5dd126
# Bellow definitions are used to deliver config files from a particular branch
5dd126
# of c/image, c/common, c/storage vendored in all podman, skopeo, buildah.
5dd126
# These vendored components must have the same version. If it is not the case,
5dd126
# pick the oldest version on c/image, c/common, c/storage vendored in
5dd126
# podman/skopeo/podman.
21a30b
%global skopeo_branch main
5a3d5b
%global image_branch v5.22.1
169ddb
%global common_branch v0.49.1
169ddb
%global storage_branch v1.42.0
5dd126
%global shortnames_branch main
5dd126
5dd126
Epoch: 2
5dd126
Name: containers-common
5dd126
Version: 1
ce5e36
Release: 46%{?dist}
5dd126
Summary: Common configuration and documentation for containers
5dd126
License: ASL 2.0
169ddb
# arch limitation because of go-md2man (missing on i686)
169ddb
# https://fedoraproject.org/wiki/PackagingDrafts/Go#Go_Language_Architectures
169ddb
ExclusiveArch: %{go_arches}
e2e81a
BuildRequires: /usr/bin/go-md2man
5dd126
Provides: skopeo-containers = %{epoch}:%{version}-%{release}
e2e81a
Conflicts: %{name} <= 2:1-22
e2e81a
Obsoletes: %{name} <= 2:1-22
5dd126
Requires: (container-selinux >= 2:2.162.1 if selinux-policy)
5dd126
Requires: oci-runtime
5dd126
%if 0%{?rhel} >= 9 || 0%{?fedora}
5dd126
Requires: crun >= 0.19
5dd126
%else
5dd126
Requires: runc
5dd126
%endif
5dd126
Requires: system-release
5dd126
Suggests: subscription-manager
5dd126
Recommends: fuse-overlayfs
5dd126
Recommends: slirp4netns
5dd126
Source1: https://raw.githubusercontent.com/containers/storage/%{storage_branch}/storage.conf
5dd126
Source2: https://raw.githubusercontent.com/containers/storage/%{storage_branch}/docs/containers-storage.conf.5.md
5dd126
Source3: mounts.conf
5dd126
Source4: https://raw.githubusercontent.com/containers/image/%{image_branch}/docs/containers-registries.conf.5.md
5dd126
#Source5: https://raw.githubusercontent.com/containers/image/%%{image_branch}/registries.conf
5dd126
Source5: registries.conf
5dd126
Source6: https://raw.githubusercontent.com/containers/image/%{image_branch}/docs/containers-policy.json.5.md
21a30b
Source7: https://raw.githubusercontent.com/containers/common/%{common_branch}/pkg/seccomp/seccomp.json
5dd126
Source8: https://raw.githubusercontent.com/containers/common/%{common_branch}/docs/containers-mounts.conf.5.md
5dd126
Source9: https://raw.githubusercontent.com/containers/image/%{image_branch}/docs/containers-signature.5.md
5dd126
Source10: https://raw.githubusercontent.com/containers/image/%{image_branch}/docs/containers-transports.5.md
5dd126
Source11: https://raw.githubusercontent.com/containers/image/%{image_branch}/docs/containers-certs.d.5.md
5dd126
Source12: https://raw.githubusercontent.com/containers/image/%{image_branch}/docs/containers-registries.d.5.md
5dd126
Source13: https://raw.githubusercontent.com/containers/common/%{common_branch}/pkg/config/containers.conf
5dd126
