a2knuhyIgZyUdxXNLAn+LQQoJ\n OrsxzK+WENQjzUEclxQl1GshnxvLmMhuD5RyBeLaYwSykjEFo/UaH8abCPp4HUpnnER1Dv4b0\n vZ4vHmaSzZCsaRrEWWO+eZ9NhE2J9+ERcqfeKdBnH1sEZt2UYvc16WentILKq6Y6Drvs+6M/g\n x0/A+uTjRCrQwKvqf1azg519ZyFUMxcPVe37EesuQ5DnBL0NP4Mo2QUDtZNSpGUD6xBTteH9U\n fMIBlS5cnRD5bG92Uf97JaqxmQOQrTRP3hQnyhU939/J3fz7LHKnSn03z7255bjIKAuTsssf9\n Zr0zQiAb593ek3M8TO+mGW/rWWunyKkcOSRSFt1sK1a4BDNjwrjdWyqmfjUgfRg4/+wxA+3+e\n EvvRKQzMot3TTLBkBcaRmv0/hd4tTJGsp2PZRk614wNkWlle55oE9BlhIDzqW/dXd1issOBwW\n GFjXjfl2VmRErdSH/+ImYDov0RlzMttib6B1ZVEPnkY+BBuqIW1BgNNOFy0WFDmrXj0ZDNxw3\n BeFBh/x45RD//4DTtr3tL+Pmq+8uKP1YkZOPvJjMVedOkyWDPKqDRJIZU2YIdjSWn85TVFiO6\n CWfG1HJrTXI/5jyWliF0Ok00uoKf59CNmTEQL2/b1l4PRUdS9qp+iGaZamQ4Yq52SXw1PDEXr\n 814Mqrp/i2MX1ozHkf1cASmr9vdnkkZISRjH5LhwZG0AIfUnAKhDfVY2l8OJhy5V0JRwsIUKW\n IEHC5VwHY4x5vOl1xsLxVz8QFzTSzeFiVwDxeYpxgEmPnG0dFacqfmySvjnKcPaYr+W7XkGpD\n VUNu0CcjOEy8G1dw8E2UIwg5IsfBbtqsCbC0PtHQAatt7rmKSvEDnDO+CVcDWFLpwa/uh/Ihe\n LPImjdUVngPcjj9kqTvyME5/AIk2Ax6bIpil0zs6jcYIMbrRJ5YW3LQyEIiIq7TpIF7nqAAQp\n KzQBzonjtINSJaepIO4V2+Z6DbvgWRSmKighYZtGrt/BBkTW1oipmABnROkyYze0HK76l5Di+\n Cxa3C02CZjiSN7feimd0qk/N/wEp5wJsKFA/nmSGDirujF3s4EW+DArEJweYyekJYTR/oIx4q\n oRRk/XuoxPvgUzXQJl1l2JV6ewfHM5ijLhVIOFkvxcn3JLNdJ48gOnoRZM24XAA4NBkoUy237\n uQXuKV7c0ScaBh897Doyp1aIayoWzqkKZzyV362SYHdRo=","X-Mailman-Original-DKIM-Signature":"v=1; a=rsa-sha256; c=relaxed/relaxed;\n d=gmx.de;\n s=s31663417; t=1775644090; x=1776248890; i=fiona.klute@gmx.de;\n bh=ZftjgHozYK8zSAJheTdrl65fmSZr7NSTRUpPsuNj5tQ=;\n h=X-UI-Sender-Class:Message-ID:Date:MIME-Version:Subject:To:Cc:\n References:From:In-Reply-To:Content-Type:\n Content-Transfer-Encoding:cc:content-transfer-encoding:\n content-type:date:from:message-id:mime-version:reply-to:subject:\n to;\n b=ezPDhG57TXPykGir/onPPPgMBRzvSjs9LjVYc4UTAqFvYSJX9+Zk+Z86ns5kA36m\n yImGY+RdZGK/3UsputzrSs1ZTE3OHApZNRi9QZ/hZ/zsDCMEN0JMBq5doG7C2I7Ua\n x/y5dy4pxQkouUwkgH567SgOA9RwjA7xqBdoSQLXKvFHuPHe3OXv5KPQEh4d20E9Q\n 8Hd9MVt3DU3qjUaNJMIqCUzg7n4HeaXO+C7M3YCwrRiqH+wB6D3cC9OM/Yp8mKk1o\n l7T6rcC/X23vlaI/KEUdlYO1vyIDs7vRkXjZmWUAU3n/SuArhDx1Cj80zqfX3ZMPb\n xV7wB1P50pkYauhmUQ==","X-Mailman-Original-Authentication-Results":["smtp2.osuosl.org;\n dmarc=pass (p=quarantine dis=none)\n header.from=gmx.de","smtp2.osuosl.org;\n dkim=pass (2048-bit key,\n unprotected) header.d=gmx.de header.i=fiona.klute@gmx.de header.a=rsa-sha256\n header.s=s31663417 header.b=ezPDhG57"],"Subject":"Re: [Buildroot] [PATCH 0/4] make utils/generate-cyclonedx runnable\n with Buildroot host packages","X-BeenThere":"buildroot@buildroot.org","X-Mailman-Version":"2.1.30","Precedence":"list","List-Id":"Discussion and development of buildroot ","List-Unsubscribe":",\n ","List-Archive":"","List-Post":"","List-Help":"","List-Subscribe":",\n ","From":"Fiona Klute via buildroot ","Reply-To":"Fiona Klute ","Content-Transfer-Encoding":"7bit","Content-Type":"text/plain; charset=\"us-ascii\"; Format=\"flowed\"","Errors-To":"buildroot-bounces@buildroot.org","Sender":"\"buildroot\" "}},{"id":3674710,"web_url":"http://patchwork.ozlabs.org/comment/3674710/","msgid":"","list_archive_url":null,"date":"2026-04-08T11:01:22","subject":"Re: [Buildroot] [PATCH 0/4] make utils/generate-cyclonedx runnable\n with Buildroot host packages","submitter":{"id":88462,"url":"http://patchwork.ozlabs.org/api/people/88462/","name":"Quentin Schulz","email":"quentin.schulz@cherry.de"},"content":"Hi Fiona,\n\nOn 4/8/26 12:28 PM, Fiona Klute wrote:\n> Hi Quentin!\n> \n> Am 07.04.26 um 19:37 schrieb Quentin Schulz via buildroot:\n>> It may be beneficial to be able to run the script from Buildroot host\n>> packages to avoid external dependencies. I for example build Buildroot\n>> within some ancient container where I don't have a recent-enough Python\n>> to run generate-cyclonedx with. I already build host Python as part of\n>> my build, so it seems like a good opportunity to reuse it for running\n>> generate-cyclonedx with it instead of going for a separate container\n>> just for running that script.\n>>\n>> This however required a few changes. First, I needed to enable\n>> BR2_PACKAGE_HOST_PYTHON3_BZIP2 otherwise importing the bz2 module would\n>> fail.\n>> However after looking at the code deeper, there isn't a way right now\n>> for this script to actually receive a compressed patch to parse,\n>> therefore instead of requiring that option to be selected, the\n>> compression \"support\" is removed from the script entirely.