%global _lto_cflags %{nil} %global with_check 0 %global _find_debuginfo_dwz_opts %{nil} %global _dwz_low_mem_die_limit 0 %if 0%{?rhel} > 7 && ! 0%{?fedora} %define gobuild(o:) \ go build -buildmode pie -compiler gc -tags="rpm_crashtraceback libtrust_openssl ${BUILDTAGS:-}" -ldflags "${LDFLAGS:-} -compressdwarf=false -B 0x$(head -c20 /dev/urandom|od -An -tx1|tr -d ' \\n') -extldflags '%__global_ldflags'" -a -v %{?**}; %else %define gobuild(o:) GO111MODULE=off go build -buildmode pie -compiler gc -tags="rpm_crashtraceback ${BUILDTAGS:-}" -ldflags "${LDFLAGS:-} -B 0x$(head -c20 /dev/urandom|od -An -tx1|tr -d ' \\n') -extldflags '-Wl,-z,relro -Wl,-z,now -specs=/usr/lib/rpm/redhat/redhat-hardened-ld '" -a -v %{?**}; %endif %global import_path github.com/containers/skopeo %global branch release-1.4 # Bellow definitions are used to deliver config files from a particular branch # of c/image, c/common, c/storage vendored in all podman, skopeo, buildah. # These vendored components must have the same version. If it is not the case, # pick the oldest version on c/image, c/common, c/storage vendored in # podman/skopeo/podman. %global podman_branch v3.3 %global image_branch v5.15.0 %global common_branch v0.42.0 %global storage_branch v1.33.1 %global shortnames_branch main %global commit0 a44da449d35e4621e9993f406d5a4f98dd89965e %global shortcommit0 %(c=%{commit0}; echo ${c:0:7}) Epoch: 1 Name: skopeo Version: 1.4.0 Release: 4%{?dist} Summary: Inspect container images and repositories on registries License: ASL 2.0 URL: %{git0} # https://fedoraproject.org/wiki/PackagingDrafts/Go#Go_Language_Architectures ExclusiveArch: %{go_arches} %if 0%{?branch:1} Source0: https://%{import_path}/tarball/%{commit0}/%{branch}-%{shortcommit0}.tar.gz %else Source0: https://%{import_path}/archive/%{commit0}/%{name}-%{version}-%{shortcommit0}.tar.gz %endif Source1: https://raw.githubusercontent.com/containers/storage/%{storage_branch}/storage.conf Source2: https://raw.githubusercontent.com/containers/storage/%{storage_branch}/docs/containers-storage.conf.5.md Source3: mounts.conf Source4: https://raw.githubusercontent.com/containers/image/%{image_branch}/docs/containers-registries.conf.5.md #Source5: https://raw.githubusercontent.com/containers/image/%%{image_branch}/registries.conf Source5: registries.conf Source6: https://raw.githubusercontent.com/containers/image/%{image_branch}/docs/containers-policy.json.5.md Source7: https://raw.githubusercontent.com/containers/common/main/pkg/seccomp/seccomp.json Source8: https://raw.githubusercontent.com/containers/common/%{common_branch}/docs/containers-mounts.conf.5.md Source9: https://raw.githubusercontent.com/containers/image/%{image_branch}/docs/containers-signature.5.md Source10: https://raw.githubusercontent.com/containers/image/%{image_branch}/docs/containers-transports.5.md Source11: https://raw.githubusercontent.com/containers/image/%{image_branch}/docs/containers-certs.d.5.md Source12: https://raw.githubusercontent.com/containers/image/%{image_branch}/docs/containers-registries.d.5.md Source13: https://raw.githubusercontent.com/containers/common/%{common_branch}/pkg/config/containers.conf Source14: https://raw.githubusercontent.com/containers/common/%{common_branch}/docs/containers.conf.5.md Source15: https://raw.githubusercontent.com/containers/image/%{image_branch}/docs/containers-auth.json.5.md Source16: https://raw.githubusercontent.com/containers/image/%{image_branch}/docs/containers-registries.conf.d.5.md Source17: https://raw.githubusercontent.com/containers/shortnames/%{shortnames_branch}/shortnames.conf Source19: 001-rhel-shortnames-pyxis.conf Source20: 002-rhel-shortnames-overrides.conf Source21: RPM-GPG-KEY-redhat-release Source22: registry.access.redhat.com.yaml Source23: registry.redhat.io.yaml #Source24: https://raw.githubusercontent.com/containers/skopeo/%%{branch}/default-policy.json Source24: default-policy.json Source25: https://raw.githubusercontent.com/containers/skopeo/%{branch}/default.yaml # scripts used for synchronization with upstream and shortname generation Source100: update.sh Source101: update-vendored.sh Source102: pyxis.sh BuildRequires: git-core BuildRequires: golang >= 1.12.12-4 BuildRequires: go-md2man BuildRequires: gpgme-devel BuildRequires: libassuan-devel BuildRequires: pkgconfig(devmapper) BuildRequires: glib2-devel BuildRequires: make Requires: containers-common = %{epoch}:%{version}-%{release} Requires: system-release %description Command line utility to inspect images and repositories directly on Docker registries without the need to pull them %package -n containers-common Summary: Configuration files for working with image signatures Obsoletes: atomic <= 1:1.13.1-2 Conflicts: atomic-registries <= 1:1.22.1-1 Obsoletes: docker-rhsubscription <= 2:1.13.1-31 Provides: %{name}-containers = %{epoch}:%{version}-%{release} Obsoletes: %{name}-containers <= 1:0.1.31-3 %if 0%{?rhel} >= 9 || 0%{?fedora} Requires: crun >= 0.19 %else Requires: runc %endif Recommends: fuse-overlayfs Recommends: slirp4netns Suggests: subscription-manager %description -n containers-common This package installs a default signature store configuration and a default policy under `/etc/containers/`. %package tests Summary: Tests for %{name} Requires: %{name} = %{epoch}:%{version}-%{release} #Requires: bats (which RHEL8 doesn't have. If it ever does, un-comment this) Requires: gnupg Requires: jq Requires: podman Requires: httpd-tools Requires: openssl %description tests %{summary} This package contains system tests for %{name} %prep %if 0%{?branch:1} %autosetup -Sgit -n containers-%{name}-%{shortcommit0} %else %autosetup -Sgit -n %{name}-%{commit0} %endif sed -i 's/install-binary: bin\/%{name}/install-binary:/' Makefile sed -i 's/install-docs: docs/install-docs:/' Makefile %build mkdir -p src/github.com/containers ln -s ../../../ src/%{import_path} mkdir -p vendor/src for v in vendor/*; do if test ${v} = vendor/src; then continue; fi if test -d ${v}; then mv ${v} vendor/src/ fi done export GOPATH=$(pwd):$(pwd)/vendor:%{gopath} export GO111MODULE=off export CGO_CFLAGS="%{optflags} -D_GNU_SOURCE -D_LARGEFILE_SOURCE -D_LARGEFILE64_SOURCE -D_FILE_OFFSET_BITS=64" export BUILDTAGS="exclude_graphdriver_btrfs btrfs_noversion $(hack/libdm_tag.sh)" mkdir -p bin %gobuild -o bin/%{name} ./cmd/%{name} %{__make} docs %install make install DESTDIR=%{buildroot} PREFIX=%{_prefix} install -dp %{buildroot}%{_sysconfdir}/containers/{certs.d,oci/hooks.d,registries.d,registries.conf.d} install -m0644 %{SOURCE1} %{buildroot}%{_sysconfdir}/containers/storage.conf install -m0644 %{SOURCE5} %{buildroot}%{_sysconfdir}/containers/registries.conf install -m0644 %{SOURCE17} %{buildroot}%{_sysconfdir}/containers/registries.conf.d/000-shortnames.conf install -m0644 %{SOURCE19} %{buildroot}%{_sysconfdir}/containers/registries.conf.d/001-rhel-shortnames.conf install -m0644 %{SOURCE20} %{buildroot}%{_sysconfdir}/containers/registries.conf.d/002-rhel-shortnames-overrides.conf # for signature verification %if !0%{?rhel} || 0%{?centos} install -dp %{buildroot}%{_sysconfdir}/pki/rpm-gpg install -m0644 %{SOURCE21} %{buildroot}%{_sysconfdir}/pki/rpm-gpg %endif install -dp %{buildroot}%{_sysconfdir}/containers/registries.d install -m0644 %{SOURCE22} %{buildroot}%{_sysconfdir}/containers/registries.d install -m0644 %{SOURCE23} %{buildroot}%{_sysconfdir}/containers/registries.d install -m0644 %{SOURCE24} %{buildroot}%{_sysconfdir}/containers/policy.json install -dp %{buildroot}%{_sharedstatedir}/containers/sigstore install -m0644 %{SOURCE25} %{buildroot}%{_sysconfdir}/containers/registries.d/default.yaml # for containers-common install -dp %{buildroot}%{_mandir}/man5 go-md2man -in %{SOURCE2} -out %{buildroot}%{_mandir}/man5/containers-storage.conf.5 go-md2man -in %{SOURCE4} -out %{buildroot}%{_mandir}/man5/containers-registries.conf.5 go-md2man -in %{SOURCE6} -out %{buildroot}%{_mandir}/man5/containers-policy.json.5 go-md2man -in %{SOURCE8} -out %{buildroot}%{_mandir}/man5/containers-mounts.conf.5 go-md2man -in %{SOURCE9} -out %{buildroot}%{_mandir}/man5/containers-signature.5 go-md2man -in %{SOURCE10} -out %{buildroot}%{_mandir}/man5/containers-transports.5 go-md2man -in %{SOURCE11} -out %{buildroot}%{_mandir}/man5/containers-certs.d.5 go-md2man -in %{SOURCE12} -out %{buildroot}%{_mandir}/man5/containers-registries.d.5 go-md2man -in %{SOURCE14} -out %{buildroot}%{_mandir}/man5/containers.conf.5 go-md2man -in %{SOURCE15} -out %{buildroot}%{_mandir}/man5/containers-auth.json.5 go-md2man -in %{SOURCE16} -out %{buildroot}%{_mandir}/man5/containers-registries.conf.d.5 install -dp %{buildroot}%{_datadir}/containers install -m0644 %{SOURCE3} %{buildroot}%{_datadir}/containers/mounts.conf install -m0644 %{SOURCE7} %{buildroot}%{_datadir}/containers/seccomp.json install -m0644 %{SOURCE13} %{buildroot}%{_datadir}/containers/containers.conf # install secrets patch directory install -d -p -m 755 %{buildroot}/%{_datadir}/rhel/secrets # rhbz#1110876 - update symlinks for subscription management ln -s %{_sysconfdir}/pki/entitlement %{buildroot}%{_datadir}/rhel/secrets/etc-pki-entitlement ln -s %{_sysconfdir}/rhsm %{buildroot}%{_datadir}/rhel/secrets/rhsm ln -s %{_sysconfdir}/yum.repos.d/redhat.repo %{buildroot}%{_datadir}/rhel/secrets/redhat.repo # ship preconfigured /etc/containers/registries.d/ files with containers-common - #1903813 cat < %{buildroot}%{_sysconfdir}/containers/registries.d/registry.access.redhat.com.yaml docker: registry.access.redhat.com: sigstore: https://access.redhat.com/webassets/docker/content/sigstore EOF cat < %{buildroot}%{_sysconfdir}/containers/registries.d/registry.redhat.io.yaml docker: registry.redhat.io: sigstore: https://registry.redhat.io/containers/sigstore EOF # system tests install -d -p %{buildroot}/%{_datadir}/%{name}/test/system cp -pav systemtest/* %{buildroot}/%{_datadir}/%{name}/test/system/ %check %if 0%{?with_check} export GOPATH=%{buildroot}/%{gopath}:$(pwd)/vendor:%{gopath} %gotest %{import_path}/integration %endif #define license tag if not already defined %{!?_licensedir:%global license %doc} %files -n containers-common %dir %{_sysconfdir}/containers %dir %{_sysconfdir}/containers/certs.d %dir %{_sysconfdir}/containers/registries.d %{_sysconfdir}/containers/registries.d/registry.redhat.io.yaml %{_sysconfdir}/containers/registries.d/registry.access.redhat.com.yaml %dir %{_sysconfdir}/containers/oci %dir %{_sysconfdir}/containers/oci/hooks.d %dir %{_sysconfdir}/containers/registries.conf.d %if !0%{?rhel} || 0%{?centos} %{_sysconfdir}/pki/rpm-gpg/RPM-GPG-KEY-redhat-release %endif %config(noreplace) %{_sysconfdir}/containers/policy.json %config(noreplace) %{_sysconfdir}/containers/registries.d/default.yaml %config(noreplace) %{_sysconfdir}/containers/storage.conf %config(noreplace) %{_sysconfdir}/containers/registries.conf %config(noreplace) %{_sysconfdir}/containers/registries.conf.d/*.conf %config(noreplace) %{_sysconfdir}/containers/registries.d/*.yaml %ghost %{_sysconfdir}/containers/containers.conf %dir %{_sharedstatedir}/containers/sigstore %{_mandir}/man5/* %dir %{_datadir}/containers %{_datadir}/containers/mounts.conf %{_datadir}/containers/seccomp.json %{_datadir}/containers/containers.conf %dir %{_datadir}/rhel/secrets %{_datadir}/rhel/secrets/* %files %license LICENSE %doc README.md %{_bindir}/%{name} %{_mandir}/man1/%{name}* %dir %{_datadir}/bash-completion %dir %{_datadir}/bash-completion/completions %{_datadir}/bash-completion/completions/%{name} %files