Source14: https://raw.githubusercontent.com/containers/common/%{common_branch}/docs/containers.conf.5.md
5dd126
Source15: https://raw.githubusercontent.com/containers/image/%{image_branch}/docs/containers-auth.json.5.md
5dd126
Source16: https://raw.githubusercontent.com/containers/image/%{image_branch}/docs/containers-registries.conf.d.5.md
5dd126
Source17: https://raw.githubusercontent.com/containers/shortnames/%{shortnames_branch}/shortnames.conf
5dd126
Source19: 001-rhel-shortnames-pyxis.conf
5dd126
Source20: 002-rhel-shortnames-overrides.conf
5dd126
Source21: RPM-GPG-KEY-redhat-release
5dd126
Source22: registry.access.redhat.com.yaml
5dd126
Source23: registry.redhat.io.yaml
5dd126
#Source24: https://raw.githubusercontent.com/containers/skopeo/%%{skopeo_branch}/default-policy.json
5dd126
Source24: default-policy.json
5dd126
Source25: https://raw.githubusercontent.com/containers/skopeo/%{skopeo_branch}/default.yaml
2b1b9b
# FIXME: fix the branch once these are available via regular c/common branch
2b1b9b
Source26: https://raw.githubusercontent.com/containers/common/main/docs/Containerfile.5.md
2b1b9b
Source27: https://raw.githubusercontent.com/containers/common/main/docs/containerignore.5.md
5a3d5b
Source28: RPM-GPG-KEY-redhat-beta
2b1b9b
5dd126
# scripts used for synchronization with upstream and shortname generation
5dd126
Source100: update.sh
5dd126
Source101: update-vendored.sh
5dd126
Source102: pyxis.sh
5dd126
5dd126
%description
5dd126
This package contains common configuration files and documentation for container
5dd126
tools ecosystem, such as Podman, Buildah and Skopeo.
5dd126
5dd126
It is required because the most of configuration files and docs come from projects
5dd126
which are vendored into Podman, Buildah, Skopeo, etc. but they are not packaged
5dd126
separately.
5dd126
5dd126
%prep
5dd126
5dd126
%build
5dd126
5dd126
%install
5dd126
install -dp %{buildroot}%{_sysconfdir}/containers/{certs.d,oci/hooks.d,registries.d,registries.conf.d}
5dd126
install -m0644 %{SOURCE1} %{buildroot}%{_sysconfdir}/containers/storage.conf
5dd126
install -m0644 %{SOURCE5} %{buildroot}%{_sysconfdir}/containers/registries.conf
5dd126
install -m0644 %{SOURCE17} %{buildroot}%{_sysconfdir}/containers/registries.conf.d/000-shortnames.conf
5dd126
install -m0644 %{SOURCE19} %{buildroot}%{_sysconfdir}/containers/registries.conf.d/001-rhel-shortnames.conf
5dd126
install -m0644 %{SOURCE20} %{buildroot}%{_sysconfdir}/containers/registries.conf.d/002-rhel-shortnames-overrides.conf
5dd126
5dd126
# for signature verification
5dd126
%if !0%{?rhel} || 0%{?centos}
5dd126
install -dp %{buildroot}%{_sysconfdir}/pki/rpm-gpg
5dd126
install -m0644 %{SOURCE21} %{buildroot}%{_sysconfdir}/pki/rpm-gpg
5a3d5b
install -m0644 %{SOURCE28} %{buildroot}%{_sysconfdir}/pki/rpm-gpg
5dd126
%endif
5dd126
install -dp %{buildroot}%{_sysconfdir}/containers/registries.d
5dd126
install -m0644 %{SOURCE22} %{buildroot}%{_sysconfdir}/containers/registries.d
