From 1efb2f5386501ba38ee51cf2f5e008a2bf4aab947b3ed57558531dd75dac8d26 Mon Sep 17 00:00:00 2001 From: Dominique Leuenberger Date: Wed, 1 Feb 2023 15:39:42 +0000 Subject: [PATCH] Accepting request 1062405 from devel:microos OBS-URL: https://build.opensuse.org/request/show/1062405 OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/buildkit?expand=0&rev=2 --- _service | 8 ++- _servicedata | 11 ++-- buildkit-0.11.2.tar.zst | 3 + buildkit-0.9.3.tar.gz | 3 - buildkit.changes | 125 ++++++++++++++++++++++++++++++++++++++++ buildkit.spec | 26 ++++----- vendor.tar.gz | 3 - vendor.tar.zst | 3 + 8 files changed, 155 insertions(+), 27 deletions(-) create mode 100644 buildkit-0.11.2.tar.zst delete mode 100644 buildkit-0.9.3.tar.gz delete mode 100644 vendor.tar.gz create mode 100644 vendor.tar.zst diff --git a/_service b/_service index 399d44f..615b4c5 100644 --- a/_service +++ b/_service @@ -4,7 +4,7 @@ https://github.com/moby/buildkit.git git .git - v0.9.3 + v0.11.2 @PARENT_TAG@ enable v(.*) @@ -12,7 +12,9 @@ *.tar - gz + zst + + + zst - diff --git a/_servicedata b/_servicedata index 8a6035b..2633ce5 100644 --- a/_servicedata +++ b/_servicedata @@ -1,6 +1,7 @@ + - - https://github.com/rootless-containers/rootlesskit.git - b25a0bad15d664c4ee8885ba622569425e918a68 - https://github.com/moby/buildkit.git - 6d53896d28a0b1b1670617ebcdd0582bcab14b90 \ No newline at end of file + + https://github.com/moby/buildkit.git + 944939944ca4cc58a11ace4af714083cfcd9a3c7 + + diff --git a/buildkit-0.11.2.tar.zst b/buildkit-0.11.2.tar.zst new file mode 100644 index 0000000..adca7a3 --- /dev/null +++ b/buildkit-0.11.2.tar.zst @@ -0,0 +1,3 @@ +version https://git-lfs.github.com/spec/v1 +oid sha256:1551eb4508575f07a779066db4d4d141ec6a81fdf82619a18fc765b9a96cda3e +size 5397239 diff --git a/buildkit-0.9.3.tar.gz b/buildkit-0.9.3.tar.gz deleted file mode 100644 index b64244f..0000000 --- a/buildkit-0.9.3.tar.gz +++ /dev/null @@ -1,3 +0,0 @@ -version https://git-lfs.github.com/spec/v1 -oid sha256:8f57fb818637e28697d05439726cc906e1219351fe0b6945214a61cb63b4ce58 -size 6743818 diff --git a/buildkit.changes b/buildkit.changes index 3a104eb..95a55ff 100644 --- a/buildkit.changes +++ b/buildkit.changes @@ -1,3 +1,128 @@ +------------------------------------------------------------------- +Tue Jan 31 17:50:32 UTC 2023 - Dirk Müller + +- update to 0.11.2: + * Update containerd patches to fix regression in handling push errors + * Multiple fixes for History API #3530 + * Fix issue with parallel build requests using local cache imports #3493 + * Builtin Dockerfile frontend has been updated to 1.5.1, fixing possible + panic in certain warning condition #3505 + * Fix possible hang when closing down the SSH forwarding socket in v0.11.0 + * Fix typo in an environment variable used to configure OpenTelemetry + endpoints #3508 + * Builtin Dockerfile frontend has been updated to v1.5.0 + https://github.com/moby/buildkit/releases/tag/dockerfile%2F1.5.0 + * BuildKit and compatible frontends can now produce SBOM (Software Bill of + Materials) attestations for the build results to show the dependencies + of the build. These attestations can be added to images and locally + exported files. Using Dockerfiles, SBOM information can be configured to + be produced also based on files in intermediate build stages or build + context, or run processes that manually define the SBOM dependencies. + When exporting an image, layer mapping is also produced that allows + tracing a SBOM package to a specific build step. #3258 #3290 #3249 #2983 + #3358 #3312 #3407 #3408 #3410 #3414 #3422 + * BuildKit can now produce a Provenance attestation for the build result + in SLSA format. Provenance attestations describe how a build was + produced, and what sources/parameters were used. In addition to fields + part of the SLSA specification, Buildkit's provenance also exports + BuildKit-specific metadata like LLB steps with their source- and layer + mapping. Provenance attestation will capture all the build sources + visible to BuildKit, for example, not only the Git repository where the + project's source is coming from but also the digests of all the + container images used during the build. #3240 #3428 #3428 #3462 + * BuildKit now supports reproducible builds by setting `SOURCE_DATE_EPOCH` + build argument or `source-date-epoch` exporter