\n>>\n>> Then, I got hit by Python telling me it does not know what HTTPS is. The\n>> issue was that the ssl (well, technically _ssl) module wasn't built\n>> unless BR2_PACKAGE_HOST_PYTHON3_SSL is enabled and without that, no\n>> HTTPS support.\n> \n> How about creating host packages for generate-cyclonedx and the \n> CycloneDX schema (in a way that the script still works standalone, if \n> all dependencies are available)? That'd completely sidestep the HTTPS \n> issue and work offline after \"make source\".\n> \n\nI like that idea. This would also take care of generate-cyclonedx being \nrun in parallel and installing the file to a shared DL_DIR without an \nflock. The issue I'm seeing however is how to handle different versions \nof the CycloneDX schema?\nThere are patches available \n(https://patchwork.ozlabs.org/project/buildroot/patch/20260311140457.140041-6-thomas.perale@mind.be/) \nfor using 1.7 instead of 1.6 for example. We won't know which CycloneDX \nversion the user wants to use with generate-cyclonedx since we cannot \nrun generate-cyclonedx as part of the image (since it depends on the \noutput of make show-info?).\n\nDo we go for multiple packages, each for a specific CycloneDX version, \nand they can all be selected independently if desired?\n\nThe other issue I'm seeing is mostly design or politics, how to have a \npackage using a file from utils/. Is this possible, allowed, wanted? I'm \nbusy with \nhttps://lore.kernel.org/buildroot/dff355c7-7539-4eb5-99d9-446e01cfeafd@cherry.de/T/#m2e71c34c76f5b2fbab145466a4307d6275217b4e \nat the moment but I'll check later if we already have such packages in-tree.\n\nCheers,\nQuentin","headers":{"Return-Path":"","X-Original-To":["incoming-buildroot@patchwork.ozlabs.org","buildroot@buildroot.org"],"Delivered-To":["patchwork-incoming-buildroot@legolas.ozlabs.org","buildroot@buildroot.org"],"Authentication-Results":["legolas.ozlabs.org;\n\tdkim=pass (2048-bit key;\n unprotected) header.d=buildroot.org header.i=@buildroot.org\n header.a=rsa-sha256 header.s=default header.b=cOzdU08c;\n\tdkim-atps=neutral","legolas.ozlabs.org;\n spf=pass (sender SPF authorized) smtp.mailfrom=buildroot.org\n (client-ip=2605:bc80:3010::136; helo=smtp3.osuosl.org;\n envelope-from=buildroot-bounces@buildroot.org; receiver=patchwork.ozlabs.org)"],"Received":["from smtp3.osuosl.org (smtp3.osuosl.org [IPv6:2605:bc80:3010::136])\n\t(using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)\n\t key-exchange x25519 server-signature ECDSA (secp384r1) server-digest SHA384)\n\t(No client certificate requested)\n\tby legolas.ozlabs.org (Postfix) with ESMTPS id 4frKrL2tmTz1yD6\n\tfor ;\n Wed, 08 Apr 2026 21:01:38 +1000 (AEST)","from localhost (localhost [127.0.0.1])\n\tby smtp3.osuosl.org (Postfix) with ESMTP id 29A5160E2A;\n\tWed, 8 Apr 2026 11:01:36 +0000 (UTC)","from smtp3.osuosl.org ([127.0.0.1])\n by localhost (smtp3.osuosl.org [127.0.0.1]) (amavis, port 10024) with ESMTP\n id cmbVsGg5SBZp; Wed, 8 Apr 2026 11:01:34 +0000 (UTC)","from lists1.osuosl.org (lists1.osuosl.org [140.211.166.142])\n\tby smtp3.osuosl.org (Postfix) with ESMTP id 27C1C6083F;\n\tWed, 8 Apr 2026 11:01:34 +0000 (UTC)","from smtp4.osuosl.org (smtp4.osuosl.org [IPv6:2605:bc80:3010::137])\n by lists1.osuosl.org (Postfix) with ESMTP id 504482C7\n for ; Wed, 8 Apr 2026 11:01:32 +0000 (UTC)","from localhost (localhost [127.0.0.1])\n by smtp4.osuosl.org (Postfix) with ESMTP id 4271440E8B\n for ; Wed, 8 Apr 2026 11:01:32 +0000 (UTC)","from smtp4.osuosl.org ([127.0.0.1])\n by localhost (smtp4.osuosl.org [127.0.0.1]) (amavis, port 10024) with ESMTP\n id mCxvaBmi_reb for ;\n Wed, 8 Apr 2026 11:01:31 +0000 (UTC)","from AM0PR02CU008.outbound.protection.outlook.com\n (mail-westeuropeazlp170130006.outbound.protection.outlook.com\n [IPv6:2a01:111:f403:c201::6])\n by smtp4.osuosl.org (Postfix) with ESMTPS id 34BB840E83\n for ; Wed, 8 Apr 2026 11:01:30 +0000 (UTC)","from DBBPR04MB7737.eurprd04.prod.outlook.com (2603:10a6:10:1e5::22)\n by GVXPR04MB10564.eurprd04.prod.outlook.com (2603:10a6:150:215::9)\n with Microsoft SMTP Server (version=TLS1_2,\n cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.9769.17; Wed, 8 Apr\n 2026 11:01:23 +0000","from DBBPR04MB7737.eurprd04.prod.outlook.com\n ([fe80::5960:fb4b:9313:2b00]) by DBBPR04MB7737.eurprd04.prod.outlook.com\n ([fe80::5960:fb4b:9313:2b00%4]) with mapi id 15.20.9769.016; Wed, 8 Apr 2026\n 11:01:23 +0000"],"X-Virus-Scanned":["amavis at osuosl.org","amavis at osuosl.org"],"X-Comment":"SPF check N/A for local connections - client-ip=140.211.166.142;\n helo=lists1.osuosl.org; envelope-from=buildroot-bounces@buildroot.org;\n