9f2ae9a0e9
- Enable SELinux in default daemon.json config (--selinux-enabled). This has no practical impact on non-SELinux systems. bsc#1252290
Aleksa Sarai2025-10-29 07:18:59 +00:00
4c9bf25f0c
docker: update to 28.5.1
Aleksa Sarai
2025-10-22 15:40:57 +11:00
0ca729154a
Accepting request 1308443 from Virtualization:containers
Ana Guerrero2025-10-02 17:18:56 +00:00
9b1482be67
- Remove git-core recommends also on openSUSE: the below argument is valid for those users too.
Aleksa Sarai2025-10-01 16:10:28 +00:00
b0b42715a7
Accepting request 1307636 from Virtualization:containers
Ana Guerrero2025-09-30 15:34:26 +00:00
8cf7456eae
- Remove git-core recommends on SLE. Most SLE systems have installRecommends=yes by default and thus end up installing git with Docker. bsc#1250508
Aleksa Sarai2025-09-29 05:43:51 +00:00
6be0f29427
Accepting request 1305058 from Virtualization:containers
Ana Guerrero2025-09-16 16:18:50 +00:00
cbfcffb90f
* Fixes a nil pointer panic in "docker push". bsc#1248373
Aleksa Sarai2025-09-16 03:06:10 +00:00
df931afd90
Accepting request 1302771 from Virtualization:containers
Ana Guerrero2025-09-05 19:42:22 +00:00
92ad80cecc
Accepting request 1302148 from Virtualization:containers
Ana Guerrero2025-09-01 15:16:51 +00:00
533ef8e35e
- Update warnings and errors related to "docker buildx ..." so that they reference our openSUSE docker-buildx packages. + cli-0001-openSUSE-point-users-to-docker-buildx-package.patch
Aleksa Sarai2025-09-01 06:21:40 +00:00
b430a54521
- Enable building docker-buildx for SLE systems with SUSEConnect secret injection enabled (i.e., SLE15 and earlier). PED-12534 PED-8905 bsc#1247594 As docker-buildx does not support our SUSEConnect secret injection (and some users depend "docker build" working transparently), patch the docker CLI so that "docker build" will no longer automatically call "docker buildx build", effectively making DOCKER_BUILDKIT=0 the default configuration. Users can manually use "docker buildx ..." commands or set DOCKER_BUILDKIT=1 in order to opt-in to using docker-buildx.
Aleksa Sarai2025-09-01 06:00:17 +00:00
4f0ef3de34
[ This update is a no-op, only needed to work around unfortunate automated packaging script behaviour on SLES. ]
Aleksa Sarai2025-06-23 12:56:51 +00:00
ed61589e0d
Accepting request 1283419 from Virtualization:containers
Ana Guerrero2025-06-10 06:57:46 +00:00
1f58d49808
- Do not try to inject SUSEConnect secrets when in Rootless Docker mode, as Docker does not have permission to access the host zypper credentials in this mode (and unprivileged users cannot disable the feature using /etc/docker/suse-secrets-enable.) bsc#1240150
Aleksa Sarai2025-06-05 16:19:52 +00:00
cb1fadaa4b
- Always clear SUSEConnect suse_* secrets when starting containers regardless of whether the daemon was built with SUSEConnect support. Not doing this causes containers from SUSEConnect-enabled daemons to fail to start when running with SUSEConnect-disabled (i.e. upstream) daemons.
Aleksa Sarai2025-06-04 06:14:23 +00:00
69630be04c
Accepting request 1281542 from Virtualization:containers
Ana Guerrero2025-06-02 19:59:08 +00:00
37241ca5cc
- Update to Docker 28.2.2-ce. See upstream changelog online at <https://github.com/moby/moby/releases/tag/v28.2.2> - Rebase patches: * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch * 0003-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch * 0005-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
Aleksa Sarai2025-05-30 17:59:48 +00:00
3f2382a8b2
- Update to Docker 28.2.1-ce. See upstream changelog online at <https://docs.docker.com/engine/release-notes/28/#2820> bsc#1243833 - Rebase patches: * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch * 0003-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch * 0005-SLE12-revert-apparmor-remove-version-conditionals-fr.patch - Update to docker-buildx v0.24.0. Upstream changelog: <https://github.com/docker/buildx/releases/tag/v0.24.0>
Aleksa Sarai2025-05-30 09:46:29 +00:00
ba29e28bc2
- Update to Docker 28.1.1-ce. See upstream changelog online at <https://docs.docker.com/engine/release-notes/28/#2811> bsc#1242114 Includes upstream fixes: - CVE-2025-22872 bsc#1241830 - Remove long-outdated build handling for deprecated and unsupported devicemapper and AUFS storage drivers. AUFS was removed in v24, and devicemapper was removed in v25. <https://docs.docker.com/engine/deprecated/#aufs-storage-driver> - Rebase patches: * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch * 0003-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch * 0005-SLE12-revert-apparmor-remove-version-conditionals-fr.patch - Remove upstreamed patches: - 0006-CVE-2025-22868-vendor-jws-split-token-into-fixed-num.patch - 0007-CVE-2025-22869-vendor-ssh-limit-the-size-of-the-inte.patch - cli-0001-docs-include-required-tools-in-source-tree.patch - Update to docker-buildx v0.23.0. Upstream changelog: <https://github.com/docker/buildx/releases/tag/v0.23.0>