attribute. This + deterministic date will be used in image metadata instead of the current + time. #2918 #3262 #3152 Read documentation + * OCI annotations can now be set to build results exported as images or + OCI layouts. Annotations can be set on both image manifests and indexes, + as well as descriptors to them. #3283 #3061 #2975 #2879 Read + documentation + * New Build History API allows listening to events about builds starting + and completing, and streaming progress of active builds. New commands + `buildctl debug monitor`, `buildctl debug logs` and `buildctl debug get` + have been added to use this API. Build records also keep OpenTelemetry + traces, provenance attestations, and image manifests if they were + created by the build. #3294 #3339 #3440 + * Build results exported with image, local or tar exporters now support + attestations. In addition to builtin SBOM and Provenance attestations, + frontends can produce custom attestations in in-toto format #3197 #3070 + #3129 #3073 #3063 #2935 #3289 #3389 #3321 #3342 #3461 Read documentation + * New Source type `oci-layout://` allows builds to import images from OCI + directory structure on the client side. This allows using local versions + of the image. #3112 #3300 #3122 #3034 #2971 #2827 #3397 + * Build requests now support sending a Source policy definition. A policy + can be used to deny access to specific sources (e.g. images or URLs) or + only allow access to specific image namespaces. Policies can also be + used to modify sources when they are requested by the build, for + example, pin a tag requested by the build to a specific digest even if + it has already changed in the registry. #3332 + * New remote cache backend: Azure Blob Storage #3010 + * New remote cache backend: S3 #2824 #3065 + * BuildKit now supports Nydus compression type #2581 + * OCI exporter now supports attribute `tar=false` to export OCI layout + into a directory instead of downloading a tarball. #3162 + * Setting multiple cache exporters for a single build is now supported + #3024 #3271 + * Cache exporters can now be configured to ignore exporting errors #3430 + * Remote cache import/export to client-side local files now supports tag + parameter for scoping cache #3111 + * CNI network namespaces are now provisioned from a pool for increased + performance #3107 + * New Info service has been added to control API for asking BuildKit + daemon's version #2725 + * Gateway API now has a new `Evaluate` method to control the lazy solve + behavior #3137 + * Allow mounting secrets with empty contents #3081 + * New RemoveMountStubsRecursive option has been added to LLB ExecOp to + control the cleanup behavior of mounts. By default, empty mount stubs + are now cleaned up recursively in new frontends. #3314 + * LLB Image source now allows pulling partial layer chains from image + * Allow hostname to be set by network provider (K8S_POD_NAME) #3044 + * Improve handling and logging of API health checks #2998 + * RegistryToken auth from Docker config is now allowed as authentication + input #2868 + * Image exporter with containerd worker now allows skipping adding image + to containerd image store with `store=false`. If not set then images + stored images are now guaranteed to be unlazied and unpacked. #2800 + * `buildctl` now loads Github runtime environment when using GHA remote + cache #2707 + * Support for `conflist` when configuring CNI networking #3029 + * Platform info has been added to the build result descriptor metadata + * Allow sourcemaps to link single LLB vertex to multiple source locations + * Support for SSH connection helper #2843 + * Empty stub paths created by mount points when build container runs are + now cleaned up and do not remain in the final image. #3307 #3149 + * Improve performance on BoltDB commits #3261 + * Indentation of some of the image manifests has been fixed to use double + spaces #3259 + * Fix caching checksum error on copying files with custom UID/GID #3295 + * Fix cases where copy operation left behind nondeterministic timestamps + for better support for reproducible builds #3298 + * Fix SSH forwarding incompatibility with OpenSSH >= 8.9 #3274 + * Stargz has been updated to v0.13.0 #3280 + * Embedded QEMU emulators have been updated to v7.1.0 with new patches for + path handling. #3386 + * Fix