test and verified focal 1. didn't need to clone, thank you git-ubuntu :) 2. git checkout ubuntu/focal-proposed 3. utilized ubuntu-old-fashioned/bartender to run a build: bartender --livecd-rootfs-dir /home/jchittum/dev01/troubleshooting/packages/livecd-rootfs/livecd-rootfs --hook-extras-dir /home/jchittum/dev01/cloudware/cpc_packaging.extra --build-provider aws -- --series focal --project ubuntu-cpc --image-target disk-image --image-target qcow2 --image-target vmdk 4. ensured that the sbom was made for the vmdk and qcow
focal/downloads$ ls build.output/ binary.log livecd.ubuntu-cpc.img livecd.ubuntu-cpc.qcow.filelist livecd.ubuntu-cpc.vmdk.manifest livecd.ubuntu-cpc.disk-image.filelist livecd.ubuntu-cpc.initrd-generic livecd.ubuntu-cpc.qcow.manifest livecd.ubuntu-cpc.vmdk.spdx livecd.ubuntu-cpc.disk-image.manifest livecd.ubuntu-cpc.kernel-generic livecd.ubuntu-cpc.qcow.spdx livecd.ubuntu-cpc.disk-image.spdx livecd.ubuntu-cpc.manifest livecd.ubuntu-cpc.vmdk livecd.ubuntu-cpc.ext4 livecd.ubuntu-cpc.ova livecd.ubuntu-cpc.vmdk.filelist 5. verified via log that cpc-sbom was installed and used to generate 6. run a cloud-partner build bartender --livecd-rootfs-dir /home/jchittum/dev01/troubleshooting/packages/livecd-rootfs/livecd- rootfs --hook-extras-dir /home/jchittum/dev01/cloudware/cpc_packaging.extra --build-provider aws --hook-extras-release-notes-tools-repo https://git.launchpad.net/~cloud- images/cloud-images/+git/cpc-release-notes-tools --hook-extras-release- notes-tools-branch main --hook-extras-sbom-tools-repo git+ssh://g...@github.com/canonical/cpc-sbom.git --hook-extras-sbom- tools-subdir cpc_sbom -- --series focal --project ubuntu-cpc --image- target gce --image-target ec2 7. image builds succeeded 8. saw that the GCE image continue to generate an sbom focal/cloud$ ls ./build.output/ binary.log livecd.ubuntu-cpc.gce.dbx.bin livecd.ubuntu-cpc.gce.sbom.spdx.log livecd.ubuntu-cpc.ec2-hvm-ebs.vmdk livecd.ubuntu-cpc.gce.filelist livecd.ubuntu-cpc.gce.tar.gz livecd.ubuntu-cpc.ec2-hvm-ebs.vmdk.filelist livecd.ubuntu-cpc.gce.manifest livecd.ubuntu-cpc.ec2-hvm-ebs.vmdk.manifest livecd.ubuntu-cpc.gce.sbom.spdx 9. checked log to see that cpc-sbom was used to generate an SBOM _however_ as cpc_packaging.extra series files are not patched for consuming the SBOM, they remained on the system and not downloaded. -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/2077105 Title: cloud-images do not produce sboms To manage notifications about this bug go to: https://bugs.launchpad.net/cloud-images/+bug/2077105/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
