From 147e7d72634667ce7219b99ad51081efe1d5ef26 Mon Sep 17 00:00:00 2001 From: RH Container Bot Date: Wed, 12 Aug 2020 15:10:13 +0000 Subject: [PATCH 001/160] container-selinux-2:2.144.0-2.dev.git746ea7a - bump to 2.144.0 - autobuilt 746ea7a Signed-off-by: RH Container Bot --- .gitignore | 1 + container-selinux.spec | 8 ++++++-- sources | 2 +- 3 files changed, 8 insertions(+), 3 deletions(-) diff --git a/.gitignore b/.gitignore index 1cb4754..bdee02d 100644 --- a/.gitignore +++ b/.gitignore @@ -136,3 +136,4 @@ /container-selinux-2750e78.tar.gz /container-selinux-fe6a25c.tar.gz /container-selinux-e2d5a9e.tar.gz +/container-selinux-746ea7a.tar.gz diff --git a/container-selinux.spec b/container-selinux.spec index be5eb52..49a406e 100644 --- a/container-selinux.spec +++ b/container-selinux.spec @@ -2,7 +2,7 @@ # container-selinux %global git0 https://github.com/containers/container-selinux -%global commit0 e2d5a9eadb72a9aa90c4f5ba793011865620f367 +%global commit0 746ea7a2072a281106c5e0e2f9148ff0442e4d6e %global shortcommit0 %(c=%{commit0}; echo ${c:0:7}) # container-selinux stuff (prefix with ds_ for version/release etc.) @@ -24,7 +24,7 @@ Name: container-selinux %if 0%{?fedora} Epoch: 2 %endif -Version: 2.143.0 +Version: 2.144.0 Release: 2.dev.git%{shortcommit0}%{?dist} License: GPLv2 URL: %{git0} @@ -111,6 +111,10 @@ fi # Hooked up to autobuilder, please check with @lsm5 before updating %changelog +* Wed Aug 12 15:10:04 GMT 2020 RH Container Bot - 2:2.144.0-2.dev.git746ea7a +- bump to 2.144.0 +- autobuilt 746ea7a + * Wed Aug 05 22:10:34 GMT 2020 RH Container Bot - 2:2.143.0-2.dev.gite2d5a9e - bump to 2.143.0 - autobuilt e2d5a9e diff --git a/sources b/sources index 4a623bf..733a39f 100644 --- a/sources +++ b/sources @@ -1 +1 @@ -SHA512 (container-selinux-e2d5a9e.tar.gz) = 397524b618159d498b5a64946a8f1acc0bf54a611723336aae61165322c6ee2963aec18f9c84de039755ea1ef1e0a51fbec9b49e5969043536fa382a7c9ea233 +SHA512 (container-selinux-746ea7a.tar.gz) = 436eb407bc9fb104a8c13f5cdded90a3a71ddbe6faed521663d89f9f25883f36c2b707327b1b5ab5e390eeed8f5d1c8a8c429b8b42e03d4efb0981cf3b85e195 From bd03f1a9adb5e91cf34499a724f5cabee1f513ad Mon Sep 17 00:00:00 2001 From: RH Container Bot Date: Thu, 13 Aug 2020 14:10:52 +0000 Subject: [PATCH 002/160] container-selinux-2:2.144.0-3.dev.git5d929d4 - autobuilt 5d929d4 Signed-off-by: RH Container Bot --- .gitignore | 1 + container-selinux.spec | 7 +++++-- sources | 2 +- 3 files changed, 7 insertions(+), 3 deletions(-) diff --git a/.gitignore b/.gitignore index bdee02d..f1787aa 100644 --- a/.gitignore +++ b/.gitignore @@ -137,3 +137,4 @@ /container-selinux-fe6a25c.tar.gz /container-selinux-e2d5a9e.tar.gz /container-selinux-746ea7a.tar.gz +/container-selinux-5d929d4.tar.gz diff --git a/container-selinux.spec b/container-selinux.spec index 49a406e..f0eac89 100644 --- a/container-selinux.spec +++ b/container-selinux.spec @@ -2,7 +2,7 @@ # container-selinux %global git0 https://github.com/containers/container-selinux -%global commit0 746ea7a2072a281106c5e0e2f9148ff0442e4d6e +%global commit0 5d929d4fa9d5703fbbf7ef05de0b2a79964b833f %global shortcommit0 %(c=%{commit0}; echo ${c:0:7}) # container-selinux stuff (prefix with ds_ for version/release etc.) @@ -25,7 +25,7 @@ Name: container-selinux Epoch: 2 %endif Version: 2.144.0 -Release: 2.dev.git%{shortcommit0}%{?dist} +Release: 3.dev.git%{shortcommit0}%{?dist} License: GPLv2 URL: %{git0} Summary: SELinux policies for container runtimes @@ -111,6 +111,9 @@ fi # Hooked up to autobuilder, please check with @lsm5 before updating %changelog +* Thu Aug 13 14:10:45 GMT 2020 RH Container Bot - 2:2.144.0-3.dev.git5d929d4 +- autobuilt 5d929d4 + * Wed Aug 12 15:10:04 GMT 2020 RH Container Bot - 2:2.144.0-2.dev.git746ea7a - bump to 2.144.0 - autobuilt 746ea7a diff --git a/sources b/sources index 733a39f..1c3e7be 100644 --- a/sources +++ b/sources @@ -1 +1 @@ -SHA512 (container-selinux-746ea7a.tar.gz) = 436eb407bc9fb104a8c13f5cdded90a3a71ddbe6faed521663d89f9f25883f36c2b707327b1b5ab5e390eeed8f5d1c8a8c429b8b42e03d4efb0981cf3b85e195 +SHA512 (container-selinux-5d929d4.tar.gz) = 9078bb06cda4f652bc103a8ed5cf2a631de496ba14ca928dcaf6e0ce435fdf8a906b87acd88c765096ee1ebd11de5d10ddbad2c8167649fcfd8b05965cd624ee From 72fda385c2812de550e05ddccfb4f1eb53a36a64 Mon Sep 17 00:00:00 2001 From: Lokesh Mandvekar Date: Fri, 28 Aug 2020 11:11:37 -0400 Subject: [PATCH 003/160] container-selinux-2:2.144.0-4.dev.git5d929d4 - Resolves: #1780129 - bump min selinux-policy Signed-off-by: Lokesh Mandvekar --- container-selinux.spec | 7 +++++-- 1 file changed, 5 insertions(+), 2 deletions(-) diff --git a/container-selinux.spec b/container-selinux.spec index f0eac89..00eb2e6 100644 --- a/container-selinux.spec +++ b/container-selinux.spec @@ -17,7 +17,7 @@ %global _format() export %1=""; for x in %{modulenames}; do %1+=%2; %1+=" "; done; # Version of SELinux we were using -%global selinux_policyver 3.14.4-43 +%global selinux_policyver 3.14.5-18 # Hooked up to autobuilder, please check with @lsm5 before updating Name: container-selinux @@ -25,7 +25,7 @@ Name: container-selinux Epoch: 2 %endif Version: 2.144.0 -Release: 3.dev.git%{shortcommit0}%{?dist} +Release: 4.dev.git%{shortcommit0}%{?dist} License: GPLv2 URL: %{git0} Summary: SELinux policies for container runtimes @@ -111,6 +111,9 @@ fi # Hooked up to autobuilder, please check with @lsm5 before updating %changelog +* Fri Aug 28 2020 Lokesh Mandvekar - 2:2.144.0-4.dev.git5d929d4 +- Resolves: #1780129 - bump min selinux-policy + * Thu Aug 13 14:10:45 GMT 2020 RH Container Bot - 2:2.144.0-3.dev.git5d929d4 - autobuilt 5d929d4 From b69eeb1c7ceaf73c2ebd9d3bde553ae44295f8b1 Mon Sep 17 00:00:00 2001 From: Lokesh Mandvekar Date: Mon, 31 Aug 2020 10:10:47 -0400 Subject: [PATCH 004/160] Resolves: #1797554 - use _selinux_policy_version macro Signed-off-by: Lokesh Mandvekar --- container-selinux.spec | 24 +++++++++--------------- 1 file changed, 9 insertions(+), 15 deletions(-) diff --git a/container-selinux.spec b/container-selinux.spec index 00eb2e6..d56e8ba 100644 --- a/container-selinux.spec +++ b/container-selinux.spec @@ -16,16 +16,13 @@ # Format must contain '$x' somewhere to do anything useful %global _format() export %1=""; for x in %{modulenames}; do %1+=%2; %1+=" "; done; -# Version of SELinux we were using -%global selinux_policyver 3.14.5-18 - # Hooked up to autobuilder, please check with @lsm5 before updating Name: container-selinux %if 0%{?fedora} Epoch: 2 %endif Version: 2.144.0 -Release: 4.dev.git%{shortcommit0}%{?dist} +Release: 5.dev.git%{shortcommit0}%{?dist} License: GPLv2 URL: %{git0} Summary: SELinux policies for container runtimes @@ -33,12 +30,12 @@ Source0: %{git0}/archive/%{commit0}/%{name}-%{shortcommit0}.tar.gz BuildArch: noarch BuildRequires: git BuildRequires: pkgconfig(systemd) -BuildRequires: selinux-policy >= %{selinux_policyver} -BuildRequires: selinux-policy-devel >= %{selinux_policyver} +BuildRequires: selinux-policy >= %_selinux_policy_version +BuildRequires: selinux-policy-devel >= %_selinux_policy_version # RE: rhbz#1195804 - ensure min NVR for selinux-policy -Requires: selinux-policy >= %{selinux_policyver} -Requires(post): selinux-policy-base >= %{selinux_policyver} -Requires(post): selinux-policy-targeted >= %{selinux_policyver} +Requires: selinux-policy >= %_selinux_policy_version +Requires(post): selinux-policy-base >= %_selinux_policy_version +Requires(post): selinux-policy-targeted >= %_selinux_policy_version Requires(post): policycoreutils Requires(post): libselinux-utils Requires(post): sed @@ -64,12 +61,6 @@ install -p -m 644 container.if %{buildroot}%{_datadir}/selinux/devel/include/ser install -m 0644 $MODULES %{buildroot}%{_datadir}/selinux/packages install -d %{buildroot}/%{_datadir}/containers/selinux install -m 644 container_contexts %{buildroot}/%{_datadir}/containers/selinux/contexts -# Currently shipped as part of selinux-policy package -#install -d %{buildroot}/%{_datadir}/man/man8 -#install -m 644 container_selinux.8 %{buildroot}/%{_datadir}/man/man8 - -# remove spec file -rm -rf container-selinux.spec %check @@ -111,6 +102,9 @@ fi # Hooked up to autobuilder, please check with @lsm5 before updating %changelog +* Mon Aug 31 2020 Lokesh Mandvekar - 2:2.144.0-5.dev.git5d929d4 +- Resolves: #1797554 - use _selinux_policy_version macro + * Fri Aug 28 2020 Lokesh Mandvekar - 2:2.144.0-4.dev.git5d929d4 - Resolves: #1780129 - bump min selinux-policy From 9633f45f8abf889867999be5305cbc434410dad0 Mon Sep 17 00:00:00 2001 From: RH Container Bot Date: Thu, 10 Sep 2020 18:12:50 +0000 Subject: [PATCH 005/160] container-selinux-2:2.145.0-2.dev.git464e922 - bump to 2.145.0 - autobuilt 464e922 Signed-off-by: RH Container Bot --- .gitignore | 1 + container-selinux.spec | 10 +++++++--- sources | 2 +- 3 files changed, 9 insertions(+), 4 deletions(-) diff --git a/.gitignore b/.gitignore index f1787aa..f13c094 100644 --- a/.gitignore +++ b/.gitignore @@ -138,3 +138,4 @@ /container-selinux-e2d5a9e.tar.gz /container-selinux-746ea7a.tar.gz /container-selinux-5d929d4.tar.gz +/container-selinux-464e922.tar.gz diff --git a/container-selinux.spec b/container-selinux.spec index d56e8ba..729c81a 100644 --- a/container-selinux.spec +++ b/container-selinux.spec @@ -2,7 +2,7 @@ # container-selinux %global git0 https://github.com/containers/container-selinux -%global commit0 5d929d4fa9d5703fbbf7ef05de0b2a79964b833f +%global commit0 464e92247f470165accc16e11529ab0a27515ca8 %global shortcommit0 %(c=%{commit0}; echo ${c:0:7}) # container-selinux stuff (prefix with ds_ for version/release etc.) @@ -21,8 +21,8 @@ Name: container-selinux %if 0%{?fedora} Epoch: 2 %endif -Version: 2.144.0 -Release: 5.dev.git%{shortcommit0}%{?dist} +Version: 2.145.0 +Release: 2.dev.git%{shortcommit0}%{?dist} License: GPLv2 URL: %{git0} Summary: SELinux policies for container runtimes @@ -102,6 +102,10 @@ fi # Hooked up to autobuilder, please check with @lsm5 before updating %changelog +* Thu Sep 10 18:12:36 UTC 2020 RH Container Bot - 2:2.145.0-2.dev.git464e922 +- bump to 2.145.0 +- autobuilt 464e922 + * Mon Aug 31 2020 Lokesh Mandvekar - 2:2.144.0-5.dev.git5d929d4 - Resolves: #1797554 - use _selinux_policy_version macro diff --git a/sources b/sources index 1c3e7be..cb06b6f 100644 --- a/sources +++ b/sources @@ -1 +1 @@ -SHA512 (container-selinux-5d929d4.tar.gz) = 9078bb06cda4f652bc103a8ed5cf2a631de496ba14ca928dcaf6e0ce435fdf8a906b87acd88c765096ee1ebd11de5d10ddbad2c8167649fcfd8b05965cd624ee +SHA512 (container-selinux-464e922.tar.gz) = 45374c29bf1aa2e5bdbd62a9531f48139dee96b97d762e0f0d64b464187a337c0cda41f7f320dca56af5c02f493af31c7fb02859dc09a26907cda2115f30c00b From 56ad893019401c9aaac30630caf3d0eb4bf8f381 Mon Sep 17 00:00:00 2001 From: RH Container Bot Date: Thu, 8 Oct 2020 14:32:21 +0000 Subject: [PATCH 006/160] container-selinux-2:2.146.0-2.dev.git2908536 - bump to 2.146.0 - autobuilt 2908536 Signed-off-by: RH Container Bot --- .gitignore | 1 + container-selinux.spec | 8 ++++++-- sources | 2 +- 3 files changed, 8 insertions(+), 3 deletions(-) diff --git a/.gitignore b/.gitignore index f13c094..34e7d36 100644 --- a/.gitignore +++ b/.gitignore @@ -139,3 +139,4 @@ /container-selinux-746ea7a.tar.gz /container-selinux-5d929d4.tar.gz /container-selinux-464e922.tar.gz +/container-selinux-2908536.tar.gz diff --git a/container-selinux.spec b/container-selinux.spec index 729c81a..121273e 100644 --- a/container-selinux.spec +++ b/container-selinux.spec @@ -2,7 +2,7 @@ # container-selinux %global git0 https://github.com/containers/container-selinux -%global commit0 464e92247f470165accc16e11529ab0a27515ca8 +%global commit0 29085364dbb29671240fd7910438d5cdf6dec7be %global shortcommit0 %(c=%{commit0}; echo ${c:0:7}) # container-selinux stuff (prefix with ds_ for version/release etc.) @@ -21,7 +21,7 @@ Name: container-selinux %if 0%{?fedora} Epoch: 2 %endif -Version: 2.145.0 +Version: 2.146.0 Release: 2.dev.git%{shortcommit0}%{?dist} License: GPLv2 URL: %{git0} @@ -102,6 +102,10 @@ fi # Hooked up to autobuilder, please check with @lsm5 before updating %changelog +* Thu Oct 8 2020 RH Container Bot - 2:2.146.0-2.dev.git2908536 +- bump to 2.146.0 +- autobuilt 2908536 + * Thu Sep 10 18:12:36 UTC 2020 RH Container Bot - 2:2.145.0-2.dev.git464e922 - bump to 2.145.0 - autobuilt 464e922 diff --git a/sources b/sources index cb06b6f..d1a54d8 100644 --- a/sources +++ b/sources @@ -1 +1 @@ -SHA512 (container-selinux-464e922.tar.gz) = 45374c29bf1aa2e5bdbd62a9531f48139dee96b97d762e0f0d64b464187a337c0cda41f7f320dca56af5c02f493af31c7fb02859dc09a26907cda2115f30c00b +SHA512 (container-selinux-2908536.tar.gz) = 7bca1943f255c44b142d7cc5ba8cc23258fd2f74f16744564572f461d482a50b96752686db3c22a01ca1bbd19e0275980e632897e6513d8175a428f15ad4415a From f78c91f8fa5b4681b8918bdc6747b8dca998bcb3 Mon Sep 17 00:00:00 2001 From: RH Container Bot Date: Mon, 12 Oct 2020 14:31:58 +0000 Subject: [PATCH 007/160] container-selinux-2:2.147.0-2.dev.git9fb1698 - bump to 2.147.0 - autobuilt 9fb1698 Signed-off-by: RH Container Bot --- .gitignore | 1 + container-selinux.spec | 8 ++++++-- sources | 2 +- 3 files changed, 8 insertions(+), 3 deletions(-) diff --git a/.gitignore b/.gitignore index 34e7d36..3f065f7 100644 --- a/.gitignore +++ b/.gitignore @@ -140,3 +140,4 @@ /container-selinux-5d929d4.tar.gz /container-selinux-464e922.tar.gz /container-selinux-2908536.tar.gz +/container-selinux-9fb1698.tar.gz diff --git a/container-selinux.spec b/container-selinux.spec index 121273e..918a67f 100644 --- a/container-selinux.spec +++ b/container-selinux.spec @@ -2,7 +2,7 @@ # container-selinux %global git0 https://github.com/containers/container-selinux -%global commit0 29085364dbb29671240fd7910438d5cdf6dec7be +%global commit0 9fb1698cbb2ca24a746181a79492eb003b1ffae8 %global shortcommit0 %(c=%{commit0}; echo ${c:0:7}) # container-selinux stuff (prefix with ds_ for version/release etc.) @@ -21,7 +21,7 @@ Name: container-selinux %if 0%{?fedora} Epoch: 2 %endif -Version: 2.146.0 +Version: 2.147.0 Release: 2.dev.git%{shortcommit0}%{?dist} License: GPLv2 URL: %{git0} @@ -102,6 +102,10 @@ fi # Hooked up to autobuilder, please check with @lsm5 before updating %changelog +* Mon Oct 12 2020 RH Container Bot - 2:2.147.0-2.dev.git9fb1698 +- bump to 2.147.0 +- autobuilt 9fb1698 + * Thu Oct 8 2020 RH Container Bot - 2:2.146.0-2.dev.git2908536 - bump to 2.146.0 - autobuilt 2908536 diff --git a/sources b/sources index d1a54d8..9104800 100644 --- a/sources +++ b/sources @@ -1 +1 @@ -SHA512 (container-selinux-2908536.tar.gz) = 7bca1943f255c44b142d7cc5ba8cc23258fd2f74f16744564572f461d482a50b96752686db3c22a01ca1bbd19e0275980e632897e6513d8175a428f15ad4415a +SHA512 (container-selinux-9fb1698.tar.gz) = 8fe625ddab2b3d836ff0e8dac1609545bff16e6b9c8b637f6eae59999473bc57b0839debb5cd2ef4e70d2b24e628d9651d7865b5d065f3b204eb05f25f063f34 From b2e55a00f67951a22ae26c70d35e76dca4377f5c Mon Sep 17 00:00:00 2001 From: RH Container Bot Date: Wed, 14 Oct 2020 14:31:51 +0000 Subject: [PATCH 008/160] container-selinux-2:2.148.0-2.dev.git3c361a2 - bump to 2.148.0 - autobuilt 3c361a2 Signed-off-by: RH Container Bot --- .gitignore | 1 + container-selinux.spec | 8 ++++++-- sources | 2 +- 3 files changed, 8 insertions(+), 3 deletions(-) diff --git a/.gitignore b/.gitignore index 3f065f7..c15dd23 100644 --- a/.gitignore +++ b/.gitignore @@ -141,3 +141,4 @@ /container-selinux-464e922.tar.gz /container-selinux-2908536.tar.gz /container-selinux-9fb1698.tar.gz +/container-selinux-3c361a2.tar.gz diff --git a/container-selinux.spec b/container-selinux.spec index 918a67f..f5f2150 100644 --- a/container-selinux.spec +++ b/container-selinux.spec @@ -2,7 +2,7 @@ # container-selinux %global git0 https://github.com/containers/container-selinux -%global commit0 9fb1698cbb2ca24a746181a79492eb003b1ffae8 +%global commit0 3c361a2787b4f3739409a86e1cf8b6efe13f7d39 %global shortcommit0 %(c=%{commit0}; echo ${c:0:7}) # container-selinux stuff (prefix with ds_ for version/release etc.) @@ -21,7 +21,7 @@ Name: container-selinux %if 0%{?fedora} Epoch: 2 %endif -Version: 2.147.0 +Version: 2.148.0 Release: 2.dev.git%{shortcommit0}%{?dist} License: GPLv2 URL: %{git0} @@ -102,6 +102,10 @@ fi # Hooked up to autobuilder, please check with @lsm5 before updating %changelog +* Wed Oct 14 2020 RH Container Bot - 2:2.148.0-2.dev.git3c361a2 +- bump to 2.148.0 +- autobuilt 3c361a2 + * Mon Oct 12 2020 RH Container Bot - 2:2.147.0-2.dev.git9fb1698 - bump to 2.147.0 - autobuilt 9fb1698 diff --git a/sources b/sources index 9104800..f010911 100644 --- a/sources +++ b/sources @@ -1 +1 @@ -SHA512 (container-selinux-9fb1698.tar.gz) = 8fe625ddab2b3d836ff0e8dac1609545bff16e6b9c8b637f6eae59999473bc57b0839debb5cd2ef4e70d2b24e628d9651d7865b5d065f3b204eb05f25f063f34 +SHA512 (container-selinux-3c361a2.tar.gz) = f635ba5367eaa97ae894bf759ce3dae913e5a032e9c990bc445465bc4d810fd65d0d346d3ef13ba6cc1fc31fb449989d34c5a482026b99da9e4ad85ea032c722 From 9fdf5e4f15cab8aa72669f7911c5a5de99b964f7 Mon Sep 17 00:00:00 2001 From: RH Container Bot Date: Thu, 15 Oct 2020 14:32:32 +0000 Subject: [PATCH 009/160] container-selinux-2:2.148.0-3.dev.git9b3b66f - autobuilt 9b3b66f Signed-off-by: RH Container Bot --- .gitignore | 1 + container-selinux.spec | 7 +++++-- sources | 2 +- 3 files changed, 7 insertions(+), 3 deletions(-) diff --git a/.gitignore b/.gitignore index c15dd23..3ca0bff 100644 --- a/.gitignore +++ b/.gitignore @@ -142,3 +142,4 @@ /container-selinux-2908536.tar.gz /container-selinux-9fb1698.tar.gz /container-selinux-3c361a2.tar.gz +/container-selinux-9b3b66f.tar.gz diff --git a/container-selinux.spec b/container-selinux.spec index f5f2150..e4614db 100644 --- a/container-selinux.spec +++ b/container-selinux.spec @@ -2,7 +2,7 @@ # container-selinux %global git0 https://github.com/containers/container-selinux -%global commit0 3c361a2787b4f3739409a86e1cf8b6efe13f7d39 +%global commit0 9b3b66f400ed2f2bee76559fb200cf1c1f92d29c %global shortcommit0 %(c=%{commit0}; echo ${c:0:7}) # container-selinux stuff (prefix with ds_ for version/release etc.) @@ -22,7 +22,7 @@ Name: container-selinux Epoch: 2 %endif Version: 2.148.0 -Release: 2.dev.git%{shortcommit0}%{?dist} +Release: 3.dev.git%{shortcommit0}%{?dist} License: GPLv2 URL: %{git0} Summary: SELinux policies for container runtimes @@ -102,6 +102,9 @@ fi # Hooked up to autobuilder, please check with @lsm5 before updating %changelog +* Thu Oct 15 2020 RH Container Bot - 2:2.148.0-3.dev.git9b3b66f +- autobuilt 9b3b66f + * Wed Oct 14 2020 RH Container Bot - 2:2.148.0-2.dev.git3c361a2 - bump to 2.148.0 - autobuilt 3c361a2 diff --git a/sources b/sources index f010911..b5282f0 100644 --- a/sources +++ b/sources @@ -1 +1 @@ -SHA512 (container-selinux-3c361a2.tar.gz) = f635ba5367eaa97ae894bf759ce3dae913e5a032e9c990bc445465bc4d810fd65d0d346d3ef13ba6cc1fc31fb449989d34c5a482026b99da9e4ad85ea032c722 +SHA512 (container-selinux-9b3b66f.tar.gz) = 5dbc86925d3bab33e1dba9e07a12353b9879a08c4c373d5a12ae87abcf70f5aa715f6d7a53fdf719d12619d936216e734c762d3180ee4b1f9a8ab048df0c9601 From d362045995eba6ee93d769a581962a1668bb6bf9 Mon Sep 17 00:00:00 2001 From: RH Container Bot Date: Fri, 23 Oct 2020 17:25:20 +0000 Subject: [PATCH 010/160] container-selinux-2:2.150.0-2.dev.git0ef4703 - bump to 2.150.0 - autobuilt 0ef4703 Signed-off-by: RH Container Bot --- .gitignore | 1 + container-selinux.spec | 10 +++++++--- sources | 2 +- 3 files changed, 9 insertions(+), 4 deletions(-) diff --git a/.gitignore b/.gitignore index 3ca0bff..e557aad 100644 --- a/.gitignore +++ b/.gitignore @@ -143,3 +143,4 @@ /container-selinux-9fb1698.tar.gz /container-selinux-3c361a2.tar.gz /container-selinux-9b3b66f.tar.gz +/container-selinux-0ef4703.tar.gz diff --git a/container-selinux.spec b/container-selinux.spec index e4614db..543bf95 100644 --- a/container-selinux.spec +++ b/container-selinux.spec @@ -2,7 +2,7 @@ # container-selinux %global git0 https://github.com/containers/container-selinux -%global commit0 9b3b66f400ed2f2bee76559fb200cf1c1f92d29c +%global commit0 0ef47032047b6f93b1c113aafc40cbcb4e0cac3b %global shortcommit0 %(c=%{commit0}; echo ${c:0:7}) # container-selinux stuff (prefix with ds_ for version/release etc.) @@ -21,8 +21,8 @@ Name: container-selinux %if 0%{?fedora} Epoch: 2 %endif -Version: 2.148.0 -Release: 3.dev.git%{shortcommit0}%{?dist} +Version: 2.150.0 +Release: 2.dev.git%{shortcommit0}%{?dist} License: GPLv2 URL: %{git0} Summary: SELinux policies for container runtimes @@ -102,6 +102,10 @@ fi # Hooked up to autobuilder, please check with @lsm5 before updating %changelog +* Fri Oct 23 2020 RH Container Bot - 2:2.150.0-2.dev.git0ef4703 +- bump to 2.150.0 +- autobuilt 0ef4703 + * Thu Oct 15 2020 RH Container Bot - 2:2.148.0-3.dev.git9b3b66f - autobuilt 9b3b66f diff --git a/sources b/sources index b5282f0..1961024 100644 --- a/sources +++ b/sources @@ -1 +1 @@ -SHA512 (container-selinux-9b3b66f.tar.gz) = 5dbc86925d3bab33e1dba9e07a12353b9879a08c4c373d5a12ae87abcf70f5aa715f6d7a53fdf719d12619d936216e734c762d3180ee4b1f9a8ab048df0c9601 +SHA512 (container-selinux-0ef4703.tar.gz) = 5c1a769be37821cc590885a81e80c0112b598500cf4ab32a34a6f14a133f41c323c5629bb6ac22e33bc20c52e5d8be5820358b0094f77430992f792275dd26ee From 2a5fd9fae871ae915b5248b6b700af3c9d39eb54 Mon Sep 17 00:00:00 2001 From: RH Container Bot Date: Thu, 5 Nov 2020 18:27:45 +0000 Subject: [PATCH 011/160] container-selinux-2:2.151.0-2.dev.git5d3c461 - bump to 2.151.0 - autobuilt 5d3c461 Signed-off-by: RH Container Bot --- .gitignore | 1 + container-selinux.spec | 8 ++++++-- sources | 2 +- 3 files changed, 8 insertions(+), 3 deletions(-) diff --git a/.gitignore b/.gitignore index e557aad..d15d71a 100644 --- a/.gitignore +++ b/.gitignore @@ -144,3 +144,4 @@ /container-selinux-3c361a2.tar.gz /container-selinux-9b3b66f.tar.gz /container-selinux-0ef4703.tar.gz +/container-selinux-5d3c461.tar.gz diff --git a/container-selinux.spec b/container-selinux.spec index 543bf95..22c9894 100644 --- a/container-selinux.spec +++ b/container-selinux.spec @@ -2,7 +2,7 @@ # container-selinux %global git0 https://github.com/containers/container-selinux -%global commit0 0ef47032047b6f93b1c113aafc40cbcb4e0cac3b +%global commit0 5d3c4619490947240f648330ce0c51a1a1830911 %global shortcommit0 %(c=%{commit0}; echo ${c:0:7}) # container-selinux stuff (prefix with ds_ for version/release etc.) @@ -21,7 +21,7 @@ Name: container-selinux %if 0%{?fedora} Epoch: 2 %endif -Version: 2.150.0 +Version: 2.151.0 Release: 2.dev.git%{shortcommit0}%{?dist} License: GPLv2 URL: %{git0} @@ -102,6 +102,10 @@ fi # Hooked up to autobuilder, please check with @lsm5 before updating %changelog +* Thu Nov 5 2020 RH Container Bot - 2:2.151.0-2.dev.git5d3c461 +- bump to 2.151.0 +- autobuilt 5d3c461 + * Fri Oct 23 2020 RH Container Bot - 2:2.150.0-2.dev.git0ef4703 - bump to 2.150.0 - autobuilt 0ef4703 diff --git a/sources b/sources index 1961024..11f958f 100644 --- a/sources +++ b/sources @@ -1 +1 @@ -SHA512 (container-selinux-0ef4703.tar.gz) = 5c1a769be37821cc590885a81e80c0112b598500cf4ab32a34a6f14a133f41c323c5629bb6ac22e33bc20c52e5d8be5820358b0094f77430992f792275dd26ee +SHA512 (container-selinux-5d3c461.tar.gz) = ce19061ddfed5f84ecb386ce6885a7fe2ae7f93a742dddca5ad940d0716206bc1b21b6161591b5e24f9738711975d79d777ec35233c02d807e8cefb3aa26fa23 From 9830a7eb5bdbcf72775595d300e605ce2d602981 Mon Sep 17 00:00:00 2001 From: Jindrich Novy Date: Wed, 2 Dec 2020 12:52:20 +0100 Subject: [PATCH 012/160] container-selinux-2.151.0-3.dev.git5d3c461.fc34 - remove %%fedora Epoch conditional - Related: #1899626 Signed-off-by: Jindrich Novy --- container-selinux.spec | 8 +++++--- 1 file changed, 5 insertions(+), 3 deletions(-) diff --git a/container-selinux.spec b/container-selinux.spec index 22c9894..94c48ac 100644 --- a/container-selinux.spec +++ b/container-selinux.spec @@ -18,11 +18,9 @@ # Hooked up to autobuilder, please check with @lsm5 before updating Name: container-selinux -%if 0%{?fedora} Epoch: 2 -%endif Version: 2.151.0 -Release: 2.dev.git%{shortcommit0}%{?dist} +Release: 3.dev.git%{shortcommit0}%{?dist} License: GPLv2 URL: %{git0} Summary: SELinux policies for container runtimes @@ -102,6 +100,10 @@ fi # Hooked up to autobuilder, please check with @lsm5 before updating %changelog +* Wed Dec 02 2020 Jindrich Novy - 2:2.151.0-3.dev.git5d3c461 +- remove %%fedora Epoch conditional +- Related: #1899626 + * Thu Nov 5 2020 RH Container Bot - 2:2.151.0-2.dev.git5d3c461 - bump to 2.151.0 - autobuilt 5d3c461 From 5c9197e29deb47e3284cd91e5c6bb91de08dc9b4 Mon Sep 17 00:00:00 2001 From: Jindrich Novy Date: Wed, 2 Dec 2020 13:17:20 +0100 Subject: [PATCH 013/160] container-selinux-2.151.0-4.dev.git5d3c461.fc34 - remove bogus changelog dates emitted by build bot leading to build failure - Related: #1715412 Signed-off-by: Jindrich Novy --- container-selinux.spec | 22 +++++++++++++--------- 1 file changed, 13 insertions(+), 9 deletions(-) diff --git a/container-selinux.spec b/container-selinux.spec index 94c48ac..06bc22e 100644 --- a/container-selinux.spec +++ b/container-selinux.spec @@ -20,7 +20,7 @@ Name: container-selinux Epoch: 2 Version: 2.151.0 -Release: 3.dev.git%{shortcommit0}%{?dist} +Release: 4.dev.git%{shortcommit0}%{?dist} License: GPLv2 URL: %{git0} Summary: SELinux policies for container runtimes @@ -100,6 +100,10 @@ fi # Hooked up to autobuilder, please check with @lsm5 before updating %changelog +* Wed Dec 02 2020 Jindrich Novy - 2:2.151.0-4.dev.git5d3c461 +- remove bogus changelog dates emitted by build bot leading to build failure +- Related: #1715412 + * Wed Dec 02 2020 Jindrich Novy - 2:2.151.0-3.dev.git5d3c461 - remove %%fedora Epoch conditional - Related: #1899626 @@ -127,7 +131,7 @@ fi - bump to 2.146.0 - autobuilt 2908536 -* Thu Sep 10 18:12:36 UTC 2020 RH Container Bot - 2:2.145.0-2.dev.git464e922 +* Thu Sep 10 2020 RH Container Bot - 2:2.145.0-2.dev.git464e922 - bump to 2.145.0 - autobuilt 464e922 @@ -137,36 +141,36 @@ fi * Fri Aug 28 2020 Lokesh Mandvekar - 2:2.144.0-4.dev.git5d929d4 - Resolves: #1780129 - bump min selinux-policy -* Thu Aug 13 14:10:45 GMT 2020 RH Container Bot - 2:2.144.0-3.dev.git5d929d4 +* Thu Aug 13 2020 RH Container Bot - 2:2.144.0-3.dev.git5d929d4 - autobuilt 5d929d4 -* Wed Aug 12 15:10:04 GMT 2020 RH Container Bot - 2:2.144.0-2.dev.git746ea7a +* Wed Aug 12 2020 RH Container Bot - 2:2.144.0-2.dev.git746ea7a - bump to 2.144.0 - autobuilt 746ea7a -* Wed Aug 05 22:10:34 GMT 2020 RH Container Bot - 2:2.143.0-2.dev.gite2d5a9e +* Wed Aug 05 2020 RH Container Bot - 2:2.143.0-2.dev.gite2d5a9e - bump to 2.143.0 - autobuilt e2d5a9e * Mon Jul 27 2020 Fedora Release Engineering - 2:2.142.0-3.dev.gitfe6a25c - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild -* Fri Jul 24 11:09:45 GMT 2020 RH Container Bot - 2:2.142.0-2.dev.gitfe6a25c +* Fri Jul 24 2020 RH Container Bot - 2:2.142.0-2.dev.gitfe6a25c - bump to 2.142.0 - autobuilt fe6a25c -* Fri Jul 24 10:09:44 GMT 2020 RH Container Bot - 2:2.141.0-2.dev.git2750e78 +* Fri Jul 24 2020 RH Container Bot - 2:2.141.0-2.dev.git2750e78 - bump to 2.141.0 - autobuilt 2750e78 * Thu Jul 23 2020 Merlin Mathesius - 2:2.140.0-2.dev.git965c7fb - Cleanup usage of %%{epoch} macro to allow building for ELN -* Thu Jul 23 19:10:26 GMT 2020 RH Container Bot - 2:2.140.0-2.dev.git965c7fb +* Thu Jul 23 2020 RH Container Bot - 2:2.140.0-2.dev.git965c7fb - bump to 2.140.0 - autobuilt 965c7fb -* Sat Jul 18 11:10:04 GMT 2020 RH Container Bot - 2:2.139.0-2.dev.git8c26927 +* Sat Jul 18 2020 RH Container Bot - 2:2.139.0-2.dev.git8c26927 - bump to 2.139.0 - autobuilt 8c26927 From 6d70d472bf6151caa7ed48d189ab315416243163 Mon Sep 17 00:00:00 2001 From: RH Container Bot Date: Tue, 22 Dec 2020 14:02:31 +0000 Subject: [PATCH 014/160] container-selinux-2:2.152.0-2.dev.git1677bc4 - bump to 2.152.0 - autobuilt 1677bc4 Signed-off-by: RH Container Bot --- .gitignore | 1 + container-selinux.spec | 10 +++++++--- sources | 2 +- 3 files changed, 9 insertions(+), 4 deletions(-) diff --git a/.gitignore b/.gitignore index d15d71a..581e158 100644 --- a/.gitignore +++ b/.gitignore @@ -145,3 +145,4 @@ /container-selinux-9b3b66f.tar.gz /container-selinux-0ef4703.tar.gz /container-selinux-5d3c461.tar.gz +/container-selinux-1677bc4.tar.gz diff --git a/container-selinux.spec b/container-selinux.spec