tested and verified noble: 1. used `git-ubuntu` to pull the source locally 2. git checkout pkg/ubuntu/noble-proposed 3. utilized ubuntu-old-fashioned/bartender to run a build: bartender --livecd-rootfs-dir /home/jchittum/dev01/troubleshooting/packages/livecd-rootfs/livecd-rootfs --hook-extras-branch noble -- --series noble --project ubuntu-cpc --image-target disk-image --image-target qcow2 --image-target vmdk 4. ensured that the sbom was made for the vmdk and qcow
tar -xvzf nearby-cougar-ubuntu-on-the-rocks.tar.gz build.output/ build.output/livecd.ubuntu-cpc.ova build.output/livecd.ubuntu-cpc.vmdk build.output/binary.log build.output/livecd.ubuntu-cpc.vmdk.spdx build.output/livecd.ubuntu-cpc.manifest build.output/livecd.ubuntu-cpc.disk-image.filelist build.output/livecd.ubuntu-cpc.vmdk.filelist build.output/livecd.ubuntu-cpc.qcow.manifest build.output/livecd.ubuntu-cpc.qcow.spdx build.output/livecd.ubuntu-cpc.disk-image.spdx build.output/livecd.ubuntu-cpc.vmdk.manifest build.output/livecd.ubuntu-cpc.initrd-generic build.output/livecd.ubuntu-cpc.qcow.filelist build.output/livecd.ubuntu-cpc.ext4 build.output/livecd.ubuntu-cpc.disk-image.manifest build.output/livecd.ubuntu-cpc.img build.output/livecd.ubuntu-cpc.kernel-generic 5. verified via log that cpc-sbom was installed and used to generate 6. run a cloud-partner build bartender --livecd-rootfs-dir /home/jchittum/dev01/troubleshooting/packages/livecd-rootfs/livecd-rootfs --hook-extras-dir /home/jchittum/dev01/cloudware/cpc_packaging.extra --hook-extras-release-notes-tools-repo https://git.launchpad.net/~cloud-images/cloud-images/+git/cpc-release-notes-tools --hook-extras-release-notes-tools-branch main --hook-extras-sbom-tools-repo git+ssh://g...@github.com/canonical/cpc-sbom.git --hook-extras-sbom-tools-subdir cpc_sbom -- --series noble --project ubuntu-cpc --image-target gce --image-target ec2 7. image builds succeded 8. saw that the GCE image continue to generate an sbom 9. checked log to see that cpc-sbom was used to generate an SBOM _however_ as cpc_packaging.extra series files are not patched for consuming the SBOM, they remained on the system and not downloaded. Testing looks good for noble ** Tags removed: verification-needed-noble ** Tags added: verification-done-noble -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/2077105 Title: cloud-images do not produce sboms To manage notifications about this bug go to: https://bugs.launchpad.net/cloud-images/+bug/2077105/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
