|
Lukas Vrabec |
03d22f |
#!/bin/bash
|
|
Lukas Vrabec |
03d22f |
|
|
Lukas Vrabec |
03d22f |
DISTGIT_PATH=$(pwd)
|
|
Lukas Vrabec |
03d22f |
|
|
Lukas Vrabec |
03d22f |
FEDORA_VERSION=rawhide
|
|
Lukas Vrabec |
b040fb |
DOCKER_FEDORA_VERSION=master
|
|
Lukas Vrabec |
03d22f |
DISTGIT_BRANCH=master
|
|
Lukas Vrabec |
03d22f |
|
|
Lukas Vrabec |
03d22f |
git checkout $DISTGIT_BRANCH -q
|
|
Lukas Vrabec |
03d22f |
|
|
Lukas Vrabec |
03d22f |
POLICYSOURCES=`mktemp -d policysources.XXXXXX`
|
|
Lukas Vrabec |
03d22f |
pushd $POLICYSOURCES > /dev/null
|
|
Lukas Vrabec |
03d22f |
|
|
Lukas Vrabec |
03d22f |
git clone git@github.com:fedora-selinux/selinux-policy.git -q
|
|
Lukas Vrabec |
47948f |
git clone git@github.com:fedora-selinux/selinux-policy-contrib.git -q
|
|
Lukas Vrabec |
ab3db2 |
git clone git@github.com:projectatomic/container-selinux.git -q
|
|
Lukas Vrabec |
03d22f |
|
|
Lukas Vrabec |
03d22f |
pushd selinux-policy > /dev/null
|
|
Miroslav Grepl |
856e20 |
# prepare policy patches against upstream commits matching the last upstream merge
|
|
Lukas Vrabec |
51dc83 |
git checkout $FEDORA_VERSION
|
|
Lukas Vrabec |
51dc83 |
BASE_HEAD_ID=$(git rev-parse HEAD)
|
|
Lukas Vrabec |
51dc83 |
BASE_SHORT_HEAD_ID=$(c=${BASE_HEAD_ID}; echo ${c:0:7})
|
|
Lukas Vrabec |
47948f |
popd > /dev/null
|
|
Lukas Vrabec |
47948f |
|
|
Lukas Vrabec |
47948f |
pushd selinux-policy-contrib > /dev/null
|
|
Lukas Vrabec |
47948f |
# prepare policy patches against upstream commits matching the last upstream merge
|
|
Lukas Vrabec |
51dc83 |
git checkout $FEDORA_VERSION
|
|
Lukas Vrabec |
51dc83 |
CONTRIB_HEAD_ID=$(git rev-parse HEAD)
|
|
Lukas Vrabec |
51dc83 |
CONTRIB_SHORT_HEAD_ID=$(c=${CONTRIB_HEAD_ID}; echo ${c:0:7})
|
|
Lukas Vrabec |
03d22f |
popd > /dev/null
|
|
Lukas Vrabec |
03d22f |
|
|
Lukas Vrabec |
ab3db2 |
pushd container-selinux > /dev/null
|
|
Lukas Vrabec |
ab3db2 |
# Actual container-selinux files are in master branch
|
|
Lukas Vrabec |
d93225 |
#git checkout -b ${DOCKER_FEDORA_VERSION} -t origin/${DOCKER_FEDORA_VERSION} -q
|
|
Lukas Vrabec |
ab3db2 |
tar -czf container-selinux.tgz container.if container.te container.fc
|
|
Lukas Vrabec |
03d22f |
popd > /dev/null
|
|
Lukas Vrabec |
03d22f |
|
|
Lukas Vrabec |
03d22f |
pushd $DISTGIT_PATH > /dev/null
|
|
Lukas Vrabec |
51dc83 |
wget -nc https://github.com/fedora-selinux/selinux-policy/archive/${BASE_HEAD_ID}/selinux-policy-${BASE_SHORT_HEAD_ID}.tar.gz &> /dev/null
|
|
Lukas Vrabec |
51dc83 |
wget -nc https://github.com/fedora-selinux/selinux-policy-contrib/archive/${CONTRIB_HEAD_ID}/selinux-policy-contrib-${CONTRIB_SHORT_HEAD_ID}.tar.gz &> /dev/null
|
|
Lukas Vrabec |
ab3db2 |
cp $POLICYSOURCES/container-selinux/container-selinux.tgz .
|
|
Lukas Vrabec |
03d22f |
popd > /dev/null
|
|
Lukas Vrabec |
03d22f |
|
|
Lukas Vrabec |
03d22f |
popd > /dev/null
|
|
Lukas Vrabec |
03d22f |
rm -rf $POLICYSOURCES
|
|
Lukas Vrabec |
03d22f |
|
|
Lukas Vrabec |
51dc83 |
echo -e "\nSELinux policy tarballs and container.tgz with container policy files have been created."
|
|
Lukas Vrabec |
51dc83 |
echo "Replace commit ids of selinux-policy and selinux-policy-contrib in spec file to:"
|
|
Lukas Vrabec |
51dc83 |
echo "commit0 " ${BASE_HEAD_ID}
|
|
Lukas Vrabec |
51dc83 |
echo "commit1 " ${CONTRIB_HEAD_ID}
|