bb3e91
# Bellow definitions are used to deliver config files from a particular branch
bb3e91
# of c/image, c/common, c/storage vendored in all podman, skopeo, buildah.
bb3e91
# These vendored components must have the same version. If it is not the case,
bb3e91
# pick the oldest version on c/image, c/common, c/storage vendored in
bb3e91
# podman/skopeo/podman.
bb3e91
%global skopeo_branch main
eec041
%global image_branch v5.22.1
6ca60b
%global common_branch v0.49.1
6ca60b
%global storage_branch v1.42.0
bb3e91
%global shortnames_branch main
bb3e91
bb3e91
Epoch: 2
bb3e91
Name: containers-common
bb3e91
Version: 1
eec041
Release: 49%{?dist}
bb3e91
Summary: Common configuration and documentation for containers
bb3e91
License: ASL 2.0
6ca60b
ExclusiveArch: %{go_arches}
bb3e91
BuildRequires: /usr/bin/go-md2man
bb3e91
Provides: skopeo-containers = %{epoch}:%{version}-%{release}
bb3e91
Conflicts: %{name} <= 2:1-22
bb3e91
Obsoletes: %{name} <= 2:1-22
bb3e91
Requires: (container-selinux >= 2:2.162.1 if selinux-policy)
bb3e91
Requires: oci-runtime
bb3e91
%if 0%{?rhel} >= 9 || 0%{?fedora}
bb3e91
Requires: crun >= 0.19
bb3e91
%else
bb3e91
Requires: runc
bb3e91
%endif
bb3e91
Requires: system-release
bb3e91
Suggests: subscription-manager
bb3e91
Recommends: fuse-overlayfs
bb3e91
Recommends: slirp4netns
bb3e91
Source1: https://raw.githubusercontent.com/containers/storage/%{storage_branch}/storage.conf
bb3e91
Source2: https://raw.githubusercontent.com/containers/storage/%{storage_branch}/docs/containers-storage.conf.5.md
bb3e91
Source3: mounts.conf
bb3e91
Source4: https://raw.githubusercontent.com/containers/image/%{image_branch}/docs/containers-registries.conf.5.md
bb3e91
#Source5: https://raw.githubusercontent.com/containers/image/%%{image_branch}/registries.conf
bb3e91
Source5: registries.conf
bb3e91
Source6: https://raw.githubusercontent.com/containers/image/%{image_branch}/docs/containers-policy.json.5.md
bb3e91
Source7: https://raw.githubusercontent.com/containers/common/%{common_branch}/pkg/seccomp/seccomp.json
bb3e91
Source8: https://raw.githubusercontent.com/containers/common/%{common_branch}/docs/containers-mounts.conf.5.md
bb3e91
Source9: https://raw.githubusercontent.com/containers/image/%{image_branch}/docs/containers-signature.5.md
bb3e91
Source10: https://raw.githubusercontent.com/containers/image/%{image_branch}/docs/containers-transports.5.md
bb3e91
Source11: https://raw.githubusercontent.com/containers/image/%{image_branch}/docs/containers-certs.d.5.md
bb3e91
Source12: https://raw.githubusercontent.com/containers/image/%{image_branch}/docs/containers-registries.d.5.md
bb3e91
Source13: https://raw.githubusercontent.com/containers/common/%{common_branch}/pkg/config/containers.conf
bb3e91
Source14: https://raw.githubusercontent.com/containers/common/%{common_branch}/docs/containers.conf.5.md
bb3e91
Source15: https://raw.githubusercontent.com/containers/image/%{image_branch}/docs/containers-auth.json.5.md
bb3e91
Source16: https://raw.githubusercontent.com/containers/image/%{image_branch}/docs/containers-registries.conf.d.5.md
bb3e91
Source17: https://raw.githubusercontent.com/containers/shortnames/%{shortnames_branch}/shortnames.conf
bb3e91
Source19: 001-rhel-shortnames-pyxis.conf
bb3e91
Source20: 002-rhel-shortnames-overrides.conf
bb3e91
Source21: RPM-GPG-KEY-redhat-release
bb3e91
Source22: registry.access.redhat.com.yaml
bb3e91
Source23: registry.redhat.io.yaml
bb3e91
#Source24: https://raw.githubusercontent.com/containers/skopeo/%%{skopeo_branch}/default-policy.json
bb3e91
Source24: default-policy.json
bb3e91
Source25: https://raw.githubusercontent.com/containers/skopeo/%{skopeo_branch}/default.yaml
947b07
# FIXME: fix the branch once these are available via regular c/common branch
947b07
Source26: https://raw.githubusercontent.com/containers/common/main/docs/Containerfile.5.md
947b07
Source27: https://raw.githubusercontent.com/containers/common/main/docs/containerignore.5.md
a956d2
Source28: RPM-GPG-KEY-redhat-beta
947b07
bb3e91
# scripts used for synchronization with upstream and shortname generation
bb3e91
Source100: update.sh
bb3e91
Source101: update-vendored.sh
bb3e91
Source102: pyxis.sh
bb3e91
bb3e91
%description
bb3e91
This package contains common configuration files and documentation for container
bb3e91
tools ecosystem, such as Podman, Buildah and Skopeo.
