to pull the image from eve-sources for sbom

[yash-zededa]

This MR will pull the image based on the tag from eve-sources dockerhub repo.

 EVE_SOURCES=lfedge/eve-sources:${{ env.TAG }}-${HV}-${{ env.ARCH }}

It will create a new container from the specified image, without starting it. We then use the export command to get the filesystem and store it into assets as tar.gz file.

[deitch]

LGTM. As long as you tested the steps manually and it worked, we are good.

@eriknordmark is there any chance this gets run before publish.yml, as it depends on it being there?

I would think not. The only part that had me thinking is the fact that we name one stage "Pull the EVE release from DockerHUB or build it". The "or build it" had me concerned.

[yash-zededa]

LGTM. As long as you tested the steps manually and it worked, we are good.

@eriknordmark is there any chance this gets run before publish.yml, as it depends on it being there?

I would think not. The only part that had me thinking is the fact that we name one stage "Pull the EVE release from DockerHUB or build it". The "or build it" had me concerned.

Tested it multiple times. It's working as expected.

Local output:

bash-3.2$ #docker export --output /tmp/assets/collected_sources.tar.gz eve_sources
bash-3.2$ rm /tmp/assets/collected_sources.tar.gz 
bash-3.2$ docker export --output /tmp/assets/collected_sources.tar.gz eve_sources
bash-3.2$ echo 4?
4?
bash-3.2$ echo $?
0
bash-3.2$ cd /tmp/assets/
bash-3.2$ ls -tl
total 2097344
-rw-------  1 yash  wheel  1066786816 May 19 14:50 collected_sources.tar.gz
bash-3.2$ date
Fri May 19 14:50:54 CEST 2023

[eriknordmark]

LGTM
Let's give it a try