index 06bc22e..3585440 100644 --- a/container-selinux.spec +++ b/container-selinux.spec @@ -2,7 +2,7 @@ # container-selinux %global git0 https://github.com/containers/container-selinux -%global commit0 5d3c4619490947240f648330ce0c51a1a1830911 +%global commit0 1677bc42a369cf9a00b24f69dcaf1ededbd2ffdf %global shortcommit0 %(c=%{commit0}; echo ${c:0:7}) # container-selinux stuff (prefix with ds_ for version/release etc.) @@ -19,8 +19,8 @@ # Hooked up to autobuilder, please check with @lsm5 before updating Name: container-selinux Epoch: 2 -Version: 2.151.0 -Release: 4.dev.git%{shortcommit0}%{?dist} +Version: 2.152.0 +Release: 2.dev.git%{shortcommit0}%{?dist} License: GPLv2 URL: %{git0} Summary: SELinux policies for container runtimes @@ -100,6 +100,10 @@ fi # Hooked up to autobuilder, please check with @lsm5 before updating %changelog +* Tue Dec 22 2020 RH Container Bot - 2:2.152.0-2.dev.git1677bc4 +- bump to 2.152.0 +- autobuilt 1677bc4 + * Wed Dec 02 2020 Jindrich Novy - 2:2.151.0-4.dev.git5d3c461 - remove bogus changelog dates emitted by build bot leading to build failure - Related: #1715412 diff --git a/sources b/sources index 11f958f..565bbcf 100644 --- a/sources +++ b/sources @@ -1 +1 @@ -SHA512 (container-selinux-5d3c461.tar.gz) = ce19061ddfed5f84ecb386ce6885a7fe2ae7f93a742dddca5ad940d0716206bc1b21b6161591b5e24f9738711975d79d777ec35233c02d807e8cefb3aa26fa23 +SHA512 (container-selinux-1677bc4.tar.gz) = b6b25a179664a5259def704013de130ce18f9a9c468d98d0fc1cce38a6199ebbd8c0ff51401838a0f7983bcea932cff87d731646af051b4349fde8340d7483c8 From 79772309b01579c2437640ed5cf8a4e84994f998 Mon Sep 17 00:00:00 2001 From: RH Container Bot Date: Sat, 26 Dec 2020 11:32:22 +0000 Subject: [PATCH 015/160] container-selinux-2:2.153.0-2.dev.git8573f8d - bump to 2.153.0 - autobuilt 8573f8d Signed-off-by: RH Container Bot --- .gitignore | 1 + container-selinux.spec | 8 ++++++-- sources | 2 +- 3 files changed, 8 insertions(+), 3 deletions(-) diff --git a/.gitignore b/.gitignore index 581e158..c6ff94d 100644 --- a/.gitignore +++ b/.gitignore @@ -146,3 +146,4 @@ /container-selinux-0ef4703.tar.gz /container-selinux-5d3c461.tar.gz /container-selinux-1677bc4.tar.gz +/container-selinux-8573f8d.tar.gz diff --git a/container-selinux.spec b/container-selinux.spec index 3585440..07fda2d 100644 --- a/container-selinux.spec +++ b/container-selinux.spec @@ -2,7 +2,7 @@ # container-selinux %global git0 https://github.com/containers/container-selinux -%global commit0 1677bc42a369cf9a00b24f69dcaf1ededbd2ffdf +%global commit0 8573f8d3d0309eb47ebca051448f7279544a2694 %global shortcommit0 %(c=%{commit0}; echo ${c:0:7}) # container-selinux stuff (prefix with ds_ for version/release etc.) @@ -19,7 +19,7 @@ # Hooked up to autobuilder, please check with @lsm5 before updating Name: container-selinux Epoch: 2 -Version: 2.152.0 +Version: 2.153.0 Release: 2.dev.git%{shortcommit0}%{?dist} License: GPLv2 URL: %{git0} @@ -100,6 +100,10 @@ fi # Hooked up to autobuilder, please check with @lsm5 before updating %changelog +* Sat Dec 26 2020 RH Container Bot - 2:2.153.0-2.dev.git8573f8d +- bump to 2.153.0 +- autobuilt 8573f8d + * Tue Dec 22 2020 RH Container Bot - 2:2.152.0-2.dev.git1677bc4 - bump to 2.152.0 - autobuilt 1677bc4 diff --git a/sources b/sources index 565bbcf..2816bfe 100644 --- a/sources +++ b/sources @@ -1 +1 @@ -SHA512 (container-selinux-1677bc4.tar.gz) = b6b25a179664a5259def704013de130ce18f9a9c468d98d0fc1cce38a6199ebbd8c0ff51401838a0f7983bcea932cff87d731646af051b4349fde8340d7483c8 +SHA512 (container-selinux-8573f8d.tar.gz) = 0150a4d72c5a51dc50596f6bc267e30866ac43b8aa19414b72e4fdf09f641da47bbfb5e0d520413962d03583622173d1e66f4d04e69973bee1fca1e9a88a2ac8 From 9ddc5ee99669f01ecdb1fb3a61d6094084174171 Mon Sep 17 00:00:00 2001 From: RH Container Bot Date: Wed, 30 Dec 2020 17:32:20 +0000 Subject: [PATCH 016/160] container-selinux-2:2.154.0-2.dev.git54e2ac5 - bump to 2.154.0 - autobuilt 54e2ac5 Signed-off-by: RH Container Bot --- .gitignore | 1 + container-selinux.spec | 8 ++++++-- sources | 2 +- 3 files changed, 8 insertions(+), 3 deletions(-) diff --git a/.gitignore b/.gitignore index c6ff94d..b0a5b26 100644 --- a/.gitignore +++ b/.gitignore @@ -147,3 +147,4 @@ /container-selinux-5d3c461.tar.gz /container-selinux-1677bc4.tar.gz /container-selinux-8573f8d.tar.gz +/container-selinux-54e2ac5.tar.gz diff --git a/container-selinux.spec b/container-selinux.spec index 07fda2d..3745958 100644 --- a/container-selinux.spec +++ b/container-selinux.spec @@ -2,7 +2,7 @@ # container-selinux %global git0 https://github.com/containers/container-selinux -%global commit0 8573f8d3d0309eb47ebca051448f7279544a2694 +%global commit0 54e2ac50a9987badaf4430c50eb9ba24f220b4da %global shortcommit0 %(c=%{commit0}; echo ${c:0:7}) # container-selinux stuff (prefix with ds_ for version/release etc.) @@ -19,7 +19,7 @@ # Hooked up to autobuilder, please check with @lsm5 before updating Name: container-selinux Epoch: 2 -Version: 2.153.0 +Version: 2.154.0 Release: 2.dev.git%{shortcommit0}%{?dist} License: GPLv2 URL: %{git0} @@ -100,6 +100,10 @@ fi # Hooked up to autobuilder, please check with @lsm5 before updating %changelog +* Wed Dec 30 2020 RH Container Bot - 2:2.154.0-2.dev.git54e2ac5 +- bump to 2.154.0 +- autobuilt 54e2ac5 + * Sat Dec 26 2020 RH Container Bot - 2:2.153.0-2.dev.git8573f8d - bump to 2.153.0 - autobuilt 8573f8d diff --git a/sources b/sources index 2816bfe..4f0c301 100644 --- a/sources +++ b/sources @@ -1 +1 @@ -SHA512 (container-selinux-8573f8d.tar.gz) = 0150a4d72c5a51dc50596f6bc267e30866ac43b8aa19414b72e4fdf09f641da47bbfb5e0d520413962d03583622173d1e66f4d04e69973bee1fca1e9a88a2ac8 +SHA512 (container-selinux-54e2ac5.tar.gz) = be3412deefb17ade107509a7038e579e455f30067387758dbb6d13e5b247a1e321ed51c525973dfe252bc243e8fde7956591a69b6879aac129fd1a03a369e801 From 11e4b9b12aefc911d335ed9c0037c40a31a211f9 Mon Sep 17 00:00:00 2001 From: RH Container Bot Date: Tue, 5 Jan 2021 17:33:12 +0000 Subject: [PATCH 017/160] container-selinux-2:2.155.0-2.dev.git667f0f3 - bump to 2.155.0 - autobuilt 667f0f3 Signed-off-by: RH Container Bot --- .gitignore | 1 + container-selinux.spec | 8 ++++++-- sources | 2 +- 3 files changed, 8 insertions(+), 3 deletions(-) diff --git a/.gitignore b/.gitignore index b0a5b26..b827907 100644 --- a/.gitignore +++ b/.gitignore @@ -148,3 +148,4 @@ /container-selinux-1677bc4.tar.gz /container-selinux-8573f8d.tar.gz /container-selinux-54e2ac5.tar.gz +/container-selinux-667f0f3.tar.gz diff --git a/container-selinux.spec b/container-selinux.spec index 3745958..d6dd0dc 100644 --- a/container-selinux.spec +++ b/container-selinux.spec @@ -2,7 +2,7 @@ # container-selinux %global git0 https://github.com/containers/container-selinux -%global commit0 54e2ac50a9987badaf4430c50eb9ba24f220b4da +%global commit0 667f0f36f5328223b397e7f679e59f4a92c4f188 %global shortcommit0 %(c=%{commit0}; echo ${c:0:7}) # container-selinux stuff (prefix with ds_ for version/release etc.) @@ -19,7 +19,7 @@ # Hooked up to autobuilder, please check with @lsm5 before updating Name: container-selinux Epoch: 2 -Version: 2.154.0 +Version: 2.155.0 Release: 2.dev.git%{shortcommit0}%{?dist} License: GPLv2 URL: %{git0} @@ -100,6 +100,10 @@ fi # Hooked up to autobuilder, please check with @lsm5 before updating %changelog +* Tue Jan 5 2021 RH Container Bot - 2:2.155.0-2.dev.git667f0f3 +- bump to 2.155.0 +- autobuilt 667f0f3 + * Wed Dec 30 2020 RH Container Bot - 2:2.154.0-2.dev.git54e2ac5 - bump to 2.154.0 - autobuilt 54e2ac5 diff --git a/sources b/sources index 4f0c301..3bcf0a9 100644 --- a/sources +++ b/sources @@ -1 +1 @@ -SHA512 (container-selinux-54e2ac5.tar.gz) = be3412deefb17ade107509a7038e579e455f30067387758dbb6d13e5b247a1e321ed51c525973dfe252bc243e8fde7956591a69b6879aac129fd1a03a369e801 +SHA512 (container-selinux-667f0f3.tar.gz) = 4203da7b8ea6b3edfed77b46e7b74e97024abb9974a5e531b4f6d95c966d7da18fb689761e8a21de5f59f08360a62e4759b5a4f5009c2217edb98eb9d09878f8 From e50e815a3fd4e020b2c1ed5eacdf126061f6a5ec Mon Sep 17 00:00:00 2001 From: Lokesh Mandvekar Date: Mon, 11 Jan 2021 14:01:44 -0500 Subject: [PATCH 018/160] use built_tag macro to record latest tag Signed-off-by: Lokesh Mandvekar --- container-selinux.spec | 4 ++++ 1 file changed, 4 insertions(+) diff --git a/container-selinux.spec b/container-selinux.spec index d6dd0dc..87ad5dd 100644 --- a/container-selinux.spec +++ b/container-selinux.spec @@ -5,6 +5,10 @@ %global commit0 667f0f36f5328223b397e7f679e59f4a92c4f188 %global shortcommit0 %(c=%{commit0}; echo ${c:0:7}) +# Used for comparing with latest upstream tag +# to decide whether to autobuild (non-rawhide only) +%define built_tag v2.155.0 + # container-selinux stuff (prefix with ds_ for version/release etc.) # Some bits borrowed from the openstack-selinux package %global selinuxtype targeted From b449d2caab111e31c9ae86225bd67c9528337326 Mon Sep 17 00:00:00 2001 From: Ondrej Mosnacek Date: Tue, 3 Nov 2020 17:06:10 +0100 Subject: [PATCH 019/160] Depend on git-core instead of full git See: https://lists.fedoraproject.org/archives/list/devel@lists.fedoraproject.org/message/GS7GOUITUEASRELL7SKGLVJLGS3ZVJ45/ Signed-off-by: Ondrej Mosnacek --- container-selinux.spec | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/container-selinux.spec b/container-selinux.spec index 87ad5dd..e2f98cc 100644 --- a/container-selinux.spec +++ b/container-selinux.spec @@ -30,7 +30,7 @@ URL: %{git0} Summary: SELinux policies for container runtimes Source0: %{git0}/archive/%{commit0}/%{name}-%{shortcommit0}.tar.gz BuildArch: noarch -BuildRequires: git +BuildRequires: git-core BuildRequires: pkgconfig(systemd) BuildRequires: selinux-policy >= %_selinux_policy_version BuildRequires: selinux-policy-devel >= %_selinux_policy_version From 45f7c52422e613853508e56635c7c1e9dd91b841 Mon Sep 17 00:00:00 2001 From: Tom Stellard Date: Wed, 13 Jan 2021 01:03:05 +0000 Subject: [PATCH 020/160] Add BuildRequires: make https://fedoraproject.org/wiki/Changes/Remove_make_from_BuildRoot --- container-selinux.spec | 1 + 1 file changed, 1 insertion(+) diff --git a/container-selinux.spec b/container-selinux.spec index e2f98cc..5ab39a3 100644 --- a/container-selinux.spec +++ b/container-selinux.spec @@ -30,6 +30,7 @@ URL: %{git0} Summary: SELinux policies for container runtimes Source0: %{git0}/archive/%{commit0}/%{name}-%{shortcommit0}.tar.gz BuildArch: noarch +BuildRequires: make BuildRequires: git-core BuildRequires: pkgconfig(systemd) BuildRequires: selinux-policy >= %_selinux_policy_version From 0d6f91e1a0c9bd97e5728e94d4cce74b40ece9e2 Mon Sep 17 00:00:00 2001 From: RH Container Bot Date: Fri, 15 Jan 2021 17:32:57 +0000 Subject: [PATCH 021/160] container-selinux-2:2.156.0-2.dev.git75f193a - bump to 2.156.0 - autobuilt 75f193a Signed-off-by: RH Container Bot --- .gitignore | 1 + container-selinux.spec | 10 +++++++--- sources | 2 +- 3 files changed, 9 insertions(+), 4 deletions(-) diff --git a/.gitignore b/.gitignore index b827907..99dc5e5 100644 --- a/.gitignore +++ b/.gitignore @@ -149,3 +149,4 @@ /container-selinux-8573f8d.tar.gz /container-selinux-54e2ac5.tar.gz /container-selinux-667f0f3.tar.gz +/container-selinux-75f193a.tar.gz diff --git a/container-selinux.spec b/container-selinux.spec index 5ab39a3..a4f4c00 100644 --- a/container-selinux.spec +++ b/container-selinux.spec @@ -2,12 +2,12 @@ # container-selinux %global git0 https://github.com/containers/container-selinux -%global commit0 667f0f36f5328223b397e7f679e59f4a92c4f188 +%global commit0 75f193a0bfade31ecd1836bf28c588ccf461ae52 %global shortcommit0 %(c=%{commit0}; echo ${c:0:7}) # Used for comparing with latest upstream tag # to decide whether to autobuild (non-rawhide only) -%define built_tag v2.155.0 +%define built_tag v2.156.0 # container-selinux stuff (prefix with ds_ for version/release etc.) # Some bits borrowed from the openstack-selinux package @@ -23,7 +23,7 @@ # Hooked up to autobuilder, please check with @lsm5 before updating Name: container-selinux Epoch: 2 -Version: 2.155.0 +Version: 2.156.0 Release: 2.dev.git%{shortcommit0}%{?dist} License: GPLv2 URL: %{git0} @@ -105,6 +105,10 @@ fi # Hooked up to autobuilder, please check with @lsm5 before updating %changelog +* Fri Jan 15 2021 RH Container Bot - 2:2.156.0-2.dev.git75f193a +- bump to 2.156.0 +- autobuilt 75f193a + * Tue Jan 5 2021 RH Container Bot - 2:2.155.0-2.dev.git667f0f3 - bump to 2.155.0 - autobuilt 667f0f3 diff --git a/sources b/sources index 3bcf0a9..af61176 100644 --- a/sources +++ b/sources @@ -1 +1 @@ -SHA512 (container-selinux-667f0f3.tar.gz) = 4203da7b8ea6b3edfed77b46e7b74e97024abb9974a5e531b4f6d95c966d7da18fb689761e8a21de5f59f08360a62e4759b5a4f5009c2217edb98eb9d09878f8 +SHA512 (container-selinux-75f193a.tar.gz) = bae1807a776701fe25522d5966beb2dee0ef867ea4c64aef44050a1609c63c46c368e84f7d277eedef41b09159796dd5d6e65971c73003e9591668f5877daacf From 77cba8c62b8a7d95a45b38759abefc2283ae34bd Mon Sep 17 00:00:00 2001 From: Fedora Release Engineering Date: Tue, 26 Jan 2021 02:30:27 +0000 Subject: [PATCH 022/160] - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild Signed-off-by: Fedora Release Engineering --- container-selinux.spec | 5 ++++- 1 file changed, 4 insertions(+), 1 deletion(-) diff --git a/container-selinux.spec b/container-selinux.spec index a4f4c00..9bec3b5 100644 --- a/container-selinux.spec +++ b/container-selinux.spec @@ -24,7 +24,7 @@ Name: container-selinux Epoch: 2 Version: 2.156.0 -Release: 2.dev.git%{shortcommit0}%{?dist} +Release: 3.dev.git%{shortcommit0}%{?dist} License: GPLv2 URL: %{git0} Summary: SELinux policies for container runtimes @@ -105,6 +105,9 @@ fi # Hooked up to autobuilder, please check with @lsm5 before updating %changelog +* Tue Jan 26 2021 Fedora Release Engineering - 2:2.156.0-3.dev.git75f193a +- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild + * Fri Jan 15 2021 RH Container Bot - 2:2.156.0-2.dev.git75f193a - bump to 2.156.0 - autobuilt 75f193a From 75547d8ddf60a0561ee041e8f3856f54940ff26c Mon Sep 17 00:00:00 2001 From: RH Container Bot Date: Tue, 2 Feb 2021 19:33:00 +0000 Subject: [PATCH 023/160] container-selinux-2:2.157.0-2.dev.gitf330e81 - bump to 2.157.0 - autobuilt f330e81 Signed-off-by: RH Container Bot --- .gitignore | 1 + container-selinux.spec | 10 +++++++--- sources | 2 +- 3 files changed, 9 insertions(+), 4 deletions(-) diff --git a/.gitignore b/.gitignore index 99dc5e5..0b88070 100644 --- a/.gitignore +++ b/.gitignore @@ -150,3 +150,4 @@ /container-selinux-54e2ac5.tar.gz /container-selinux-667f0f3.tar.gz /container-selinux-75f193a.tar.gz +/container-selinux-f330e81.tar.gz diff --git a/container-selinux.spec b/container-selinux.spec index 9bec3b5..831e6d7 100644 --- a/container-selinux.spec +++ b/container-selinux.spec @@ -2,7 +2,7 @@ # container-selinux %global git0 https://github.com/containers/container-selinux -%global commit0 75f193a0bfade31ecd1836bf28c588ccf461ae52 +%global commit0 f330e81c7e1fb9b2bde8618ada304565aab59038 %global shortcommit0 %(c=%{commit0}; echo ${c:0:7}) # Used for comparing with latest upstream tag @@ -23,8 +23,8 @@ # Hooked up to autobuilder, please check with @lsm5 before updating Name: container-selinux Epoch: 2 -Version: 2.156.0 -Release: 3.dev.git%{shortcommit0}%{?dist} +Version: 2.157.0 +Release: 2.dev.git%{shortcommit0}%{?dist} License: GPLv2 URL: %{git0} Summary: SELinux policies for container runtimes @@ -105,6 +105,10 @@ fi # Hooked up to autobuilder, please check with @lsm5 before updating %changelog +* Tue Feb 02 2021 RH Container Bot - 2:2.157.0-2.dev.gitf330e81 +- bump to 2.157.0 +- autobuilt f330e81 + * Tue Jan 26 2021 Fedora Release Engineering - 2:2.156.0-3.dev.git75f193a - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild diff --git a/sources b/sources index af61176..e28924c 100644 --- a/sources +++ b/sources @@ -1 +1 @@ -SHA512 (container-selinux-75f193a.tar.gz) = bae1807a776701fe25522d5966beb2dee0ef867ea4c64aef44050a1609c63c46c368e84f7d277eedef41b09159796dd5d6e65971c73003e9591668f5877daacf +SHA512 (container-selinux-f330e81.tar.gz) = 463a3eb9f428c600894f2c59f03ffa4b941218613152f367b2ccb6cfc7a76ffb87b39cd9b2acf39bba18b82192604dc5bcb349f97bd0c4aab7a7d8023da21488 From 13d8074bca5ae33f899feea63435d7cc81256d82 Mon Sep 17 00:00:00 2001 From: RH Container Bot Date: Mon, 8 Feb 2021 19:25:49 +0000 Subject: [PATCH 024/160] container-selinux-2:2.157.0-3.dev.git6d13bf9 - autobuilt 6d13bf9 Signed-off-by: RH Container Bot --- .gitignore | 1 + container-selinux.spec | 7 +++++-- sources | 2 +- 3 files changed, 7 insertions(+), 3 deletions(-) diff --git a/.gitignore b/.gitignore index 0b88070..f19b7fe 100644 --- a/.gitignore +++ b/.gitignore @@ -151,3 +151,4 @@ /container-selinux-667f0f3.tar.gz /container-selinux-75f193a.tar.gz /container-selinux-f330e81.tar.gz +/container-selinux-6d13bf9.tar.gz diff --git a/container-selinux.spec b/container-selinux.spec index 831e6d7..9c6abbb 100644 --- a/container-selinux.spec +++ b/container-selinux.spec @@ -2,7 +2,7 @@ # container-selinux %global git0 https://github.com/containers/container-selinux -%global commit0 f330e81c7e1fb9b2bde8618ada304565aab59038 +%global commit0 6d13bf9ff9f45431f064ba63794fa97d565641d9 %global shortcommit0 %(c=%{commit0}; echo ${c:0:7}) # Used for comparing with latest upstream tag @@ -24,7 +24,7 @@ Name: container-selinux Epoch: 2 Version: 2.157.0 -Release: 2.dev.git%{shortcommit0}%{?dist} +Release: 3.dev.git%{shortcommit0}%{?dist} License: GPLv2 URL: %{git0} Summary: SELinux policies for container runtimes @@ -105,6 +105,9 @@ fi # Hooked up to autobuilder, please check with @lsm5 before updating %changelog +* Mon Feb 08 2021 RH Container Bot - 2:2.157.0-3.dev.git6d13bf9 +- autobuilt 6d13bf9 + * Tue Feb 02 2021 RH Container Bot - 2:2.157.0-2.dev.gitf330e81 - bump to 2.157.0 - autobuilt f330e81 diff --git a/sources b/sources index e28924c..1bb3aa7 100644 --- a/sources +++ b/sources @@ -1 +1 @@ -SHA512 (container-selinux-f330e81.tar.gz) = 463a3eb9f428c600894f2c59f03ffa4b941218613152f367b2ccb6cfc7a76ffb87b39cd9b2acf39bba18b82192604dc5bcb349f97bd0c4aab7a7d8023da21488 +SHA512 (container-selinux-6d13bf9.tar.gz) = c48b94bb8ec965b8b1222d87d335840649b7b62a8a8e626283f0b2c439da75dcd2119e9f39fdfcf72f36f3fbfe9609bea094e43d901be81b4302791dff454526 From e85faff4485234c18e04d143df406a1649f53375 Mon Sep 17 00:00:00 2001 From: RH Container Bot Date: Thu, 11 Feb 2021 22:32:55 +0000 Subject: [PATCH 025/160] container-selinux-2:2.158.0-2.dev.giteb6dad0 - bump to 2.158.0 - autobuilt eb6dad0 Signed-off-by: RH Container Bot --- .gitignore | 1 + container-selinux.spec | 12 ++++++++---- sources | 2 +- 3 files changed, 10 insertions(+), 5 deletions(-) diff --git a/.gitignore b/.gitignore index f19b7fe..363bdba 100644 --- a/.gitignore +++ b/.gitignore @@ -152,3 +152,4 @@ /container-selinux-75f193a.tar.gz /container-selinux-f330e81.tar.gz /container-selinux-6d13bf9.tar.gz +/container-selinux-eb6dad0.tar.gz diff --git a/container-selinux.spec b/container-selinux.spec index 9c6abbb..11848f8 100644 --- a/container-selinux.spec +++ b/container-selinux.spec @@ -2,12 +2,12 @@ # container-selinux %global git0 https://github.com/containers/container-selinux -%global commit0 6d13bf9ff9f45431f064ba63794fa97d565641d9 +%global commit0 eb6dad035270c30edf211275f705f4f364c0c08e %global shortcommit0 %(c=%{commit0}; echo ${c:0:7}) # Used for comparing with latest upstream tag # to decide whether to autobuild (non-rawhide only) -%define built_tag v2.156.0 +%define built_tag v2.158.0 # container-selinux stuff (prefix with ds_ for version/release etc.) # Some bits borrowed from the openstack-selinux package @@ -23,8 +23,8 @@ # Hooked up to autobuilder, please check with @lsm5 before updating Name: container-selinux Epoch: 2 -Version: 2.157.0 -Release: 3.dev.git%{shortcommit0}%{?dist} +Version: 2.158.0 +Release: 2.dev.git%{shortcommit0}%{?dist} License: GPLv2 URL: %{git0} Summary: SELinux policies for container runtimes @@ -105,6 +105,10 @@ fi # Hooked up to autobuilder, please check with @lsm5 before updating %changelog +* Thu Feb 11 2021 RH Container Bot - 2:2.158.0-2.dev.giteb6dad0 +- bump to 2.158.0 +- autobuilt eb6dad0 + * Mon Feb 08 2021 RH Container Bot - 2:2.157.0-3.dev.git6d13bf9 - autobuilt 6d13bf9 diff --git a/sources b/sources index 1bb3aa7..b313f5c 100644 --- a/sources +++ b/sources @@ -1 +1 @@ -SHA512 (container-selinux-6d13bf9.tar.gz) = c48b94bb8ec965b8b1222d87d335840649b7b62a8a8e626283f0b2c439da75dcd2119e9f39fdfcf72f36f3fbfe9609bea094e43d901be81b4302791dff454526 +SHA512 (container-selinux-eb6dad0.tar.gz) = b6b63ee817eaff0c045d25ab9b6b5ff8898fd09291b2f7e51ff93bb01de808c749ffd8d41dd22f296a323d6a57cd6817696f00c9459f08b5fd652665402e3a09 From ce7f9dfa88038d2fd6c290d859378797ebff4aa8 Mon Sep 17 00:00:00 2001 From: RH Container Bot Date: Fri, 12 Feb 2021 12:32:56 +0000 Subject: [PATCH 026/160] container-selinux-2:2.158.0-3.dev.gitaeb85c4 - autobuilt aeb85c4 Signed-off-by: RH Container Bot --- .gitignore | 1 + container-selinux.spec | 7 +++++-- sources | 2 +- 3 files changed, 7 insertions(+), 3 deletions(-) diff --git a/.gitignore b/.gitignore index 363bdba..4bd29d2 100644 --- a/.gitignore +++ b/.gitignore @@ -153,3 +153,4 @@ /container-selinux-f330e81.tar.gz /container-selinux-6d13bf9.tar.gz /container-selinux-eb6dad0.tar.gz +/container-selinux-aeb85c4.tar.gz diff --git a/container-selinux.spec b/container-selinux.spec index 11848f8..9158c38 100644 --- a/container-selinux.spec +++ b/container-selinux.spec @@ -2,7 +2,7 @@ # container-selinux %global git0 https://github.com/containers/container-selinux -%global commit0 eb6dad035270c30edf211275f705f4f364c0c08e +%global commit0 aeb85c4fb9535cdc806df2058a4508f8d63be418 %global shortcommit0 %(c=%{commit0}; echo ${c:0:7}) # Used for comparing with latest upstream tag @@ -24,7 +24,7 @@ Name: container-selinux Epoch: 2 Version: 2.158.0 -Release: 2.dev.git%{shortcommit0}%{?dist} +Release: 3.dev.git%{shortcommit0}%{?dist} License: GPLv2 URL: %{git0} Summary: SELinux policies for container runtimes @@ -105,6 +105,9 @@ fi # Hooked up to autobuilder, please check with @lsm5 before updating %changelog +* Fri Feb 12 2021 RH Container Bot - 2:2.158.0-3.dev.gitaeb85c4 +- autobuilt aeb85c4 + * Thu Feb 11 2021 RH Container Bot - 2:2.158.0-2.dev.giteb6dad0 - bump to 2.158.0 - autobuilt eb6dad0 diff --git a/sources b/sources index b313f5c..6bd6ca2 100644 --- a/sources +++ b/sources @@ -1 +1 @@ -SHA512 (container-selinux-eb6dad0.tar.gz) = b6b63ee817eaff0c045d25ab9b6b5ff8898fd09291b2f7e51ff93bb01de808c749ffd8d41dd22f296a323d6a57cd6817696f00c9459f08b5fd652665402e3a09 +SHA512 (container-selinux-aeb85c4.tar.gz) = 8370fb470b008575d73d14bde52cf6a7bc790f7d407d8c23f23ce20cd1cf78c010d4698d294f393f70b4d211e88290d2affadbd08511a124abfd5f24a6b59ca2 From c3b175e6d97c7a102aa22a43ce10793600e2213e Mon Sep 17 00:00:00 2001 From: RH Container Bot Date: Tue, 16 Feb 2021 23:02:11 +0000 Subject: [PATCH 027/160] container-selinux-2:2.158.0-4.dev.gite78ac4f - autobuilt e78ac4f Signed-off-by: RH Container Bot --- .gitignore | 1 + container-selinux.spec | 7 +++++-- sources | 2 +- 3 files changed, 7 insertions(+), 3 deletions(-) diff --git a/.gitignore b/.gitignore index 4bd29d2..d82ed83 100644 --- a/.gitignore +++ b/.gitignore @@ -154,3 +154,4 @@ /container-selinux-6d13bf9.tar.gz /container-selinux-eb6dad0.tar.gz /container-selinux-aeb85c4.tar.gz +/container-selinux-e78ac4f.tar.gz diff --git a/container-selinux.spec b/container-selinux.spec index 9158c38..42b3b14 100644 --- a/container-selinux.spec +++ b/container-selinux.spec @@ -2,7 +2,7 @@ # container-selinux %global git0 https://github.com/containers/container-selinux -%global commit0 aeb85c4fb9535cdc806df2058a4508f8d63be418 +%global commit0 e78ac4f5b982112a1f018fb5964c3a8b27f0b65d %global shortcommit0 %(c=%{commit0}; echo ${c:0:7}) # Used for comparing with latest upstream tag @@ -24,7 +24,7 @@ Name: container-selinux Epoch: 2 Version: 2.158.0 -Release: 3.dev.git%{shortcommit0}%{?dist} +Release: 4.dev.git%{shortcommit0}%{?dist} License: GPLv2 URL: %{git0} Summary: SELinux policies for container runtimes @@ -105,6 +105,9 @@ fi # Hooked up to autobuilder, please check with @lsm5 before updating %changelog +* Tue Feb 16 2021 RH Container Bot - 2:2.158.0-4.dev.gite78ac4f +- autobuilt e78ac4f + * Fri Feb 12 2021 RH Container Bot - 2:2.158.0-3.dev.gitaeb85c4 - autobuilt aeb85c4 diff --git a/sources b/sources index 6bd6ca2..62b5cae 100644 --- a/sources +++ b/sources @@ -1 +1 @@ -SHA512 (container-selinux-aeb85c4.tar.gz) = 8370fb470b008575d73d14bde52cf6a7bc790f7d407d8c23f23ce20cd1cf78c010d4698d294f393f70b4d211e88290d2affadbd08511a124abfd5f24a6b59ca2 +SHA512 (container-selinux-e78ac4f.tar.gz) = 82417b07ade92711563ece1a7b0df0c33d035507bf28e93f9d613e7e3b92a288960929ed00063fcc77fd09acddf504f8a04a3fadc61d35d4287a7569bec84116 From dca5282acc295b5a00dbadc68cfa51d8f975b7bc Mon Sep 17 00:00:00 2001 From: Daniel J Walsh Date: Wed, 17 Feb 2021 15:01:39 -0500 Subject: [PATCH 028/160] Rebuilt to use latest selinux-policy interfaces --- container-selinux.spec | 5 ++++- 1 file changed, 4 insertions(+), 1 deletion(-) diff --git a/container-selinux.spec b/container-selinux.spec index 42b3b14..c19a7d0 100644 --- a/container-selinux.spec +++ b/container-selinux.spec @@ -24,7 +24,7 @@ Name: container-selinux Epoch: 2 Version: 2.158.0 -Release: 4.dev.git%{shortcommit0}%{?dist} +Release: 5.dev.git%{shortcommit0}%{?dist} License: GPLv2 URL: %{git0} Summary: SELinux policies for container runtimes @@ -105,6 +105,9 @@ fi # Hooked up to autobuilder, please check with @lsm5 before updating %changelog +* Wed Feb 17 2021 Dan Walsh - 2:2.158.0-5.dev.gite78ac4f +- Rebuilt to use latest selinux-policy interfaces + * Tue Feb 16 2021 RH Container Bot - 2:2.158.0-4.dev.gite78ac4f - autobuilt e78ac4f From 9cb5b10e56aa2220178acbc571d50e28a45b1bd1 Mon Sep 17 00:00:00 2001 From: RH Container Bot Date: Mon, 29 Mar 2021 13:18:04 +0000 Subject: [PATCH 029/160] container-selinux-2:2.159.0-2.dev.gitd89a599 - bump to 2.159.0 - autobuilt d89a599 Signed-off-by: RH Container Bot --- .gitignore | 1 + container-selinux.spec | 12 ++++++++---- sources | 2 +- 3 files changed, 10 insertions(+), 5 deletions(-) diff --git a/.gitignore b/.gitignore index d82ed83..8699d67 100644 --- a/.gitignore +++ b/.gitignore @@ -155,3 +155,4 @@ /container-selinux-eb6dad0.tar.gz /container-selinux-aeb85c4.tar.gz /container-selinux-e78ac4f.tar.gz +/container-selinux-d89a599.tar.gz diff --git a/container-selinux.spec b/container-selinux.spec index c19a7d0..18b65d3 100644 --- a/container-selinux.spec +++ b/container-selinux.spec @@ -2,12 +2,12 @@ # container-selinux %global git0 https://github.com/containers/container-selinux -%global commit0 e78ac4f5b982112a1f018fb5964c3a8b27f0b65d +%global commit0 d89a599e3d3c362ec178600ed04c72f337c10d28 %global shortcommit0 %(c=%{commit0}; echo ${c:0:7}) # Used for comparing with latest upstream tag # to decide whether to autobuild (non-rawhide only) -%define built_tag v2.158.0 +%define built_tag v2.159.0 # container-selinux stuff (prefix with ds_ for version/release etc.) # Some bits borrowed from the openstack-selinux package @@ -23,8 +23,8 @@ # Hooked up to autobuilder, please check with @lsm5 before updating Name: container-selinux Epoch: 2 -Version: 2.158.0 -Release: 5.dev.git%{shortcommit0}%{?dist} +Version: 2.159.0 +Release: 2.dev.git%{shortcommit0}%{?dist} License: GPLv2 URL: %{git0} Summary: SELinux policies for container runtimes @@ -105,6 +105,10 @@ fi # Hooked up to autobuilder, please check with @lsm5 before updating %changelog +* Mon Mar 29 2021 RH Container Bot - 2:2.159.0-2.dev.gitd89a599 +- bump to 2.159.0 +- autobuilt d89a599 + * Wed Feb 17 2021 Dan Walsh - 2:2.158.0-5.dev.gite78ac4f - Rebuilt to use latest selinux-policy interfaces diff --git a/sources b/sources index 62b5cae..4ed4415 100644 --- a/sources +++ b/sources @@ -1 +1 @@ -SHA512 (container-selinux-e78ac4f.tar.gz) = 82417b07ade92711563ece1a7b0df0c33d035507bf28e93f9d613e7e3b92a288960929ed00063fcc77fd09acddf504f8a04a3fadc61d35d4287a7569bec84116 +SHA512 (container-selinux-d89a599.tar.gz) = 63e2b788446df0cea024cb21249fd7368517a9bfe8a55eb1afce429208f50b47c458dd3dff807be517d20ca5413116a924f284f886ec4f5f81295e1360984827 From a0073075174d138039858277ae029345b94748eb Mon Sep 