Commit Graph

59 Commits

Author SHA1 Message Date
Debarshi Ray 8c0c8e65c3 Drop redundant option from %meson
There's no need to pass the --buildtype=plain option to the %meson RPM
macro, because it's one of the default options used by the macro.

There's no need to do a build just for this.

Fallout from ca4846e684

Resolves: #2165742
2023-04-03 19:19:55 +02:00
Debarshi Ray b78b156b3f Add missing 'BuildRequires: gcc'
A C compiler is necessary to build Toolbx [1].  GCC is being pulled in
by the other BuildRequires, but it's good to explicitly list it since
GCC isn't part of the default buildroot since Fedora 29 [2] and will
prevent the compiler from unexpectedly changing to Clang.

There's no need to do a build just for this.

[1] Upstream commit c8aaed52c547e24e
    https://github.com/containers/toolbox/commit/c8aaed52c547e24e
    https://github.com/containers/toolbox/pull/923

[2] https://fedoraproject.org/wiki/Changes/Remove_GCC_from_BuildRoot

Resolves: #2165742
2023-04-03 19:13:50 +02:00
Debarshi Ray 031f4f7df3 Rebuild for CVE-2022-41717
Resolves: #2164292
2023-02-06 21:46:54 +01:00
Debarshi Ray 95ab8df3c3 Support RHEL 9 Toolbx containers
Resolves: #2163752
2023-01-30 15:24:28 +01:00
Debarshi Ray 739099e5a4 Unbreak sorting and clearly identify copied images in 'list'
Resolves: #2033282
2022-12-13 01:16:26 +01:00
Debarshi Ray aa3d041937 Rebuild for CVE-2022-27664 and CVE-2022-32189
This commit resolves both bugs 2116786 and 2126772.  However, since the
latter doesn't have all approvals yet, it's not listed below.  Else,
the check-gitbz test will fail and block this from getting merged.

Resolves: #2116786
2022-10-14 00:42:43 +02:00
Debarshi Ray aa1a1d24b6 Rebuild for CVE-2022-1705, CVE-2022-30630, CVE-2022-30631
... and CVE-2022-30632.

Resolves: #2111830
2022-08-16 23:23:14 +02:00
Debarshi Ray c4cb9d3f29 Bump the minimum required golang version for added reassurance
Resolves: #2060769, #2089194
2022-06-22 13:18:00 +02:00
Tomas Pelka f55ff2583f Fixing the correct gating test name. 2022-05-17 06:50:08 +00:00
Debarshi Ray b5a0d2a45c Rebuild for FIPS-mode memory leak in the Go toolchain
Toolbx doesn't seem to directly use any cryptography, but go.sum does
list golang.org/x/crypto, which indicates that it's present somewhere
in the dependency chain.

Looking inside the vendored sources, there doesn't seem to be any
actual use of golang.org/x/crypto but it's still listed in the go.sum
files of some of the packages.

Interestingly, github.com/godbus/dbus does use crypto/rand and
crypto/sha1, and the former is a cryptographically secure random number
generator [1], but note that these aren't part of golang.org/x/crypto.

Anyway, it's better and easier to just rebuild the package than trying
to decipher if Toolbx is affected by the FIPS-mode memory leak in the
Go toolchain that affects cryptographic code.

[1] https://pkg.go.dev/crypto/rand

Resolves: #2060769
2022-05-16 23:22:39 +02:00
Jindrich Novy 2a480fd8da toolbox-0.0.99.3-2.el9
- BuildRequires: /usr/bin/go-md2man
- Related: #2061316

Signed-off-by: Jindrich Novy <jnovy@redhat.com>
2022-05-11 10:56:28 +02:00
Tomas Popela c7f3708c66 rpminspec: rhel-policy -> hardened
rhel-policy was renamed to hardened in annocheck
2022-02-09 16:02:50 +01:00
Debarshi Ray b4fb8f3c3a Silence 'rpminspect --tests=annocheck'
Note that all (default rhel-policy) flags need to be repeated. If some
configuration flags are overwritten, it will completely overwrite the
defaults (--ignore-unknown --verbose).

