Update documentation to accommodate cross-compilation

[rucoder]

No description provided.

[rucoder]

@deitch I'm not sure where sbom.spdx.json must be located. In your example Dockerfile it is located in /src/foo

# build as before
ADD https://github.com/foo/bar.git#v1.2.3 /src/foo
WORKDIR /src/foo
RUN cargo build --release
RUN cargo sbom > sbom.spdx.json

is this correct?

[deitch]

In your example Dockerfile it is located in /src/foo

No, not there. It needs to be anywhere in the output image. So if we copy things from /out/foo to the final image, then it should be in /out somewhere. Preferably similar location to actual binary.

[deitch]

Some simplification

[deitch]

While this all is correct, it also is confusing, while the original example is straightforward to understand. Can we leave the original example, and then add a section for cross-compilation?

[rucoder]

While this all is correct, it also is confusing, while the original example is straightforward to understand. Can we leave the original example, and then add a section for cross-compilation?

ok, I'll create a separate example

[rucoder]

In your example Dockerfile it is located in /src/foo

No, not there. It needs to be anywhere in the output image. So if we copy things from /out/foo to the final image, then it should be in /out somewhere. Preferably similar location to actual binary.

ok, my question was about "where it must be located so LK will find it" , I assumed it must be in the / but it seems it doesn't matter