tests %license LICENSE %{_datadir}/%{name}/test %changelog * Wed Aug 04 2021 Jindrich Novy - 1:1.4.0-4 - don't define short-name-mode in RHEL8 - Related: #1934415 * Tue Aug 03 2021 Jindrich Novy - 1:1.4.0-3 - re-add Requires: runc - Related: #1934415 * Tue Aug 03 2021 Jindrich Novy - 1:1.4.0-2 - update to 1.4.0 release and switch to the release-1.4 maint branch - Related: #1934415 * Mon Aug 02 2021 Jindrich Novy - 1:1.4.0-1 - update vendored components - ship /etc/pki/rpm-gpg/RPM-GPG-KEY-redhat-release only on non-RHEL and CentOS distros - Related: #1934415 * Wed Jul 21 2021 Jindrich Novy - 1:1.3.1-7 - switch to "main" branch of podman - Related: #1934415 * Wed Jul 21 2021 Jindrich Novy - 1:1.3.1-6 - move unqualified-search-registries to [registries.search] - Resolves: #1977280 * Thu Jul 15 2021 Jindrich Novy - 1:1.3.1-5 - update shortnames from Pyxis - Related: #1934415 * Wed Jul 07 2021 Jindrich Novy - 1:1.3.1-4 - add direct runc dependency to avoid situation when runc is listed as default runtime but only crun is present in RHEL8 - Related: #1934415 * Mon Jul 05 2021 Jindrich Novy - 1:1.3.1-3 - update to the latest content of https://github.com/containers/skopeo/tree/release-1.3 (https://github.com/containers/skopeo/commit/038f70e) - Related: #1934415 * Thu Jul 01 2021 Jindrich Novy - 1:1.3.1-2 - use v3.2 branch for podman and update vendored branches - Related: #1934415 * Thu Jul 01 2021 Jindrich Novy - 1:1.3.1-1 - update to https://github.com/containers/skopeo/releases/tag/v1.3.1 - Related: #1934415 * Mon Jun 28 2021 Jindrich Novy - 1:1.3.0-5 - update shortname overrides - Related: #1952204 * Thu Jun 10 2021 Jindrich Novy - 1:1.3.0-4 - sync with Pyxis - use containers-mounts.conf.5.md from containers/common - Related: #1934415 * Mon May 24 2021 Jindrich Novy - 1:1.3.0-3 - update to new versions of vendored components - fail is there is an issue in communication with Pyxis API - understand devel branch in update.sh script - Related: #1934415 * Fri May 21 2021 Jindrich Novy - 1:1.3.0-2 - fix filelist with the new upstream release - Related: #1934415 * Thu May 20 2021 Jindrich Novy - 1:1.3.0-1 - update to https://github.com/containers/skopeo/releases/tag/v1.3.0 - Related: #1934415 * Tue May 11 2021 Jindrich Novy - 1:1.2.3-3 - update vendored components versions - sync shortnames with pyxis - Related: #1934415 * Mon Apr 26 2021 Jindrich Novy - 1:1.2.3-2 - assure runc is set as default runtime in RHEL8 - update shortnames from upstream - sync vendored component versions with upstream - Related: #1934415 * Mon Apr 26 2021 Jindrich Novy - 1:1.2.3-1 - update to skopeo-1.2.3 - sync with Fedora deps - fix typo in upstream Makefile - Related: #1934415 * Thu Apr 22 2021 Jindrich Novy - 1:1.2.2-6 - add update-vendored.sh, pyxis.sh and amend the shortname generation - Related: #1934415 * Wed Apr 07 2021 Jindrich Novy - 1:1.2.2-5 - require crun >= 0.19 and set it as default OCI runtime - add ensure() function to update.sh so that configuration statements can be easily amended/reviewed - Related: #1934415 * Mon Mar 15 2021 Jindrich Novy - 1:1.2.2-4 - use infra_image = "registry.redhat.io/ubi8/pause" in containers.conf (unlike previous one ubi8/pause doesn't require authentication) - Related: #1934415 * Fri Mar 12 2021 Jindrich Novy - 1:1.2.2-3 - use infra_image = "registry.redhat.io/rhel8/pause" in contiainers.conf - add update-vendored.sh script which will always assure we ship documentation/configs for versions vendored in podman, buildah and skopeo - Related: #1934415 * Wed Mar 03 2021 Jindrich Novy - 1:1.2.2-2 - use rhel-shortnames only from trusted registries - sync with config files from current versions of vendored projects - Resolves: #1933775 - Resolves: #1933776 * Fri Feb 19 2021 Jindrich Novy - 1:1.2.2-1 - update to the latest content of https://github.com/containers/skopeo/tree/release-1.2 (https://github.com/containers/skopeo/commit/e72dd9c) - Related: #1883490 * Thu Feb 18 2021 Jindrich Novy - 1:1.2.1-14 - rename shortnames.conf to 000-shortnames.conf to assure evaluation order - Related: #1883490 * Thu Feb 18 2021 Jindrich Novy - 1:1.2.1-13 - update to the latest content of https://github.com/containers/skopeo/tree/release-1.2 (https://github.com/containers/skopeo/commit/3abb778) - Related: #1883490 * Mon Feb 15 2021 Jindrich Novy - 1:1.2.1-12 - update to the latest content of https://github.com/containers/skopeo/tree/release-1.2 (https://github.com/containers/skopeo/commit/b4210c0) - Resolves: #1914884 * Sat Feb 06 2021 Jindrich Novy - 1:1.2.1-11 - update to the latest content of https://github.com/containers/skopeo/tree/release-1.2 (https://github.com/containers/skopeo/commit/6c0e35a) - Related: #1883490 * Tue Feb 02 2021 Jindrich Novy - 1:1.2.1-10 - update to the latest content of https://github.com/containers/skopeo/tree/release-1.2 (https://github.com/containers/skopeo/commit/a05ddb8) - Related: #1883490 * Sun Jan 31 2021 Jindrich Novy - 1:1.2.1-9 - define 8.4.0 branch for podman (v3.0) - remove redundant source file - Related: #1883490 * Sun Jan 31 2021 Jindrich Novy - 1:1.2.1-8 - update to the latest content of https://github.com/containers/skopeo/tree/release-1.2 (https://github.com/containers/skopeo/commit/2e90a8a) - Related: #1883490 * Fri Jan 29 2021 Jindrich Novy - 1:1.2.1-7 - convert subscription-manager from weak dep to a hint - Related: #1883490 * Tue Jan 19 2021 Jindrich Novy - 1:1.2.1-6 - fix rhel-shortnames.conf generation (avoid duplicates and records with invalid URL) - Related: #1883490 * Mon Jan 18 2021 Jindrich Novy - 1:1.2.1-5 - assure "NET_RAW" is always defined - support rhel-shortnames.conf with generated shortname/registry aliases - Related: #1883490 * Fri Jan 15 2021 Jindrich Novy - 1:1.2.1-4 - add "NET_RAW" default capability - Related: #1883490 * Tue Jan 12 2021 Jindrich Novy - 1:1.2.1-3 - ship preconfigured /etc/containers/registries.d/ files with containers-common - Related: #1883490 * Tue Jan 12 2021 Jindrich Novy - 1:1.2.1-2 - add shortnames from https://github.com/containers/shortnames - Related: #1883490 * Mon Jan 11 2021 Jindrich Novy - 1:1.2.1-1 - update vendored component versions - update to the latest content of https://github.com/containers/skopeo/tree/release-1.2 (https://github.com/containers/skopeo/commit/2e90a8a) - Related: #1883490 * Fri Jan 08 2021 Jindrich Novy - 1:1.2.0-6 - gating tests fixes and bump podman branch - Related: #1883490 * Tue Dec 08 2020 Jindrich Novy - 1:1.2.0-5 - still use arch exclude as the go_arches macro is broken for 8.4 - Related: #1883490 * Wed Dec 02 2020 Jindrich Novy - 1:1.2.0-4 - unify vendored branches - add validation script - Related: #1883490 * Thu Nov 05 2020 Jindrich Novy - 1:1.2.0-3 - simplify spec file - use short commit ID in tarball name - Related: #1883490 * Fri Oct 23 2020 Jindrich Novy - 1:1.2.0-2 - synchronize with stream-container-tools-rhel8 - Related: #1883490 * Thu Oct 22 2020 Jindrich Novy - 1:1.2.0-1 - synchronize with stream-container-tools-rhel8 - Related: #1883490 * Tue Aug 11 2020 Jindrich Novy - 1:1.1.1-3 - propagate proper CFLAGS to CGO_CFLAGS to assure code hardening and optimization - Related: #1821193 * Wed Jul 29 2020 Jindrich Novy - 1:1.1.1-2 - drop applied patches - Related: #1821193 * Wed Jul 29 2020 Jindrich Novy - 1:1.1.1-1 - update to https://github.com/containers/skopeo/releases/tag/v1.1.1 - Related: #1821193 * Thu Jul 23 2020 Eduardo Santiago - 1:1.1.0-3 - fix broken gating tests: docker unexpectedly removed htpasswd from their 'registry:2' image, so we now use htpasswd from httpd-tools on host. * Fri Jul 17 2020 Jindrich Novy - 1:1.1.0-2 - fix "CVE-2020-14040 skopeo: golang.org/x/text: possibility to trigger