2021-01-12 16:15:47 +00:00
|
|
|
# Below definitions are used to deliver config files from a particular branch
|
2024-07-29 08:52:48 +00:00
|
|
|
# of c/image, c/storage and c/shortnames vendored in all of Buildah, Podman and Skopeo.
|
2020-12-14 10:09:08 +00:00
|
|
|
# These vendored components must have the same version. If it is not the case,
|
2024-07-29 08:52:48 +00:00
|
|
|
# pick the oldest version on c/image, c/storage and c/shortnames vendored in
|
2021-01-12 16:15:47 +00:00
|
|
|
# Buildah/Podman/Skopeo.
|
2024-07-29 08:52:48 +00:00
|
|
|
|
|
|
|
|
# Packit will automatically update the image and storage versions on Fedora and
|
|
|
|
|
# CentOS Stream dist-git PRs.
|
2024-12-16 11:12:58 +00:00
|
|
|
%global skopeo_branch main
|
2024-11-26 01:58:27 +00:00
|
|
|
%global image_branch v5.33.0
|
|
|
|
|
%global storage_branch v1.56.0
|
2021-06-10 12:50:45 +00:00
|
|
|
%global shortnames_branch main
|
2024-12-16 11:12:58 +00:00
|
|
|
%global common_branch v0.61.0
|
2021-01-12 15:24:12 +00:00
|
|
|
|
2024-12-16 11:12:58 +00:00
|
|
|
%global common_version %(v=%{common_branch}; echo ${v:1})
|
2020-12-14 10:09:08 +00:00
|
|
|
|
|
|
|
|
Name: containers-common
|
2024-08-27 08:46:44 +00:00
|
|
|
Epoch: 5
|
2024-12-16 11:12:58 +00:00
|
|
|
Version: %{common_version}
|
|
|
|
|
Release: 1%{?dist}
|
2023-02-14 12:47:26 +00:00
|
|
|
License: Apache-2.0
|
2020-12-14 10:09:08 +00:00
|
|
|
BuildArch: noarch
|
2024-01-29 01:02:41 +00:00
|
|
|
# for BuildRequires: go-md2man
|
|
|
|
|
ExclusiveArch: %{golang_arches} noarch
|
2022-05-18 17:56:21 +00:00
|
|
|
Summary: Common configuration and documentation for containers
|
2024-07-29 08:52:48 +00:00
|
|
|
BuildRequires: git-core
|
2020-12-14 10:09:08 +00:00
|
|
|
BuildRequires: go-md2man
|
2021-03-19 14:19:00 +00:00
|
|
|
Provides: skopeo-containers = %{epoch}:%{version}-%{release}
|
2024-07-29 08:52:48 +00:00
|
|
|
Requires: (container-selinux >= 2:2.162.1 if selinux-policy)
|
2024-08-28 08:21:15 +00:00
|
|
|
Requires: netavark
|
|
|
|
|
Obsoletes: containernetworking-plugins < 2
|
2024-07-29 08:52:48 +00:00
|
|
|
Suggests: fuse-overlayfs
|
2024-10-29 12:58:05 +00:00
|
|
|
%if 0%{?rhel}
|
|
|
|
|
Requires: /etc/pki/sigstore/REKOR-signing-key
|
|
|
|
|
Requires: /etc/pki/sigstore/SIGSTORE-redhat-release3
|
|
|
|
|
%endif
|
2024-12-16 11:12:58 +00:00
|
|
|
URL: https://github.com/containers/common
|
|
|
|
|
Source1: https://raw.githubusercontent.com/containers/storage/%{storage_branch}/storage.conf
|
|
|
|
|
Source2: https://raw.githubusercontent.com/containers/storage/%{storage_branch}/docs/containers-storage.conf.5.md
|
|
|
|
|
Source3: mounts.conf
|
|
|
|
|
Source4: https://raw.githubusercontent.com/containers/image/%{image_branch}/docs/containers-registries.conf.5.md
|
|
|
|
|
Source5: https://raw.githubusercontent.com/containers/image/%{image_branch}/registries.conf
|
|
|
|
|
Source6: https://raw.githubusercontent.com/containers/image/%{image_branch}/docs/containers-policy.json.5.md
