%global with_debug 1 %global with_check 0 %if 0%{?with_debug} %global _find_debuginfo_dwz_opts %{nil} %global _dwz_low_mem_die_limit 0 %else %global debug_package %{nil} %endif %if ! 0%{?gobuild:1} %define gobuild(o:) \ scl enable go-toolset-1.12 -- go build -buildmode pie -compiler gc -tags="rpm_crashtraceback no_openssl ${BUILDTAGS:-}" -ldflags "${LDFLAGS:-} -B 0x$(head -c20 /dev/urandom|od -An -tx1|tr -d ' \\n') -extldflags '%__global_ldflags'" -a -v -x %{?**}; %endif %global provider github %global provider_tld com %global project containernetworking %global repo plugins # https://github.com/containernetworking/plugins %global provider_prefix %{provider}.%{provider_tld}/%{project}/%{repo} %global import_path %{provider_prefix} %global commit d5efdfe1f6d6e8e9e9494e3f43be54f76c0f8fd6 %global shortcommit %(c=%{commit}; echo ${c:0:7}) Name: containernetworking-plugins Version: 0.8.3 Release: 3%{?dist} Summary: CNI network plugins License: ASL 2.0 URL: https://%{provider_prefix} Source0: https://%{provider_prefix}/archive/%{commit}/%{repo}-%{shortcommit}.tar.gz # related bug: https://bugzilla.redhat.com/show_bug.cgi?id=1833220 # patch: https://github.com/containernetworking/plugins/pull/484.patch Patch0: containernetworking-plugins-1833220.patch ExcludeArch: s390 ppc ppc64 BuildRequires: go-toolset-1.12 BuildRequires: git BuildRequires: go-md2man Provides: containernetworking-cni = %{version}-%{release} %description The CNI (Container Network Interface) project consists of a specification and libraries for writing plugins to configure network interfaces in Linux containers, along with a number of supported plugins. CNI concerns itself only with network connectivity of containers and removing allocated resources when the container is deleted. %prep %autosetup -n %{repo}-%{commit} -p1 rm -rf plugins/main/windows %build export ORG_PATH="%{provider}.%{provider_tld}/%{project}" export REPO_PATH="$ORG_PATH/%{repo}" if [ ! -h gopath/src/${REPO_PATH} ]; then mkdir -p gopath/src/${ORG_PATH} ln -s ../../../.. gopath/src/${REPO_PATH} || exit 255 fi export GOPATH=$(pwd)/gopath export GO111MODULE=off mkdir -p $(pwd)/bin echo "Building plugins" export PLUGINS="plugins/meta/* plugins/main/* plugins/ipam/* plugins/sample" for d in $PLUGINS; do if [ -d "$d" ]; then plugin="$(basename "$d")" echo " $plugin" %gobuild -o "${PWD}/bin/$plugin" "$@" "$REPO_PATH"/$d fi done %install install -d -p %{buildroot}%{_libexecdir}/cni/ install -p -m 0755 bin/* %{buildroot}/%{_libexecdir}/cni %check %if 0%{?with_check} # Since we aren't packaging up the vendor directory we need to link # back to it somehow. Hack it up so that we can add the vendor # directory from BUILD dir as a gopath to be searched when executing # tests from the BUILDROOT dir. ln -s ./ ./vendor/src # ./vendor/src -> ./vendor export GOPATH=%{buildroot}/%{gopath}:$(pwd)/vendor:%{gopath} %gotest %{import_path}/libcni %gotest %{import_path}/pkg/invoke %gotest %{import_path}/pkg/ip %gotest %{import_path}/pkg/ipam %gotest %{import_path}/pkg/ns %gotest %{import_path}/pkg/skel %gotest %{import_path}/pkg/types %gotest %{import_path}/pkg/types/020 %gotest %{import_path}/pkg/types/current %gotest %{import_path}/pkg/utils %gotest %{import_path}/pkg/utils/hwaddr %gotest %{import_path}/pkg/version %gotest %{import_path}/pkg/version/legacy_examples %gotest %{import_path}/pkg/version/testhelpers %gotest %{import_path}/plugins/ipam/dhcp %gotest %{import_path}/plugins/ipam/host-local %gotest %{import_path}/plugins/ipam/host-local/backend/allocator %gotest %{import_path}/plugins/main/bridge %gotest %{import_path}/plugins/main/ipvlan %gotest %{import_path}/plugins/main/loopback %gotest %{import_path}/plugins/main/macvlan %gotest %{import_path}/plugins/main/ptp %gotest %{import_path}/plugins/meta/flannel %gotest %{import_path}/plugins/test/noop %endif #define license tag if not already defined %{!?_licensedir:%global license %doc} %files %license LICENSE %doc *.md %dir %{_libexecdir}/cni %{_libexecdir}/cni/* %changelog * Mon Jun 01 2020 Jindrich Novy - 0.8.3-3 - fix "CVE-2020-10749 containernetworking/plugins: IPv6 router advertisements allow for MitM attacks on IPv4 clusters" - Resolves: #1842334 * Thu Dec 12 2019 Jindrich Novy - 0.8.3-2 - build with no_openssl * Wed Dec 11 2019 Jindrich Novy - 0.8.3-1 - update to 0.8.3 - compile in FIPS mode * Thu Oct 17 2019 Jindrich Novy - 0.8.1-4 - rebuild against go-toolset-1.11 * Thu Oct 17 2019 Jindrich Novy - 0.8.1-3 - rebuild against extras-rhel-7.8-go-toolset-candidate * Fri Aug 02 2019 Jindrich Novy - 0.8.1-2 - use 0.8.1 release for RHEL 7.7 * Fri Jun 07 2019 Lokesh Mandvekar - 0.8.1-1 - Resolves: #1717915 - bump to v0.8.1 * Tue May 14 2019 Lokesh Mandvekar - 0.8.0-1 - Resolves: #1709630 - rebase to v0.8.0 * Wed Mar 27 2019 Frantisek Kluknavsky - 0.7.5-2 - rebase * Mon Jan 07 2019 Lokesh Mandvekar - 0.7.4-1 - Resolves: #1664009 - bump to v0.7.4 - remove unused devel and unit-test* packages - update go build env * Wed Nov 21 2018 Frantisek Kluknavsky - 0.7.3-3 - buildrequires for centos * Wed Oct 03 2018 Frantisek Kluknavsky - 0.7.3-2 - rebase * Wed Oct 03 2018 Frantisek Kluknavsky - 0.7.1-2 - scl go toolset * Mon Jul 23 2018 Frantisek Kluknavsky - 0.7.1-1 - rebase * Thu May 10 2018 Frantisek Kluknavsky - 0.7.0-101 - rebase - patches already upstream, removed * Thu Apr 26 2018 Frantisek Kluknavsky - 0.6.0-6 - Imported from Fedora - Renamed CNI -> plugins * Mon Apr 2 2018 Peter Robinson 0.6.0-4 - Own the libexec cni directory * Wed Feb 07 2018 Fedora Release Engineering - 0.6.0-3 - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild * Tue Jan 23 2018 Dan Williams - 0.6.0-2 - skip settling IPv4 addresses * Mon Jan 08 2018 Frantisek Kluknavsky - 0.6.0-1 - rebased to 7480240de9749f9a0a5c8614b17f1f03e0c06ab9 * Fri Oct 13 2017 Lokesh Mandvekar - 0.5.2-7 - do not install to /opt (against Fedora Guidelines) * Thu Aug 24 2017 Jan Chaloupka - 0.5.2-6 - Enable devel subpackage * Wed Aug 02 2017 Fedora Release Engineering - 0.5.2-5 - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild * Wed Jul 26 2017 Fedora Release Engineering - 0.5.2-4 - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild * Thu Jul 13 2017 Lokesh Mandvekar - 0.5.2-3 - excludearch: ppc64 as it's not in goarches anymore - re-enable s390x * Fri Jun 30 2017 Lokesh Mandvekar - 0.5.2-2 - upstream moved to github.com/containernetworking/plugins - built commit dcf7368 - provides: containernetworking-plugins - use vendored deps because they're a lot less of a PITA - excludearch: s390x for now (rhbz#1466865) * Mon Jun 12 2017 Timothy St. Clair - 0.5.2-1 - Update to 0.5.2 - Softlink to default /opt/cni/bin directories * Sun May 07 2017 Timothy St. Clair - 0.5.1-1 - Initial package