Aleksa Sarai2025-05-01 17:17:53 +00:00
d1bd3c357c
Accepting request 1268264 from Virtualization:containers
Ana Guerrero2025-04-11 14:45:32 +00:00
212e67e0d3
- Update to docker-buildx v0.22.0. Upstream changelog: <https://github.com/docker/buildx/releases/tag/v0.22.0> * Includes fixes for CVE-2025-0495. bsc#1239765 - Disable transparent SUSEConnect support for SLE-16. PED-12534 When this patchset was first added in 2013 (and rewritten over the years), there was no upstream way to easily provide SLE customers with a way to build container images based on SLE using the host subscription. However, with docker-buildx you can now define secrets for builds (this is not entirely transparent, but we can easily document this new requirement for SLE-16). Users should use RUN --mount=type=secret,id=SCCcredentials zypper -n ... in their Dockerfiles, and docker buildx build --secret id=SCCcredentials,src=/etc/zypp/credentials.d/SCCcredentials,type=file . when doing their builds. - Now that the only blocker for docker-buildx support was removed for SLE-16, enable docker-buildx for SLE-16 as well. PED-8905
Aleksa Sarai2025-04-10 03:37:01 +00:00
cffd8cbd08
- Don't use the new container-selinux conditional requires on SLE-12, as the RPM version there doesn't support it. Arguably the change itself is a bit suspect but we can fix that later. bsc#1237367
Aleksa Sarai2025-03-26 02:43:19 +00:00
f9cd741afc
- Update to Docker 27.4.0-ce. See upstream changelog online at <https://docs.docker.com/engine/release-notes/27/#274> - Rebase patches: * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch * 0003-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch * 0005-SLE12-revert-apparmor-remove-version-conditionals-fr.patch * cli-0001-docs-include-required-tools-in-source-tree.patch - Remove upstreamed patches: - 0006-bsc1221916-update-to-patched-buildkit-version-to-fix.patch - 0007-bsc1214855-volume-use-AtomicWriteFile-to-save-volume.patch
Aleksa Sarai2024-12-16 07:04:37 +00:00
598ab51442
Accepting request 1230151 from Virtualization:containers
Ana Guerrero2024-12-13 21:32:49 +00:00
bdc26590fb
Accepting request 1230148 from home:cyphar:docker
Aleksa Sarai2024-12-11 15:36:12 +00:00
9a4f7f6039
Accepting request 1230066 from home:cyphar:docker
Aleksa Sarai2024-12-11 10:51:14 +00:00
2ddb1de5c3
Accepting request 1228305 from Virtualization:containers
Ana Guerrero2024-12-05 16:05:19 +00:00
a78dff7569
- Disable docker-buildx builds for SLES. It turns out that build containers with docker-buildx don't currently get the SUSE secrets mounts applied, meaning that container-suseconnect doesn't work when building images. bsc#1233819
Aleksa Sarai2024-11-27 12:52:26 +00:00
09f45a6980
Accepting request 1224334 from Virtualization:containers
Ana Guerrero2024-11-15 14:38:04 +00:00
6a719b3954
- Remove DOCKER_NETWORK_OPTS from docker.service. This was removed from sysconfig a long time ago, and apparently this causes issues with systemd in some cases.
Aleksa Sarai2024-11-15 00:13:38 +00:00
bd70f4dc19
Accepting request 1208742 from Virtualization:containers
Ana Guerrero2024-10-20 08:13:04 +00:00
245fad9603
- Further merge docker and docker-stable specfiles to minimise the differences. The main thing is that we now include both halves of the Conflicts/Provides/Obsoletes dance in both specfiles.
Aleksa Sarai2024-10-18 00:34:51 +00:00
c4b3c605db
Accepting request 1208252 from Virtualization:containers
Ana Guerrero2024-10-16 21:36:50 +00:00
81aaf8950a
- Allow users to disable SUSE secrets support by setting DOCKER_SUSE_SECRETS_ENABLE=0 in /etc/sysconfig/docker. bsc#1231348 - Mark docker-buildx as required since classic "docker build" has been deprecated since Docker 23.0. bsc#1230331 - Import docker-buildx v0.16.2 as a subpackage. Previously this was a separate package, but with docker-stable it will be necessary to maintain the packages together and it makes more sense to have them live in the same OBS package. bsc#1230333 - Make some minor name macro updates to help with the docker-stable package fork.
Aleksa Sarai2024-10-15 05:59:40 +00:00
da5612206c
Accepting request 1201947 from Virtualization:containers
Ana Guerrero2024-09-30 13:34:54 +00:00
slfo-main
Aleksa Sarai
Ana Guerrero
Aleksa Sarai
Dominique Leuenberger
Dirk Mueller
Dan Čermák