|
|
|
|
|
Source7: https://raw.githubusercontent.com/containers/common/%{common_branch}/pkg/seccomp/seccomp.json
|
|
|
|
|
Source8: https://raw.githubusercontent.com/containers/common/%{common_branch}/docs/containers-mounts.conf.5.md
|
|
|
|
|
Source9: https://raw.githubusercontent.com/containers/image/%{image_branch}/docs/containers-signature.5.md
|
|
|
|
|
Source10: https://raw.githubusercontent.com/containers/image/%{image_branch}/docs/containers-transports.5.md
|
|
|
|
|
Source11: https://raw.githubusercontent.com/containers/image/%{image_branch}/docs/containers-certs.d.5.md
|
|
|
|
|
Source12: https://raw.githubusercontent.com/containers/image/%{image_branch}/docs/containers-registries.d.5.md
|
|
|
|
|
Source13: https://raw.githubusercontent.com/containers/common/%{common_branch}/pkg/config/containers.conf
|
|
|
|
|
Source14: https://raw.githubusercontent.com/containers/common/%{common_branch}/docs/containers.conf.5.md
|
|
|
|
|
Source15: https://raw.githubusercontent.com/containers/image/%{image_branch}/docs/containers-auth.json.5.md
|
|
|
|
|
Source16: https://raw.githubusercontent.com/containers/image/%{image_branch}/docs/containers-registries.conf.d.5.md
|
|
|
|
|
Source17: https://raw.githubusercontent.com/containers/shortnames/%{shortnames_branch}/shortnames.conf
|
2024-10-31 11:51:32 +00:00
|
|
|
Source19: 001-rhel-shortnames-pyxis.conf
|
|
|
|
|
Source20: 002-rhel-shortnames-overrides.conf
|
2024-12-16 11:12:58 +00:00
|
|
|
Source22: registry.access.redhat.com.yaml
|
|
|
|
|
Source23: registry.redhat.io.yaml
|
|
|
|
|
#Source24: https://raw.githubusercontent.com/containers/skopeo/%%{skopeo_branch}/default-policy.json
|
|
|
|
|
Source24: default-policy.json
|
|
|
|
|
Source25: https://raw.githubusercontent.com/containers/skopeo/%{skopeo_branch}/default.yaml
|
|
|
|
|
# FIXME: fix the branch once these are available via regular c/common branch
|
|
|
|
|
Source26: https://raw.githubusercontent.com/containers/common/main/docs/Containerfile.5.md
|
|
|
|
|
Source27: https://raw.githubusercontent.com/containers/common/main/docs/containerignore.5.md
|
|
|
|
|
Source29: REKOR-signing-key
|
|
|
|
|
Source30: SIGSTORE-redhat-release3
|
|
|
|
|
|
|
|
|
|
# scripts used for synchronization with upstream and shortname generation
|
|
|
|
|
Source100: update.sh
|
|
|
|
|
Source101: update-vendored.sh
|
|
|
|
|
Source102: pyxis.sh
|
2022-03-23 14:48:56 +00:00
|
|
|
|
2020-12-14 10:09:08 +00:00
|
|
|
%description
|
|
|
|
|
This package contains common configuration files and documentation for container
|
2021-01-12 15:24:12 +00:00
|
|
|
tools ecosystem, such as Podman, Buildah and Skopeo.
|
2020-12-14 10:09:08 +00:00
|
|
|
|
|
|
|
|
It is required because the most of configuration files and docs come from projects
|
2021-01-12 15:24:12 +00:00
|
|
|
which are vendored into Podman, Buildah, Skopeo, etc. but they are not packaged
|
2020-12-14 10:09:08 +00:00
|
|
|
separately.
