92ad80ceccAccepting request 1302148 from Virtualization:containersAna Guerrero2025-09-01 15:16:51 +00:00
533ef8e35e- Update warnings and errors related to "docker buildx ..." so that they reference our openSUSE docker-buildx packages. + cli-0001-openSUSE-point-users-to-docker-buildx-package.patchAleksa Sarai2025-09-01 06:21:40 +00:00
b430a54521- Enable building docker-buildx for SLE systems with SUSEConnect secret injection enabled (i.e., SLE15 and earlier). PED-12534 PED-8905 bsc#1247594 As docker-buildx does not support our SUSEConnect secret injection (and some users depend "docker build" working transparently), patch the docker CLI so that "docker build" will no longer automatically call "docker buildx build", effectively making DOCKER_BUILDKIT=0 the default configuration. Users can manually use "docker buildx ..." commands or set DOCKER_BUILDKIT=1 in order to opt-in to using docker-buildx.Aleksa Sarai2025-09-01 06:00:17 +00:00
4f0ef3de34[ This update is a no-op, only needed to work around unfortunate automated packaging script behaviour on SLES. ]Aleksa Sarai2025-06-23 12:56:51 +00:00
ed61589e0dAccepting request 1283419 from Virtualization:containersAna Guerrero2025-06-10 06:57:46 +00:00
1f58d49808- Do not try to inject SUSEConnect secrets when in Rootless Docker mode, as Docker does not have permission to access the host zypper credentials in this mode (and unprivileged users cannot disable the feature using /etc/docker/suse-secrets-enable.) bsc#1240150Aleksa Sarai2025-06-05 16:19:52 +00:00
cb1fadaa4b- Always clear SUSEConnect suse_* secrets when starting containers regardless of whether the daemon was built with SUSEConnect support. Not doing this causes containers from SUSEConnect-enabled daemons to fail to start when running with SUSEConnect-disabled (i.e. upstream) daemons.Aleksa Sarai2025-06-04 06:14:23 +00:00
69630be04cAccepting request 1281542 from Virtualization:containersAna Guerrero2025-06-02 19:59:08 +00:00
37241ca5cc- Update to Docker 28.2.2-ce. See upstream changelog online at <https://github.com/moby/moby/releases/tag/v28.2.2> - Rebase patches: * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch * 0003-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch * 0005-SLE12-revert-apparmor-remove-version-conditionals-fr.patchAleksa Sarai2025-05-30 17:59:48 +00:00
3f2382a8b2- Update to Docker 28.2.1-ce. See upstream changelog online at <https://docs.docker.com/engine/release-notes/28/#2820> bsc#1243833 - Rebase patches: * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch * 0003-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch * 0005-SLE12-revert-apparmor-remove-version-conditionals-fr.patch - Update to docker-buildx v0.24.0. Upstream changelog: <https://github.com/docker/buildx/releases/tag/v0.24.0>Aleksa Sarai2025-05-30 09:46:29 +00:00
ba29e28bc2- Update to Docker 28.1.1-ce. See upstream changelog online at <https://docs.docker.com/engine/release-notes/28/#2811> bsc#1242114 Includes upstream fixes: - CVE-2025-22872 bsc#1241830 - Remove long-outdated build handling for deprecated and unsupported devicemapper and AUFS storage drivers. AUFS was removed in v24, and devicemapper was removed in v25. <https://docs.docker.com/engine/deprecated/#aufs-storage-driver> - Rebase patches: * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch * 0003-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch * 0005-SLE12-revert-apparmor-remove-version-conditionals-fr.patch - Remove upstreamed patches: - 0006-CVE-2025-22868-vendor-jws-split-token-into-fixed-num.patch - 0007-CVE-2025-22869-vendor-ssh-limit-the-size-of-the-inte.patch - cli-0001-docs-include-required-tools-in-source-tree.patch - Update to docker-buildx v0.23.0. Upstream changelog: <https://github.com/docker/buildx/releases/tag/v0.23.0>Aleksa Sarai2025-05-01 17:17:53 +00:00
