Hi,
I am working on a project that uses some proprietary layers from a 3rd party. 
These layers provide tar archives that include prebuilt binaries of some 
packages and these archives cause host-user-contaminated warnings. Since I only 
have the root user in my target system, and since I changed the UID/GID of my 
build user I assume it is not a false-positive. So, I dug a bit to find and 
resolve the issue and find the function that installs binaries. The function 
only extracts a tar archive to the ${D} directory with the command below, 
nothing else. No fakeroot, no management of ownership/permissions.

> 
> tar -xjvf $prebuiltdir/${TARGET}/${PN}/${PN}-binaries.tar -C ${D}

I tried various options of tar to extract these files with different UID and 
GID with no success.
How can I solve this issue? I think it would be better if I patch the script to 
use the install command but I am not sure how can I integrate that kind of 
workflow with lots of tar archives that includes lots of subdirectories.

P.S. : I use an LXC-based non-privileged ubuntu container in Proxmox VE as the 
build host. I don't know if it may affect something but wanted to mention it 
just in case.

Best regards,
Umut Ediz
-=-=-=-=-=-=-=-=-=-=-=-
Links: You receive all messages sent to this group.
View/Reply Online (#58342): https://lists.yoctoproject.org/g/yocto/message/58342
Mute This Topic: https://lists.yoctoproject.org/mt/94369702/21656
Group Owner: [email protected]
Unsubscribe: https://lists.yoctoproject.org/g/yocto/unsub 
[[email protected]]
-=-=-=-=-=-=-=-=-=-=-=-

Reply via email to