Commit Graph

259 Commits

Author SHA256 Message Date
Aleksa Sarai
fd64aa149c - Drop containerd.service workaround (we've released enough versions without
containerd.service -- there's no need to support package upgrades that old).
- Update to Docker 19.03.3-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. bsc#1153367

OBS-URL: https://build.opensuse.org/package/show/Virtualization:containers/docker?expand=0&rev=322
2019-10-09 01:08:46 +00:00
Aleksa Sarai
56c9b0f980 Accepting request 734438 from home:cyphar:docker
- Update to Docker 19.03.2-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. bsc#1150397

OBS-URL: https://build.opensuse.org/request/show/734438
OBS-URL: https://build.opensuse.org/package/show/Virtualization:containers/docker?expand=0&rev=320
2019-10-02 00:37:03 +00:00
Aleksa Sarai
938c898611 Accepting request 719747 from home:cyphar:docker
- Fix default installation such that --userns-remap=default works properly
  (this appears to be an upstream regression, where --userns-remap=default
  doesn't auto-create the group and results in an error on-start). boo#1143349

OBS-URL: https://build.opensuse.org/request/show/719747
OBS-URL: https://build.opensuse.org/package/show/Virtualization:containers/docker?expand=0&rev=318
2019-07-30 05:44:55 +00:00
Aleksa Sarai
fb5e6c3606 Accepting request 719412 from home:cyphar:docker
Docker 19.03.1-ce.

OBS-URL: https://build.opensuse.org/request/show/719412
OBS-URL: https://build.opensuse.org/package/show/Virtualization:containers/docker?expand=0&rev=317
2019-07-28 16:50:24 +00:00
Aleksa Sarai
ff604e37bb Accepting request 717716 from home:cyphar:docker
Docker v19.03.0-ce.

OBS-URL: https://build.opensuse.org/request/show/717716
OBS-URL: https://build.opensuse.org/package/show/Virtualization:containers/docker?expand=0&rev=315
2019-07-23 01:51:56 +00:00
Aleksa Sarai
2bf28b0b21 Accepting request 717242 from home:cyphar:docker
- Move bash-completion to correct location.
- Update to Docker 18.09.8-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. bsc#1142160 CVE-2019-13509

OBS-URL: https://build.opensuse.org/request/show/717242
OBS-URL: https://build.opensuse.org/package/show/Virtualization:containers/docker?expand=0&rev=314
2019-07-20 15:54:08 +00:00
Aleksa Sarai
9f66d3bb9c Docker v18.09.7.
OBS-URL: https://build.opensuse.org/package/show/Virtualization:containers/docker?expand=0&rev=312
2019-06-28 01:58:22 +00:00
Aleksa Sarai
cc0b032b70 Accepting request 712228 from home:cyphar:docker
- Use %config(noreplace) for /etc/docker/daemon.json. bsc#1138920

OBS-URL: https://build.opensuse.org/request/show/712228
OBS-URL: https://build.opensuse.org/package/show/Virtualization:containers/docker?expand=0&rev=311
2019-06-27 07:16:12 +00:00
Aleksa Sarai
d75af67d04 Accepting request 708940 from home:cyphar:docker
- Add patch for CVE-2018-15664. bsc#1096726
  + CVE-2018-15664.patch

OBS-URL: https://build.opensuse.org/request/show/708940
OBS-URL: https://build.opensuse.org/package/show/Virtualization:containers/docker?expand=0&rev=309
2019-06-10 08:40:50 +00:00
Aleksa Sarai
5690a0041e Accepting request 701146 from home:cyphar:docker
- Update to Docker 18.09.6-ce see upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md.
- Rebase patches:
  * bsc1128746-0001-integration-cli-don-t-build-test-images-if-they-alre.patch

OBS-URL: https://build.opensuse.org/request/show/701146
OBS-URL: https://build.opensuse.org/package/show/Virtualization:containers/docker?expand=0&rev=307
2019-05-06 18:41:55 +00:00
Aleksa Sarai
ddeb833513 - Update to Docker 18.09.5-ce see upstream changelog in the packaged
/usr/share/doc/packages/docker/CHANGELOG.md. bsc#1128376 boo#1134068

OBS-URL: https://build.opensuse.org/package/show/Virtualization:containers/docker?expand=0&rev=306
2019-05-03 16:22:55 +00:00
Aleksa Sarai
c05ebdd094 Accepting request 687622 from home:sgrunert
- Update to Docker 18.09.3-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md.

OBS-URL: https://build.opensuse.org/request/show/687622
OBS-URL: https://build.opensuse.org/package/show/Virtualization:containers/docker?expand=0&rev=304
2019-03-25 06:51:57 +00:00
Aleksa Sarai
aa89492db8 - docker-test: improvements to test packaging (we don't need to ship around the
entire source tree, and we also need to build the born-again integration/
  tests which contain a suite-per-directory). We also need a new patch which
  fixes the handling of *-test images. bsc#1128746
  + bsc1128746-0001-integration-cli-don-t-build-test-images-if-they-alre.patch

OBS-URL: https://build.opensuse.org/package/show/Virtualization:containers/docker?expand=0&rev=301
2019-03-12 07:51:12 +00:00
Aleksa Sarai
1dba49a151 Accepting request 683820 from home:cyphar:containers:docker-test
tests.sh: remove integration/ support

OBS-URL: https://build.opensuse.org/request/show/683820
OBS-URL: https://build.opensuse.org/package/show/Virtualization:containers/docker?expand=0&rev=298
2019-03-11 12:02:19 +00:00
Aleksa Sarai
46a92a1eb8 Accepting request 683779 from home:cyphar:containers:docker-test
- docker-test: add support for running the new integration/ tests with tests.sh

OBS-URL: https://build.opensuse.org/request/show/683779
OBS-URL: https://build.opensuse.org/package/show/Virtualization:containers/docker?expand=0&rev=297
2019-03-11 11:56:10 +00:00
Aleksa Sarai
1711b55eb5 Accepting request 683630 from home:cyphar:containers:docker-test
- docker-test: improvements to test packaging (we don't need to ship around the
  entire source tree, and we also need to build the born-again integration/
  tests which contain a suite-per-directory).