d1bd3c357cAccepting request 1268264 from Virtualization:containersAna Guerrero2025-04-11 14:45:32 +00:00
212e67e0d3- Update to docker-buildx v0.22.0. Upstream changelog: <https://github.com/docker/buildx/releases/tag/v0.22.0> * Includes fixes for CVE-2025-0495. bsc#1239765 - Disable transparent SUSEConnect support for SLE-16. PED-12534 When this patchset was first added in 2013 (and rewritten over the years), there was no upstream way to easily provide SLE customers with a way to build container images based on SLE using the host subscription. However, with docker-buildx you can now define secrets for builds (this is not entirely transparent, but we can easily document this new requirement for SLE-16). Users should use RUN --mount=type=secret,id=SCCcredentials zypper -n ... in their Dockerfiles, and docker buildx build --secret id=SCCcredentials,src=/etc/zypp/credentials.d/SCCcredentials,type=file . when doing their builds. - Now that the only blocker for docker-buildx support was removed for SLE-16, enable docker-buildx for SLE-16 as well. PED-8905Aleksa Sarai2025-04-10 03:37:01 +00:00
cffd8cbd08- Don't use the new container-selinux conditional requires on SLE-12, as the RPM version there doesn't support it. Arguably the change itself is a bit suspect but we can fix that later. bsc#1237367Aleksa Sarai2025-03-26 02:43:19 +00:00
f9cd741afc- Update to Docker 27.4.0-ce. See upstream changelog online at <https://docs.docker.com/engine/release-notes/27/#274> - Rebase patches: * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch * 0003-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch * 0005-SLE12-revert-apparmor-remove-version-conditionals-fr.patch * cli-0001-docs-include-required-tools-in-source-tree.patch - Remove upstreamed patches: - 0006-bsc1221916-update-to-patched-buildkit-version-to-fix.patch - 0007-bsc1214855-volume-use-AtomicWriteFile-to-save-volume.patchAleksa Sarai2024-12-16 07:04:37 +00:00
598ab51442Accepting request 1230151 from Virtualization:containersAna Guerrero2024-12-13 21:32:49 +00:00
bdc26590fbAccepting request 1230148 from home:cyphar:dockerAleksa Sarai2024-12-11 15:36:12 +00:00
9a4f7f6039Accepting request 1230066 from home:cyphar:dockerAleksa Sarai2024-12-11 10:51:14 +00:00
2ddb1de5c3Accepting request 1228305 from Virtualization:containersAna Guerrero2024-12-05 16:05:19 +00:00
a78dff7569- Disable docker-buildx builds for SLES. It turns out that build containers with docker-buildx don't currently get the SUSE secrets mounts applied, meaning that container-suseconnect doesn't work when building images. bsc#1233819Aleksa Sarai2024-11-27 12:52:26 +00:00
09f45a6980Accepting request 1224334 from Virtualization:containersAna Guerrero2024-11-15 14:38:04 +00:00
6a719b3954- Remove DOCKER_NETWORK_OPTS from docker.service. This was removed from sysconfig a long time ago, and apparently this causes issues with systemd in some cases.Aleksa Sarai2024-11-15 00:13:38 +00:00
bd70f4dc19Accepting request 1208742 from Virtualization:containersAna Guerrero2024-10-20 08:13:04 +00:00
245fad9603- Further merge docker and docker-stable specfiles to minimise the differences. The main thing is that we now include both halves of the Conflicts/Provides/Obsoletes dance in both specfiles.Aleksa Sarai2024-10-18 00:34:51 +00:00
c4b3c605dbAccepting request 1208252 from Virtualization:containersAna Guerrero2024-10-16 21:36:50 +00:00