|
|
|
|
|
|
2022-10-06 19:15:06 +00:00
|
|
|
%package extra
|
|
|
|
|
Summary: Extra dependencies for Podman and Buildah
|
|
|
|
|
Requires: %{name} = %{epoch}:%{version}-%{release}
|
|
|
|
|
Requires: container-network-stack
|
|
|
|
|
Requires: oci-runtime
|
2024-07-29 08:52:48 +00:00
|
|
|
Requires: nftables
|
|
|
|
|
Requires: passt
|
2022-10-06 19:15:06 +00:00
|
|
|
|
|
|
|
|
%description extra
|
|
|
|
|
This subpackage will handle dependencies common to Podman and Buildah which are
|
|
|
|
|
not required by Skopeo.
|
|
|
|
|
|
2020-12-14 10:09:08 +00:00
|
|
|
%prep
|
2022-03-15 15:07:27 +00:00
|
|
|
|
2020-12-14 10:09:08 +00:00
|
|
|
%build
|
2022-01-28 17:33:16 +00:00
|
|
|
|
2020-12-14 10:09:08 +00:00
|
|
|
%install
|
2024-12-16 11:12:58 +00:00
|
|
|
install -dp %{buildroot}%{_sysconfdir}/containers/{certs.d,oci/hooks.d,systemd,registries.d,registries.conf.d}
|
2023-01-04 10:26:29 +00:00
|
|
|
install -dp %{buildroot}%{_datadir}/containers/systemd
|
2024-12-16 11:12:58 +00:00
|
|
|
install -dp %{buildroot}%{_sharedstatedir}/containers/sigstore
|
2024-07-29 08:52:48 +00:00
|
|
|
install -dp %{buildroot}%{_prefix}/lib/containers/storage
|
2024-01-29 17:32:34 +00:00
|
|
|
install -dp -m 700 %{buildroot}%{_prefix}/lib/containers/storage/overlay-images
|
|
|
|
|
touch %{buildroot}%{_prefix}/lib/containers/storage/overlay-images/images.lock
|
|
|
|
|
install -dp -m 700 %{buildroot}%{_prefix}/lib/containers/storage/overlay-layers
|
|
|
|
|
touch %{buildroot}%{_prefix}/lib/containers/storage/overlay-layers/layers.lock
|
|
|
|
|
|
2024-12-16 11:12:58 +00:00
|
|
|
install -m0644 %{SOURCE1} %{buildroot}%{_datadir}/containers/storage.conf
|
|
|
|
|
install -m0644 %{SOURCE5} %{buildroot}%{_sysconfdir}/containers/registries.conf
|
|
|
|
|
install -m0644 %{SOURCE17} %{buildroot}%{_sysconfdir}/containers/registries.conf.d/000-shortnames.conf
|
2024-10-31 11:51:32 +00:00
|
|
|
install -m0644 %{SOURCE19} %{buildroot}%{_sysconfdir}/containers/registries.conf.d/001-rhel-shortnames.conf
|
|
|
|
|
install -m0644 %{SOURCE20} %{buildroot}%{_sysconfdir}/containers/registries.conf.d/002-rhel-shortnames-overrides.conf
|
2020-12-14 10:09:08 +00:00
|
|
|
|
2024-12-16 11:12:58 +00:00
|
|
|
install -dp %{buildroot}%{_sysconfdir}/containers/registries.d
|
|
|
|
|
install -m0644 %{SOURCE22} %{buildroot}%{_sysconfdir}/containers/registries.d
|
|
|
|
|
install -m0644 %{SOURCE23} %{buildroot}%{_sysconfdir}/containers/registries.d
|
|
|
|
|
install -m0644 %{SOURCE24} %{buildroot}%{_sysconfdir}/containers/policy.json
|
|
|
|
|
install -dp %{buildroot}%{_sharedstatedir}/containers/sigstore
|
|
|
|
|
install -m0644 %{SOURCE25} %{buildroot}%{_sysconfdir}/containers/registries.d/default.yaml