OBS-URL: https://build.opensuse.org/request/show/683630
OBS-URL: https://build.opensuse.org/package/show/Virtualization:containers/docker?expand=0&rev=291
2019-03-10 21:59:21 +00:00
Aleksa Sarai
b54f093209 Accepting request 683628 from home:cyphar:containers:docker-test
- docker-test: improvements to test packaging (we don't need to ship around the
  entire source tree, and we also need to build the born-again integration/
  tests which contain a suite-per-directory). tests.sh will need to be updated,
  but this will be done in a follow-up.

OBS-URL: https://build.opensuse.org/request/show/683628
OBS-URL: https://build.opensuse.org/package/show/Virtualization:containers/docker?expand=0&rev=290
2019-03-10 21:20:43 +00:00
Michal Jura
1080cf620d Accepting request 679202 from home:mjura:branches:Virtualization:containers
- Move daemon.json file to /etc/docker directory, bsc#1114832

OBS-URL: https://build.opensuse.org/request/show/679202
OBS-URL: https://build.opensuse.org/package/show/Virtualization:containers/docker?expand=0&rev=288
2019-02-26 12:18:18 +00:00
Aleksa Sarai
9189d5024b Accepting request 673381 from home:cyphar:containers:docker_18.09.1
- Add fix for CVE-2019-5736 (effectively copying /proc/self/exe during re-exec
  to avoid write attacks to the host runc binary). bsc#1121967
  + CVE-2019-5736.patch

OBS-URL: https://build.opensuse.org/request/show/673381
OBS-URL: https://build.opensuse.org/package/show/Virtualization:containers/docker?expand=0&rev=286
2019-02-11 14:39:43 +00:00
Aleksa Sarai
077069cf9a Accepting request 673001 from home:cyphar:containers:docker_18.09.1
- Update shell completion to use Group: System/Shells.

OBS-URL: https://build.opensuse.org/request/show/673001
OBS-URL: https://build.opensuse.org/package/show/Virtualization:containers/docker?expand=0&rev=285
2019-02-09 13:55:16 +00:00
Jordi Massaguer
98584d8935 Accepting request 672170 from home:mjura:branches:Virtualization:containers
-  Add daemon.json file with rotation logs cofiguration, bsc#1114832

OBS-URL: https://build.opensuse.org/request/show/672170
OBS-URL: https://build.opensuse.org/package/show/Virtualization:containers/docker?expand=0&rev=284
2019-02-07 09:04:01 +00:00
Aleksa Sarai
6119adcb49 - Update to Docker 18.09.1-ce. See upstream changelog in the packaged
/usr/share/doc/packages/docker/CHANGELOG.md. bsc#1124308

OBS-URL: https://build.opensuse.org/package/show/Virtualization:containers/docker?expand=0&rev=283
2019-02-06 09:42:32 +00:00
Aleksa Sarai
928246d947 Accepting request 666021 from home:EGDFree:branches:Virtualization:containers
- Add fish shell completion

OBS-URL: https://build.opensuse.org/request/show/666021
OBS-URL: https://build.opensuse.org/package/show/Virtualization:containers/docker?expand=0&rev=282
2019-01-31 13:39:17 +00:00
Jordi Massaguer
c1766786ba Accepting request 664598 from home:sgrunert
- Disable leap based builds for kubic flavor. bsc#1121412

OBS-URL: https://build.opensuse.org/request/show/664598
OBS-URL: https://build.opensuse.org/package/show/Virtualization:containers/docker?expand=0&rev=280
2019-01-11 11:01:27 +00:00
Aleksa Sarai
1ca932a40c Correct changelog entry for bsc#1118990
OBS-URL: https://build.opensuse.org/package/show/Virtualization:containers/docker?expand=0&rev=279
2018-12-25 17:14:49 +00:00
Aleksa Sarai
03396c1701 Accepting request 660267 from home:cyphar:docker_changelog
Minor changelog update.

OBS-URL: https://build.opensuse.org/request/show/660267
OBS-URL: https://build.opensuse.org/package/show/Virtualization:containers/docker?expand=0&rev=277
2018-12-20 11:23:52 +00:00
Aleksa Sarai
d34a0c90b1 Accepting request 660128 from home:clee:branches:Virtualization:containers
- Update go requirements to >= go1.10.6 to fix
  * bsc#1118897 CVE-2018-16873
    go#29230 cmd/go: remote command execution during "go get -u"
  * bsc#1118898 CVE-2018-16874
    go#29231 cmd/go: directory traversal in "go get" via curly braces in import paths
  * bsc#1118899 CVE-2018-16875
    go#29233 crypto/x509: CPU denial of service

OBS-URL: https://build.opensuse.org/request/show/660128
OBS-URL: https://build.opensuse.org/package/show/Virtualization:containers/docker?expand=0&rev=276
2018-12-20 11:15:30 +00:00
Aleksa Sarai
c63069dadd Accepting request 659068 from home:cyphar:go:remove_goroot_profile
- Handle build breakage due to missing 'export GOPATH' (caused by resolution of
  boo#1119634). I believe Docker is one of the only packages with this problem.

OBS-URL: https://build.opensuse.org/request/show/659068
OBS-URL: https://build.opensuse.org/package/show/Virtualization:containers/docker?expand=0&rev=275
2018-12-18 10:34:21 +00:00
Aleksa Sarai
1d3bce0fc6 Accepting request 653738 from home:cyphar:containers:docker_18.09
- Add backports of https://github.com/docker/docker/pull/37302 and
  https://github.com/docker/cli/pull/1130, which allow for users to explicitly
  specify the NIS domainname of a container. bsc#1001161
  + bsc1001161-0001-oci-include-the-domainname-in-kernel.domainname.patch
  + bsc1001161-0002-cli-add-a-separate-domainname-flag.patch

OBS-URL: https://build.opensuse.org/request/show/653738
OBS-URL: https://build.opensuse.org/package/show/Virtualization:containers/docker?expand=0&rev=273
2018-12-04 04:34:12 +00:00
Aleksa Sarai
51f454aa26 Accepting request 652641 from home:cyphar:containers:docker_18.09
- Update docker.service to match upstream and avoid rlimit problems.
  bsc#1112980

