pool/crun
SHA256
2
0
Fork 1
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
fb30f9b72b
crun/crun.spec

76 lines
2.1 KiB
RPMSpec
Raw Normal View History

Accepting request 878678 from home:dfaggioli:Virtualization crun is a fast and low-memory footprint OCI Container Runtime fully written in C. In this package, it is built with the support for libkrun enabled. This means that it will be possible to run containers as lightweight VMs, directly from podman (see here: https://copr.fedorainfracloud.org/coprs/slp/crun-krun/) OBS-URL: https://build.opensuse.org/request/show/878678 OBS-URL: https://build.opensuse.org/package/show/Virtualization:containers/crun?expand=0&rev=1
2021-03-18 09:21:20 +01:00
#
# spec file for package crun
#
# Copyright (c) 2021 SUSE LLC
#
# All modifications and additions to the file contributed by third parties
# remain the property of their copyright owners, unless otherwise agreed
# upon. The license for this file, and modifications and additions to the
# file, is the same license as for the pristine package itself (unless the
# license for the pristine package is not an Open Source License, in which
# case the license is the MIT License). An "Open Source License" is a
# license that conforms to the Open Source Definition (Version 1.9)
# published by the Open Source Initiative.
# Please submit bugfixes or comments via https://bugs.opensuse.org/
#
Accepting request 910479 from home:polslinux:branches:Virtualization:containers - Update to 0.21 - honor memory swappiness set to 0 - status: add fields for owner and created timestamp - cgroup: lookup pids controller as well when the memory controller is not available - when compiled with krun, automatically use it if the current executable file is called "krun". - container: ignore error when resetting the SELinux label for the keyring. - container: call prestart hooks before rootfs is RO. - cgroup: added support cleaning custom controllers on cgroupv1. - spec: add support for --bundle. - exec: add --no-new-privs. - exec: add --process-label and --apparmor to change SELinux and AppArmor labels. - cgroup: kill procs in cgroup on EBUSY. - cgroup: ignore devices errors when running in a user namespace. - seccomp: drop SECCOMP_FILTER_FLAG_LOG by default. - seccomp: report correct action in error message. - apply SELinux label to keyring. - add custom annotation run.oci.delegate-cgroup. - close_range fallbacks to close on EPERM. - report error if the cgroup path was set and the cgroup could not be joined. - on exec, honor additional_gids from the process spec, not the container definition. - spec: add cgroup ns if on cgroup v2. - systemd: support array of strings for cgroup annotation. - join all the cgroup v1 controllers. - raise a warning when newuidmap/newgidmap fail. - handle eBPF access(dev_name, F_OK) call correctly. - fix some memory leaks on errors when libcrun is used by a long running process. - fix the SELinux label for masked directories. - support default seccomp errno value. - fail if no default seccomp action specified. - support OCI seccomp notify listener. - improve OOM error messages. - ignore unknown capabilities and raise a warning. - always remount bind mounts to drop not requested mount flags. OBS-URL: https://build.opensuse.org/request/show/910479 OBS-URL: https://build.opensuse.org/package/show/Virtualization:containers/crun?expand=0&rev=5
2021-08-06 14:28:15 +02:00
Summary: OCI runtime written in C
Accepting request 910491 from home:fcrozat:branches:Virtualization:containers - Add libkrun-dlopen.patch: use soname when dlopening libkrun. OBS-URL: https://build.opensuse.org/request/show/910491 OBS-URL: https://build.opensuse.org/package/show/Virtualization:containers/crun?expand=0&rev=6
2021-08-06 14:46:50 +02:00
License: GPL-2.0-or-later