an infinite loop in encoding/unicode could lead to crash [rhel-8]" - Resolves: #1854719 * Fri Jun 19 2020 Jindrich Novy - 1:1.1.0-1 - update to https://github.com/containers/skopeo/releases/tag/v1.1.0 - Related: #1821193 * Wed Jun 10 2020 Jindrich Novy - 1:1.0.0-2 - exclude i686 arch - Related: #1821193 * Tue May 19 2020 Jindrich Novy - 1:1.0.0-1 - update to https://github.com/containers/skopeo/releases/tag/v1.0.0 - Related: #1821193 * Tue May 12 2020 Jindrich Novy - 1:0.2.0-6 - synchronize containter-tools 8.3.0 with 8.2.1 - Related: #1821193 * Mon Apr 06 2020 Jindrich Novy - 1:0.1.41-1 - update to 0.1.41 - Related: #1821193 * Fri Mar 06 2020 Jindrich Novy - 1:0.1.40-10 - modify registries.conf default configuration to be more secure by default - Resolves: #1810053 * Fri Feb 14 2020 Jindrich Novy - 1:0.1.40-9 - Fix CVE-2020-1702. - Resolves: #1801922 * Thu Jan 02 2020 Jindrich Novy - 1:0.1.40-8 - change the search order of registries and remove quay.io (#1784267) * Wed Dec 11 2019 Jindrich Novy - 1:0.1.40-7 - compile in FIPS mode - Related: RHELPLAN-25139 * Mon Dec 09 2019 Jindrich Novy - 1:0.1.40-6 - be sure to use golang >= 1.12.12-4 - Related: RHELPLAN-25139 * Wed Dec 04 2019 Jindrich Novy - 1:0.1.40-5 - fix file list - Related: RHELPLAN-25139 * Wed Dec 04 2019 Jindrich Novy - 1:0.1.40-4 - fix symlinks in /usr/share/rhel/secrets and make subscription-manager soft dependency to make them work - Related: RHELPLAN-25139 * Thu Nov 28 2019 Jindrich Novy - 1:0.1.40-3 - rebuild because of CVE-2019-9512 and CVE-2019-9514 - Resolves: #1772132, #1772137 * Wed Nov 20 2019 Jindrich Novy - 1:0.1.40-2 - comment out mountopt option in order to fix gating tests see bug 1769769 - Related: RHELPLAN-25139 * Wed Nov 06 2019 Jindrich Novy - 1:0.1.40-1 - update to 0.1.40 - Related: RHELPLAN-25139 * Thu Sep 12 2019 Jindrich Novy - 1:0.1.37-5 - Fix CVE-2019-10214 (#1734651). * Thu Aug 15 2019 Jindrich Novy - 1:0.1.37-4 - fix permissions of rhel/secrets Resolves: #1691543 * Fri Jun 14 2019 Lokesh Mandvekar - 1:0.1.37-3 - Resolves: #1719994 - add registry.access.redhat.com to registries.conf * Fri Jun 14 2019 Lokesh Mandvekar - 1:0.1.37-2 - Resolves: #1721247 - enable fips mode * Fri Jun 14 2019 Lokesh Mandvekar - 1:0.1.37-1 - Resolves: #1720654 - rebase to v0.1.37 * Tue Jun 4 2019 Eduardo Santiago - 1:0.1.36-1.git6307635 - built upstream tag v0.1.36, including system tests * Tue Apr 30 2019 Lokesh Mandvekar - 1:0.1.32-4.git1715c90 - Fixes @openshift/machine-config-operator#669 - install /etc/containers/oci/hooks.d and /etc/containers/certs.d * Tue Dec 18 2018 Frantisek Kluknavsky - 1:0.1.32-3.git1715c90 - rebase * Mon Dec 17 2018 Frantisek Kluknavsky - 1:0.1.32-2.git1715c90 - re-enable debuginfo * Mon Dec 17 2018 Frantisek Kluknavsky - 1:0.1.31-12.gitb0b750d - go tools not in scl anymore * Fri Sep 21 2018 Lokesh Mandvekar - 1:0.1.31-11.gitb0b750d - Resolves: #1615609 - built upstream tag v0.1.31 * Thu Aug 23 2018 Lokesh Mandvekar - 1:0.1.31-10.git0144aa8 - Resolves: #1616069 - correct order of registries * Mon Aug 13 2018 Lokesh Mandvekar - 1:0.1.31-9.git0144aa8 - Resolves: #1615609 - rebuild with gobuild tag 'no_openssl' * Fri Aug 10 2018 Lokesh Mandvekar - 1:0.1.31-8.git0144aa8 - Resolves: #1614934 - containers-common soft dep on slirp4netns and fuse-overlayfs * Wed Aug 08 2018 Lokesh Mandvekar - 1:0.1.31-7.git0144aa8 - build with %%gobuild - use scl-ized go-toolset as dep - disable i686 builds temporarily because of go-toolset issues * Wed Jul 18 2018 dwalsh - 1:0.1.31-6.git0144aa8 - add statx to seccomp.json to containers-config - add seccomp.json to containers-config * Tue Jul 03 2018 Lokesh Mandvekar - 1:0.1.31-4.git0144aa8 - Resolves: #1597629 - handle dependency issue for skopeo-containers - rename skopeo-containers to containers-common as in Fedora * Mon Jun 25 2018 Lokesh