OBS-URL: https://build.opensuse.org/request/show/652641
OBS-URL: https://build.opensuse.org/package/show/Virtualization:containers/docker?expand=0&rev=272
2018-11-29 15:21:51 +00:00
Aleksa Sarai
4bdf0ab402 Accepting request 652637 from home:cyphar:containers:docker_18.09
[ DO NOT FORWARD TO FACTORY! ]
- Upgrade to Docker 18.09.0-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md
- Add revert of an upstream patch to fix docker-* handling.
  + packaging-0001-revert-Remove-docker-prefix-for-containerd-and-runc-.patch
- Rebase patches:
  * bsc1047218-0001-man-obey-SOURCE_DATE_EPOCH-when-generating-man-pages.patch
  * bsc1073877-0001-apparmor-allow-receiving-of-signals-from-docker-kill.patch
  * bsc1073877-0002-apparmor-clobber-docker-default-profile-on-start.patch
  * private-registry-0001-Add-private-registry-mirror-support.patch
  * secrets-0001-daemon-allow-directory-creation-in-run-secrets.patch
  * secrets-0002-SUSE-implement-SUSE-container-secrets.patch
- Remove upstreamed patches:
  - bsc1100727-0001-build-add-buildmode-pie.patch

OBS-URL: https://build.opensuse.org/request/show/652637
OBS-URL: https://build.opensuse.org/package/show/Virtualization:containers/docker?expand=0&rev=271
2018-11-29 15:15:40 +00:00
Aleksa Sarai
0ca6dfbd71 - Update changelogs to mention bsc#1113313.
- Add backport of https://github.com/containerd/containerd/pull/2764, which is
  required for us to build containerd on i586 SLE-12 (where /bin/sh doesn't
  like emoji in shell scripts). bsc#1102522 bsc#1113313

OBS-URL: https://build.opensuse.org/package/show/Virtualization:containers/docker?expand=0&rev=269
2018-11-05 10:38:15 +00:00
Aleksa Sarai
c2334cfa66 Accepting request 640537 from home:vrothberg:branches:Virtualization:containers
- Reduce the disk footprint by recommending git-core instead of
  hard requiring it.
  bsc#1108038

OBS-URL: https://build.opensuse.org/request/show/640537
OBS-URL: https://build.opensuse.org/package/show/Virtualization:containers/docker?expand=0&rev=267
2018-10-08 09:38:41 +00:00
Valentin Rothberg
1754fa7fc7 Accepting request 632983 from home:RBrownSUSE:branches:Virtualization:containers
attempt #2

OBS-URL: https://build.opensuse.org/request/show/632983
OBS-URL: https://build.opensuse.org/package/show/Virtualization:containers/docker?expand=0&rev=265
2018-09-04 08:34:39 +00:00
Valentin Rothberg
bf689df1d5 Accepting request 632970 from home:RBrownSUSE:branches:Virtualization:containers
Please accept and forward to factory quickly, needed for Staging H

OBS-URL: https://build.opensuse.org/request/show/632970
OBS-URL: https://build.opensuse.org/package/show/Virtualization:containers/docker?expand=0&rev=264
2018-09-04 07:47:12 +00:00
Aleksa Sarai
f46070fae3 Accepting request 631254 from home:cyphar:containers:reproducible
- Add patch to make package reproducible, which is a backport of
  https://github.com/docker/cli/pull/1306. boo#1047218
  + bsc1047218-0001-man-obey-SOURCE_DATE_EPOCH-when-generating-man-pages.patch

OBS-URL: https://build.opensuse.org/request/show/631254
OBS-URL: https://build.opensuse.org/package/show/Virtualization:containers/docker?expand=0&rev=263
2018-08-24 08:34:36 +00:00
Aleksa Sarai
9e5d7d7464 - Upgrade to docker-ce v18.06.1-ce. Upstream changelog:
https://github.com/docker/docker-ce/releases/tag/v18.06.1-ce bsc#1102522
- Remove patches that were merged upstream:
  - bsc1102522-0001-18.06-disable-containerd-CRI-plugin.patch

OBS-URL: https://build.opensuse.org/package/show/Virtualization:containers/docker?expand=0&rev=262
2018-08-24 08:10:15 +00:00
Aleksa Sarai
060769c15c Accepting request 630750 from home:cyphar:containers:docker_18.06_security_bugfix
- Add a backport of https://github.com/docker/engine/pull/29 for the 18.06.0-ce
  upgrade. This is a potential security issue (the CRI plugin was enabled by
  default, which listens on a TCP port bound to 0.0.0.0) that will be fixed
  upstream in the 18.06.1-ce upgrade. bsc#1102522
  + bsc1102522-0001-18.06-disable-containerd-CRI-plugin.patch

OBS-URL: https://build.opensuse.org/request/show/630750
OBS-URL: https://build.opensuse.org/package/show/Virtualization:containers/docker?expand=0&rev=261
2018-08-21 11:26:57 +00:00
Aleksa Sarai
b184f95d9f Accepting request 630733 from home:RBrownSUSE:branches:Virtualization:containers
Please stage with incoming cri-o, kubernetes, skelcd-control-kubic and patterns-caasp

OBS-URL: https://build.opensuse.org/request/show/630733
OBS-URL: https://build.opensuse.org/package/show/Virtualization:containers/docker?expand=0&rev=260
2018-08-21 10:12:51 +00:00
Aleksa Sarai
cc1fefc9bf - Merge -kubic packages back into the main Virtualization:containers packages.
This is done using _multibuild to add a "kubic" flavour, which is then used
  to conditionally compile patches and other kubic-specific features.
  bsc#1105000

OBS-URL: https://build.opensuse.org/package/show/Virtualization:containers/docker?expand=0&rev=259
2018-08-20 08:55:46 +00:00
Valentin Rothberg
1ab6c95c8e Docker v18.06 upgrade.
OBS-URL: https://build.opensuse.org/package/show/Virtualization:containers/docker?expand=0&rev=258
2018-08-15 07:09:12 +00:00
Aleksa Sarai
bac0493c26 Accepting request 626441 from home:cyphar:containers:docker_pie
- Build the client binary with -buildmode=pie to fix issues on POWER.
  bsc#1100727
  + bsc1100727-0001-build-add-buildmode-pie.patch