|
2022-06-13 15:28:16 +00:00
|
|
|
|
2024-12-16 11:12:58 +00:00
|
|
|
# for containers-common
|
2024-07-29 08:52:48 +00:00
|
|
|
install -dp %{buildroot}%{_mandir}/man5
|
2024-12-16 11:12:58 +00:00
|
|
|
go-md2man -in %{SOURCE2} -out %{buildroot}%{_mandir}/man5/containers-storage.conf.5
|
|
|
|
|
go-md2man -in %{SOURCE4} -out %{buildroot}%{_mandir}/man5/containers-registries.conf.5
|
|
|
|
|
go-md2man -in %{SOURCE6} -out %{buildroot}%{_mandir}/man5/containers-policy.json.5
|
|
|
|
|
go-md2man -in %{SOURCE8} -out %{buildroot}%{_mandir}/man5/containers-mounts.conf.5
|
|
|
|
|
go-md2man -in %{SOURCE9} -out %{buildroot}%{_mandir}/man5/containers-signature.5
|
|
|
|
|
go-md2man -in %{SOURCE10} -out %{buildroot}%{_mandir}/man5/containers-transports.5
|
|
|
|
|
go-md2man -in %{SOURCE11} -out %{buildroot}%{_mandir}/man5/containers-certs.d.5
|
|
|
|
|
go-md2man -in %{SOURCE12} -out %{buildroot}%{_mandir}/man5/containers-registries.d.5
|
|
|
|
|
go-md2man -in %{SOURCE14} -out %{buildroot}%{_mandir}/man5/containers.conf.5
|
|
|
|
|
go-md2man -in %{SOURCE15} -out %{buildroot}%{_mandir}/man5/containers-auth.json.5
|
|
|
|
|
go-md2man -in %{SOURCE16} -out %{buildroot}%{_mandir}/man5/containers-registries.conf.d.5
|
|
|
|
|
go-md2man -in %{SOURCE26} -out %{buildroot}%{_mandir}/man5/Containerfile.5
|
|
|
|
|
go-md2man -in %{SOURCE27} -out %{buildroot}%{_mandir}/man5/containerignore.5
|
2024-07-29 08:52:48 +00:00
|
|
|
ln -s containerignore.5 %{buildroot}%{_mandir}/man5/.containerignore.5
|
2021-01-13 01:22:23 +00:00
|
|
|
|
2024-12-16 11:12:58 +00:00
|
|
|
install -dp %{buildroot}%{_datadir}/containers
|
|
|
|
|
install -m0644 %{SOURCE3} %{buildroot}%{_datadir}/containers/mounts.conf
|
|
|
|
|
install -m0644 %{SOURCE7} %{buildroot}%{_datadir}/containers/seccomp.json
|
|
|
|
|
install -m0644 %{SOURCE13} %{buildroot}%{_datadir}/containers/containers.conf
|
|
|
|
|
|
|
|
|
|
# for signature verification
|
|
|
|
|
%if 0%{?fedora} || 0%{?centos}
|
|
|
|
|
install -dp %{buildroot}%{_sysconfdir}/pki/sigstore
|
|
|
|
|
install -m0644 %{SOURCE29} %{buildroot}%{_sysconfdir}/pki/sigstore
|
|
|
|
|
install -m0644 %{SOURCE30} %{buildroot}%{_sysconfdir}/pki/sigstore
|
|
|
|
|
%endif
|
2020-12-14 10:09:08 +00:00
|
|
|
|
|
|
|
|
# install secrets patch directory
|
|
|
|
|
install -d -p -m 755 %{buildroot}/%{_datadir}/rhel/secrets
|
|
|
|
|
# rhbz#1110876 - update symlinks for subscription management
|
2022-12-15 20:02:49 +00:00
|
|
|
ln -s ../../../..%{_sysconfdir}/pki/entitlement %{buildroot}%{_datadir}/rhel/secrets/etc-pki-entitlement
|
|
|
|
|
ln -s ../../../..%{_sysconfdir}/rhsm %{buildroot}%{_datadir}/rhel/secrets/rhsm