bb3e91
bb3e91
It is required because the most of configuration files and docs come from projects
bb3e91
which are vendored into Podman, Buildah, Skopeo, etc. but they are not packaged
bb3e91
separately.
bb3e91
bb3e91
%prep
bb3e91
bb3e91
%build
bb3e91
bb3e91
%install
bb3e91
install -dp %{buildroot}%{_sysconfdir}/containers/{certs.d,oci/hooks.d,registries.d,registries.conf.d}
bb3e91
install -m0644 %{SOURCE1} %{buildroot}%{_sysconfdir}/containers/storage.conf
bb3e91
install -m0644 %{SOURCE5} %{buildroot}%{_sysconfdir}/containers/registries.conf
bb3e91
install -m0644 %{SOURCE17} %{buildroot}%{_sysconfdir}/containers/registries.conf.d/000-shortnames.conf
bb3e91
install -m0644 %{SOURCE19} %{buildroot}%{_sysconfdir}/containers/registries.conf.d/001-rhel-shortnames.conf
bb3e91
install -m0644 %{SOURCE20} %{buildroot}%{_sysconfdir}/containers/registries.conf.d/002-rhel-shortnames-overrides.conf
bb3e91
bb3e91
# for signature verification
bb3e91
%if !0%{?rhel} || 0%{?centos}
bb3e91
install -dp %{buildroot}%{_sysconfdir}/pki/rpm-gpg
bb3e91
install -m0644 %{SOURCE21} %{buildroot}%{_sysconfdir}/pki/rpm-gpg
a956d2
install -m0644 %{SOURCE28} %{buildroot}%{_sysconfdir}/pki/rpm-gpg
bb3e91
%endif
bb3e91
install -dp %{buildroot}%{_sysconfdir}/containers/registries.d
bb3e91
install -m0644 %{SOURCE22} %{buildroot}%{_sysconfdir}/containers/registries.d
bb3e91
install -m0644 %{SOURCE23} %{buildroot}%{_sysconfdir}/containers/registries.d
bb3e91
install -m0644 %{SOURCE24} %{buildroot}%{_sysconfdir}/containers/policy.json
bb3e91
install -dp %{buildroot}%{_sharedstatedir}/containers/sigstore
bb3e91
install -m0644 %{SOURCE25} %{buildroot}%{_sysconfdir}/containers/registries.d/default.yaml
bb3e91
bb3e91
# for containers-common
bb3e91
install -dp %{buildroot}%{_mandir}/man5
bb3e91
go-md2man -in %{SOURCE2} -out %{buildroot}%{_mandir}/man5/containers-storage.conf.5
bb3e91
go-md2man -in %{SOURCE4} -out %{buildroot}%{_mandir}/man5/containers-registries.conf.5
bb3e91
go-md2man -in %{SOURCE6} -out %{buildroot}%{_mandir}/man5/containers-policy.json.5
bb3e91
go-md2man -in %{SOURCE8} -out %{buildroot}%{_mandir}/man5/containers-mounts.conf.5
bb3e91
go-md2man -in %{SOURCE9} -out %{buildroot}%{_mandir}/man5/containers-signature.5
bb3e91
go-md2man -in %{SOURCE10} -out %{buildroot}%{_mandir}/man5/containers-transports.5
bb3e91
go-md2man -in %{SOURCE11} -out %{buildroot}%{_mandir}/man5/containers-certs.d.5
bb3e91
go-md2man -in %{SOURCE12} -out %{buildroot}%{_mandir}/man5/containers-registries.d.5
bb3e91
go-md2man -in %{SOURCE14} -out %{buildroot}%{_mandir}/man5/containers.conf.5
bb3e91
go-md2man -in %{SOURCE15} -out %{buildroot}%{_mandir}/man5/containers-auth.json.5
bb3e91
go-md2man -in %{SOURCE16} -out %{buildroot}%{_mandir}/man5/containers-registries.conf.d.5
