search

lf-edge / eve-rust

0 stars 1 forks source link

Update documentation to accommodate cross-compilation #7

Closed rucoder closed 3 months ago

rucoder commented 3 months ago

@deitch I'm not sure where sbom.spdx.json must be located. In your example Dockerfile it is located in /src/foo

# build as before
ADD https://github.com/foo/bar.git#v1.2.3 /src/foo
WORKDIR /src/foo
RUN cargo build --release
RUN cargo sbom > sbom.spdx.json

is this correct?

deitch commented 3 months ago

In your example Dockerfile it is located in /src/foo

No, not there. It needs to be anywhere in the output image. So if we copy things from /out/foo to the final image, then it should be in /out somewhere. Preferably similar location to actual binary.

rucoder commented 3 months ago

In your example Dockerfile it is located in /src/foo

No, not there. It needs to be anywhere in the output image. So if we copy things from /out/foo to the final image, then it should be in /out somewhere. Preferably similar location to actual binary.

ok, my question was about "where it must be located so LK will find it" , I assumed it must be in the / but it seems it doesn't matter