OBS-URL: https://build.opensuse.org/request/show/626441
OBS-URL: https://build.opensuse.org/package/show/Virtualization:containers/docker?expand=0&rev=256
2018-07-31 05:45:06 +00:00
Aleksa Sarai
b7f9caccb8 Accepting request 619741 from home:cyphar:docker_apparmor
- Update the AppArmor patchset again to fix a separate issue where changed
  AppArmor profiles don't actually get applied on Docker daemon reboot.
  bsc#1099277
  * bsc1073877-0001-apparmor-allow-receiving-of-signals-from-docker-kill.patch
  + bsc1073877-0002-apparmor-clobber-docker-default-profile-on-start.patch

OBS-URL: https://build.opensuse.org/request/show/619741
OBS-URL: https://build.opensuse.org/package/show/Virtualization:containers/docker?expand=0&rev=254
2018-06-29 11:09:45 +00:00
Jordi Massaguer
b71d7ce544 Accepting request 616493 from home:dcassany:branches:Virtualization:containers
- Make use of %license macro

OBS-URL: https://build.opensuse.org/request/show/616493
OBS-URL: https://build.opensuse.org/package/show/Virtualization:containers/docker?expand=0&rev=252
2018-06-13 11:40:04 +00:00
Valentin Rothberg
83153bc279 Accepting request 614826 from home:cyphar:containers:apparmor_fixup_bsc1073877
- Update to AppArmor patch so that signal mediation also works for signals
  between in-container processes. bsc#1073877
  * bsc1073877-0001-apparmor-allow-receiving-of-signals-from-docker-kill.patch

OBS-URL: https://build.opensuse.org/request/show/614826
OBS-URL: https://build.opensuse.org/package/show/Virtualization:containers/docker?expand=0&rev=250
2018-06-07 06:25:06 +00:00
Aleksa Sarai
92f6adde7d Accepting request 614224 from home:cyphar:containers:remove_check_section
- Remove 'go test' from %check section, as it has only ever caused us problems
  and hasn't (as far as I remember) ever caught a release-blocking issue. Smoke
  testing has been far more useful. boo#1095817

OBS-URL: https://build.opensuse.org/request/show/614224
OBS-URL: https://build.opensuse.org/package/show/Virtualization:containers/docker?expand=0&rev=249
2018-06-05 11:23:05 +00:00
Aleksa Sarai
4bd579423a Accepting request 612799 from home:cyphar:containers:docker_bsc1065609
- Update secrets patch to not log incorrect warnings when attempting to inject
  non-existent host files. bsc#1065609
  * secrets-0001-daemon-allow-directory-creation-in-run-secrets.patch
  * secrets-0002-SUSE-implement-SUSE-container-secrets.patch

OBS-URL: https://build.opensuse.org/request/show/612799
OBS-URL: https://build.opensuse.org/package/show/Virtualization:containers/docker?expand=0&rev=247
2018-05-30 05:44:31 +00:00
Aleksa Sarai
832a61093a Accepting request 605674 from home:cyphar:containers:fixup
update changelog

OBS-URL: https://build.opensuse.org/request/show/605674
OBS-URL: https://build.opensuse.org/package/show/Virtualization:containers/docker?expand=0&rev=245
2018-05-09 08:43:43 +00:00
Valentin Rothberg
7e7d9a111a Accepting request 598526 from home:cyphar:containers:docker-apparmor
- Fix up the AppArmor 'docker kill' patch to work on older AppArmor versions.
  boo#1089732
  * bsc1073877-0001-apparmor-allow-receiving-of-signals-from-docker-kill.patch

OBS-URL: https://build.opensuse.org/request/show/598526
OBS-URL: https://build.opensuse.org/package/show/Virtualization:containers/docker?expand=0&rev=243
2018-04-19 12:32:33 +00:00
Aleksa Sarai
c9962818ba Accepting request 595152 from home:cyphar:containers:apparmor
- Add patch to handle AppArmor changes that make 'docker kill' stop working.
  bsc#1073877
  + bsc1073877-0001-apparmor-allow-receiving-of-signals-from-docker-kill.patch

OBS-URL: https://build.opensuse.org/request/show/595152
OBS-URL: https://build.opensuse.org/package/show/Virtualization:containers/docker?expand=0&rev=241
2018-04-12 14:45:14 +00:00
Aleksa Sarai
36f6ac97aa Accepting request 594073 from home:cyphar:containers:docker_ppc_fixup
- Fix manpage generation breaking ppc64le builds due to a missing
  -buildemode=pie.

OBS-URL: https://build.opensuse.org/request/show/594073
OBS-URL: https://build.opensuse.org/package/show/Virtualization:containers/docker?expand=0&rev=240
2018-04-10 09:09:40 +00:00
Valentin Rothberg
b0a1746a0a Accepting request 593541 from home:vrothberg:branches:Virtualization:containers
- Compile and install all manpages.
  bsc#1085117

OBS-URL: https://build.opensuse.org/request/show/593541
OBS-URL: https://build.opensuse.org/package/show/Virtualization:containers/docker?expand=0&rev=238
2018-04-05 05:48:40 +00:00
Aleksa Sarai
2c2c83d31e Accepting request 591549 from home:cyphar:containers_docker-init
- Add requirement for catatonit, which provides a docker-init implementation.
  fate#324652

OBS-URL: https://build.opensuse.org/request/show/591549
OBS-URL: https://build.opensuse.org/package/show/Virtualization:containers/docker?expand=0&rev=237
2018-03-28 09:48:12 +00:00
Aleksa Sarai
cdaf1b8273 Accepting request 576039 from home:cyphar:containers:switch_patch_source
- Update patches to be sourced from https://github.com/suse/docker-ce (which
  are based on the upstream docker/docker-ce repo). The reason for this change
  (though it is functionally identical to the old patches) is so that public
  patch maintenance is much simpler.
  * bsc1021227-0001-pkg-devmapper-dynamically-load-dm_task_deferred_remo.patch
  * bsc1055676-0001-daemon-oci-obey-CL_UNPRIVILEGED-for-user-namespaced-.patch
  * secrets-0001-daemon-allow-directory-creation-in-run-secrets.patch
  * secrets-0002-SUSE-implement-SUSE-container-secrets.patch