17 00:00:00 2001 From: Lokesh Mandvekar Date: Wed, 31 Mar 2021 14:39:05 -0400 Subject: [PATCH 030/160] container-selinux-2:2.160.0-2.dev.gitc9f0cb6 - bump to v2.160.0 Signed-off-by: Lokesh Mandvekar --- .gitignore | 2 ++ container-selinux.spec | 9 ++++++--- sources | 2 +- 3 files changed, 9 insertions(+), 4 deletions(-) diff --git a/.gitignore b/.gitignore index 8699d67..5dcdd5a 100644 --- a/.gitignore +++ b/.gitignore @@ -156,3 +156,5 @@ /container-selinux-aeb85c4.tar.gz /container-selinux-e78ac4f.tar.gz /container-selinux-d89a599.tar.gz +/container-selinux-c9f0cb6.tar.gz +/v2.155.0.tar.gz diff --git a/container-selinux.spec b/container-selinux.spec index 18b65d3..a3fc706 100644 --- a/container-selinux.spec +++ b/container-selinux.spec @@ -2,12 +2,12 @@ # container-selinux %global git0 https://github.com/containers/container-selinux -%global commit0 d89a599e3d3c362ec178600ed04c72f337c10d28 +%global commit0 c9f0cb6172a1d37820157d04d4bee7dfa656fcc3 %global shortcommit0 %(c=%{commit0}; echo ${c:0:7}) # Used for comparing with latest upstream tag # to decide whether to autobuild (non-rawhide only) -%define built_tag v2.159.0 +%define built_tag v2.160.0 # container-selinux stuff (prefix with ds_ for version/release etc.) # Some bits borrowed from the openstack-selinux package @@ -23,7 +23,7 @@ # Hooked up to autobuilder, please check with @lsm5 before updating Name: container-selinux Epoch: 2 -Version: 2.159.0 +Version: 2.160.0 Release: 2.dev.git%{shortcommit0}%{?dist} License: GPLv2 URL: %{git0} @@ -105,6 +105,9 @@ fi # Hooked up to autobuilder, please check with @lsm5 before updating %changelog +* Wed Mar 31 2021 Lokesh Mandvekar - 2:2.160.0-2.dev.gitc9f0cb6 +- bump to v2.160.0 + * Mon Mar 29 2021 RH Container Bot - 2:2.159.0-2.dev.gitd89a599 - bump to 2.159.0 - autobuilt d89a599 diff --git a/sources b/sources index 4ed4415..51c9eea 100644 --- a/sources +++ b/sources @@ -1 +1 @@ -SHA512 (container-selinux-d89a599.tar.gz) = 63e2b788446df0cea024cb21249fd7368517a9bfe8a55eb1afce429208f50b47c458dd3dff807be517d20ca5413116a924f284f886ec4f5f81295e1360984827 +SHA512 (container-selinux-c9f0cb6.tar.gz) = d41478411ed9363cf952580461e6cf793dff21254ecff6ff8e0a655b94c0d6365faf16917413852d339014ffff6c9a70991bed8a71aee71e36ca9beaa3bf0f47 From 5b38b93dd25f61a0000e02a30bbe4ba946065c6e Mon Sep 17 00:00:00 2001 From: RH Container Bot Date: Tue, 20 Apr 2021 14:53:17 +0000 Subject: [PATCH 031/160] container-selinux-2:2.160.0-3.dev.git5a60716 - autobuilt 5a60716 Signed-off-by: RH Container Bot --- .gitignore | 1 + container-selinux.spec | 7 +++++-- sources | 2 +- 3 files changed, 7 insertions(+), 3 deletions(-) diff --git a/.gitignore b/.gitignore index 5dcdd5a..86cc6c6 100644 --- a/.gitignore +++ b/.gitignore @@ -158,3 +158,4 @@ /container-selinux-d89a599.tar.gz /container-selinux-c9f0cb6.tar.gz /v2.155.0.tar.gz +/container-selinux-5a60716.tar.gz diff --git a/container-selinux.spec b/container-selinux.spec index a3fc706..0b9ffc2 100644 --- a/container-selinux.spec +++ b/container-selinux.spec @@ -2,7 +2,7 @@ # container-selinux %global git0 https://github.com/containers/container-selinux -%global commit0 c9f0cb6172a1d37820157d04d4bee7dfa656fcc3 +%global commit0 5a6071656f75cc7794ea8edbe9487716b361ce7e %global shortcommit0 %(c=%{commit0}; echo ${c:0:7}) # Used for comparing with latest upstream tag @@ -24,7 +24,7 @@ Name: container-selinux Epoch: 2 Version: 2.160.0 -Release: 2.dev.git%{shortcommit0}%{?dist} +Release: 3.dev.git%{shortcommit0}%{?dist} License: GPLv2 URL: %{git0} Summary: SELinux policies for container runtimes @@ -105,6 +105,9 @@ fi # Hooked up to autobuilder, please check with @lsm5 before updating %changelog +* Tue Apr 20 2021 RH Container Bot - 2:2.160.0-3.dev.git5a60716 +- autobuilt 5a60716 + * Wed Mar 31 2021 Lokesh Mandvekar - 2:2.160.0-2.dev.gitc9f0cb6 - bump to v2.160.0 diff --git a/sources b/sources index 51c9eea..108b481 100644 --- a/sources +++ b/sources @@ -1 +1 @@ -SHA512 (container-selinux-c9f0cb6.tar.gz) = d41478411ed9363cf952580461e6cf793dff21254ecff6ff8e0a655b94c0d6365faf16917413852d339014ffff6c9a70991bed8a71aee71e36ca9beaa3bf0f47 +SHA512 (container-selinux-5a60716.tar.gz) = e90d5e91511ff3662bc9f9c70065fccc3b2fd2087df87ad56f377f65eaa7e3d7c51c5a0661ee72490c574f26d0e653bbff9dd7ef1585f21f2ef566edc7ed3b09 From 1b9e9a7937b3b93bc5ab076afab2d50b30c966ec Mon Sep 17 00:00:00 2001 From: RH Container Bot Date: Wed, 28 Apr 2021 13:42:16 +0000 Subject: [PATCH 032/160] container-selinux-2:2.117.0-2.dev.gitbfde70a - bump to 2.117.0 - autobuilt bfde70a Signed-off-by: RH Container Bot --- container-selinux.spec | 12 ++++++++---- sources | 2 +- 2 files changed, 9 insertions(+), 5 deletions(-) diff --git a/container-selinux.spec b/container-selinux.spec index 0b9ffc2..3ca186b 100644 --- a/container-selinux.spec +++ b/container-selinux.spec @@ -2,12 +2,12 @@ # container-selinux %global git0 https://github.com/containers/container-selinux -%global commit0 5a6071656f75cc7794ea8edbe9487716b361ce7e +%global commit0 bfde70abeab100e944dcfd439859fbae967d8b39 %global shortcommit0 %(c=%{commit0}; echo ${c:0:7}) # Used for comparing with latest upstream tag # to decide whether to autobuild (non-rawhide only) -%define built_tag v2.160.0 +%define built_tag v2.160.2 # container-selinux stuff (prefix with ds_ for version/release etc.) # Some bits borrowed from the openstack-selinux package @@ -23,8 +23,8 @@ # Hooked up to autobuilder, please check with @lsm5 before updating Name: container-selinux Epoch: 2 -Version: 2.160.0 -Release: 3.dev.git%{shortcommit0}%{?dist} +Version: 2.117.0 +Release: 2.dev.git%{shortcommit0}%{?dist} License: GPLv2 URL: %{git0} Summary: SELinux policies for container runtimes @@ -105,6 +105,10 @@ fi # Hooked up to autobuilder, please check with @lsm5 before updating %changelog +* Wed Apr 28 2021 RH Container Bot - 2:2.117.0-2.dev.gitbfde70a +- bump to 2.117.0 +- autobuilt bfde70a + * Tue Apr 20 2021 RH Container Bot - 2:2.160.0-3.dev.git5a60716 - autobuilt 5a60716 diff --git a/sources b/sources index 108b481..e25d105 100644 --- a/sources +++ b/sources @@ -1 +1 @@ -SHA512 (container-selinux-5a60716.tar.gz) = e90d5e91511ff3662bc9f9c70065fccc3b2fd2087df87ad56f377f65eaa7e3d7c51c5a0661ee72490c574f26d0e653bbff9dd7ef1585f21f2ef566edc7ed3b09 +SHA512 (container-selinux-bfde70a.tar.gz) = f8e963b9688f65b768e6b0dcb427fe9f47397e70f4889166d8c6eeccbeb9dd393acfa19586870e367ce5eea1d1d2d15ec9acb6fdb7e108c772be137a76ff4b45 From fad696781c016aa1b49cbf12d2fe701426fcecd1 Mon Sep 17 00:00:00 2001 From: Lokesh Mandvekar Date: Thu, 6 May 2021 08:24:08 -0400 Subject: [PATCH 033/160] Revert "container-selinux-2:2.117.0-2.dev.gitbfde70a" This reverts commit 1b9e9a7937b3b93bc5ab076afab2d50b30c966ec. Bad commit --- container-selinux.spec | 12 ++++-------- sources | 2 +- 2 files changed, 5 insertions(+), 9 deletions(-) diff --git a/container-selinux.spec b/container-selinux.spec index 3ca186b..0b9ffc2 100644 --- a/container-selinux.spec +++ b/container-selinux.spec @@ -2,12 +2,12 @@ # container-selinux %global git0 https://github.com/containers/container-selinux -%global commit0 bfde70abeab100e944dcfd439859fbae967d8b39 +%global commit0 5a6071656f75cc7794ea8edbe9487716b361ce7e %global shortcommit0 %(c=%{commit0}; echo ${c:0:7}) # Used for comparing with latest upstream tag # to decide whether to autobuild (non-rawhide only) -%define built_tag v2.160.2 +%define built_tag v2.160.0 # container-selinux stuff (prefix with ds_ for version/release etc.) # Some bits borrowed from the openstack-selinux package @@ -23,8 +23,8 @@ # Hooked up to autobuilder, please check with @lsm5 before updating Name: container-selinux Epoch: 2 -Version: 2.117.0 -Release: 2.dev.git%{shortcommit0}%{?dist} +Version: 2.160.0 +Release: 3.dev.git%{shortcommit0}%{?dist} License: GPLv2 URL: %{git0} Summary: SELinux policies for container runtimes @@ -105,10 +105,6 @@ fi # Hooked up to autobuilder, please check with @lsm5 before updating %changelog -* Wed Apr 28 2021 RH Container Bot - 2:2.117.0-2.dev.gitbfde70a -- bump to 2.117.0 -- autobuilt bfde70a - * Tue Apr 20 2021 RH Container Bot - 2:2.160.0-3.dev.git5a60716 - autobuilt 5a60716 diff --git a/sources b/sources index e25d105..108b481 100644 --- a/sources +++ b/sources @@ -1 +1 @@ -SHA512 (container-selinux-bfde70a.tar.gz) = f8e963b9688f65b768e6b0dcb427fe9f47397e70f4889166d8c6eeccbeb9dd393acfa19586870e367ce5eea1d1d2d15ec9acb6fdb7e108c772be137a76ff4b45 +SHA512 (container-selinux-5a60716.tar.gz) = e90d5e91511ff3662bc9f9c70065fccc3b2fd2087df87ad56f377f65eaa7e3d7c51c5a0661ee72490c574f26d0e653bbff9dd7ef1585f21f2ef566edc7ed3b09 From c208678fca1fc7b4b96e5678119531606065ec02 Mon Sep 17 00:00:00 2001 From: RH Container Bot Date: Fri, 7 May 2021 15:39:13 +0000 Subject: [PATCH 034/160] container-selinux-2:2.161.1-2.dev.gite1092cd - bump to 2.161.1 - autobuilt e1092cd Signed-off-by: RH Container Bot --- .gitignore | 1 + container-selinux.spec | 12 ++++++++---- sources | 2 +- 3 files changed, 10 insertions(+), 5 deletions(-) diff --git a/.gitignore b/.gitignore index 86cc6c6..33c2a3c 100644 --- a/.gitignore +++ b/.gitignore @@ -159,3 +159,4 @@ /container-selinux-c9f0cb6.tar.gz /v2.155.0.tar.gz /container-selinux-5a60716.tar.gz +/container-selinux-e1092cd.tar.gz diff --git a/container-selinux.spec b/container-selinux.spec index 0b9ffc2..a2fb89f 100644 --- a/container-selinux.spec +++ b/container-selinux.spec @@ -2,12 +2,12 @@ # container-selinux %global git0 https://github.com/containers/container-selinux -%global commit0 5a6071656f75cc7794ea8edbe9487716b361ce7e +%global commit0 e1092cd2cb0891de02a70447e6e68adbf6e15c8c %global shortcommit0 %(c=%{commit0}; echo ${c:0:7}) # Used for comparing with latest upstream tag # to decide whether to autobuild (non-rawhide only) -%define built_tag v2.160.0 +%define built_tag v2.161.1 # container-selinux stuff (prefix with ds_ for version/release etc.) # Some bits borrowed from the openstack-selinux package @@ -23,8 +23,8 @@ # Hooked up to autobuilder, please check with @lsm5 before updating Name: container-selinux Epoch: 2 -Version: 2.160.0 -Release: 3.dev.git%{shortcommit0}%{?dist} +Version: 2.161.1 +Release: 2.dev.git%{shortcommit0}%{?dist} License: GPLv2 URL: %{git0} Summary: SELinux policies for container runtimes @@ -105,6 +105,10 @@ fi # Hooked up to autobuilder, please check with @lsm5 before updating %changelog +* Fri May 07 2021 RH Container Bot - 2:2.161.1-2.dev.gite1092cd +- bump to 2.161.1 +- autobuilt e1092cd + * Tue Apr 20 2021 RH Container Bot - 2:2.160.0-3.dev.git5a60716 - autobuilt 5a60716 diff --git a/sources b/sources index 108b481..c6bf523 100644 --- a/sources +++ b/sources @@ -1 +1 @@ -SHA512 (container-selinux-5a60716.tar.gz) = e90d5e91511ff3662bc9f9c70065fccc3b2fd2087df87ad56f377f65eaa7e3d7c51c5a0661ee72490c574f26d0e653bbff9dd7ef1585f21f2ef566edc7ed3b09 +SHA512 (container-selinux-e1092cd.tar.gz) = ef107d442d03b143dcb7975d34bad0ca2425af1ba053ded64b475df9940e74f2ac9a1da63d631d4a30af84c51268bc3d976bc7cbe6d48a967ed9d0fbf49b53b1 From 7758bc735c30bebe8eeeddc5430dcd0af76ca093 Mon Sep 17 00:00:00 2001 From: RH Container Bot Date: Wed, 12 May 2021 04:10:43 +0000 Subject: [PATCH 035/160] container-selinux-2:2.162.0-2.dev.gitda28288 - bump to 2.162.0 - autobuilt da28288 Signed-off-by: RH Container Bot --- .gitignore | 1 + container-selinux.spec | 10 +++++++--- sources | 2 +- 3 files changed, 9 insertions(+), 4 deletions(-) diff --git a/.gitignore b/.gitignore index 33c2a3c..78244d2 100644 --- a/.gitignore +++ b/.gitignore @@ -160,3 +160,4 @@ /v2.155.0.tar.gz /container-selinux-5a60716.tar.gz /container-selinux-e1092cd.tar.gz +/container-selinux-da28288.tar.gz diff --git a/container-selinux.spec b/container-selinux.spec index a2fb89f..7205de7 100644 --- a/container-selinux.spec +++ b/container-selinux.spec @@ -2,12 +2,12 @@ # container-selinux %global git0 https://github.com/containers/container-selinux -%global commit0 e1092cd2cb0891de02a70447e6e68adbf6e15c8c +%global commit0 da2828824807d859cee1ac96e1d39c1abd4397da %global shortcommit0 %(c=%{commit0}; echo ${c:0:7}) # Used for comparing with latest upstream tag # to decide whether to autobuild (non-rawhide only) -%define built_tag v2.161.1 +%define built_tag v2.162.0 # container-selinux stuff (prefix with ds_ for version/release etc.) # Some bits borrowed from the openstack-selinux package @@ -23,7 +23,7 @@ # Hooked up to autobuilder, please check with @lsm5 before updating Name: container-selinux Epoch: 2 -Version: 2.161.1 +Version: 2.162.0 Release: 2.dev.git%{shortcommit0}%{?dist} License: GPLv2 URL: %{git0} @@ -105,6 +105,10 @@ fi # Hooked up to autobuilder, please check with @lsm5 before updating %changelog +* Wed May 12 2021 RH Container Bot - 2:2.162.0-2.dev.gitda28288 +- bump to 2.162.0 +- autobuilt da28288 + * Fri May 07 2021 RH Container Bot - 2:2.161.1-2.dev.gite1092cd - bump to 2.161.1 - autobuilt e1092cd diff --git a/sources b/sources index c6bf523..0cfd2e4 100644 --- a/sources +++ b/sources @@ -1 +1 @@ -SHA512 (container-selinux-e1092cd.tar.gz) = ef107d442d03b143dcb7975d34bad0ca2425af1ba053ded64b475df9940e74f2ac9a1da63d631d4a30af84c51268bc3d976bc7cbe6d48a967ed9d0fbf49b53b1 +SHA512 (container-selinux-da28288.tar.gz) = 1ca62a9bc0edc7c7f8dbc03c2c75ea2c7548854a16cd35049adf912423434fe4295ad29a07c063071065a09b2dfffe3637196e649f9c8ad84109c94ac674bc55 From 8cccf0bd0954f442248daf7fcd55ea1067abbd2e Mon Sep 17 00:00:00 2001 From: RH Container Bot Date: Sun, 16 May 2021 04:12:43 +0000 Subject: [PATCH 036/160] container-selinux-2:2.162.1-2.dev.git233e620 - bump to 2.162.1 - autobuilt 233e620 Signed-off-by: RH Container Bot --- .gitignore | 1 + container-selinux.spec | 8 ++++++-- sources | 2 +- 3 files changed, 8 insertions(+), 3 deletions(-) diff --git a/.gitignore b/.gitignore index 78244d2..f7911f8 100644 --- a/.gitignore +++ b/.gitignore @@ -161,3 +161,4 @@ /container-selinux-5a60716.tar.gz /container-selinux-e1092cd.tar.gz /container-selinux-da28288.tar.gz +/container-selinux-233e620.tar.gz diff --git a/container-selinux.spec b/container-selinux.spec index 7205de7..0f62161 100644 --- a/container-selinux.spec +++ b/container-selinux.spec @@ -2,7 +2,7 @@ # container-selinux %global git0 https://github.com/containers/container-selinux -%global commit0 da2828824807d859cee1ac96e1d39c1abd4397da +%global commit0 233e620d6d0e4dc357e58908a9e8abd6e9e94a94 %global shortcommit0 %(c=%{commit0}; echo ${c:0:7}) # Used for comparing with latest upstream tag @@ -23,7 +23,7 @@ # Hooked up to autobuilder, please check with @lsm5 before updating Name: container-selinux Epoch: 2 -Version: 2.162.0 +Version: 2.162.1 Release: 2.dev.git%{shortcommit0}%{?dist} License: GPLv2 URL: %{git0} @@ -105,6 +105,10 @@ fi # Hooked up to autobuilder, please check with @lsm5 before updating %changelog +* Sun May 16 2021 RH Container Bot - 2:2.162.1-2.dev.git233e620 +- bump to 2.162.1 +- autobuilt 233e620 + * Wed May 12 2021 RH Container Bot - 2:2.162.0-2.dev.gitda28288 - bump to 2.162.0 - autobuilt da28288 diff --git a/sources b/sources index 0cfd2e4..6b0ed13 100644 --- a/sources +++ b/sources @@ -1 +1 @@ -SHA512 (container-selinux-da28288.tar.gz) = 1ca62a9bc0edc7c7f8dbc03c2c75ea2c7548854a16cd35049adf912423434fe4295ad29a07c063071065a09b2dfffe3637196e649f9c8ad84109c94ac674bc55 +SHA512 (container-selinux-233e620.tar.gz) = d249e5645dadc95a7b2e073f6ae4d137a06674fb7ebfee48a46db7bc83ea20c6f3148b0ea879c3f291ea17938d0bbe75c0fd385e5e24c904b326622a46404b22 From 2e560c5e4950e6c22b5acb055dd3769bfbfbc248 Mon Sep 17 00:00:00 2001 From: Daniel J Walsh Date: Mon, 17 May 2021 06:01:30 -0400 Subject: [PATCH 037/160] Fix labels in users homedirs, before overlayfs is supported by default for non root users --- container-selinux.spec | 12 +++++++++++- 1 file changed, 11 insertions(+), 1 deletion(-) diff --git a/container-selinux.spec b/container-selinux.spec index 0f62161..69db0fc 100644 --- a/container-selinux.spec +++ b/container-selinux.spec @@ -24,7 +24,7 @@ Name: container-selinux Epoch: 2 Version: 2.162.1 -Release: 2.dev.git%{shortcommit0}%{?dist} +Release: 3.dev.git%{shortcommit0}%{?dist} License: GPLv2 URL: %{git0} Summary: SELinux policies for container runtimes @@ -103,8 +103,18 @@ fi # Currently shipped in selinux-policy-doc #%%{_datadir}/man/man8/container_selinux.8.gz +%triggerpostun -- container-selinux < 2:2.162.1-3 +if %{_sbindir}/selinuxenabled ; then + echo "Fixing Rootless SELinux labels in homedir" + %{_sbindir}/restorecon -R /home/*/.local/share/containers/storage/overlay* 2> /dev/null +fi + + # Hooked up to autobuilder, please check with @lsm5 before updating %changelog +* Mon May 17 2021 Dan Walsh - 2:2.162.1-3.dev.git233e620 +- Fix labels in users homedirs, before overlayfs is supported by default for non root users + * Sun May 16 2021 RH Container Bot - 2:2.162.1-2.dev.git233e620 - bump to 2.162.1 - autobuilt 233e620 From c208a2d90f603660c08e4014f6dd8f21c0b315c1 Mon Sep 17 00:00:00 2001 From: RH Container Bot Date: Tue, 25 May 2021 04:10:08 +0000 Subject: [PATCH 038/160] container-selinux-2:2.162.2-2.dev.git61b862a - bump to 2.162.2 - autobuilt 61b862a Signed-off-by: RH Container Bot --- .gitignore | 1 + container-selinux.spec | 12 ++++++++---- sources | 2 +- 3 files changed, 10 insertions(+), 5 deletions(-) diff --git a/.gitignore b/.gitignore index f7911f8..8ec9f78 100644 --- a/.gitignore +++ b/.gitignore @@ -162,3 +162,4 @@ /container-selinux-e1092cd.tar.gz /container-selinux-da28288.tar.gz /container-selinux-233e620.tar.gz +/container-selinux-61b862a.tar.gz diff --git a/container-selinux.spec b/container-selinux.spec index 69db0fc..e9c98ff 100644 --- a/container-selinux.spec +++ b/container-selinux.spec @@ -2,12 +2,12 @@ # container-selinux %global git0 https://github.com/containers/container-selinux -%global commit0 233e620d6d0e4dc357e58908a9e8abd6e9e94a94 +%global commit0 61b862abec5bc33724d7853b095ab6268fc485b7 %global shortcommit0 %(c=%{commit0}; echo ${c:0:7}) # Used for comparing with latest upstream tag # to decide whether to autobuild (non-rawhide only) -%define built_tag v2.162.0 +%define built_tag v2.162.2 # container-selinux stuff (prefix with ds_ for version/release etc.) # Some bits borrowed from the openstack-selinux package @@ -23,8 +23,8 @@ # Hooked up to autobuilder, please check with @lsm5 before updating Name: container-selinux Epoch: 2 -Version: 2.162.1 -Release: 3.dev.git%{shortcommit0}%{?dist} +Version: 2.162.2 +Release: 2.dev.git%{shortcommit0}%{?dist} License: GPLv2 URL: %{git0} Summary: SELinux policies for container runtimes @@ -112,6 +112,10 @@ fi # Hooked up to autobuilder, please check with @lsm5 before updating %changelog +* Tue May 25 2021 RH Container Bot - 2:2.162.2-2.dev.git61b862a +- bump to 2.162.2 +- autobuilt 61b862a + * Mon May 17 2021 Dan Walsh - 2:2.162.1-3.dev.git233e620 - Fix labels in users homedirs, before overlayfs is supported by default for non root users diff --git a/sources b/sources index 6b0ed13..0a13b64 100644 --- a/sources +++ b/sources @@ -1 +1 @@ -SHA512 (container-selinux-233e620.tar.gz) = d249e5645dadc95a7b2e073f6ae4d137a06674fb7ebfee48a46db7bc83ea20c6f3148b0ea879c3f291ea17938d0bbe75c0fd385e5e24c904b326622a46404b22 +SHA512 (container-selinux-61b862a.tar.gz) = 970f312e2cb68575cf550db5dbe64a844592089b51c60736d766980442cc7d8949f21acfc78c5860c380f5e2269050b2df9a364e30d2e86ac5690a42351e702c From 37d4bd63db214cd75cd9d69c01adc832804f9a68 Mon Sep 17 00:00:00 2001 From: RH Container Bot Date: Sat, 12 Jun 2021 04:09:36 +0000 Subject: [PATCH 039/160] container-selinux-2:2.163.0-2.dev.git99b40c5 - bump to 2.163.0 - autobuilt 99b40c5 Signed-off-by: RH Container Bot --- .gitignore | 1 + container-selinux.spec | 10 +++++++--- sources | 2 +- 3 files changed, 9 insertions(+), 4 deletions(-) diff --git a/.gitignore b/.gitignore index 8ec9f78..6ccac3f 100644 --- a/.gitignore +++ b/.gitignore @@ -163,3 +163,4 @@ /container-selinux-da28288.tar.gz /container-selinux-233e620.tar.gz /container-selinux-61b862a.tar.gz +/container-selinux-99b40c5.tar.gz diff --git a/container-selinux.spec b/container-selinux.spec index e9c98ff..1c98c5b 100644 --- a/container-selinux.spec +++ b/container-selinux.spec @@ -2,12 +2,12 @@ # container-selinux %global git0 https://github.com/containers/container-selinux -%global commit0 61b862abec5bc33724d7853b095ab6268fc485b7 +%global commit0 99b40c5013ec2720a04b1d3579ef888281714c35 %global shortcommit0 %(c=%{commit0}; echo ${c:0:7}) # Used for comparing with latest upstream tag # to decide whether to autobuild (non-rawhide only) -%define built_tag v2.162.2 +%define built_tag v2.163.0 # container-selinux stuff (prefix with ds_ for version/release etc.) # Some bits borrowed from the openstack-selinux package @@ -23,7 +23,7 @@ # Hooked up to autobuilder, please check with @lsm5 before updating Name: container-selinux Epoch: 2 -Version: 2.162.2 +Version: 2.163.0 Release: 2.dev.git%{shortcommit0}%{?dist} License: GPLv2 URL: %{git0} @@ -112,6 +112,10 @@ fi # Hooked up to autobuilder, please check with @lsm5 before updating %changelog +* Sat Jun 12 2021 RH Container Bot - 2:2.163.0-2.dev.git99b40c5 +- bump to 2.163.0 +- autobuilt 99b40c5 + * Tue May 25 2021 RH Container Bot - 2:2.162.2-2.dev.git61b862a - bump to 2.162.2 - autobuilt 61b862a diff --git a/sources b/sources index 0a13b64..4c62aae 100644 --- a/sources +++ b/sources @@ -1 +1 @@ -SHA512 (container-selinux-61b862a.tar.gz) = 970f312e2cb68575cf550db5dbe64a844592089b51c60736d766980442cc7d8949f21acfc78c5860c380f5e2269050b2df9a364e30d2e86ac5690a42351e702c +SHA512 (container-selinux-99b40c5.tar.gz) = 03df7817de2a166a9377a8c0c85e00f920c66b798522e2395fad1d90605765910c165a829058e6ca19d846e75f0da6e3fbedc522fa72d6adab77227d5cb2e83c From 0ed3080e4e12df0c92b7bfd8735f58f36ce9e004 Mon Sep 17 00:00:00 2001 From: Daniel J Walsh Date: Mon, 19 Jul 2021 11:31:22 -0400 Subject: [PATCH 040/160] bump to 2.163.0 autobuilt 99b40c5 --- .gitignore | 1 + container-selinux.spec | 8 ++++---- sources | 2 +- 3 files changed, 6 insertions(+), 5 deletions(-) diff --git a/.gitignore b/.gitignore index 6ccac3f..3651e6b 100644 --- a/.gitignore +++ b/.gitignore @@ -164,3 +164,4 @@ /container-selinux-233e620.tar.gz /container-selinux-61b862a.tar.gz /container-selinux-99b40c5.tar.gz +/container-selinux-563ba3f.tar.gz diff --git a/container-selinux.spec b/container-selinux.spec index 1c98c5b..53410af 100644 --- a/container-selinux.spec +++ b/container-selinux.spec @@ -2,12 +2,12 @@ # container-selinux %global git0 https://github.com/containers/container-selinux -%global commit0 99b40c5013ec2720a04b1d3579ef888281714c35 +%global commit0 563ba3f2693f98de5e79a7fbf5889222ab9a454a %global shortcommit0 %(c=%{commit0}; echo ${c:0:7}) # Used for comparing with latest upstream tag # to decide whether to autobuild (non-rawhide only) -%define built_tag v2.163.0 +%define built_tag v2.164.1 # container-selinux stuff (prefix with ds_ for version/release etc.) # Some bits borrowed from the openstack-selinux package @@ -23,8 +23,8 @@ # Hooked up to autobuilder, please check with @lsm5 before updating Name: container-selinux Epoch: 2 -Version: 2.163.0 -Release: 2.dev.git%{shortcommit0}%{?dist} +Version: 2.164.1 +Release: 0.dev.git%{shortcommit0}%{?dist} License: GPLv2 URL: %{git0} Summary: SELinux policies for container runtimes diff --git a/sources b/sources index 4c62aae..f738a28 100644 --- a/sources +++ b/sources @@ -1 +1 @@ -SHA512 (container-selinux-99b40c5.tar.gz) = 03df7817de2a166a9377a8c0c85e00f920c66b798522e2395fad1d90605765910c165a829058e6ca19d846e75f0da6e3fbedc522fa72d6adab77227d5cb2e83c +SHA512 (container-selinux-563ba3f.tar.gz) = fdafd3ca1094fb009893e664a2c59b81b7b95ba796ea7e960c0c2def45a0ed229f4dece63cd87faf14e6c1094848614633b322526bb2625c5df6df6abb568a50 From a64ae0fa9b7e573642c3555c1dfc8019592997e0 Mon Sep 17 00:00:00 2001 From: Daniel J Walsh Date: Mon, 19 Jul 2021 11:33:17 -0400 Subject: [PATCH 041/160] Allow spc_t domains to set bpf rules on any domain --- container-selinux.spec | 3 +++ 1 file changed, 3 insertions(+) diff --git a/container-selinux.spec b/container-selinux.spec index 53410af..6da4011 100644 --- a/container-selinux.spec +++ b/container-selinux.spec @@ -112,6 +112,9 @@ fi # Hooked up to autobuilder, please check with @lsm5 before updating %changelog +* Mon Jul 19 2021 Dan Walsh - 2:2.164.1-0.dev +- Allow spc_t domains to set bpf rules on any domain + * Sat Jun 12 2021 RH Container Bot - 2:2.163.0-2.dev.git99b40c5 - bump to 2.163.0 - autobuilt 99b40c5 From c07db367f731ecba0762f93aa922c3b8b3675b0d Mon Sep 17 00:00:00 2001 From: Fedora Release Engineering Date: Wed, 21 Jul 2021 15:01:35 +0000 Subject: [PATCH 042/160] - Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild Signed-off-by: Fedora Release Engineering From 67bd97e493b2e686714f7d43bfdb2b54b40cb344 Mon Sep 17 00:00:00 2001 From: Fedora Release Engineering Date: Wed, 21 Jul 2021 19:59:41 +0000 Subject: [PATCH 043/160] - Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild Signed-off-by: Fedora Release Engineering --- container-selinux.spec | 5 ++++- 1 file changed, 4 insertions(+), 1 deletion(-) diff --git a/container-selinux.spec b/container-selinux.spec index 6da4011..0b3fb61 100644 --- a/container-selinux.spec +++ b/container-selinux.spec @@ -24,7 +24,7 @@ Name: container-selinux Epoch: 2 Version: 2.164.1 -Release: 0.dev.git%{shortcommit0}%{?dist} +Release: 0.dev.git%{shortcommit0}%{?dist}.1 License: GPLv2 URL: %{git0} Summary: SELinux policies for container runtimes @@ -112,6 +112,9 @@ fi # Hooked up to autobuilder, please check with @lsm5 before updating %changelog +* Wed Jul 21 2021 Fedora Release Engineering - 2:2.164.1-0.dev.git563ba3f.1 +- Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild + * Mon Jul 19 2021 Dan Walsh - 2:2.164.1-0.dev - Allow spc_t domains to set bpf rules on any domain From 039306ba70aab99cc522b0e3ff0a266ac520462d Mon Sep 17 00:00:00 2001 From: RH Container Bot Date: Wed, 4 Aug 2021 19:24:22 +0000 Subject: [PATCH 044/160] container-selinux-2:2.164.2-1 autobuilt v2.164.2 Signed-off-by: RH Container Bot --- container-selinux.spec | 7 +++++-- 1 file changed, 5 insertions(+), 2 deletions(-) diff --git a/container-selinux.spec b/container-selinux.spec index 0b3fb61..d6d7555 100644 --- a/container-selinux.spec +++ b/container-selinux.spec @@ -23,8 +23,8 @@ # Hooked up to autobuilder, please check with @lsm5 before updating Name: container-selinux Epoch: 2 -Version: 2.164.1 -Release: 0.dev.git%{shortcommit0}%{?dist}.1 +Version: 2.164.2 +Release: 1%{?dist} License: GPLv2 URL: %{git0} Summary: SELinux policies for container runtimes @@ -112,6 +112,9 @@ fi # Hooked up to autobuilder, please check with @lsm5 before updating %changelog +* Wed Aug 04 2021 RH Container Bot - 2:2.164.2-1 +- autobuilt v2.164.2 + * Wed Jul 21 2021 Fedora Release Engineering - 2:2.164.1-0.dev.git563ba3f.1 - Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild From fd8f2748f96f25e7c51382c24e807342c119687f Mon Sep 17 00:00:00 2001 From: RH Container Bot Date: Wed, 25 Aug 2021 17:19:46 +0000 Subject: [PATCH 045/160] container-selinux-2:2.165.1-1 autobuilt v2.165.1 Signed-off-by: RH Container Bot --- container-selinux.spec | 5 ++++- 1 file changed, 4 insertions(+), 1 deletion(-) diff --git a/container-selinux.spec b/container-selinux.spec index d6d7555..abc6616 100644 --- a/container-selinux.spec +++ b/container-selinux.spec @@ -23,7 +23,7 @@ # Hooked up to autobuilder, please check with @lsm5 before updating Name: container-selinux Epoch: 2 -Version: 2.164.2 +Version: 2.165.1 Release: 1%{?dist} License: GPLv2 URL: %{git0} @@ -112,6 +112,9 @@ fi # Hooked up to autobuilder, please check with @lsm5 before updating %changelog +* Wed Aug 25 2021 RH Container Bot - 2:2.165.1-1 +- autobuilt v2.165.1 + * Wed Aug 04 2021 RH Container Bot - 2:2.164.2-1 - autobuilt v2.164.2 From 61b74b997d510a475ef5ca8043ce714a88dafdda Mon Sep 17 00:00:00 2001 From: RH Container Bot Date: Thu, 26 Aug 2021 20:03:52 +0000 Subject: [PATCH 046/160] container-selinux-2:2.167.0-1 autobuilt v2.167.0 Signed-off-by: RH Container Bot --- container-selinux.spec | 5 ++++- 1 file changed, 4 insertions(+), 1 deletion(-) diff --git a/container-selinux.spec b/container-selinux.spec index abc6616..7ab430f 100644 --- a/container-selinux.spec +++ b/container-selinux.spec @@ -23,7 +23,7 @@ # Hooked up to autobuilder, please check with @lsm5 before updating Name: container-selinux Epoch: 2 -Version: 2.165.1 +Version: 2.167.0 Release: 1%{?dist} License: GPLv2 URL: %{git0} @@ -112,6 +112,9 @@ fi # Hooked up to autobuilder, please check with @lsm5 before updating %changelog +* Thu Aug 26 2021 RH Container Bot - 2:2.167.0-1 +- autobuilt v2.167.0 + * Wed Aug 25 2021 RH Container Bot - 2:2.165.1-1 - autobuilt v2.165.1 From c287dbae6fd486e90e51151eeeba665b2a9efb91 Mon Sep 17 00:00:00 2001 From: Lokesh Mandvekar Date: Fri, 10 Sep 2021 09:33:17 -0400 Subject: [PATCH 047/160] container-selinux-2:2.167.0-2 - use upstream tag instead of commits, fix autobuild macros Signed-off-by: Lokesh Mandvekar --- .gitignore | 1 + container-selinux.spec | 16 +++++++++------- sources | 2 +- 3 files changed, 11 insertions(+), 8 deletions(-) diff --git a/.gitignore b/.gitignore index 3651e6b..370aeb0 100644 --- a/.gitignore +++ b/.gitignore @@ -165,3 +165,4 @@ /container-selinux-61b862a.tar.gz /container-selinux-99b40c5.tar.gz /container-selinux-563ba3f.tar.gz +/v2.167.0.tar.gz diff --git a/container-selinux.spec b/container-selinux.spec index 7ab430f..6836025 100644 --- a/container-selinux.spec +++ b/container-selinux.spec @@ -2,12 +2,11 @@ # container-selinux %global git0 https://github.com/containers/container-selinux -%global commit0 563ba3f2693f98de5e79a7fbf5889222ab9a454a -%global shortcommit0 %(c=%{commit0}; echo ${c:0:7}) # Used for comparing with latest upstream tag -# to decide whether to autobuild (non-rawhide only) -%define built_tag v2.164.1 +# to decide whether to autobuild +%global built_tag v2.167.0 +%global built_tag_strip %(b=%{built_tag}; echo ${b:1}) # container-selinux stuff (prefix with ds_ for version/release etc.) # Some bits borrowed from the openstack-selinux package @@ -24,11 +23,11 @@ Name: container-selinux Epoch: 2 Version: 2.167.0 -Release: 1%{?dist} +Release: 2%{?dist} License: GPLv2 URL: %{git0} Summary: SELinux policies for container runtimes -Source0: %{git0}/archive/%{commit0}/%{name}-%{shortcommit0}.tar.gz +Source0: %{git0}/archive/%{built_tag}.tar.gz BuildArch: noarch BuildRequires: make BuildRequires: git-core @@ -50,7 +49,7 @@ Provides: docker-selinux = %{?epoch:%{epoch}:}%{version}-%{release} SELinux policy modules for use with container runtimes. %prep -%autosetup -Sgit -n %{name}-%{commit0} +%autosetup -Sgit -n %{name}-%{built_tag_strip} %build make @@ -112,6 +111,9 @@ fi # Hooked up to autobuilder, please check with @lsm5 before updating %changelog +* Fri Sep 10 2021 Lokesh Mandvekar - 2:2.167.0-2 +- use upstream tag instead of commits, fix autobuild macros + * Thu Aug 26 2021 RH Container Bot - 2:2.167.0-1 - autobuilt v2.167.0 diff --git a/sources b/sources index f738a28..45d2aa8 100644 --- a/sources +++ b/sources @@ -1 +1 @@ -SHA512 (container-selinux-563ba3f.tar.gz) = fdafd3ca1094fb009893e664a2c59b81b7b95ba796ea7e960c0c2def45a0ed229f4dece63cd87faf14e6c1094848614633b322526bb2625c5df6df6abb568a50 +SHA512 (v2.167.0.tar.gz) = c46ca4ff144a976362d05cd02809b9eed95c3514a9fe7a57cbec65ec0cb42fb300f4a086981e2917f2b236f34b9754130f4e5f3c4f137b0d65ff8e85c4e0ba73 From f9aa97e6da5179015572647e79ec439b81b2bf6c Mon Sep 17 00:00:00 2001 From: RH Container Bot Date: Mon, 13 Sep 2021 18:02:56 +0000 Subject: [PATCH 048/160] container-selinux-2:2.168.0-1 autobuilt v2.168.0 Signed-off-by: RH Container Bot --- .gitignore | 1 + container-selinux.spec | 9 ++++++--- sources | 2 +- 3 files changed, 8 insertions(+), 4 deletions(-) diff --git a/.gitignore b/.gitignore index 370aeb0..894bfad 100644 --- a/.gitignore +++ b/.gitignore @@ -166,3 +166,4 @@ /container-selinux-99b40c5.tar.gz /container-selinux-563ba3f.tar.gz /v2.167.0.tar.gz +/v2.168.0.tar.gz diff --git a/container-selinux.spec b/container-selinux.spec index 6836025..a0a8643 100644 --- a/container-selinux.spec +++ b/container-selinux.spec @@ -5,7 +5,7 @@ # Used for comparing with latest upstream tag # to decide whether to autobuild -%global built_tag v2.167.0 +%global built_tag v2.168.0 %global built_tag_strip %(b=%{built_tag}; echo ${b:1}) # container-selinux stuff (prefix with ds_ for version/release etc.) @@ -22,8 +22,8 @@ # Hooked up to autobuilder, please check with @lsm5 before updating Name: container-selinux Epoch: 2 -Version: 2.167.0 -Release: 2%{?dist} +Version: 2.168.0 +Release: 1%{?dist} License: GPLv2 URL: %{git0} Summary: SELinux policies for container runtimes @@ -111,6 +111,9 @@ fi # Hooked up to autobuilder, please check with @lsm5 before updating %changelog +* Mon Sep 13 2021 RH Container Bot - 2:2.168.0-1 +- autobuilt v2.168.0 + * Fri Sep 10 2021 Lokesh Mandvekar - 2:2.167.0-2 - use upstream tag instead of commits, fix autobuild macros diff --git a/sources b/sources index 45d2aa8..48caae7 100644 --- a/sources +++ b/sources @@ -1 +1 @@ -SHA512 (v2.167.0.tar.gz) = c46ca4ff144a976362d05cd02809b9eed95c3514a9fe7a57cbec65ec0cb42fb300f4a086981e2917f2b236f34b9754130f4e5f3c4f137b0d65ff8e85c4e0ba73 +SHA512 (v2.168.0.tar.gz) = c66a71802c8f65cb253d51067408c6d8d6dc853ca7e1874e073c517d9a74acad85e7605bda4ce7b397278ab3734b3c1617b0fa6d8cb36e94ba67d6d6803f587b From c1c245c063e0b5140238b96abd1bf8d2a8b1f039 Mon Sep 17 00:00:00 2001 From: Vit Mojzis Date: Tue, 14 Sep 2021 16:11:28 +0200 Subject: [PATCH 049/160] Start shipping udica policy templates Signed-off-by: Vit Mojzis --- container-selinux.spec | 10 +++++++++- 1 file changed, 9 insertions(+), 1 deletion(-) diff --git a/container-selinux.spec b/container-selinux.spec index a0a8643..65a4cfc 100644 --- a/container-selinux.spec +++ b/container-selinux.spec @@ -23,7 +23,7 @@ Name: container-selinux Epoch: 2 Version: 2.168.0 -Release: 1%{?dist} +Release: 2%{?dist} License: GPLv2 URL: %{git0} Summary: SELinux policies for container runtimes @@ -44,6 +44,7 @@ Requires(post): sed Obsoletes: %{name} <= 2:1.12.5-13 Obsoletes: docker-selinux <= 2:1.12.4-28 Provides: docker-selinux = %{?epoch:%{epoch}:}%{version}-%{release} +Conflicts: udica < 0.2.6-1 %description SELinux policy modules for use with container runtimes. @@ -63,6 +64,8 @@ install -p -m 644 container.if %{buildroot}%{_datadir}/selinux/devel/include/ser install -m 0644 $MODULES %{buildroot}%{_datadir}/selinux/packages install -d %{buildroot}/%{_datadir}/containers/selinux install -m 644 container_contexts %{buildroot}/%{_datadir}/containers/selinux/contexts +install -d %{buildroot}%{_datadir}/udica/templates +install -m 0644 udica-templates/*.cil %{buildroot}%{_datadir}/udica/templates %check @@ -99,6 +102,8 @@ fi %{_datadir}/selinux/* %dir %{_datadir}/containers/selinux %{_datadir}/containers/selinux/contexts +%dir %{_datadir}/udica/templates/ +%{_datadir}/udica/templates/* # Currently shipped in selinux-policy-doc #%%{_datadir}/man/man8/container_selinux.8.gz @@ -111,6 +116,9 @@ fi # Hooked up to autobuilder, please check with @lsm5 before updating %changelog +* Tue Sep 14 2021 Vit Mojzis - 2:2.168.0-2 +- Start shipping udica templates + * Mon Sep 13 2021 RH Container Bot - 2:2.168.0-1 - autobuilt v2.168.0 From 04f47a764a81868e1038f2327e608a8e9796b1b7 Mon Sep 17 00:00:00 2001 From: RH Container Bot Date: Fri, 24 Sep 2021 21:04:32 +0000 Subject: [PATCH 050/160] container-selinux-2:2.169.0-1 autobuilt v2.169.0 Signed-off-by: RH Container Bot --- .gitignore | 1 + container-selinux.spec | 9 ++++++--- sources | 2 +- 3 files changed, 8 insertions(+), 4 deletions(-) diff --git a/.gitignore b/.gitignore index 894bfad..48c7bf3 100644 --- a/.gitignore +++ b/.gitignore @@ -167,3 +167,4 @@ /container-selinux-563ba3f.tar.gz /v2.167.0.tar.gz /v2.168.0.tar.gz +/v2.169.0.tar.gz diff --git a/container-selinux.spec b/container-selinux.spec index 65a4cfc..bb6a75a 100644 --- a/container-selinux.spec +++ b/container-selinux.spec @@ -5,7 +5,7 @@ # Used for comparing with latest upstream tag # to decide whether to autobuild -%global built_tag v2.168.0 +%global built_tag v2.169.0 %global built_tag_strip %(b=%{built_tag}; echo ${b:1}) # container-selinux stuff (prefix with ds_ for version/release etc.) @@ -22,8 +22,8 @@ # Hooked up to autobuilder, please check with @lsm5 before updating Name: container-selinux Epoch: 2 -Version: 2.168.0 -Release: 2%{?dist} +Version: 2.169.0 +Release: 1%{?dist} License: GPLv2 URL: %{git0} Summary: SELinux policies for container runtimes @@ -116,6 +116,9 @@ fi # Hooked up to autobuilder, please check with @lsm5 before updating %changelog +* Fri Sep 24 2021 RH Container Bot - 2:2.169.0-1 +- autobuilt v2.169.0 + * Tue Sep 14 2021 Vit Mojzis - 2:2.168.0-2 - Start shipping udica templates diff --git a/sources b/sources index 48caae7..8c1fa76 100644 --- a/sources +++ b/sources @@ -1 +1 @@ -SHA512 (v2.168.0.tar.gz) = c66a71802c8f65cb253d51067408c6d8d6dc853ca7e1874e073c517d9a74acad85e7605bda4ce7b397278ab3734b3c1617b0fa6d8cb36e94ba67d6d6803f587b +SHA512 (v2.169.0.tar.gz) = a0beec62004c94f9eb6279e385ab41143a691dd21849cdd31bd6e2a3f45cb28714f56fe1186b5ddb0b114148e1e63387d0eeff331691adc8e745ba803a96d73c From 156b58ad36077d57ab802e8bfa147c4b3a9e8498 Mon Sep 17 00:00:00 2001 From: RH Container Bot Date: Tue, 5 Oct 2021 19:47:48 +0000 Subject: [PATCH 051/160] container-selinux-2:2.170.0-1 autobuilt v2.170.0 Signed-off-by: RH Container Bot --- .gitignore | 1 + container-selinux.spec | 7 +++++-- sources | 2 +- 3 files changed, 7 insertions(+), 3 deletions(-) diff --git a/.gitignore b/.gitignore index 48c7bf3..a3b6d41 100644 --- a/.gitignore +++ b/.gitignore @@ -168,3 +168,4 @@ /v2.167.0.tar.gz /v2.168.0.tar.gz /v2.169.0.tar.gz +/v2.170.0.tar.gz diff --git a/container-selinux.spec b/container-selinux.spec index bb6a75a..813d781 100644 --- a/container-selinux.spec +++ b/container-selinux.spec @@ -5,7 +5,7 @@ # Used for comparing with latest upstream tag # to decide whether to autobuild -%global built_tag v2.169.0 +%global built_tag v2.170.0 %global built_tag_strip %(b=%{built_tag}; echo ${b:1}) # container-selinux stuff (prefix with ds_ for version/release etc.) @@ -22,7 +22,7 @@ # Hooked up to autobuilder, please check with @lsm5 before updating Name: container-selinux Epoch: 2 -Version: 2.169.0 +Version: 2.170.0 Release: 1%{?dist} License: GPLv2 URL: %{git0} @@ -116,6 +116,9 @@ fi # Hooked up to autobuilder, please check with @lsm5 before updating %changelog +* Tue Oct 05 2021 RH Container Bot - 2:2.170.0-1 +- autobuilt v2.170.0 + * Fri Sep 24 2021 RH Container Bot - 2:2.169.0-1 - autobuilt v2.169.0 diff --git a/sources b/sources index 8c1fa76..80360b8 100644 --- a/sources +++ b/sources @@ -1 +1 @@ -SHA512 (v2.169.0.tar.gz) = a0beec62004c94f9eb6279e385ab41143a691dd21849cdd31bd6e2a3f45cb28714f56fe1186b5ddb0b114148e1e63387d0eeff331691adc8e745ba803a96d73c +SHA512 (v2.170.0.tar.gz) = 416faa66c192764326a8b7b8f695aa5b0b82603c366f8b0bc53387c75bfaa50535103229eccfb1c2273aebeb8d08255ef18ba5cc9b10cc738baf5b216b883705 From cb5c675153472cdd75485600168e45c1d04b798b Mon Sep 17 00:00:00 2001 From: Daniel J Walsh Date: Fri, 15 Oct 2021 14:52:35 -0400 Subject: [PATCH 052/160] Add conflicts k3s-selinux <= 0.4-1 to force upgrade --- container-selinux.spec | 6 +++++- 1 file changed, 5 insertions(+), 1 deletion(-) diff --git a/container-selinux.spec b/container-selinux.spec index 813d781..cdee5a3 100644 --- a/container-selinux.spec +++ b/container-selinux.spec @@ -23,7 +23,7 @@ Name: container-selinux Epoch: 2 Version: 2.170.0 -Release: 1%{?dist} +Release: 2%{?dist} License: GPLv2 URL: %{git0} Summary: SELinux policies for container runtimes @@ -45,6 +45,7 @@ Obsoletes: %{name} <= 2:1.12.5-13 Obsoletes: docker-selinux <= 2:1.12.4-28 Provides: docker-selinux = %{?epoch:%{epoch}:}%{version}-%{release} Conflicts: udica < 0.2.6-1 +Conflicts: k3s-selinux <= 0.4-1 %description SELinux policy modules for use with container runtimes. @@ -116,6 +117,9 @@ fi # Hooked up to autobuilder, please check with @lsm5 before updating %changelog +* Fri Oct 15 2021 Dan Walsh - 2:2.170.0-2 +- Add conflicts k3s-selinux <= 0.4-1 to force upgrade + * Tue Oct 05 2021 RH Container Bot - 2:2.170.0-1 - autobuilt v2.170.0 From fd5c0b5da2ce5216c724c254fd1ed5b36ca9a5e4 Mon Sep 17 00:00:00 2001 From: RH Container Bot Date: Wed, 10 Nov 2021 23:03:48 +0000 Subject: [PATCH 053/160] container-selinux-2:2.171.0-1 autobuilt v2.171.0 Signed-off-by: RH Container Bot --- .gitignore | 1 + container-selinux.spec | 9 ++++++--- sources | 2 +- 3 files changed, 8 insertions(+), 4 deletions(-) diff --git a/.gitignore b/.gitignore index a3b6d41..861b672 100644 --- a/.gitignore +++ b/.gitignore @@ -169,3 +169,4 @@ /v2.168.0.tar.gz /v2.169.0.tar.gz /v2.170.0.tar.gz +/v2.171.0.tar.gz diff --git a/container-selinux.spec b/container-selinux.spec index cdee5a3..ab410f5 100644 --- a/container-selinux.spec +++ b/container-selinux.spec @@ -5,7 +5,7 @@ # Used for comparing with latest upstream tag # to decide whether to autobuild -%global built_tag v2.170.0 +%global built_tag v2.171.0 %global built_tag_strip %(b=%{built_tag}; echo ${b:1}) # container-selinux stuff (prefix with ds_ for version/release etc.) @@ -22,8 +22,8 @@ # Hooked up to autobuilder, please check with @lsm5 before updating Name: container-selinux Epoch: 2 -Version: 2.170.0 -Release: 2%{?dist} +Version: 2.171.0 +Release: 1%{?dist} License: GPLv2 URL: %{git0} Summary: SELinux policies for container runtimes @@ -117,6 +117,9 @@ fi # Hooked up to autobuilder, please check with @lsm5 before updating %changelog +* Wed Nov 10 2021 RH Container Bot - 2:2.171.0-1 +- autobuilt v2.171.0 + * Fri Oct 15 2021 Dan Walsh - 2:2.170.0-2 - Add conflicts k3s-selinux <= 0.4-1 to force upgrade diff --git a/sources b/sources index 80360b8..90a0f9a 100644 --- a/sources +++ b/sources @@ -1 +1 @@ -SHA512 (v2.170.0.tar.gz) = 416faa66c192764326a8b7b8f695aa5b0b82603c366f8b0bc53387c75bfaa50535103229eccfb1c2273aebeb8d08255ef18ba5cc9b10cc738baf5b216b883705 +SHA512 (v2.171.0.tar.gz) = c701ab7d4f60d9f243cc3e93880cc34d8160a889cba9f331338e9544edb69f389983cf3572136d904a69201fa4b2bee1eb379626cb84a04d59771318b223413e From 8bae2f2e518c1c85afd7a30ab59888cdfe0faf56 Mon Sep 17 00:00:00 2001 From: RH Container Bot Date: Mon, 22 Nov 2021 23:03:22 +0000 Subject: [PATCH 054/160] container-selinux-2:2.172.0-1 autobuilt v2.172.0 Signed-off-by: RH Container Bot --- .gitignore | 1 + container-selinux.spec | 7 +++++-- sources | 2 +- 3 files changed, 7 insertions(+), 3 deletions(-) diff --git a/.gitignore b/.gitignore index 861b672..c2cc683 100644 --- a/.gitignore +++ b/.gitignore @@ -170,3 +170,4 @@ /v2.169.0.tar.gz /v2.170.0.tar.gz /v2.171.0.tar.gz +/v2.172.0.tar.gz diff --git a/container-selinux.spec b/container-selinux.spec index ab410f5..ba2b7d4 100644 --- a/container-selinux.spec +++ b/container-selinux.spec @@ -5,7 +5,7 @@ # Used for comparing with latest upstream tag # to decide whether to autobuild -%global built_tag v2.171.0 +%global built_tag v2.172.0 %global built_tag_strip %(b=%{built_tag}; echo ${b:1}) # container-selinux stuff (prefix with ds_ for version/release etc.) @@ -22,7 +22,7 @@ # Hooked up to autobuilder, please check with @lsm5 before updating Name: container-selinux Epoch: 2 -Version: 2.171.0 +Version: 2.172.0 Release: 1%{?dist} License: GPLv2 URL: %{git0} @@ -117,6 +117,9 @@ fi # Hooked up to autobuilder, please check with @lsm5 before updating %changelog +* Mon Nov 22 2021 RH Container Bot - 2:2.172.0-1 +- autobuilt v2.172.0 + * Wed Nov 10 2021 RH Container Bot - 2:2.171.0-1 - autobuilt v2.171.0 diff --git a/sources b/sources index 90a0f9a..b72d59c 100644 --- a/sources +++ b/sources @@ -1 +1 @@ -SHA512 (v2.171.0.tar.gz) = c701ab7d4f60d9f243cc3e93880cc34d8160a889cba9f331338e9544edb69f389983cf3572136d904a69201fa4b2bee1eb379626cb84a04d59771318b223413e +SHA512 (v2.172.0.tar.gz) = 5e61d0eefdb062ca15fedac72a5acd44ce7975e3ef070a6fac65ab38b6d052692c5f7e63fcdd73ed0b5293d6674dda52816a8037758a89f81a749e3b51b43370 From a57b6ae9954dbf66f2e711874fac09edf11f4946 Mon Sep 17 00:00:00 2001 From: RH Container Bot Date: Thu, 6 Jan 2022 21:03:59 +0000 Subject: [PATCH 055/160] container-selinux-2:2.172.1-1 autobuilt v2.172.1 Signed-off-by: RH Container Bot --- .gitignore | 1 + container-selinux.spec | 7 +++++-- sources | 2 +- 3 files changed, 7 insertions(+), 3 deletions(-) diff --git a/.gitignore b/.gitignore index c2cc683..f2c03e1 100644 --- a/.gitignore +++ b/.gitignore @@ -171,3 +171,4 @@ /v2.170.0.tar.gz /v2.171.0.tar.gz /v2.172.0.tar.gz +/v2.172.1.tar.gz diff --git a/container-selinux.spec b/container-selinux.spec index ba2b7d4..f7134c7 100644 --- a/container-selinux.spec +++ b/container-selinux.spec @@ -5,7 +5,7 @@ # Used for comparing with latest upstream tag # to decide whether to autobuild -%global built_tag v2.172.0 +%global built_tag v2.172.1 %global built_tag_strip %(b=%{built_tag}; echo ${b:1}) # container-selinux stuff (prefix with ds_ for version/release etc.) @@ -22,7 +22,7 @@ # Hooked up to autobuilder, please check with @lsm5 before updating Name: container-selinux Epoch: 2 -Version: 2.172.0 +Version: 2.172.1 Release: 1%{?dist} License: GPLv2 URL: %{git0} @@ -117,6 +117,9 @@ fi # Hooked up to autobuilder, please check with @lsm5 before updating %changelog +* Thu Jan 06 2022 RH Container Bot - 2:2.172.1-1 +- autobuilt v2.172.1 + * Mon Nov 22 2021 RH Container Bot - 2:2.172.0-1 - autobuilt v2.172.0 diff --git a/sources b/sources index b72d59c..936de72 100644 --- a/sources +++ b/sources @@ -1 +1 @@ -SHA512 (v2.172.0.tar.gz) = 5e61d0eefdb062ca15fedac72a5acd44ce7975e3ef070a6fac65ab38b6d052692c5f7e63fcdd73ed0b5293d6674dda52816a8037758a89f81a749e3b51b43370 +SHA512 (v2.172.1.tar.gz) = 96578d02fd15b41d7c1da400871b0b861d6091b7d04acb546e2856cf7da6abefaf847b8579c05af5fca1f10501f6ab6c0ce0baab0bb6b7afd7939e3f3ed8a339 From 237d59707cb47f3da2c3ae314cb4116453c2b61f Mon Sep 17 00:00:00 2001 From: RH Container Bot Date: Tue, 11 Jan 2022 12:04:22 +0000 Subject: [PATCH 056/160] container-selinux-2:2.173.0-1 autobuilt v2.173.0 Signed-off-by: RH Container Bot --- .gitignore | 1 + container-selinux.spec | 7 +++++-- sources | 2 +- 3 files changed, 7 insertions(+), 3 deletions(-) diff --git a/.gitignore b/.gitignore index f2c03e1..97011da 100644 --- a/.gitignore +++ b/.gitignore @@ -172,3 +172,4 @@ /v2.171.0.tar.gz /v2.172.0.tar.gz /v2.172.1.tar.gz +/v2.173.0.tar.gz diff --git a/container-selinux.spec b/container-selinux.spec index f7134c7..890bf32 100644 --- a/container-selinux.spec +++ b/container-selinux.spec @@ -5,7 +5,7 @@ # Used for comparing with latest upstream tag # to decide whether to autobuild -%global built_tag v2.172.1 +%global built_tag v2.173.0 %global built_tag_strip %(b=%{built_tag}; echo ${b:1}) # container-selinux stuff (prefix with ds_ for version/release etc.) @@ -22,7 +22,7 @@ # Hooked up to autobuilder, please check with @lsm5 before updating Name: container-selinux Epoch: 2 -Version: 2.172.1 +Version: 2.173.0 Release: 1%{?dist} License: GPLv2 URL: %{git0} @@ -117,6 +117,9 @@ fi # Hooked up to autobuilder, please check with @lsm5 before updating %changelog +* Tue Jan 11 2022 RH Container Bot - 2:2.173.0-1 +- autobuilt v2.173.0 + * Thu Jan 06 2022 RH Container Bot - 2:2.172.1-1 - autobuilt v2.172.1 diff --git a/sources b/sources index 936de72..b87132f 100644 --- a/sources +++ b/sources @@ -1 +1 @@ -SHA512 (v2.172.1.tar.gz) = 96578d02fd15b41d7c1da400871b0b861d6091b7d04acb546e2856cf7da6abefaf847b8579c05af5fca1f10501f6ab6c0ce0baab0bb6b7afd7939e3f3ed8a339 +SHA512 (v2.173.0.tar.gz) = e77836306ceb6b5b2f350cbc18f4c79a7d8b368ec84955bac2f1e3bedc4903b5a5dfd23bdb7289f2bdca177736d02897ed4700654387a76ff77a623d3386d104 From 258efbfe5ef399dca7fb36bff91fc5d0a4e32885 Mon Sep 17 00:00:00 2001 From: RH Container Bot Date: Tue, 18 Jan 2022 16:04:46 +0000 Subject: [PATCH 057/160] container-selinux-2:2.173.1-1 autobuilt v2.173.1 Signed-off-by: RH Container Bot --- .gitignore | 1 + container-selinux.spec | 7 +++++-- sources | 2 +- 3 files changed, 7 insertions(+), 3 deletions(-) diff --git a/.gitignore b/.gitignore index 97011da..e6f8dd4 100644 --- a/.gitignore +++ b/.gitignore @@ -173,3 +173,4 @@ /v2.172.0.tar.gz /v2.172.1.tar.gz /v2.173.0.tar.gz +/v2.173.1.tar.gz diff --git a/container-selinux.spec b/container-selinux.spec index 890bf32..66cd599 100644 --- a/container-selinux.spec +++ b/container-selinux.spec @@ -5,7 +5,7 @@ # Used for comparing with latest upstream tag # to decide whether to autobuild -%global built_tag v2.173.0 +%global built_tag v2.173.1 %global built_tag_strip %(b=%{built_tag}; echo ${b:1}) # container-selinux stuff (prefix with ds_ for version/release etc.) @@ -22,7 +22,7 @@ # Hooked up to autobuilder, please check with @lsm5 before updating Name: container-selinux Epoch: 2 -Version: 2.173.0 +Version: 2.173.1 Release: 1%{?dist} License: GPLv2 URL: %{git0} @@ -117,6 +117,9 @@ fi # Hooked up to autobuilder, please check with @lsm5 before updating %changelog +* Tue Jan 18 2022 RH Container Bot - 2:2.173.1-1 +- autobuilt v2.173.1 + * Tue Jan 11 2022 RH Container Bot - 2:2.173.0-1 - autobuilt v2.173.0 diff --git a/sources b/sources index b87132f..90fae30 100644 --- a/sources +++ b/sources @@ -1 +1 @@ -SHA512 (v2.173.0.tar.gz) = e77836306ceb6b5b2f350cbc18f4c79a7d8b368ec84955bac2f1e3bedc4903b5a5dfd23bdb7289f2bdca177736d02897ed4700654387a76ff77a623d3386d104 +SHA512 (v2.173.1.tar.gz) = 0dce3af485b404ba4d29b3c5e23c1fe9d230722c1f3e3317cf1b8de21c0663deae3863852b61e6e08d3b62764dde93d5dfc99d3a86c73038ab6e0297b057261d From 9d04c64d6db924eb69864ea09f57a90447f82360 Mon Sep 17 00:00:00 2001 From: Fedora Release Engineering Date: Wed, 19 Jan 2022 23:47:20 +0000 Subject: [PATCH 058/160] - Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild Signed-off-by: Fedora Release Engineering --- container-selinux.spec | 5 ++++- 1 file changed, 4 insertions(+), 1 deletion(-) diff --git a/container-selinux.spec b/container-selinux.spec index 66cd599..dc2f5a5 100644 --- a/container-selinux.spec +++ b/container-selinux.spec @@ -23,7 +23,7 @@ Name: container-selinux Epoch: 2 Version: 2.173.1 -Release: 1%{?dist} +Release: 2%{?dist} License: GPLv2 URL: %{git0} Summary: SELinux policies for container runtimes @@ -117,6 +117,9 @@ fi # Hooked up to autobuilder, please check with @lsm5 before updating %changelog +* Wed Jan 19 2022 Fedora Release Engineering - 2:2.173.1-2 +- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild + * Tue Jan 18 2022 RH Container Bot - 2:2.173.1-1 - autobuilt v2.173.1 From 115c590de04d97cf00117d1fef8bca3f7f300e22 Mon Sep 17 00:00:00 2001 From: RH Container Bot Date: Wed, 26 Jan 2022 19:03:43 +0000 Subject: [PATCH 059/160] container-selinux-2:2.173.2-1 autobuilt v2.173.2 Signed-off-by: RH Container Bot --- .gitignore | 1 + container-selinux.spec | 9 ++++++--- sources | 2 +- 3 files changed, 8 insertions(+), 4 deletions(-) diff --git a/.gitignore b/.gitignore index e6f8dd4..d2a4f69 100644 --- a/.gitignore +++ b/.gitignore @@ -174,3 +174,4 @@ /v2.172.1.tar.gz /v2.173.0.tar.gz /v2.173.1.tar.gz +/v2.173.2.tar.gz diff --git a/container-selinux.spec b/container-selinux.spec index dc2f5a5..27f4917 100644 --- a/container-selinux.spec +++ b/container-selinux.spec @@ -5,7 +5,7 @@ # Used for comparing with latest upstream tag # to decide whether to autobuild -%global built_tag v2.173.1 +%global built_tag v2.173.2 %global built_tag_strip %(b=%{built_tag}; echo ${b:1}) # container-selinux stuff (prefix with ds_ for version/release etc.) @@ -22,8 +22,8 @@ # Hooked up to autobuilder, please check with @lsm5 before updating Name: container-selinux Epoch: 2 -Version: 2.173.1 -Release: 2%{?dist} +Version: 2.173.2 +Release: 1%{?dist} License: GPLv2 URL: %{git0} Summary: SELinux policies for container runtimes @@ -117,6 +117,9 @@ fi # Hooked up to autobuilder, please check with @lsm5 before updating %changelog +* Wed Jan 26 2022 RH Container Bot - 2:2.173.2-1 +- autobuilt v2.173.2 + * Wed Jan 19 2022 Fedora Release Engineering - 2:2.173.1-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild diff --git a/sources b/sources index 90fae30..51ccb3e 100644 --- a/sources +++ b/sources @@ -1 +1 @@ -SHA512 (v2.173.1.tar.gz) = 0dce3af485b404ba4d29b3c5e23c1fe9d230722c1f3e3317cf1b8de21c0663deae3863852b61e6e08d3b62764dde93d5dfc99d3a86c73038ab6e0297b057261d +SHA512 (v2.173.2.tar.gz) = a6e9201b26eb1cc06bced40a7919374d8c706a27c7bcc5281a62c1206868469fce0cb967e581dd8ecfe455ed0a2f51fdb656fdd1214ecf29b19e734e5a30dc67 From 6e8d3c1e6786f717a55c955201096890fe1ff4de Mon Sep 17 00:00:00 2001 From: Lokesh Mandvekar Date: Thu, 27 Jan 2022 13:37:46 -0500 Subject: [PATCH 060/160] switch to autospec Signed-off-by: Lokesh Mandvekar --- container-selinux.spec | 813 +---------------------------------------- 1 file changed, 4 insertions(+), 809 deletions(-) diff --git a/container-selinux.spec b/container-selinux.spec index 27f4917..0ebc554 100644 --- a/container-selinux.spec +++ b/container-selinux.spec @@ -7,6 +7,7 @@ # to decide whether to autobuild %global built_tag v2.173.2 %global built_tag_strip %(b=%{built_tag}; echo ${b:1}) +%global gen_version %(b=%{built_tag_strip}; echo ${b/-/"~"}) # container-selinux stuff (prefix with ds_ for version/release etc.) # Some bits borrowed from the openstack-selinux package @@ -22,8 +23,8 @@ # Hooked up to autobuilder, please check with @lsm5 before updating Name: container-selinux Epoch: 2 -Version: 2.173.2 -Release: 1%{?dist} +Version: %{gen_version} +Release: %autorelease License: GPLv2 URL: %{git0} Summary: SELinux policies for container runtimes @@ -115,811 +116,5 @@ if %{_sbindir}/selinuxenabled ; then fi -# Hooked up to autobuilder, please check with @lsm5 before updating %changelog -* Wed Jan 26 2022 RH Container Bot - 2:2.173.2-1 -- autobuilt v2.173.2 - -* Wed Jan 19 2022 Fedora Release Engineering - 2:2.173.1-2 -- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild - -* Tue Jan 18 2022 RH Container Bot - 2:2.173.1-1 -- autobuilt v2.173.1 - -* Tue Jan 11 2022 RH Container Bot - 2:2.173.0-1 -- autobuilt v2.173.0 - -* Thu Jan 06 2022 RH Container Bot - 2:2.172.1-1 -- autobuilt v2.172.1 - -* Mon Nov 22 2021 RH Container Bot - 2:2.172.0-1 -- autobuilt v2.172.0 - -* Wed Nov 10 2021 RH Container Bot - 2:2.171.0-1 -- autobuilt v2.171.0 - -* Fri Oct 15 2021 Dan Walsh - 2:2.170.0-2 -- Add conflicts k3s-selinux <= 0.4-1 to force upgrade - -* Tue Oct 05 2021 RH Container Bot - 2:2.170.0-1 -- autobuilt v2.170.0 - -* Fri Sep 24 2021 RH Container Bot - 2:2.169.0-1 -- autobuilt v2.169.0 - -* Tue Sep 14 2021 Vit Mojzis - 2:2.168.0-2 -- Start shipping udica templates - -* Mon Sep 13 2021 RH Container Bot - 2:2.168.0-1 -- autobuilt v2.168.0 - -* Fri Sep 10 2021 Lokesh Mandvekar - 2:2.167.0-2 -- use upstream tag instead of commits, fix autobuild macros - -* Thu Aug 26 2021 RH Container Bot - 2:2.167.0-1 -- autobuilt v2.167.0 - -* Wed Aug 25 2021 RH Container Bot - 2:2.165.1-1 -- autobuilt v2.165.1 - -* Wed Aug 04 2021 RH Container Bot - 2:2.164.2-1 -- autobuilt v2.164.2 - -* Wed Jul 21 2021 Fedora Release Engineering - 2:2.164.1-0.dev.git563ba3f.1 -- Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild - -* Mon Jul 19 2021 Dan Walsh - 2:2.164.1-0.dev -- Allow spc_t domains to set bpf rules on any domain - -* Sat Jun 12 2021 RH Container Bot - 2:2.163.0-2.dev.git99b40c5 -- bump to 2.163.0 -- autobuilt 99b40c5 - -* Tue May 25 2021 RH Container Bot - 2:2.162.2-2.dev.git61b862a -- bump to 2.162.2 -- autobuilt 61b862a - -* Mon May 17 2021 Dan Walsh - 2:2.162.1-3.dev.git233e620 -- Fix labels in users homedirs, before overlayfs is supported by default for non root users - -* Sun May 16 2021 RH Container Bot - 2:2.162.1-2.dev.git233e620 -- bump to 2.162.1 -- autobuilt 233e620 - -* Wed May 12 2021 RH Container Bot - 2:2.162.0-2.dev.gitda28288 -- bump to 2.162.0 -- autobuilt da28288 - -* Fri May 07 2021 RH Container Bot - 2:2.161.1-2.dev.gite1092cd -- bump to 2.161.1 -- autobuilt e1092cd - -* Tue Apr 20 2021 RH Container Bot - 2:2.160.0-3.dev.git5a60716 -- autobuilt 5a60716 - -* Wed Mar 31 2021 Lokesh Mandvekar - 2:2.160.0-2.dev.gitc9f0cb6 -- bump to v2.160.0 - -* Mon Mar 29 2021 RH Container Bot - 2:2.159.0-2.dev.gitd89a599 -- bump to 2.159.0 -- autobuilt d89a599 - -* Wed Feb 17 2021 Dan Walsh - 2:2.158.0-5.dev.gite78ac4f -- Rebuilt to use latest selinux-policy interfaces - -* Tue Feb 16 2021 RH Container Bot - 2:2.158.0-4.dev.gite78ac4f -- autobuilt