81aaf8950a- Allow users to disable SUSE secrets support by setting DOCKER_SUSE_SECRETS_ENABLE=0 in /etc/sysconfig/docker. bsc#1231348 - Mark docker-buildx as required since classic "docker build" has been deprecated since Docker 23.0. bsc#1230331 - Import docker-buildx v0.16.2 as a subpackage. Previously this was a separate package, but with docker-stable it will be necessary to maintain the packages together and it makes more sense to have them live in the same OBS package. bsc#1230333 - Make some minor name macro updates to help with the docker-stable package fork.Aleksa Sarai2024-10-15 05:59:40 +00:00
da5612206cAccepting request 1201947 from Virtualization:containersAna Guerrero2024-09-30 13:34:54 +00:00
2b14743f6eAccepting request 1190567 from home:cyphar:dockerAleksa Sarai2024-07-31 05:49:49 +00:00
5a65005d4aAccepting request 1182989 from Virtualization:containersAna Guerrero2024-06-24 18:50:54 +00:00
c4e850f70cAccepting request 1182985 from home:cyphar:dockerAleksa Sarai2024-06-24 09:33:37 +00:00
78fb6443aaAccepting request 1170269 from Virtualization:containersAna Guerrero2024-04-26 21:26:43 +00:00
06460be95fAccepting request 1170268 from home:cyphar:dockerAleksa Sarai2024-04-26 09:49:08 +00:00
b3cb6fc020Accepting request 1170079 from home:cyphar:dockerAleksa Sarai2024-04-24 21:20:41 +00:00
f84318c1f3Accepting request 1151209 from Virtualization:containersAna Guerrero2024-02-27 21:44:10 +00:00
6245febf22Accepting request 1149534 from home:kukuk:no-utmpDan Čermák2024-02-26 11:16:23 +00:00
af5f657805Accepting request 1147713 from Virtualization:containersAna Guerrero2024-02-21 16:52:04 +00:00
febbaafee6Accepting request 1147637 from home:danishprakash:branches:Virtualization:containersDan Čermák2024-02-20 08:51:39 +00:00
6b492dc520Accepting request 1146862 from Virtualization:containersAna Guerrero2024-02-16 20:41:33 +00:00
4406dfe326Accepting request 1146719 from home:dancermak:branches:Virtualization:containersDanish Prakash2024-02-15 14:06:27 +00:00
347a50b30aAccepting request 1129616 from Virtualization:containersAna Guerrero2023-11-28 21:18:26 +00:00
e62df9de4cAccepting request 1129615 from home:cyphar:dockerAleksa Sarai2023-11-28 13:41:42 +00:00
8ee02a0b77Accepting request 1129485 from home:cyphar:dockerAleksa Sarai2023-11-28 09:55:45 +00:00
c749fd4874Accepting request 1120880 from Virtualization:containersAna Guerrero2023-10-29 18:39:44 +00:00
67d760b1caAccepting request 1120879 from home:cyphar:dockerAleksa Sarai2023-10-28 06:06:16 +00:00
987d43aae5Accepting request 1116896 from Virtualization:containersAna Guerrero2023-10-12 21:39:14 +00:00
47539840b4Accepting request 1116895 from home:cyphar:dockerAleksa Sarai2023-10-11 10:44:20 +00:00
335d5bc74aAccepting request 1111025 from Virtualization:containersAna Guerrero2023-09-14 14:25:08 +00:00
f28071cbb5- Update to Docker 24.0.6-ce. See upstream changelong online at <https://docs.docker.com/engine/release-notes/24.0/#2406>. bsc#1215323 - Rebase patches: * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch * 0003-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch * cli-0001-docs-include-required-tools-in-source-tree.patch - Switch from disabledrun to manualrun in _service. - Add a docker.socket unit file, but with socket activation effectively disabled to ensure that Docker will always run even if you start the socket individually. Users should probably just ignore this unit file. bsc#1210141Aleksa Sarai2023-09-14 06:38:15 +00:00
f362c288b1Accepting request 1109451 from Virtualization:containersAna Guerrero2023-09-07 19:12:57 +00:00
aa4eb4b1c7Accepting request 1108556 from home:msmeissn:branches:Virtualization:containersDirk Mueller2023-09-07 08:03:44 +00:00
f19c554f4cAccepting request 1100698 from Virtualization:containersAna Guerrero2023-07-26 11:22:05 +00:00
Ana Guerrero
Aleksa Sarai
Dominique Leuenberger
Dirk Mueller
Dan Čermák
Danish Prakash