OBS-URL: https://build.opensuse.org/request/show/576039
OBS-URL: https://build.opensuse.org/package/show/Virtualization:containers/docker?expand=0&rev=235
2018-02-13 11:34:28 +00:00
Jordi Massaguer
6643e811f1 Accepting request 567735 from home:cyphar:containers:docker_obsoletes_image-migrator
- Add Obsoletes: docker-image-migrator, as the tool is no longer needed and
  we've pretty much removed it from everywhere except the containers module.
  bsc#1069758

OBS-URL: https://build.opensuse.org/request/show/567735
OBS-URL: https://build.opensuse.org/package/show/Virtualization:containers/docker?expand=0&rev=233
2018-01-19 15:22:50 +00:00
Aleksa Sarai
450c4fe91a Accepting request 567583 from home:vrothberg:branches:Virtualization:containers
- Remove requirement on bridge-utils, which has been replaced by libnetwork in
  Docker.
  bsc#1072798

OBS-URL: https://build.opensuse.org/request/show/567583
OBS-URL: https://build.opensuse.org/package/show/Virtualization:containers/docker?expand=0&rev=232
2018-01-19 08:07:52 +00:00
Aleksa Sarai
6e5b54a6a2 Accepting request 563287 from home:cyphar:containers_module_update
Update changelogs to mention bsc#1069758 properly.

OBS-URL: https://build.opensuse.org/request/show/563287
OBS-URL: https://build.opensuse.org/package/show/Virtualization:containers/docker?expand=0&rev=230
2018-01-10 12:24:47 +00:00
Aleksa Sarai
9c7edd7eef - Update to Docker v17.09.1_ce. Upstream changelog:
https://github.com/docker/docker-ce/releases/tag/v17.09.1-ce
- Removed patches (merged upstream):
  - bsc1045628-0001-devicemapper-remove-container-rootfs-mountPath-after.patch
  - bsc1066210-0001-vendor-update-to-github.com-vbatts-tar-split-v0.10.2.patch
  - bsc1066801-0001-oci-add-proc-scsi-to-masked-paths.patch
- Update to Docker v17.09.0_ce. Upstream changelog:
  https://github.com/docker/docker-ce/releases/tag/v17.09.0-ce
- Rebased patches:
  * bsc1021227-0001-pkg-devmapper-dynamically-load-dm_task_deferred_remo.patch
  * bsc1045628-0001-devicemapper-remove-container-rootfs-mountPath-after.patch
  * bsc1055676-0001-daemon-oci-obey-CL_UNPRIVILEGED-for-user-namespaced-.patch
  * secrets-0001-daemon-allow-directory-creation-in-run-secrets.patch
  * secrets-0002-SUSE-implement-SUSE-container-secrets.patch
- Removed patches (merged upstream):
  - bsc1064781-0001-Allow-to-override-build-date.patch

OBS-URL: https://build.opensuse.org/package/show/Virtualization:containers/docker?expand=0&rev=228
2017-12-19 03:42:51 +00:00
Aleksa Sarai
6e5904b7ca Accepting request 558082 from home:cyphar:containers:docker_bsc1021227
- Add a patch to dynamically probe whether libdevmapper supports
  dm_task_deferred_remove. This is necessary because we build the containers
  module on a SLE12 base, but later SLE versions have libdevmapper support.
  This should not affect openSUSE, as all openSUSE versions have a new enough
  libdevmapper. Backport of https://github.com/moby/moby/pull/35518.
  bsc#1021227 bsc#1029320 bsc#1058173
  + bsc1021227-0001-pkg-devmapper-dynamically-load-dm_task_deferred_remo.patch

OBS-URL: https://build.opensuse.org/request/show/558082
OBS-URL: https://build.opensuse.org/package/show/Virtualization:containers/docker?expand=0&rev=227
2017-12-18 12:28:20 +00:00
Aleksa Sarai
a953cf90b5 Accepting request 548172 from home:cyphar:containers:docker_test_fixup
- Fix up the ordering of tests in docker.spec. This is to keep things easier to
  backport into the SLE package.

OBS-URL: https://build.opensuse.org/request/show/548172
OBS-URL: https://build.opensuse.org/package/show/Virtualization:containers/docker?expand=0&rev=225
2017-12-04 16:40:53 +00:00
Jordi Massaguer
8fc843bebc Accepting request 546676 from home:cyphar:containers:docker_bsc1057743
- Include secrets fix to handle "old" containers that have orphaned secret
  data. It's not clear why Docker caches these secrets, but fix the problem by
  trashing the references manually. bsc#1057743
  * secrets-0002-SUSE-implement-SUSE-container-secrets.patch

OBS-URL: https://build.opensuse.org/request/show/546676
OBS-URL: https://build.opensuse.org/package/show/Virtualization:containers/docker?expand=0&rev=223
2017-11-30 11:49:12 +00:00
Aleksa Sarai
08b07fd7b4 Accepting request 545273 from home:cyphar:containers:docker_fixup
Fixup according to comments in https://build.opensuse.org/request/show/545160.

OBS-URL: https://build.opensuse.org/request/show/545273
OBS-URL: https://build.opensuse.org/package/show/Virtualization:containers/docker?expand=0&rev=221
2017-11-24 16:47:10 +00:00
Aleksa Sarai
c7eaf3a256 Accepting request 545157 from home:cyphar:containers:docker_bsc
Add link to https://bugzilla.suse.com/show_bug.cgi?id=1069758 in the changelog.

OBS-URL: https://build.opensuse.org/request/show/545157
OBS-URL: https://build.opensuse.org/package/show/Virtualization:containers/docker?expand=0&rev=220
2017-11-24 12:32:16 +00:00
Aleksa Sarai
a5b4f28061 Accepting request 545109 from home:cyphar:containers:docker_drop_migrator
Rebase. I've also dropped the docker-image-migrator removal (it's depending on
an openSUSE:Factory change).

