547 Commits

Author SHA256 Message Date
06d8b0f589 Accepting request 1320422 from Virtualization:containers
OBS-URL: https://build.opensuse.org/request/show/1320422
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/docker?expand=0&rev=182
2025-11-28 15:50:49 +00:00
9fdf569ad1 - Add Requires containers-selinux on systems with selinux-policy installed.
bsc#1252672

OBS-URL: https://build.opensuse.org/package/show/Virtualization:containers/docker?expand=0&rev=459
2025-11-28 08:20:05 +00:00
adcce3dc4a Accepting request 1314276 from Virtualization:containers
OBS-URL: https://build.opensuse.org/request/show/1314276
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/docker?expand=0&rev=181
2025-10-29 20:04:16 +00:00
9f2ae9a0e9 - Enable SELinux in default daemon.json config (--selinux-enabled). This has no
practical impact on non-SELinux systems. bsc#1252290

OBS-URL: https://build.opensuse.org/package/show/Virtualization:containers/docker?expand=0&rev=458
2025-10-29 07:18:59 +00:00
b514845da4 Accepting request 1310597 from Virtualization:containers
OBS-URL: https://build.opensuse.org/request/show/1310597
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/docker?expand=0&rev=180
2025-10-11 20:48:31 +00:00
afd085f8d1 - Update to Docker 28.5.1-ce. See upstream changelog online at
<https://docs.docker.com/engine/release-notes/28/#2851>
- Rebased patches:
  * 0001-SECRETS-SUSE-always-clear-our-internal-secrets.patch
  * 0002-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0003-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0004-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0005-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0006-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
  * cli-0001-openSUSE-point-users-to-docker-buildx-package.patch
  * cli-0002-SECRETS-SUSE-default-to-DOCKER_BUILDKIT-0-for-docker.patch
- Remove upstreamed patch:
  - 0007-Add-back-vendor.sum.patch

OBS-URL: https://build.opensuse.org/package/show/Virtualization:containers/docker?expand=0&rev=457
2025-10-10 14:04:31 +00:00
d1b7ba8fc8 Accepting request 1308807 from Virtualization:containers
OBS-URL: https://build.opensuse.org/request/show/1308807
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/docker?expand=0&rev=179
2025-10-04 16:50:38 +00:00
a5d2f5f793 Accepting request 1308812 from home:cyphar:docker
Fix comment in docker-integration.sh.

OBS-URL: https://build.opensuse.org/request/show/1308812
OBS-URL: https://build.opensuse.org/package/show/Virtualization:containers/docker?expand=0&rev=456
2025-10-03 07:59:22 +00:00
de9874d400 - Update to Docker 28.5.0-ce. See upstream changelog online at
<https://docs.docker.com/engine/release-notes/28/#2850>
- Backport <https://github.com/moby/moby/pull/51091> to re-add vendor.sum,
  fixing our builds.
  + 0007-Add-back-vendor.sum.patch
- Rebased patches:
  * 0001-SECRETS-SUSE-always-clear-our-internal-secrets.patch
  * 0002-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0003-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0004-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0005-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0006-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
  * cli-0001-openSUSE-point-users-to-docker-buildx-package.patch
  * cli-0002-SECRETS-SUSE-default-to-DOCKER_BUILDKIT-0-for-docker.patch
- Update to docker-buildx v0.29.0. Upstream changelog:
  <https://github.com/docker/buildx/releases/tag/v0.29.0>

OBS-URL: https://build.opensuse.org/package/show/Virtualization:containers/docker?expand=0&rev=455
2025-10-03 07:51:54 +00:00
0ca729154a Accepting request 1308443 from Virtualization:containers
OBS-URL: https://build.opensuse.org/request/show/1308443
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/docker?expand=0&rev=178
2025-10-02 17:18:56 +00:00
9b1482be67 - Remove git-core recommends also on openSUSE: the below argument
is valid for those users too.

OBS-URL: https://build.opensuse.org/package/show/Virtualization:containers/docker?expand=0&rev=454
2025-10-01 16:10:28 +00:00
b0b42715a7 Accepting request 1307636 from Virtualization:containers
OBS-URL: https://build.opensuse.org/request/show/1307636
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/docker?expand=0&rev=177
2025-09-30 15:34:26 +00:00
8cf7456eae - Remove git-core recommends on SLE. Most SLE systems have
installRecommends=yes by default and thus end up installing git with Docker.
  bsc#1250508

  This feature is mostly intended for developers ("docker build git://") so
  most users already have the dependency installed, and the error when git is
  missing is fairly straightforward (so they can easily figure out what they
  need to install).