5dd126
install -m0644 %{SOURCE23} %{buildroot}%{_sysconfdir}/containers/registries.d
5dd126
install -m0644 %{SOURCE24} %{buildroot}%{_sysconfdir}/containers/policy.json
5dd126
install -dp %{buildroot}%{_sharedstatedir}/containers/sigstore
5dd126
install -m0644 %{SOURCE25} %{buildroot}%{_sysconfdir}/containers/registries.d/default.yaml
5dd126
5dd126
# for containers-common
5dd126
install -dp %{buildroot}%{_mandir}/man5
5dd126
go-md2man -in %{SOURCE2} -out %{buildroot}%{_mandir}/man5/containers-storage.conf.5
5dd126
go-md2man -in %{SOURCE4} -out %{buildroot}%{_mandir}/man5/containers-registries.conf.5
5dd126
go-md2man -in %{SOURCE6} -out %{buildroot}%{_mandir}/man5/containers-policy.json.5
5dd126
go-md2man -in %{SOURCE8} -out %{buildroot}%{_mandir}/man5/containers-mounts.conf.5
5dd126
go-md2man -in %{SOURCE9} -out %{buildroot}%{_mandir}/man5/containers-signature.5
5dd126
go-md2man -in %{SOURCE10} -out %{buildroot}%{_mandir}/man5/containers-transports.5
5dd126
go-md2man -in %{SOURCE11} -out %{buildroot}%{_mandir}/man5/containers-certs.d.5
5dd126
go-md2man -in %{SOURCE12} -out %{buildroot}%{_mandir}/man5/containers-registries.d.5
5dd126
go-md2man -in %{SOURCE14} -out %{buildroot}%{_mandir}/man5/containers.conf.5
5dd126
go-md2man -in %{SOURCE15} -out %{buildroot}%{_mandir}/man5/containers-auth.json.5
5dd126
go-md2man -in %{SOURCE16} -out %{buildroot}%{_mandir}/man5/containers-registries.conf.d.5
2b1b9b
go-md2man -in %{SOURCE26} -out %{buildroot}%{_mandir}/man5/Containerfile.5
2b1b9b
go-md2man -in %{SOURCE27} -out %{buildroot}%{_mandir}/man5/containerignore.5
5dd126
5dd126
install -dp %{buildroot}%{_datadir}/containers
5dd126
install -m0644 %{SOURCE3} %{buildroot}%{_datadir}/containers/mounts.conf
5dd126
install -m0644 %{SOURCE7} %{buildroot}%{_datadir}/containers/seccomp.json
5dd126
install -m0644 %{SOURCE13} %{buildroot}%{_datadir}/containers/containers.conf
5dd126
5dd126
# install secrets patch directory
5dd126
install -d -p -m 755 %{buildroot}/%{_datadir}/rhel/secrets
5dd126
# rhbz#1110876 - update symlinks for subscription management
5dd126
ln -s %{_sysconfdir}/pki/entitlement %{buildroot}%{_datadir}/rhel/secrets/etc-pki-entitlement
5dd126
ln -s %{_sysconfdir}/rhsm %{buildroot}%{_datadir}/rhel/secrets/rhsm
5dd126
ln -s %{_sysconfdir}/yum.repos.d/redhat.repo %{buildroot}%{_datadir}/rhel/secrets/redhat.repo
5dd126
5dd126
# ship preconfigured /etc/containers/registries.d/ files with containers-common - #1903813
5dd126
cat <<EOF > %{buildroot}%{_sysconfdir}/containers/registries.d/registry.access.redhat.com.yaml
5dd126
docker:
5dd126
     registry.access.redhat.com:
5dd126
         sigstore: https://access.redhat.com/webassets/docker/content/sigstore
5dd126
EOF
5dd126
5dd126
cat <<EOF > %{buildroot}%{_sysconfdir}/containers/registries.d/registry.redhat.io.yaml
5dd126
docker:
5dd126
     registry.redhat.io:
5dd126