- Remove migration code for the v1.9.x -> v1.10.x migration. This has been
  around for a while, and we no longer support migrating from such an old
  version "nicely". Docker still has migration code that will run on
  first-boot, we are merely removing all of the "nice" warnings which tell
  users how to avoid issues during an upgrade that ocurred more than a year
  ago.

OBS-URL: https://build.opensuse.org/request/show/545109
OBS-URL: https://build.opensuse.org/package/show/Virtualization:containers/docker?expand=0&rev=219
2017-11-24 10:32:23 +00:00
Aleksa Sarai
eb28b07ea5 Accepting request 544765 from home:RBrownSUSE:branches:Virtualization:containers
Replace references to /var/adm/fillup-templates with new %_fillupdir macro (boo#1069468)

OBS-URL: https://build.opensuse.org/request/show/544765
OBS-URL: https://build.opensuse.org/package/show/Virtualization:containers/docker?expand=0&rev=218
2017-11-24 10:06:46 +00:00
Aleksa Sarai
6a6c6aa170 Accepting request 540191 from home:cyphar:containers:docker_forwardport
- Fix bsc#1059011
  The systemd service helper script used a timeout of 60 seconds to
  start the daemon, which is insufficient in cases where the daemon
  takes longer to start. Instead, set the service type from 'simple' to
  'notify' and remove the now superfluous helper script.
- fix bsc#1057743: Add a Requires: fix_bsc_1057743 which is provided by the
  newer version of docker-libnetwork. This is necessary because of a versioning
  bug we found in bsc#1057743.

OBS-URL: https://build.opensuse.org/request/show/540191
OBS-URL: https://build.opensuse.org/package/show/Virtualization:containers/docker?expand=0&rev=215
2017-11-09 12:24:37 +00:00
Aleksa Sarai
7ee12cd06b osc copypac from project:Virtualization:containers package:docker revision:212
OBS-URL: https://build.opensuse.org/package/show/Virtualization:containers/docker?expand=0&rev=214
2017-11-09 11:09:35 +00:00
Aleksa Sarai
9a0bb40a46 - Fix bsc#1059011
The systemd service helper script used a timeout of 60 seconds to
  start the daemon, which is insufficient in cases where the daemon
  takes longer to start. Instead, set the service type from 'simple' to
  'notify' and remove the now superfluous helper script.
- fix bsc#1057743: Add a Requires: fix_bsc_1057743 which is provided by the
  newer version of docker-libnetwork. This is necessary because of a versioning
  bug we found in bsc#1057743.

OBS-URL: https://build.opensuse.org/package/show/Virtualization:containers/docker?expand=0&rev=213
2017-11-09 11:08:27 +00:00
Aleksa Sarai
ca68434d79 Accepting request 539622 from home:cyphar:containers:docker_CVE-2017-14992
- Add a backport of https://github.com/moby/moby/pull/35424, which fixes a
  security issue where a maliciously crafted image could be used to crash a
  Docker daemon. bsc#1066210 CVE-2017-14992
  + bsc1066210-0001-vendor-update-to-github.com-vbatts-tar-split-v0.10.2.patch

OBS-URL: https://build.opensuse.org/request/show/539622
OBS-URL: https://build.opensuse.org/package/show/Virtualization:containers/docker?expand=0&rev=212
2017-11-07 17:23:31 +00:00
Aleksa Sarai
9102c78185 Accepting request 539455 from home:cyphar:containers:docker_CVE-2017-16539
- Add a backport of https://github.com/moby/moby/pull/35399, which fixes a
  security issue where a Docker container (with a disabled AppArmor profile)
  could write to /proc/scsi/... and subsequently DoS the host. bsc#1066801
  CVE-2017-16539
  + bsc1066801-0001-oci-add-proc-scsi-to-masked-paths.patch

OBS-URL: https://build.opensuse.org/request/show/539455
OBS-URL: https://build.opensuse.org/package/show/Virtualization:containers/docker?expand=0&rev=210
2017-11-07 09:33:12 +00:00
Aleksa Sarai
91fa19e925 Accepting request 536268 from home:cyphar:containers:boo1064781_docker_version
- Correctly set `docker version` information, including the version, git
  commit, and SOURCE_DATE_EPOCH (requires a backport). This should
  *effectively* make Docker builds reproducible, with minimal cost. boo#1064781
  + bsc1064781-0001-Allow-to-override-build-date.patch

OBS-URL: https://build.opensuse.org/request/show/536268
OBS-URL: https://build.opensuse.org/package/show/Virtualization:containers/docker?expand=0&rev=208
2017-10-24 10:02:17 +00:00
Aleksa Sarai
2b837c69aa Accepting request 535073 from home:cyphar:containers:docker-ce_v17.07
Re-enable tests and correct changelog (again).

OBS-URL: https://build.opensuse.org/request/show/535073
OBS-URL: https://build.opensuse.org/package/show/Virtualization:containers/docker?expand=0&rev=206
2017-10-19 02:18:11 +00:00
Aleksa Sarai
5bc18f1a1b Accepting request 534446 from home:vrothberg:branches:Virtualization:containers
The docker-ce 17.07 update. Depends on:
- https://build.opensuse.org/request/show/534442
- https://build.opensuse.org/request/show/534444
- https://build.opensuse.org/request/show/534445

OBS-URL: https://build.opensuse.org/request/show/534446
OBS-URL: https://build.opensuse.org/package/show/Virtualization:containers/docker?expand=0&rev=204
2017-10-18 04:27:06 +00:00
Jordi Massaguer
e69ff9a2ac Accepting request 526390 from home:jordimassaguerpla:branch:V:c:fix_update_message_docker
- fix /var/adm/update-message/docker file name to be
  /var/adm/update-message/docker-%{version}-%{release}

OBS-URL: https://build.opensuse.org/request/show/526390
OBS-URL: https://build.opensuse.org/package/show/Virtualization:containers/docker?expand=0&rev=202
2017-09-18 10:05:54 +00:00
Valentin Rothberg
00112aab82 Accepting request 521690 from home:cyphar:containers:dm_bsc1045628
- devicemapper: add patch to make the dm storage driver remove a container's
  rootfs mountpoint before attempting to do libdm operations on it. This helps
  avoid complications when live mounts will leak into containers. Backport of
  https://github.com/moby/moby/pull/34573. bsc#1045628
  + bsc1045628-0001-devicemapper-remove-container-rootfs-mountPath-after.patch

