sbom: T9098: syft should run un squashfs instead of unpacked chroot

lb (live-build) binary runs binary_rootfs first, then binary_grub-efi.
binary_grub-efi temporarily installs EFI tooling and then runs:
  "apt remove --auto-remove --purge --allow-remove-essential"

That cleanup is safe for the already-generated squashfs, but it mutates
build/chroot and can remove vyos-1x, breaking subsequent work that expects
chroot to remain intact for SBOM generation.

But why unpacking the squashfs?

In an ideal world we could call syft on the compressed squashfs file which is
supported. In our world, we do use a BCJ pre-filter chained with LZMA2 for
compressing the squashfs, which will increase the compression ratio without a
decompression penalty.

  Difference: ~14.3 MB, ~2.7% smaller

This is unsupported by fyft which means we do need to unpack the squashfs first
before checking the files and generating the SBOM file.

0 files changed, 0 insertions, 0 deletions