Commit Graph

489 Commits

Author SHA256 Message Date
Ana Guerrero
93f33fbbcb Accepting request 1231895 from Virtualization:containers
OBS-URL: https://build.opensuse.org/request/show/1231895
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/docker?expand=0&rev=158
2024-12-18 19:09:12 +00:00
Aleksa Sarai
22827cbc1b - Update to Docker 27.4.1-ce. See upstream changelog online at
<https://docs.docker.com/engine/release-notes/27/#2741>
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0005-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
  * cli-0001-docs-include-required-tools-in-source-tree.patch

OBS-URL: https://build.opensuse.org/package/show/Virtualization:containers/docker?expand=0&rev=425
2024-12-18 13:03:50 +00:00
Aleksa Sarai
d69d01a8db Add bsc#1234089 CVE-2024-29018 reference.
OBS-URL: https://build.opensuse.org/package/show/Virtualization:containers/docker?expand=0&rev=424
2024-12-18 06:26:28 +00:00
Aleksa Sarai
ae8b5fe738 - Update to docker-buildx 0.19.3. See upstream changelog online at
<https://github.com/docker/buildx/releases/tag/v0.19.3>

OBS-URL: https://build.opensuse.org/package/show/Virtualization:containers/docker?expand=0&rev=423
2024-12-17 13:26:18 +00:00
Aleksa Sarai
f9cd741afc - Update to Docker 27.4.0-ce. See upstream changelog online at
<https://docs.docker.com/engine/release-notes/27/#274>
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0005-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
  * cli-0001-docs-include-required-tools-in-source-tree.patch
- Remove upstreamed patches:
  - 0006-bsc1221916-update-to-patched-buildkit-version-to-fix.patch
  - 0007-bsc1214855-volume-use-AtomicWriteFile-to-save-volume.patch

OBS-URL: https://build.opensuse.org/package/show/Virtualization:containers/docker?expand=0&rev=422
2024-12-16 07:04:37 +00:00
Ana Guerrero
598ab51442 Accepting request 1230151 from Virtualization:containers
OBS-URL: https://build.opensuse.org/request/show/1230151
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/docker?expand=0&rev=157
2024-12-13 21:32:49 +00:00
Aleksa Sarai
bdc26590fb Accepting request 1230148 from home:cyphar:docker
Remove DOCKER_SUSE_SECRETS_ENABLE changelog entry.

OBS-URL: https://build.opensuse.org/request/show/1230148
OBS-URL: https://build.opensuse.org/package/show/Virtualization:containers/docker?expand=0&rev=421
2024-12-11 15:36:12 +00:00
Aleksa Sarai
9a4f7f6039 Accepting request 1230066 from home:cyphar:docker
- Update docker-buildx to v0.19.2. See upstream changelog online at
  <https://github.com/docker/buildx/releases/tag/v0.19.2>.
  Some notable changelogs from the last update:
    * <https://github.com/docker/buildx/releases/tag/v0.19.0>
	* <https://github.com/docker/buildx/releases/tag/v0.18.0>
- Update to Go 1.22.

- Add a new toggle file /etc/docker/suse-secrets-enable which allows users to
  disable the SUSEConnect integration with Docker (which creates special mounts
  in /run/secrets to allow container-suseconnect to authenticate containers
  with registries on registered hosts). bsc#1231348 bsc#1232999
  In order to disable these mounts, just do
    echo 0 > /etc/docker/suse-secrets-enable
  and restart Docker. In order to re-enable them, just do
    echo 1 > /etc/docker/suse-secrets-enable
  and restart Docker. Docker will output information on startup to tell you
  whether the SUSE secrets feature is enabled or not.
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch

- Add docker-integration-tests-devel subpackage for building and running the
  upstream Docker integration tests on machines to test that Docker works
  properly. Users should not install this package.
- docker-rpmlintrc updated to include allow-list for all of the integration
  tests package, since it contains a bunch of stuff that wouldn't normally be
  allowed.

OBS-URL: https://build.opensuse.org/request/show/1230066
OBS-URL: https://build.opensuse.org/package/show/Virtualization:containers/docker?expand=0&rev=420
2024-12-11 10:51:14 +00:00
Ana Guerrero
2ddb1de5c3 Accepting request 1228305 from Virtualization:containers
Automatic submission by obs-autosubmit

OBS-URL: https://build.opensuse.org/request/show/1228305
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/docker?expand=0&rev=156
2024-12-05 16:05:19 +00:00
Aleksa Sarai
a78dff7569 - Disable docker-buildx builds for SLES. It turns out that build containers
with docker-buildx don't currently get the SUSE secrets mounts applied,
  meaning that container-suseconnect doesn't work when building images.
  bsc#1233819

