8ad8db5e5c
- depend on criu for checkpoint/restore Signed-off-by: Lokesh Mandvekar <lsm5@fedoraproject.org>
372 lines
14 KiB
RPMSpec
372 lines
14 KiB
RPMSpec
%if 0%{?fedora} || 0%{?rhel} == 6
|
|
%global with_devel 1
|
|
# TODO: package new deps
|
|
%global with_bundled 1
|
|
%global with_debug 1
|
|
%global with_check 1
|
|
%global with_unit_test 1
|
|
%else
|
|
%global with_devel 0
|
|
%global with_bundled 1
|
|
%global with_debug 0
|
|
%global with_check 0
|
|
%global with_unit_test 0
|
|
%endif
|
|
|
|
%if 0%{?with_debug}
|
|
%global _dwz_low_mem_die_limit 0
|
|
%else
|
|
%global debug_package %{nil}
|
|
%endif
|
|
|
|
%global provider github
|
|
%global provider_tld com
|
|
%global project opencontainers
|
|
%global repo runc
|
|
# https://github.com/opencontainers/runc
|
|
%global provider_prefix %{provider}.%{provider_tld}/%{project}/%{repo}
|
|
%global import_path %{provider_prefix}
|
|
%global commit c91b5bea4830a57eac7882d7455d59518cdf70ec
|
|
%global shortcommit %(c=%{commit}; echo ${c:0:7})
|
|
|
|
Name: %{repo}
|
|
%if 0%{?fedora} || 0%{?rhel} == 6
|
|
Epoch: 1
|
|
%endif
|
|
Version: 1.0.0
|
|
Release: 5.rc2.git%{shortcommit}%{?dist}
|
|
Summary: CLI for running Open Containers
|
|
License: ASL 2.0
|
|
URL: https://%{provider_prefix}
|
|
Source0: https://%{provider_prefix}/archive/%{commit}/%{repo}-%{shortcommit}.tar.gz
|
|
Patch0: 0001-Set-init-processes-as-non-dumpable.patch
|
|
|
|
# e.g. el6 has ppc64 arch without gcc-go, so EA tag is required
|
|
#ExclusiveArch: %%{?go_arches:%%{go_arches}}%%{!?go_arches:%%{ix86} x86_64 %{arm}}
|
|
ExclusiveArch: %{ix86} x86_64 %{arm} aarch64 ppc64le %{mips} s390x
|
|
# If go_compiler is not set to 1, there is no virtual provide. Use golang instead.
|
|
BuildRequires: %{?go_compiler:compiler(go-compiler)}%{!?go_compiler:golang}
|
|
|
|
BuildRequires: pkgconfig(libseccomp)
|
|
BuildRequires: go-md2man
|
|
|
|
%if ! 0%{?with_bundled}
|
|
BuildRequires: golang(github.com/Sirupsen/logrus)
|
|
BuildRequires: golang(github.com/codegangsta/cli)
|
|
BuildRequires: golang(github.com/coreos/go-systemd/activation)
|
|
BuildRequires: golang(github.com/coreos/go-systemd/dbus)
|
|
BuildRequires: golang(github.com/coreos/go-systemd/util)
|
|
BuildRequires: golang(github.com/docker/docker/pkg/mount)
|
|
BuildRequires: golang(github.com/docker/docker/pkg/symlink)
|
|
BuildRequires: golang(github.com/docker/docker/pkg/term)
|
|
BuildRequires: golang(github.com/docker/go-units)
|
|
BuildRequires: golang(github.com/godbus/dbus)
|
|
BuildRequires: golang(github.com/golang/protobuf/proto)
|
|
BuildRequires: golang(github.com/opencontainers/runtime-spec/specs-go)
|
|
BuildRequires: golang(github.com/opencontainers/specs/specs-go)
|
|
BuildRequires: golang(github.com/seccomp/libseccomp-golang)
|
|
BuildRequires: golang(github.com/syndtr/gocapability/capability)
|
|
BuildRequires: golang(github.com/vishvananda/netlink)
|
|
BuildRequires: golang(github.com/vishvananda/netlink/nl)
|
|
%endif
|
|
|
|
Requires: criu
|
|
|
|
%description
|
|
The runc command can be used to start containers which are packaged
|
|
in accordance with the Open Container Initiative's specifications,
|
|
and to manage containers running under runc.