Accepting request 910479 from home:polslinux:branches:Virtualization:containers - Update to 0.21 - honor memory swappiness set to 0 - status: add fields for owner and created timestamp - cgroup: lookup pids controller as well when the memory controller is not available - when compiled with krun, automatically use it if the current executable file is called "krun". - container: ignore error when resetting the SELinux label for the keyring. - container: call prestart hooks before rootfs is RO. - cgroup: added support cleaning custom controllers on cgroupv1. - spec: add support for --bundle. - exec: add --no-new-privs. - exec: add --process-label and --apparmor to change SELinux and AppArmor labels. - cgroup: kill procs in cgroup on EBUSY. - cgroup: ignore devices errors when running in a user namespace. - seccomp: drop SECCOMP_FILTER_FLAG_LOG by default. - seccomp: report correct action in error message. - apply SELinux label to keyring. - add custom annotation run.oci.delegate-cgroup. - close_range fallbacks to close on EPERM. - report error if the cgroup path was set and the cgroup could not be joined. - on exec, honor additional_gids from the process spec, not the container definition. - spec: add cgroup ns if on cgroup v2. - systemd: support array of strings for cgroup annotation. - join all the cgroup v1 controllers. - raise a warning when newuidmap/newgidmap fail. - handle eBPF access(dev_name, F_OK) call correctly. - fix some memory leaks on errors when libcrun is used by a long running process. - fix the SELinux label for masked directories. - support default seccomp errno value. - fail if no default seccomp action specified. - support OCI seccomp notify listener. - improve OOM error messages. - ignore unknown capabilities and raise a warning. - always remount bind mounts to drop not requested mount flags. OBS-URL: https://build.opensuse.org/request/show/910479 OBS-URL: https://build.opensuse.org/package/show/Virtualization:containers/crun?expand=0&rev=5
2021-08-06 14:28:15 +02:00
Name: crun
Version: 0.21
Release: 0
Source0: https://github.com/containers/crun/releases/download/%{version}/%{name}-%{version}.tar.gz
Source1: crun-rpmlintrc
URL: https://github.com/containers/crun
ExclusiveArch: x86_64 aarch64
Accepting request 878678 from home:dfaggioli:Virtualization crun is a fast and low-memory footprint OCI Container Runtime fully written in C. In this package, it is built with the support for libkrun enabled. This means that it will be possible to run containers as lightweight VMs, directly from podman (see here: https://copr.fedorainfracloud.org/coprs/slp/crun-krun/) OBS-URL: https://build.opensuse.org/request/show/878678 OBS-URL: https://build.opensuse.org/package/show/Virtualization:containers/crun?expand=0&rev=1
2021-03-18 09:21:20 +01:00
# We always run autogen.sh
Accepting request 910479 from home:polslinux:branches:Virtualization:containers - Update to 0.21 - honor memory swappiness set to 0 - status: add fields for owner and created timestamp - cgroup: lookup pids controller as well when the memory controller is not available - when compiled with krun, automatically use it if the current executable file is called "krun". - container: ignore error when resetting the SELinux label for the keyring. - container: call prestart hooks before rootfs is RO. - cgroup: added support cleaning custom controllers on cgroupv1. - spec: add support for --bundle. - exec: add --no-new-privs. - exec: add --process-label and --apparmor to change SELinux and AppArmor labels. - cgroup: kill procs in cgroup on EBUSY. - cgroup: ignore devices errors when running in a user namespace. - seccomp: drop SECCOMP_FILTER_FLAG_LOG by default. - seccomp: report correct action in error message. - apply SELinux label to keyring. - add custom annotation run.oci.delegate-cgroup. - close_range fallbacks to close on EPERM. - report error if the cgroup path was set and the cgroup could not be joined. - on exec, honor additional_gids from the process spec, not the container definition. - spec: add cgroup ns if on cgroup v2. - systemd: support array of strings for cgroup annotation. - join all the cgroup v1 controllers. - raise a warning when newuidmap/newgidmap fail. - handle eBPF access(dev_name, F_OK) call correctly. - fix some memory leaks on errors when libcrun is used by a long running process. - fix the SELinux label for masked directories. - support default seccomp errno value. - fail if no default seccomp action specified. - support OCI seccomp notify listener. - improve OOM error messages. - ignore unknown capabilities and raise a warning. - always remount bind mounts to drop not requested mount flags. OBS-URL: https://build.opensuse.org/request/show/910479 OBS-URL: https://build.opensuse.org/package/show/Virtualization:containers/crun?expand=0&rev=5
2021-08-06 14:28:15 +02:00
BuildRequires: autoconf
BuildRequires: automake
BuildRequires: gcc
BuildRequires: git-core
BuildRequires: glibc-devel-static
BuildRequires: go-md2man
BuildRequires: libcap-devel