OBS-URL: https://build.opensuse.org/package/show/Virtualization:containers/docker?expand=0&rev=419
2024-11-27 12:52:26 +00:00
Ana Guerrero
09f45a6980 Accepting request 1224334 from Virtualization:containers
OBS-URL: https://build.opensuse.org/request/show/1224334
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/docker?expand=0&rev=155
2024-11-15 14:38:04 +00:00
Aleksa Sarai
fb27775c7c Add bsc#1232999 reference.
OBS-URL: https://build.opensuse.org/package/show/Virtualization:containers/docker?expand=0&rev=418
2024-11-15 01:07:11 +00:00
Aleksa Sarai
e3eecc4a34 Format specfile.
OBS-URL: https://build.opensuse.org/package/show/Virtualization:containers/docker?expand=0&rev=417
2024-11-15 00:48:16 +00:00
Aleksa Sarai
6a719b3954 - Remove DOCKER_NETWORK_OPTS from docker.service. This was removed from
sysconfig a long time ago, and apparently this causes issues with systemd in
  some cases.

OBS-URL: https://build.opensuse.org/package/show/Virtualization:containers/docker?expand=0&rev=416
2024-11-15 00:13:38 +00:00
Dominique Leuenberger
2b22e66486 Accepting request 1219984 from Virtualization:containers
Revert https://build.opensuse.org/requests/1219449. This code was not meant to
be committed to Virtualization:containers, it was committed to the devel
project by accident.

OBS-URL: https://build.opensuse.org/request/show/1219984
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/docker?expand=0&rev=154
2024-11-01 20:47:08 +00:00
Aleksa Sarai
91c73e108b osc copypac from project:Virtualization:containers package:docker revision:413, using keep-link
OBS-URL: https://build.opensuse.org/package/show/Virtualization:containers/docker?expand=0&rev=415
2024-11-01 00:04:14 +00:00
Dominique Leuenberger
c30a8d1a08 Accepting request 1219449 from Virtualization:containers
Automatic submission by obs-autosubmit

OBS-URL: https://build.opensuse.org/request/show/1219449
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/docker?expand=0&rev=153
2024-10-31 15:09:11 +00:00
6246803744 - fix build for SLE12+
OBS-URL: https://build.opensuse.org/package/show/Virtualization:containers/docker?expand=0&rev=414
2024-10-22 13:49:02 +00:00
Ana Guerrero
bd70f4dc19 Accepting request 1208742 from Virtualization:containers
OBS-URL: https://build.opensuse.org/request/show/1208742
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/docker?expand=0&rev=152
2024-10-20 08:13:04 +00:00
Aleksa Sarai
245fad9603 - Further merge docker and docker-stable specfiles to minimise the differences.
The main thing is that we now include both halves of the
  Conflicts/Provides/Obsoletes dance in both specfiles.

OBS-URL: https://build.opensuse.org/package/show/Virtualization:containers/docker?expand=0&rev=413
2024-10-18 00:34:51 +00:00
Ana Guerrero
c4b3c605db Accepting request 1208252 from Virtualization:containers
- Import docker-buildx v0.17.1 as a subpackage. Previously this was a separate
  package, but with docker-stable it will be necessary to maintain the packages
  together and it makes more sense to have them live in the same OBS package.
  bsc#1230333
- Make some minor name macro updates to help with the docker-stable package
  fork.
- Allow users to disable SUSE secrets support by setting
  DOCKER_SUSE_SECRETS_ENABLE=0 in /etc/sysconfig/docker. bsc#1231348

OBS-URL: https://build.opensuse.org/request/show/1208252
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/docker?expand=0&rev=151
2024-10-16 21:36:50 +00:00
Aleksa Sarai
590d71b04d - Update to docker-buildx v0.17.1 to match standalone docker-buildx package we
are replacing. See upstream changelog online at
  <https://github.com/docker/buildx/releases/tag/v0.17.1>

OBS-URL: https://build.opensuse.org/package/show/Virtualization:containers/docker?expand=0&rev=412
2024-10-16 05:42:35 +00:00
Aleksa Sarai
81aaf8950a - Allow users to disable SUSE secrets support by setting
DOCKER_SUSE_SECRETS_ENABLE=0 in /etc/sysconfig/docker. bsc#1231348
- Mark docker-buildx as required since classic "docker build" has been
  deprecated since Docker 23.0. bsc#1230331
- Import docker-buildx v0.16.2 as a subpackage. Previously this was a separate
  package, but with docker-stable it will be necessary to maintain the packages
  together and it makes more sense to have them live in the same OBS package.
  bsc#1230333
- Make some minor name macro updates to help with the docker-stable package
  fork.

