2020-02-25 14:02:33 +01:00
|
|
|
# Upstream has fixed share library dependencies, all within the
|
|
|
|
|
# ceph src package. Eliminating them is a long-term effort.
|
2016-05-18 04:57:15 +02:00
|
|
|
addFilter("shlib-fixed-dependency")
|
2020-02-25 14:02:33 +01:00
|
|
|
|
|
|
|
|
# ceph-base RPM ships some internal static libraries
|
2016-08-26 15:55:14 +02:00
|
|
|
addFilter("ceph-base.*devel-file-in-non-devel-package.*compressor")
|
|
|
|
|
addFilter("ceph-base.*devel-file-in-non-devel-package.*rados-classes")
|
2018-01-27 07:05:44 +01:00
|
|
|
addFilter("ceph-base.*devel-file-in-non-devel-package.*libceph_crypto")
|
|
|
|
|
addFilter("ceph-base.*devel-file-in-non-devel-package.*libos_tp")
|
|
|
|
|
addFilter("ceph-base.*devel-file-in-non-devel-package.*libosd_tp")
|
2020-02-25 14:02:33 +01:00
|
|
|
|
|
|
|
|
# env shebang hack is required because the same script has to run in FreeBSD as
|
|
|
|
|
# well as Linux (Fedora, CentOS, SUSE, Debian, Ubuntu, etc.)
|
|
|
|
|
addFilter("ceph-common.*env-script-interpreter.*rbd-replay-many")
|
|
|
|
|
addFilter("ceph-common.*env-script-interpreter.*rbdmap")
|
|
|
|
|
|
|
|
|
|
# cephadm intentionally ships an empty file (.ssh/authorized_keys)
|
|
|
|
|
# and a hidden directory (/var/lib/cephadm/.ssh)
|
|
|
|
|
addFilter("cephadm.*zero-length")
|
|
|
|
|
addFilter("cephadm.*hidden-file-or-dir")
|
|
|
|
|
|
|
|
|
|
# ceph-mgr-dashboard ships a bunch of empty files and hidden files: need to audit if they are needed (WIP)
|
|
|
|
|
addFilter("ceph-mgr-dashboard.*zero-length")
|
|
|
|
|
addFilter("ceph-mgr-dashboard.*hidden-file-or-dir")
|
|
|
|
|
|
|
|
|
|
# ceph-immutable-object-cache has a weird description (WIP)
|
|
|
|
|
addFilter("ceph-immutable-object-cache.*description-shorter-than-summary")
|
|
|
|
|
|
|
|
|
|
# ceph-osd depends on libstoragemgmt explicitly (WIP)
|
|
|
|
|
addFilter("ceph-osd.*explicit-lib-dependency.*libstoragemgmt")
|
|
|
|
|
|
|
|
|
|
# we have a problem with RPM names that are too long for Joliet filesystem (WIP)
|
|
|
|
|
addFilter("filename-too-long-for-joliet")
|
|
|
|
|
|
|
|
|
|
# ceph-base intentionally calls its logrotate file "etc/logrotate.d/ceph"
|
|
|
|
|
addFilter("ceph-base.*incoherent-logrotate-file")
|
|
|
|
|
|
|
|
|
|
# many ceph executables might not be relinquishing groups (WIP)
|
|
|
|
|
addFilter("missing-call-to-setgroups-before-setuid")
|
|
|
|
|
|
|
|
|
|
# package summary might intentionally contain the word "Ceph"
|
|
|
|
|
addFilter("name-repeated-in-summary")
|
|
|
|
|
|
|
|
|
|
# the ceph RPM should be of the noarch architecture because it contains no binaries (WIP)
|
|
|
|
|
addFilter("ceph.*no-binary")
|
|
|
|
|
|
|
|
|
|
# cephfs-shell might be missing a Requires (WIP)
|
|
|
|
|
addFilter("cephfs-shell.*no-dependency-on.*python-base")
|
|
|
|
|
|
|
|
|
|
# ceph-osd ships /etc/sudoers.d/ceph-osd-smartctl without %config (WIP)
|
|
|
|
|
addFilter("ceph-osd.*non-conffile-in-etc.*sudoers")
|
|
|
|
|
|
|
|
|
|
# cephadm ships /etc/sudoers.d/cephadm without %config (WIP)
|
|
|
|
|
addFilter("cephadm.*non-conffile-in-etc.*sudoers")
|
|
|
|
|
|
|
|
|
|
# ceph-osd ships /usr/lib/sysctl.d/90-ceph-osd.conf with %config (WIP)
|
|
|
|
|
addFilter("ceph-osd.*non-etc-or-var-file-marked-as-conffile.*sysctl.d")
|
|
|
|
|
|
|
|
|
|
# ceph-dashboard ships several scripts that don't have executable bit set (WIP)
|
|
|
|
|
addFilter("ceph-mgr-dashboard.*non-executable-script")
|
|
|
|
|
|
|
|
|
|
# ceph-mgr-rook ships a script that doesn't have executable bit set (WIP)
|
|
|
|
|
addFilter("ceph-mgr-rook.*non-executable-script.*generate_rook_ceph_client.sh")
|
|
|
|
|
|
|
|
|
|