|
|
|
|
|
ln -s ../../../..%{_sysconfdir}/yum.repos.d/redhat.repo %{buildroot}%{_datadir}/rhel/secrets/redhat.repo
|
2020-12-14 10:09:08 +00:00
|
|
|
|
|
|
|
|
%files
|
|
|
|
|
%dir %{_sysconfdir}/containers
|
|
|
|
|
%dir %{_sysconfdir}/containers/certs.d
|
|
|
|
|
%dir %{_sysconfdir}/containers/oci
|
|
|
|
|
%dir %{_sysconfdir}/containers/oci/hooks.d
|
2021-01-28 14:55:19 +00:00
|
|
|
%dir %{_sysconfdir}/containers/registries.conf.d
|
|
|
|
|
%dir %{_sysconfdir}/containers/registries.d
|
2023-01-04 10:26:29 +00:00
|
|
|
%dir %{_sysconfdir}/containers/systemd
|
2024-07-29 08:52:48 +00:00
|
|
|
%dir %{_prefix}/lib/containers
|
2023-12-10 13:34:23 +00:00
|
|
|
%dir %{_prefix}/lib/containers/storage
|
2024-01-29 17:32:34 +00:00
|
|
|
%dir %{_prefix}/lib/containers/storage/overlay-images
|
|
|
|
|
%dir %{_prefix}/lib/containers/storage/overlay-layers
|
|
|
|
|
%{_prefix}/lib/containers/storage/overlay-images/images.lock
|
|
|
|
|
%{_prefix}/lib/containers/storage/overlay-layers/layers.lock
|
|
|
|
|
|
2020-12-14 10:09:08 +00:00
|
|
|
%config(noreplace) %{_sysconfdir}/containers/policy.json
|
|
|
|
|
%config(noreplace) %{_sysconfdir}/containers/registries.conf
|
2024-10-31 11:51:32 +00:00
|
|
|
%config(noreplace) %{_sysconfdir}/containers/registries.conf.d/*.conf
|
2024-09-10 06:02:25 +00:00
|
|
|
%if 0%{?fedora} || 0%{?centos}
|
2024-10-29 12:58:05 +00:00
|
|
|
%{_sysconfdir}/pki/sigstore/REKOR-signing-key
|
|
|
|
|
%{_sysconfdir}/pki/sigstore/SIGSTORE-redhat-release3
|
2024-09-10 06:02:25 +00:00
|
|
|
%endif
|
2021-01-28 14:55:19 +00:00
|
|
|
%config(noreplace) %{_sysconfdir}/containers/registries.d/default.yaml
|
2024-07-29 08:52:48 +00:00
|
|
|
%config(noreplace) %{_sysconfdir}/containers/registries.d/registry.redhat.io.yaml
|
|
|
|
|
%config(noreplace) %{_sysconfdir}/containers/registries.d/registry.access.redhat.com.yaml
|
2021-11-29 20:30:01 +00:00
|
|
|
%ghost %{_sysconfdir}/containers/storage.conf
|
2020-12-14 10:09:08 +00:00
|
|
|
%ghost %{_sysconfdir}/containers/containers.conf
|
|
|
|
|
%dir %{_sharedstatedir}/containers/sigstore
|
2022-02-01 20:45:14 +00:00
|
|
|
%{_mandir}/man5/Containerfile.5.gz
|
|
|
|
|
%{_mandir}/man5/containerignore.5.gz
|
|
|
|
|
%{_mandir}/man5/.containerignore.5.gz
|
|
|
|
|
%{_mandir}/man5/containers*.5.gz
|
2020-12-14 10:09:08 +00:00
|
|
|
%dir %{_datadir}/containers
|
2023-01-04 10:26:29 +00:00
|
|
|
%dir %{_datadir}/containers/systemd
|
2021-11-29 20:30:01 +00:00
|
|
|
%{_datadir}/containers/storage.conf
|
2021-01-28 14:55:19 +00:00
|
|
|
%{_datadir}/containers/containers.conf
|
2020-12-14 10:09:08 +00:00
|
|
|
%{_datadir}/containers/mounts.conf
|
|
|
|
|