Mandvekar - 1:0.1.31-3.git0144aa8 - Resolves: #1583762 - btrfs dep removal needs exclude_graphdriver_btrfs buildtag * Wed Jun 13 2018 Lokesh Mandvekar - 1:0.1.31-2.git0144aa8 - correct bz in previous changelog * Wed Jun 13 2018 Lokesh Mandvekar - 1:0.1.31-1.git0144aa8 - Resolves: #1580938 - resolve FTBFS - Resolves: #1583762 - remove dependency on btrfs-progs-devel - bump to v0.1.31 (from master) - built commit ca3bff6 - use go-toolset deps for rhel8 * Tue Apr 03 2018 baude - 0.1.29-5.git7add6fc - Fix small typo in registries.conf * Tue Apr 3 2018 dwalsh - 0.1.29-4.git - Add policy.json.5 * Mon Apr 2 2018 dwalsh - 0.1.29-3.git - Add registries.conf * Mon Apr 2 2018 dwalsh - 0.1.29-2.git - Add registries.conf man page * Thu Mar 29 2018 dwalsh - 0.1.29-1.git - bump to 0.1.29-1 - Updated containers/image docker-archive generates docker legacy compatible images Do not create $DiffID subdirectories for layers with no configs Ensure the layer IDs in legacy docker/tarfile metadata are unique docker-archive: repeated layers are symlinked in the tar file sysregistries: remove all trailing slashes Improve docker/* error messages Fix failure to make auth directory Create a new slice in Schema1.UpdateLayerInfos Drop unused storageImageDestination.{image,systemContext} Load a *storage.Image only once in storageImageSource Support gzip for docker-archive files Remove .tar extension from blob and config file names ostree, src: support copy of compressed layers ostree: re-pull layer if it misses uncompressed_digest|uncompressed_size image: fix docker schema v1 -> OCI conversion Add /etc/containers/certs.d as default certs directory * Fri Feb 09 2018 Fedora Release Engineering - 0.1.28-2.git0270e56 - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild * Fri Feb 2 2018 dwalsh - 0.1.28-1.git - Vendor in fixed libraries in containers/image and containers/storage * Tue Nov 21 2017 dwalsh - 0.1.27-1.git - Fix Conflicts to Obsoletes - Add better docs to man pages. - Use credentials from authfile for skopeo commands - Support storage="" in /etc/containers/storage.conf - Add global --override-arch and --override-os options * Wed Nov 15 2017 dwalsh - 0.1.25-2.git2e8377a7 - Add manifest type conversion to skopeo copy - User can select from 3 manifest types: oci, v2s1, or v2s2 - e.g skopeo copy --format v2s1 --compress-blobs docker-archive:alp.tar dir:my-directory * Wed Nov 8 2017 dwalsh - 0.1.25-2.git7fd6f66b - Force storage.conf to default to overlay * Wed Nov 8 2017 dwalsh - 0.1.25-1.git7fd6f66b - Fix CVE in tar-split - copy: add shared blob directory support for OCI sources/destinations - Aligning Docker version between containers/image and skopeo - Update image-tools, and remove the duplicate Sirupsen/logrus vendor - makefile: use -buildmode=pie * Tue Nov 7 2017 dwalsh - 0.1.24-8.git28d4e08a - Add /usr/share/containers/mounts.conf * Sun Oct 22 2017 dwalsh - 0.1.24-7.git28d4e08a - Bug fixes - Update to release * Tue Oct 17 2017 Lokesh Mandvekar - 0.1.24-6.dev.git28d4e08 - skopeo-containers conflicts with docker-rhsubscription <= 2:1.13.1-31 * Tue Oct 17 2017 dwalsh - 0.1.24-5.dev.git28d4e08 - Add rhel subscription secrets data to skopeo-containers * Thu Oct 12 2017 dwalsh - 0.1.24-4.dev.git28d4e08 - Update container/storage.conf and containers-storage.conf man page - Default override to true so it is consistent with RHEL. * Tue Oct 10 2017 Lokesh Mandvekar - 0.1.24-3.dev.git28d4e08 - built commit 28d4e08 * Mon Sep 18 2017 Lokesh Mandvekar - 0.1.24-2.dev.git875dd2e - built commit 875dd2e - Resolves: gh#416 * Tue Sep 12 2017 Lokesh Mandvekar - 0.1.24-1.dev.gita41cd0 - bump to 0.1.24-dev - correct a prior bogus date - fix macro in comment warning * Mon Aug 21 2017 dwalsh - 0.1.23-6.dev.git1bbd87 - Change name of storage.conf.5 man page to containers-storage.conf.5, since it conflicts