Accepting request 911022 from home:fcrozat:branches:Virtualization:containers - Drop libkrun-dlopen.patch and adapt to libkrun new package name, it is a plugin, not a regular shared library. OBS-URL: https://build.opensuse.org/request/show/911022 OBS-URL: https://build.opensuse.org/package/show/Virtualization:containers/crun?expand=0&rev=7
2021-08-09 17:12:50 +02:00
BuildRequires: libkrun >= 0.1.4
Accepting request 910479 from home:polslinux:branches:Virtualization:containers - Update to 0.21 - honor memory swappiness set to 0 - status: add fields for owner and created timestamp - cgroup: lookup pids controller as well when the memory controller is not available - when compiled with krun, automatically use it if the current executable file is called "krun". - container: ignore error when resetting the SELinux label for the keyring. - container: call prestart hooks before rootfs is RO. - cgroup: added support cleaning custom controllers on cgroupv1. - spec: add support for --bundle. - exec: add --no-new-privs. - exec: add --process-label and --apparmor to change SELinux and AppArmor labels. - cgroup: kill procs in cgroup on EBUSY. - cgroup: ignore devices errors when running in a user namespace. - seccomp: drop SECCOMP_FILTER_FLAG_LOG by default. - seccomp: report correct action in error message. - apply SELinux label to keyring. - add custom annotation run.oci.delegate-cgroup. - close_range fallbacks to close on EPERM. - report error if the cgroup path was set and the cgroup could not be joined. - on exec, honor additional_gids from the process spec, not the container definition. - spec: add cgroup ns if on cgroup v2. - systemd: support array of strings for cgroup annotation. - join all the cgroup v1 controllers. - raise a warning when newuidmap/newgidmap fail. - handle eBPF access(dev_name, F_OK) call correctly. - fix some memory leaks on errors when libcrun is used by a long running process. - fix the SELinux label for masked directories. - support default seccomp errno value. - fail if no default seccomp action specified. - support OCI seccomp notify listener. - improve OOM error messages. - ignore unknown capabilities and raise a warning. - always remount bind mounts to drop not requested mount flags. OBS-URL: https://build.opensuse.org/request/show/910479 OBS-URL: https://build.opensuse.org/package/show/Virtualization:containers/crun?expand=0&rev=5
2021-08-06 14:28:15 +02:00
BuildRequires: libseccomp-devel
BuildRequires: libselinux-devel
BuildRequires: libtool
BuildRequires: libyajl-devel
BuildRequires: python
BuildRequires: python3-libmount
BuildRequires: systemd-devel
Accepting request 878678 from home:dfaggioli:Virtualization crun is a fast and low-memory footprint OCI Container Runtime fully written in C. In this package, it is built with the support for libkrun enabled. This means that it will be possible to run containers as lightweight VMs, directly from podman (see here: https://copr.fedorainfracloud.org/coprs/slp/crun-krun/) OBS-URL: https://build.opensuse.org/request/show/878678 OBS-URL: https://build.opensuse.org/package/show/Virtualization:containers/crun?expand=0&rev=1
2021-03-18 09:21:20 +01:00
%ifnarch %ix86
Accepting request 910479 from home:polslinux:branches:Virtualization:containers - Update to 0.21 - honor memory swappiness set to 0 - status: add fields for owner and created timestamp - cgroup: lookup pids controller as well when the memory controller is not available - when compiled with krun, automatically use it if the current executable file is called "krun". - container: ignore error when resetting the SELinux label for the keyring. - container: call prestart hooks before rootfs is RO. - cgroup: added support cleaning custom controllers on cgroupv1. - spec: add support for --bundle. - exec: add --no-new-privs. - exec: add --process-label and --apparmor to change SELinux and AppArmor labels. - cgroup: kill procs in cgroup on EBUSY. - cgroup: ignore devices errors when running in a user namespace. - seccomp: drop SECCOMP_FILTER_FLAG_LOG by default. - seccomp: report correct action in error message. - apply SELinux label to keyring. - add custom annotation run.oci.delegate-cgroup. - close_range fallbacks to close on EPERM. - report error if the cgroup path was set and the cgroup could not be joined. - on exec, honor additional_gids from the process spec, not the container definition. - spec: add cgroup ns if on cgroup v2. - systemd: support array