9f2ae9a0e9- Enable SELinux in default daemon.json config (--selinux-enabled). This has no practical impact on non-SELinux systems. bsc#1252290Aleksa Sarai2025-10-29 07:18:59 +00:00
0ca729154aAccepting request 1308443 from Virtualization:containersAna Guerrero2025-10-02 17:18:56 +00:00
9b1482be67- Remove git-core recommends also on openSUSE: the below argument is valid for those users too.Aleksa Sarai2025-10-01 16:10:28 +00:00
b0b42715a7Accepting request 1307636 from Virtualization:containersAna Guerrero2025-09-30 15:34:26 +00:00
8cf7456eae- Remove git-core recommends on SLE. Most SLE systems have installRecommends=yes by default and thus end up installing git with Docker. bsc#1250508Aleksa Sarai2025-09-29 05:43:51 +00:00
6be0f29427Accepting request 1305058 from Virtualization:containersAna Guerrero2025-09-16 16:18:50 +00:00
cbfcffb90f* Fixes a nil pointer panic in "docker push". bsc#1248373Aleksa Sarai2025-09-16 03:06:10 +00:00
df931afd90Accepting request 1302771 from Virtualization:containersAna Guerrero2025-09-05 19:42:22 +00:00
92ad80ceccAccepting request 1302148 from Virtualization:containersAna Guerrero2025-09-01 15:16:51 +00:00
533ef8e35e- Update warnings and errors related to "docker buildx ..." so that they reference our openSUSE docker-buildx packages. + cli-0001-openSUSE-point-users-to-docker-buildx-package.patchAleksa Sarai2025-09-01 06:21:40 +00:00
b430a54521- Enable building docker-buildx for SLE systems with SUSEConnect secret injection enabled (i.e., SLE15 and earlier). PED-12534 PED-8905 bsc#1247594 As docker-buildx does not support our SUSEConnect secret injection (and some users depend "docker build" working transparently), patch the docker CLI so that "docker build" will no longer automatically call "docker buildx build", effectively making DOCKER_BUILDKIT=0 the default configuration. Users can manually use "docker buildx ..." commands or set DOCKER_BUILDKIT=1 in order to opt-in to using docker-buildx.Aleksa Sarai2025-09-01 06:00:17 +00:00
4f0ef3de34[ This update is a no-op, only needed to work around unfortunate automated packaging script behaviour on SLES. ]Aleksa Sarai2025-06-23 12:56:51 +00:00
ed61589e0dAccepting request 1283419 from Virtualization:containersAna Guerrero2025-06-10 06:57:46 +00:00
1f58d49808- Do not try to inject SUSEConnect secrets when in Rootless Docker mode, as Docker does not have permission to access the host zypper credentials in this mode (and unprivileged users cannot disable the feature using /etc/docker/suse-secrets-enable.) bsc#1240150Aleksa Sarai2025-06-05 16:19:52 +00:00
cb1fadaa4b- Always clear SUSEConnect suse_* secrets when starting containers regardless of whether the daemon was built with SUSEConnect support. Not doing this causes containers from SUSEConnect-enabled daemons to fail to start when running with SUSEConnect-disabled (i.e. upstream) daemons.Aleksa Sarai2025-06-04 06:14:23 +00:00
69630be04cAccepting request 1281542 from Virtualization:containersAna Guerrero2025-06-02 19:59:08 +00:00
37241ca5cc- Update to Docker 28.2.2-ce. See upstream changelog online at <https://github.com/moby/moby/releases/tag/v28.2.2> - Rebase patches: * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch * 0003-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch * 0005-SLE12-revert-apparmor-remove-version-conditionals-fr.patchAleksa Sarai2025-05-30 17:59:48 +00:00
3f2382a8b2- Update to Docker 28.2.1-ce. See upstream changelog online at <https://docs.docker.com/engine/release-notes/28/#2820> bsc#1243833 - Rebase patches: * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch * 0003-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch * 0005-SLE12-revert-apparmor-remove-version-conditionals-fr.patch - Update to docker-buildx v0.24.0. Upstream changelog: <https://github.com/docker/buildx/releases/tag/v0.24.0>Aleksa Sarai2025-05-30 09:46:29 +00:00
ba29e28bc2- Update to Docker 28.1.1-ce. See upstream changelog online at <https://docs.docker.com/engine/release-notes/28/#2811> bsc#1242114 Includes upstream fixes: - CVE-2025-22872 bsc#1241830 - Remove long-outdated build handling for deprecated and unsupported devicemapper and AUFS storage drivers. AUFS was removed in v24, and devicemapper was removed in v25. <https://docs.docker.com/engine/deprecated/#aufs-storage-driver> - Rebase patches: * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch * 0003-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch * 0005-SLE12-revert-apparmor-remove-version-conditionals-fr.patch - Remove upstreamed patches: - 0006-CVE-2025-22868-vendor-jws-split-token-into-fixed-num.patch - 0007-CVE-2025-22869-vendor-ssh-limit-the-size-of-the-inte.patch - cli-0001-docs-include-required-tools-in-source-tree.patch - Update to docker-buildx v0.23.0. Upstream changelog: <https://github.com/docker/buildx/releases/tag/v0.23.0>Aleksa Sarai2025-05-01 17:17:53 +00:00