|
|
|
|
%if 0%{?with_devel}
|
|
%package devel
|
|
Summary: %{summary}
|
|
BuildArch: noarch
|
|
|
|
%if 0%{?with_check}
|
|
BuildRequires: golang(github.com/Sirupsen/logrus)
|
|
BuildRequires: golang(github.com/coreos/go-systemd/dbus)
|
|
BuildRequires: golang(github.com/coreos/go-systemd/util)
|
|
BuildRequires: golang(github.com/docker/docker/pkg/mount)
|
|
BuildRequires: golang(github.com/docker/docker/pkg/symlink)
|
|
BuildRequires: golang(github.com/docker/go-units)
|
|
BuildRequires: golang(github.com/godbus/dbus)
|
|
BuildRequires: golang(github.com/golang/protobuf/proto)
|
|
BuildRequires: golang(github.com/opencontainers/runtime-spec/specs-go)
|
|
BuildRequires: golang(github.com/seccomp/libseccomp-golang)
|
|
BuildRequires: golang(github.com/syndtr/gocapability/capability)
|
|
BuildRequires: golang(github.com/vishvananda/netlink)
|
|
BuildRequires: golang(github.com/vishvananda/netlink/nl)
|
|
%endif
|
|
|
|
Requires: golang(github.com/Sirupsen/logrus)
|
|
Requires: golang(github.com/coreos/go-systemd/dbus)
|
|
Requires: golang(github.com/coreos/go-systemd/util)
|
|
Requires: golang(github.com/docker/docker/pkg/mount)
|
|
Requires: golang(github.com/docker/docker/pkg/symlink)
|
|
Requires: golang(github.com/docker/go-units)
|
|
Requires: golang(github.com/godbus/dbus)
|
|
Requires: golang(github.com/golang/protobuf/proto)
|
|
Requires: golang(github.com/opencontainers/runtime-spec/specs-go)
|
|
Requires: golang(github.com/seccomp/libseccomp-golang)
|
|
Requires: golang(github.com/syndtr/gocapability/capability)
|
|
Requires: golang(github.com/vishvananda/netlink)
|
|
Requires: golang(github.com/vishvananda/netlink/nl)
|
|
|
|
Provides: golang(%{import_path}/libcontainer) = %{version}-%{release}
|
|
Provides: golang(%{import_path}/libcontainer/apparmor) = %{version}-%{release}
|
|
Provides: golang(%{import_path}/libcontainer/cgroups) = %{version}-%{release}
|
|
Provides: golang(%{import_path}/libcontainer/cgroups/fs) = %{version}-%{release}
|
|
Provides: golang(%{import_path}/libcontainer/cgroups/systemd) = %{version}-%{release}
|
|
Provides: golang(%{import_path}/libcontainer/configs) = %{version}-%{release}
|
|
Provides: golang(%{import_path}/libcontainer/configs/validate) = %{version}-%{release}
|
|
Provides: golang(%{import_path}/libcontainer/criurpc) = %{version}-%{release}
|
|
Provides: golang(%{import_path}/libcontainer/devices) = %{version}-%{release}
|
|
Provides: golang(%{import_path}/libcontainer/integration) = %{version}-%{release}
|
|
Provides: golang(%{import_path}/libcontainer/keys) = %{version}-%{release}
|
|
Provides: golang(%{import_path}/libcontainer/label) = %{version}-%{release}
|
|
Provides: golang(%{import_path}/libcontainer/nsenter) = %{version}-%{release}
|
|
Provides: golang(%{import_path}/libcontainer/seccomp) = %{version}-%{release}
|
|
Provides: golang(%{import_path}/libcontainer/selinux) = %{version}-%{release}
|
|
Provides: golang(%{import_path}/libcontainer/specconv) = %{version}-%{release}
|
|
Provides: golang(%{import_path}/libcontainer/stacktrace) = %{version}-%{release}
|
|
Provides: golang(%{import_path}/libcontainer/system) = %{version}-%{release}
|
|
Provides: golang(%{import_path}/libcontainer/user) = %{version}-%{release}
|
|
Provides: golang(%{import_path}/libcontainer/utils) = %{version}-%{release}
|
|
Provides: golang(%{import_path}/libcontainer/xattr) = %{version}-%{release}
|
|
|
|
%description devel
|
|
The runc command can be used to start containers which are packaged
|
|
in accordance with the Open Container Initiative's specifications,
|
|
and to manage containers running under runc.