receiver= ","DKIM-Filter":["OpenDKIM Filter v2.11.0 smtp3.osuosl.org 27C1C6083F","OpenDKIM Filter v2.11.0 smtp4.osuosl.org 34BB840E83"],"DKIM-Signature":"v=1; a=rsa-sha256; c=relaxed/relaxed; d=buildroot.org;\n\ts=default; t=1775646094;\n\tbh=YZr8+cNmEzrwf+Nzz8dMYBDY7yLybkd1w8WJvyp6q/U=;\n\th=Date:To:Cc:References:In-Reply-To:Subject:List-Id:\n\t List-Unsubscribe:List-Archive:List-Post:List-Help:List-Subscribe:\n\t From:Reply-To:From;\n\tb=cOzdU08cIUgIV9h+Ze5smzq2vEqoZfRfeL/gsgmTlXzGE6nXO5DpP/y/Y04ZnxHGg\n\t zaPKryTvAVtgPkwGHzKzK+LoVdWhVZdSC35PSH8J0N/TAGIiCFo5hUvmFUqWuKtI6y\n\t Ubf+80FfOWyTucCAwffiA0RSCjltwl9bMBjZG7id1zrJZ8kUkLv2mYJtwysb/rs4RB\n\t 6YNjM9KVldm7eu4VHsLEQkAvsYsfIKIet2z0SvW9MFb9qGQ2IMYORD2MPRojE1ckWp\n\t CAOxrl21j4y5jBF6S0ifPF8+jjeY53PKlpwGNiVp1O/ydDLmQ7SGXsiuyBoXYftUHW\n\t 731U7qIdvvMCw==","Received-SPF":"Pass (mailfrom) identity=mailfrom;\n client-ip=2a01:111:f403:c201::6;\n helo=am0pr02cu008.outbound.protection.outlook.com;\n envelope-from=quentin.schulz@cherry.de; receiver=","DMARC-Filter":"OpenDMARC Filter v1.4.2 smtp4.osuosl.org 34BB840E83","ARC-Seal":"i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none;\n b=doxHEgWD7RUaDMJEomrnli0ZbBDBEs4uCE0xKpvN2cRMeyvXdozLmDIyvQFvgad8CFS9H4+WToWyMcBFY4Eg5vh851aEF0gQFqDgfxfRECxrYBT8m7VUjg0xv7PyZWMO3gNehEQacVms7o23GutLECFgZfDe9pQJwm6DocElFjIY/rWsHNYBhBRFk5Qw/dLWxGaKQ63rCS5hMY/UG5RCHxF0WLRehBRDxF9Z1wijRKJABbIngm6aGkK9vRbL8HF8b4E8OOt5zs7Txy3G5+ZdJps+XqrLbofNVmTVBiypYhpDth3rI6iqwhTcvP/37DuSYpWlrXLzWEmyrQf+0ahr6Q==","ARC-Message-Signature":"i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;\n s=arcselector10001;\n h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1;\n bh=LzYacM21NZZilMNOr7vmhiTOL+IBOw+gQDMbDPfak90=;\n b=Oa8MptG6sm/dfoaoWBx7vIWF2o0r/QjRbIU6Umr26xNYYC+7dCC8rXBLJ/6d7ulX8cHtMeMmsT+2okdL8w2106RUQOF+BfzVizsXtTKTI1uTFnh1v9Puui0myYJ/KzXcGFz1tBUUsYzsRw8dlAu9TPzGdwAc5WVofKeSM2b5mfDNVsuLqi8Z1bpKy47x77QY+HR1c98CYAumbUrFCVfG6OS3siXndvriq+lPAtDBw5w1SAYZhJ9AUkrOBYFDRLVGmxmkrWjiHRQV9htzf9O/JpCaKX3/acVtF3b1AWdEwmiA5fZj2+GU9vcK5yphIkm8x6GW3Gl8sCbeSvSwvWBpyw==","ARC-Authentication-Results":"i=1; mx.microsoft.com 1; spf=pass\n smtp.mailfrom=cherry.de; dmarc=pass action=none header.from=cherry.de;\n dkim=pass header.d=cherry.de; arc=none","Message-ID":"","Date":"Wed, 8 Apr 2026 13:01:22 +0200","User-Agent":"Mozilla Thunderbird","To":"Fiona Klute ,\n Quentin Schulz , buildroot@buildroot.org","Cc":"Thomas Perale , Martin Bark ,\n Thomas Petazzoni ","References":"<20260407-generate-cyclonedx-br-v1-0-03c45ccba2ed@cherry.de>\n ","Content-Language":"en-US","In-Reply-To":"","X-ClientProxiedBy":"VI1PR09CA0142.eurprd09.prod.outlook.com\n (2603:10a6:803:12c::26) To DBBPR04MB7737.eurprd04.prod.outlook.com\n (2603:10a6:10:1e5::22)","MIME-Version":"1.0","X-MS-PublicTrafficType":"Email","X-MS-TrafficTypeDiagnostic":"DBBPR04MB7737:EE_|GVXPR04MB10564:EE_","X-MS-Office365-Filtering-Correlation-Id":"3b0f8567-88ed-4903-a5e0-08de955e2c16","X-MS-Exchange-SenderADCheck":"1","X-MS-Exchange-AntiSpam-Relay":"0","X-Microsoft-Antispam":"BCL:0;\n ARA:13230040|376014|1800799024|10070799003|366016|22082099003|18002099003|56012099003;","X-Microsoft-Antispam-Message-Info":"\n 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","X-Forefront-Antispam-Report":"CIP:255.255.255.255; CTRY:; LANG:en; SCL:1; SRV:;\n IPV:NLI; SFV:NSPM; H:DBBPR04MB7737.eurprd04.prod.outlook.com; PTR:; CAT:NONE;\n SFS:(13230040)(376014)(1800799024)(10070799003)(366016)(22082099003)(18002099003)(56012099003);\n DIR:OUT; SFP:1101;","X-MS-Exchange-AntiSpam-MessageData-ChunkCount":"1","X-MS-Exchange-AntiSpam-MessageData-0":"=?utf-8?q?lijAAIEVUP44bQ4yMeVkM3aEbr13?=\n\t=?utf-8?q?arBgR6xLkYoiRS8uqHJZT47GjGLOV/15RMX/i5jlhJ0Y6PLLfQ2lFg9b4e0iz2sJq?=\n\t=?utf-8?q?mzq3vBxr0ZkPhxBXvSlf7ol4IqBh/5IFVdoRurpNaHltJDydeiKDEgyqNu/c7wN6a?=\n\t=?utf-8?q?vSbCR5P0NqcG+KMZDZViVOLcBfIvBqxu5mJ3PmoNluKA0Isf7cRH0XewhXoeq1uox?=\n\t=?utf-8?q?koPxbxHx+7dG1EkLayZ+Sb3u4vOOhe6IumVuxjGpO7TG235ABrtXPR2fb+jt7iPSm?=\n\t=?utf-8?q?9RFErEsq4U7c1ifAdUUPjkbrLISrSttpAicI1H163qby6RTa3jP3wTCjxHWp+J6G3?=\n\t=?utf-8?q?W4K2f6agBZKXQ0Mry2QZZZvP117Kj4mZjao1gE6iqXwlKJhlRyNcQk1dvO4rNidAO?=\n\t=?utf-8?q?oZwTL4HyllCQZXvjUQzxRHVC6MSHV6FnAHmmCHKsyuBccjpA7zZqVIjlxFv722wUY?=\n\t=?utf-8?q?jMdq4ERJNNAc2K1VgSKPMlNwzbVgIk6HO6AgRIbsD8J+chIXRCulBcFT0rzTFUA8T?=\n\t=?utf-8?q?O34Xs4sYSwSyqvYlownykzcrwqAG2xeaXmr2IfENNA/Izb0fhy2x7OwLvTSS0APiv?=\n\t=?utf-8?q?aC7HIpo7AiICtQ0U51iSgFcVrMC5sdPpwfSY8jIInv4etUeKHKMQGlseSSd9lPVyX?=\n\t=?utf-8?q?GZAwVbbwxUzMfezTW3y6ME3la3EBP2EAwavyB7YHwUxNGk00BDYrcSljAeM08gkEv?