# some devel packages obsolete the deprecated "ceph-devel" package without providing it (WIP)
|
|
|
|
|
addFilter("obsolete-not-provided.*ceph-devel")
|
|
|
|
|
|
|
|
|
|
# libcephfs2 obsoletes libcephfs1 without providing it (WIP)
|
|
|
|
|
addFilter("libcephfs2.*obsolete-not-provided.*libcephfs1")
|
|
|
|
|
|
|
|
|
|
# bsc#1150366 is open - http://bugzilla.suse.com/show_bug.cgi?id=1150366
|
|
|
|
|
addFilter("ceph-common.*permissions-directory-setuid-bit")
|
|
|
|
|
|
|
|
|
|
# /usr/bin/radosgw has the wrong permissions (WIP)
|
|
|
|
|
addFilter("ceph-radosgw.*permissions-incorrect.*radosgw")
|
|
|
|
|
|
|
|
|
|
# /usr/bin/radosgw has the wrong owner root:root - should be root:www (WIP)
|
|
|
|
|
addFilter("ceph-radosgw.*permissions-incorrect-owner.*radosgw")
|
|
|
|
|
|
2020-02-26 11:31:24 +01:00
|
|
|
# ceph-common and ceph-radosgw are missing %set_permissions /usr/bin/radosgw in %post (WIP)
|
2020-03-04 15:40:34 +01:00
|
|
|
addFilter("ceph-common.*permissions-missing-postin")
|
|
|
|
|
addFilter("ceph-radosgw.*permissions-missing-postin")
|
2020-02-25 14:02:33 +01:00
|
|
|
|
|
|
|
|
# ceph-radosgw is missing 'permissions' in PreReq - needs "PreReq: permissions" (WIP)
|
|
|
|
|
addFilter("ceph-radosgw.*permissions-missing-requires")
|
|
|
|
|
|
2020-03-04 15:40:34 +01:00
|
|
|
# ceph-common is missing '%verify_permissions -e /var/log/ceph' (WIP)
|
2020-02-25 14:02:33 +01:00
|
|
|
addFilter("ceph-common.*permissions-missing-verifyscript")
|
2020-03-04 15:40:34 +01:00
|
|
|
|
|
|
|
|
# ceph-radosgw is missing '%verify_permissions -e /usr/bin/radosgw' (WIP)
|
2020-02-25 14:02:33 +01:00
|
|
|
addFilter("ceph-radosgw.*permissions-missing-verifyscript")
|
|
|
|
|
|
|
|
|
|
# librgw2 calls exit() or _exit(), probably in a non-fork() context (WIP)
|
|
|
|
|
addFilter("librgw2.*shared-lib-calls-exit")
|
|
|
|
|
|
|
|
|
|
# ceph-base ships with shared libraries - these are internal and upstream does
|
|
|
|
|
# not want to split them into separate RPMS
|
|
|
|
|
addFilter("ceph-base.*shlib-policy-missing-suffix")
|
|
|
|
|
|
|
|
|
|
# the ceph RPM is a "meta" RPM without any files. These are discouraged by SUSE,
|
|
|
|
|
# but upstream relies on this construct and we just have to live with it.
|
|
|
|
|
addFilter("ceph\..*suse-filelist-empty")
|
|
|
|
|
|
|
|
|
|
# ceph-common ships bash-completion files in the wrong directory (WIP)
|
|
|
|
|
addFilter("ceph-common.*suse-filelist-forbidden-bashcomp-userdirs")
|
|
|
|
|
|
|
|
|
|
# ceph-base ships a logrotate file in /etc/logrotate.d/ceph but does not not
|
|
|
|
|
# package the log directory /var/log/ceph (WIP)
|
|
|
|
|
addFilter("ceph-base.*suse-logrotate-log-dir-not-packaged")
|
|
|
|
|
|
|
|
|
|
# our packages are missing "rcFOO" symlinks - I doubt if this is worth fixing
|
|
|
|
|
addFilter("suse-missing-rclink")
|
|
|
|
|
|
|
|
|
|
# %post scriptlets do not call service_add_post (WIP)
|
|
|
|
|
addFilter("systemd-service-without-service_add_post")
|
|
|
|
|
|
|
|
|
|
# %pre scriptlets do not call service_add_pre (WIP)
|
|
|
|
|
addFilter("systemd-service-without-service_add_pre")
|
|
|
|
|
|
|
|
|
|
# %postun scriptlets do not call service_del_postun (WIP)
|
|
|
|
|
addFilter("systemd-service-without-service_del_postun")
|
|
|
|
|
|
|
|
|
|
# %preun scriptlets do not call service_del_preun (WIP)
|
|
|
|
|
addFilter("systemd-service-without-service_del_preun")
|
|
|
|
|
|
|
|
|
|
# /run/ceph needs to be added to %files section as %ghost (WIP)
|
|
|
|
|
addFilter("ceph-common.*tmpfile-not-in-filelist")
|
|
|
|
|
|
|
|
|
|
# ceph-radosgw ships a SO that belongs in librgw-devel (WIP)
|
|
|
|
|
addFilter("ceph-radosgw.*devel-file-in-non-devel-package")
|
|
|
|
|
|