e78ac4f - -* Fri Feb 12 2021 RH Container Bot - 2:2.158.0-3.dev.gitaeb85c4 -- autobuilt aeb85c4 - -* Thu Feb 11 2021 RH Container Bot - 2:2.158.0-2.dev.giteb6dad0 -- bump to 2.158.0 -- autobuilt eb6dad0 - -* Mon Feb 08 2021 RH Container Bot - 2:2.157.0-3.dev.git6d13bf9 -- autobuilt 6d13bf9 - -* Tue Feb 02 2021 RH Container Bot - 2:2.157.0-2.dev.gitf330e81 -- bump to 2.157.0 -- autobuilt f330e81 - -* Tue Jan 26 2021 Fedora Release Engineering - 2:2.156.0-3.dev.git75f193a -- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - -* Fri Jan 15 2021 RH Container Bot - 2:2.156.0-2.dev.git75f193a -- bump to 2.156.0 -- autobuilt 75f193a - -* Tue Jan 5 2021 RH Container Bot - 2:2.155.0-2.dev.git667f0f3 -- bump to 2.155.0 -- autobuilt 667f0f3 - -* Wed Dec 30 2020 RH Container Bot - 2:2.154.0-2.dev.git54e2ac5 -- bump to 2.154.0 -- autobuilt 54e2ac5 - -* Sat Dec 26 2020 RH Container Bot - 2:2.153.0-2.dev.git8573f8d -- bump to 2.153.0 -- autobuilt 8573f8d - -* Tue Dec 22 2020 RH Container Bot - 2:2.152.0-2.dev.git1677bc4 -- bump to 2.152.0 -- autobuilt 1677bc4 - -* Wed Dec 02 2020 Jindrich Novy - 2:2.151.0-4.dev.git5d3c461 -- remove bogus changelog dates emitted by build bot leading to build failure -- Related: #1715412 - -* Wed Dec 02 2020 Jindrich Novy - 2:2.151.0-3.dev.git5d3c461 -- remove %%fedora Epoch conditional -- Related: #1899626 - -* Thu Nov 5 2020 RH Container Bot - 2:2.151.0-2.dev.git5d3c461 -- bump to 2.151.0 -- autobuilt 5d3c461 - -* Fri Oct 23 2020 RH Container Bot - 2:2.150.0-2.dev.git0ef4703 -- bump to 2.150.0 -- autobuilt 0ef4703 - -* Thu Oct 15 2020 RH Container Bot - 2:2.148.0-3.dev.git9b3b66f -- autobuilt 9b3b66f - -* Wed Oct 14 2020 RH Container Bot - 2:2.148.0-2.dev.git3c361a2 -- bump to 2.148.0 -- autobuilt 3c361a2 - -* Mon Oct 12 2020 RH Container Bot - 2:2.147.0-2.dev.git9fb1698 -- bump to 2.147.0 -- autobuilt 9fb1698 - -* Thu Oct 8 2020 RH Container Bot - 2:2.146.0-2.dev.git2908536 -- bump to 2.146.0 -- autobuilt 2908536 - -* Thu Sep 10 2020 RH Container Bot - 2:2.145.0-2.dev.git464e922 -- bump to 2.145.0 -- autobuilt 464e922 - -* Mon Aug 31 2020 Lokesh Mandvekar - 2:2.144.0-5.dev.git5d929d4 -- Resolves: #1797554 - use _selinux_policy_version macro - -* Fri Aug 28 2020 Lokesh Mandvekar - 2:2.144.0-4.dev.git5d929d4 -- Resolves: #1780129 - bump min selinux-policy - -* Thu Aug 13 2020 RH Container Bot - 2:2.144.0-3.dev.git5d929d4 -- autobuilt 5d929d4 - -* Wed Aug 12 2020 RH Container Bot - 2:2.144.0-2.dev.git746ea7a -- bump to 2.144.0 -- autobuilt 746ea7a - -* Wed Aug 05 2020 RH Container Bot - 2:2.143.0-2.dev.gite2d5a9e -- bump to 2.143.0 -- autobuilt e2d5a9e - -* Mon Jul 27 2020 Fedora Release Engineering - 2:2.142.0-3.dev.gitfe6a25c -- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - -* Fri Jul 24 2020 RH Container Bot - 2:2.142.0-2.dev.gitfe6a25c -- bump to 2.142.0 -- autobuilt fe6a25c - -* Fri Jul 24 2020 RH Container Bot - 2:2.141.0-2.dev.git2750e78 -- bump to 2.141.0 -- autobuilt 2750e78 - -* Thu Jul 23 2020 Merlin Mathesius - 2:2.140.0-2.dev.git965c7fb -- Cleanup usage of %%{epoch} macro to allow building for ELN - -* Thu Jul 23 2020 RH Container Bot - 2:2.140.0-2.dev.git965c7fb -- bump to 2.140.0 -- autobuilt 965c7fb - -* Sat Jul 18 2020 RH Container Bot - 2:2.139.0-2.dev.git8c26927 -- bump to 2.139.0 -- autobuilt 8c26927 - -* Thu Jul 09 2020 RH Container Bot - 2:2.138.0-2.dev.git9884317 -- bump to 2.138.0 -- autobuilt 9884317 - -* Thu Jun 11 2020 RH Container Bot - 2:2.137.0-2.dev.git6b721da -- bump to 2.137.0 -- autobuilt 6b721da - -* Thu Jun 11 2020 RH Container Bot - 2:2.136.0-2.dev.git441172a -- bump to 2.136.0 -- autobuilt 441172a - -* Fri May 29 2020 RH Container Bot - 2:2.135.0-2.dev.git0d99e89 -- bump to 2.135.0 -- autobuilt 0d99e89 - -* Thu May 28 2020 RH Container Bot - 2:2.134.0-2.dev.gitff26015 -- bump to 2.134.0 -- autobuilt ff26015 - -* Mon May 11 2020 RH Container Bot - 2:2.132.0-3.dev.git0a878bd -- autobuilt 0a878bd - -* Wed Apr 15 2020 RH Container Bot - 2:2.132.0-2.dev.git448dfbf -- bump to 2.132.0 -- autobuilt 448dfbf - -* Thu Apr 09 2020 RH Container Bot - 2:2.131.0-2.dev.git9ce0dac -- bump to 2.131.0 -- autobuilt 9ce0dac - -* Mon Apr 06 2020 RH Container Bot - 2:2.130.0-2.dev.gitfd55ae0 -- bump to 2.130.0 -- autobuilt fd55ae0 - -* Sun Mar 29 2020 RH Container Bot - 2:2.129.0-2.dev.gitf00d1f4 -- bump to 2.129.0 -- autobuilt f00d1f4 - -* Sun Mar 29 2020 RH Container Bot - 2:2.128.0-2.dev.git363646f -- bump to 2.128.0 -- autobuilt 363646f - -* Fri Mar 27 2020 RH Container Bot - 2:2.127.0-2.dev.git6caf15d -- bump to 2.127.0 -- autobuilt 6caf15d - -* Thu Mar 26 2020 Dan Walsh - 2:2.126.0-2.dev.git867a377 -- Install selinux contexts file into /usr/share/containers/selinux/contexts - -* Thu Mar 26 2020 RH Container Bot - 2:2.126.0-2.dev.git867a377 -- bump to 2.126.0 -- autobuilt 867a377 - -* Mon Mar 23 2020 Lokesh Mandvekar - 2:2.125.2-2.dev.gitae0720d -- bump release tag - -* Mon Mar 23 2020 Dan Walsh - 2:2.125.2-1.dev.gitae0720d -- Install container_contexts file - -* Mon Mar 23 2020 RH Container Bot - 2:2.125.0-3.1.dev.gitfde876b -- autobuilt fde876b - -* Mon Mar 23 2020 Lokesh Mandvekar - 2:2.125.0-2.1.dev.gitb321ea4 -- bump release tag for smooth upgrade path - -* Fri Mar 20 2020 RH Container Bot - 2:2.125.0-0.1.dev.gitb321ea4 -- bump to 2.125.0 -- autobuilt b321ea4 - -* Tue Feb 11 2020 Lokesh Mandvekar - 2:2.124.0-4.dev.git5624558 -- keep functional upgrade path from f31 - -* Tue Feb 11 2020 RH Container Bot - 2:2.124.0-0.4.dev.git5624558 -- autobuilt 5624558 - -* Tue Jan 28 2020 Fedora Release Engineering - 2:2.124.0-0.3.dev.gitf958d0c -- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - -* Fri Jan 03 2020 Jindrich Novy - 2:2.124.0-0.2.dev.gitf958d0c -- use more current selinux policy version - -* Wed Dec 11 2019 RH Container Bot - 2:2.124.0-0.1.dev.gitf958d0c -- bump to 2.124.0 -- autobuilt f958d0c - -* Mon Dec 09 2019 Lokesh Mandvekar - 2:2.123.0-0.4.dev.git0b25a4a -- run selinux_relabel_pre - -* Fri Nov 29 2019 RH Container Bot - 2:2.123.0-0.3.dev.git0b25a4a -- autobuilt 0b25a4a - -* Fri Nov 29 2019 Dan Walsh - 2:2.123.0-0.2.dev.git661a904 -- Use selinux macros in post install scripts - -* Mon Nov 25 2019 RH Container Bot - 2:2.123.0-0.1.dev.git661a904 -- bump to 2.123.0 -- autobuilt 661a904 - -* Fri Nov 22 2019 RH Container Bot - 2:2.122.0-0.1.dev.git4560dd4 -- bump to 2.122.0 -- autobuilt 4560dd4 - -* Tue Nov 19 2019 RH Container Bot - 2:2.120.1-0.2.dev.gita233788 -- autobuilt a233788 - -* Wed Nov 06 2019 RH Container Bot - 2:2.120.1-0.1.dev.git6fb6dcf -- bump to 2.120.1 -- autobuilt 6fb6dcf - -* Sun Oct 27 2019 RH Container Bot - 2:2.119.1-0.1.dev.git2ecb2a8 -- bump to 2.119.1 -- autobuilt 2ecb2a8 - -* Thu Oct 24 2019 RH Container Bot - 2:2.119.0-0.1.dev.gitb383f07 -- bump to 2.119.0 -- autobuilt b383f07 - -* Fri Oct 11 2019 RH Container Bot - 2:2.118.0-0.1.dev.git79bdcb5 -- bump to 2.118.0 -- autobuilt 79bdcb5 - -* Fri Sep 20 2019 Lokesh Mandvekar (Bot) - 2:2.117.0-0.1.dev.gitbfde70a -- bump to 2.117.0 -- autobuilt bfde70a - -* Thu Sep 05 2019 Lokesh Mandvekar (Bot) - 2:2.116.0-0.1.dev.gitc5ef5ac -- bump to 2.116.0 -- autobuilt c5ef5ac - -* Wed Aug 21 2019 Lokesh Mandvekar (Bot) - 2:2.115.0-0.1.dev.gitfddfbbb -- bump to 2.115.0 -- autobuilt fddfbbb - -* Mon Aug 19 2019 Lokesh Mandvekar (Bot) - 2:2.114.0-0.1.dev.git028ab00 -- bump to 2.114.0 -- autobuilt 028ab00 - -* Fri Aug 9 2019 Dan Walsh - 2.113-1 -- Allow containers to name_bind to rawip_sockets. - -* Thu Aug 8 2019 Dan Walsh - 2.112-1 -- Allow containers to use fusefs_t entrypoint -- Dontaudit attempts to setattr on devicenodes. - -* Wed Jul 24 2019 Fedora Release Engineering - 2:2.111.0-3.1.dev.git9a75deb -- Rebuilt for https://fedoraproject.org/wiki/Fedora_31_Mass_Rebuild - -* Thu Jul 18 2019 Lokesh Mandvekar (Bot) - 2:2.111.0-2.1.dev.git9a75deb -- bump to 2.111.0 -- autobuilt 9a75deb - -* Wed Jul 10 2019 Lokesh Mandvekar - 2.110.0-1.1.dev.git544d71f -- bump to v2.110.0 -- hook up to autobuild - -* Mon Jul 8 2019 Dan Walsh - 2.109-1 -- Allow containers to accept connections on all socket types -- Allow containers to connect to gssproxy stream sockets if added to container - -* Fri Jun 14 2019 Dan Walsh - 2.107-1 -- Allow containers to manipulate Onload files. - -* Tue Jun 11 2019 Dan Walsh - 2.106-1 -- Allow all unconfined domains to manage unlabeled keyrings -- Add labeling for kubernetes pods - -* Mon Jun 3 2019 Dan Walsh - 2.104-1 -- Set proper labeling for container volumes in SilverBlue - -* Fri May 17 2019 Dan Walsh - 2.103-1 -- Set proper labeling for container volumes - -* Sun May 12 2019 Dan Walsh - 2.102-1 -- Allow all container domains to be entered from container_file_t - -* Fri May 3 2019 Dan Walsh - 2.101-1 -- Allow containers to read rpm cache and rpm databse - -* Tue Apr 23 2019 Dan Walsh - 2.100-1 -- Allow containers running as spc_t to create unlabeled_t kernel keyrings - -* Mon Apr 22 2019 Dan Walsh - 2.99-1 -- Fix labeling on /var/lib/containers/storage/overlay-layers,images to be sharable. - -* Mon Apr 15 2019 Dan Walsh - 2.98-1 -- Allow iptables to append to container_file_t - -* Fri Apr 12 2019 Dan Walsh - 2.97-1 -- Allow containers to read/write sysctl_kernel_ns_last_pid_t -- Allow containers to manage fusefs sockets and named pipes - -* Thu Apr 4 2019 Dan Walsh - 2.96-1 -- Allow containers to read/write sysctl_kernel_ns_last_pid_t - -* Mon Apr 1 2019 Dan Walsh - 2.95-1 -- Allow containers to create fusefs sockets and named pipes - -* Thu Mar 28 2019 Dan Walsh - 2.94-1 -- Allow init_t to manage container content -- Allow container domains to create fifo_files on fusefs file systems -- Add boolean to allow containers to use ceph file systems - -* Tue Mar 26 2019 Dan Walsh - 2.91-1 -- Allow container runtimes to create unlabeled keyrings - -* Wed Mar 20 2019 Dan Walsh - 2.90-1 -- Allow containers to mount and umount fuse file systems. This will allow us -- to use buidlah within a user namespace separated container. - -* Sat Mar 9 2019 Dan Walsh - 2.89-1 -- Allow all container domains to have container file types entrypoint -- Add new release to fix issues with udica -- Allow container_runtime_t to dyntransition to container domains - -* Sat Mar 09 2019 Lokesh Mandvekar (Bot) - 2:2.89-5.git2521d0d -- bump to 2.89 -- autobuilt 2521d0d - -* Thu Mar 07 2019 Lokesh Mandvekar (Bot) - 2:2.88-4.git5c98b56 -- bump to 2.88 -- autobuilt 5c98b56 - -* Wed Mar 06 2019 Lokesh Mandvekar (Bot) - 2:2.87-3.git2c1a2ab -- autobuilt 2c1a2ab - -* Sat Mar 02 2019 Lokesh Mandvekar (Bot) - 2:2.87-2.git891a85f -- bump to 2.87 -- autobuilt 891a85f - -* Fri Mar 1 2019 Dan Walsh - 2.86-1 -- Allow unconfined user and services to dyntrans to container domains, needed for CRIU -- Allow containers exectue hugetlb files. - -* Thu Feb 28 2019 Dan Walsh - 2.85-1 -- More allow rules to allow containers to run within containers - -* Thu Feb 28 2019 Dan Walsh - 2.84-1 -- More allow rules to allow containers to run within containers - -* Tue Feb 26 2019 Lokesh Mandvekar (Bot) - 2:2.82-2.git5e1f62f -- bump to 2.82 -- autobuilt 5e1f62f - -* Mon Feb 25 2019 Dan Walsh - 2.83-1 -- Allow containers to mounton cgroup and container_file_t - -* Sun Feb 10 2019 Dan Walsh - 2.82-1.nightly.git5e1f62f -- Allow confined users to use containers - -* Fri Feb 08 2019 Lokesh Mandvekar (Bot) - 2:2.80-3.git21c2be6 -- bump to 2.80 -- autobuilt 21c2be6 - -* Thu Feb 7 2019 Dan Walsh - 2.81-1 -- Add new labels for paths for containerd - -* Thu Jan 31 2019 Fedora Release Engineering - 2:2.80-2.git1b655d9 -- Rebuilt for https://fedoraproject.org/wiki/Fedora_30_Mass_Rebuild - -* Tue Jan 22 2019 Dan Walsh - 2.80-1.nightly.git21c2be6 -- Don't allow containers to talk to contianer runtime sockets - -* Fri Jan 11 2019 Dan Walsh - 2.79-1 -- Fix labeling on /var/lib/registries - -* Thu Jan 10 2019 Dan Walsh - 2.78-1 -- Fix labeling for images in docker daemon user namespace - -* Mon Dec 17 2018 Dan Walsh - 2.77-1 -- Allow container-runtime to setattr on fifo_file handed into container runtime. - -* Tue Nov 13 2018 Lokesh Mandvekar (Bot) - 2:2.752.75-1.dev.git99e2cfd1 -- bump to 2.75 -- autobuilt 99e2cfd - -* Mon Nov 12 2018 Dan Walsh - 2.76-1 -- Allow containers to sendto dgram socket of container runtimes -- Needed to run container runtimes in notify socket unit files. - -* Tue Oct 30 2018 Dan Walsh - 2.75-1.dev.git99e2cfd -- Allow containers to use fuse file systems by default - -* Fri Oct 19 2018 Dan Walsh - 2.74-1 -- Allow containers to setexec themselves - -* Sat Sep 22 2018 Dan Walsh - 2.73-2 -- Remove requires for policycoreutils-python-utils we don't need it. - -* Wed Sep 12 2018 Dan Walsh - 2.73-1 -- Define spc_t as a container_domain, so that container_runtime will transition -to spc_t even when setup with nosuid. - -* Wed Sep 12 2018 Dan Walsh - 2.72-1 -- Allow container_runtimes to setattr on callers fifo_files -github.com/opencontainers/selinux -* Mon Aug 27 2018 Dan Walsh - 2.71-2 -- Fix restorecon to not error on missing directory - -* Wed Aug 22 2018 Dan Walsh - 2.71-1 -- Allow unconfined_r to transition to system_r over container_runtime_exec_t - -* Wed Aug 22 2018 Dan Walsh - 2.70-1 -- Allow unconfined_t to transition to container_runtime_t over container_runtime_exec_t - -* Wed Jul 25 2018 Dan Walsh - 2.69-1 -- dontaudit attempts to write to sysctl_kernel_t - -* Wed Jul 18 2018 Lokesh Mandvekar (Bot) - 2:2.68-2.gitc139a3d -- autobuilt c139a3d - -* Mon Jul 16 2018 Dan Walsh - 2.67-1 -- Add label for /var/lib/origin -- Add customizable_file_t to customizable_types - -* Thu Jul 12 2018 Fedora Release Engineering - 2:2.67-3.dev.git042f7cf -- Rebuilt for https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild - -* Mon Jul 09 2018 Lokesh Mandvekar (Bot) - 2:2.67-2.git042f7cf -- autobuilt 042f7cf - -* Sat Jul 07 2018 Lokesh Mandvekar (Bot) - 2:2.67-1.git0407867 -- bump to 2.67 -- autobuilt 0407867 - -* Sat Jun 30 2018 Dan Walsh - 2.66-1 -- Allow container runtimes to dbus chat with systemd-resolved - -* Tue Jun 12 2018 Lokesh Mandvekar (Bot) - 2:2.64-1.gitdfaf8fd -- bump to 2.64 -- autobuilt dfaf8fd - -* Mon Jun 11 2018 Dan Walsh - 2.65-1 -- Add new type to handle containers running with a non priv user in a userns -- allow containers to map all sockets - -* Sun Jun 3 2018 Dan Walsh - 2.64-1.gitdfaf8fd -- Allow containers to create all socket classes - -* Wed May 30 2018 Dan Walsh - 2.63-1 -- Allow containers to create icmp packets - -* Fri May 25 2018 Lokesh Mandvekar (Bot) - 2:2.62-1.git1ecf953 -- bump to 2.62 -- autobuilt 1ecf953 - -* Mon May 21 2018 Dan Walsh - 2.61-1 -- Allow spc_t to load kernel modules from inside of container - -* Mon May 21 2018 Dan Walsh - 2.60-1 -- Allow containers to list cgroup directories - -* Mon May 21 2018 Dan Walsh - 2.59-1 -- Transition for unconfined_service_t to container_runtime_t when executing container_runtime_exec_t. - -* Mon May 21 2018 Dan Walsh - 2.58-2 -- Run restorecon /usr/bin/podman in postinstall - -* Fri May 18 2018 Dan Walsh - 2.58-1 -- Add labels to allow podman to be run from a systemd unit file - -* Tue Apr 17 2018 Lokesh Mandvekar (Bot) - 2:2.55-12.gitd248f91 -- autobuilt commit d248f91 - -* Tue Apr 17 2018 Lokesh Mandvekar (Bot) - 2:2.55-11.gitd248f91 -- autobuilt commit d248f91 - -* Mon Apr 16 2018 Lokesh Mandvekar (Bot) - 2:2.55-10.gitd248f91 -- autobuilt commit d248f91 - -* Mon Apr 16 2018 Lokesh Mandvekar (Bot) - 2:2.55-9.gitd248f91 -- autobuilt commit d248f91 - -* Mon Apr 16 2018 Lokesh Mandvekar (Bot) - 2:2.55-8 -- autobuilt commit d248f91 - -* Mon Apr 16 2018 Lokesh Mandvekar (Bot) - 2:2.55-7 -- autobuilt commit d248f91 - -* Mon Apr 16 2018 Lokesh Mandvekar (Bot) - 2:2.55-6 -- autobuilt commit d248f91 - -* Mon Apr 09 2018 Lokesh Mandvekar (Bot) - 2:2.55-5 -- autobuilt commit d248f91 - -* Mon Apr 09 2018 Lokesh Mandvekar (Bot) - 2:2.55-4 -- autobuilt commit d248f91 - -* Mon Apr 09 2018 Lokesh Mandvekar - 2:2.55-3 -- autobuilt commit d248f91 - -* Mon Apr 09 2018 Lokesh Mandvekar - 2:2.55-2 -- autobuilt commit d248f91 - -* Thu Mar 15 2018 Dan Walsh - 2.55-1 -- Dontaudit attempts by containers to write to /proc/self - -* Wed Mar 14 2018 Dan Walsh - 2.54-1 -- Add rules for container domains to make writing custom policy easier -- Allow shell_exec_t as a container_runtime_t entrypoint - -* Thu Mar 8 2018 Dan Walsh - 2.52-1 -- Add rules for container domains to make writing custom policy easier - -* Thu Mar 8 2018 Dan Walsh - 2.51-1 -- Allow shell_exec_t as a container_runtime_t entrypoint - -* Wed Mar 7 2018 Dan Walsh - 2.50-1 -- Allow bin_t as a container_runtime_t entrypoint -- Add rules for running container runtimes on mls - -* Thu Feb 15 2018 Dan Walsh - 2.48-1 -- Allow container domains to map container_file_t directories - -* Sat Feb 10 2018 Dan Walsh - 2.47-1 -- Change default label of /exports to container_var_lib_t - -* Fri Feb 09 2018 Igor Gnatenko - 2:2.46-3 -- Escape macros in %%CHANGELOG - -* Wed Feb 07 2018 Fedora Release Engineering - 2:2.46-2 -- Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild - -* Sat Feb 03 2018 Dan Walsh - 2.46-1 -- Add support for nosuid_transition flags for container_runtime and unconfined domains -* Fri Feb 02 2018 Dan Walsh - 2.45-1 -- Allow containers to sendto their own stream sockets - -* Mon Jan 29 2018 Dan Walsh - 2.44-1 -- Allow container domains to read kernel ipc info - -* Mon Jan 22 2018 Dan Walsh - 2.43-1 -- Allow containers to memory map the fifo_files leaked into container from -container runtimes. - -* Tue Jan 16 2018 Dan Walsh - 2.42-1 -- Allow unconfined domains to transition to container types, when no-new-privs is set. - -* Tue Jan 9 2018 Dan Walsh - 2.41-1 -- Add support to nnp_transition for container domains -- Eliminates need for typebounds. - -* Tue Jan 9 2018 Dan Walsh - 2.40-1 -- Allow container_runtime_t to use user ttys -- Fixes bounds check for container_t - -* Mon Jan 8 2018 Dan Walsh - 2.39-1 -- Allow container runtimes to use interited terminals. This helps -satisfy the bounds check of container_t versus container_runtime_t. - -* Sat Jan 6 2018 Dan Walsh - 2.38-1 -- Allow container runtimes to mmap container_file_t devices -- Add labeling for rhel push plugin - -* Tue Dec 12 2017 Dan Walsh - 2.37-1 -- Allow containers to use inherited ttys -- Allow ostree to handle labels under /var/lib/containers/ostree - -* Mon Nov 27 2017 Dan Walsh - 2.36-1 -- Allow containers to relabelto/from all file types to container_file_t - -* Mon Nov 27 2017 Dan Walsh - 2.35-1 -- Allow container to map chr_files labeled container_file_t - -* Wed Nov 22 2017 Dan Walsh - 2.34-1 -- Dontaudit container processes getattr on kernel file systems - -* Sun Nov 19 2017 Dan Walsh - 2.33-1 -- Allow containers to read /etc/resolv.conf and /etc/hosts if volume -- mounted into container. - -* Wed Nov 8 2017 Dan Walsh - 2.32-1 -- Make sure users creating content in /var/lib with right labels - -* Thu Oct 26 2017 Dan Walsh - 2.31-1 -- Allow the container runtime to dbus chat with dnsmasq -- add dontaudit rules for container trying to write to /proc - -* Tue Oct 10 2017 Dan Walsh - 2.29-1 -- Add support for lxcd -- Add support for labeling of tmpfs storage created within a container. - -* Mon Oct 9 2017 Dan Walsh - 2.28-1 -- Allow a container to umount a container_file_t filesystem - -* Fri Sep 22 2017 Dan Walsh - 2.27-1 -- Allow container runtimes to work with the netfilter sockets -- Allow container_file_t to be an entrypoint for VM's -- Allow spc_t domains to transition to svirt_t - -* Fri Sep 22 2017 Dan Walsh - 2.24-1 -- Make sure container_runtime_t has all access of container_t - -* Thu Sep 7 2017 Dan Walsh - 2.23-1 -- Allow container runtimes to create sockets in tmp dirs - -* Tue Sep 5 2017 Dan Walsh - 2.22-1 -- Add additonal support for crio labeling. - -* Mon Aug 14 2017 Troy Dawson - 2.21-3 -- Fixup spec file conditionals - -* Wed Jul 26 2017 Fedora Release Engineering - 2:2.21-2 -- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild - -* Thu Jul 6 2017 Dan Walsh - 2.21-1 -- Allow containers to execmod on container_share_t files. - -* Thu Jul 6 2017 Dan Walsh - 2.20-2 -- Relabel runc and crio executables - -* Fri Jun 30 2017 Dan Walsh - 2.20-1 -- Allow container processes to getsession - -* Mon Jun 12 2017 Dan Walsh - 2.19-1 -- Allow containers to create tun sockets - -* Tue Jun 6 2017 Dan Walsh - 2.18-1 -- Fix labeling for CRI-O files in overlay subdirs - -* Mon Jun 5 2017 Dan Walsh - 2.17-1 -- Revert change to run the container_runtime as ranged - -* Thu Jun 1 2017 Dan Walsh - 2.16-1 -- Add default labeling for cri-o in /etc/crio directories - -* Wed May 31 2017 Dan Walsh - 2.15-1 -- Allow container types to read/write container_runtime fifo files -- Allow a container runtime to mount on top of its own /proc - -* Fri May 19 2017 Dan Walsh - 2.14-1 -- Add labels for crio rename -- Break container_t rules out to use a separate container_domain -- Allow containers to be able to set namespaced SYCTLS -- Allow sandbox containers manage fuse files. -- Fixes to make container_runtimes work on MLS machines -- Bump version to allow handling of container_file_t filesystems -- Allow containers to mount, remount and umount container_file_t file systems -- Fixes to handle cap_userns -- Give container_t access to XFRM sockets -- Allow spc_t to dbus chat with init system -- Allow spc_t to dbus chat with init system -- Add rules to allow container runtimes to run with unconfined disabled -- Add rules to support cgroup file systems mounted into container. -- Fix typebounds entrypoint problems -- Fix typebounds problems -- Add typebounds statement for container_t from container_runtime_t -- We should only label runc not runc* - -* Tue Feb 28 2017 Dan Walsh - 2.10-1 -- Add rules to allow container runtimes to run with unconfined disabled -- Add rules to support cgroup file systems mounted into container. - -* Mon Feb 13 2017 Dan Walsh - 2.9-1 -- Add rules to allow container_runtimes to run with unconfined disabled - -* Thu Feb 9 2017 Dan Walsh - 2:8.1-1 -- Allow container_file_t to be stored on cgroup_t file systems - -* Tue Feb 7 2017 Dan Walsh - 2:7.1-1 -- Fix type in container interface file - -* Mon Feb 6 2017 Dan Walsh - 2:6.1-1 -- Fix typebounds entrypoint problems - -* Fri Jan 27 2017 Dan Walsh - 2:5.1-1 -- Fix typebounds problems - -* Thu Jan 19 2017 Dan Walsh - 2:4.1-1 -- Add typebounds statement for container_t from container_runtime_t -- We should only label runc not runc* - -* Tue Jan 17 2017 Dan Walsh - 2:3.1-1 -- Fix labeling on /usr/bin/runc.* -- Add sandbox_net_domain access to container.te -- Remove containers ability to look at /etc content - -* Wed Jan 11 2017 Lokesh Mandvekar - 2:2.2-4 -- use upstream's RHEL-1.12 branch, commit 56c32da for CentOS 7 - -* Tue Jan 10 2017 Jonathan Lebon - 2:2.2-3 -- properly disable docker module in %%post - -* Sat Jan 07 2017 Lokesh Mandvekar - 2:2.2-2 -- depend on selinux-policy-targeted -- relabel docker-latest* files as well - -* Fri Jan 06 2017 Lokesh Mandvekar - 2:2.2-1 -- bump to v2.2 -- additional labeling for ocid - -* Fri Jan 06 2017 Lokesh Mandvekar - 2:2.0-2 -- install policy at level 200 -- From: Dan Walsh - -* Fri Jan 06 2017 Lokesh Mandvekar - 2:2.0-1 -- Resolves: #1406517 - bump to v2.0 (first upload to Fedora as a -standalone package) -- include projectatomic/RHEL-1.12 branch commit for building on centos/rhel - -* Mon Dec 19 2016 Lokesh Mandvekar - 2:1.12.4-29 -- new package (separated from docker) +%autochangelog From a011a4e035b01245a96b0244d955d9160901b4bd Mon Sep 17 00:00:00 2001 From: Lokesh Mandvekar Date: Tue, 1 Feb 2022 14:49:05 -0500 Subject: [PATCH 061/160] bup to v2.174.0 Signed-off-by: Lokesh Mandvekar --- .gitignore | 1 + container-selinux.spec | 2 +- sources | 2 +- 3 files changed, 3 insertions(+), 2 deletions(-) diff --git a/.gitignore b/.gitignore index d2a4f69..48342c0 100644 --- a/.gitignore +++ b/.gitignore @@ -175,3 +175,4 @@ /v2.173.0.tar.gz /v2.173.1.tar.gz /v2.173.2.tar.gz +/v2.174.0.tar.gz diff --git a/container-selinux.spec b/container-selinux.spec index 0ebc554..521dd92 100644 --- a/container-selinux.spec +++ b/container-selinux.spec @@ -5,7 +5,7 @@ # Used for comparing with latest upstream tag # to decide whether to autobuild -%global built_tag v2.173.2 +%global built_tag v2.174.0 %global built_tag_strip %(b=%{built_tag}; echo ${b:1}) %global gen_version %(b=%{built_tag_strip}; echo ${b/-/"~"}) diff --git a/sources b/sources index 51ccb3e..b7ae7da 100644 --- a/sources +++ b/sources @@ -1 +1 @@ -SHA512 (v2.173.2.tar.gz) = a6e9201b26eb1cc06bced40a7919374d8c706a27c7bcc5281a62c1206868469fce0cb967e581dd8ecfe455ed0a2f51fdb656fdd1214ecf29b19e734e5a30dc67 +SHA512 (v2.174.0.tar.gz) = d509a7075bd7e0746d80da0f8e160f27777065a6796ffdcdb887e4aa6fd1a7860ce009d523aae47bc2620312fd01b14853bdf35feb916d7aa3d15f2bfe79ff3d From b80cce14077556c12ffaa3691e3f0a26457d1729 Mon Sep 17 00:00:00 2001 From: Lokesh Mandvekar Date: Thu, 3 Feb 2022 09:03:25 -0500 Subject: [PATCH 062/160] bump to v2.176.0 Signed-off-by: Lokesh Mandvekar --- .gitignore | 1 + container-selinux.spec | 2 +- sources | 2 +- 3 files changed, 3 insertions(+), 2 deletions(-) diff --git a/.gitignore b/.gitignore index 48342c0..9beb5d0 100644 --- a/.gitignore +++ b/.gitignore @@ -176,3 +176,4 @@ /v2.173.1.tar.gz /v2.173.2.tar.gz /v2.174.0.tar.gz +/v2.176.0.tar.gz diff --git a/container-selinux.spec b/container-selinux.spec index 521dd92..fbd6297 100644 --- a/container-selinux.spec +++ b/container-selinux.spec @@ -5,7 +5,7 @@ # Used for comparing with latest upstream tag # to decide whether to autobuild -%global built_tag v2.174.0 +%global built_tag v2.176.0 %global built_tag_strip %(b=%{built_tag}; echo ${b:1}) %global gen_version %(b=%{built_tag_strip}; echo ${b/-/"~"}) diff --git a/sources b/sources index b7ae7da..c95da91 100644 --- a/sources +++ b/sources @@ -1 +1 @@ -SHA512 (v2.174.0.tar.gz) = d509a7075bd7e0746d80da0f8e160f27777065a6796ffdcdb887e4aa6fd1a7860ce009d523aae47bc2620312fd01b14853bdf35feb916d7aa3d15f2bfe79ff3d +SHA512 (v2.176.0.tar.gz) = ad6c898da92df66bcd9578466e1d8513ba4e494d2f0c9c1f6ed0dec1426ebb624bb42b094cb7a478d9919c0952cd2e328a50fa58ff1ed2a7a069d9fbb8d4ffb8 From 56575732c2e88425d88f79d11e2c86a7664d1a9d Mon Sep 17 00:00:00 2001 From: Daniel J Walsh Date: Mon, 7 Feb 2022 10:26:59 -0500 Subject: [PATCH 063/160] local build --- container-selinux.spec | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/container-selinux.spec b/container-selinux.spec index fbd6297..7c4edbd 100644 --- a/container-selinux.spec +++ b/container-selinux.spec @@ -5,7 +5,7 @@ # Used for comparing with latest upstream tag # to decide whether to autobuild -%global built_tag v2.176.0 +%global built_tag v2.176.1 %global built_tag_strip %(b=%{built_tag}; echo ${b:1}) %global gen_version %(b=%{built_tag_strip}; echo ${b/-/"~"}) From 132afee9391e57a43fab7d831d28471fcf51135c Mon Sep 17 00:00:00 2001 From: Lokesh Mandvekar Date: Mon, 7 Feb 2022 10:49:02 -0500 Subject: [PATCH 064/160] Revert "local build" - was just a test This reverts commit 56575732c2e88425d88f79d11e2c86a7664d1a9d. --- container-selinux.spec | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/container-selinux.spec b/container-selinux.spec index 7c4edbd..fbd6297 100644 --- a/container-selinux.spec +++ b/container-selinux.spec @@ -5,7 +5,7 @@ # Used for comparing with latest upstream tag # to decide whether to autobuild -%global built_tag v2.176.1 +%global built_tag v2.176.0 %global built_tag_strip %(b=%{built_tag}; echo ${b:1}) %global gen_version %(b=%{built_tag_strip}; echo ${b/-/"~"}) From 0ec5ff3c754e15f4aa2492e6641db4372be69f73 Mon Sep 17 00:00:00 2001 From: Lokesh Mandvekar Date: Mon, 7 Feb 2022 10:50:23 -0500 Subject: [PATCH 065/160] bump for rebuild Signed-off-by: Lokesh Mandvekar From 045c776835d71acad920420c631d0fa2eb890cde Mon Sep 17 00:00:00 2001 From: Ed Santiago Date: Mon, 7 Feb 2022 13:30:31 -0700 Subject: [PATCH 066/160] Use podman in gating tests Nothing complicated, just a very simple 'run' command. Currently fails, which is good, it means this test would have caught today's crisis[1]. Unfortunately it fails with no useful info whatsoever: the test result simply shows ERROR. I'm not sure there's much I can