From 0ffccc1e428d554125b3225e0c3b014d53fad50e Mon Sep 17 00:00:00 2001 From: CentOS Sources Date: Dec 07 2021 17:28:05 +0000 Subject: import oci-seccomp-bpf-hook-1.2.3-5.el9 --- diff --git a/.gitignore b/.gitignore new file mode 100644 index 0000000..2e2d16a --- /dev/null +++ b/.gitignore @@ -0,0 +1 @@ +SOURCES/v1.2.3.tar.gz diff --git a/.oci-seccomp-bpf-hook.metadata b/.oci-seccomp-bpf-hook.metadata new file mode 100644 index 0000000..451dfb1 --- /dev/null +++ b/.oci-seccomp-bpf-hook.metadata @@ -0,0 +1 @@ +5aa9db48e03292962a20250721a790540f96da71 SOURCES/v1.2.3.tar.gz diff --git a/SPECS/oci-seccomp-bpf-hook.spec b/SPECS/oci-seccomp-bpf-hook.spec new file mode 100644 index 0000000..a329232 --- /dev/null +++ b/SPECS/oci-seccomp-bpf-hook.spec @@ -0,0 +1,203 @@ +%global with_check 0 + +%global _find_debuginfo_dwz_opts %{nil} +%global _dwz_low_mem_die_limit 0 + +# https://bugzilla.redhat.com/show_bug.cgi?id=1904567 +%global _lto_cflags %%{nil} + +%if 0%{?rhel} > 7 && ! 0%{?fedora} +%define gobuild(o:) \ +go build -buildmode pie -compiler gc -tags="rpm_crashtraceback libtrust_openssl ${BUILDTAGS:-}" -ldflags "${LDFLAGS:-} -linkmode=external -compressdwarf=false -B 0x$(head -c20 /dev/urandom|od -An -tx1|tr -d ' \\n') -extldflags '%__global_ldflags'" -a -v %{?**}; +%else +%if ! 0%{?gobuild:1} +%define gobuild(o:) GO111MODULE=off go build -buildmode pie -compiler gc -tags="rpm_crashtraceback ${BUILDTAGS:-}" -ldflags "${LDFLAGS:-} -linkmode=external -B 0x$(head -c20 /dev/urandom|od -An -tx1|tr -d ' \\n') -extldflags '-Wl,-z,relro -Wl,-z,now -specs=/usr/lib/rpm/redhat/redhat-hardened-ld '" -a -v %{?**}; +%endif +%endif + +%global provider github +%global provider_tld com +%global project containers +%global repo oci-seccomp-bpf-hook +# https://github.com/containers/oci-seccomp-bpf-hook +%global provider_prefix %{provider}.%{provider_tld}/%{project}/%{repo} +%global import_path %{provider_prefix} +%global git0 https://%{provider}.%{provider_tld}/%{project}/%{repo} + +# https://fedoraproject.org/wiki/PackagingDrafts/Go#Go_Language_Architectures +ExclusiveArch: %{go_arches} + +Name: oci-seccomp-bpf-hook +Version: 1.2.3 +Release: 5%{?dist} +Summary: OCI Hook to generate seccomp json files based on EBF syscalls used by container +License: ASL 2.0 +URL: %{git0} +Source0: %{git0}/archive/v%{version}.tar.gz +BuildRequires: golang +BuildRequires: go-md2man +BuildRequires: glib2-devel +BuildRequires: glibc-devel +BuildRequires: bcc-devel +BuildRequires: git +BuildRequires: gpgme-devel +BuildRequires: libseccomp-devel +BuildRequires: make +Conflicts: crun < 0.17 +Enhances: podman +Enhances: cri-o + +%description +%{summary} +%{repo} provides a library for applications looking to use +the Container Pod concept popularized by Kubernetes. + +%prep +%autosetup -Sgit +sed -i '/$(MAKE) -C docs install/d' Makefile +sed -i 's/HOOK_BIN_DIR/\%{_usr}\/libexec\/oci\/hooks.d/' %{name}.json +sed -i '/$(HOOK_DIR)\/%{name}.json/d' Makefile + +%build +export GO111MODULE=off +export GOPATH=$(pwd):$(pwd)/_build +export CGO_CFLAGS="%{optflags} -D_GNU_SOURCE -D_LARGEFILE_SOURCE -D_LARGEFILE64_SOURCE -D_FILE_OFFSET_BITS=64" + +mkdir _build +pushd _build +mkdir -p src/%{provider}.%{provider_tld}/%{project} +ln -s ../../../../ src/%{import_path} +popd +ln -s vendor src + +export GOPATH=$(pwd)/_build:$(pwd) +export LDFLAGS="-X main.version=%{version}" +%gobuild -o bin/%{name} %{import_path} + +pushd docs +go-md2man -in %{name}.md -out %{name}.1 +popd + +%install +%{__make} DESTDIR=%{buildroot} PREFIX=%{_prefix} install-nobuild +%{__make} DESTDIR=%{buildroot} PREFIX=%{_prefix} GOMD2MAN=go-md2man -C docs install-nobuild + +%check +%if 0%{?with_check} +# Since we aren't packaging up the vendor directory we need to link +# back to it somehow. Hack it up so that we can add the vendor +# directory from BUILD dir as a gopath to be searched when executing +# tests from the BUILDROOT dir. +ln -s ./ ./vendor/src # ./vendor/src -> ./vendor + +export GOPATH=%{buildroot}/%{gopath}:$(pwd)/vendor:%{gopath} + +%if ! 