Need a way to get introspect data from an existing execution environment

[AlanCoding]

Scenario:

I have pulled an image from the internet which is an execution environment, and I want to find out what python and system requirement came from which collection.

I can get python requirements via:

$ podman run --rm --tty --interactive quay.io/ansible/awx-ee:latest cat /output/requirements.txt
boto>=2.49.0  # from collection amazon.aws
botocore>=1.12.249  # from collection amazon.aws
boto3>=1.9.249  # from collection amazon.aws
ansible-pylibssh  # from collection ansible.netcommon
...

But there appears to be no user-friendly way to get the mapping of what system requirement came from what collection anymore. Actually running introspect script is not very user friendly, because you have to figure out volume mapping, and the bindep_combined.txt file is in the build context, but not anywhere in the resultant image.

This is in the domain of accountability - determining what the EE has installed and for what reason.

[AlanCoding]

This is still non-trivial, because ansible-builder is not installed in the EE itself. It's hard to figure out how one might do this without brittle volume mapping.