unpacking images with no layers #3251 + * Fix possible nil pointer exception in LLB bridge #3233 #3169 #3066 + * Fix cleanup of containerd tasks if a start fails #3253 + * Fix handling Windows paths in content checksums #3227 + * Fix possible missing newline in progress output #3072 + * Fix possible early EOF on SSH forwarding #3431 + * Fix possible panic in concurrent OpenTelemetry access #3058 + * Previously deprecated old cache options have been removed #2982 + * Daemonless script has been updated to handle already stopped process + #3005 + * Fix closing session if shared by multiple clients #2995 + * `buildctl du` command now supports JSON formatting #2992 + * Registry push errors now show additional context #2981 + * Improve default description of FileOp vertexes #2932 + * Make sure progress from exporting is properly keyed on parallel requests + * Terminal colors are now configurable #2954 + * Build errors now always print stacktraces to daemon logs in debug mode +- switch packaging to zstd +- include ldflags to set the version number in the binaries correctly + ------------------------------------------------------------------- Wed Nov 24 09:43:06 UTC 2021 - Richard Brown diff --git a/buildkit.spec b/buildkit.spec index 8995a04..d19bde9 100644 --- a/buildkit.spec +++ b/buildkit.spec @@ -1,7 +1,7 @@ # -# spec file for package rootlesskit +# spec file for package buildkit # -# Copyright (c) 2021 SUSE LLC +# Copyright (c) 2023 SUSE LLC # # All modifications and additions to the file contributed by third parties # remain the property of their copyright owners, unless otherwise agreed @@ -15,28 +15,29 @@ # Please submit bugfixes or comments via https://bugs.opensuse.org/ # + %global provider github %global provider_tld com %global project moby %global repo buildkit %global provider_prefix %{provider}.%{provider_tld}/%{project}/%{repo} %global import_path %{provider_prefix} - Name: buildkit -Version: 0.9.3 +Version: 0.11.2 Release: 0 Summary: Toolkit for converting source code to build artifacts License: Apache-2.0 URL: https://github.com/moby/buildkit -Source: %{name}-%{version}.tar.gz -Source1: vendor.tar.gz -Source2: buildkit.service -BuildRequires: golang(API) >= 1.13 +Source: %{name}-%{version}.tar.zst +Source1: vendor.tar.zst +Source2: buildkit.service BuildRequires: containerd BuildRequires: runc +BuildRequires: systemd-rpm-macros +BuildRequires: zstd +BuildRequires: golang(API) >= 1.13 Requires: containerd Requires: runc -BuildRoot: %{_tmppath}/%{name}-%{version}-build %description BuildKit is a toolkit for converting source code to build artifacts in an efficient, expressive and repeatable manner. @@ -45,9 +46,8 @@ BuildKit is a toolkit for converting source code to build artifacts in an effici %setup -qa1 %build -go build -mod=vendor -buildmode=pie -o _output/buildkitd %{provider_prefix}/cmd/buildkitd -go build -mod=vendor -buildmode=pie -o _output/buildctl %{provider_prefix}/cmd/buildctl - +go build -mod=vendor -buildmode=pie -ldflags '-X %{import_path}/version.Version=%{version}' -o _output/buildkitd %{provider_prefix}/cmd/buildkitd +go build -mod=vendor -buildmode=pie -ldflags '-X %{import_path}/version.Version=%{version}' -o _output/buildctl %{provider_prefix}/cmd/buildctl %install mkdir -p %{buildroot}%{_bindir}/ @@ -55,7 +55,7 @@ mkdir -p %{buildroot}%{_unitdir}/ install -m 0755 _output/buildkitd %{buildroot}%{_bindir}/buildkitd install -m 0755 _output/buildctl %{buildroot}%{_bindir}/buildctl install -m 0755 %{SOURCE2} %{buildroot}%{_unitdir}/buildkit.service -install -m 0755 examples/systemd/buildkit.socket %{buildroot}%{_unitdir}/buildkit.socket +install -m 0755 examples/systemd/system/buildkit.socket %{buildroot}%{_unitdir}/buildkit.socket %post %systemd_post buildkit.socket buildkit.service diff --git a/vendor.tar.gz b/vendor.tar.gz deleted file mode 100644 index 4c6ec8f..0000000 --- a/vendor.tar.gz +++ /dev/null @@ -1,3 +0,0 @@ -version https://git-lfs.github.com/spec/v1 -oid sha256:5868e3cf3191b00cf2013207a6936f2e658e17564b3e6ec86087bd6092e37909 -size 5956400 diff --git a/vendor.tar.zst b/vendor.tar.zst new file mode 100644 index 0000000..10d2de8 --- /dev/null +++ b/vendor.tar.zst @@ -0,0 +1,3 @@ +version https://git-lfs.github.com/spec/v1 +oid sha256:c0564538026e874fe9ea4f691832c81318b33fb79f81dec9757f22ce82e1f325 +size 5752083