OBS-URL: https://build.opensuse.org/package/show/Virtualization:containers/docker?expand=0&rev=453
2025-09-29 05:43:51 +00:00
6be0f29427 Accepting request 1305058 from Virtualization:containers
OBS-URL: https://build.opensuse.org/request/show/1305058
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/docker?expand=0&rev=176
2025-09-16 16:18:50 +00:00
cbfcffb90f * Fixes a nil pointer panic in "docker push". bsc#1248373
OBS-URL: https://build.opensuse.org/package/show/Virtualization:containers/docker?expand=0&rev=452
2025-09-16 03:06:10 +00:00
df931afd90 Accepting request 1302771 from Virtualization:containers
OBS-URL: https://build.opensuse.org/request/show/1302771
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/docker?expand=0&rev=175
2025-09-05 19:42:22 +00:00
f8f5090fcb Fix SUSEConnect+buildx changelog entry.
OBS-URL: https://build.opensuse.org/package/show/Virtualization:containers/docker?expand=0&rev=451
2025-09-04 15:40:43 +00:00
1571af50e2 - Update to docker-buildx v0.28.0. Upstream changelog:
<https://github.com/docker/buildx/releases/tag/v0.28.0>
- Update to Docker 28.4.0-ce. See upstream changelog online at
  <https://docs.docker.com/engine/release-notes/28/#2840>
- Rebased patches:
  * 0001-SECRETS-SUSE-always-clear-our-internal-secrets.patch
  * 0002-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0003-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0004-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0005-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0006-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
  * cli-0001-openSUSE-point-users-to-docker-buildx-package.patch
  * cli-0002-SECRETS-SUSE-default-to-DOCKER_BUILDKIT-0-for-docker.patch

OBS-URL: https://build.opensuse.org/package/show/Virtualization:containers/docker?expand=0&rev=450
2025-09-04 15:30:45 +00:00
92ad80cecc Accepting request 1302148 from Virtualization:containers
OBS-URL: https://build.opensuse.org/request/show/1302148
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/docker?expand=0&rev=174
2025-09-01 15:16:51 +00:00
533ef8e35e - Update warnings and errors related to "docker buildx ..." so that they
reference our openSUSE docker-buildx packages.
  + cli-0001-openSUSE-point-users-to-docker-buildx-package.patch

OBS-URL: https://build.opensuse.org/package/show/Virtualization:containers/docker?expand=0&rev=449
2025-09-01 06:21:40 +00:00
b430a54521 - Enable building docker-buildx for SLE systems with SUSEConnect secret
injection enabled (i.e., SLE15 and earlier). PED-12534 PED-8905 bsc#1247594
  As docker-buildx does not support our SUSEConnect secret injection (and some
  users depend "docker build" working transparently), patch the docker CLI so
  that "docker build" will no longer automatically call "docker buildx build",
  effectively making DOCKER_BUILDKIT=0 the default configuration. Users can
  manually use "docker buildx ..." commands or set DOCKER_BUILDKIT=1 in order
  to opt-in to using docker-buildx.

  Users can silence the "docker build" warning by setting DOCKER_BUILDKIT=0
  explicitly.

  In order to inject SCC credentials with docker-buildx, users should use

    RUN --mount=type=secret,id=SCCcredentials zypper -n ...

  in their Dockerfiles, and

    docker buildx build --secret id=SCCcredentials,src=/etc/zypp/credentials.d/SCCcredentials,type=file .

  when doing their builds.

  + cli-0001-SECRETS-SUSE-default-to-DOCKER_BUILDKIT-0-for-docker.patch

OBS-URL: https://build.opensuse.org/package/show/Virtualization:containers/docker?expand=0&rev=448
2025-09-01 06:00:17 +00:00
22f297a04a Accepting request 1297919 from Virtualization:containers
Automatic submission by obs-autosubmit

OBS-URL: https://build.opensuse.org/request/show/1297919
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/docker?expand=0&rev=173
2025-08-06 16:41:23 +00:00
1dc8abd5ca Accepting request 1296345 from Virtualization:containers
OBS-URL: https://build.opensuse.org/request/show/1296345
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/docker?expand=0&rev=172
2025-07-30 09:42:08 +00:00
8209c912ee Accepting request 1296528 from home:cyphar:docker
Add bsc#1247367 reference.