947b07
go-md2man -in %{SOURCE26} -out %{buildroot}%{_mandir}/man5/Containerfile.5
947b07
go-md2man -in %{SOURCE27} -out %{buildroot}%{_mandir}/man5/containerignore.5
bb3e91
bb3e91
install -dp %{buildroot}%{_datadir}/containers
bb3e91
install -m0644 %{SOURCE3} %{buildroot}%{_datadir}/containers/mounts.conf
bb3e91
install -m0644 %{SOURCE7} %{buildroot}%{_datadir}/containers/seccomp.json
bb3e91
install -m0644 %{SOURCE13} %{buildroot}%{_datadir}/containers/containers.conf
bb3e91
bb3e91
# install secrets patch directory
bb3e91
install -d -p -m 755 %{buildroot}/%{_datadir}/rhel/secrets
bb3e91
# rhbz#1110876 - update symlinks for subscription management
bb3e91
ln -s %{_sysconfdir}/pki/entitlement %{buildroot}%{_datadir}/rhel/secrets/etc-pki-entitlement
bb3e91
ln -s %{_sysconfdir}/rhsm %{buildroot}%{_datadir}/rhel/secrets/rhsm
bb3e91
ln -s %{_sysconfdir}/yum.repos.d/redhat.repo %{buildroot}%{_datadir}/rhel/secrets/redhat.repo
bb3e91
bb3e91
# ship preconfigured /etc/containers/registries.d/ files with containers-common - #1903813
bb3e91
cat <<EOF > %{buildroot}%{_sysconfdir}/containers/registries.d/registry.access.redhat.com.yaml
bb3e91
docker:
bb3e91
     registry.access.redhat.com:
bb3e91
         sigstore: https://access.redhat.com/webassets/docker/content/sigstore
bb3e91
EOF
bb3e91
bb3e91
cat <<EOF > %{buildroot}%{_sysconfdir}/containers/registries.d/registry.redhat.io.yaml
bb3e91
docker:
bb3e91
     registry.redhat.io:
bb3e91
         sigstore: https://registry.redhat.io/containers/sigstore
bb3e91
EOF
bb3e91
bb3e91
%files
bb3e91
%dir %{_sysconfdir}/containers
bb3e91
%dir %{_sysconfdir}/containers/certs.d
bb3e91
%dir %{_sysconfdir}/containers/registries.d
bb3e91
%dir %{_sysconfdir}/containers/oci
bb3e91
%dir %{_sysconfdir}/containers/oci/hooks.d
bb3e91
%dir %{_sysconfdir}/containers/registries.conf.d
bb3e91
%if !0%{?rhel} || 0%{?centos}
bb3e91
%{_sysconfdir}/pki/rpm-gpg/RPM-GPG-KEY-redhat-release
a956d2
%{_sysconfdir}/pki/rpm-gpg/RPM-GPG-KEY-redhat-beta
bb3e91
%endif
bb3e91
%config(noreplace) %{_sysconfdir}/containers/policy.json
bb3e91
%config(noreplace) %{_sysconfdir}/containers/storage.conf
bb3e91
%config(noreplace) %{_sysconfdir}/containers/registries.conf
bb3e91
%config(noreplace) %{_sysconfdir}/containers/registries.conf.d/*.conf
6ca60b
%config(noreplace) %{_sysconfdir}/containers/registries.d/default.yaml
6ca60b
%config(noreplace) %{_sysconfdir}/containers/registries.d/registry.redhat.io.yaml
6ca60b
%config(noreplace) %{_sysconfdir}/containers/registries.d/registry.access.redhat.com.yaml
bb3e91
%ghost %{_sysconfdir}/containers/containers.conf
bb3e91
%dir %{_sharedstatedir}/containers/sigstore
bb3e91
%{_mandir}/man5/*
bb3e91
%dir %{_datadir}/containers
bb3e91