OBS-URL: https://build.opensuse.org/package/show/Virtualization:containers/docker?expand=0&rev=411
2024-10-15 05:59:40 +00:00
Ana Guerrero
da5612206c Accepting request 1201947 from Virtualization:containers
OBS-URL: https://build.opensuse.org/request/show/1201947
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/docker?expand=0&rev=150
2024-09-30 13:34:54 +00:00
Ana Guerrero
84b4bc3b21 fix
OBS-URL: https://build.opensuse.org/package/show/Virtualization:containers/docker?expand=0&rev=410
2024-09-19 07:05:47 +00:00
d6005dc22f - Add %{_sysconfdir}/audit/rules.d to filelist
OBS-URL: https://build.opensuse.org/package/show/Virtualization:containers/docker?expand=0&rev=409
2024-09-18 15:50:40 +00:00
Ana Guerrero
069b069692 Accepting request 1199307 from Virtualization:containers
OBS-URL: https://build.opensuse.org/request/show/1199307
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/docker?expand=0&rev=149
2024-09-10 19:13:23 +00:00
Aleksa Sarai
4e5c898b67 Add bsc#1230294 reference.
OBS-URL: https://build.opensuse.org/package/show/Virtualization:containers/docker?expand=0&rev=408
2024-09-07 04:01:38 +00:00
Ana Guerrero
903c5fa2d7 Accepting request 1199007 from Virtualization:containers
OBS-URL: https://build.opensuse.org/request/show/1199007
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/docker?expand=0&rev=148
2024-09-06 15:18:09 +00:00
Aleksa Sarai
bab2de8fff Add CVE references.
OBS-URL: https://build.opensuse.org/package/show/Virtualization:containers/docker?expand=0&rev=407
2024-09-05 14:28:46 +00:00
Dominique Leuenberger
3480afa22e Accepting request 1190568 from Virtualization:containers
OBS-URL: https://build.opensuse.org/request/show/1190568
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/docker?expand=0&rev=147
2024-08-01 20:03:42 +00:00
Aleksa Sarai
2b14743f6e Accepting request 1190567 from home:cyphar:docker
- Update to Docker 26.1.5-ce. See upstream changelog online at
  <https://docs.docker.com/engine/release-notes/26.1/#2615>
- This update includes a fix for CVE-2024-41110. bsc#1228324
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0005-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
  * 0006-bsc1221916-update-to-patched-buildkit-version-to-fix.patch
  * 0007-bsc1214855-volume-use-AtomicWriteFile-to-save-volume.patch
  * cli-0001-docs-include-required-tools-in-source-tree.patch

OBS-URL: https://build.opensuse.org/request/show/1190567
OBS-URL: https://build.opensuse.org/package/show/Virtualization:containers/docker?expand=0&rev=406
2024-07-31 05:49:49 +00:00
Ana Guerrero
5a65005d4a Accepting request 1182989 from Virtualization:containers
OBS-URL: https://build.opensuse.org/request/show/1182989
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/docker?expand=0&rev=146
2024-06-24 18:50:54 +00:00
Aleksa Sarai
c4e850f70c Accepting request 1182985 from home:cyphar:docker
- Fix BuildKit's symlink resolution logic to correctly handle non-lexical
  symlinks. Backport of <https://github.com/moby/buildkit/pull/4896> and
  <https://github.com/moby/buildkit/pull/5060>. bsc#1221916
 + 0006-bsc1221916-update-to-patched-buildkit-version-to-fix.patch
- Write volume options atomically so sudden system crashes won't result in
  future Docker starts failing due to empty files. Backport of
  <https://github.com/moby/moby/pull/48034>. bsc#1214855
 + 0007-bsc1214855-volume-use-AtomicWriteFile-to-save-volume.patch
- Update to Docker 26.1.4-ce. See upstream changelog online at
  <https://docs.docker.com/engine/release-notes/26.1/#2614>

OBS-URL: https://build.opensuse.org/request/show/1182985
OBS-URL: https://build.opensuse.org/package/show/Virtualization:containers/docker?expand=0&rev=405
2024-06-24 09:33:37 +00:00
Ana Guerrero
78fb6443aa Accepting request 1170269 from Virtualization:containers
OBS-URL: https://build.opensuse.org/request/show/1170269
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/docker?expand=0&rev=145
2024-04-26 21:26:43 +00:00
Aleksa Sarai
06460be95f Accepting request 1170268 from home:cyphar:docker
Sync docker.changes with SLE.