|
|
|
|
This package contains library source intended for
|
|
building other packages which use import path with
|
|
%{import_path} prefix.
|
|
%endif
|
|
|
|
%if 0%{?with_unit_test} && 0%{?with_devel}
|
|
%package unit-test
|
|
Summary: Unit tests for %{name} package
|
|
# If go_compiler is not set to 1, there is no virtual provide. Use golang instead.
|
|
BuildRequires: %{?go_compiler:compiler(go-compiler)}%{!?go_compiler:golang}
|
|
|
|
%if 0%{?with_check}
|
|
#Here comes all BuildRequires: PACKAGE the unit tests
|
|
#in %%check section need for running
|
|
%endif
|
|
|
|
# test subpackage tests code from devel subpackage
|
|
Requires: %{name}-devel = %{epoch}:%{version}-%{release}
|
|
|
|
%description unit-test
|
|
The runc command can be used to start containers which are packaged
|
|
in accordance with the Open Container Initiative's specifications,
|
|
and to manage containers running under runc.
|
|
|
|
This package contains unit tests for project
|
|
providing packages with %{import_path} prefix.
|
|
%endif
|
|
|
|
%prep
|
|
%setup -q -n %{repo}-%{commit}
|
|
|
|
%build
|
|
mkdir -p src/github.com/opencontainers
|
|
ln -s ../../../ src/github.com/opencontainers/runc
|
|
|
|
%if ! 0%{?with_bundled}
|
|
export GOPATH=$(pwd):%{gopath}
|
|
%else
|
|
export GOPATH=$(pwd):$(pwd)/Godeps/_workspace:%{gopath}
|
|
%endif
|
|
|
|
BUILDTAGS="seccomp selinux"
|
|
%if ! 0%{?gobuild:1}
|
|
%define gobuild() go build -ldflags "${LDFLAGS:-} -B 0x$(head -c20 /dev/urandom|od -An -tx1|tr -d ' \\n')" -a -v -x %{**};
|
|
|
|
%endif
|
|
|
|
%gobuild -tags "$BUILDTAGS" -o bin/%{name} %{import_path}
|
|
|
|
%install
|
|
install -d -p %{buildroot}%{_bindir}
|
|
install -p -m 755 bin/%{name} %{buildroot}%{_bindir}
|
|
|
|
# generate man pages
|
|
man/md2man-all.sh
|
|
|
|
# install man pages
|
|
install -d -p %{buildroot}%{_mandir}/man8
|
|
install -p -m 0644 man/man8/*.8 %{buildroot}%{_mandir}/man8/.
|
|
# install bash completion
|
|
install -d -p %{buildroot}%{_sysconfdir}/bash_completion.d/
|
|
install -p -m 0644 contrib/completions/bash/runc %{buildroot}%{_sysconfdir}/bash_completion.d/.
|
|
|
|
# source codes for building projects
|
|
%if 0%{?with_devel}
|
|
install -d -p %{buildroot}/%{gopath}/src/%{import_path}/
|
|
# find all *.go but no *_test.go files and generate devel.file-list
|
|
for file in $(find . -iname "*.go" \! -iname "*_test.go" | grep -v "^./Godeps") ; do
|
|
echo "%%dir %%{gopath}/src/%%{import_path}/$(dirname $file)" >> devel.file-list
|
|
install -d -p %{buildroot}/%{gopath}/src/%{import_path}/$(dirname $file)
|
|
cp -pav $file %{buildroot}/%{gopath}/src/%{import_path}/$file
|
|
echo "%%{gopath}/src/%%{import_path}/$file" >> devel.file-list
|
|
done
|
|
for file in $(find . -iname "*.proto" | grep -v "^./Godeps") ; do
|
|
echo "%%dir %%{gopath}/src/%%{import_path}/$(dirname $file)" >> devel.file-list
|
|
install -d -p %{buildroot}/%{gopath}/src/%{import_path}/$(dirname $file)
|
|
cp -pav $file %{buildroot}/%{gopath}/src/%{import_path}/$file
|
|
echo "%%{gopath}/src/%%{import_path}/$file" >> devel.file-list
|
|
done
|
|
%endif
|
|
|
|
# testing files for this project
|
|
%if 0%{?with_unit_test} && 0%{?with_devel}
|
|
install -d -p %{buildroot}/%{gopath}/src/%{import_path}/
|
|
# find all *_test.go files and generate unit-test.file-list
|
|
for file in $(find . -iname "*_test.go" | grep -v "^./Godeps"); do
