a415a1
# Bellow definitions are used to deliver config files from a particular branch
a415a1
# of c/image, c/common, c/storage vendored in all podman, skopeo, buildah.
a415a1
# These vendored components must have the same version. If it is not the case,
a415a1
# pick the oldest version on c/image, c/common, c/storage vendored in
a415a1
# podman/skopeo/podman.
bafb64
%global skopeo_branch main
893b01
%global image_branch v5.22.0
893b01
%global common_branch v0.49.1
893b01
%global storage_branch v1.42.0
a415a1
%global shortnames_branch main
a415a1
a415a1
Epoch: 2
a415a1
Name: containers-common
a415a1
Version: 1
893b01
Release: 40%{?dist}
a415a1
Summary: Common configuration and documentation for containers
a415a1
License: ASL 2.0
893b01
# arch limitation because of go-md2man (missing on i686)
893b01
# https://fedoraproject.org/wiki/PackagingDrafts/Go#Go_Language_Architectures
893b01
ExclusiveArch: %{go_arches}
bafb64
BuildRequires: /usr/bin/go-md2man
a415a1
Provides: skopeo-containers = %{epoch}:%{version}-%{release}
893b01
Conflicts: %{name} <= 2:1-22
893b01
Obsoletes: %{name} <= 2:1-22
a415a1
Requires: (container-selinux >= 2:2.162.1 if selinux-policy)
a415a1
Requires: oci-runtime
a415a1
%if 0%{?rhel} >= 9 || 0%{?fedora}
a415a1
Requires: crun >= 0.19
a415a1
%else
a415a1
Requires: runc
a415a1
%endif
a415a1
Requires: system-release
a415a1
Suggests: subscription-manager
a415a1
Recommends: fuse-overlayfs
a415a1
Recommends: slirp4netns
a415a1
Source1: https://raw.githubusercontent.com/containers/storage/%{storage_branch}/storage.conf
a415a1
Source2: https://raw.githubusercontent.com/containers/storage/%{storage_branch}/docs/containers-storage.conf.5.md
a415a1
Source3: mounts.conf
a415a1
Source4: https://raw.githubusercontent.com/containers/image/%{image_branch}/docs/containers-registries.conf.5.md
a415a1
#Source5: https://raw.githubusercontent.com/containers/image/%%{image_branch}/registries.conf
a415a1
Source5: registries.conf
a415a1
Source6: https://raw.githubusercontent.com/containers/image/%{image_branch}/docs/containers-policy.json.5.md
bafb64
Source7: https://raw.githubusercontent.com/containers/common/%{common_branch}/pkg/seccomp/seccomp.json
a415a1
Source8: https://raw.githubusercontent.com/containers/common/%{common_branch}/docs/containers-mounts.conf.5.md
a415a1
Source9: https://raw.githubusercontent.com/containers/image/%{image_branch}/docs/containers-signature.5.md
a415a1
Source10: https://raw.githubusercontent.com/containers/image/%{image_branch}/docs/containers-transports.5.md
a415a1
Source11: https://raw.githubusercontent.com/containers/image/%{image_branch}/docs/containers-certs.d.5.md
a415a1
Source12: https://raw.githubusercontent.com/containers/image/%{image_branch}/docs/containers-registries.d.5.md
a415a1
Source13: https://raw.githubusercontent.com/containers/common/%{common_branch}/pkg/config/containers.conf
a415a1
Source14: https://raw.githubusercontent.com/containers/common/%{common_branch}/docs/containers.conf.5.md
a415a1
Source15: https://raw.githubusercontent.com/containers/image/%{image_branch}/docs/containers-auth.json.5.md
a415a1
Source16: https://raw.githubusercontent.com/containers/image/%{image_branch}/docs/containers-registries.conf.d.5.md
a415a1
Source17: https://raw.githubusercontent.com/containers/shortnames/%{shortnames_branch}/shortnames.conf
a415a1
Source19: 001-rhel-shortnames-pyxis.conf
a415a1
Source20: 002-rhel-shortnames-overrides.conf
a415a1
Source21: RPM-GPG-KEY-redhat-release
a415a1
Source22: registry.access.redhat.com.yaml
a415a1
Source23: registry.redhat.io.yaml
a415a1
#Source24: https://raw.githubusercontent.com/containers/skopeo/%%{skopeo_branch}/default-policy.json
a415a1
Source24: default-policy.json
a415a1
Source25: https://raw.githubusercontent.com/containers/skopeo/%{skopeo_branch}/default.yaml
893b01
# FIXME: fix the branch once these are available via regular c/common branch
893b01
Source26: https://raw.githubusercontent.com/containers/common/main/docs/Containerfile.5.md
893b01
Source27: https://raw.githubusercontent.com/containers/common/main/docs/containerignore.5.md
893b01
a415a1
# scripts used for synchronization with upstream and shortname generation
a415a1
Source100: update.sh
a415a1
Source101: update-vendored.sh
a415a1
Source102: pyxis.sh
a415a1
a415a1
%description
a415a1
This package contains common configuration files and documentation for container
a415a1
tools ecosystem, such as Podman, Buildah and Skopeo.