%{_datadir}/containers/mounts.conf
bb3e91
%{_datadir}/containers/seccomp.json
bb3e91
%{_datadir}/containers/containers.conf
bb3e91
%dir %{_datadir}/rhel/secrets
bb3e91
%{_datadir}/rhel/secrets/*
bb3e91
6ca60b
%changelog
eec041
* Sun Jan 08 2023 Jindrich Novy <jnovy@redhat.com> - 2:1-49
eec041
- update vendored components, regenerate pyxis
eec041
- Resolves: #2158512
eec041
eec041
* Thu Dec 01 2022 Jindrich Novy <jnovy@redhat.com> - 2:1-48
eec041
- update vendored components and configuration files
eec041
- Resolves: #2149776
eec041
eec041
* Wed Oct 26 2022 Jindrich Novy <jnovy@redhat.com> - 2:1-47
eec041
- update vendored components and configuration files
eec041
- Resolves: #2136847
eec041
eec041
* Wed Oct 26 2022 Jindrich Novy <jnovy@redhat.com> - 2:1-46
eec041
- update vendored components and configuration files
eec041
- Resolves: #2136845
eec041
a956d2
* Thu Oct 13 2022 Jindrich Novy <jnovy@redhat.com> - 2:1-45
a956d2
- add beta GPG key
a956d2
- Resolves: #2123611
a956d2
6ca60b
* Tue Aug 23 2022 Jindrich Novy <jnovy@redhat.com> - 2:1-44
6ca60b
- exclude non-go arches because of go-md2man
6ca60b
- Related: #2061316
bb3e91
6ca60b
* Tue Aug 23 2022 Jindrich Novy <jnovy@redhat.com> - 2:1-43
6ca60b
- add beta keys to default-policy.json
6ca60b
- Related: #2061316
bb3e91
6ca60b
* Mon Aug 08 2022 Jindrich Novy <jnovy@redhat.com> - 2:1-42
6ca60b
- update shortnames
6ca60b
- Related: #2061316
6ca60b
6ca60b
* Wed Aug 03 2022 Jindrich Novy <jnovy@redhat.com> - 2:1-41
6ca60b
- drop aardvark-dns and netavark - packaged separately
6ca60b
- update vendored components
6ca60b
- Related: #2061316
6ca60b
6ca60b
* Mon Jun 27 2022 Jindrich Novy <jnovy@redhat.com> - 2:1-40
947b07
- remove rhel-els and update shortnames
6ca60b
- Related: #2061316
947b07
947b07
* Tue Jun 14 2022 Jindrich Novy <jnovy@redhat.com> - 2:1-39
947b07
- update shortnames
947b07
- Related: #2061316
947b07
947b07
* Thu Jun 09 2022 Jindrich Novy <jnovy@redhat.com> - 2:1-38
947b07
- fix unqualified registries in registries.conf generation code
947b07
- Related: #2088139
947b07
947b07
* Mon May 23 2022 Jindrich Novy <jnovy@redhat.com> - 2:1-37
947b07
- update unqualified registries list
947b07
- Related: #2088139
947b07
947b07
* Mon May 09 2022 Jindrich Novy <jnovy@redhat.com> - 2:1-36
947b07
- update aardvark-dns and netavark to 1.0.3
947b07
- update vendored components
947b07
- Related: #2061316
947b07
947b07
* Wed Apr 20 2022 Jindrich Novy <jnovy@redhat.com> - 2:1-35
947b07
- add missing man pages from Fedora
947b07
- Related: #2061316
947b07
947b07
* Wed Apr 06 2022 Jindrich Novy <jnovy@redhat.com> - 2:1-34
947b07
- update to netavark and aardvark-dns 1.0.2
947b07
- update vendored components
947b07
- Related: #2061316
947b07
947b07