|
|
echo "%%dir %%{gopath}/src/%%{import_path}/$(dirname $file)" >> devel.file-list
|
|
install -d -p %{buildroot}/%{gopath}/src/%{import_path}/$(dirname $file)
|
|
cp -pav $file %{buildroot}/%{gopath}/src/%{import_path}/$file
|
|
echo "%%{gopath}/src/%%{import_path}/$file" >> unit-test.file-list
|
|
done
|
|
%endif
|
|
|
|
%if 0%{?with_devel}
|
|
sort -u -o devel.file-list devel.file-list
|
|
%endif
|
|
|
|
%check
|
|
%if 0%{?with_check} && 0%{?with_unit_test} && 0%{?with_devel}
|
|
%if ! 0%{?with_bundled}
|
|
export GOPATH=%{buildroot}/%{gopath}:%{gopath}
|
|
%else
|
|
export GOPATH=%{buildroot}/%{gopath}:$(pwd)/Godeps/_workspace:%{gopath}
|
|
%endif
|
|
|
|
%if ! 0%{?gotest:1}
|
|
%global gotest go test
|
|
%endif
|
|
|
|
# FAIL: TestFactoryNewTmpfs (0.00s), factory_linux_test.go:59: operation not permitted
|
|
#%%gotest %%{import_path}/libcontainer
|
|
%gotest %{import_path}/libcontainer/cgroups
|
|
# --- FAIL: TestInvalidCgroupPath (0.00s)
|
|
# apply_raw_test.go:16: couldn't get cgroup root: mountpoint for cgroup not found
|
|
# apply_raw_test.go:25: couldn't get cgroup data: mountpoint for cgroup not found
|
|
#%%gotest %%{import_path}/libcontainer/cgroups/fs
|
|
%gotest %{import_path}/libcontainer/configs
|
|
%gotest %{import_path}/libcontainer/devices
|
|
# undefined reference to `nsexec'
|
|
#%%gotest %%{import_path}/libcontainer/integration
|
|
%gotest %{import_path}/libcontainer/label
|
|
# Unable to create tstEth link: operation not permitted
|
|
#%%gotest %%{import_path}/libcontainer/netlink
|
|
# undefined reference to `nsexec'
|
|
#%%gotest %%{import_path}/libcontainer/nsenter
|
|
%gotest %{import_path}/libcontainer/selinux
|
|
%gotest %{import_path}/libcontainer/stacktrace
|
|
#constant 2147483648 overflows int
|
|
#%%gotest %%{import_path}/libcontainer/user
|
|
#%%gotest %%{import_path}/libcontainer/utils
|
|
#%%gotest %%{import_path}/libcontainer/xattr
|
|
%endif
|
|
|
|
#define license tag if not already defined
|
|
%{!?_licensedir:%global license %doc}
|
|
|
|
%files
|
|
%license LICENSE
|
|
%doc MAINTAINERS_GUIDE.md PRINCIPLES.md README.md CONTRIBUTING.md
|
|
%{_bindir}/%{name}
|
|
%{_mandir}/man8/.
|
|
%{_sysconfdir}/bash_completion.d/runc
|
|
|
|
%if 0%{?with_devel}
|
|
%files devel -f devel.file-list
|
|
%license LICENSE
|
|
%doc MAINTAINERS_GUIDE.md PRINCIPLES.md README.md CONTRIBUTING.md
|
|
%dir %{gopath}/src/%{provider}.%{provider_tld}/%{project}
|
|
%dir %{gopath}/src/%{import_path}
|
|
%endif
|
|
|
|
%if 0%{?with_unit_test} && 0%{?with_devel}
|
|
%files unit-test -f unit-test.file-list
|
|
%license LICENSE
|
|
%doc MAINTAINERS_GUIDE.md PRINCIPLES.md README.md CONTRIBUTING.md
|
|
%endif
|
|
|
|
%changelog
|
|
* Wed Feb 01 2017 Lokesh Mandvekar <lsm5@fedoraproject.org> - 1:1.0.0-5.rc2
|
|
- depend on criu for checkpoint/restore
|
|
|
|
* Wed Jan 18 2017 Dennis Gilmore <dennis@ausil.us> - 1:1.0.0-4.rc2
|
|
- enable aarch64
|
|
|
|
* Wed Jan 11 2017 Lokesh Mandvekar <lsm5@fedoraproject.org> - 1:1.0.0-3.rc2
|
|
- Resolves: #1412238 - *CVE-2016-9962* - set init processes as non-dumpable,
|
|
runc patch from Michael Crosby <crosbymichael@gmail.com>
|
|
|
|
* Fri Jan 06 2017 Lokesh Mandvekar <lsm5@fedoraproject.org> - 1:1.0.0-2.rc2.git47ea5c7
|
|
- patch to enable seccomp
|
|
- Pass $BUILDTAGS to the compiler in cases where we don't have to define
|
|
gobuild for ourselves.