with inn package - Also remove default to "overalay" in the configuration, since we should - allow containers storage to pick the best default for the platform. * Thu Aug 03 2017 Fedora Release Engineering - 0.1.23-5.git1bbd87f - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild * Sun Jul 30 2017 Florian Weimer - 0.1.23-4.git1bbd87f - Rebuild with binutils fix for ppc64le (#1475636) * Thu Jul 27 2017 Fedora Release Engineering - 0.1.23-3.git1bbd87f - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild * Tue Jul 25 2017 dwalsh - 0.1.23-2.dev.git1bbd87 - Fix storage.conf man page to be storage.conf.5.gz so that it works. * Fri Jul 21 2017 dwalsh - 0.1.23-1.dev.git1bbd87 - Support for OCI V1.0 Images - Update to image-spec v1.0.0 and revendor - Fixes for authentication * Sat Jul 01 2017 Lokesh Mandvekar - 0.1.22-2.dev.git5d24b67 - Epoch: 1 for CentOS as CentOS Extras' build already has epoch set to 1 * Wed Jun 21 2017 dwalsh - 0.1.22-1.dev.git5d24b67 - Give more useful help when explaining usage - Also specify container-storage as a valid transport - Remove docker reference wherever possible - vendor in ostree fixes * Thu Jun 15 2017 dwalsh - 0.1.21-1.dev.git0b73154 - Add support for storage.conf and storage-config.5.md from github container storage package - Bump to the latest version of skopeo - vendor.conf: add ostree-go - it is used by containers/image for pulling images to the OSTree storage. - fail early when image os does not match host os - Improve documentation on what to do with containers/image failures in test-skopeo - We now have the docker-archive: transport - Integration tests with built registries also exist - Support /etc/docker/certs.d - update image-spec to v1.0.0-rc6 * Tue May 23 2017 bbaude - 0.1.20-1.dev.git0224d8c - BZ #1380078 - New release * Tue Apr 25 2017 bbaude - 0.1.19-2.dev.git0224d8c - No golang support for ppc64. Adding exclude arch. BZ #1445490 * Tue Feb 28 2017 Lokesh Mandvekar - 0.1.19-1.dev.git0224d8c - bump to v0.1.19-dev - built commit 0224d8c * Sat Feb 11 2017 Fedora Release Engineering - 0.1.17-3.dev.git2b3af4a - Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild * Sat Dec 10 2016 Igor Gnatenko - 0.1.17-2.dev.git2b3af4a - Rebuild for gpgme 1.18 * Tue Dec 06 2016 Lokesh Mandvekar - 0.1.17-1.dev.git2b3af4a - bump to 0.1.17-dev * Fri Nov 04 2016 Antonio Murdaca - 0.1.14-6.git550a480 - Fix BZ#1391932 * Tue Oct 18 2016 Antonio Murdaca - 0.1.14-5.git550a480 - Conflicts with atomic in skopeo-containers * Wed Oct 12 2016 Antonio Murdaca - 0.1.14-4.git550a480 - built skopeo-containers * Wed Sep 21 2016 Lokesh Mandvekar - 0.1.14-3.gitd830391 - built mtrmac/integrate-all-the-things commit d830391 * Thu Sep 08 2016 Lokesh Mandvekar - 0.1.14-2.git362bfc5 - built commit 362bfc5 * Thu Aug 11 2016 Lokesh Mandvekar - 0.1.14-1.gitffe92ed - build origin/master commit ffe92ed * Thu Jul 21 2016 Fedora Release Engineering - 0.1.13-6 - https://fedoraproject.org/wiki/Changes/golang1.7 * Tue Jun 21 2016 Lokesh Mandvekar - 0.1.13-5 - include go-srpm-macros and compiler(go-compiler) in fedora conditionals - define %%gobuild if not already - add patch to build with older version of golang * Thu Jun 02 2016 Antonio Murdaca - 0.1.13-4 - update to v0.1.12 * Tue May 31 2016 Antonio Murdaca - 0.1.12-3 - fix go build source path * Fri May 27 2016 Antonio Murdaca - 0.1.12-2 - update to v0.1.12 * Tue Mar 08 2016 Antonio Murdaca - 0.1.11-1 - update to v0.1.11 * Tue Mar 08 2016 Antonio Murdaca - 0.1.10-1 - update to v0.1.10 - change runcom -> projectatomic * Mon Feb 29 2016 Antonio Murdaca - 0.1.9-1 - update to v0.1.9 * Mon Feb 29 2016 Antonio Murdaca - 0.1.8-1 - update to v0.1.8 * Mon Feb 22 2016 Fedora Release Engineering - 0.1.4-2 - https://fedoraproject.org/wiki/Changes/golang1.6 * Fri Jan 29 2016 Antonio Murdaca - 0.1.4 - First package for Fedora