a415a1
a415a1
It is required because the most of configuration files and docs come from projects
a415a1
which are vendored into Podman, Buildah, Skopeo, etc. but they are not packaged
a415a1
separately.
a415a1
a415a1
%prep
a415a1
a415a1
%build
a415a1
a415a1
%install
a415a1
install -dp %{buildroot}%{_sysconfdir}/containers/{certs.d,oci/hooks.d,registries.d,registries.conf.d}
a415a1
install -m0644 %{SOURCE1} %{buildroot}%{_sysconfdir}/containers/storage.conf
a415a1
install -m0644 %{SOURCE5} %{buildroot}%{_sysconfdir}/containers/registries.conf
a415a1
install -m0644 %{SOURCE17} %{buildroot}%{_sysconfdir}/containers/registries.conf.d/000-shortnames.conf
a415a1
install -m0644 %{SOURCE19} %{buildroot}%{_sysconfdir}/containers/registries.conf.d/001-rhel-shortnames.conf
a415a1
install -m0644 %{SOURCE20} %{buildroot}%{_sysconfdir}/containers/registries.conf.d/002-rhel-shortnames-overrides.conf
a415a1
a415a1
# for signature verification
a415a1
%if !0%{?rhel} || 0%{?centos}
a415a1
install -dp %{buildroot}%{_sysconfdir}/pki/rpm-gpg
a415a1
install -m0644 %{SOURCE21} %{buildroot}%{_sysconfdir}/pki/rpm-gpg
a415a1
%endif
a415a1
install -dp %{buildroot}%{_sysconfdir}/containers/registries.d
a415a1
install -m0644 %{SOURCE22} %{buildroot}%{_sysconfdir}/containers/registries.d
a415a1
install -m0644 %{SOURCE23} %{buildroot}%{_sysconfdir}/containers/registries.d
a415a1
install -m0644 %{SOURCE24} %{buildroot}%{_sysconfdir}/containers/policy.json
a415a1
install -dp %{buildroot}%{_sharedstatedir}/containers/sigstore
a415a1
install -m0644 %{SOURCE25} %{buildroot}%{_sysconfdir}/containers/registries.d/default.yaml
a415a1
a415a1
# for containers-common
a415a1
install -dp %{buildroot}%{_mandir}/man5
a415a1
go-md2man -in %{SOURCE2} -out %{buildroot}%{_mandir}/man5/containers-storage.conf.5
a415a1
go-md2man -in %{SOURCE4} -out %{buildroot}%{_mandir}/man5/containers-registries.conf.5
a415a1
go-md2man -in %{SOURCE6} -out %{buildroot}%{_mandir}/man5/containers-policy.json.5
a415a1
go-md2man -in %{SOURCE8} -out %{buildroot}%{_mandir}/man5/containers-mounts.conf.5
a415a1
go-md2man -in %{SOURCE9} -out %{buildroot}%{_mandir}/man5/containers-signature.5
a415a1
go-md2man -in %{SOURCE10} -out %{buildroot}%{_mandir}/man5/containers-transports.5
a415a1
go-md2man -in %{SOURCE11} -out %{buildroot}%{_mandir}/man5/containers-certs.d.5
a415a1
go-md2man -in %{SOURCE12} -out %{buildroot}%{_mandir}/man5/containers-registries.d.5
a415a1
go-md2man -in %{SOURCE14} -out %{buildroot}%{_mandir}/man5/containers.conf.5
a415a1
go-md2man -in %{SOURCE15} -out %{buildroot}%{_mandir}/man5/containers-auth.json.5
a415a1
go-md2man -in %{SOURCE16} -out %{buildroot}%{_mandir}/man5/containers-registries.conf.d.5
893b01
go-md2man -in %{SOURCE26} -out %{buildroot}%{_mandir}/man5/Containerfile.5
893b01
go-md2man -in %{SOURCE27} -out %{buildroot}%{_mandir}/man5/containerignore.5
a415a1
a415a1
install -dp %{buildroot}%{_datadir}/containers
a415a1
install -m0644 %{SOURCE3} %{buildroot}%{_datadir}/containers/mounts.conf