=\n\t=?utf-8?q?uvCQU5HRgbwzs0ldwOz9QIKt52/vRjXd4wf8xWkHd4XikYtqXNjlAQOAISe+Oez8u?=\n\t=?utf-8?q?POuZicktjKeZTO9nbt3biUv2Tin17OoqxGNGXqQETqnVxQ1W/8uRIMivnR5WB7KX2?=\n\t=?utf-8?q?OKy2fAZD2clxpAomvD0PfLNoe4jAmslhc6hHoBy8ZLgQnkuXrkheCynIwLWId1dsl?=\n\t=?utf-8?q?kxh8cK/BSxmkpEt+Q+dD6JNhvDHThX9Vu/cijrzBcnPdNIJXmheHDkkBfj73GJIbk?=\n\t=?utf-8?q?nqVzLV6CQBxGlUz2FG66l0IhaRD2sWfollS48S+3KUqLwIdhIMPrsB+G5PO7XoA9j?=\n\t=?utf-8?q?2jco1hRr/MseLzN4LCqkFYpHW+hrjLFvne+6CPoLtirAjskN9Wegl0ne8xbn01o1l?=\n\t=?utf-8?q?QeomiPkNk8aGNAUv/9pT+PAuznT6zrNGobP4jAz9HXndedEQruMr9nJaKDAQinqtK?=\n\t=?utf-8?q?IbC2PJ1wAVwa97aBmcIS3jY9eyp54xMY0D+jQ8Jnaz9A9LxZPyxKDAlHVWa1iff+L?=\n\t=?utf-8?q?DUwpqUALFJo2i40G9GSSf4umZ8EsJEQ6WAuDp+/ils+kzLXkA6Yfq+vYuNmT3ejwg?=\n\t=?utf-8?q?lTuYWewaiqCwr1xP/GrmVN6tuyvrvAiGOEIjtqTKe9LvpD9iuH08Gk/71lJD1VtKu?=\n\t=?utf-8?q?FZFI/3Pbmky9XKKED1DlNr84H+kLO3Dm1Fkl0Uq7WEOJlEjOAqNzMkOwVI1FWvF4j?=\n\t=?utf-8?q?GX4t2eAn+WdnXvriFdUu9CXlodsiERfjtApaKZ1bAjzRZxHFw1jxKFDXx2ShyEOF6?=\n\t=?utf-8?q?V31TGQuy4kFcBTiiPfJK38KzTIBKufTrp7ffYx4BJBWI18e8fCNrIUMeAbQEsm5TR?=\n\t=?utf-8?q?kOttqUmsHB/zXZiQqoELyodLj1Lwt4+YfYqT5J/1jaXsKdHXV5hPQIkX916tMMCbF?=\n\t=?utf-8?q?MI4sJWip+OtOUCvIFSeDQSNKHixAXxHL5gc/xnDGKIoo9pWrXRwlQzBgjUI86Dmi4?=\n\t=?utf-8?q?n67u6Ck6TSdyXH6baO3+J9JTxOfdRzLpbW1sAZ/U27cR4XWUQEnzGmXoYRidDo+4z?=\n\t=?utf-8?q?ZM2Xqd7sO?=","X-OriginatorOrg":"cherry.de","X-MS-Exchange-CrossTenant-Network-Message-Id":"\n 3b0f8567-88ed-4903-a5e0-08de955e2c16","X-MS-Exchange-CrossTenant-AuthSource":"DBBPR04MB7737.eurprd04.prod.outlook.com","X-MS-Exchange-CrossTenant-AuthAs":"Internal","X-MS-Exchange-CrossTenant-OriginalArrivalTime":"08 Apr 2026 11:01:23.4097 (UTC)","X-MS-Exchange-CrossTenant-FromEntityHeader":"Hosted","X-MS-Exchange-CrossTenant-Id":"5e0e1b52-21b5-4e7b-83bb-514ec460677e","X-MS-Exchange-CrossTenant-MailboxType":"HOSTED","X-MS-Exchange-CrossTenant-UserPrincipalName":"\n rhqpXHAaXTU6NJSMqSE6gXC02kk8epbJBI5GK+1FAfGx+mfluNnlnJ5KQouFNLuwHk0RawGxwiUll1EORDC5JNIP91Rza5EAXazaScbwNPc=","X-MS-Exchange-Transport-CrossTenantHeadersStamped":"GVXPR04MB10564","X-Mailman-Original-DKIM-Signature":"v=1; a=rsa-sha256; c=relaxed/relaxed;\n d=cherry.de; s=selector1;\n h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck;\n bh=LzYacM21NZZilMNOr7vmhiTOL+IBOw+gQDMbDPfak90=;\n b=m+fEFX1wFt+ROdv+3OrJszM5syVC7PWVt6I/oY5anYbogodNKcjDZ4VhJfscrw5cHaFKTyiyXeIlMXvZmuOZoGmbOGk1HHGpAcvbRPbBUzFeS0tdvhmvpX4L350XVxNQmFT6bAnZTyPxFx5YEcDfdp06yzoLcqHU/j3fH6DtoVo=","X-Mailman-Original-Authentication-Results":["smtp4.osuosl.org;\n dmarc=pass (p=quarantine dis=none)\n header.from=cherry.de","smtp4.osuosl.org;\n dkim=pass (1024-bit key,\n unprotected) header.d=cherry.de header.i=@cherry.de header.a=rsa-sha256\n header.s=selector1 header.b=m+fEFX1w","dkim=none (message not signed)\n header.d=none;dmarc=none action=none header.from=cherry.de;"],"Subject":"Re: [Buildroot] [PATCH 0/4] make utils/generate-cyclonedx runnable\n with Buildroot host packages","X-BeenThere":"buildroot@buildroot.org","X-Mailman-Version":"2.1.30","Precedence":"list","List-Id":"Discussion and development of buildroot ","List-Unsubscribe":",\n ","List-Archive":"","List-Post":"","List-Help":"","List-Subscribe":",\n ","From":"Quentin Schulz via buildroot ","Reply-To":"Quentin Schulz ","Content-Transfer-Encoding":"7bit","Content-Type":"text/plain; charset=\"us-ascii\"; Format=\"flowed\"","Errors-To":"buildroot-bounces@buildroot.org","Sender":"\"buildroot\" "}},{"id":3674838,"web_url":"http://patchwork.ozlabs.org/comment/3674838/","msgid":"<2837d90a-c323-41d0-970a-a7f971d23512@gmx.de>","list_archive_url":null,"date":"2026-04-08T16:00:21","subject":"Re: [Buildroot] [PATCH 0/4] make utils/generate-cyclonedx runnable\n with Buildroot host packages","submitter":{"id":88431,"url":"http://patchwork.ozlabs.org/api/people/88431/","name":"Fiona Klute","email":"fiona.klute@gmx.de"},"content":"Am 08.04.26 um 13:01 schrieb Quentin Schulz:\n> Hi Fiona,\n> \n> On 4/8/26 12:28 PM, Fiona Klute wrote:\n>> Hi Quentin!\n>>\n>> Am 07.04.26 um 19:37 schrieb Quentin Schulz via buildroot:\n>>> It may be beneficial to be able to run the script from Buildroot host\n>>> packages to avoid external dependencies. I for example build Buildroot\n>>> within some ancient container where I don't have a recent-enough Python\n>>> to run generate-cyclonedx with. I already build host Python as part of\n>>> my build, so it seems like a good opportunity to reuse it for running\n>>> generate-cyclonedx with it instead of going for a separate container\n>>> just for running that script.