12 Commits

Author SHA256 Message Date
8611c5bdce Accepting request 1314275 from Virtualization:containers
OBS-URL: https://build.opensuse.org/request/show/1314275
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/docker-stable?expand=0&rev=16
2025-10-29 20:07:17 +00:00
cf42812621 - Enable SELinux in default daemon.json config (--selinux-enabled). This has no
practical impact on non-SELinux systems. bsc#1252290

OBS-URL: https://build.opensuse.org/package/show/Virtualization:containers/docker-stable?expand=0&rev=37
2025-10-29 07:18:57 +00:00
63299d6cec Accepting request 1307635 from Virtualization:containers
OBS-URL: https://build.opensuse.org/request/show/1307635
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/docker-stable?expand=0&rev=15
2025-09-30 15:40:32 +00:00
5b4d97ced4 - Remove git-core recommends on SLE. Most SLE systems have
installRecommends=yes by default and thus end up installing git with Docker.
  bsc#1250508

  This feature is mostly intended for developers ("docker build git://") so
  most users already have the dependency installed, and the error when git is
  missing is fairly straightforward (so they can easily figure out what they
  need to install).

- Include historical changelog data from before the docker-stable fork. The
  initial changelog entry did technically provide all the necessary
  information, but our CVE tracking tools do not understand how the package is
  forked and so it seems that this package does not include fixes for ~12 years
  of updates. So, include a copy of the original package's changelog up until
  the fork point. bsc#1250596

OBS-URL: https://build.opensuse.org/package/show/Virtualization:containers/docker-stable?expand=0&rev=35
2025-09-29 05:43:47 +00:00
c4952f9b7f Accepting request 1297601 from Virtualization:containers
OBS-URL: https://build.opensuse.org/request/show/1297601
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/docker-stable?expand=0&rev=14
2025-08-05 12:21:50 +00:00
dcfb1c4083 - Backport <https://github.com/moby/moby/pull/48517>. bsc#1247362
+ 0015-bsc1247362-release-container-layer-on-export.patch

OBS-URL: https://build.opensuse.org/package/show/Virtualization:containers/docker-stable?expand=0&rev=33
2025-08-05 05:31:04 +00:00
f4a3ff2dbe Accepting request 1293988 from Virtualization:containers
OBS-URL: https://build.opensuse.org/request/show/1293988
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/docker-stable?expand=0&rev=13
2025-07-17 15:18:56 +00:00
ae31662aab - Update to docker-buildx v0.25.0. Upstream changelog:
<https://github.com/docker/buildx/releases/tag/v0.25.0>
- Update to Go 1.23 for building now that upstream has switched their 23.0.x
  LTSS to use Go 1.23.

OBS-URL: https://build.opensuse.org/package/show/Virtualization:containers/docker-stable?expand=0&rev=31
2025-07-17 04:31:09 +00:00
451c8ce3cb Accepting request 1284722 from Virtualization:containers
OBS-URL: https://build.opensuse.org/request/show/1284722
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/docker-stable?expand=0&rev=12
2025-07-01 09:34:07 +00:00
84dfc0f999 Accepting request 1284721 from home:cyphar:docker
- Patches included from snapshot:
  + 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  + 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  + 0003-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  + 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  + 0005-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
  + 0006-CVE-2024-23653-update-buildkit-to-include-CVE-patche.patch
  + cli-0001-docs-include-required-tools-in-source-tree.patch

OBS-URL: https://build.opensuse.org/request/show/1284721
OBS-URL: https://build.opensuse.org/package/show/Virtualization:containers/docker-stable?expand=0&rev=29
2025-06-11 08:30:48 +00:00
a5826f5486 Accepting request 1283417 from Virtualization:containers
OBS-URL: https://build.opensuse.org/request/show/1283417
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/docker-stable?expand=0&rev=11
2025-06-06 20:41:49 +00:00
bd8116a690 - Do not try to inject SUSEConnect secrets when in Rootless Docker mode, as
Docker does not have permission to access the host zypper credentials in this
  mode (and unprivileged users cannot disable the feature using
  /etc/docker/suse-secrets-enable.) bsc#1240150

  * 0003-SECRETS-SUSE-implement-SUSE-container-secrets.patch

- Rebase patches:
  * 0001-SECRETS-SUSE-always-clear-our-internal-secrets.patch
  * 0002-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0004-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0005-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0006-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
  * 0007-CVE-2024-2365x-update-buildkit-to-include-CVE-patche.patch
  * 0008-bsc1221916-update-to-patched-buildkit-version-to-fix.patch
  * 0009-bsc1214855-volume-use-AtomicWriteFile-to-save-volume.patch
  * 0010-CVE-2024-41110-AuthZ-plugin-securty-fixes.patch
  * 0011-CVE-2024-29018-libnet-Don-t-forward-to-upstream-reso.patch
  * 0012-CVE-2025-22868-vendor-jws-split-token-into-fixed-num.patch
  * 0013-CVE-2025-22869-vendor-ssh-limit-the-size-of-the-inte.patch
  * 0014-TESTS-backport-fixes-for-integration-tests.patch

OBS-URL: https://build.opensuse.org/package/show/Virtualization:containers/docker-stable?expand=0&rev=27
2025-06-05 16:35:01 +00:00
3 changed files with 8 additions and 1 deletions

View File

@@ -4,5 +4,6 @@
"log-opts": {
"max-size": "10m",
"max-file": "5"
}
},
"selinux-enabled": true
}

0
docker-integration.sh Executable file → Normal file
View File

View File

@@ -1,3 +1,9 @@
-------------------------------------------------------------------
Mon Oct 27 23:55:45 UTC 2025 - Aleksa Sarai <asarai@suse.com>
- Enable SELinux in default daemon.json config (--selinux-enabled). This has no
practical impact on non-SELinux systems. bsc#1252290
-------------------------------------------------------------------
Mon Sep 29 05:25:36 UTC 2025 - Aleksa Sarai <asarai@suse.com>