a415a1
install -m0644 %{SOURCE7} %{buildroot}%{_datadir}/containers/seccomp.json
a415a1
install -m0644 %{SOURCE13} %{buildroot}%{_datadir}/containers/containers.conf
a415a1
a415a1
# install secrets patch directory
a415a1
install -d -p -m 755 %{buildroot}/%{_datadir}/rhel/secrets
a415a1
# rhbz#1110876 - update symlinks for subscription management
a415a1
ln -s %{_sysconfdir}/pki/entitlement %{buildroot}%{_datadir}/rhel/secrets/etc-pki-entitlement
a415a1
ln -s %{_sysconfdir}/rhsm %{buildroot}%{_datadir}/rhel/secrets/rhsm
a415a1
ln -s %{_sysconfdir}/yum.repos.d/redhat.repo %{buildroot}%{_datadir}/rhel/secrets/redhat.repo
a415a1
a415a1
# ship preconfigured /etc/containers/registries.d/ files with containers-common - #1903813
a415a1
cat <<EOF > %{buildroot}%{_sysconfdir}/containers/registries.d/registry.access.redhat.com.yaml
a415a1
docker:
a415a1
     registry.access.redhat.com:
a415a1
         sigstore: https://access.redhat.com/webassets/docker/content/sigstore
a415a1
EOF
a415a1
a415a1
cat <<EOF > %{buildroot}%{_sysconfdir}/containers/registries.d/registry.redhat.io.yaml
a415a1
docker:
a415a1
     registry.redhat.io:
a415a1
         sigstore: https://registry.redhat.io/containers/sigstore
a415a1
EOF
a415a1
a415a1
%files
a415a1
%dir %{_sysconfdir}/containers
a415a1
%dir %{_sysconfdir}/containers/certs.d
a415a1
%dir %{_sysconfdir}/containers/registries.d
a415a1
%dir %{_sysconfdir}/containers/oci
a415a1
%dir %{_sysconfdir}/containers/oci/hooks.d
a415a1
%dir %{_sysconfdir}/containers/registries.conf.d
a415a1
%if !0%{?rhel} || 0%{?centos}
a415a1
%{_sysconfdir}/pki/rpm-gpg/RPM-GPG-KEY-redhat-release
a415a1
%endif
a415a1
%config(noreplace) %{_sysconfdir}/containers/policy.json
a415a1
%config(noreplace) %{_sysconfdir}/containers/storage.conf
a415a1
%config(noreplace) %{_sysconfdir}/containers/registries.conf
a415a1
%config(noreplace) %{_sysconfdir}/containers/registries.conf.d/*.conf
893b01
%config(noreplace) %{_sysconfdir}/containers/registries.d/default.yaml
893b01
%config(noreplace) %{_sysconfdir}/containers/registries.d/registry.redhat.io.yaml
893b01
%config(noreplace) %{_sysconfdir}/containers/registries.d/registry.access.redhat.com.yaml
a415a1
%ghost %{_sysconfdir}/containers/containers.conf
a415a1
%dir %{_sharedstatedir}/containers/sigstore
a415a1
%{_mandir}/man5/*
a415a1
%dir %{_datadir}/containers
a415a1
%{_datadir}/containers/mounts.conf
a415a1
%{_datadir}/containers/seccomp.json
a415a1
%{_datadir}/containers/containers.conf
a415a1
%dir %{_datadir}/rhel/secrets
a415a1
%{_datadir}/rhel/secrets/*
a415a1
a415a1
%changelog
893b01
* Tue Aug 23 2022 Jindrich Novy <jnovy@redhat.com> - 2:1-40
893b01
- add beta keys to default-policy.json
893b01
- Related: #2061390
893b01
893b01
* Mon Aug 08 2022 Jindrich Novy <jnovy@redhat.com> - 2:1-39
893b01
- update shortnames
893b01
- Related: #2061390
893b01
893b01
* Thu Aug 04 2022 Jindrich Novy <jnovy@redhat.com> - 2:1-38
893b01
- arch limitation because of go-md2man (missing on i686)