         sigstore: https://registry.redhat.io/containers/sigstore
5dd126
EOF
5dd126
5dd126
%files
5dd126
%dir %{_sysconfdir}/containers
5dd126
%dir %{_sysconfdir}/containers/certs.d
5dd126
%dir %{_sysconfdir}/containers/registries.d
5dd126
%dir %{_sysconfdir}/containers/oci
5dd126
%dir %{_sysconfdir}/containers/oci/hooks.d
5dd126
%dir %{_sysconfdir}/containers/registries.conf.d
5dd126
%if !0%{?rhel} || 0%{?centos}
5dd126
%{_sysconfdir}/pki/rpm-gpg/RPM-GPG-KEY-redhat-release
5a3d5b
%{_sysconfdir}/pki/rpm-gpg/RPM-GPG-KEY-redhat-beta
5dd126
%endif
5dd126
%config(noreplace) %{_sysconfdir}/containers/policy.json
5dd126
%config(noreplace) %{_sysconfdir}/containers/storage.conf
5dd126
%config(noreplace) %{_sysconfdir}/containers/registries.conf
5dd126
%config(noreplace) %{_sysconfdir}/containers/registries.conf.d/*.conf
169ddb
%config(noreplace) %{_sysconfdir}/containers/registries.d/default.yaml
169ddb
%config(noreplace) %{_sysconfdir}/containers/registries.d/registry.redhat.io.yaml
169ddb
%config(noreplace) %{_sysconfdir}/containers/registries.d/registry.access.redhat.com.yaml
5dd126
%ghost %{_sysconfdir}/containers/containers.conf
5dd126
%dir %{_sharedstatedir}/containers/sigstore
5dd126
%{_mandir}/man5/*
5dd126
%dir %{_datadir}/containers
5dd126
%{_datadir}/containers/mounts.conf
5dd126
%{_datadir}/containers/seccomp.json
5dd126
%{_datadir}/containers/containers.conf
5dd126
%dir %{_datadir}/rhel/secrets
5dd126
%{_datadir}/rhel/secrets/*
5dd126
5dd126
%changelog
ce5e36
* Sun Jan 08 2023 Jindrich Novy <jnovy@redhat.com> - 2:1-46
ce5e36
- update vendored components, regenerate pyxis
ce5e36
- Resolves: #2158511
ce5e36
ce5e36
* Fri Jan 06 2023 Jindrich Novy <jnovy@redhat.com> - 2:1-45
ce5e36
- update vendored components and configuration files
ce5e36
- Resolves: #2158635
ce5e36
b68d51
* Thu Dec 01 2022 Jindrich Novy <jnovy@redhat.com> - 2:1-44
b68d51
- update vendored components and configuration files
b68d51
- Related: #2149775
b68d51
5a3d5b
* Thu Oct 20 2022 Jindrich Novy <jnovy@redhat.com> - 2:1-43
5a3d5b
- update vendored components and configuration files
5a3d5b
- Resolves: #2136438
5a3d5b
5a3d5b
* Thu Oct 13 2022 Jindrich Novy <jnovy@redhat.com> - 2:1-42
5a3d5b
- add beta GPG key
5a3d5b
- Resolves: #2125686
5a3d5b
5a3d5b
* Thu Oct 13 2022 Jindrich Novy <jnovy@redhat.com> - 2:1-41
5a3d5b
- update vendored components and configuration files
5a3d5b
- Resolves: #2125241
5a3d5b
169ddb
* Tue Aug 23 2022 Jindrich Novy <jnovy@redhat.com> - 2:1-40
169ddb
- add beta keys to default-policy.json
169ddb
- Related: #2061390
7ca1d3
169ddb
* Mon Aug 08 2022 Jindrich Novy <jnovy@redhat.com> - 2:1-39
169ddb
- update shortnames
169ddb
- Related: #2061390
7ca1d3
169ddb
* Thu Aug 04 2022 Jindrich Novy <jnovy@redhat.com> - 2:1-38
169ddb
- arch limitation because of go-md2man (missing on i686)
169ddb
- Related: #2061390
7ca1d3
169ddb
* Wed Aug 03 2022 Jindrich Novy <jnovy@redhat.com> - 2:1-37
169ddb