|
|
- From: Nalin Dahyabhai <nalin@redhat.com>
|
|
|
|
* Wed Dec 21 2016 Lokesh Mandvekar <lsm5@fedoraproject.org> - 1:1.0.0-1.rc2.git47ea5c7
|
|
- bump to 1.0.0 rc2
|
|
- built commit 47ea5c7
|
|
- build with bundled sources for now (some new dependencies need to be packaged)
|
|
|
|
* Wed Aug 24 2016 Lokesh Mandvekar <lsm5@fedoraproject.org> - 1:1.0.0-1.rc1.git04f275d
|
|
- Resolves: #1342707 - bump to v1.0.0-rc1
|
|
- built commit 04f275d
|
|
- cosmetic changes to make rpmlint happy
|
|
|
|
* Thu Jul 21 2016 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1:0.1.1-4.git57b9972
|
|
- https://fedoraproject.org/wiki/Changes/golang1.7
|
|
|
|
* Thu May 26 2016 jchaloup <jchaloup@redhat.com> - 1:0.1.1-3.git57b9972
|
|
- Add bash completion
|
|
resolves: #1340119
|
|
|
|
* Thu May 19 2016 Lokesh Mandvekar <lsm5@fedoraproject.org> - 1:0.1.1-2.gitbaf6536
|
|
- add selinux to BUILDTAGS in addition to the default seccomp tag
|
|
|
|
* Tue Apr 26 2016 jchaloup <jchaloup@redhat.com> - 1:0.1.1-0.1.gitbaf6536
|
|
- Update to v0.1.1
|
|
resolves: #1330378
|
|
|
|
* Tue Apr 12 2016 jchaloup <jchaloup@redhat.com> - 1:0.0.9-0.3.git94dc520
|
|
- Ship man pages too
|
|
resolves: #1326115
|
|
|
|
* Wed Apr 06 2016 jchaloup <jchaloup@redhat.com> - 1:0.0.9-0.2.git94dc520
|
|
- Extend supported architectures to golang_arches
|
|
Disable failing test
|
|
related: #1290943
|
|
|
|
* Wed Mar 16 2016 jchaloup <jchaloup@redhat.com> - 1:0.0.9-0.1.git94dc520
|
|
- Update to 0.0.9
|
|
resolves: #1290943
|
|
|
|
* Wed Mar 02 2016 jchaloup <jchaloup@redhat.com> - 1:0.0.8-0.1.git1a124e9
|
|
- Update to 0.0.8
|
|
|
|
* Mon Feb 22 2016 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1:0.0.5-0.4.git97bc9a7
|
|
- https://fedoraproject.org/wiki/Changes/golang1.6
|
|
|
|
* Thu Feb 04 2016 Fedora Release Engineering <releng@fedoraproject.org> - 1:0.0.5-0.3.git97bc9a7
|
|
- Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild
|
|
|
|
* Wed Dec 02 2015 jchaloup <jchaloup@redhat.com> - 1:0.0.5-0.2.git97bc9a7
|
|
- unit-test-devel subpackage requires devel with correct epoch
|
|
|
|
* Wed Nov 25 2015 jchaloup <jchaloup@redhat.com> - 1:0.0.5-0.1.git97bc9a7
|
|
- Update to 0.0.5, introduce Epoch for Fedora due to 0.2 version instead of 0.0.2
|
|
resolves: #1286114
|
|
|
|
* Fri Aug 21 2015 Jan Chaloupka <jchaloup@redhat.com> - 0.2-0.2.git90e6d37
|
|
- First package for Fedora
|
|
resolves: #1255179
|