d1bd3c357cAccepting request 1268264 from Virtualization:containersAna Guerrero2025-04-11 14:45:32 +00:00
212e67e0d3- Update to docker-buildx v0.22.0. Upstream changelog: <https://github.com/docker/buildx/releases/tag/v0.22.0> * Includes fixes for CVE-2025-0495. bsc#1239765 - Disable transparent SUSEConnect support for SLE-16. PED-12534 When this patchset was first added in 2013 (and rewritten over the years), there was no upstream way to easily provide SLE customers with a way to build container images based on SLE using the host subscription. However, with docker-buildx you can now define secrets for builds (this is not entirely transparent, but we can easily document this new requirement for SLE-16). Users should use RUN --mount=type=secret,id=SCCcredentials zypper -n ... in their Dockerfiles, and docker buildx build --secret id=SCCcredentials,src=/etc/zypp/credentials.d/SCCcredentials,type=file . when doing their builds. - Now that the only blocker for docker-buildx support was removed for SLE-16, enable docker-buildx for SLE-16 as well. PED-8905Aleksa Sarai2025-04-10 03:37:01 +00:00
cffd8cbd08- Don't use the new container-selinux conditional requires on SLE-12, as the RPM version there doesn't support it. Arguably the change itself is a bit suspect but we can fix that later. bsc#1237367Aleksa Sarai2025-03-26 02:43:19 +00:00
f9cd741afc- Update to Docker 27.4.0-ce. See upstream changelog online at <https://docs.docker.com/engine/release-notes/27/#274> - Rebase patches: * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch * 0003-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch * 0005-SLE12-revert-apparmor-remove-version-conditionals-fr.patch * cli-0001-docs-include-required-tools-in-source-tree.patch - Remove upstreamed patches: - 0006-bsc1221916-update-to-patched-buildkit-version-to-fix.patch - 0007-bsc1214855-volume-use-AtomicWriteFile-to-save-volume.patchAleksa Sarai2024-12-16 07:04:37 +00:00
598ab51442Accepting request 1230151 from Virtualization:containersAna Guerrero2024-12-13 21:32:49 +00:00
bdc26590fbAccepting request 1230148 from home:cyphar:dockerAleksa Sarai2024-12-11 15:36:12 +00:00
9a4f7f6039Accepting request 1230066 from home:cyphar:dockerAleksa Sarai2024-12-11 10:51:14 +00:00
2ddb1de5c3Accepting request 1228305 from Virtualization:containersAna Guerrero2024-12-05 16:05:19 +00:00
a78dff7569- Disable docker-buildx builds for SLES. It turns out that build containers with docker-buildx don't currently get the SUSE secrets mounts applied, meaning that container-suseconnect doesn't work when building images. bsc#1233819Aleksa Sarai2024-11-27 12:52:26 +00:00
09f45a6980Accepting request 1224334 from Virtualization:containersAna Guerrero2024-11-15 14:38:04 +00:00
6a719b3954- Remove DOCKER_NETWORK_OPTS from docker.service. This was removed from sysconfig a long time ago, and apparently this causes issues with systemd in some cases.Aleksa Sarai2024-11-15 00:13:38 +00:00
bd70f4dc19Accepting request 1208742 from Virtualization:containersAna Guerrero2024-10-20 08:13:04 +00:00
245fad9603- Further merge docker and docker-stable specfiles to minimise the differences. The main thing is that we now include both halves of the Conflicts/Provides/Obsoletes dance in both specfiles.Aleksa Sarai2024-10-18 00:34:51 +00:00
c4b3c605dbAccepting request 1208252 from Virtualization:containersAna Guerrero2024-10-16 21:36:50 +00:00
81aaf8950a- Allow users to disable SUSE secrets support by setting DOCKER_SUSE_SECRETS_ENABLE=0 in /etc/sysconfig/docker. bsc#1231348 - Mark docker-buildx as required since classic "docker build" has been deprecated since Docker 23.0. bsc#1230331 - Import docker-buildx v0.16.2 as a subpackage. Previously this was a separate package, but with docker-stable it will be necessary to maintain the packages together and it makes more sense to have them live in the same OBS package. bsc#1230333 - Make some minor name macro updates to help with the docker-stable package fork.Aleksa Sarai2024-10-15 05:59:40 +00:00
da5612206cAccepting request 1201947 from Virtualization:containersAna Guerrero2024-09-30 13:34:54 +00:00
Ana Guerrero
Aleksa Sarai
slfo-main
Aleksa Sarai
Dominique Leuenberger
Dirk Mueller
Dan Čermák
Danish Prakash