- add install section
169ddb
- update vendored components
169ddb
- Related: #2061390
e2e81a
169ddb
* Wed Aug 03 2022 Jindrich Novy <jnovy@redhat.com> - 2:1-36
169ddb
- remove aardvark-dns and netavark - packaged separately
169ddb
- update vendored components and configuration files
2b1b9b
- Related: #2061390
e2e81a
169ddb
* Tue Jul 26 2022 Jindrich Novy <jnovy@redhat.com> - 2:1-35
169ddb
- update vendored components and configuration files
2b1b9b
- Related: #2061390
e2e81a
169ddb
* Mon Jun 27 2022 Jindrich Novy <jnovy@redhat.com> - 2:1-34
169ddb
- remove rhel-els and update shortnames
2b1b9b
- Related: #2061390
21a30b
169ddb
* Thu Jun 16 2022 Jindrich Novy <jnovy@redhat.com> - 2:1-33
169ddb
- update shortnames
2b1b9b
- Related: #2061390
e2e81a
169ddb
* Thu Jun 09 2022 Jindrich Novy <jnovy@redhat.com> - 2:1-32
2b1b9b
- additional fix for unqualified registries
2b1b9b
- Related: #2061390
e2e81a
169ddb
* Thu Jun 09 2022 Jindrich Novy <jnovy@redhat.com> - 2:1-31
169ddb
- fix unqualified registries
2b1b9b
- Related: #2061390
e2e81a
169ddb
* Thu Jun 09 2022 Jindrich Novy <jnovy@redhat.com> - 2:1-30
169ddb
- update vendored components and configuration files
2b1b9b
- Related: #2061390
e2e81a
169ddb
* Mon May 23 2022 Jindrich Novy <jnovy@redhat.com> - 2:1-29
2b1b9b
- update unqualified registries list
2b1b9b
- Related: #2061390
e2e81a
169ddb
* Mon May 09 2022 Jindrich Novy <jnovy@redhat.com> - 2:1-28
2b1b9b
- update aardvark-dns and netavark to 1.0.3
2b1b9b
- update vendored components
2b1b9b
- Related: #2061390
e2e81a
169ddb
* Fri Apr 22 2022 Jindrich Novy <jnovy@redhat.com> - 2:1-27
2b1b9b
- add man page sources too
2b1b9b
- Related: #2061390
e2e81a
169ddb
* Wed Apr 20 2022 Jindrich Novy <jnovy@redhat.com> - 2:1-26
2b1b9b
- add missing man pages from Fedora
2b1b9b
- Related: #2061390
e2e81a
169ddb
* Wed Apr 06 2022 Jindrich Novy <jnovy@redhat.com> - 2:1-25
2b1b9b
- allow consuming aardvark-dns and netavark from upstream branch
2b1b9b
- Related: #2061390
21a30b
169ddb
* Wed Apr 06 2022 Jindrich Novy <jnovy@redhat.com> - 2:1-24
169ddb
- update to netavark and aardvark-dns 1.0.2
169ddb
- update vendored components
2b1b9b
- Related: #2061390
21a30b
169ddb
* Mon Feb 28 2022 Jindrich Novy <jnovy@redhat.com> - 2:1-23
2b1b9b
- update to netavark and aardvark-dns 1.0.1
e2e81a
- Related: #2001445
e2e81a
169ddb
* Wed Feb 23 2022 Lokesh Mandvekar <lsm5@redhat.com> - 2:1-22
169ddb
- build rust packages with RUSTFLAGS set to make ExecShield happy
169ddb
- Related: #2001445
169ddb
169ddb
* Mon Feb 21 2022 Lokesh Mandvekar <lsm5@redhat.com> - 2:1-21
169ddb
- do not specify infra_image in containers.conf
169ddb
- needed to resolve gating test failures
169ddb
- Related: #2001445
169ddb
169ddb
* Fri Feb 18 2022 Jindrich Novy <jnovy@redhat.com> - 2:1-20
169ddb
- update to netavark-1.0.0 and aardvark-dns-1.0.0
169ddb
- Related: #2001445
169ddb
169ddb