893b01
- Related: #2061390
893b01
893b01
* Wed Aug 03 2022 Jindrich Novy <jnovy@redhat.com> - 2:1-37
893b01
- add install section
893b01
- update vendored components
893b01
- Related: #2061390
893b01
893b01
* Wed Aug 03 2022 Jindrich Novy <jnovy@redhat.com> - 2:1-36
893b01
- remove aardvark-dns and netavark - packaged separately
893b01
- update vendored components and configuration files
893b01
- Related: #2061390
893b01
893b01
* Tue Jul 26 2022 Jindrich Novy <jnovy@redhat.com> - 2:1-35
893b01
- update vendored components and configuration files
893b01
- Related: #2061390
893b01
893b01
* Mon Jun 27 2022 Jindrich Novy <jnovy@redhat.com> - 2:1-34
893b01
- remove rhel-els and update shortnames
893b01
- Related: #2061390
893b01
893b01
* Thu Jun 16 2022 Jindrich Novy <jnovy@redhat.com> - 2:1-33
893b01
- update shortnames
893b01
- Related: #2061390
893b01
893b01
* Thu Jun 09 2022 Jindrich Novy <jnovy@redhat.com> - 2:1-32
893b01
- additional fix for unqualified registries
893b01
- Related: #2061390
893b01
893b01
* Thu Jun 09 2022 Jindrich Novy <jnovy@redhat.com> - 2:1-31
893b01
- fix unqualified registries
893b01
- Related: #2061390
893b01
893b01
* Thu Jun 09 2022 Jindrich Novy <jnovy@redhat.com> - 2:1-30
893b01
- update vendored components and configuration files
893b01
- Related: #2061390
893b01
893b01
* Mon May 23 2022 Jindrich Novy <jnovy@redhat.com> - 2:1-29
893b01
- update unqualified registries list
893b01
- Related: #2061390
893b01
893b01
* Mon May 09 2022 Jindrich Novy <jnovy@redhat.com> - 2:1-28
893b01
- update aardvark-dns and netavark to 1.0.3
893b01
- update vendored components
893b01
- Related: #2061390
893b01
893b01
* Fri Apr 22 2022 Jindrich Novy <jnovy@redhat.com> - 2:1-27
893b01
- add man page sources too
893b01
- Related: #2061390
893b01
893b01
* Wed Apr 20 2022 Jindrich Novy <jnovy@redhat.com> - 2:1-26
893b01
- add missing man pages from Fedora
893b01
- Related: #2061390
893b01
893b01
* Wed Apr 06 2022 Jindrich Novy <jnovy@redhat.com> - 2:1-25
893b01
- allow consuming aardvark-dns and netavark from upstream branch
893b01
- Related: #2061390
893b01
893b01
* Wed Apr 06 2022 Jindrich Novy <jnovy@redhat.com> - 2:1-24
893b01
- update to netavark and aardvark-dns 1.0.2
893b01
- update vendored components
893b01
- Related: #2061390
893b01
893b01
* Mon Feb 28 2022 Jindrich Novy <jnovy@redhat.com> - 2:1-23
893b01
- update to netavark and aardvark-dns 1.0.1
893b01
- Related: #2001445
893b01
bafb64
* Wed Feb 23 2022 Lokesh Mandvekar <lsm5@redhat.com> - 2:1-22
bafb64
- build rust packages with RUSTFLAGS set to make ExecShield happy
bafb64
- Related: #2001445
bafb64
bafb64
* Mon Feb 21 2022 Lokesh Mandvekar <lsm5@redhat.com> - 2:1-21
bafb64
- do not specify infra_image in containers.conf
bafb64
- needed to resolve gating test failures
bafb64
- Related: #2001445
bafb64
bafb64
* Fri Feb 18 2022 Jindrich Novy <jnovy@redhat.com> - 2:1-20
bafb64
- update to netavark-1.0.0 and aardvark-dns-1.0.0
bafb64