OBS-URL: https://build.opensuse.org/request/show/521690
OBS-URL: https://build.opensuse.org/package/show/Virtualization:containers/docker?expand=0&rev=200
2017-09-07 07:53:28 +00:00
Jordi Massaguer
64b99bd0ee Accepting request 519818 from home:cyphar:containers:bsc1055676_userns_mount
- Fix a regression in our SUSE secrets patches, which caused the copied files
  to not carry the correct {uid,gid} mapping when using user namespaces. This
  would not cause any bugs (SUSEConnect does the right thing anyway) but it's
  possible some programs would not treat the files correctly. This is
  tangentially related to bsc#1055676.
  * secrets-0001-daemon-allow-directory-creation-in-run-secrets.patch
  * secrets-0002-SUSE-implement-SUSE-container-secrets.patch

OBS-URL: https://build.opensuse.org/request/show/519818
OBS-URL: https://build.opensuse.org/package/show/Virtualization:containers/docker?expand=0&rev=199
2017-09-04 13:03:50 +00:00
Aleksa Sarai
ca3f73206d - Use -buildmode=pie for tests and binary build. bsc#1048046 bsc#1051429
This also includes some various improvements to the packaging of runc,
containerd and docker-runc.

OBS-URL: https://build.opensuse.org/package/show/Virtualization:containers/docker?expand=0&rev=197
2017-08-11 12:09:59 +00:00
Aleksa Sarai
18b17a0bdb Accepting request 512333 from home:jordimassaguerpla:branch:Vc:fix_seccomp_and_dm
- enable deferred removal for sle12sp2 and newer (and openSUSE
  equivalent. fix bsc#1021227

- enable libseccomp on sle12sp2 and newer, 42.2 and newer
  fix bsc#1028638 - docker: conditional filtering not supported on
  libseccomp for sle12

OBS-URL: https://build.opensuse.org/request/show/512333
OBS-URL: https://build.opensuse.org/package/show/Virtualization:containers/docker?expand=0&rev=195
2017-07-27 16:11:06 +00:00
Jordi Massaguer
eee720d9e6 Accepting request 509416 from home:jordimassaguerpla:branch:Vc:docker:bsc_1046024
- add SuSEfirewall2.service to the After clause in docker.service
  in order to fix bsc#1046024

OBS-URL: https://build.opensuse.org/request/show/509416
OBS-URL: https://build.opensuse.org/package/show/Virtualization:containers/docker?expand=0&rev=194
2017-07-11 11:32:02 +00:00
Thomas Hipp
5283b611b2 Accepting request 508834 from home:thipp:branches:Virtualization:containers
- fix path to docker-runc in systemd service file 
- change dependency to docker-runc

OBS-URL: https://build.opensuse.org/request/show/508834
OBS-URL: https://build.opensuse.org/package/show/Virtualization:containers/docker?expand=0&rev=193
2017-07-10 11:39:04 +00:00
Aleksa Sarai
6d17ff854b Accepting request 504626 from home:jordimassaguerpla:branch:V:c:fix_bsc_1029630:docker
- Fix bsc#1029630: docker does not wait for lvm on system startup
I added "lvm2-monitor.service" as an "After dependency" of the docker systemd
unit.

OBS-URL: https://build.opensuse.org/request/show/504626
OBS-URL: https://build.opensuse.org/package/show/Virtualization:containers/docker?expand=0&rev=191
2017-06-19 11:50:14 +00:00
Aleksa Sarai
d3edfac459 Accepting request 499665 from home:jordimassaguerpla:branch:V:c:bsc_722377
- Fix bsc#1032287: missing docker systemd configuration

OBS-URL: https://build.opensuse.org/request/show/499665
OBS-URL: https://build.opensuse.org/package/show/Virtualization:containers/docker?expand=0&rev=189
2017-05-30 11:36:16 +00:00
Jordi Massaguer
9fce3cd938 Accepting request 498958 from home:cyphar:containers
- Update SUSE secrets patch to correctly handle restarting of containers.
  + secrets-0001-daemon-allow-directory-creation-in-run-secrets.patch
  + secrets-0002-SUSE-implement-SUSE-container-secrets.patch

OBS-URL: https://build.opensuse.org/request/show/498958
OBS-URL: https://build.opensuse.org/package/show/Virtualization:containers/docker?expand=0&rev=188
2017-05-29 12:37:19 +00:00
Jordi Massaguer
a61156fa80 Accepting request 496617 from home:scarabeus_iv:branches:Virtualization:containers
- Fix bsc#1038476 warning about non-executable docker
  * Simply verify we have binary prior using it, might happen if
    someone had docker installed and then did remove it and install
    from scratch again

OBS-URL: https://build.opensuse.org/request/show/496617
OBS-URL: https://build.opensuse.org/package/show/Virtualization:containers/docker?expand=0&rev=187
2017-05-25 08:24:46 +00:00
Miquel Sabate Sola
ba2f6637f8 Accepting request 495639 from home:cyphar:containers
- Fix bsc#1037607 which was causing read-only issues on Kubic, this is a
  backport of https://github.com/moby/moby/pull/33250.
  + bsc1037607-0001-apparmor-make-pkg-aaparser-work-on-read-only-root.patch

OBS-URL: https://build.opensuse.org/request/show/495639
OBS-URL: https://build.opensuse.org/package/show/Virtualization:containers/docker?expand=0&rev=185
2017-05-17 15:18:13 +00:00
Miquel Sabate Sola
e7663235ed Accepting request 494283 from home:cyphar:containers
- Add a partial fix for boo#1038493.
- Fixed bsc#1037436 where execids were being leaked due to bad error handling.
  This is a backport of https://github.com/docker/cli/pull/52.
   + bsc1037436-0001-client-check-tty-before-creating-exec-job.patch