%{_datadir}/containers/seccomp.json
|
2024-07-29 08:52:48 +00:00
|
|
|
%dir %{_datadir}/rhel
|
2020-12-14 10:09:08 +00:00
|
|
|
%dir %{_datadir}/rhel/secrets
|
|
|
|
|
%{_datadir}/rhel/secrets/*
|
|
|
|
|
|
2022-10-06 19:15:06 +00:00
|
|
|
%files extra
|
|
|
|
|
|
2020-12-14 10:09:08 +00:00
|
|
|
%changelog
|
2024-12-16 11:12:58 +00:00
|
|
|
* Mon Dec 16 2024 Jindrich Novy <jnovy@redhat.com> - 5:0.61.0-1
|
|
|
|
|
- make spec file compatible with RHEL
|
|
|
|
|
- update vendored components
|
|
|
|
|
- Resolves: RHEL-69842
|
|
|
|
|
|
2024-11-26 01:58:27 +00:00
|
|
|
* Tue Nov 26 2024 Jindrich Novy <jnovy@redhat.com> - 5:0.60.2-13
|
|
|
|
|
- update vendored components
|
|
|
|
|
- Related: RHEL-58990
|
|
|
|
|
|
2024-11-25 08:29:10 +00:00
|
|
|
* Mon Nov 25 2024 Jindrich Novy <jnovy@redhat.com> - 5:0.60.2-12
|
|
|
|
|
- Use proper log_driver: k8s-file
|
|
|
|
|
- Resolves: RHEL-68081
|
|
|
|
|
|
2024-10-31 11:51:32 +00:00
|
|
|
* Thu Oct 31 2024 Jindrich Novy <jnovy@redhat.com> - 5:0.60.2-11
|
|
|
|
|
- Install shortnames from Pyxis and overrides
|
|
|
|
|
- Resolves: RHEL-34940
|
|
|
|
|
|
2024-10-30 09:38:54 +00:00
|
|
|
* Wed Oct 30 2024 Jindrich Novy <jnovy@redhat.com> - 5:0.60.2-10
|
|
|
|
|
- don't use registry yaml files from upstream but RHEL10 dedicated ones
|
|
|
|
|
- Resolves: RHEL-65203
|
|
|
|
|
|
2024-10-30 08:40:14 +00:00
|
|
|
* Wed Oct 30 2024 Jindrich Novy <jnovy@redhat.com> - 5:0.60.2-9
|
|
|
|
|
- ensure required configurations for RHEL10 is present
|
|
|
|
|
- Resolves: RHEL-58990
|
|
|
|
|
|
2024-10-29 15:19:14 +00:00
|
|
|
* Tue Oct 29 2024 Troy Dawson <tdawson@redhat.com> - 5:0.60.2-8
|
|
|
|
|
- Bump release for October 2024 mass rebuild:
|
|
|
|
|
Resolves: RHEL-64018
|
|
|
|
|
|
2024-10-29 12:58:05 +00:00
|
|
|
* Tue Oct 29 2024 Jindrich Novy <jnovy@redhat.com> - 5:0.60.2-7
|
|
|
|
|
- Enable sigstore support
|
|
|
|
|
- Resolves: RUN-2164
|
|
|
|
|
|
2024-09-10 06:02:25 +00:00
|
|
|
* Tue Sep 10 2024 Jindrich Novy <jnovy@redhat.com> - 5:0.60.2-6
|
|
|
|
|
- package GPG keys only on Fedora and CentOS
|
|
|
|
|
- Related: RHEL-39410
|
|
|
|
|
|
2024-09-09 14:45:47 +00:00
|
|
|
* Mon Sep 09 2024 Jindrich Novy <jnovy@redhat.com> - 5:0.60.2-5
|
|
|
|
|
- include relevant GPG keys
|
|
|
|
|
- Resolves: RHEL-57720
|
|
|
|
|
|
2024-09-05 09:39:49 +00:00
|
|
|
* Thu Sep 05 2024 Jindrich Novy <jnovy@redhat.com> - 5:0.60.2-4
|
|
|
|
|
- update update.sh script and set logdriver to file
|
|
|
|
|
- Resolves: RHEL-57101
|
|
|
|
|
|
2024-08-28 08:37:28 +00:00
|
|
|
* Wed Aug 28 2024 Jindrich Novy <jnovy@redhat.com> - 5:0.60.2-3
|
|
|
|
|
- Obsolete containernetworking-plugins
|
|
|
|
|
- Resolves: RHEL-39410
|