* Mon Mar 21 2022 Jindrich Novy <jnovy@redhat.com> - 2:1-33
947b07
- allow consuming aardvark-dns and netavark from upstream branches
947b07
- Related: #2061316
bb3e91
bb3e91
* Mon Feb 28 2022 Jindrich Novy <jnovy@redhat.com> - 2:1-32
bb3e91
- build rust packages with RUSTFLAGS set to make ExecShield happy (Lokesh Mandvekar)
bb3e91
- Related: #2000051
bb3e91
bb3e91
* Mon Feb 28 2022 Jindrich Novy <jnovy@redhat.com> - 2:1-31
bb3e91
- update to netavark and aardvark-dns 1.0.1
bb3e91
- Related: #2000051
bb3e91
bb3e91
* Wed Feb 23 2022 Lokesh Mandvekar <lsm5@redhat.com> - 2:1-30
bb3e91
- archful package should conflict with older noarch package
bb3e91
- Related: #2000051
bb3e91
bb3e91
* Tue Feb 22 2022 Lokesh Mandvekar <lsm5@redhat.com> - 2:1-29
bb3e91
- consistent release tags for all packages
bb3e91
- Related: #2000051
bb3e91
bb3e91
* Tue Feb 22 2022 Lokesh Mandvekar <lsm5@redhat.com> - 2:1-28
bb3e91
- main package should obsolete noarch versions upto 2:1-22
bb3e91
- Related: #2000051
bb3e91
bb3e91
* Mon Feb 21 2022 Lokesh Mandvekar <lsm5@redhat.com> - 2:1-27
bb3e91
- do not specify infra_image in containers.conf
bb3e91
- needed to resolve gating test failures
bb3e91
- Related: #2000051
bb3e91
bb3e91
* Sat Feb 19 2022 Lokesh Mandvekar <lsm5@redhat.com> - 2:1-26
bb3e91
- aardvark-dns built for same arches as netavark
bb3e91
- Related: #2000051
bb3e91
bb3e91
* Sat Feb 19 2022 Lokesh Mandvekar <lsm5@redhat.com> - 2:1-25
bb3e91
- build netavark only for podman's arches
bb3e91
- i686 can't find go-md2man which causes the build to fail otherwise
bb3e91
- Related: #2000051
bb3e91
bb3e91
* Fri Feb 18 2022 Jindrich Novy <jnovy@redhat.com> - 2:1-24
bb3e91
- update to netavark-1.0.0 and aardvark-dns-1.0.0
bb3e91
- Related: #2000051
bb3e91
bb3e91
* Thu Feb 17 2022 Jindrich Novy <jnovy@redhat.com> - 2:1-23
bb3e91
- package aarvark-dns and netavark as part of the containers-common
bb3e91
- Related: #2000051
bb3e91
bb3e91
* Thu Feb 17 2022 Jindrich Novy <jnovy@redhat.com> - 2:1-22
bb3e91
- update shortnames and vendored components
bb3e91
- Related: #2000051
bb3e91
bb3e91
* Wed Feb 16 2022 Jindrich Novy <jnovy@redhat.com> - 2:1-21
bb3e91
- containers.conf should contain network_backend = "cni" in RHEL8.6
bb3e91
- Related: #2000051
bb3e91
bb3e91
* Wed Feb 09 2022 Jindrich Novy <jnovy@redhat.com> - 2:1-20
bb3e91
- update shortname aliases from upstream
bb3e91
- Related: #2000051
bb3e91
bb3e91
* Fri Feb 04 2022 Jindrich Novy <jnovy@redhat.com> - 2:1-19
bb3e91
- sync vendored components
bb3e91
- Related: #2000051
bb3e91
bb3e91
* Fri Feb 04 2022 Jindrich Novy <jnovy@redhat.com> - 2:1-18
bb3e91
- sync vendored components
bb3e91
- Related: #2000051
bb3e91
bb3e91
* Mon Jan 17 2022 Jindrich Novy <jnovy@redhat.com> - 2:1-17