of strings for cgroup annotation. - join all the cgroup v1 controllers. - raise a warning when newuidmap/newgidmap fail. - handle eBPF access(dev_name, F_OK) call correctly. - fix some memory leaks on errors when libcrun is used by a long running process. - fix the SELinux label for masked directories. - support default seccomp errno value. - fail if no default seccomp action specified. - support OCI seccomp notify listener. - improve OOM error messages. - ignore unknown capabilities and raise a warning. - always remount bind mounts to drop not requested mount flags. OBS-URL: https://build.opensuse.org/request/show/910479 OBS-URL: https://build.opensuse.org/package/show/Virtualization:containers/crun?expand=0&rev=5
2021-08-06 14:28:15 +02:00
BuildRequires: criu-devel >= 3.15
Accepting request 878678 from home:dfaggioli:Virtualization crun is a fast and low-memory footprint OCI Container Runtime fully written in C. In this package, it is built with the support for libkrun enabled. This means that it will be possible to run containers as lightweight VMs, directly from podman (see here: https://copr.fedorainfracloud.org/coprs/slp/crun-krun/) OBS-URL: https://build.opensuse.org/request/show/878678 OBS-URL: https://build.opensuse.org/package/show/Virtualization:containers/crun?expand=0&rev=1
2021-03-18 09:21:20 +01:00
%endif
Accepting request 911022 from home:fcrozat:branches:Virtualization:containers - Drop libkrun-dlopen.patch and adapt to libkrun new package name, it is a plugin, not a regular shared library. OBS-URL: https://build.opensuse.org/request/show/911022 OBS-URL: https://build.opensuse.org/package/show/Virtualization:containers/crun?expand=0&rev=7
2021-08-09 17:12:50 +02:00
Requires: libkrun >= 0.1.7
Accepting request 878678 from home:dfaggioli:Virtualization crun is a fast and low-memory footprint OCI Container Runtime fully written in C. In this package, it is built with the support for libkrun enabled. This means that it will be possible to run containers as lightweight VMs, directly from podman (see here: https://copr.fedorainfracloud.org/coprs/slp/crun-krun/) OBS-URL: https://build.opensuse.org/request/show/878678 OBS-URL: https://build.opensuse.org/package/show/Virtualization:containers/crun?expand=0&rev=1
2021-03-18 09:21:20 +01:00
%description
crun is a runtime for running OCI containers. It is built with libkrun support
%prep
Accepting request 910491 from home:fcrozat:branches:Virtualization:containers - Add libkrun-dlopen.patch: use soname when dlopening libkrun. OBS-URL: https://build.opensuse.org/request/show/910491 OBS-URL: https://build.opensuse.org/package/show/Virtualization:containers/crun?expand=0&rev=6
2021-08-06 14:46:50 +02:00
%autosetup -p1
Accepting request 878678 from home:dfaggioli:Virtualization crun is a fast and low-memory footprint OCI Container Runtime fully written in C. In this package, it is built with the support for libkrun enabled. This means that it will be possible to run containers as lightweight VMs, directly from podman (see here: https://copr.fedorainfracloud.org/coprs/slp/crun-krun/) OBS-URL: https://build.opensuse.org/request/show/878678 OBS-URL: https://build.opensuse.org/package/show/Virtualization:containers/crun?expand=0&rev=1
2021-03-18 09:21:20 +01:00
%build
./autogen.sh
%configure --disable-silent-rules --with-libkrun CFLAGS='-I /usr/include/libseccomp'
%make_build
%install
%make_install
rm -rf %{buildroot}/%{_libdir}/lib*
Accepting request 910479 from home:polslinux:branches:Virtualization:containers - Update to 0.21 - honor memory swappiness set to 0 - status: add fields for owner and created timestamp - cgroup: lookup pids controller as well when the memory controller is not available - when compiled with krun, automatically use it if the current executable file is called "krun". - container: ignore error when resetting the SELinux label for the keyring. - container: call prestart hooks before rootfs is RO. - cgroup: added support cleaning custom controllers on cgroupv1. - spec: add support for --bundle. - exec: add --no-new-privs. - exec: add --process-label and --apparmor to change SELinux and AppArmor labels. - cgroup: kill procs in cgroup on EBUSY. - cgroup: ignore devices errors when running in a user namespace. - seccomp: drop SECCOMP_FILTER_FLAG_LOG by default. - seccomp: report correct action in error message. - apply SELinux label to keyring. - add custom annotation