- Related: #2001445
bafb64
bafb64
* Thu Feb 17 2022 Jindrich Novy <jnovy@redhat.com> - 2:1-19
bafb64
- package aarvark-dns and netavark as part of the containers-common
bafb64
- Related: #2001445
bafb64
bafb64
* Thu Feb 17 2022 Jindrich Novy <jnovy@redhat.com> - 2:1-18
bafb64
- update shortnames and vendored components
bafb64
- Related: #2001445
bafb64
bafb64
* Wed Feb 16 2022 Jindrich Novy <jnovy@redhat.com> - 2:1-17
bafb64
- containers.conf should contain network_backend = "cni" in RHEL8.6
bafb64
- Related: #2001445
bafb64
bafb64
* Fri Feb 11 2022 Jindrich Novy <jnovy@redhat.com> - 2:1-16
bafb64
- update vendored components and configuration files
bafb64
- Related: #2001445
bafb64
bafb64
* Fri Feb 04 2022 Jindrich Novy <jnovy@redhat.com> - 2:1-15
bafb64
- sync vendored components
bafb64
- Related: #2001445
bafb64
bafb64
* Fri Feb 04 2022 Jindrich Novy <jnovy@redhat.com> - 2:1-14
bafb64
- sync vendored components
bafb64
- Related: #2001445
bafb64
bafb64
* Mon Jan 17 2022 Jindrich Novy <jnovy@redhat.com> - 2:1-13
bafb64
- update shortnames from Pyxis
bafb64
- Related: #2001445
bafb64
bafb64
* Thu Dec 09 2021 Jindrich Novy <jnovy@redhat.com> - 2:1-12
bafb64
- do not allow broken content from Pyxis to land in shortnames.conf
bafb64
- Related: #2001445
bafb64
bafb64
* Wed Dec 08 2021 Jindrich Novy <jnovy@redhat.com> - 2:1-11
bafb64
- sync vendored components
bafb64
- update shortnames from Pyxis
bafb64
- Related: #2001445
bafb64
bafb64
* Wed Dec 01 2021 Jindrich Novy <jnovy@redhat.com> - 2:1-10
bafb64
- use log_driver = "journald" and events_logger = "journald" for RHEL9
bafb64
- Related: #2001445
bafb64
bafb64
* Tue Nov 16 2021 Jindrich Novy <jnovy@redhat.com> - 2:1-9
bafb64
- consume seccomp.json from the oldest vendored version of c/common,
bafb64
  not main branch
bafb64
- Related: #2001445
bafb64
bafb64
* Wed Nov 10 2021 Jindrich Novy <jnovy@redhat.com> - 2:1-8
bafb64
- update vendored components
bafb64
- Related: #2001445
bafb64
bafb64
* Tue Nov 02 2021 Jindrich Novy <jnovy@redhat.com> - 2:1-7
bafb64
- make log_driver = "k8s-file" default in containers.conf
bafb64
- Related: #2001445
bafb64
bafb64
* Wed Oct 13 2021 Jindrich Novy <jnovy@redhat.com> - 2:1-6
bafb64
- sync vendored components
bafb64
- Related: #2001445
bafb64
bafb64
* Wed Sep 29 2021 Jindrich Novy <jnovy@redhat.com> - 2:1-5
bafb64
- update to the new vendored components
bafb64
- Related: #2001445
bafb64
bafb64
* Fri Sep 24 2021 Jindrich Novy <jnovy@redhat.com> - 2:1-4
bafb64
- update to the new vendored components
bafb64
- Related: #2001445
bafb64
bafb64
* Fri Sep 10 2021 Jindrich Novy <jnovy@redhat.com> - 2:1-3
bafb64
- update to the new vendored components
bafb64
- Related: #2001445
bafb64
a415a1
* Wed Aug 11 2021 Jindrich Novy <jnovy@redhat.com> - 2:1-2
a415a1
- synchronize config files for RHEL-8.5
a415a1
- Related: #1934415
a415a1
a415a1
* Wed Aug 11 2021 Jindrich Novy <jnovy@redhat.com> - 2:1-1
a415a1
- initial import
a415a1
- Related: #1934415