See:
https://gitlab.com/redhat/centos-stream/rpms/valgrind/-/blob/c9s/rpminspect.yaml

Resolves: #2000807
2021-12-17 12:40:50 +01:00
Debarshi Ray 862b07a86e Silence 'rpminspect --tests=runpath'
Resolves: #2000807
2021-12-17 01:11:05 +01:00
Debarshi Ray 06c284b9ce tests: Fix the tag of the default image
The test suite should use the latest build of the image for any given
RHEL minor release. Otherwise, it won't detect any breakage caused by
changes to the image.

Resolves: #2000807
2021-12-16 23:46:53 +01:00
Debarshi Ray 7212974445 tests: Add missing newline at end of file
Otherwise, it's difficult to read the file with cat(1).

Resolves: #2000807
2021-12-16 23:30:02 +01:00
Debarshi Ray cd00cb09ca tests: Fix the permissions of /etc/containers/toolbox.conf
The RPM installs /etc/containers/toolbox.conf with its permissions set
to 0644, and there's no reason for the test suite to deviate from that.

Resolves: #2000807
2021-12-16 23:26:20 +01:00
Debarshi Ray 0b9dac8c68 Update to 0.0.99.3
- BuildRequire only systemd-rpm-macros as recommended by the Fedora
  packaging guidelines:
  https://docs.fedoraproject.org/en-US/packaging-guidelines/Tmpfiles.d/
  https://pagure.io/packaging-committee/issue/824

- Update the Summary to match upstream

- Update the URL to point to the website

Resolves: #2000807
2021-12-10 14:29:33 +01:00
Debarshi Ray d4a6831d26 Suggest a way forward if coreos/toolbox was used
Resolves: #2006802
2021-09-22 16:02:35 +02:00
Debarshi Ray 3b440cd46a Use the Toolbox-specific UBI image for RHEL 9
This is RHEL 9, not RHEL 8. Hence the image for RHEL 9 should be used.

Fallout from e4faf0256c

Resolves: #2004563
2021-09-22 15:20:48 +02:00
Debarshi Ray e4faf0256c Switch to using the Toolbox-specific UBI image by default
Resolves: #2004563
2021-09-22 14:33:18 +02:00
Oliver Gutierrez b43ce464c3
Changed image for tests and tests parameters
Related: #2000051
2021-09-16 15:35:17 +01:00
Oliver Gutierrez 573971252e
Changed default image for tests
Related: #2000051
2021-09-16 11:45:05 +01:00
Oliver Gutierrez d037151cc0
Added ability to force test system id and version id
Related: #2000051
2021-09-14 13:47:38 +01:00
Oliver Gutierrez d5f960300f
Fixed test roles and changed default image path
Related: #2000051
2021-09-14 11:20:59 +01:00
Oliver Gutierrez fcacaff8de
Version bump for rebuild
Related: rhbz#2000051
2021-09-14 10:46:27 +01:00
Oliver Gutierrez 8eac0d08fd
Added new role to setup default container image
Related: rhbz#2000051
2021-09-14 10:19:51 +01:00
Oliver Gutierrez 62a7b56985
Added missing gating tests files and patch for tests
Related: rhbz#2000051
2021-09-03 17:42:09 +01:00
Jindrich Novy 768bb82508 toolbox-0.0.99.3-0.6.git660b6970e998.el9
- re-add gating tests
- Related: #2000051

Signed-off-by: Jindrich Novy <jnovy@redhat.com>
2021-09-03 16:06:00 +02:00
Jindrich Novy b9680ab712 toolbox-0.0.99.3-0.5.git660b6970e998.el9
- Make sosreport work by setting the HOST environment variable
- Related: #2000051

Signed-off-by: Jindrich Novy <jnovy@redhat.com>
2021-09-03 11:31:08 +02:00
Oliver Gutierrez 38f416cd16
Fixed bogus date in changelog
Related: rhbz#1977343
2021-08-30 15:47:11 +01:00
Oliver Gutierrez b0004b6b93
Updated bats version for gating tests
Related: rhbz#1977343
2021-08-30 15:20:24 +01:00
Oliver Gutierrez 188290c2ab
Version bump for rebuilding and test gating
Resolves: rhbz#1977343
2021-08-24 13:01:59 +01:00
Oliver Gutierrez 66677d233d
Added gating based on podman gating
Resolves: rhbz#1977343
2021-08-24 11:14:29 +01:00
Mohan Boddu 185b7a847f Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
Related: rhbz#1991688
Signed-off-by: Mohan Boddu <mboddu@redhat.com>
2021-08-10 01:07:01 +00:00
Tomas Popela d824208ae6 Upload the fixed tarball
Related: #1970747
2021-08-04 21:50:27 +02:00
Debarshi Ray 4721e8ac6c Fix the build on CentOS Stream
Looks like centpkg can't handle the current guidelines for versioning
snapshot builds [1].

