Accepting request 826036 from devel:kubic

- Update to version 2.3
  - overwrite tmp.mount options with SELinux label for /tmp
  - Add generator to label mount points if required
  - Add dracut module to relabel core system if required
  - Add locale-check to reset locale to system default if the one
    set by SSH does not exist [bsc#1156175]
  - Set TMPDIR for salt to not use /tmp (preparation for noexec) (forwarded request 826035 from kukuk)

OBS-URL: https://build.opensuse.org/request/show/826036
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/microos-tools?expand=0&rev=9

microos-tools-2.2.tar.xz

@@ -1,3 +0,0 @@
-version https://git-lfs.github.com/spec/v1
-oid sha256:46f7ed411038acd7b8ed58ba8deafafae3c97fffb67e34281e664c324e64c533
-size 54860

microos-tools-2.3.tar.xz

@@ -0,0 +1,3 @@
+version https://git-lfs.github.com/spec/v1
+oid sha256:b5d3cc2db01288366ae14e1e699378b7d89ffa68e181b5e3b05e85f6ba60cbaa
+size 75236

microos-tools-rpmlintrc

@@ -0,0 +1,7 @@
+addFilter('suse-filelist-forbidden-systemd-userdirs')
+addFilter('systemd-unit-in-etc')
+addFilter('dangling-symlink')
+addFilter('postin-without-tmpfile-creation')
+addFilter('tmpfile-not-in-filelist')
+addFilter('suse-missing-rclink')
+addFilter('.*W: systemd-service-without-service.*MicroOS-firstboot.service.*')

microos-tools.changes

@@ -1,3 +1,14 @@
+-------------------------------------------------------------------
+Wed Aug 12 07:32:04 UTC 2020 - Thorsten Kukuk <kukuk@suse.com>
+
+- Update to version 2.3
+  - overwrite tmp.mount options with SELinux label for /tmp
+  - Add generator to label mount points if required
+  - Add dracut module to relabel core system if required
+  - Add locale-check to reset locale to system default if the one
+    set by SSH does not exist [bsc#1156175]
+  - Set TMPDIR for salt to not use /tmp (preparation for noexec)
+
 -------------------------------------------------------------------
 Thu Jul 30 09:34:25 UTC 2020 - Thorsten Kukuk <kukuk@suse.com>
 

microos-tools.spec

@@ -17,19 +17,20 @@
 
 
 Name:           microos-tools
-Version:        2.2
+Version:        2.3
 Release:        0
 Summary:        Files and Scripts for openSUSE MicroOS
 License:        GPL-2.0-or-later
 Group:          Development/Tools/Other
 URL:            https://github.com/kubic-project/microos-tools
 Source:         microos-tools-%{version}.tar.xz
+Source99:       microos-tools-rpmlintrc
 BuildRequires:  distribution-release
 BuildRequires:  pkgconfig
+BuildRequires:  pkgconfig(dracut)
 BuildRequires:  pkgconfig(systemd)
 Requires:       read-only-root-fs
 Conflicts:      systemd-coredump
-BuildArch:      noarch
 
 %description
 Files, scripts and directories for openSUSE Kubic.
@@ -45,30 +46,48 @@ Files, scripts and directories for openSUSE Kubic.
 %make_install
 
 %pre
-%service_add_pre setup-systemd-proxy-env.service
+%service_add_pre setup-systemd-proxy-env.service printenv.service
 
 %post
-%service_add_post setup-systemd-proxy-env.service
+%regenerate_initrd_post
+%service_add_post setup-systemd-proxy-env.service printenv.service
 
 %preun
-%service_del_preun setup-systemd-proxy-env.service
+%service_del_preun setup-systemd-proxy-env.service printenv.service
 
 %postun
-%service_del_postun setup-systemd-proxy-env.service
+%regenerate_initrd_post
+%service_del_postun setup-systemd-proxy-env.service printenv.service
+
+%posttrans
+%regenerate_initrd_posttrans
 
 %files
 %license COPYING
-%config %{_sysconfdir}/systemd/system/systemd-firstboot.service
+%dir %{_sysconfdir}/selinux
+%config %{_sysconfdir}/selinux/fixfiles_exclude_dirs
 %dir %{_sysconfdir}/systemd
 %dir %{_sysconfdir}/systemd/system
+%config %{_sysconfdir}/systemd/system/systemd-firstboot.service
 %{_unitdir}/MicroOS-firstboot.service
 %{_unitdir}/printenv.service
 %{_unitdir}/setup-systemd-proxy-env.path
 %{_unitdir}/setup-systemd-proxy-env.service
 %dir %{_unitdir}/sysinit.target.wants
 %{_unitdir}/sysinit.target.wants/MicroOS-firstboot.service
-%{_prefix}/lib/sysctl.d/30-corefiles.conf
+%dir %{_unitdir}/tmp.mount.d
+%{_unitdir}/tmp.mount.d/selinux.conf
+%dir %{_unitdir}/salt-minion.service.d
+%{_unitdir}/salt-minion.service.d/TMPDIR.conf
+%{_tmpfilesdir}/salt-minion-tmpdir.conf
+%{_sysctldir}/30-corefiles.conf
 %{_libexecdir}/MicroOS-firstboot
 %{_sbindir}/setup-systemd-proxy-env
+%dir %{_prefix}/lib/dracut
+%dir %{_prefix}/lib/dracut/modules.d
+%{_prefix}/lib/dracut/modules.d/98selinux-microos
+%{_systemdgeneratordir}/selinux-autorelabel-generator
+%config %{_sysconfdir}/profile.d/ssh-locale-check.sh
+%{_bindir}/locale-check
 
 %changelog