bb3e91
- sync shortname aliases via Pyxis
bb3e91
- Related: #2000051
bb3e91
bb3e91
* Fri Dec 10 2021 Jindrich Novy <jnovy@redhat.com> - 2:1-16
bb3e91
- do not hardcode log_driver = "journald" and events_logger = "journald"
bb3e91
  for RHEL9 and leave the rootful/rootless behaviour change based on
bb3e91
  internal logic
bb3e91
- Related: #2000051
bb3e91
bb3e91
* Thu Dec 09 2021 Jindrich Novy <jnovy@redhat.com> - 2:1-15
bb3e91
- do not allow broken content from Pyxis to land in shortnames.conf
bb3e91
- Related: #2000051
bb3e91
bb3e91
* Wed Dec 08 2021 Jindrich Novy <jnovy@redhat.com> - 2:1-14
bb3e91
- update vendored component versions
bb3e91
- sync shortname aliases via Pyxis
bb3e91
- Related: #2000051
bb3e91
bb3e91
* Tue Nov 30 2021 Jindrich Novy <jnovy@redhat.com> - 2:1-13
bb3e91
- use log_driver = "journald" and events_logger = "journald" for RHEL9
bb3e91
- Related: #2000051
bb3e91
bb3e91
* Tue Nov 16 2021 Jindrich Novy <jnovy@redhat.com> - 2:1-12
bb3e91
- consume seccomp.json from the oldest vendored version of c/common,
bb3e91
  not main branch
bb3e91
- Related: #2000051
bb3e91
bb3e91
* Fri Nov 12 2021 Jindrich Novy <jnovy@redhat.com> - 2:1-11
bb3e91
- use ubi8/pause as ubi9/pause is not available yet
bb3e91
- Related: #2000051
bb3e91
bb3e91
* Wed Nov 10 2021 Jindrich Novy <jnovy@redhat.com> - 2:1-10
bb3e91
- update vendored components
bb3e91
- Related: #2000051
bb3e91
bb3e91
* Tue Nov 02 2021 Jindrich Novy <jnovy@redhat.com> - 2:1-9
bb3e91
- make log_driver = "k8s-file" default in containers.conf
bb3e91
- Related: #2000051
bb3e91
bb3e91
* Fri Oct 01 2021 Jindrich Novy <jnovy@redhat.com> - 2:1-8
bb3e91
- perform only sanity/installability tests for now
bb3e91
- Related: #2000051
bb3e91
bb3e91
* Wed Sep 29 2021 Jindrich Novy <jnovy@redhat.com> - 2:1-7
bb3e91
- update to the new vendored components
bb3e91
- Related: #2000051
bb3e91
bb3e91
* Wed Sep 29 2021 Jindrich Novy <jnovy@redhat.com> - 2:1-6
bb3e91
- add gating.yaml
bb3e91
- Related: #2000051
bb3e91
bb3e91
* Fri Sep 24 2021 Jindrich Novy <jnovy@redhat.com> - 2:1-5
bb3e91
- update to the new vendored components
bb3e91
- Related: #2000051
bb3e91
bb3e91
* Fri Sep 10 2021 Jindrich Novy <jnovy@redhat.com> - 2:1-4
bb3e91
- fix updating scripts
bb3e91
- Related: #2000051
bb3e91
bb3e91
* Thu Sep 09 2021 Jindrich Novy <jnovy@redhat.com> - 2:1-3
bb3e91
- update to the new vendored components
bb3e91
- Related: #2000051
bb3e91
bb3e91
* Fri Aug 20 2021 Lokesh Mandvekar <lsm5@fedoraproject.org> - 2:1-2
bb3e91
- bump configs to latest versions
bb3e91
- replace ubi9 references with ubi8
bb3e91
- Related: #1970747
bb3e91
bb3e91
* Wed Aug 11 2021 Jindrich Novy <jnovy@redhat.com> - 2:1-1
bb3e91
- initial import
bb3e91
- Related: #1970747