OBS-URL: https://build.opensuse.org/request/show/1296528
OBS-URL: https://build.opensuse.org/package/show/Virtualization:containers/docker?expand=0&rev=447
2025-07-30 09:36:22 +00:00
924b24592b - Update to Docker 28.3.3-ce. See upstream changelog online at
<https://docs.docker.com/engine/release-notes/28/#2833>
  CVE-2025-54388

OBS-URL: https://build.opensuse.org/package/show/Virtualization:containers/docker?expand=0&rev=446
2025-07-29 14:52:57 +00:00
cff1a2c48d Accepting request 1295197 from Virtualization:containers
OBS-URL: https://build.opensuse.org/request/show/1295197
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/docker?expand=0&rev=171
2025-07-24 16:34:40 +00:00
a81b7b9cba - Update to docker-buildx v0.26.1. Upstream changelog:
<https://github.com/docker/buildx/releases/tag/v0.26.1>

OBS-URL: https://build.opensuse.org/package/show/Virtualization:containers/docker?expand=0&rev=445
2025-07-23 04:33:16 +00:00
3177dadb1d Accepting request 1294744 from Virtualization:containers
OBS-URL: https://build.opensuse.org/request/show/1294744
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/docker?expand=0&rev=170
2025-07-21 18:00:26 +00:00
a9817d2f90 Add bsc#1246556 reference.
OBS-URL: https://build.opensuse.org/package/show/Virtualization:containers/docker?expand=0&rev=444
2025-07-21 06:09:47 +00:00
323e2d4ca9 Accepting request 1293990 from Virtualization:containers
OBS-URL: https://build.opensuse.org/request/show/1293990
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/docker?expand=0&rev=169
2025-07-18 13:57:38 +00:00
487c67f1de - Update to Go 1.24 for builds, to match upstream.
OBS-URL: https://build.opensuse.org/package/show/Virtualization:containers/docker?expand=0&rev=443
2025-07-17 04:34:00 +00:00
406a71b522 Accepting request 1293103 from Virtualization:containers
OBS-URL: https://build.opensuse.org/request/show/1293103
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/docker?expand=0&rev=168
2025-07-15 14:42:02 +00:00
ddbb0cf9b0 - Update to Docker 28.3.2-ce. See upstream changelog online at
<https://docs.docker.com/engine/release-notes/28/#2832>

OBS-URL: https://build.opensuse.org/package/show/Virtualization:containers/docker?expand=0&rev=442
2025-07-14 10:23:10 +00:00
d7c9b3e5f2 Accepting request 1290059 from Virtualization:containers
OBS-URL: https://build.opensuse.org/request/show/1290059
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/docker?expand=0&rev=167
2025-07-06 14:59:38 +00:00
8beeee3eda - Update to Docker 28.3.1-ce. See upstream changelog online at
<https://docs.docker.com/engine/release-notes/28/#2831>

OBS-URL: https://build.opensuse.org/package/show/Virtualization:containers/docker?expand=0&rev=441
2025-07-03 02:34:03 +00:00
4f26a3a4f8 Accepting request 1288579 from Virtualization:containers
OBS-URL: https://build.opensuse.org/request/show/1288579
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/docker?expand=0&rev=166
2025-06-26 12:05:40 +00:00
7944c3c06a - Update to Docker 28.3.0-ce. See upstream changelog online at
<https://docs.docker.com/engine/release-notes/28/#2830>
- Rebase patches:
 * 0001-SECRETS-SUSE-always-clear-our-internal-secrets.patch
 * 0002-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
 * 0003-SECRETS-SUSE-implement-SUSE-container-secrets.patch
 * 0004-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
 * 0005-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
 * 0006-SLE12-revert-apparmor-remove-version-conditionals-fr.patch

OBS-URL: https://build.opensuse.org/package/show/Virtualization:containers/docker?expand=0&rev=440
2025-06-25 15:46:10 +00:00
02b514011a Accepting request 1287937 from Virtualization:containers
OBS-URL: https://build.opensuse.org/request/show/1287937
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/docker?expand=0&rev=165
2025-06-24 18:46:07 +00:00
e65290c603 Fix SUSEConnect patch build.
OBS-URL: https://build.opensuse.org/package/show/Virtualization:containers/docker?expand=0&rev=439
2025-06-23 13:07:50 +00:00
4f0ef3de34 [ This update is a no-op, only needed to work around unfortunate automated
packaging script behaviour on SLES. ]

- The following patches were removed in openSUSE in the Docker 28.1.1-ce
  update, but the patch names were later renamed in a SLES-only update before
  Docker 28.1.1-ce was submitted to SLES.
  This causes the SLES build scripts to refuse the update because the patches
  are not referenced in the changelog. There is no obvious place to put the
  patch removals (the 28.1.1-ce update removing the patches chronologically
  predates their renaming in SLES), so they are included here a dummy changelog
  entry to work around the issue.

