Marcus Schäfer
1cd0120fd0
- Add selinux test build to TW Also update derived docker integration test to latest Leap - kiwi/schema: Fix allowed value type for ISO publisher and application ID According to the spec, this should be constrained to 128 characters but also allow quite a few other special characters (as well as spaces). We didn't allow spaces in application ID, but allowed too much for Publisher. Now we set up both correctly. - Fix setup of kiwi environment variables Some kiwi env vars are initialized with an empty value and not overwritten if another value is provided. For the selected variables an empty value setting is not allowed because the schema also enforces the value to be set at least once. In addition a helpful option named --print-kiwi-env was added to the 'image info' command which allows to print the environment variables and their values. - Add random key support for LUKS encryption Allow to pass luks="random". In random mode use the generated keyfile as the only key to decrypt. This is only secure if the generated initrd also gets protected e.g. through encryption like it is done with the secure linux execution on zSystems - Added development group in pyproject setup generateDS and other tools are needed and were forgotten OBS-URL: https://build.opensuse.org/package/show/Virtualization:Appliances:Builder/python-kiwi?expand=0&rev=272
47 lines
1.8 KiB
Plaintext
47 lines
1.8 KiB
Plaintext
# There is a kiwi manual page, kiwi-ng exists for the alternative system
|
|
addFilter("no-manual-page-for-binary kiwi-ng")
|
|
|
|
# don't blame on empty package, kiwi-boot-requires for obs
|
|
# integration is used to provide a requires list but the package
|
|
# itself comes with no content which is intentional. In addition
|
|
# don't blame on lib dependency which are also an expected result
|
|
# for this buildservice internal package
|
|
addFilter("suse-filelist-empty .*")
|
|
addFilter("explicit-lib-dependency .*")
|
|
|
|
# don't check uid for tftpboot
|
|
addFilter("non-standard-uid .*")
|
|
|
|
# don't check for buildroot usage, kiwi's Makefile uses the same var name
|
|
addFilter("rpm-buildroot-usage .*")
|
|
|
|
# don't check position-independent-executable
|
|
addFilter("position-independent-executable-suggested .*")
|
|
|
|
# don't check for file duplicates
|
|
addFilter("files-duplicate .*")
|
|
addFilter("cross-directory-hard-link .*")
|
|
|
|
# don't check for locale locations, they are used in the initrd only
|
|
addFilter("file-not-in-%lang .*")
|
|
|
|
# don't check for manual page of binaries used in initrd only
|
|
addFilter("W: no-manual-page-for-binary dcounter");
|
|
addFilter("W: no-manual-page-for-binary startshell");
|
|
addFilter("W: no-manual-page-for-binary utimer");
|
|
addFilter("W: no-manual-page-for-binary driveready");
|
|
addFilter("W: no-manual-page-for-binary setctsid");
|
|
addFilter("W: no-manual-page-for-binary isconsole");
|
|
addFilter("W: no-manual-page-for-binary kiwicompat");
|
|
|
|
# kiwi master package can't be noarch if sub packages are arch specific
|
|
addFilter("W: no-binary");
|
|
|
|
# if we add a provides to the obsoleted another warning that the
|
|
# same package is provided and obsoleted appears. This warning is
|
|
# pointless or doesn't explain what it really wants
|
|
addFilter("W: obsolete-not-provided");
|
|
|
|
# providing deb packages from this spec requires the tag to be hard coded
|
|
addFilter("W: hardcoded-packager-tag");
|