\n>>>\n>>> This however required a few changes. First, I needed to enable\n>>> BR2_PACKAGE_HOST_PYTHON3_BZIP2 otherwise importing the bz2 module would\n>>> fail.\n>>> However after looking at the code deeper, there isn't a way right now\n>>> for this script to actually receive a compressed patch to parse,\n>>> therefore instead of requiring that option to be selected, the\n>>> compression \"support\" is removed from the script entirely.\n>>>\n>>> Then, I got hit by Python telling me it does not know what HTTPS is. The\n>>> issue was that the ssl (well, technically _ssl) module wasn't built\n>>> unless BR2_PACKAGE_HOST_PYTHON3_SSL is enabled and without that, no\n>>> HTTPS support.\n>>\n>> How about creating host packages for generate-cyclonedx and the \n>> CycloneDX schema (in a way that the script still works standalone, if \n>> all dependencies are available)? That'd completely sidestep the HTTPS \n>> issue and work offline after \"make source\".\n>>\n> \n> I like that idea. This would also take care of generate-cyclonedx being \n> run in parallel and installing the file to a shared DL_DIR without an \n> flock. The issue I'm seeing however is how to handle different versions \n> of the CycloneDX schema?\n> There are patches available (https://patchwork.ozlabs.org/project/ \n> buildroot/patch/20260311140457.140041-6-thomas.perale@mind.be/) for \n> using 1.7 instead of 1.6 for example. We won't know which CycloneDX \n> version the user wants to use with generate-cyclonedx since we cannot \n> run generate-cyclonedx as part of the image (since it depends on the \n> output of make show-info?).\n> \n> Do we go for multiple packages, each for a specific CycloneDX version, \n> and they can all be selected independently if desired?\n\nGood point. Maybe one package with version selection from a limited \nrange, like for binutils? After all there's no point in installing a \nschema version generate-cyclonedx does not support. I'd expect that \nversion selection is mostly a matter of matching what other tools \nsupport, not going back and forth all the time.\n\n> The other issue I'm seeing is mostly design or politics, how to have a \n> package using a file from utils/. Is this possible, allowed, wanted? I'm \n> busy with https://lore.kernel.org/buildroot/ \n> dff355c7-7539-4eb5-99d9-446e01cfeafd@cherry.de/T/ \n> #m2e71c34c76f5b2fbab145466a4307d6275217b4e at the moment but I'll check \n> later if we already have such packages in-tree.\nPossible? Definitely, there's no fundamental difference to how packages \ninstall init scripts and similar from the Buildroot repo. Admittedly \ninstalling from outside package/ feels a bit awkward, but there's \nno technical obstacle (and if that's the main issue, maybe move the \nscript and add a symlink in utils/). I'd use _SITE_METHOD = local \nso there's no need to define any other source. Probably some sed \ninvocation to set shebang and default schema location/version to fit the \nhost dir install (or minimal pyproject.toml and optional config that's \nused if installed).\n\nWanted? I have to defer to the maintainers there. ;-)\n\nBest regards,\nFiona","headers":{"Return-Path":"","X-Original-To":["incoming-buildroot@patchwork.ozlabs.org","buildroot@buildroot.org"],"Delivered-To":["patchwork-incoming-buildroot@legolas.ozlabs.org","buildroot@buildroot.org"],"Authentication-Results":["legolas.ozlabs.org;\n\tdkim=pass (2048-bit key;\n unprotected) header.d=buildroot.org header.i=@buildroot.org\n header.a=rsa-sha256 header.s=default header.b=Vsco9Rn2;\n\tdkim-atps=neutral","legolas.ozlabs.org;\n spf=pass (sender SPF authorized) smtp.mailfrom=buildroot.org\n (client-ip=2605:bc80:3010::137; helo=smtp4.osuosl.org;\n envelope-from=buildroot-bounces@buildroot.org; receiver=patchwork.ozlabs.org)"],"Received":["from smtp4.osuosl.org (smtp4.osuosl.org [IPv6:2605:bc80:3010::137])\n\t(using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)\n\t key-exchange x25519 server-signature ECDSA (secp384r1) server-digest SHA384)\n\t(No client certificate requested)\n\tby legolas.ozlabs.org (Postfix) with ESMTPS id 4frSTH4L4Jz1xy1\n\tfor ;\n Thu, 09 Apr 2026 02:00:35 +1000 (AEST)","from localhost (localhost [127.0.0.1])\n\tby smtp4.osuosl.org (Postfix) with ESMTP id AEE0C40657;\n\tWed, 8 Apr 2026 16:00:33 +0000 (UTC)","from smtp4.osuosl.org ([127.0.0.1])\n by localhost (smtp4.osuosl.org [127.0.0.1]) (amavis, port 10024) with ESMTP\n id 6qaJKWWPZGba; Wed, 8 Apr 2026 16:00:32 +0000 (UTC)","from lists1.osuosl.org (lists1.osuosl.org [140.211.166.142])\n\tby