run.oci.delegate-cgroup. - close_range fallbacks to close on EPERM. - report error if the cgroup path was set and the cgroup could not be joined. - on exec, honor additional_gids from the process spec, not the container definition. - spec: add cgroup ns if on cgroup v2. - systemd: support array of strings for cgroup annotation. - join all the cgroup v1 controllers. - raise a warning when newuidmap/newgidmap fail. - handle eBPF access(dev_name, F_OK) call correctly. - fix some memory leaks on errors when libcrun is used by a long running process. - fix the SELinux label for masked directories. - support default seccomp errno value. - fail if no default seccomp action specified. - support OCI seccomp notify listener. - improve OOM error messages. - ignore unknown capabilities and raise a warning. - always remount bind mounts to drop not requested mount flags. OBS-URL: https://build.opensuse.org/request/show/910479 OBS-URL: https://build.opensuse.org/package/show/Virtualization:containers/crun?expand=0&rev=5
2021-08-06 14:28:15 +02:00
# allow easy krun usage with podman
ln -s %{_bindir}/crun %{buildroot}%{_bindir}/krun
Accepting request 878678 from home:dfaggioli:Virtualization crun is a fast and low-memory footprint OCI Container Runtime fully written in C. In this package, it is built with the support for libkrun enabled. This means that it will be possible to run containers as lightweight VMs, directly from podman (see here: https://copr.fedorainfracloud.org/coprs/slp/crun-krun/) OBS-URL: https://build.opensuse.org/request/show/878678 OBS-URL: https://build.opensuse.org/package/show/Virtualization:containers/crun?expand=0&rev=1
2021-03-18 09:21:20 +01:00
%files
%defattr(-,root,root)
%license COPYING
%doc README.md
%doc SECURITY.md
%{_bindir}/%{name}
Accepting request 910479 from home:polslinux:branches:Virtualization:containers - Update to 0.21 - honor memory swappiness set to 0 - status: add fields for owner and created timestamp - cgroup: lookup pids controller as well when the memory controller is not available - when compiled with krun, automatically use it if the current executable file is called "krun". - container: ignore error when resetting the SELinux label for the keyring. - container: call prestart hooks before rootfs is RO. - cgroup: added support cleaning custom controllers on cgroupv1. - spec: add support for --bundle. - exec: add --no-new-privs. - exec: add --process-label and --apparmor to change SELinux and AppArmor labels. - cgroup: kill procs in cgroup on EBUSY. - cgroup: ignore devices errors when running in a user namespace. - seccomp: drop SECCOMP_FILTER_FLAG_LOG by default. - seccomp: report correct action in error message. - apply SELinux label to keyring. - add custom annotation run.oci.delegate-cgroup. - close_range fallbacks to close on EPERM. - report error if the cgroup path was set and the cgroup could not be joined. - on exec, honor additional_gids from the process spec, not the container definition. - spec: add cgroup ns if on cgroup v2. - systemd: support array of strings for cgroup annotation. - join all the cgroup v1 controllers. - raise a warning when newuidmap/newgidmap fail. - handle eBPF access(dev_name, F_OK) call correctly. - fix some memory leaks on errors when libcrun is used by a long running process. - fix the SELinux label for masked directories. - support default seccomp errno value. - fail if no default seccomp action specified. - support OCI seccomp notify listener. - improve OOM error messages. - ignore unknown capabilities and raise a warning. - always remount bind mounts to drop not requested mount flags. OBS-URL: https://build.opensuse.org/request/show/910479 OBS-URL: https://build.opensuse.org/package/show/Virtualization:containers/crun?expand=0&rev=5
2021-08-06 14:28:15 +02:00
%{_bindir}/krun
Accepting request 878678 from home:dfaggioli:Virtualization crun is a fast and low-memory footprint OCI Container Runtime fully written in C. In this package, it is built with the support for libkrun enabled. This means that it will be possible to run containers as lightweight VMs, directly from podman (see here: https://copr.fedorainfracloud.org/coprs/slp/crun-krun/) OBS-URL: https://build.opensuse.org/request/show/878678 OBS-URL: https://build.opensuse.org/package/show/Virtualization:containers/crun?expand=0&rev=1
2021-03-18 09:21:20 +01:00
%{_mandir}/man1/*
%changelog
Reference in New Issue Copy Permalink