[1] https://docs.fedoraproject.org/en-US/packaging-guidelines/Versioning/#_snapshots

Related: #1970747
2021-08-02 15:40:14 +02:00
Jindrich Novy 7ebedec3a3 toolbox-0.0.99.2^1.git660b6970e998-1.el9
- Add support for configuration files
- Related: #1970747

Signed-off-by: Jindrich Novy <jnovy@redhat.com>
2021-07-28 15:04:29 +02:00
Jindrich Novy b817729eef toolbox-0.0.99.2-3.el9
- Expose the host's entire / in the container at /run/host
- Resolves: #1977343

Signed-off-by: Jindrich Novy <jnovy@redhat.com>
2021-07-10 09:03:32 +02:00
Jindrich Novy 067c49f5d1 toolbox-0.0.99.2-2.el9
- Actually apply the patch to make 'toolbox' create or fall back to a
  container if possible
- Support logging into a registry if necessary
- Resolves: #1977343

Signed-off-by: Jindrich Novy <jnovy@redhat.com>
2021-07-05 13:14:16 +02:00
Jindrich Novy 72d3271661 toolbox-0.0.99.2-1.el9
- update to 0.99.2
- Resolves: #1977343

Signed-off-by: Jindrich Novy <jnovy@redhat.com>
2021-07-02 17:30:03 +02:00
Mohan Boddu f2c4065d71 Rebuilt for RHEL 9 BETA for openssl 3.0
Related: rhbz#1971065
Signed-off-by: Mohan Boddu <mboddu@redhat.com>
2021-06-22 18:46:40 +00:00
Debarshi Ray 0924deeac6 Don't use ShellCheck when building because it was removed from RHEL 9
Resolves: #1912983
2021-04-29 18:08:57 +02:00
Debarshi Ray 88485aabc4 Remove unused patch
The tarball used in the RHEL 9 build vendors in all the Go dependencies
and therefore doesn't use this patch.

Resolves: #1912983
2021-04-29 18:08:51 +02:00
Debarshi Ray 72d79125ed Fix FTBFS
Resolves: #1912983
2021-04-29 17:39:17 +02:00
Mohan Boddu 6d502a823d - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937
Signed-off-by: Mohan Boddu <mboddu@redhat.com>
2021-04-16 05:55:19 +00:00
DistroBaker b90fed3095 Merged update from upstream sources
This is an automated DistroBaker update from upstream sources.
If you do not know what this is about or would like to opt out,
contact the OSCI team.

Source: https://src.fedoraproject.org/rpms/toolbox.git#aa7f643e20fe9ca6a6e1d044e6ff72cd4cff9b93
2021-03-31 19:55:39 +00:00
DistroBaker 4b714c697e Merged update from upstream sources
This is an automated DistroBaker update from upstream sources.
If you do not know what this is about or would like to opt out,
contact the OSCI team.

Source: https://src.fedoraproject.org/rpms/toolbox.git#aa7f643e20fe9ca6a6e1d044e6ff72cd4cff9b93
2021-03-02 04:40:47 +00:00
DistroBaker 34e225a9e8 Merged update from upstream sources
This is an automated DistroBaker update from upstream sources.
If you do not know what this is about or would like to opt out,
contact the OSCI team.

Source: https://src.fedoraproject.org/rpms/toolbox.git#61252314d80ed2ca522615900e1d98abb4f76edc
2021-02-04 21:07:14 +00:00
Jindrich Novy 385ab10aa1 toolbox-0.0.99-2.el9
- Update to 0.0.99

Signed-off-by: Jindrich Novy <jnovy@redhat.com>
2021-01-14 09:27:25 +01:00