  - 0007-CVE-2025-22868-vendor-jws-split-token-into-fixed-num.patch
  - 0008-CVE-2025-22869-vendor-ssh-limit-the-size-of-the-inte.patch

- Update to docker-buildx v0.25.0. Upstream changelog:
  <https://github.com/docker/buildx/releases/tag/v0.25.0>

OBS-URL: https://build.opensuse.org/package/show/Virtualization:containers/docker?expand=0&rev=438
2025-06-23 12:56:51 +00:00
ed61589e0d Accepting request 1283419 from Virtualization:containers
OBS-URL: https://build.opensuse.org/request/show/1283419
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/docker?expand=0&rev=164
2025-06-10 06:57:46 +00:00
cc421e65c3 fix pkg/errors import
OBS-URL: https://build.opensuse.org/package/show/Virtualization:containers/docker?expand=0&rev=437
2025-06-05 16:36:19 +00:00
e827a6b7ca Improve patchset changes.
OBS-URL: https://build.opensuse.org/package/show/Virtualization:containers/docker?expand=0&rev=436
2025-06-05 16:34:25 +00:00
1f58d49808 - Do not try to inject SUSEConnect secrets when in Rootless Docker mode, as
Docker does not have permission to access the host zypper credentials in this
  mode (and unprivileged users cannot disable the feature using
  /etc/docker/suse-secrets-enable.) bsc#1240150

  * 0003-SECRETS-SUSE-implement-SUSE-container-secrets.patch

OBS-URL: https://build.opensuse.org/package/show/Virtualization:containers/docker?expand=0&rev=435
2025-06-05 16:19:52 +00:00
cb1fadaa4b - Always clear SUSEConnect suse_* secrets when starting containers regardless
of whether the daemon was built with SUSEConnect support. Not doing this
  causes containers from SUSEConnect-enabled daemons to fail to start when
  running with SUSEConnect-disabled (i.e. upstream) daemons.

  This was a long-standing issue with our secrets support but until recently
  this would've required migrating from SLE packages to openSUSE packages
  (which wasn't supported). However, as SLE Micro 6.x and SLES 16 will move
  away from in-built SUSEConnect support, this is now a practical issue users
  will run into. bsc#1244035

  + 0001-SECRETS-SUSE-always-clear-our-internal-secrets.patch

- Rearrange patches:
  - 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  + 0002-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  - 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  + 0003-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  - 0003-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  + 0004-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  - 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  + 0005-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  - 0005-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
  + 0006-SLE12-revert-apparmor-remove-version-conditionals-fr.patch

OBS-URL: https://build.opensuse.org/package/show/Virtualization:containers/docker?expand=0&rev=434
2025-06-04 06:14:23 +00:00
69630be04c Accepting request 1281542 from Virtualization:containers
OBS-URL: https://build.opensuse.org/request/show/1281542
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/docker?expand=0&rev=163
2025-06-02 19:59:08 +00:00
37241ca5cc - Update to Docker 28.2.2-ce. See upstream changelog online at
<https://github.com/moby/moby/releases/tag/v28.2.2>
- Rebase patches:
 * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
 * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
 * 0003-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
 * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
 * 0005-SLE12-revert-apparmor-remove-version-conditionals-fr.patch

OBS-URL: https://build.opensuse.org/package/show/Virtualization:containers/docker?expand=0&rev=433
2025-05-30 17:59:48 +00:00
3f2382a8b2 - Update to Docker 28.2.1-ce. See upstream changelog online at
<https://docs.docker.com/engine/release-notes/28/#2820> bsc#1243833
- Rebase patches:
 * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
 * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
 * 0003-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
 * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
 * 0005-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
- Update to docker-buildx v0.24.0. Upstream changelog:
  <https://github.com/docker/buildx/releases/tag/v0.24.0>

OBS-URL: https://build.opensuse.org/package/show/Virtualization:containers/docker?expand=0&rev=432
2025-05-30 09:46:29 +00:00
8371f55e1e Accepting request 1273868 from Virtualization:containers
OBS-URL: https://build.opensuse.org/request/show/1273868
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/docker?expand=0&rev=162
2025-05-02 12:56:14 +00:00
ba29e28bc2 - Update to Docker 28.1.1-ce. See upstream changelog online at
<https://docs.docker.com/engine/release-notes/28/#2811> bsc#1242114
  Includes upstream fixes:
   - CVE-2025-22872 bsc#1241830
- Remove long-outdated build handling for deprecated and unsupported
  devicemapper and AUFS storage drivers. AUFS was removed in v24, and
  devicemapper was removed in v25.
  <https://docs.docker.com/engine/deprecated/#aufs-storage-driver>
- Rebase patches:
 * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
 * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
 * 0003-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
 * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
 * 0005-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
- Remove upstreamed patches:
 - 0006-CVE-2025-22868-vendor-jws-split-token-into-fixed-num.patch
 - 0007-CVE-2025-22869-vendor-ssh-limit-the-size-of-the-inte.patch
 - cli-0001-docs-include-required-tools-in-source-tree.patch
- Update to docker-buildx v0.23.0. Upstream changelog:
  <https://github.com/docker/buildx/releases/tag/v0.23.0>

OBS-URL: https://build.opensuse.org/package/show/Virtualization:containers/docker?expand=0&rev=431
2025-05-01 17:17:53 +00:00