0%{?gotest:1} +%global gotest go test +%endif + +%gotest %{import_path}/src/%{name} +%endif + +#define license tag if not already defined +%{!?_licensedir:%global license %doc} + +%files +%license LICENSE +%doc README.md +%dir %{_libexecdir}/oci/hooks.d +%{_libexecdir}/oci/hooks.d/%{name} +%{_datadir}/containers/oci/hooks.d/%{name}.json +%{_mandir}/man1/%{name}.1* + +%changelog +* Fri Oct 01 2021 Jindrich Novy - 1.2.3-5 +- perform only sanity/installability tests for now +- Related: #2000051 + +* Wed Sep 29 2021 Jindrich Novy - 1.2.3-4 +- add gating.yaml +- Related: #2000051 + +* Mon Aug 09 2021 Mohan Boddu - 1.2.3-3 +- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags + Related: rhbz#1991688 + +* Tue Jun 22 2021 Mohan Boddu - 1.2.3-2 +- Rebuilt for RHEL 9 BETA for openssl 3.0 + Related: rhbz#1971065 + +* Mon Jun 14 2021 Jindrich Novy - 1.2.3-1 +- convert crun dependency to a conflict +- Related: #1970747 + +* Fri Apr 16 2021 Mohan Boddu - 1.2.1-2 +- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 + +* Fri Feb 19 2021 Jindrich Novy - 1.2.1-1 +- update to + https://github.com/containers/oci-seccomp-bpf-hook/releases/tag/v1.2.1 +- require crun >= 0.17 + +* Thu Jan 28 2021 Jindrich Novy - 1.2.0-6 +- revert back to 1.2.0 due to build issues + +* Thu Jan 28 2021 Jindrich Novy - 1.2.1-1 +- update to + https://github.com/containers/oci-seccomp-bpf-hook/releases/tag/v1.2.1 + +* Tue Dec 08 2020 Jindrich Novy - 1.2.0-5 +- use go_arches macro + +* Fri Oct 02 2020 Jindrich Novy - 1.2.0-4 +- use the same arch definitions as present in the bcc package + +* Fri Oct 02 2020 Jindrich Novy - 1.2.0-3 +- exclude also armv7hl arch as bcc is not built there + +* Wed Sep 30 2020 Jindrich Novy - 1.2.0-2 +- fix spec file to accommodate the new upstream release + +* Wed Sep 30 2020 Jindrich Novy - 1.2.0-1 +- update to + https://github.com/containers/oci-seccomp-bpf-hook/releases/tag/v1.2.0 + +* Sat Aug 01 2020 Fedora Release Engineering - 1.1.1-3 +- Second attempt - Rebuilt for + https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild + +* Tue Jul 28 2020 Fedora Release Engineering - 1.1.1-2 +- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild + +* Fri Jul 17 2020 Jindrich Novy - 1.1.1-1 +- update to + https://github.com/containers/oci-seccomp-bpf-hook/releases/tag/v1.1.1 + +* Fri Jul 17 2020 Jindrich Novy - 1.1.0-2 +- switch to mainline releases + +* Tue May 19 2020 Lokesh Mandvekar - 1.1.0-1.1.git05a82a1 +- bump version +- reuse Makefile targets + +* Mon Feb 17 2020 Lokesh Mandvekar - 0.0.1-0.6.gitba7bbb16 +- Resolves: #1799105 - solve ftbfs and build latest upstream commit + +* Wed Jan 29 2020 Fedora Release Engineering - 0.0.1-0.5.git3baa603a +- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild + +* Tue Nov 05 2019 Jindrich Novy - 0.0.1-0.4.git3baa603a +- limit arches to only those supported by bcc so that this can be built + +* Mon Nov 04 2019 Jindrich Novy - 0.0.1-0.3.git3baa603a +- fix the license - should be ASL 2.0 +- use %%gobuild + +* Mon Nov 04 2019 Jindrich Novy - 0.0.1-0.2.git3baa603a +- pull in golang deps as BR + +* Mon Sep 23 2019 Jindrich Novy - 0.0.1-0.1.git3baa603a +- fix spec file and build + +* Sun Sep 22 2019 Dan Walsh - 0.0.1 +- Initial Version