smtp4.osuosl.org (Postfix) with ESMTP id 7906A40658;\n\tWed, 8 Apr 2026 16:00:32 +0000 (UTC)","from smtp3.osuosl.org (smtp3.osuosl.org [IPv6:2605:bc80:3010::136])\n by lists1.osuosl.org (Postfix) with ESMTP id CADDA237\n for ; Wed, 8 Apr 2026 16:00:30 +0000 (UTC)","from localhost (localhost [127.0.0.1])\n by smtp3.osuosl.org (Postfix) with ESMTP id BBE8460808\n for ; Wed, 8 Apr 2026 16:00:30 +0000 (UTC)","from smtp3.osuosl.org ([127.0.0.1])\n by localhost (smtp3.osuosl.org [127.0.0.1]) (amavis, port 10024) with ESMTP\n id lvvNr33Aa70n for ;\n Wed, 8 Apr 2026 16:00:30 +0000 (UTC)","from mout.gmx.net (mout.gmx.net [212.227.17.20])\n by smtp3.osuosl.org (Postfix) with ESMTPS id 2319560805\n for ; Wed, 8 Apr 2026 16:00:28 +0000 (UTC)","from client.hidden.invalid by mail.gmx.net (mrgmx105\n [212.227.17.168]) with ESMTPSA (Nemesis) id 1MK3Vu-1vtNeK431a-00Mu06; Wed, 08\n Apr 2026 18:00:23 +0200"],"X-Virus-Scanned":["amavis at osuosl.org","amavis at osuosl.org"],"X-Comment":"SPF check N/A for local connections - client-ip=140.211.166.142;\n helo=lists1.osuosl.org; envelope-from=buildroot-bounces@buildroot.org;\n receiver= ","DKIM-Filter":["OpenDKIM Filter v2.11.0 smtp4.osuosl.org 7906A40658","OpenDKIM Filter v2.11.0 smtp3.osuosl.org 2319560805"],"DKIM-Signature":"v=1; a=rsa-sha256; c=relaxed/relaxed; d=buildroot.org;\n\ts=default; t=1775664032;\n\tbh=36xlXTmlSq5/TzoEvZ0G7Lm7YPFqyej5qGqykjZTkvM=;\n\th=Date:To:Cc:References:In-Reply-To:Subject:List-Id:\n\t List-Unsubscribe:List-Archive:List-Post:List-Help:List-Subscribe:\n\t From:Reply-To:From;\n\tb=Vsco9Rn2AOYz/uC71WPNxspN2B5pEpTZzzcgbqYlJbI6qnLEDNHmZMOnEI9xyVv34\n\t kaaQDD2SVC2W2TfECWRDeqkaJrUKUrBKku94PuqUuY1hJMaSsj2o7T1JccS1qpZRr3\n\t UN8j+e5Iu7+0AEC0p/SDBMK50BfwJKvyGYHIk/gGjANDINrdHv3wiArAo7gSfmrFiy\n\t UdUTEZgozjO5fYWICNS/3rM4SckTACFdWibU/ejYriUJDPqYcmbcxL6uJr3AyLcjS2\n\t QKqFwJbrn0e0g891SohApsg05Akaonl0Yy35DhIxsgk3YiDup5bdtVVeE1fKS8hNja\n\t Lr+QHgyPhpydQ==","Received-SPF":"Pass (mailfrom) identity=mailfrom; client-ip=212.227.17.20;\n helo=mout.gmx.net; envelope-from=fiona.klute@gmx.de; receiver=","DMARC-Filter":"OpenDMARC Filter v1.4.2 smtp3.osuosl.org 2319560805","X-UI-Sender-Class":"724b4f7f-cbec-4199-ad4e-598c01a50d3a","Message-ID":"<2837d90a-c323-41d0-970a-a7f971d23512@gmx.de>","Date":"Wed, 8 Apr 2026 18:00:21 +0200","MIME-Version":"1.0","User-Agent":"Mozilla Thunderbird","To":"Quentin Schulz ,\n Quentin Schulz , buildroot@buildroot.org","Cc":"Thomas Perale , Martin Bark ,\n Thomas Petazzoni ","References":"<20260407-generate-cyclonedx-br-v1-0-03c45ccba2ed@cherry.de>\n \n ","Content-Language":"en-US, de-DE-1901, de-DE","Autocrypt":"addr=fiona.klute@gmx.de; keydata=\n xsFNBFrLsicBEADA7Px5KipL9zM7AVkZ6/U4QaWQyxhqim6MX88TxZ6KnqFiTSmevecEWbls\n ppqPES8FiSl+M00Xe5icsLsi4mkBujgbuSDiugjNyqeOH5iqtg69xTd/r5DRMqt0K93GzmIj\n 7ipWA+fomAMyX9FK3cHLBgoSLeb+Qj28W1cH94NGmpKtBxCkKfT+mjWvYUEwVdviMymdCAJj\n Iabr/QJ3KVZ7UPWr29IJ9Dv+SwW7VRjhXVQ5IwSBMDaTnzDOUILTxnHptB9ojn7t6bFhub9w\n xWXJQCsNkp+nUDESRwBeNLm4G5D3NFYVTg4qOQYLI/k/H1N3NEgaDuZ81NfhQJTIFVx+h0eT\n pjuQ4vATShJWea6N7ilLlyw7K81uuQoFB6VcG5hlAQWMejuHI4UBb+35r7fIFsy95ZwjxKqE\n QVS8P7lBKoihXpjcxRZiynx/Gm2nXm9ZmY3fG0fuLp9PQK9SpM9gQr/nbqguBoRoiBzONM9H\n pnxibwqgskVKzunZOXZeqyPNTC63wYcQXhidWxB9s+pBHP9FR+qht//8ivI29aTukrj3WWSU\n Q2S9ejpSyELLhPT9/gbeDzP0dYdSBiQjfd5AYHcMYQ0fSG9Tb1GyMsvh4OhTY7QwDz+1zT3x\n EzB0I1wpKu6m20C7nriWnJTCwXE6XMX7xViv6h8ev+uUHLoMEwARAQABzSBGaW9uYSBLbHV0\n ZSA8ZmlvbmEua2x1dGVAZ214LmRlPsLBlAQTAQgAPgIbIwULCQgHAwUVCgkICwUWAgMBAAIe\n AQIXgBYhBOTTE4/i2fL6gVL9ke6nJs4hI1pYBQJn9S5IBQkQ6+MhAAoJEO6nJs4hI1pYvz0P\n /34nPCo/g0WbeJB6N75/1EkM9gDD1+lT4GdFEYYnCzslSxrIsL3kWuzG2kpqrErU8i7Ao/B2\n iE3J9NinRe613xlVUy2CU1VKaekm3YTkcfR7u8G/STNEQ42S46+3JRBMlLg1YldRsfVXq8tc\n jdwo193h4zrEeEmUDm8n43BPBhhwNRf+igtI8cNVyn9nBt6BrDnSswg497lrRjGjoP2zTkLT\n Q/Sb/6rCHoyFAxVcicA7n2xvaW0Pg0rTOrtA9mVku5J3zqyS4ABtoUwPmyoTLa7vpZdC33hy\n g7+srYNdo9a1i9OKF+CK9q/4auf3bMMeJB472Q5N8yuthM+Qx8ICySElyVDYSbbQIle/h/L7\n XYgm4oE1CxwiVCi8/Y/GOqhHt+RHLRGG1Ic+btNTiW+R+4W4yGUxL7qLwepIMY9L/0UcdnUa\n OBJk4waEX2mgOTmyjKR0FAGtaSH1ebz2UbY6pz5H9tZ4BIX7ZcQN0fLZLoi/SbbF+WJgT4cd\n 8BooqbaNRoglaNCtTsJ7oyDesL9l0pzQb/ni1HGAXKW3WBq49r7uPOsDBP8ygyoAOYw4b/TX\n qUjJYpp9HcoQHv0sybSbXCFUMnL1E5WUhy8bBjA9fNtU43Fv3OR2n5/5xSn6o33XVMYMtkrN\n 0AvEfAOGGOMJWktEYA7rxy0TQiy0ttUq0eQszsFNBGQ1Nr0BEADTlcWyLC5GoRfQoYsgyPgO\n Z4ANz31xoQf4IU4i24b9oC7BBFDE+WzfsK5hNUqLADeSJo5cdTCXw5Vw3eSSBSoDP0Q9OUdi\n PNEbbblZ/tSaLadCm4pyh1e+/lHI4j2TjKmIO4vw0K59Kmyv44mW38KJkLmGuZDg5fHQrA9G\n 4oZLnBUBhBQkPQvcbwImzWWuyGA+jDEoE2ncmpWnMHoc4Lzpn1zxGNQlDVRUNnRCwkeclm55\n