OBS-URL: https://build.opensuse.org/request/show/494283
OBS-URL: https://build.opensuse.org/package/show/Virtualization:containers/docker?expand=0&rev=184
2017-05-10 14:04:27 +00:00
Jordi Massaguer
1e1a89ae18 OBS-URL: https://build.opensuse.org/package/show/Virtualization:containers/docker?expand=0&rev=183 2017-05-04 19:02:51 +00:00
Jordi Massaguer
5cc47a1efe Accepting request 492292 from home:flavio_castelli:branches:Virtualization:containers
- Update golang build requirements to use golang(API) symbol: this is
  needed to solve a conflict between multiple versions of Go being available

OBS-URL: https://build.opensuse.org/request/show/492292
OBS-URL: https://build.opensuse.org/package/show/Virtualization:containers/docker?expand=0&rev=182
2017-05-02 15:36:24 +00:00
Jordi Massaguer
da53caf134 OBS-URL: https://build.opensuse.org/package/show/Virtualization:containers/docker?expand=0&rev=181 2017-04-20 10:54:05 +00:00
Jordi Massaguer
fed8ecda73 OBS-URL: https://build.opensuse.org/package/show/Virtualization:containers/docker?expand=0&rev=180 2017-04-20 10:25:37 +00:00
Jordi Massaguer
5fbd718e69 Accepting request 487501 from home:cyphar:containers
- Enable Delegate=yes, since systemd will safely ignore lvalues it doesn't
  understand.

OBS-URL: https://build.opensuse.org/request/show/487501
OBS-URL: https://build.opensuse.org/package/show/Virtualization:containers/docker?expand=0&rev=178
2017-04-12 08:37:11 +00:00
Jordi Massaguer
fa6eaf989a Accepting request 487315 from home:cyphar:containers
- Update SUSE secrets patch to handle boo#1030702.
  * secrets-0001-daemon-allow-directory-creation-in-run-secrets.patch
  * secrets-0002-SUSE-implement-SUSE-container-secrets.patch

OBS-URL: https://build.opensuse.org/request/show/487315
OBS-URL: https://build.opensuse.org/package/show/Virtualization:containers/docker?expand=0&rev=177
2017-04-11 12:13:39 +00:00
Jordi Massaguer
c9c04a0b92 Accepting request 487252 from home:m_meister:branches:Virtualization:containers
https://bugzilla.suse.com/show_bug.cgi?id=1032644

OBS-URL: https://build.opensuse.org/request/show/487252
OBS-URL: https://build.opensuse.org/package/show/Virtualization:containers/docker?expand=0&rev=176
2017-04-11 09:17:58 +00:00
Aleksa Sarai
5038fcde2b Accepting request 484060 from home:jordimassaguerpla:branch:V:c:docker:fix_seccomp
- Disable libseccomp for leap 42.1, sle12sp1 and sle12, because
  docker needs a higher version. Otherwise, we get the error
    "conditional filtering requires libseccomp version >= 2.2.1
  (bsc#1028639 and bsc#1028638)

OBS-URL: https://build.opensuse.org/request/show/484060
OBS-URL: https://build.opensuse.org/package/show/Virtualization:containers/docker?expand=0&rev=175
2017-03-31 11:32:13 +00:00
Jordi Massaguer
757ddedc74 Accepting request 480819 from home:cyphar:containers
- Add a backport of fix to AppArmor lazy loading docker-exec case.
  https://github.com/docker/docker/pull/31773
  + pr31773-daemon-also-ensureDefaultApparmorProfile-in-exec-pat.patch

OBS-URL: https://build.opensuse.org/request/show/480819
OBS-URL: https://build.opensuse.org/package/show/Virtualization:containers/docker?expand=0&rev=173
2017-03-17 13:18:51 +00:00
Jordi Massaguer
9c1f006520 Accepting request 477670 from home:cyphar:containers
This massively cleans up the docker mount secrets patch we have to use the new
Docker Swarm framework for /run/secrets (which doesn't require swarm mode with
these patches).

OBS-URL: https://build.opensuse.org/request/show/477670
OBS-URL: https://build.opensuse.org/package/show/Virtualization:containers/docker?expand=0&rev=172
2017-03-08 09:03:15 +00:00
Aleksa Sarai
f0d9c665f7 Accepting request 477346 from home:jordimassaguerpla:branch:V:c:docker:small_fixes_1_13_0
- fix docker-mount-secrets.patch to apply to docker-1.13.0 

- Remove old plugins.json to prevent docker-1.13 to fail to start 

- Fix bsc#1026827: systemd TasksMax default throttles docker  

- Fix post section by adding shadow as a package requirement
  Otherwise the groupadd instruction fails

OBS-URL: https://build.opensuse.org/request/show/477346
OBS-URL: https://build.opensuse.org/package/show/Virtualization:containers/docker?expand=0&rev=171
2017-03-07 10:40:30 +00:00
Jordi Massaguer
bfed92d82d Accepting request 476967 from home:cyphar:containers
- Add patch to fix TestDaemonCommand failure in %check. This is an upstream
  bug, and has an upstream PR to fix it https://github.com/docker/docker/pull/31549.
  + pr31549-cmd-docker-fix-TestDaemonCommand.patch

OBS-URL: https://build.opensuse.org/request/show/476967
OBS-URL: https://build.opensuse.org/package/show/Virtualization:containers/docker?expand=0&rev=170
2017-03-06 09:15:37 +00:00
Aleksa Sarai
d94576af79 Accepting request 461899 from home:jordimassaguerpla:branch:Vc:update_docker_1_13
- update docker to 1.13.0
  see details in https://github.com/docker/docker/releases/tag/v1.13.0 
- use the same buildflags for building docker and for building the
  tests.
- enable pkcs11:
  37fa75b344

OBS-URL: https://build.opensuse.org/request/show/461899
OBS-URL: https://build.opensuse.org/package/show/Virtualization:containers/docker?expand=0&rev=169
2017-03-05 03:07:44 +00:00
Jordi Massaguer
e41683b0fb Accepting request 453067 from openSUSE:Factory:zSystems
please remove that artificial excludearch s390x for opensuse

OBS-URL: https://build.opensuse.org/request/show/453067
OBS-URL: https://build.opensuse.org/package/show/Virtualization:containers/docker?expand=0&rev=167
2017-01-30 09:45:07 +00:00