OBS-URL: https://build.opensuse.org/request/show/1170268
OBS-URL: https://build.opensuse.org/package/show/Virtualization:containers/docker?expand=0&rev=404
2024-04-26 09:49:08 +00:00
Aleksa Sarai
b3cb6fc020 Accepting request 1170079 from home:cyphar:docker
- Update to Docker 26.1.0-ce. See upstream changelog online at
  <https://docs.docker.com/engine/release-notes/26.1/#2610>
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0005-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
  * cli-0001-docs-include-required-tools-in-source-tree.patch

OBS-URL: https://build.opensuse.org/request/show/1170079
OBS-URL: https://build.opensuse.org/package/show/Virtualization:containers/docker?expand=0&rev=403
2024-04-24 21:20:41 +00:00
Ana Guerrero
f84318c1f3 Accepting request 1151209 from Virtualization:containers
OBS-URL: https://build.opensuse.org/request/show/1151209
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/docker?expand=0&rev=144
2024-02-27 21:44:10 +00:00
6245febf22 Accepting request 1149534 from home:kukuk:no-utmp
- Allow to disable apparmor support (ALP supports only SELinux)

OBS-URL: https://build.opensuse.org/request/show/1149534
OBS-URL: https://build.opensuse.org/package/show/Virtualization:containers/docker?expand=0&rev=402
2024-02-26 11:16:23 +00:00
Ana Guerrero
af5f657805 Accepting request 1147713 from Virtualization:containers
OBS-URL: https://build.opensuse.org/request/show/1147713
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/docker?expand=0&rev=143
2024-02-21 16:52:04 +00:00
febbaafee6 Accepting request 1147637 from home:danishprakash:branches:Virtualization:containers
Update to Docker 25.0.3-ce

OBS-URL: https://build.opensuse.org/request/show/1147637
OBS-URL: https://build.opensuse.org/package/show/Virtualization:containers/docker?expand=0&rev=401
2024-02-20 08:51:39 +00:00
Ana Guerrero
6b492dc520 Accepting request 1146862 from Virtualization:containers
OBS-URL: https://build.opensuse.org/request/show/1146862
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/docker?expand=0&rev=142
2024-02-16 20:41:33 +00:00
4406dfe326 Accepting request 1146719 from home:dancermak:branches:Virtualization:containers
Vendor latest buildkit v0.11 including CVE patches

OBS-URL: https://build.opensuse.org/request/show/1146719
OBS-URL: https://build.opensuse.org/package/show/Virtualization:containers/docker?expand=0&rev=400
2024-02-15 14:06:27 +00:00
Ana Guerrero
347a50b30a Accepting request 1129616 from Virtualization:containers
OBS-URL: https://build.opensuse.org/request/show/1129616
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/docker?expand=0&rev=141
2023-11-28 21:18:26 +00:00
Aleksa Sarai
e62df9de4c Accepting request 1129615 from home:cyphar:docker
Add bsc#1217513 reference.

OBS-URL: https://build.opensuse.org/request/show/1129615
OBS-URL: https://build.opensuse.org/package/show/Virtualization:containers/docker?expand=0&rev=399
2023-11-28 13:41:42 +00:00
Aleksa Sarai
8ee02a0b77 Accepting request 1129485 from home:cyphar:docker
Add references to PLATYPUS CVEs:

  * Deny containers access to /sys/devices/virtual/powercap by default.
    - CVE-2020-8694 bsc#1170415
	- CVE-2020-8695 bsc#1170446
	- CVE-2020-12912 bsc#1178760

OBS-URL: https://build.opensuse.org/request/show/1129485
OBS-URL: https://build.opensuse.org/package/show/Virtualization:containers/docker?expand=0&rev=398
2023-11-28 09:55:45 +00:00
Ana Guerrero
c749fd4874 Accepting request 1120880 from Virtualization:containers
- Update to Docker 24.0.7-ce. See upstream changelong online at
  <https://docs.docker.com/engine/release-notes/24.0/#2407>.
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0005-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
  * cli-0001-docs-include-required-tools-in-source-tree.patch

OBS-URL: https://build.opensuse.org/request/show/1120880
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/docker?expand=0&rev=140
2023-10-29 18:39:44 +00:00
Aleksa Sarai
67d760b1ca Accepting request 1120879 from home:cyphar:docker
Update Docker and containerd.

OBS-URL: https://build.opensuse.org/request/show/1120879
OBS-URL: https://build.opensuse.org/package/show/Virtualization:containers/docker?expand=0&rev=397
2023-10-28 06:06:16 +00:00
Ana Guerrero
987d43aae5 Accepting request 1116896 from Virtualization:containers
OBS-URL: https://build.opensuse.org/request/show/1116896
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/docker?expand=0&rev=139
2023-10-12 21:39:14 +00:00
Aleksa Sarai
47539840b4 Accepting request 1116895 from home:cyphar:docker
- Add a patch to fix apparmor on SLE-12, reverting the upstream removal of
  version-specific templating for the default apparmor profile. bsc#1213500
  + 0005-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch

OBS-URL: https://build.opensuse.org/request/show/1116895
OBS-URL: https://build.opensuse.org/package/show/Virtualization:containers/docker?expand=0&rev=396
2023-10-11 10:44:20 +00:00