Dz4juffDWqWcC2NrY5KkjZ1+UtPjWMzRKlmItYlHF1vMqdWAskA6QOJNE//8TGsBGAPrwD7G\n cv4RIesk3Vl2IClyZWgJ67pOKbLhu/jz5x6wshFhB0yleOp94I/MY8OmbgdyVpnO7F5vqzb1\n LRmfSPHu0D8zwDQyg3WhUHVaKQ54TOmZ0Sjl0cTJRZMyOmwRZUEawel6ITgO+QQS147IE7uh\n Wa6IdWKNQ+LGLocAlTAi5VpMv+ne15JUsMQrHTd03OySOqtEstZz2FQV5jSS1JHivAmfH0xG\n fwxY6aWLK2PIFgyQkdwWJHIaacj0Vg6Kc1/IWIrM0m3yKQLJEaL5WsCv7BRfEtd5SEkl9wDI\n pExHHdTplCI9qoCmiQPYaZM5uPuirA5taUCJEmW9moVszl6nCdBesG2rgH5mvgPCMAwsPOz9\n 7n+uBiMk0ZSyTQARAQABwsF8BBgBCAAmAhsMFiEE5NMTj+LZ8vqBUv2R7qcmziEjWlgFAmf1\n LrEFCQeCXvQACgkQ7qcmziEjWljtgBAAnsoRDd6TlyntiKS8aJEPnFjcFX/LqujnCT4/eIn1\n bpbIjNbGH9Toz63H5JkqqXWcX1TKmlZGHZT2xU/fKzjcyTJzji9JP+z1gQl4jNESQeqO1qEO\n kqYe6/hZ5v/yCjpv2Y1sqBnPXKcm21fkyzUwYKPuX9O1Sy1VmP1rMzIRQHXnNapJJWn0wJAW\n 079YqdX1NzESJyj4stoLxIcDMkIEvOy3uhco8Bm8wS88MquJoR0KlyBR30QZy9KoxmTiWKws\n Mn6sy4aX9nac3W0pD+EyR+j/J9SWSvOENAmn4Km+ONxz93+oVLWb+KHtQQloxOsadO0wwiaZ\n xUT7vJcxSgjrHugSs+mOLznX/D8PfG/+tYLFlddphcOGldzH0rxKfs53BplAUe+LEZY1AU8p\n 0WDK2h097ZQ0eZiVZlvAKSjwsjow2tpqwamtfNKrFg/GFRbNZcoQuYsf3vBW1CiZ5JQ6Vh2A\n bCn+vBDsJwD9Hcht1eVRxnIq745SQ0naL48Q3HGpKdXZpJoBQZ8bSAFhRSb3m+P4PE272rLY\n 6FCkqS+UeX7RBpPkkIDoL7WS9HdvDHuQ751D56WkTnIpoF+sgW6tOEcfgFrYf3rVvh6G3B8S\n FPSOJuHYnwzMFrDNxQQKb0uS/j1s2dnlS55MouCvd5pShM5iRFzE7k3CMeS4NkhFim0=","In-Reply-To":"","X-Provags-ID":"V03:K1:CuZa+2hZt0qRC+hSUJvKLF96AoijZPXHfij+IwACC4MXFIarzuv\n 9UXxXaVtjSjC5BzqELpnIjMIFs3BcwpbZDfH6qJLme2Vptw1ORPA0HTCCG4WMcGyTYDb6pU\n YeRevNo0c7ddLHF69AKsD6erzXPmf77VMbylZ3losY7WsJfDlJJVALYGQedoHA9bPy/X11/\n SCn/CLZRuac5ZRvKrdiWQ==","UI-OutboundReport":"notjunk:1;M01:P0:uQmNtvylqxw=;NTAPm0DNXg+i4joXNgPP+4z7OO/\n vKqfbnn4B4cxt+MONRh1yWDZ5ICvQEmMYbycS2kWa+rh4MjZj6m9c1N9j+bPYO94OHEpT+k/c\n OKIUPq9bUQbIKkPbV261S23GQOaL0ns8HHJQBUvMX5tWZ6vP03ewG0uKEd46ukhaIqgp/6bp0\n iI5IKCmlODvz6NvNhWyQMlIhrV2Ujo3GMzBhOOkFQFT5KQWCSFBkbQC5jSaM2VDYa1u/02LA/\n NVlMhsByWXbndzMcDoA8tF4xXG3RnZywjCzfFGOjzxhVyrv6U3E2lccKmf1Y2zef70qxbzSiI\n z5J4cbFwKgK2CUadWQcZ8Ww02uPUxMJVMN4KJh8U4b5oXjQjzGpWzwEjbCRE8iuxFEUhqdu5Y\n nZ1LuLsRTeUYEEv7fls9xAW8gKZC9Qass6nBwfq+IftAsWfSjgYBsvoOs3/FqzAonNSTwoEc6\n RKPeD/u9tQlywVTa8oTI1yDl7a0LV2+6Ggab5nqRQYAFSbm4xuHx07XR3fg9zO/lGtSfsaJ+c\n 5H7V8fMgWEsVaR7POlkvePfWEwpCMWH9QrjNOmjEOox0QsKL07Hfnosfoug5MwYRYEEHmLrJT\n KX7xQdo9ujwWmdyvYDIU/C/GPy6O4LcJ0xhLAPs3sUcRGyTSeZ6I+u/LEZ++qUhkJE7ZykUSt\n 1//8DNCOlR6FUWa0c4dzl6m39Q2Bxxa/fkserAKsYm9ybm3/OxHkFAOpSR5ptfx67m2IN1x8g\n Ej355OXM6MUuJZvkM+dg5H4xuUZQOHts6VpktyW0Wq+98xI8tXa753SxwHQG6ZK508Tp5zUOD\n EEYQVIsaXxOVbKMZusjYiIF47tfHD4Xq1o+I5jGvz0LaKQ+WTHPdGjUwzePvSuVnBh43c/Y6j\n jZOut3RI6RhdiKzhhV4A7tFiorlytIOxB0rC5uOWuX71tRHjd/UTgWoq+1luM78t95p9keOWI\n h/dxeDdRhCIrnlggoR4XYzOeTmWTUt0mZjp7YI2A4Vmygb54JK8w2R7hEBPitsUfGBCbum1AH\n HpbVJxNZc6xUlkjgftw96SgrQO+9tr4fAjpGjII6zLY4XmMqc9dd4DhNhLTV+aFfmd7PT0JK7\n Sr9GHFQoog/3W9FQrnaaJN5Xtq7nys7h9XARAKtENfer+qlukQNx+BbQgYiei1RyO9RjTMG9R\n R/CYH3JuundBjhDtxzW1DNvLA2NOJORW8n5nTFrlgogd+OwVAwEBmiDgbV1nxzU84rqJ8T5Zi\n 65EHzUWBWAMbbTo/gewGV3BlWhPla3cZ9UGhVGgzJUHx0g1pMvwXF1fs11JsvuOr3RKUtRdXG\n WiS6onMZ66mPSMq2kJxaaY/ocIgFgfAeW3aYay+gdaMj4iK7Bg+hsxULyAVjich0TYZjLwTnZ\n 11VzFHgeIIolMDtoeIH0UmRvXrZYtnSVlzayyOH+7cAHebeYAG0u3ggKe3yW+YP45ETJQ7LPR\n oCYzJVS7nzAUYVVAsewxC78fUikqqb/J5Vtd1cMsZdHZ98klUX45Ip0mtjgn0LoMm2mGnltwb\n Qp0Vu+UeY8IvwfvMch4wfRaJLl4/spQy9RT7E64bYg6/Ur0mPljCS2JHHH/Ar0yiyChg9333/\n 0Pdel++s4USYHxcmavgKY55j4t2z2t8qKQdcR3j3QQeuBqYjFDq29ba5poF8CHR4FhS2EvwsC\n yX/CrMm7q0JaBIc0R0YYNfD38NQBV+StUWz1WRSBkCIZnRSGIGqo+Dv93txaLx4cClufjZeqZ\n iLsDBbSi4LtIy6At/ZUi76gZfmmibeLSPPmqmbGAhze9y4N7VZjGeeTbLslcByuiNV/OBPAFs\n MxzsHMld6cwlhAv644gSYiYwcDMzLW9GQg2FI2xK8M2qh+n7o6d4nA0mB4i184MiHx9/ji4Ev\n glblXPcSLRDVaYg623NLjumrpvz/w6EyBpYsxrXAL3nOjK156vCQZvuUg29H0bkvAdzoaKbvE\n Qy1rMGDa5jTvPqs/ye8bgoF54wBdZWzmbcPVUTtwjZTVSBg+tzAhLYNL6tHzKda2spes3gya+\n AZrpwRJwwmjceTMbXeWRvXl+iE658m9h4QnhCltfFACzUdzKNw7nDE9JuMo9B/LBe73xbXpLJ\n z05eOKeD/4fwdgdicx5/uyCthxqAEHsB4VRDFR45vEd7L5zyA5WZV20skdYwcmZtw+UCmrlTg\n UTpv5oV93DeuZFDZfUc/5nZP3HTsLny/Jvoyzejyh00710kxFEjUfseoTfjrW1z9o0rLzqV5M\n G+hC2BOtIuBrmxCfUsEih+JYUkAHI4P9keOAJ0swKT/6Dk1o/OnMb5AExlczadUKn2+fBu76h\n 8naBKIWMg46C9ogPU4bTrjqxmKM9l1VWKJpgR1xizVYNcZZNhRzUshtvB//f+HcBF9Rv4Vb/3\n 9dZrMJivdB3NoJ2YtgMo51wyLgxp670ijMah7bL0tVdfhy+FoRthF8PLQ6hcKEQH9EUyOIC3u\n 2w7bzcCKzgThQsp0UV0MWeWbrt2lBt9T+PcgulHdiua/ATdqn/mhGGkez8EJOxIn+JxZg3cPF\n t4hwDrzLvUGm5Oyic4rJL+cUnYtS9X8KygB7OLgsbrJzzB6KZVZ9e9Oy+S5B27YOmJrtdHtSx\n piNhmnbvRiSapYLIriPwMmZWCrK8zT7dAooTUaqmf40NSDGGATzFt4jzCz/fEX30lIIwj3WsE\n 25JXp0YCRt3TI9sRnkpB7R5X2IS91ZqUnhIHlX4JaU82OnUjGfI85ssLeYWiI3bSVhIWFd/If\n