* Thu Feb 17 2022 Jindrich Novy <jnovy@redhat.com> - 2:1-19
169ddb
- package aarvark-dns and netavark as part of the containers-common
169ddb
- Related: #2001445
169ddb
169ddb
* Thu Feb 17 2022 Jindrich Novy <jnovy@redhat.com> - 2:1-18
169ddb
- update shortnames and vendored components
169ddb
- Related: #2001445
169ddb
169ddb
* Wed Feb 16 2022 Jindrich Novy <jnovy@redhat.com> - 2:1-17
169ddb
- containers.conf should contain network_backend = "cni" in RHEL8.6
169ddb
- Related: #2001445
169ddb
169ddb
* Fri Feb 11 2022 Jindrich Novy <jnovy@redhat.com> - 2:1-16
169ddb
- update vendored components and configuration files
169ddb
- Related: #2001445
169ddb
169ddb
* Fri Feb 04 2022 Jindrich Novy <jnovy@redhat.com> - 2:1-15
169ddb
- sync vendored components
169ddb
- Related: #2001445
169ddb
169ddb
* Fri Feb 04 2022 Jindrich Novy <jnovy@redhat.com> - 2:1-14
169ddb
- sync vendored components
169ddb
- Related: #2001445
169ddb
169ddb
* Mon Jan 17 2022 Jindrich Novy <jnovy@redhat.com> - 2:1-13
169ddb
- update shortnames from Pyxis
169ddb
- Related: #2001445
169ddb
169ddb
* Thu Dec 09 2021 Jindrich Novy <jnovy@redhat.com> - 2:1-12
169ddb
- do not allow broken content from Pyxis to land in shortnames.conf
169ddb
- Related: #2001445
169ddb
169ddb
* Wed Dec 08 2021 Jindrich Novy <jnovy@redhat.com> - 2:1-11
169ddb
- sync vendored components
169ddb
- update shortnames from Pyxis
169ddb
- Related: #2001445
169ddb
169ddb
* Wed Dec 01 2021 Jindrich Novy <jnovy@redhat.com> - 2:1-10
169ddb
- use log_driver = "journald" and events_logger = "journald" for RHEL9
169ddb
- Related: #2001445
169ddb
e2e81a
* Tue Nov 16 2021 Jindrich Novy <jnovy@redhat.com> - 2:1-9
21a30b
- consume seccomp.json from the oldest vendored version of c/common,
21a30b
  not main branch
e2e81a
- Related: #2001445
21a30b
e2e81a
* Wed Nov 10 2021 Jindrich Novy <jnovy@redhat.com> - 2:1-8
21a30b
- update vendored components
21a30b
- Related: #2001445
21a30b
e2e81a
* Tue Nov 02 2021 Jindrich Novy <jnovy@redhat.com> - 2:1-7
e2e81a
- make log_driver = "k8s-file" default in containers.conf
e2e81a
- Related: #2001445
e2e81a
e2e81a
* Wed Oct 13 2021 Jindrich Novy <jnovy@redhat.com> - 2:1-6
e2e81a
- sync vendored components
e2e81a
- Related: #2001445
e2e81a
e2e81a
* Wed Sep 29 2021 Jindrich Novy <jnovy@redhat.com> - 2:1-5
e2e81a
- update to the new vendored components
e2e81a
- Related: #2001445
e2e81a
e2e81a
* Fri Sep 24 2021 Jindrich Novy <jnovy@redhat.com> - 2:1-4
e2e81a
- update to the new vendored components
e2e81a
- Related: #2001445
e2e81a
e2e81a
* Fri Sep 10 2021 Jindrich Novy <jnovy@redhat.com> - 2:1-3
e2e81a
- update to the new vendored components
e2e81a
- Related: #2001445
e2e81a
5dd126
* Wed Aug 11 2021 Jindrich Novy <jnovy@redhat.com> - 2:1-2
5dd126
- synchronize config files for RHEL-8.5
5dd126
- Related: #1934415
5dd126
5dd126
* Wed Aug 11 2021 Jindrich Novy <jnovy@redhat.com> - 2:1-1
5dd126
- initial import
5dd126
- Related: #1934415