cRlneVeOsozFooeAQDZx+OX5Vm2tcDeKADHDW8SCLNBMbkOQCZjYyvbzOP06bfJbTbcsMdh28\n UWfz3MLWlAinaE1wuyn7W+Cg7/IjTYSGM99cVhSbg5HiZQpkzGuH7TcNihp39w91z+agFxZRh\n E5RSGwhFfKEL7VpeJo02brpBCECrABqh2LcpSOjWh1Ah4gYi/0N9d542vqiuaLsD2YRm0Gy10\n 67jBbcYQQivKryzgoAUoGZoU8d6xQ7yPi/XAzJLYLJzfIVqTKpOC/rEQUr0hJOkAxeQvas1M7\n 8k4vtQHjEHThHNzumm/AIgOjBOXQUVSWQEKMTaHvja1NX+EeGnfyCpg35fomWRm8HmaJbXBKE\n fHTL40P6mR30t9twWgpa/CmxOXwlLFlVvTkITvc3wakZiHDm20V2f02heInBgKDRcnZiGHB99\n Bbi3DDY4zkeYhRtX/P3ywKpWUYtTJskB9yjiRY0Ijx9Roko+0fboDvTdOeYsudTxK7I6E/o/R\n 8B0FrYFMyQvc5pMwWNU+3kR7KIzmauOWzrU/5So9yBHXny4XkwCjWXAwPq36icAO6ne8GPB3d\n /eiVatjjVHJ48EfjzBqFOiiFFkBtLCpmZ5xnn8Vv+OOHSNcnTqRYaPTB27wLMw+wBftnY0kcV\n EXUPkbTX164TZfpO8zIkS/MwH//QGSy5FREQh5gQE+yRW0s4/uzsijGxnrWHse7sH2lQkxW31\n Q9w0qotpcLORKpWrUEm+1ngPUjxJnZ03FVM+Brc6E77CUt6MVqwIUZNP85e8OW3A75J0yOWzY\n KJrc9yozG/Ot+oDaruW5HWPPKaTb7V2obJFzQQZsOjhsJmzzWl6vsGu8vyBeagnD0IUeHpN4J\n fe4IYnmuZkuPDtFinvzXmOeI/rbWU+hgmIm7MihEGtYrCEH2yQSplKF5rtmrGMgVO18A0hiKO\n 5F3jEG4vdAU9DhFPo1yb7TEtyJ99pDH/Zydikl9IeBu4oY/JSgQUa6yyAHBR8g8L60c19KqA0\n 9jIMr1PXObFSCDoWVy0OorDzGx6VhQusRa9c7hjUT42RIqxLn3/P5irEGh6PxcodEnCTabYR0\n T61Id9rn1MvGCOzEmay4DTAnoRDKNxdC7RyD9tY7pXSjWeFZUbSk7JosbjhXniDHT0jmR9J68\n ufSmki17B55/t1YTjENah816ddRXkFih+dKoDbX03k2drldNKjtEk1mEkpUoWZEx4N8OZEvKX\n D8NKFtEU9Y9iAbCitU1BbIJB/+/PDY3uSzE4Zvvf1AYeyvKgHMyEbZxZJBBHMVYGOvOFH7Ma8\n DOY1pMLj2/0iMNsiFI5ojBmZmIAeVM7vA5KvxWt+W9v+ATeYeoR7JOI4c4c26lrIIFjO+zNTB\n wlKGVFV+tofRT4gStEveeXH5WVAhygmkS+8NNX5jvYXO0hyhxFAJC4/E9ih1qVbA0gQlIoIDn\n 047m+rjRWsYLHgif2puEExGIc9Pt0G10uLnVk+OsZdWLjvo8YdLUGtnncjNb6Yti7Sph+ZxJa\n 722CZ8TX+TQucaFVTggPERB3TsVIOPeKy/AXVQquYGMR9BG+nnBF919dtiLYoxW8/+Fw6Kpo5\n OPG/EuOTBifkFMDUAxjXz9WDk00JP5ma1EXUZ+BSKReq+C4jWNm6u04q2OnyMpoL7ZmOjDqhV\n xDvnnU5vYL+KXuwh45yQN+ffvzlScJ/vf4qfXuYSF8EI9zUqBfQRLf7EQXpP+YcLGS4HeNoBs\n wIekvL0vAZPuhc4TqfG1xwT1OTfF+7B0XNf0CrvsrGzkSKmVoZ2VAd0cwytr5uzk74z1MaCYn\n H9/I6stxLM/G/Hio6+lIvbEKA6HEN1EYsxoV2f/+VnmDiWUVTkyX7iQXfJvrCJZNO2gzzMgq8\n hp//Qemt1VHZrdBvb+1laOeMhSk21iH4/Y8FjFrAUknof5+TdNIwI0EvOAG3kGVlYEg9i+erB\n cSN1d8qxSVWlmy+FyuuzuMOpF2WpK+UYFq5IhxbFo75mzX06J4bPYVWlWScwiNx13ehUQG+mu\n z7xx95rR801DvolzpGe6W4PaP2cigB2NmKSlkuAE+MSwHvfJmp4BO2xQIAWpqop2xSbFH2A99\n 2rKTYFuY4ouAV6lQlbJLNGaifMtbYAfWFthDtiOhTF94MFzSHSDzM7o2kj2WJQ2RcfD8DmmSb\n 28sCQNU4xbKCKYjDXP4LneGNA0JJ7pFq1DsVqme/vOHHh7/2Fu4p6JUY3XXdHGq0NPuXXnkBY\n qtjQ5tENbCoEobTa3jd1wBTQBHopf8v2OYuxDOfThOG0MhZbuc7AMJWZfWKh/1qdEvKR1vagk\n DdLmM+4VSPcJolURmRuCslhBY/J5qnMI6qIbdOhSqeLprbyykSvxyE6OxiD6Mt0idrez3sEOi\n y/yTtDDrgh5JdGQZ5CpQvnFg89FAKMj+cmQNU3n4zT987/f4ppsz0sEk/Q2A66OZSPJE2RvmK\n SD0AIDoUBaDPclM+DRarssoxwm0oI9fo4N8p7Egguk9y2ef2pdI0+JqMQt3PSIXiMuKbY1AWL\n oWE9MZvIv2aaS+CYuB0zT/hjr412Dp2qTLLEZd8hbFkaWZeQ5wMJo7lr3lA7mqubO13HBXJN5\n SA48+kYstg5kQkgXtcb2Brnp8EissPb99E5QwhlXR2dEZ1wOMNt/VY/m/Svis0gY8itFRVJrL\n ASy+Bcr6i2ESMPWvYcaSu0y7ClvcJHxjaW7DWaKi18wpw=","X-Mailman-Original-DKIM-Signature":"v=1; a=rsa-sha256; c=relaxed/relaxed;\n d=gmx.de;\n s=s31663417; t=1775664023; x=1776268823; i=fiona.klute@gmx.de;\n bh=xwWS+/vkaVOXPR50UYCt8sHBLba2VncnCvZb6UsDMMQ=;\n h=X-UI-Sender-Class:Message-ID:Date:MIME-Version:Subject:To:Cc:\n References:From:In-Reply-To:Content-Type:\n Content-Transfer-Encoding:cc:content-transfer-encoding:\n content-type:date:from:message-id:mime-version:reply-to:subject:\n to;\n b=NkUjrptkLEEhHdfa4VcVwUAi9PUHrOCLyOkCvSSLp9peKRo227Cnvw8rnO7tsR+G\n x6d+HCEmCJsDNADCWRyCeo0NWOaNeiV1gv7sHydt/lv07MlUUmWvuy9viuMZBGd9w\n 7kbhkxh1a0fIpYrbdgCR07VNpELVlwuRk25LMwnQBVW+Z8YBRukc6NOSAYl6z+2Ct\n eD1bgNfMy01kZBhQmIJINakyg2XdmVPj4irtcefsf4v502Ag6V9CFh7mXgpmQkUvb\n vj5pkOd32UVxB14t2xysQIXVLd8nluS5p5RUW2XvNMWweyKzMlOhpUaLqIC7zk4r+\n keDjeCuT6MWiAuFQ8g==","X-Mailman-Original-Authentication-Results":["smtp3.osuosl.org;\n dmarc=pass (p=quarantine dis=none)\n header.from=gmx.de","smtp3.osuosl.org;\n dkim=pass (2048-bit key,\n unprotected) header.d=gmx.de header.i=fiona.klute@gmx.de header.a=rsa-sha256\n header.s=s31663417 header.b=NkUjrptk"],"Subject":"Re: [Buildroot] [PATCH 0/4] make utils/generate-cyclonedx runnable\n with Buildroot host packages","X-BeenThere":"buildroot@buildroot.org","X-Mailman-Version":"2.1.30","Precedence":"list","List-Id":"Discussion and development of buildroot ","List-Unsubscribe":",\n ","List-Archive":"","List-Post":"","List-Help":"","List-Subscribe":",\n ","From":"Fiona Klute via buildroot ","Reply-To":"Fiona Klute ","Content-Transfer-Encoding":"7bit","Content-Type":"text/plain; charset=\"us-ascii\"; Format=\"flowed\"","Errors-To":"buildroot-bounces@buildroot.org","Sender":"\"buildroot\" "}}]