do about this, since podman itself is silent on the failure. (It'd be nice if gating tests at least showed us the exit status). [1] https://github.com/containers/container-selinux/issues/169 Signed-off-by: Ed Santiago --- tests/tests.yml | 3 +++ 1 file changed, 3 insertions(+) diff --git a/tests/tests.yml b/tests/tests.yml index a5b5b1f..552bdbb 100644 --- a/tests/tests.yml +++ b/tests/tests.yml @@ -6,8 +6,11 @@ required_packages: - policycoreutils - container-selinux + - podman tests: - is-module-installed: run: semodule --list=full | grep container - can-rebuild-policy: run: semodule -B + - can-run-podman: + run: podman run --rm quay.io/libpod/testimage:20210610 cat -v /proc/self/attr/current From 0cbd2b83da671684668c1d401e0a8f66f628a667 Mon Sep 17 00:00:00 2001 From: Lokesh Mandvekar Date: Wed, 9 Feb 2022 14:52:17 -0500 Subject: [PATCH 067/160] bump to v2.177.0 Signed-off-by: Lokesh Mandvekar --- .gitignore | 1 + container-selinux.spec | 2 +- sources | 2 +- 3 files changed, 3 insertions(+), 2 deletions(-) diff --git a/.gitignore b/.gitignore index 9beb5d0..1473557 100644 --- a/.gitignore +++ b/.gitignore @@ -177,3 +177,4 @@ /v2.173.2.tar.gz /v2.174.0.tar.gz /v2.176.0.tar.gz +/v2.177.0.tar.gz diff --git a/container-selinux.spec b/container-selinux.spec index fbd6297..dda358a 100644 --- a/container-selinux.spec +++ b/container-selinux.spec @@ -5,7 +5,7 @@ # Used for comparing with latest upstream tag # to decide whether to autobuild -%global built_tag v2.176.0 +%global built_tag v2.177.0 %global built_tag_strip %(b=%{built_tag}; echo ${b:1}) %global gen_version %(b=%{built_tag_strip}; echo ${b/-/"~"}) diff --git a/sources b/sources index c95da91..48e1533 100644 --- a/sources +++ b/sources @@ -1 +1 @@ -SHA512 (v2.176.0.tar.gz) = ad6c898da92df66bcd9578466e1d8513ba4e494d2f0c9c1f6ed0dec1426ebb624bb42b094cb7a478d9919c0952cd2e328a50fa58ff1ed2a7a069d9fbb8d4ffb8 +SHA512 (v2.177.0.tar.gz) = fd25e01b4f9e78188a08ba190320671ab21eef21a9e85de14584bf61cc62a7dc4433a5663c3366416834a4f79eb4d521793db14ce9b4c3f2a896635d2343ffe2 From fc3b887a982be3646bb662c51345017121d0eaeb Mon Sep 17 00:00:00 2001 From: Lokesh Mandvekar Date: Fri, 11 Feb 2022 14:42:37 -0500 Subject: [PATCH 068/160] bump to v2.178.0 Signed-off-by: Lokesh Mandvekar --- .gitignore | 1 + container-selinux.spec | 2 +- sources | 2 +- 3 files changed, 3 insertions(+), 2 deletions(-) diff --git a/.gitignore b/.gitignore index 1473557..40e05ae 100644 --- a/.gitignore +++ b/.gitignore @@ -178,3 +178,4 @@ /v2.174.0.tar.gz /v2.176.0.tar.gz /v2.177.0.tar.gz +/v2.178.0.tar.gz diff --git a/container-selinux.spec b/container-selinux.spec index dda358a..8ae3b98 100644 --- a/container-selinux.spec +++ b/container-selinux.spec @@ -5,7 +5,7 @@ # Used for comparing with latest upstream tag # to decide whether to autobuild -%global built_tag v2.177.0 +%global built_tag v2.178.0 %global built_tag_strip %(b=%{built_tag}; echo ${b:1}) %global gen_version %(b=%{built_tag_strip}; echo ${b/-/"~"}) diff --git a/sources b/sources index 48e1533..8961689 100644 --- a/sources +++ b/sources @@ -1 +1 @@ -SHA512 (v2.177.0.tar.gz) = fd25e01b4f9e78188a08ba190320671ab21eef21a9e85de14584bf61cc62a7dc4433a5663c3366416834a4f79eb4d521793db14ce9b4c3f2a896635d2343ffe2 +SHA512 (v2.178.0.tar.gz) = b0916e55c874dcca5db5bd3639dca56120906541045241d3b959305b907bf8713253d11acb5c049ed7a1921acc0286718d0257102d0ceebab68a3673a2873016 From f52aec27061927b7ccd3af2bc36690c05a259a6e Mon Sep 17 00:00:00 2001 From: Lokesh Mandvekar Date: Tue, 1 Mar 2022 10:39:29 -0500 Subject: [PATCH 069/160] bump to v2.179.1 Signed-off-by: Lokesh Mandvekar --- .gitignore | 1 + container-selinux.spec | 2 +- sources | 2 +- 3 files changed, 3 insertions(+), 2 deletions(-) diff --git a/.gitignore b/.gitignore index 40e05ae..31264b8 100644 --- a/.gitignore +++ b/.gitignore @@ -179,3 +179,4 @@ /v2.176.0.tar.gz /v2.177.0.tar.gz /v2.178.0.tar.gz +/v2.179.1.tar.gz diff --git a/container-selinux.spec b/container-selinux.spec index 8ae3b98..c4643a8 100644 --- a/container-selinux.spec +++ b/container-selinux.spec @@ -5,7 +5,7 @@ # Used for comparing with latest upstream tag # to decide whether to autobuild -%global built_tag v2.178.0 +%global built_tag v2.179.1 %global built_tag_strip %(b=%{built_tag}; echo ${b:1}) %global gen_version %(b=%{built_tag_strip}; echo ${b/-/"~"}) diff --git a/sources b/sources index 8961689..a1dab12 100644 --- a/sources +++ b/sources @@ -1 +1 @@ -SHA512 (v2.178.0.tar.gz) = b0916e55c874dcca5db5bd3639dca56120906541045241d3b959305b907bf8713253d11acb5c049ed7a1921acc0286718d0257102d0ceebab68a3673a2873016 +SHA512 (v2.179.1.tar.gz) = 51c14482bd041405557e2bea858ef62565cac6c385f31495addf3d7633f00f3bfe6e9e7de3f35eb8b6e442c80db029320364ba9eebb06b14e6a9a08a2db92049 From 370ad1e8eace12b3987e90c88a5505a091962ef3 Mon Sep 17 00:00:00 2001 From: Lokesh Mandvekar Date: Mon, 7 Mar 2022 09:12:48 -0500 Subject: [PATCH 070/160] bump to v2.180.0 Signed-off-by: Lokesh Mandvekar --- .gitignore | 1 + container-selinux.spec | 2 +- sources | 2 +- 3 files changed, 3 insertions(+), 2 deletions(-) diff --git a/.gitignore b/.gitignore index 31264b8..8ae9b50 100644 --- a/.gitignore +++ b/.gitignore @@ -180,3 +180,4 @@ /v2.177.0.tar.gz /v2.178.0.tar.gz /v2.179.1.tar.gz +/v2.180.0.tar.gz diff --git a/container-selinux.spec b/container-selinux.spec index c4643a8..632ddaf 100644 --- a/container-selinux.spec +++ b/container-selinux.spec @@ -5,7 +5,7 @@ # Used for comparing with latest upstream tag # to decide whether to autobuild -%global built_tag v2.179.1 +%global built_tag v2.180.0 %global built_tag_strip %(b=%{built_tag}; echo ${b:1}) %global gen_version %(b=%{built_tag_strip}; echo ${b/-/"~"}) diff --git a/sources b/sources index a1dab12..3a519f2 100644 --- a/sources +++ b/sources @@ -1 +1 @@ -SHA512 (v2.179.1.tar.gz) = 51c14482bd041405557e2bea858ef62565cac6c385f31495addf3d7633f00f3bfe6e9e7de3f35eb8b6e442c80db029320364ba9eebb06b14e6a9a08a2db92049 +SHA512 (v2.180.0.tar.gz) = 391809480a7a7d9376a0076a427baa6ad5a201bd8aa508f39cc9a1f9f18d341d046642ce1595718744b4aaee8134a58dee0848d53edb9e9fbcf131269dc78d6a From 01159dc8d351e9036684bfee4a7aa5adae3617b5 Mon Sep 17 00:00:00 2001 From: RH Container Bot Date: Fri, 25 Mar 2022 19:02:41 +0000 Subject: [PATCH 071/160] auto bump to v2.181.0 --- .gitignore | 1 + container-selinux.spec | 2 +- sources | 1 + 3 files changed, 3 insertions(+), 1 deletion(-) diff --git a/.gitignore b/.gitignore index 8ae9b50..ad6ae74 100644 --- a/.gitignore +++ b/.gitignore @@ -181,3 +181,4 @@ /v2.178.0.tar.gz /v2.179.1.tar.gz /v2.180.0.tar.gz +/v2.181.0.tar.gz diff --git a/container-selinux.spec b/container-selinux.spec index 632ddaf..cfcc499 100644 --- a/container-selinux.spec +++ b/container-selinux.spec @@ -5,7 +5,7 @@ # Used for comparing with latest upstream tag # to decide whether to autobuild -%global built_tag v2.180.0 +%global built_tag v2.181.0 %global built_tag_strip %(b=%{built_tag}; echo ${b:1}) %global gen_version %(b=%{built_tag_strip}; echo ${b/-/"~"}) diff --git a/sources b/sources index 3a519f2..6b70793 100644 --- a/sources +++ b/sources @@ -1 +1,2 @@ SHA512 (v2.180.0.tar.gz) = 391809480a7a7d9376a0076a427baa6ad5a201bd8aa508f39cc9a1f9f18d341d046642ce1595718744b4aaee8134a58dee0848d53edb9e9fbcf131269dc78d6a +SHA512 (v2.181.0.tar.gz) = 8d85263599cf66b2d83e510ab75056d425ae5cd9b330c820d053e328575129ccca5320c92f29c8e0310d49b90261755567a28b93ae684f21f49698789ea6bf1b From 71fe6bf23def3095bc972479f76b7c8823f65f55 Mon Sep 17 00:00:00 2001 From: Lokesh Mandvekar Date: Thu, 7 Apr 2022 08:53:01 -0400 Subject: [PATCH 072/160] rebuild Signed-off-by: Lokesh Mandvekar From a16983f2a4d5c8b91deeff8c285e22ec3372e587 Mon Sep 17 00:00:00 2001 From: RH Container Bot Date: Mon, 18 Apr 2022 11:03:42 +0000 Subject: [PATCH 073/160] auto bump to v2.183.0 --- .gitignore | 1 + container-selinux.spec | 2 +- sources | 1 + 3 files changed, 3 insertions(+), 1 deletion(-) diff --git a/.gitignore b/.gitignore index ad6ae74..2a55446 100644 --- a/.gitignore +++ b/.gitignore @@ -182,3 +182,4 @@ /v2.179.1.tar.gz /v2.180.0.tar.gz /v2.181.0.tar.gz +/v2.183.0.tar.gz diff --git a/container-selinux.spec b/container-selinux.spec index cfcc499..acec4ac 100644 --- a/container-selinux.spec +++ b/container-selinux.spec @@ -5,7 +5,7 @@ # Used for comparing with latest upstream tag # to decide whether to autobuild -%global built_tag v2.181.0 +%global built_tag v2.183.0 %global built_tag_strip %(b=%{built_tag}; echo ${b:1}) %global gen_version %(b=%{built_tag_strip}; echo ${b/-/"~"}) diff --git a/sources b/sources index 6b70793..c94c5ea 100644 --- a/sources +++ b/sources @@ -1,2 +1,3 @@ SHA512 (v2.180.0.tar.gz) = 391809480a7a7d9376a0076a427baa6ad5a201bd8aa508f39cc9a1f9f18d341d046642ce1595718744b4aaee8134a58dee0848d53edb9e9fbcf131269dc78d6a SHA512 (v2.181.0.tar.gz) = 8d85263599cf66b2d83e510ab75056d425ae5cd9b330c820d053e328575129ccca5320c92f29c8e0310d49b90261755567a28b93ae684f21f49698789ea6bf1b +SHA512 (v2.183.0.tar.gz) = 688c16ce53c2ba8c65b481eb26fb8517c6c6f89a1ebc268557ec08c76ee4cfde7e861f25deaa28fa89940710399d213b63842fcf059f1d702e7645c82151afbf From 62a54b91e4f15e4a7cbc1d200be59f6010ba0b32 Mon Sep 17 00:00:00 2001 From: Lokesh Mandvekar Date: Thu, 21 Apr 2022 14:18:23 -0400 Subject: [PATCH 074/160] remove unwanted file entries from sources Signed-off-by: Lokesh Mandvekar --- sources | 2 -- 1 file changed, 2 deletions(-) diff --git a/sources b/sources index c94c5ea..fdc4e3b 100644 --- a/sources +++ b/sources @@ -1,3 +1 @@ -SHA512 (v2.180.0.tar.gz) = 391809480a7a7d9376a0076a427baa6ad5a201bd8aa508f39cc9a1f9f18d341d046642ce1595718744b4aaee8134a58dee0848d53edb9e9fbcf131269dc78d6a -SHA512 (v2.181.0.tar.gz) = 8d85263599cf66b2d83e510ab75056d425ae5cd9b330c820d053e328575129ccca5320c92f29c8e0310d49b90261755567a28b93ae684f21f49698789ea6bf1b SHA512 (v2.183.0.tar.gz) = 688c16ce53c2ba8c65b481eb26fb8517c6c6f89a1ebc268557ec08c76ee4cfde7e861f25deaa28fa89940710399d213b63842fcf059f1d702e7645c82151afbf From c69b4c3a01d6afe03318d45c1f1935c2a9086443 Mon Sep 17 00:00:00 2001 From: Lokesh Mandvekar Date: Wed, 11 May 2022 14:49:44 -0400 Subject: [PATCH 075/160] empty commit for smooth upgrade path Signed-off-by: Lokesh Mandvekar From a0981ae9b5512e651a72356c8972df7d0aba2c8d Mon Sep 17 00:00:00 2001 From: Lokesh Mandvekar Date: Wed, 11 May 2022 14:49:46 -0400 Subject: [PATCH 076/160] empty commit for smooth upgrade path Signed-off-by: Lokesh Mandvekar From 7f88c4f20c6c5fdc0e6b3df123ed31f2cb25869c Mon Sep 17 00:00:00 2001 From: RH Container Bot Date: Tue, 24 May 2022 15:06:21 +0000 Subject: [PATCH 077/160] auto bump to v2.186.0 --- .gitignore | 1 + container-selinux.spec | 2 +- sources | 2 +- 3 files changed, 3 insertions(+), 2 deletions(-) diff --git a/.gitignore b/.gitignore index 2a55446..8e72d4a 100644 --- a/.gitignore +++ b/.gitignore @@ -183,3 +183,4 @@ /v2.180.0.tar.gz /v2.181.0.tar.gz /v2.183.0.tar.gz +/v2.186.0.tar.gz diff --git a/container-selinux.spec b/container-selinux.spec index acec4ac..2950b54 100644 --- a/container-selinux.spec +++ b/container-selinux.spec @@ -5,7 +5,7 @@ # Used for comparing with latest upstream tag # to decide whether to autobuild -%global built_tag v2.183.0 +%global built_tag v2.186.0 %global built_tag_strip %(b=%{built_tag}; echo ${b:1}) %global gen_version %(b=%{built_tag_strip}; echo ${b/-/"~"}) diff --git a/sources b/sources index fdc4e3b..c890fc8 100644 --- a/sources +++ b/sources @@ -1 +1 @@ -SHA512 (v2.183.0.tar.gz) = 688c16ce53c2ba8c65b481eb26fb8517c6c6f89a1ebc268557ec08c76ee4cfde7e861f25deaa28fa89940710399d213b63842fcf059f1d702e7645c82151afbf +SHA512 (v2.186.0.tar.gz) = eff1379b550f8dab3294778c51ddec4c626bc766566b4bbbb8875b535530e6efa78cfec22ba26f8b6bb305fb90ec6b072bdb4cf5d32b3e4706daa8b3225dc811 From 49a8b59d8136709b70cd0172892630166c7c79be Mon Sep 17 00:00:00 2001 From: RH Container Bot Date: Tue, 24 May 2022 17:04:35 +0000 Subject: [PATCH 078/160] auto bump to v2.187.0 --- .gitignore | 1 + container-selinux.spec | 2 +- sources | 2 +- 3 files changed, 3 insertions(+), 2 deletions(-) diff --git a/.gitignore b/.gitignore index 8e72d4a..125b3a7 100644 --- a/.gitignore +++ b/.gitignore @@ -184,3 +184,4 @@ /v2.181.0.tar.gz /v2.183.0.tar.gz /v2.186.0.tar.gz +/v2.187.0.tar.gz diff --git a/container-selinux.spec b/container-selinux.spec index 2950b54..ab255b3 100644 --- a/container-selinux.spec +++ b/container-selinux.spec @@ -5,7 +5,7 @@ # Used for comparing with latest upstream tag # to decide whether to autobuild -%global built_tag v2.186.0 +%global built_tag v2.187.0 %global built_tag_strip %(b=%{built_tag}; echo ${b:1}) %global gen_version %(b=%{built_tag_strip}; echo ${b/-/"~"}) diff --git a/sources b/sources index c890fc8..d0596da 100644 --- a/sources +++ b/sources @@ -1 +1 @@ -SHA512 (v2.186.0.tar.gz) = eff1379b550f8dab3294778c51ddec4c626bc766566b4bbbb8875b535530e6efa78cfec22ba26f8b6bb305fb90ec6b072bdb4cf5d32b3e4706daa8b3225dc811 +SHA512 (v2.187.0.tar.gz) = a86c32cc83e68d3e84ddbb09afb6415899f3d214b51b37fa46976cd9f7c83a24e164a36ce43aa1e59a3bd93e2734b6ba34c98373a6eecfd1a313bc9a381b3a39 From b25bea1555154dbc48b23e8dfd57fceae5f655e4 Mon Sep 17 00:00:00 2001 From: Lokesh Mandvekar Date: Fri, 27 May 2022 13:27:20 -0400 Subject: [PATCH 079/160] update Version field per changes in rpm autobuilder Signed-off-by: Lokesh Mandvekar --- container-selinux.spec | 9 ++------- 1 file changed, 2 insertions(+), 7 deletions(-) diff --git a/container-selinux.spec b/container-selinux.spec index ab255b3..b1d9564 100644 --- a/container-selinux.spec +++ b/container-selinux.spec @@ -3,11 +3,7 @@ # container-selinux %global git0 https://github.com/containers/container-selinux -# Used for comparing with latest upstream tag -# to decide whether to autobuild %global built_tag v2.187.0 -%global built_tag_strip %(b=%{built_tag}; echo ${b:1}) -%global gen_version %(b=%{built_tag_strip}; echo ${b/-/"~"}) # container-selinux stuff (prefix with ds_ for version/release etc.) # Some bits borrowed from the openstack-selinux package @@ -23,7 +19,7 @@ # Hooked up to autobuilder, please check with @lsm5 before updating Name: container-selinux Epoch: 2 -Version: %{gen_version} +Version: 2.187.0 Release: %autorelease License: GPLv2 URL: %{git0} @@ -52,7 +48,7 @@ Conflicts: k3s-selinux <= 0.4-1 SELinux policy modules for use with container runtimes. %prep -%autosetup -Sgit -n %{name}-%{built_tag_strip} +%autosetup -Sgit %build make @@ -115,6 +111,5 @@ if %{_sbindir}/selinuxenabled ; then %{_sbindir}/restorecon -R /home/*/.local/share/containers/storage/overlay* 2> /dev/null fi - %changelog %autochangelog From 381c043b4682ff12a01601cbf85467a6ac459c6d Mon Sep 17 00:00:00 2001 From: RH Container Bot Date: Thu, 23 Jun 2022 15:04:11 +0000 Subject: [PATCH 080/160] auto bump to v2.188.0 --- .gitignore | 1 + container-selinux.spec | 4 ++-- sources | 2 +- 3 files changed, 4 insertions(+), 3 deletions(-) diff --git a/.gitignore b/.gitignore index 125b3a7..e08146a 100644 --- a/.gitignore +++ b/.gitignore @@ -185,3 +185,4 @@ /v2.183.0.tar.gz /v2.186.0.tar.gz /v2.187.0.tar.gz +/v2.188.0.tar.gz diff --git a/container-selinux.spec b/container-selinux.spec index b1d9564..77e4b45 100644 --- a/container-selinux.spec +++ b/container-selinux.spec @@ -3,7 +3,7 @@ # container-selinux %global git0 https://github.com/containers/container-selinux -%global built_tag v2.187.0 +%global built_tag v2.188.0 # container-selinux stuff (prefix with ds_ for version/release etc.) # Some bits borrowed from the openstack-selinux package @@ -19,7 +19,7 @@ # Hooked up to autobuilder, please check with @lsm5 before updating Name: container-selinux Epoch: 2 -Version: 2.187.0 +Version: 2.188.0 Release: %autorelease License: GPLv2 URL: %{git0} diff --git a/sources b/sources index d0596da..db29ae3 100644 --- a/sources +++ b/sources @@ -1 +1 @@ -SHA512 (v2.187.0.tar.gz) = a86c32cc83e68d3e84ddbb09afb6415899f3d214b51b37fa46976cd9f7c83a24e164a36ce43aa1e59a3bd93e2734b6ba34c98373a6eecfd1a313bc9a381b3a39 +SHA512 (v2.188.0.tar.gz) = 1b13275fe90fd15e57a4f72dafe875bcb247171f612ed2899245a3993c9ad25fbd2a7f6813e84a5f8b0473776d4dc11b84e8831f8c9f3eab9bacda525e0f6030 From 9d8732d586a8e2634792669ee8a8a7bf313466c1 Mon Sep 17 00:00:00 2001 From: RH Container Bot Date: Thu, 14 Jul 2022 15:03:02 +0000 Subject: [PATCH 081/160] auto bump to v2.189.0 --- .gitignore | 1 + container-selinux.spec | 4 ++-- sources | 2 +- 3 files changed, 4 insertions(+), 3 deletions(-) diff --git a/.gitignore b/.gitignore index e08146a..8fd74f4 100644 --- a/.gitignore +++ b/.gitignore @@ -186,3 +186,4 @@ /v2.186.0.tar.gz /v2.187.0.tar.gz /v2.188.0.tar.gz +/v2.189.0.tar.gz diff --git a/container-selinux.spec b/container-selinux.spec index 77e4b45..c494d2f 100644 --- a/container-selinux.spec +++ b/container-selinux.spec @@ -3,7 +3,7 @@ # container-selinux %global git0 https://github.com/containers/container-selinux -%global built_tag v2.188.0 +%global built_tag v2.189.0 # container-selinux stuff (prefix with ds_ for version/release etc.) # Some bits borrowed from the openstack-selinux package @@ -19,7 +19,7 @@ # Hooked up to autobuilder, please check with @lsm5 before updating Name: container-selinux Epoch: 2 -Version: 2.188.0 +Version: 2.189.0 Release: %autorelease License: GPLv2 URL: %{git0} diff --git a/sources b/sources index db29ae3..9c0a5bd 100644 --- a/sources +++ b/sources @@ -1 +1 @@ -SHA512 (v2.188.0.tar.gz) = 1b13275fe90fd15e57a4f72dafe875bcb247171f612ed2899245a3993c9ad25fbd2a7f6813e84a5f8b0473776d4dc11b84e8831f8c9f3eab9bacda525e0f6030 +SHA512 (v2.189.0.tar.gz) = 0c3d1d3c0b53281fbcf08580e0567a3c8fb297b59f9c51424ffd03da38a72f25da129899b6f36bae446bd5653e105cd9a71418e0cdeee5057315a31322e71bdc From a73e6880380992aff9ccdf2c0049b2932519f485 Mon Sep 17 00:00:00 2001 From: Fedora Release Engineering Date: Wed, 20 Jul 2022 23:31:50 +0000 Subject: [PATCH 082/160] Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild Signed-off-by: Fedora Release Engineering From 916aae25154fa1e1b5bd20ff2bc4ef528529c6d9 Mon Sep 17 00:00:00 2001 From: Lokesh Mandvekar Date: Wed, 17 Aug 2022 14:38:34 -0400 Subject: [PATCH 083/160] Use similar macros as other podman-related packages Signed-off-by: Lokesh Mandvekar --- container-selinux.spec | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/container-selinux.spec b/container-selinux.spec index c494d2f..899f22c 100644 --- a/container-selinux.spec +++ b/container-selinux.spec @@ -3,7 +3,7 @@ # container-selinux %global git0 https://github.com/containers/container-selinux -%global built_tag v2.189.0 +%global built_tag_strip 2.189.0 # container-selinux stuff (prefix with ds_ for version/release etc.) # Some bits borrowed from the openstack-selinux package @@ -24,7 +24,7 @@ Release: %autorelease License: GPLv2 URL: %{git0} Summary: SELinux policies for container runtimes -Source0: %{git0}/archive/%{built_tag}.tar.gz +Source0: %{git0}/archive/v%{built_tag_strip}.tar.gz BuildArch: noarch BuildRequires: make BuildRequires: git-core @@ -48,7 +48,7 @@ Conflicts: k3s-selinux <= 0.4-1 SELinux policy modules for use with container runtimes. %prep -%autosetup -Sgit +%autosetup -Sgit %{name}-%{built_tag_strip} %build make From 5d42cc9de253a0db34a457d73502a422504dfa46 Mon Sep 17 00:00:00 2001 From: Lokesh Mandvekar Date: Tue, 13 Sep 2022 14:30:22 -0400 Subject: [PATCH 084/160] Bump to v2.190.0 Resolves: #2031022 Signed-off-by: Lokesh Mandvekar --- .gitignore | 1 + container-selinux.spec | 4 ++-- sources | 2 +- 3 files changed, 4 insertions(+), 3 deletions(-) diff --git a/.gitignore b/.gitignore index 8fd74f4..37cec56 100644 --- a/.gitignore +++ b/.gitignore @@ -187,3 +187,4 @@ /v2.187.0.tar.gz /v2.188.0.tar.gz /v2.189.0.tar.gz +/v2.190.0.tar.gz diff --git a/container-selinux.spec b/container-selinux.spec index 899f22c..3d5507b 100644 --- a/container-selinux.spec +++ b/container-selinux.spec @@ -3,7 +3,7 @@ # container-selinux %global git0 https://github.com/containers/container-selinux -%global built_tag_strip 2.189.0 +%global built_tag_strip 2.190.0 # container-selinux stuff (prefix with ds_ for version/release etc.) # Some bits borrowed from the openstack-selinux package @@ -19,7 +19,7 @@ # Hooked up to autobuilder, please check with @lsm5 before updating Name: container-selinux Epoch: 2 -Version: 2.189.0 +Version: 2.190.0 Release: %autorelease License: GPLv2 URL: %{git0} diff --git a/sources b/sources index 9c0a5bd..cfee6dc 100644 --- a/sources +++ b/sources @@ -1 +1 @@ -SHA512 (v2.189.0.tar.gz) = 0c3d1d3c0b53281fbcf08580e0567a3c8fb297b59f9c51424ffd03da38a72f25da129899b6f36bae446bd5653e105cd9a71418e0cdeee5057315a31322e71bdc +SHA512 (v2.190.0.tar.gz) = 1b3d7fc3124265789d233d83112f7ced804c3f9721f56d2029f22a3c7e53f86c43305e5e84df2e65df756d2f2df5aaa915e9466f68e5c2b4af292311665ea53b From 0c3e157565c4d1571056470caa23fcc53f808907 Mon Sep 17 00:00:00 2001 From: Lokesh Mandvekar Date: Mon, 10 Oct 2022 08:43:32 -0400 Subject: [PATCH 085/160] update macros to get version correctly Signed-off-by: Lokesh Mandvekar --- container-selinux.spec | 6 ++++-- 1 file changed, 4 insertions(+), 2 deletions(-) diff --git a/container-selinux.spec b/container-selinux.spec index 3d5507b..ae76412 100644 --- a/container-selinux.spec +++ b/container-selinux.spec @@ -3,7 +3,9 @@ # container-selinux %global git0 https://github.com/containers/container-selinux -%global built_tag_strip 2.190.0 +%global built_tag v2.190.0 +%global built_tag_strip %(b=%{built_tag}; echo ${b:1}) +%global gen_version %(b=%{built_tag_strip}; echo ${b/-/"~"}) # container-selinux stuff (prefix with ds_ for version/release etc.) # Some bits borrowed from the openstack-selinux package @@ -19,7 +21,7 @@ # Hooked up to autobuilder, please check with @lsm5 before updating Name: container-selinux Epoch: 2 -Version: 2.190.0 +Version: %{gen_version} Release: %autorelease License: GPLv2 URL: %{git0} From 02261d4f06294ed56be733161cbe3b26916a1fdc Mon Sep 17 00:00:00 2001 From: Lokesh Mandvekar Date: Fri, 28 Oct 2022 14:43:13 +0530 Subject: [PATCH 086/160] bump to v2.190.1 Signed-off-by: Lokesh Mandvekar --- .gitignore | 1 + container-selinux.spec | 2 +- sources | 2 +- 3 files changed, 3 insertions(+), 2 deletions(-) diff --git a/.gitignore b/.gitignore index 37cec56..bb6c0cf 100644 --- a/.gitignore +++ b/.gitignore @@ -188,3 +188,4 @@ /v2.188.0.tar.gz /v2.189.0.tar.gz /v2.190.0.tar.gz +/v2.190.1.tar.gz diff --git a/container-selinux.spec b/container-selinux.spec index ae76412..e6c9219 100644 --- a/container-selinux.spec +++ b/container-selinux.spec @@ -3,7 +3,7 @@ # container-selinux %global git0 https://github.com/containers/container-selinux -%global built_tag v2.190.0 +%global built_tag v2.190.1 %global built_tag_strip %(b=%{built_tag}; echo ${b:1}) %global gen_version %(b=%{built_tag_strip}; echo ${b/-/"~"}) diff --git a/sources b/sources index cfee6dc..2bd7609 100644 --- a/sources +++ b/sources @@ -1 +1 @@ -SHA512 (v2.190.0.tar.gz) = 1b3d7fc3124265789d233d83112f7ced804c3f9721f56d2029f22a3c7e53f86c43305e5e84df2e65df756d2f2df5aaa915e9466f68e5c2b4af292311665ea53b +SHA512 (v2.190.1.tar.gz) = 716100b11816527128cd53590fe767fe01e2ab50f100d4b1d5e188b3eaac7023d9f293078428ffc733e9ab3497c56de1abc406d1fe8d23c951b5d39b97d6448b From 54778e261abe61a4b9bb072ac8b02e5baa1a1f91 Mon Sep 17 00:00:00 2001 From: Lokesh Mandvekar Date: Mon, 31 Oct 2022 13:55:54 +0530 Subject: [PATCH 087/160] bump to v2.191.0 Signed-off-by: Lokesh Mandvekar --- .gitignore | 1 + container-selinux.spec | 2 +- sources | 2 +- 3 files changed, 3 insertions(+), 2 deletions(-) diff --git a/.gitignore b/.gitignore index bb6c0cf..cee0e07 100644 --- a/.gitignore +++ b/.gitignore @@ -189,3 +189,4 @@ /v2.189.0.tar.gz /v2.190.0.tar.gz /v2.190.1.tar.gz +/v2.191.0.tar.gz diff --git a/container-selinux.spec b/container-selinux.spec index e6c9219..0169ab7 100644 --- a/container-selinux.spec +++ b/container-selinux.spec @@ -3,7 +3,7 @@ # container-selinux %global git0 https://github.com/containers/container-selinux -%global built_tag v2.190.1 +%global built_tag v2.191.0 %global built_tag_strip %(b=%{built_tag}; echo ${b:1}) %global gen_version %(b=%{built_tag_strip}; echo ${b/-/"~"}) diff --git a/sources b/sources index 2bd7609..5a4e1f1 100644 --- a/sources +++ b/sources @@ -1 +1 @@ -SHA512 (v2.190.1.tar.gz) = 716100b11816527128cd53590fe767fe01e2ab50f100d4b1d5e188b3eaac7023d9f293078428ffc733e9ab3497c56de1abc406d1fe8d23c951b5d39b97d6448b +SHA512 (v2.191.0.tar.gz) = 6bb857245a2aba4e7481e484dc7df8cbb1da46e37c76e912f55bf3a4a1cc858ca1fdbbc7a63c95115d647c92ed74af8b9f67ac919ce47386e17d255939b845eb From 5f23ffaf8e4a75d35e4c4fd839e8941d9c136f0e Mon Sep 17 00:00:00 2001 From: Lokesh Mandvekar Date: Wed, 23 Nov 2022 18:32:48 +0530 Subject: [PATCH 088/160] bump to v2.193.0 Signed-off-by: Lokesh Mandvekar --- .gitignore | 1 + container-selinux.spec | 2 +- sources | 2 +- 3 files changed, 3 insertions(+), 2 deletions(-) diff --git a/.gitignore b/.gitignore index cee0e07..2dc3488 100644 --- a/.gitignore +++ b/.gitignore @@ -190,3 +190,4 @@ /v2.190.0.tar.gz /v2.190.1.tar.gz /v2.191.0.tar.gz +/v2.193.0.tar.gz diff --git a/container-selinux.spec b/container-selinux.spec index 0169ab7..a3d4218 100644 --- a/container-selinux.spec +++ b/container-selinux.spec @@ -3,7 +3,7 @@ # container-selinux %global git0 https://github.com/containers/container-selinux -%global built_tag v2.191.0 +%global built_tag v2.193.0 %global built_tag_strip %(b=%{built_tag}; echo ${b:1}) %global gen_version %(b=%{built_tag_strip}; echo ${b/-/"~"}) diff --git a/sources b/sources index 5a4e1f1..56b5aed 100644 --- a/sources +++ b/sources @@ -1 +1 @@ -SHA512 (v2.191.0.tar.gz) = 6bb857245a2aba4e7481e484dc7df8cbb1da46e37c76e912f55bf3a4a1cc858ca1fdbbc7a63c95115d647c92ed74af8b9f67ac919ce47386e17d255939b845eb +SHA512 (v2.193.0.tar.gz) = b245fdd45e8de8701fd387f431fb48ba9c590efa0b5d804413059f8fb6672261fcb6bc3648d54fc30188038711f42239e0687259eb8dd33d17d75c7c24910d4a From dff2564c2c0c34e16c0ede32e929f469b655d99b Mon Sep 17 00:00:00 2001 From: Daniel J Walsh Date: Wed, 14 Dec 2022 13:39:39 -0500 Subject: [PATCH 089/160] local build --- .gitignore | 1 + container-selinux.spec | 2 +- sources | 2 +- 3 files changed, 3 insertions(+), 2 deletions(-) diff --git a/.gitignore b/.gitignore index 2dc3488..6de2d1d 100644 --- a/.gitignore +++ b/.gitignore @@ -191,3 +191,4 @@ /v2.190.1.tar.gz /v2.191.0.tar.gz /v2.193.0.tar.gz +/v2.195.0.tar.gz diff --git a/container-selinux.spec b/container-selinux.spec index a3d4218..5269333 100644 --- a/container-selinux.spec +++ b/container-selinux.spec @@ -3,7 +3,7 @@ # container-selinux %global git0 https://github.com/containers/container-selinux -%global built_tag v2.193.0 +%global built_tag v2.195.0 %global built_tag_strip %(b=%{built_tag}; echo ${b:1}) %global gen_version %(b=%{built_tag_strip}; echo ${b/-/"~"}) diff --git a/sources b/sources index 56b5aed..0895196 100644 --- a/sources +++ b/sources @@ -1 +1 @@ -SHA512 (v2.193.0.tar.gz) = b245fdd45e8de8701fd387f431fb48ba9c590efa0b5d804413059f8fb6672261fcb6bc3648d54fc30188038711f42239e0687259eb8dd33d17d75c7c24910d4a +SHA512 (v2.195.0.tar.gz) = 1e24c8bb9791a705d3ba3830d5529f4c1e30b1a4d6b681d5a2352b3cbede05accbf496c0fa08f067f559a50b37a988530b518364418fad93061cda61b64dd911 From fe4141b17a4221fcbaeea7cf19c0d805b10a5dec Mon Sep 17 00:00:00 2001 From: Daniel J Walsh Date: Thu, 15 Dec 2022 05:10:45 -0500 Subject: [PATCH 090/160] local build --- .gitignore | 1 + container-selinux.spec | 2 +- sources | 2 +- 3 files changed, 3 insertions(+), 2 deletions(-) diff --git a/.gitignore b/.gitignore index 6de2d1d..944a3ae 100644 --- a/.gitignore +++ b/.gitignore @@ -192,3 +192,4 @@ /v2.191.0.tar.gz /v2.193.0.tar.gz /v2.195.0.tar.gz +/v2.195.1.tar.gz diff --git a/container-selinux.spec b/container-selinux.spec index 5269333..3128b75 100644 --- a/container-selinux.spec +++ b/container-selinux.spec @@ -3,7 +3,7 @@ # container-selinux %global git0 https://github.com/containers/container-selinux -%global built_tag v2.195.0 +%global built_tag v2.195.1 %global built_tag_strip %(b=%{built_tag}; echo ${b:1}) %global gen_version %(b=%{built_tag_strip}; echo ${b/-/"~"}) diff --git a/sources b/sources index 0895196..d0faf71 100644 --- a/sources +++ b/sources @@ -1 +1 @@ -SHA512 (v2.195.0.tar.gz) = 1e24c8bb9791a705d3ba3830d5529f4c1e30b1a4d6b681d5a2352b3cbede05accbf496c0fa08f067f559a50b37a988530b518364418fad93061cda61b64dd911 +SHA512 (v2.195.1.tar.gz) = 11c3b61cdf274fe36b4aa7b59ffb43664aa4a5e73b3845ca664dbadb9e7b016529053e300c4805546864f1cefd12074363c00b935c5c28500a2f2b9d9bb0376b From 3fa11813c16c17d5fd12249572ee5da023af8b7f Mon Sep 17 00:00:00 2001 From: Lokesh Mandvekar Date: Wed, 4 Jan 2023 17:51:20 +0530 Subject: [PATCH 091/160] bump to v2.197.0 Signed-off-by: Lokesh Mandvekar --- .gitignore | 1 + container-selinux.spec | 2 +- sources | 2 +- 3 files changed, 3 insertions(+), 2 deletions(-) diff --git a/.gitignore b/.gitignore index 944a3ae..4862469 100644 --- a/.gitignore +++ b/.gitignore @@ -193,3 +193,4 @@ /v2.193.0.tar.gz /v2.195.0.tar.gz /v2.195.1.tar.gz +/v2.197.0.tar.gz diff --git a/container-selinux.spec b/container-selinux.spec index 3128b75..fe007d2 100644 --- a/container-selinux.spec +++ b/container-selinux.spec @@ -3,7 +3,7 @@ # container-selinux %global git0 https://github.com/containers/container-selinux -%global built_tag v2.195.1 +%global built_tag v2.197.0 %global built_tag_strip %(b=%{built_tag}; echo ${b:1}) %global gen_version %(b=%{built_tag_strip}; echo ${b/-/"~"}) diff --git a/sources b/sources index d0faf71..ef9f434 100644 --- a/sources +++ b/sources @@ -1 +1 @@ -SHA512 (v2.195.1.tar.gz) = 11c3b61cdf274fe36b4aa7b59ffb43664aa4a5e73b3845ca664dbadb9e7b016529053e300c4805546864f1cefd12074363c00b935c5c28500a2f2b9d9bb0376b +SHA512 (v2.197.0.tar.gz) = 2e0ef73206be5193cbd073d8e5a63cd62fc0f22be98fed73e45b424d062588182cfdb34af95d1b152a2626afcbef57443a6a0c248bd0e6d17a730268dc09e2be From 33f8e14356bc2653c33365f2c9252fc5e3074b65 Mon Sep 17 00:00:00 2001 From: Lokesh Mandvekar Date: Fri, 6 Jan 2023 20:11:43 +0530 Subject: [PATCH 092/160] bump to v2.198.0 Signed-off-by: Lokesh Mandvekar --- .gitignore | 1 + container-selinux.spec | 2 +- sources | 2 +- 3 files changed, 3 insertions(+), 2 deletions(-) diff --git a/.gitignore b/.gitignore index 4862469..46109be 100644 --- a/.gitignore +++ b/.gitignore @@ -194,3 +194,4 @@ /v2.195.0.tar.gz /v2.195.1.tar.gz /v2.197.0.tar.gz +/v2.198.0.tar.gz diff --git a/container-selinux.spec b/container-selinux.spec index fe007d2..6f0543c 100644 --- a/container-selinux.spec +++ b/container-selinux.spec @@ -3,7 +3,7 @@ # container-selinux %global git0 https://github.com/containers/container-selinux -%global built_tag v2.197.0 +%global built_tag v2.198.0 %global built_tag_strip %(b=%{built_tag}; echo ${b:1}) %global gen_version %(b=%{built_tag_strip}; echo ${b/-/"~"}) diff --git a/sources b/sources index ef9f434..8ec4aca 100644 --- a/sources +++ b/sources @@ -1 +1 @@ -SHA512 (v2.197.0.tar.gz) = 2e0ef73206be5193cbd073d8e5a63cd62fc0f22be98fed73e45b424d062588182cfdb34af95d1b152a2626afcbef57443a6a0c248bd0e6d17a730268dc09e2be +SHA512 (v2.198.0.tar.gz) = 33b4cf3a550894e4157098d24784474309dc8e65702bb15d735fa6899d7662d1077067dfed85e045037971cef8c2d3172d93ecd4efedbbdbaf8e56c5e93d8e14 From b8f764bbf56fe0eae93c743efd5c2b4280298fe7 Mon Sep 17 00:00:00 2001 From: Fedora Release Engineering Date: Thu, 19 Jan 2023 00:27:20 +0000 Subject: [PATCH 093/160] Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild Signed-off-by: Fedora Release Engineering From 9e01c83a26dbf1f67bfd31da87c38d146f830cf4 Mon Sep 17 00:00:00 2001 From: Lokesh Mandvekar Date: Tue, 31 Jan 2023 17:33:18 +0530 Subject: [PATCH 094/160] bump to v2.199.0 Signed-off-by: Lokesh Mandvekar --- .gitignore | 1 + container-selinux.spec | 2 +- sources | 2 +- 3 files changed, 3 insertions(+), 2 deletions(-) diff --git a/.gitignore b/.gitignore index 46109be..a2cd6e8 100644 --- a/.gitignore +++ b/.gitignore @@ -195,3 +195,4 @@ /v2.195.1.tar.gz /v2.197.0.tar.gz /v2.198.0.tar.gz +/v2.199.0.tar.gz diff --git a/container-selinux.spec b/container-selinux.spec index 6f0543c..b11b646 100644 --- a/container-selinux.spec +++ b/container-selinux.spec @@ -3,7 +3,7 @@ # container-selinux %global git0 https://github.com/containers/container-selinux -%global built_tag v2.198.0 +%global built_tag v2.199.0 %global built_tag_strip %(b=%{built_tag}; echo ${b:1}) %global gen_version %(b=%{built_tag_strip}; echo ${b/-/"~"}) diff --git a/sources b/sources index 8ec4aca..750ae14 100644 --- a/sources +++ b/sources @@ -1 +1 @@ -SHA512 (v2.198.0.tar.gz) = 33b4cf3a550894e4157098d24784474309dc8e65702bb15d735fa6899d7662d1077067dfed85e045037971cef8c2d3172d93ecd4efedbbdbaf8e56c5e93d8e14 +SHA512 (v2.199.0.tar.gz) = 28fd8f66d01fb4398f5df42432dca4c08123cd0cd9196d2f7deb30a095dd777a7285f067a508ec7faa7d1f3a72ae6939891b26d823c7c286586a36fa8a3a4ea2 From 24761d467feaa921c9150be25951d661c4ead1ca Mon Sep 17 00:00:00 2001 From: Lokesh Mandvekar Date: Wed, 8 Feb 2023 18:42:43 +0530 Subject: [PATCH 095/160] bump to v2.200.0 Signed-off-by: Lokesh Mandvekar --- .gitignore | 1 + container-selinux.spec | 6 +++++- sources | 2 +- 3 files changed, 7 insertions(+), 2 deletions(-) diff --git a/.gitignore b/.gitignore index a2cd6e8..e860c9e 100644 --- a/.gitignore +++ b/.gitignore @@ -196,3 +196,4 @@ /v2.197.0.tar.gz /v2.198.0.tar.gz /v2.199.0.tar.gz +/v2.200.0.tar.gz diff --git a/container-selinux.spec b/container-selinux.spec index b11b646..f7b71cf 100644 --- a/container-selinux.spec +++ b/container-selinux.spec @@ -3,7 +3,7 @@ # container-selinux %global git0 https://github.com/containers/container-selinux -%global built_tag v2.199.0 +%global built_tag v2.200.0 %global built_tag_strip %(b=%{built_tag}; echo ${b:1}) %global gen_version %(b=%{built_tag_strip}; echo ${b/-/"~"}) @@ -51,6 +51,10 @@ SELinux policy modules for use with container runtimes. %prep %autosetup -Sgit %{name}-%{built_tag_strip} +# https://github.com/containers/container-selinux/issues/203 +%if 0%{?fedora} <= 37 +sed -i '/user_namespace/d' container.te +%endif %build make diff --git a/sources b/sources index 750ae14..c13e8d1 100644 --- a/sources +++ b/sources @@ -1 +1 @@ -SHA512 (v2.199.0.tar.gz) = 28fd8f66d01fb4398f5df42432dca4c08123cd0cd9196d2f7deb30a095dd777a7285f067a508ec7faa7d1f3a72ae6939891b26d823c7c286586a36fa8a3a4ea2 +SHA512 (v2.200.0.tar.gz) = a681067e88552831de652dd74412e407b52b941dd769936cb5f9666a53837256d253c15916f1287c68f7c2693694904db42986582fa4a8487102e4332e592a2f From 586b681dfeb00dc68f447c095068ad29845fdce3 Mon Sep 17 00:00:00 2001 From: Lokesh Mandvekar Date: Fri, 10 Feb 2023 18:11:29 +0530 Subject: [PATCH 096/160] packit: include _selinux_policy_version for centos 8 for whatever reason centos 8 on copr says undefined macro. Signed-off-by: Lokesh Mandvekar --- container-selinux.spec | 4 ++++ 1 file changed, 4 insertions(+) diff --git a/container-selinux.spec b/container-selinux.spec index f7b71cf..7bc4b39 100644 --- a/container-selinux.spec +++ b/container-selinux.spec @@ -18,6 +18,10 @@ # Format must contain '$x' somewhere to do anything useful %global _format() export %1=""; for x in %{modulenames}; do %1+=%2; %1+=" "; done; +%if 0%{?centos} == 8 +%global _selinux_policy_version 3.14.3-111.el8 +%endif + # Hooked up to autobuilder, please check with @lsm5 before updating Name: container-selinux Epoch: 2 From 5434a9802e2fdc1f939deb07b526cc78bb1ca0ae Mon Sep 17 00:00:00 2001 From: Lokesh Mandvekar Date: Fri, 10 Feb 2023 18:36:41 +0530 Subject: [PATCH 097/160] dummy changelog to make packit centos 8 copr builds happy Signed-off-by: Lokesh Mandvekar --- container-selinux.spec | 5 +++++ 1 file changed, 5 insertions(+) diff --git a/container-selinux.spec b/container-selinux.spec index 7bc4b39..5d4d07c 100644 --- a/container-selinux.spec +++ b/container-selinux.spec @@ -122,4 +122,9 @@ if %{_sbindir}/selinuxenabled ; then fi %changelog +%if 0%{?centos} == 8 +* Fri Feb 10 2023 Lokesh Mandvekar +- Dummy changelog to make packit centos 8 copr builds happy +%else %autochangelog +%endif From 496d853e1c99322482aa83ff3b78dd4ca0eb0b67 Mon Sep 17 00:00:00 2001 From: Lokesh Mandvekar Date: Fri, 10 Feb 2023 18:52:46 +0530 Subject: [PATCH 098/160] delete systemd_chat_resolved for centos 8 packit builds Signed-off-by: Lokesh Mandvekar --- container-selinux.spec | 7 ++++++- 1 file changed, 6 insertions(+), 1 deletion(-) diff --git a/container-selinux.spec b/container-selinux.spec index 5d4d07c..500ac2b 100644 --- a/container-selinux.spec +++ b/container-selinux.spec @@ -56,10 +56,15 @@ SELinux policy modules for use with container runtimes. %prep %autosetup -Sgit %{name}-%{built_tag_strip} # https://github.com/containers/container-selinux/issues/203 -%if 0%{?fedora} <= 37 +%if 0%{?fedora} <= 37 || 0%{?centos} sed -i '/user_namespace/d' container.te %endif +%if 0%{?centos} == 8 +sed -i '/systemd_chat_resolved/d' container.te +%endif + + %build make From f405e189fc5f1e6f4d553c1689989cec7da0f6b9 Mon Sep 17 00:00:00 2001 From: RH Container Bot Date: Wed, 22 Feb 2023 20:00:53 +0000 Subject: [PATCH 099/160] auto bump to v2.201.0 --- .gitignore | 1 + container-selinux.spec | 2 +- sources | 2 +- 3 files changed, 3 insertions(+), 2 deletions(-) diff --git a/.gitignore b/.gitignore index e860c9e..92e554e 100644 --- a/.gitignore +++ b/.gitignore @@ -197,3 +197,4 @@ /v2.198.0.tar.gz /v2.199.0.tar.gz /v2.200.0.tar.gz +/v2.201.0.tar.gz diff --git a/container-selinux.spec b/container-selinux.spec index 500ac2b..56508fd 100644 --- a/container-selinux.spec +++ b/container-selinux.spec @@ -3,7 +3,7 @@ # container-selinux %global git0 https://github.com/containers/container-selinux -%global built_tag v2.200.0 +%global built_tag v2.201.0 %global built_tag_strip %(b=%{built_tag}; echo ${b:1}) %global gen_version %(b=%{built_tag_strip}; echo ${b/-/"~"}) diff --git a/sources b/sources index c13e8d1..3bf8fa4 100644 --- a/sources +++ b/sources @@ -1 +1 @@ -SHA512 (v2.200.0.tar.gz) = a681067e88552831de652dd74412e407b52b941dd769936cb5f9666a53837256d253c15916f1287c68f7c2693694904db42986582fa4a8487102e4332e592a2f +SHA512 (v2.201.0.tar.gz) = 90e09245ae0252edbf7c43c45de9a6e9fb8ea5b6e382608a29ce8c28736a1c4a8829f19e0f33badf5300af6648f58f545312f7da0be1697192e9df6175b05f77 From 9daecd44a0f5a5ccfee79f1f43d9942aa1337be4 Mon Sep 17 00:00:00 2001 From: RH Container Bot Date: Fri, 3 Mar 2023 01:01:37 +0000 Subject: [PATCH 100/160] auto bump to v2.202.0 --- .gitignore | 1 + container-selinux.spec | 2 +- sources | 2 +- 3 files changed, 3 insertions(+), 2 deletions(-) diff --git a/.gitignore b/.gitignore index 92e554e..2d5322f 100644 --- a/.gitignore +++ b/.gitignore @@ -198,3 +198,4 @@ /v2.199.0.tar.gz /v2.200.0.tar.gz /v2.201.0.tar.gz +/v2.202.0.tar.gz diff --git a/container-selinux.spec b/container-selinux.spec index 56508fd..b0540ce 100644 --- a/container-selinux.spec +++ b/container-selinux.spec @@ -3,7 +3,7 @@ # container-selinux %global git0 https://github.com/containers/container-selinux -%global built_tag v2.201.0 +%global built_tag v2.202.0 %global built_tag_strip %(b=%{built_tag}; echo ${b:1}) %global gen_version %(b=%{built_tag_strip}; echo ${b/-/"~"}) diff --git a/sources b/sources index 3bf8fa4..bb3101c 100644 --- a/sources +++ b/sources @@ -1 +1 @@ -SHA512 (v2.201.0.tar.gz) = 90e09245ae0252edbf7c43c45de9a6e9fb8ea5b6e382608a29ce8c28736a1c4a8829f19e0f33badf5300af6648f58f545312f7da0be1697192e9df6175b05f77 +SHA512 (v2.202.0.tar.gz) = a68b647261401d8f817bb25f735a3296a025bb08de49ab07db3474a65d3005c3d7475bcfa8b064a064d84bb563ab6f4967dd29cd233ad011c335fe3c5924f5b3 From 29543ebdbe4d9519dfb9fa62680e0276787d41b3 Mon Sep 17 00:00:00 2001 From: Lokesh Mandvekar Date: Mon, 6 Mar 2023 16:36:19 +0530 Subject: [PATCH 101/160] migrated to SPDX license Signed-off-by: Lokesh Mandvekar --- container-selinux.spec | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/container-selinux.spec b/container-selinux.spec index b0540ce..2539e38 100644 --- a/container-selinux.spec +++ b/container-selinux.spec @@ -27,7 +27,7 @@ Name: container-selinux Epoch: 2 Version: %{gen_version} Release: %autorelease -License: GPLv2 +License: GPL-2.0-only URL: %{git0} Summary: SELinux policies for container runtimes Source0: %{git0}/archive/v%{built_tag_strip}.tar.gz From 436047e7238fec57a6c2ec9a0e51bdec58c5a157 Mon Sep 17 00:00:00 2001 From: RH Container Bot Date: Tue, 7 Mar 2023 15:01:31 +0000 Subject: [PATCH 102/160] auto bump to v2.203.0 --- .gitignore | 1 + container-selinux.spec | 2 +- sources | 2 +- 3 files changed, 3 insertions(+), 2 deletions(-) diff --git a/.gitignore b/.gitignore index 2d5322f..2fde8e0 100644 --- a/.gitignore +++ b/.gitignore @@ -199,3 +199,4 @@ /v2.200.0.tar.gz /v2.201.0.tar.gz /v2.202.0.tar.gz +/v2.203.0.tar.gz diff --git a/container-selinux.spec b/container-selinux.spec index 2539e38..6dc6be5 100644 --- a/container-selinux.spec +++ b/container-selinux.spec @@ -3,7 +3,7 @@ # container-selinux %global git0 https://github.com/containers/container-selinux -%global built_tag v2.202.0 +%global built_tag v2.203.0 %global built_tag_strip %(b=%{built_tag}; echo ${b:1}) %global gen_version %(b=%{built_tag_strip}; echo ${b/-/"~"}) diff --git a/sources b/sources index bb3101c..34a5f8d 100644 --- a/sources +++ b/sources @@ -1 +1 @@ -SHA512 (v2.202.0.tar.gz) = a68b647261401d8f817bb25f735a3296a025bb08de49ab07db3474a65d3005c3d7475bcfa8b064a064d84bb563ab6f4967dd29cd233ad011c335fe3c5924f5b3 +SHA512 (v2.203.0.tar.gz) = 2b3f575af1078f798338225b1b619c0685399abbff506c9cfe10ebf4994c3e17f5296dc7050c91ab12b2e478bf298f33aaec4c21bb4fa302db5f47f3fdc6b609 From a37491982632620730918271acb0524ee5bbdab6 Mon Sep 17 00:00:00 2001 From: RH Container Bot Date: Mon, 13 Mar 2023 19:01:42 +0000 Subject: [PATCH 103/160] auto bump to v2.204.0 --- .gitignore | 1 + container-selinux.spec | 2 +- sources | 2 +- 3 files changed, 3 insertions(+), 2 deletions(-) diff --git a/.gitignore b/.gitignore index 2fde8e0..6e3d1d0 100644 --- a/.gitignore +++ b/.gitignore @@ -200,3 +200,4 @@ /v2.201.0.tar.gz /v2.202.0.tar.gz /v2.203.0.tar.gz +/v2.204.0.tar.gz diff --git a/container-selinux.spec b/container-selinux.spec index 6dc6be5..7535ac3 100644 --- a/container-selinux.spec +++ b/container-selinux.spec @@ -3,7 +3,7 @@ # container-selinux %global git0 https://github.com/containers/container-selinux -%global built_tag v2.203.0 +%global built_tag v2.204.0 %global built_tag_strip %(b=%{built_tag}; echo ${b:1}) %global gen_version %(b=%{built_tag_strip}; echo ${b/-/"~"}) diff --git a/sources b/sources index 34a5f8d..5444a47 100644 --- a/sources +++ b/sources @@ -1 +1 @@ -SHA512 (v2.203.0.tar.gz) = 2b3f575af1078f798338225b1b619c0685399abbff506c9cfe10ebf4994c3e17f5296dc7050c91ab12b2e478bf298f33aaec4c21bb4fa302db5f47f3fdc6b609 +SHA512 (v2.204.0.tar.gz) = 7318826bffd9fbdfa2b339e2686317aa403dc497da66569f1a414b506b2f324535f1f4c4a784f006f6110158740bb3e81cafb1665fe8a864dcb210a16228b602 From b30eaa12138a11645cc0dc9546ef67c218347d50 Mon Sep 17 00:00:00 2001 From: RH Container Bot Date: Thu, 16 Mar 2023 20:01:06 +0000 Subject: [PATCH 104/160] auto bump to v2.205.0 --- .gitignore | 1 + container-selinux.spec | 2 +- sources | 2 +- 3 files changed, 3 insertions(+), 2 deletions(-) diff --git a/.gitignore b/.gitignore index 6e3d1d0..13febe7 100644 --- a/.gitignore +++ b/.gitignore @@ -201,3 +201,4 @@ /v2.202.0.tar.gz /v2.203.0.tar.gz /v2.204.0.tar.gz +/v2.205.0.tar.gz diff --git a/container-selinux.spec b/container-selinux.spec index 7535ac3..2e10e22 100644 --- a/container-selinux.spec +++ b/container-selinux.spec @@ -3,7 +3,7 @@ # container-selinux %global git0 https://github.com/containers/container-selinux -%global built_tag v2.204.0 +%global built_tag v2.205.0 %global built_tag_strip %(b=%{built_tag}; echo ${b:1}) %global gen_version %(b=%{built_tag_strip}; echo ${b/-/"~"}) diff --git a/sources b/sources index 5444a47..236868f 100644 --- a/sources +++ b/sources @@ -1 +1 @@ -SHA512 (v2.204.0.tar.gz) = 7318826bffd9fbdfa2b339e2686317aa403dc497da66569f1a414b506b2f324535f1f4c4a784f006f6110158740bb3e81cafb1665fe8a864dcb210a16228b602 +SHA512 (v2.205.0.tar.gz) = a30ebb584c46d93b62cd53c50d2e8b7e84a98f0a9adb91e16e523ebfad920c61334471a32c0b8f96f3ce06de14e7346b64137b59a3248b4e5ea4978acad74948 From e37858fe401e10b8ad4d8caa4aaed5d3bbe2b311 Mon Sep 17 00:00:00 2001 From: RH Container Bot Date: Tue, 21 Mar 2023 22:01:20 +0000 Subject: [PATCH 105/160] auto bump to v2.206.0 --- .gitignore | 1 + container-selinux.spec | 2 +- sources | 2 +- 3 files changed, 3 insertions(+), 2 deletions(-) diff --git a/.gitignore b/.gitignore index 13febe7..cd3ece2 100644 --- a/.gitignore +++ b/.gitignore @@ -202,3 +202,4 @@ /v2.203.0.tar.gz /v2.204.0.tar.gz /v2.205.0.tar.gz +/v2.206.0.tar.gz diff --git a/container-selinux.spec b/container-selinux.spec index 2e10e22..2bc7a12 100644 --- a/container-selinux.spec +++ b/container-selinux.spec @@ -3,7 +3,7 @@ # container-selinux %global git0 https://github.com/containers/container-selinux -%global built_tag v2.205.0 +%global built_tag v2.206.0 %global built_tag_strip %(b=%{built_tag}; echo ${b:1}) %global gen_version %(b=%{built_tag_strip}; echo ${b/-/"~"}) diff --git a/sources b/sources index 236868f..ec2bd26 100644 --- a/sources +++ b/sources @@ -1 +1 @@ -SHA512 (v2.205.0.tar.gz) = a30ebb584c46d93b62cd53c50d2e8b7e84a98f0a9adb91e16e523ebfad920c61334471a32c0b8f96f3ce06de14e7346b64137b59a3248b4e5ea4978acad74948 +SHA512 (v2.206.0.tar.gz) = 3959f10964427476f121f683f3146ef50b1ce6859544d978fd3fb7473ae9fe73dab1b141a9e53f1048ca3c9aff0ba01f1d6bb454b678806749dca50ffcfd080c From a9e375591259343c3da7a6828e43c14ff9852f1c Mon Sep 17 00:00:00 2001 From: RH Container Bot Date: Fri, 31 Mar 2023 20:01:03 +0000 Subject: [PATCH 106/160] auto bump to v2.208.0 --- .gitignore | 1 + container-selinux.spec | 2 +- sources | 2 +- 3 files changed, 3 insertions(+), 2 deletions(-) diff --git a/.gitignore b/.gitignore index cd3ece2..5d7442b 100644 --- a/.gitignore +++ b/.gitignore @@ -203,3 +203,4 @@ /v2.204.0.tar.gz /v2.205.0.tar.gz /v2.206.0.tar.gz +/v2.208.0.tar.gz diff --git a/container-selinux.spec b/container-selinux.spec index 2bc7a12..7ea0b79 100644 --- a/container-selinux.spec +++ b/container-selinux.spec @@ -3,7 +3,7 @@ # container-selinux %global git0 https://github.com/containers/container-selinux -%global built_tag v2.206.0 +%global built_tag v2.208.0 %global built_tag_strip %(b=%{built_tag}; echo ${b:1}) %global gen_version %(b=%{built_tag_strip}; echo ${b/-/"~"}) diff --git a/sources b/sources index ec2bd26..3353eb8 100644 --- a/sources +++ b/sources @@ -1 +1 @@ -SHA512 (v2.206.0.tar.gz) = 3959f10964427476f121f683f3146ef50b1ce6859544d978fd3fb7473ae9fe73dab1b141a9e53f1048ca3c9aff0ba01f1d6bb454b678806749dca50ffcfd080c +SHA512 (v2.208.0.tar.gz) = 3612d332b385fb96835a310e10533a96b3c87d441144f80b1097a68913271d0480ba75c0b391f6ab599ca4b869d3331e95b1d5e04090e01917699b5d2e0c8d9a From 06867e53d1101cf0da4c066db17344bfdd57925e Mon Sep 17 00:00:00 2001 From: RH Container Bot Date: Mon, 3 Apr 2023 07:02:31 +0000 Subject: [PATCH 107/160] auto bump to v2.209.0 --- .gitignore | 1 + container-selinux.spec | 2 +- sources | 2 +- 3 files changed, 3 insertions(+), 2 deletions(-) diff --git a/.gitignore b/.gitignore index 5d7442b..8b858d3 100644 --- a/.gitignore +++ b/.gitignore @@ -204,3 +204,4 @@ /v2.205.0.tar.gz /v2.206.0.tar.gz /v2.208.0.tar.gz +/v2.209.0.tar.gz diff --git a/container-selinux.spec b/container-selinux.spec index 7ea0b79..69e9df1 100644 --- a/container-selinux.spec +++ b/container-selinux.spec @@ -3,7 +3,7 @@ # container-selinux %global git0 https://github.com/containers/container-selinux -%global built_tag v2.208.0 +%global built_tag v2.209.0 %global built_tag_strip %(b=%{built_tag}; echo ${b:1}) %global gen_version %(b=%{built_tag_strip}; echo ${b/-/"~"}) diff --git a/sources b/sources index 3353eb8..00840ea 100644 --- a/sources +++ b/sources @@ -1 +1 @@ -SHA512 (v2.208.0.tar.gz) = 3612d332b385fb96835a310e10533a96b3c87d441144f80b1097a68913271d0480ba75c0b391f6ab599ca4b869d3331e95b1d5e04090e01917699b5d2e0c8d9a +SHA512 (v2.209.0.tar.gz) = 98215e6ab832b0e9b951c69f9000b5bc8e0f38e4e88c8b702a0b01b0da945a32d9692fe87cc2ebeac4cd224fa37e94ef7c72a280e7ff2c95deedfa44eddb687f From 5ebc24d7cc1de5a37711b900fa2dc2457132568c Mon Sep 17 00:00:00 2001 From: RH Container Bot Date: Thu, 6 Apr 2023 21:01:05 +0000 Subject: [PATCH 108/160] auto bump to v2.210.0 --- .gitignore | 1 + container-selinux.spec | 2 +- sources | 2 +- 3 files changed, 3 insertions(+), 2 deletions(-) diff --git a/.gitignore b/.gitignore index 8b858d3..f47eb93 100644 --- a/.gitignore +++ b/.gitignore @@ -205,3 +205,4 @@ /v2.206.0.tar.gz /v2.208.0.tar.gz /v2.209.0.tar.gz +/v2.210.0.tar.gz diff --git a/container-selinux.spec b/container-selinux.spec index 69e9df1..64798e5 100644 --- a/container-selinux.spec +++ b/container-selinux.spec @@ -3,7 +3,7 @@ # container-selinux %global git0 https://github.com/containers/container-selinux -%global built_tag v2.209.0 +%global built_tag v2.210.0 %global built_tag_strip %(b=%{built_tag}; echo ${b:1}) %global gen_version %(b=%{built_tag_strip}; echo ${b/-/"~"}) diff --git a/sources b/sources index 00840ea..24940fe 100644 --- a/sources +++ b/sources @@ -1 +1 @@ -SHA512 (v2.209.0.tar.gz) = 98215e6ab832b0e9b951c69f9000b5bc8e0f38e4e88c8b702a0b01b0da945a32d9692fe87cc2ebeac4cd224fa37e94ef7c72a280e7ff2c95deedfa44eddb687f +SHA512 (v2.210.0.tar.gz) = e0bc076893028b4cef0d6c48d690b984c5f5c87dcf75b502b91d0905e97db8ce21d5792f3e91d0b19d6991f9a7bba068525033a1e7ad075880a36c6d366b7187 From 2d04a157867e9b5d46bf06bf1e1a7359da293422 Mon Sep 17 00:00:00 2001 From: RH Container Bot Date: Sat, 22 Apr 2023 12:01:40 +0000 Subject: [PATCH 109/160] auto bump to v2.211.0 --- .gitignore | 1 + container-selinux.spec | 2 +- sources | 2 +- 3 files changed, 3 insertions(+), 2 deletions(-) diff --git a/.gitignore b/.gitignore index f47eb93..515560e 100644 --- a/.gitignore +++ b/.gitignore @@ -206,3 +206,4 @@ /v2.208.0.tar.gz /v2.209.0.tar.gz /v2.210.0.tar.gz +/v2.211.0.tar.gz diff --git a/container-selinux.spec b/container-selinux.spec index 64798e5..9add30d 100644 --- a/container-selinux.spec +++ b/container-selinux.spec @@ -3,7 +3,7 @@ # container-selinux %global git0 https://github.com/containers/container-selinux -%global built_tag v2.210.0 +%global built_tag v2.211.0 %global built_tag_strip %(b=%{built_tag}; echo ${b:1}) %global gen_version %(b=%{built_tag_strip}; echo ${b/-/"~"}) diff --git a/sources b/sources index 24940fe..c752430 100644 --- a/sources +++ b/sources @@ -1 +1 @@ -SHA512 (v2.210.0.tar.gz) = e0bc076893028b4cef0d6c48d690b984c5f5c87dcf75b502b91d0905e97db8ce21d5792f3e91d0b19d6991f9a7bba068525033a1e7ad075880a36c6d366b7187 +SHA512 (v2.211.0.tar.gz) = 76c795cf51e80a3996ff79d5f29952932c35124c3ed283d1f101c61b02499ea8769d886b99a61e3c8c794ed9729b0151de92b283ef18d7e12f5fd59e5568860a From 1a501c866eea88309405ad3cc1381e936ac5432b Mon Sep 17 00:00:00 2001 From: Lokesh Mandvekar Date: Fri, 28 Apr 2023 13:39:45 -0400 Subject: [PATCH 110/160] fedora spec not used for packit copr-builds Signed-off-by: Lokesh Mandvekar --- container-selinux.spec | 5 ----- 1 file changed, 5 deletions(-) diff --git a/container-selinux.spec b/container-selinux.spec index 9add30d..0059ad0 100644 --- a/container-selinux.spec +++ b/container-selinux.spec @@ -127,9 +127,4 @@ if %{_sbindir}/selinuxenabled ; then fi %changelog -%if 0%{?centos} == 8 -* Fri Feb 10 2023 Lokesh Mandvekar -- Dummy changelog to make packit centos 8 copr builds happy -%else %autochangelog -%endif From 23b10c340b66402759218152a43e04adbc259275 Mon Sep 17 00:00:00 2001 From: Lokesh Mandvekar Date: Fri, 28 Apr 2023 14:25:38 -0400 Subject: [PATCH 111/160] prepare for Packit integration, remove centos conditionals Signed-off-by: Lokesh Mandvekar --- container-selinux.spec | 20 +++----------------- 1 file changed, 3 insertions(+), 17 deletions(-) diff --git a/container-selinux.spec b/container-selinux.spec index 0059ad0..6592a46 100644 --- a/container-selinux.spec +++ b/container-selinux.spec @@ -3,10 +3,6 @@ # container-selinux %global git0 https://github.com/containers/container-selinux -%global built_tag v2.211.0 -%global built_tag_strip %(b=%{built_tag}; echo ${b:1}) -%global gen_version %(b=%{built_tag_strip}; echo ${b/-/"~"}) - # container-selinux stuff (prefix with ds_ for version/release etc.) # Some bits borrowed from the openstack-selinux package %global selinuxtype targeted @@ -18,19 +14,14 @@ # Format must contain '$x' somewhere to do anything useful %global _format() export %1=""; for x in %{modulenames}; do %1+=%2; %1+=" "; done; -%if 0%{?centos} == 8 -%global _selinux_policy_version 3.14.3-111.el8 -%endif - -# Hooked up to autobuilder, please check with @lsm5 before updating Name: container-selinux Epoch: 2 -Version: %{gen_version} +Version: 2.211.0 Release: %autorelease License: GPL-2.0-only URL: %{git0} Summary: SELinux policies for container runtimes -Source0: %{git0}/archive/v%{built_tag_strip}.tar.gz +Source0: %{git0}/archive/v%{version}.tar.gz BuildArch: noarch BuildRequires: make BuildRequires: git-core @@ -56,15 +47,10 @@ SELinux policy modules for use with container runtimes. %prep %autosetup -Sgit %{name}-%{built_tag_strip} # https://github.com/containers/container-selinux/issues/203 -%if 0%{?fedora} <= 37 || 0%{?centos} +%if 0%{?fedora} <= 37 sed -i '/user_namespace/d' container.te %endif -%if 0%{?centos} == 8 -sed -i '/systemd_chat_resolved/d' container.te -%endif - - %build make From 8bff9a525154955a3d8efda5a6a358ff36898bae Mon Sep 17 00:00:00 2001 From: Lokesh Mandvekar Date: Tue, 2 May 2023 10:30:32 -0400 Subject: [PATCH 112/160] bump to v2.211.1 Should address relabeling issues mentioned in: https://bodhi.fedoraproject.org/updates/FEDORA-2023-06ac069828 Signed-off-by: Lokesh Mandvekar --- .gitignore | 1 + container-selinux.spec | 2 +- sources | 2 +- 3 files changed, 3 insertions(+), 2 deletions(-) diff --git a/.gitignore b/.gitignore index 515560e..bed9bb1 100644 --- a/.gitignore +++ b/.gitignore @@ -207,3 +207,4 @@ /v2.209.0.tar.gz /v2.210.0.tar.gz /v2.211.0.tar.gz +/v2.211.1.tar.gz diff --git a/container-selinux.spec b/container-selinux.spec index 6592a46..564cc18 100644 --- a/container-selinux.spec +++ b/container-selinux.spec @@ -16,7 +16,7 @@ Name: container-selinux Epoch: 2 -Version: 2.211.0 +Version: 2.211.1 Release: %autorelease License: GPL-2.0-only URL: %{git0} diff --git a/sources b/sources index c752430..8ab7d2a 100644 --- a/sources +++ b/sources @@ -1 +1 @@ -SHA512 (v2.211.0.tar.gz) = 76c795cf51e80a3996ff79d5f29952932c35124c3ed283d1f101c61b02499ea8769d886b99a61e3c8c794ed9729b0151de92b283ef18d7e12f5fd59e5568860a +SHA512 (v2.211.1.tar.gz) = 1708e6978905261d2fb03cd44da57761c3d813811ceb8af54a2615af50c2950c99fc62c7a38786af612be91de46abb27fc4b40c0cf116f2a3cef0b3a3944f8fa From e5568c55a3835ddb7b47506cb48e2207dfb96bb0 Mon Sep 17 00:00:00 2001 From: Lokesh Mandvekar Date: Tue, 16 May 2023 09:21:55 -0400 Subject: [PATCH 113/160] bump to v2.213.0 Signed-off-by: Lokesh Mandvekar --- .gitignore | 1 + container-selinux.spec | 2 +- sources | 2 +- 3 files changed, 3 insertions(+), 2 deletions(-) diff --git a/.gitignore b/.gitignore index bed9bb1..4733626 100644 --- a/.gitignore +++ b/.gitignore @@ -208,3 +208,4 @@ /v2.210.0.tar.gz /v2.211.0.tar.gz /v2.211.1.tar.gz +/v2.213.0.tar.gz diff --git a/container-selinux.spec b/container-selinux.spec index 564cc18..0b9e76e 100644 --- a/container-selinux.spec +++ b/container-selinux.spec @@ -16,7 +16,7 @@ Name: container-selinux Epoch: 2 -Version: 2.211.1 +Version: 2.213.0 Release: %autorelease License: GPL-2.0-only URL: %{git0} diff --git a/sources b/sources index 8ab7d2a..8920a6c 100644 --- a/sources +++ b/sources @@ -1 +1 @@ -SHA512 (v2.211.1.tar.gz) = 1708e6978905261d2fb03cd44da57761c3d813811ceb8af54a2615af50c2950c99fc62c7a38786af612be91de46abb27fc4b40c0cf116f2a3cef0b3a3944f8fa +SHA512 (v2.213.0.tar.gz) = 5973b104b99dbadf8d935f241c70a570efc27a1858c035fc343f4ed6a234cd083da1e5a6281e04902bc8fe5997f2bfefe58d698c9225a82353a0f3d57b30933b From 280f3257e56a087b9290f923326d1460d4207bb0 Mon Sep 17 00:00:00 2001 From: Packit Date: Mon, 22 May 2023 15:48:19 +0000 Subject: [PATCH 114/160] [packit] 2.215.0 upstream release Upstream tag: v2.215.0 Upstream commit: 730f696f --- .gitignore | 1 + .packit.yaml | 86 ++++++++++++++++++++++++++++++++++++++++++ README.packit | 3 ++ container-selinux.spec | 74 ++++++++++++++++++++++++++---------- sources | 2 +- 5 files changed, 146 insertions(+), 20 deletions(-) create mode 100644 .packit.yaml create mode 100644 README.packit diff --git a/.gitignore b/.gitignore index 4733626..aaed0c6 100644 --- a/.gitignore +++ b/.gitignore @@ -209,3 +209,4 @@ /v2.211.0.tar.gz /v2.211.1.tar.gz /v2.213.0.tar.gz +/v2.215.0.tar.gz diff --git a/.packit.yaml b/.packit.yaml new file mode 100644 index 0000000..d49f936 --- /dev/null +++ b/.packit.yaml @@ -0,0 +1,86 @@ +--- +# See the documentation for more information: +# https://packit.dev/docs/configuration/ + +# Build targets can be found at: +# https://copr.fedorainfracloud.org/coprs/rhcontainerbot/packit-builds/ + +specfile_path: rpm/container-selinux.spec +upstream_tag_template: v{version} + +jobs: + - &copr + job: copr_build + # Run on every PR + trigger: pull_request + owner: rhcontainerbot + project: packit-builds + enable_net: true + # x86_64 is assumed by default + # container-selinux is noarch so we only need to test on one arch + targets: &pr_copr_targets + - fedora-rawhide + - fedora-38 + - fedora-37 + - centos-stream-9 + - centos-stream-8 + srpm_build_deps: + - make + - rpkg + actions: + fix-spec-file: + - bash .packit.sh + + - <<: *copr + # Run on commit to main branch + trigger: commit + branch: main + project: podman-next + targets: + - fedora-rawhide-aarch64 + - fedora-rawhide-ppc64le + - fedora-rawhide-s390x + - fedora-rawhide-x86_64 + - fedora-38-aarch64 + - fedora-38-ppc64le + - fedora-38-s390x + - fedora-38-x86_64 + - fedora-37-aarch64 + - fedora-37-ppc64le + - fedora-37-s390x + - fedora-37-x86_64 + - centos-stream+epel-next-9-aarch64 + - centos-stream+epel-next-9-ppc64le + - centos-stream+epel-next-9-s390x + - centos-stream+epel-next-9-x86_64 + + # All tests specified in the `/plans/` subdir + # FIXME: uncomment e2e tests after disk space issues resolved on testing farm + #- job: tests + # trigger: pull_request + # targets: *test_targets + # identifier: podman_e2e_test + # tmt_plan: "/plans/podman_e2e_test" + + - job: tests + trigger: pull_request + # arch assumed to be x86_64 by default. + targets: *pr_copr_targets + identifier: podman_system_test + tmt_plan: "/plans/podman_system_test" + + - job: propose_downstream + trigger: release + update_release: false + dist_git_branches: + - fedora-all + + - job: koji_build + trigger: commit + dist_git_branches: + - fedora-all + + - job: bodhi_update + trigger: commit + dist_git_branches: + - fedora-branched # rawhide updates are created automatically diff --git a/README.packit b/README.packit new file mode 100644 index 0000000..03c3f50 --- /dev/null +++ b/README.packit @@ -0,0 +1,3 @@ +This repository is maintained by packit. +https://packit.dev/ +The file was generated using packit 0.75.0.post16+g33d32c7. diff --git a/container-selinux.spec b/container-selinux.spec index 0b9e76e..48fcfc5 100644 --- a/container-selinux.spec +++ b/container-selinux.spec @@ -1,6 +1,6 @@ -%global debug_package %{nil} +%global debug_package %{nil} -# container-selinux +# container-selinux upstream %global git0 https://github.com/containers/container-selinux # container-selinux stuff (prefix with ds_ for version/release etc.) @@ -14,9 +14,40 @@ # Format must contain '$x' somewhere to do anything useful %global _format() export %1=""; for x in %{modulenames}; do %1+=%2; %1+=" "; done; +# copr_username is only set on copr environments, not on others like koji +%if "%{?copr_username}" != "rhcontainerbot" +%bcond_with copr +%else +%bcond_without copr +%endif + +# RHEL 8 doesn't allow watch and systemd_chat_resolved +%if 0%{?rhel} == 8 +%bcond_without no_watch +%bcond_without no_systemd_chat_resolved +%else +%bcond_with no_watch +%bcond_with no_systemd_chat_resolved +%endif + +# https://github.com/containers/container-selinux/issues/203 +%if 0%{?fedora} <= 37 || 0%{?rhel} <= 9 +%bcond_without no_user_namespace +%else +%bcond_with no_user_namespace +%endif + Name: container-selinux +# Set different Epochs for copr and koji +%if %{with copr} +Epoch: 101 +%else Epoch: 2 -Version: 2.213.0 +%endif +# Keep Version in upstream specfile at 0. It will be automatically set +# to the correct value by Packit for copr and koji builds. +# IGNORE this comment if you're looking at it in dist-git. +Version: 2.215.0 Release: %autorelease License: GPL-2.0-only URL: %{git0} @@ -45,9 +76,22 @@ Conflicts: k3s-selinux <= 0.4-1 SELinux policy modules for use with container runtimes. %prep -%autosetup -Sgit %{name}-%{built_tag_strip} -# https://github.com/containers/container-selinux/issues/203 -%if 0%{?fedora} <= 37 +%autosetup -Sgit %{name}-%{version} + +sed -i 's/^man: install-policy/man:/' Makefile +sed -i 's/^install: man/install:/' Makefile + +%if %{with no_watch} +sed -i 's/watch watch_reads//' container.if +sed -i 's/watch watch_reads//' container.te +sed -i '/sysfs_t:dir watch/d' container.te +%endif + +%if %{with no_systemd_chat_resolved} +sed -i '/^systemd_chat_resolved/d' container.te +%endif + +%if %{with no_user_namespace} sed -i '/user_namespace/d' container.te %endif @@ -57,16 +101,7 @@ make %install # install policy modules %_format MODULES $x.pp.bz2 -install -d %{buildroot}%{_datadir}/selinux/packages -install -d -p %{buildroot}%{_datadir}/selinux/devel/include/services -install -p -m 644 container.if %{buildroot}%{_datadir}/selinux/devel/include/services -install -m 0644 $MODULES %{buildroot}%{_datadir}/selinux/packages -install -d %{buildroot}/%{_datadir}/containers/selinux -install -m 644 container_contexts %{buildroot}/%{_datadir}/containers/selinux/contexts -install -d %{buildroot}%{_datadir}/udica/templates -install -m 0644 udica-templates/*.cil %{buildroot}%{_datadir}/udica/templates - -%check +%{__make} DATADIR=%{buildroot}%{_datadir} SYSCONFDIR=%{buildroot}%{_sysconfdir} install install.udica-templates install.selinux-user %pre %selinux_relabel_pre -s %{selinuxtype} @@ -82,7 +117,7 @@ fi %{_sbindir}/semodule -n -s %{selinuxtype} -d gear 2> /dev/null %selinux_modules_install -s %{selinuxtype} $MODULES . %{_sysconfdir}/selinux/config -sed -e "\|container_file_t|h; \${x;s|container_file_t||;{g;t};a\\" -e "container_file_t" -e "}" -i /etc/selinux/${SELINUXTYPE}/contexts/customizable_types +sed -e "\|container_file_t|h; \${x;s|container_file_t||;{g;t};a\\" -e "container_file_t" -e "}" -i /etc/selinux/${SELINUXTYPE}/contexts/customizable_types matchpathcon -qV %{_sharedstatedir}/containers || restorecon -R %{_sharedstatedir}/containers &> /dev/null || : %postun @@ -103,8 +138,9 @@ fi %{_datadir}/containers/selinux/contexts %dir %{_datadir}/udica/templates/ %{_datadir}/udica/templates/* -# Currently shipped in selinux-policy-doc -#%%{_datadir}/man/man8/container_selinux.8.gz +%{_mandir}/man8/container_selinux.8.gz +%{_sysconfdir}/selinux/targeted/contexts/users/* +%ghost %{_sharedstatedir}/selinux/%{selinuxtype}/active/modules/200/%{modulenames} %triggerpostun -- container-selinux < 2:2.162.1-3 if %{_sbindir}/selinuxenabled ; then diff --git a/sources b/sources index 8920a6c..20ec8ae 100644 --- a/sources +++ b/sources @@ -1 +1 @@ -SHA512 (v2.213.0.tar.gz) = 5973b104b99dbadf8d935f241c70a570efc27a1858c035fc343f4ed6a234cd083da1e5a6281e04902bc8fe5997f2bfefe58d698c9225a82353a0f3d57b30933b +SHA512 (v2.215.0.tar.gz) = b6a756169bb0c9da8332d4913471cc72fb82c3cd7d8b919dd8a8b7527d2375773bcf553bc5e53ba7ee3f01539334864348b081eeae4362611355d454c869e7d9 From 473824031cfa92e19ee19462897d4d11a90f9e32 Mon Sep 17 00:00:00 2001 From: Lokesh Mandvekar Date: Tue, 23 May 2023 09:18:15 -0400 Subject: [PATCH 115/160] [packit] 2.215.0 upstream release Upstream tag: v2.215.0 Upstream commit: e16876ee --- README.packit | 2 +- container-selinux.spec | 6 +++++- 2 files changed, 6 insertions(+), 2 deletions(-) diff --git a/README.packit b/README.packit index 03c3f50..83c84ce 100644 --- a/README.packit +++ b/README.packit @@ -1,3 +1,3 @@ This repository is maintained by packit. https://packit.dev/ -The file was generated using packit 0.75.0.post16+g33d32c7. +The file was generated using packit 0.75.0. diff --git a/container-selinux.spec b/container-selinux.spec index 48fcfc5..bc1092c 100644 --- a/container-selinux.spec +++ b/container-selinux.spec @@ -103,6 +103,9 @@ make %_format MODULES $x.pp.bz2 %{__make} DATADIR=%{buildroot}%{_datadir} SYSCONFDIR=%{buildroot}%{_sysconfdir} install install.udica-templates install.selinux-user +# Ref: https://bugzilla.redhat.com/show_bug.cgi?id=2209120 +rm %{buildroot}%{_mandir}/man8/container_selinux.8 + %pre %selinux_relabel_pre -s %{selinuxtype} @@ -138,7 +141,8 @@ fi %{_datadir}/containers/selinux/contexts %dir %{_datadir}/udica/templates/ %{_datadir}/udica/templates/* -%{_mandir}/man8/container_selinux.8.gz +# Ref: https://bugzilla.redhat.com/show_bug.cgi?id=2209120 +#%%{_mandir}/man8/container_selinux.8.gz %{_sysconfdir}/selinux/targeted/contexts/users/* %ghost %{_sharedstatedir}/selinux/%{selinuxtype}/active/modules/200/%{modulenames} From c5cb8ccf6ce8db4238da4518201624c29c424ced Mon Sep 17 00:00:00 2001 From: Packit Date: Tue, 30 May 2023 19:10:35 +0000 Subject: [PATCH 116/160] [packit] 2.216.0 upstream release Upstream tag: v2.216.0 Upstream commit: a1a96a2e --- .gitignore | 1 + README.packit | 2 +- container-selinux.spec | 2 +- sources | 2 +- 4 files changed, 4 insertions(+), 3 deletions(-) diff --git a/.gitignore b/.gitignore index aaed0c6..071ebdf 100644 --- a/.gitignore +++ b/.gitignore @@ -210,3 +210,4 @@ /v2.211.1.tar.gz /v2.213.0.tar.gz /v2.215.0.tar.gz +/v2.216.0.tar.gz diff --git a/README.packit b/README.packit index 83c84ce..01582f6 100644 --- a/README.packit +++ b/README.packit @@ -1,3 +1,3 @@ This repository is maintained by packit. https://packit.dev/ -The file was generated using packit 0.75.0. +The file was generated using packit 0.76.0. diff --git a/container-selinux.spec b/container-selinux.spec index bc1092c..f660d54 100644 --- a/container-selinux.spec +++ b/container-selinux.spec @@ -47,7 +47,7 @@ Epoch: 2 # Keep Version in upstream specfile at 0. It will be automatically set # to the correct value by Packit for copr and koji builds. # IGNORE this comment if you're looking at it in dist-git. -Version: 2.215.0 +Version: 2.216.0 Release: %autorelease License: GPL-2.0-only URL: %{git0} diff --git a/sources b/sources index 20ec8ae..1178355 100644 --- a/sources +++ b/sources @@ -1 +1 @@ -SHA512 (v2.215.0.tar.gz) = b6a756169bb0c9da8332d4913471cc72fb82c3cd7d8b919dd8a8b7527d2375773bcf553bc5e53ba7ee3f01539334864348b081eeae4362611355d454c869e7d9 +SHA512 (v2.216.0.tar.gz) = 444497b0dbb41b4b3534a08f37ae861fd31300b6add9380e7df9519b248b5527342ff66956a455a47630c9e174def5ce4fb34fffcf3fc0c522cd25b153b1ba40 From a317b950f41dff13fd636ebf06a69d3ce5ef77bf Mon Sep 17 00:00:00 2001 From: Packit Date: Mon, 5 Jun 2023 18:29:06 +0000 Subject: [PATCH 117/160] [packit] 2.217.0 upstream release Upstream tag: v2.217.0 Upstream commit: 2e448062 --- .gitignore | 1 + container-selinux.spec | 2 +- sources | 2 +- 3 files changed, 3 insertions(+), 2 deletions(-) diff --git a/.gitignore b/.gitignore index 071ebdf..d272ada 100644 --- a/.gitignore +++ b/.gitignore @@ -211,3 +211,4 @@ /v2.213.0.tar.gz /v2.215.0.tar.gz /v2.216.0.tar.gz +/v2.217.0.tar.gz diff --git a/container-selinux.spec b/container-selinux.spec index f660d54..54d960c 100644 --- a/container-selinux.spec +++ b/container-selinux.spec @@ -47,7 +47,7 @@ Epoch: 2 # Keep Version in upstream specfile at 0. It will be automatically set # to the correct value by Packit for copr and koji builds. # IGNORE this comment if you're looking at it in dist-git. -Version: 2.216.0 +Version: 2.217.0 Release: %autorelease License: GPL-2.0-only URL: %{git0} diff --git a/sources b/sources index 1178355..17c50fa 100644 --- a/sources +++ b/sources @@ -1 +1 @@ -SHA512 (v2.216.0.tar.gz) = 444497b0dbb41b4b3534a08f37ae861fd31300b6add9380e7df9519b248b5527342ff66956a455a47630c9e174def5ce4fb34fffcf3fc0c522cd25b153b1ba40 +SHA512 (v2.217.0.tar.gz) = 69bf61a04800f970b216994a4b579e4755ace2cc75f1444664c634fa3b9f7fa75faa5f018acf81b3d4ac7ddfc16e395f62a0bbfb11ad4b8961f11fd45e9f5c19 From 5c06fa109077740a1c27ac49fc8580fac42b162e Mon Sep 17 00:00:00 2001 From: Packit Date: Tue, 6 Jun 2023 15:26:16 +0000 Subject: [PATCH 118/160] [packit] 2.218.0 upstream release Upstream tag: v2.218.0 Upstream commit: 08662f13 --- .gitignore | 1 + README.packit | 2 +- container-selinux.spec | 2 +- sources | 2 +- 4 files changed, 4 insertions(+), 3 deletions(-) diff --git a/.gitignore b/.gitignore index d272ada..84f65ac 100644 --- a/.gitignore +++ b/.gitignore @@ -212,3 +212,4 @@ /v2.215.0.tar.gz /v2.216.0.tar.gz /v2.217.0.tar.gz +/v2.218.0.tar.gz diff --git a/README.packit b/README.packit index 01582f6..b25e4da 100644 --- a/README.packit +++ b/README.packit @@ -1,3 +1,3 @@ This repository is maintained by packit. https://packit.dev/ -The file was generated using packit 0.76.0. +The file was generated using packit 0.76.0.post2+gbdab6df. diff --git a/container-selinux.spec b/container-selinux.spec index 54d960c..f76e6b1 100644 --- a/container-selinux.spec +++ b/container-selinux.spec @@ -47,7 +47,7 @@ Epoch: 2 # Keep Version in upstream specfile at 0. It will be automatically set # to the correct value by Packit for copr and koji builds. # IGNORE this comment if you're looking at it in dist-git. -Version: 2.217.0 +Version: 2.218.0 Release: %autorelease License: GPL-2.0-only URL: %{git0} diff --git a/sources b/sources index 17c50fa..3fb48db 100644 --- a/sources +++ b/sources @@ -1 +1 @@ -SHA512 (v2.217.0.tar.gz) = 69bf61a04800f970b216994a4b579e4755ace2cc75f1444664c634fa3b9f7fa75faa5f018acf81b3d4ac7ddfc16e395f62a0bbfb11ad4b8961f11fd45e9f5c19 +SHA512 (v2.218.0.tar.gz) = 93ff44d54ee0970eccfdacf9d7cf8b4aa5efe172995d72772e48ae5317f0eb28c1fddfdf3b9bd0c3c47014b978a28060e665e2459b0dda539f58e4338e9587a8 From b3d7d4b81d5a7bbe63bf72efe6d9edb624ae1f6e Mon Sep 17 00:00:00 2001 From: Packit Date: Sun, 2 Jul 2023 11:28:42 +0000 Subject: [PATCH 119/160] [packit] 2.219.0 upstream release Upstream tag: v2.219.0 Upstream commit: e3d7d0b1 --- .gitignore | 1 + .packit.yaml | 24 +++++------------------- README.packit | 2 +- container-selinux.spec | 42 ++++++++++++++---------------------------- sources | 2 +- 5 files changed, 22 insertions(+), 49 deletions(-) diff --git a/.gitignore b/.gitignore index 84f65ac..ec73296 100644 --- a/.gitignore +++ b/.gitignore @@ -213,3 +213,4 @@ /v2.216.0.tar.gz /v2.217.0.tar.gz /v2.218.0.tar.gz +/v2.219.0.tar.gz diff --git a/.packit.yaml b/.packit.yaml index d49f936..e5121fc 100644 --- a/.packit.yaml +++ b/.packit.yaml @@ -19,17 +19,11 @@ jobs: # x86_64 is assumed by default # container-selinux is noarch so we only need to test on one arch targets: &pr_copr_targets - - fedora-rawhide - - fedora-38 - - fedora-37 + - fedora-all - centos-stream-9 - centos-stream-8 srpm_build_deps: - make - - rpkg - actions: - fix-spec-file: - - bash .packit.sh - <<: *copr # Run on commit to main branch @@ -37,18 +31,10 @@ jobs: branch: main project: podman-next targets: - - fedora-rawhide-aarch64 - - fedora-rawhide-ppc64le - - fedora-rawhide-s390x - - fedora-rawhide-x86_64 - - fedora-38-aarch64 - - fedora-38-ppc64le - - fedora-38-s390x - - fedora-38-x86_64 - - fedora-37-aarch64 - - fedora-37-ppc64le - - fedora-37-s390x - - fedora-37-x86_64 + - fedora-all-aarch64 + - fedora-all-ppc64le + - fedora-all-s390x + - fedora-all-x86_64 - centos-stream+epel-next-9-aarch64 - centos-stream+epel-next-9-ppc64le - centos-stream+epel-next-9-s390x diff --git a/README.packit b/README.packit index b25e4da..101115f 100644 --- a/README.packit +++ b/README.packit @@ -1,3 +1,3 @@ This repository is maintained by packit. https://packit.dev/ -The file was generated using packit 0.76.0.post2+gbdab6df. +The file was generated using packit 0.77.0.post2+g06f877b. diff --git a/container-selinux.spec b/container-selinux.spec index f76e6b1..bc2580c 100644 --- a/container-selinux.spec +++ b/container-selinux.spec @@ -1,8 +1,5 @@ %global debug_package %{nil} -# container-selinux upstream -%global git0 https://github.com/containers/container-selinux - # container-selinux stuff (prefix with ds_ for version/release etc.) # Some bits borrowed from the openstack-selinux package %global selinuxtype targeted @@ -14,45 +11,34 @@ # Format must contain '$x' somewhere to do anything useful %global _format() export %1=""; for x in %{modulenames}; do %1+=%2; %1+=" "; done; -# copr_username is only set on copr environments, not on others like koji -%if "%{?copr_username}" != "rhcontainerbot" -%bcond_with copr -%else -%bcond_without copr -%endif - # RHEL 8 doesn't allow watch and systemd_chat_resolved -%if 0%{?rhel} == 8 -%bcond_without no_watch -%bcond_without no_systemd_chat_resolved -%else -%bcond_with no_watch -%bcond_with no_systemd_chat_resolved +%if %{defined rhel} && 0%{?rhel} == 8 +%define no_watch 1 +%define no_systemd_chat_resolved 1 +%global _selinux_policy_version 3.14.3-80.el8 %endif # https://github.com/containers/container-selinux/issues/203 -%if 0%{?fedora} <= 37 || 0%{?rhel} <= 9 -%bcond_without no_user_namespace -%else -%bcond_with no_user_namespace +%if %{!defined fedora} && %{!defined rhel} || %{defined fedora} && 0%{?fedora} <= 37 || %{defined rhel} && 0%{?rhel} <= 9 +%define no_user_namespace 1 %endif Name: container-selinux # Set different Epochs for copr and koji -%if %{with copr} -Epoch: 101 +%if %{defined copr_username} +Epoch: 102 %else Epoch: 2 %endif # Keep Version in upstream specfile at 0. It will be automatically set # to the correct value by Packit for copr and koji builds. # IGNORE this comment if you're looking at it in dist-git. -Version: 2.218.0 +Version: 2.219.0 Release: %autorelease License: GPL-2.0-only -URL: %{git0} +URL: https://github.com/containers/%{name} Summary: SELinux policies for container runtimes -Source0: %{git0}/archive/v%{version}.tar.gz +Source0: %{url}/archive/v%{version}.tar.gz BuildArch: noarch BuildRequires: make BuildRequires: git-core @@ -81,17 +67,17 @@ SELinux policy modules for use with container runtimes. sed -i 's/^man: install-policy/man:/' Makefile sed -i 's/^install: man/install:/' Makefile -%if %{with no_watch} +%if %{defined no_watch} sed -i 's/watch watch_reads//' container.if sed -i 's/watch watch_reads//' container.te sed -i '/sysfs_t:dir watch/d' container.te %endif -%if %{with no_systemd_chat_resolved} +%if %{defined no_systemd_chat_resolved} sed -i '/^systemd_chat_resolved/d' container.te %endif -%if %{with no_user_namespace} +%if %{defined no_user_namespace} sed -i '/user_namespace/d' container.te %endif diff --git a/sources b/sources index 3fb48db..f62b444 100644 --- a/sources +++ b/sources @@ -1 +1 @@ -SHA512 (v2.218.0.tar.gz) = 93ff44d54ee0970eccfdacf9d7cf8b4aa5efe172995d72772e48ae5317f0eb28c1fddfdf3b9bd0c3c47014b978a28060e665e2459b0dda539f58e4338e9587a8 +SHA512 (v2.219.0.tar.gz) = 469987579a645b1b7df843e2f3e11b74c798ebe0774cc021f6aa24e4c365c2eb65397ad918f89a0734119dcb803ddac622b1420a998bd3d1e34b7dd3c13e8cc3 From 5e76ec1dc90bece75eca30ce18910d517f28fc0e Mon Sep 17 00:00:00 2001 From: Fedora Release Engineering Date: Wed, 19 Jul 2023 16:19:24 +0000 Subject: [PATCH 120/160] Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild Signed-off-by: Fedora Release Engineering From 507a53d1e9c2341c1b3d16dacb00aade052fa840 Mon Sep 17 00:00:00 2001 From: Packit Date: Mon, 14 Aug 2023 17:40:01 +0000 Subject: [PATCH 121/160] 2.221 upstream release MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit Upstream tag: v2.221 Upstream commit: ed30ab0d If you need to do any change in this pull request, you need to locally fetch the source branch of it and push it (with a fix) to your fork (as it is not possible to push to the branch created in the Packit’s fork): ``` git fetch https://src.fedoraproject.org/forks/packit/rpms/container-selinux.git refs/heads/*:refs/remotes/packit/* git checkout packit/2.221-rawhide-update-propose_downstream ``` --- .gitignore | 1 + .packit.yaml | 30 ++++++++---------------------- README.packit | 2 +- container-selinux.spec | 2 +- sources | 2 +- 5 files changed, 12 insertions(+), 25 deletions(-) diff --git a/.gitignore b/.gitignore index ec73296..7ddca38 100644 --- a/.gitignore +++ b/.gitignore @@ -214,3 +214,4 @@ /v2.217.0.tar.gz /v2.218.0.tar.gz /v2.219.0.tar.gz +/v2.221.tar.gz diff --git a/.packit.yaml b/.packit.yaml index e5121fc..b4167a5 100644 --- a/.packit.yaml +++ b/.packit.yaml @@ -2,43 +2,29 @@ # See the documentation for more information: # https://packit.dev/docs/configuration/ -# Build targets can be found at: -# https://copr.fedorainfracloud.org/coprs/rhcontainerbot/packit-builds/ - specfile_path: rpm/container-selinux.spec upstream_tag_template: v{version} +srpm_build_deps: + - make + jobs: - - &copr - job: copr_build - # Run on every PR + - job: copr_build trigger: pull_request - owner: rhcontainerbot - project: packit-builds enable_net: true - # x86_64 is assumed by default # container-selinux is noarch so we only need to test on one arch targets: &pr_copr_targets - fedora-all - centos-stream-9 - centos-stream-8 - srpm_build_deps: - - make - - <<: *copr - # Run on commit to main branch + # Run on commit to main branch + - job: copr_build trigger: commit branch: main + owner: rhcontainerbot project: podman-next - targets: - - fedora-all-aarch64 - - fedora-all-ppc64le - - fedora-all-s390x - - fedora-all-x86_64 - - centos-stream+epel-next-9-aarch64 - - centos-stream+epel-next-9-ppc64le - - centos-stream+epel-next-9-s390x - - centos-stream+epel-next-9-x86_64 + enable_net: true # All tests specified in the `/plans/` subdir # FIXME: uncomment e2e tests after disk space issues resolved on testing farm diff --git a/README.packit b/README.packit index 101115f..d7c433c 100644 --- a/README.packit +++ b/README.packit @@ -1,3 +1,3 @@ This repository is maintained by packit. https://packit.dev/ -The file was generated using packit 0.77.0.post2+g06f877b. +The file was generated using packit 0.78.2.post2+g81828af. diff --git a/container-selinux.spec b/container-selinux.spec index bc2580c..e08e6b1 100644 --- a/container-selinux.spec +++ b/container-selinux.spec @@ -33,7 +33,7 @@ Epoch: 2 # Keep Version in upstream specfile at 0. It will be automatically set # to the correct value by Packit for copr and koji builds. # IGNORE this comment if you're looking at it in dist-git. -Version: 2.219.0 +Version: 2.221 Release: %autorelease License: GPL-2.0-only URL: https://github.com/containers/%{name} diff --git a/sources b/sources index f62b444..a950989 100644 --- a/sources +++ b/sources @@ -1 +1 @@ -SHA512 (v2.219.0.tar.gz) = 469987579a645b1b7df843e2f3e11b74c798ebe0774cc021f6aa24e4c365c2eb65397ad918f89a0734119dcb803ddac622b1420a998bd3d1e34b7dd3c13e8cc3 +SHA512 (v2.221.tar.gz) = bc00af81076bc1ab468f67dfcb9affff7d335c613d5a859637b0d6d63d42fd86e93057ac84e1549d3d41c787b24e36f194880c04e5e29c5bf6b7ed0004cf1074 From 813175eff445ebe89b3730223bc2523334f031d7 Mon Sep 17 00:00:00 2001 From: Lokesh Mandvekar Date: Tue, 15 Aug 2023 09:19:54 -0400 Subject: [PATCH 122/160] bump to v2.221.0 --- .gitignore | 1 + container-selinux.spec | 2 +- sources | 2 +- 3 files changed, 3 insertions(+), 2 deletions(-) diff --git a/.gitignore b/.gitignore index 7ddca38..5e1ef4b 100644 --- a/.gitignore +++ b/.gitignore @@ -215,3 +215,4 @@ /v2.218.0.tar.gz /v2.219.0.tar.gz /v2.221.tar.gz +/v2.221.0.tar.gz diff --git a/container-selinux.spec b/container-selinux.spec index e08e6b1..6eeab50 100644 --- a/container-selinux.spec +++ b/container-selinux.spec @@ -33,7 +33,7 @@ Epoch: 2 # Keep Version in upstream specfile at 0. It will be automatically set # to the correct value by Packit for copr and koji builds. # IGNORE this comment if you're looking at it in dist-git. -Version: 2.221 +Version: 2.221.0 Release: %autorelease License: GPL-2.0-only URL: https://github.com/containers/%{name} diff --git a/sources b/sources index a950989..38029d7 100644 --- a/sources +++ b/sources @@ -1 +1 @@ -SHA512 (v2.221.tar.gz) = bc00af81076bc1ab468f67dfcb9affff7d335c613d5a859637b0d6d63d42fd86e93057ac84e1549d3d41c787b24e36f194880c04e5e29c5bf6b7ed0004cf1074 +SHA512 (v2.221.0.tar.gz) = 71e4bbc1507f9d04dd78c5881814c57b2138ed91ff474f0ce6db5da5e14ce848d7fe41952284b3525fb222eaf364dcc84efbb2f7641d78ac9abf5343e481be5d From b1e22dd31c9450f7444d242af7ab4a16ec2b65a6 Mon Sep 17 00:00:00 2001 From: Packit Date: Tue, 29 Aug 2023 21:06:35 +0000 Subject: [PATCH 123/160] [packit] 2.221.1 upstream release MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit Upstream tag: v2.221.1 Upstream commit: bfb44d38 If you need to do any change in this pull request, you need to locally fetch the source branch of it and push it (with a fix) to your fork (as it is not possible to push to the branch created in the Packit’s fork): ``` git fetch https://src.fedoraproject.org/forks/packit/rpms/container-selinux.git refs/heads/*:refs/remotes/packit/* git checkout packit/2.221.1-rawhide-update-propose_downstream ``` --- .gitignore | 1 + README.packit | 2 +- container-selinux.spec | 2 +- sources | 2 +- 4 files changed, 4 insertions(+), 3 deletions(-) diff --git a/.gitignore b/.gitignore index 5e1ef4b..4d18507 100644 --- a/.gitignore +++ b/.gitignore @@ -216,3 +216,4 @@ /v2.219.0.tar.gz /v2.221.tar.gz /v2.221.0.tar.gz +/v2.221.1.tar.gz diff --git a/README.packit b/README.packit index d7c433c..797aefb 100644 --- a/README.packit +++ b/README.packit @@ -1,3 +1,3 @@ This repository is maintained by packit. https://packit.dev/ -The file was generated using packit 0.78.2.post2+g81828af. +The file was generated using packit 0.79.0.post2+g93f33d9. diff --git a/container-selinux.spec b/container-selinux.spec index 6eeab50..9c3efc3 100644 --- a/container-selinux.spec +++ b/container-selinux.spec @@ -33,7 +33,7 @@ Epoch: 2 # Keep Version in upstream specfile at 0. It will be automatically set # to the correct value by Packit for copr and koji builds. # IGNORE this comment if you're looking at it in dist-git. -Version: 2.221.0 +Version: 2.221.1 Release: %autorelease License: GPL-2.0-only URL: https://github.com/containers/%{name} diff --git a/sources b/sources index 38029d7..7ecf5ea 100644 --- a/sources +++ b/sources @@ -1 +1 @@ -SHA512 (v2.221.0.tar.gz) = 71e4bbc1507f9d04dd78c5881814c57b2138ed91ff474f0ce6db5da5e14ce848d7fe41952284b3525fb222eaf364dcc84efbb2f7641d78ac9abf5343e481be5d +SHA512 (v2.221.1.tar.gz) = 5ba0144812b4df7b5ef2480cdb1330f3aeae4781ee89d3342770cd301b3c8df764a144ca32f622a28adadeb9b973ede8008c23eacca51edec12d3882bceb2d9a From bbe8925300e5d15057835071cb325022e76f261a Mon Sep 17 00:00:00 2001 From: Packit Date: Sun, 17 Sep 2023 13:49:48 +0000 Subject: [PATCH 124/160] [packit] 2.222.0 upstream release Upstream tag: v2.222.0 Upstream commit: cbaa1ba7 --- .gitignore | 1 + README.packit | 2 +- container-selinux.spec | 2 +- sources | 2 +- 4 files changed, 4 insertions(+), 3 deletions(-) diff --git a/.gitignore b/.gitignore index 4d18507..16e4ef8 100644 --- a/.gitignore +++ b/.gitignore @@ -217,3 +217,4 @@ /v2.221.tar.gz /v2.221.0.tar.gz /v2.221.1.tar.gz +/v2.222.0.tar.gz diff --git a/README.packit b/README.packit index 797aefb..786c2a0 100644 --- a/README.packit +++ b/README.packit @@ -1,3 +1,3 @@ This repository is maintained by packit. https://packit.dev/ -The file was generated using packit 0.79.0.post2+g93f33d9. +The file was generated using packit 0.80.0.post8+gf2b5fcbc. diff --git a/container-selinux.spec b/container-selinux.spec index 9c3efc3..324451a 100644 --- a/container-selinux.spec +++ b/container-selinux.spec @@ -33,7 +33,7 @@ Epoch: 2 # Keep Version in upstream specfile at 0. It will be automatically set # to the correct value by Packit for copr and koji builds. # IGNORE this comment if you're looking at it in dist-git. -Version: 2.221.1 +Version: 2.222.0 Release: %autorelease License: GPL-2.0-only URL: https://github.com/containers/%{name} diff --git a/sources b/sources index 7ecf5ea..e18b4c0 100644 --- a/sources +++ b/sources @@ -1 +1 @@ -SHA512 (v2.221.1.tar.gz) = 5ba0144812b4df7b5ef2480cdb1330f3aeae4781ee89d3342770cd301b3c8df764a144ca32f622a28adadeb9b973ede8008c23eacca51edec12d3882bceb2d9a +SHA512 (v2.222.0.tar.gz) = f5475c4f0d99c0b594637d004b526f8c129e967ed93b558e11dbed772df958cd6967f0a3183ea02cd1c7ef941510b59e9ffdf1a1238ae6880c220466967d683a From 8252c641d9b1f9fc6d81b944d0cafec27e7fe483 Mon Sep 17 00:00:00 2001 From: Packit Date: Wed, 11 Oct 2023 11:09:33 +0000 Subject: [PATCH 125/160] [packit] 2.224.0 upstream release Upstream tag: v2.224.0 Upstream commit: 31e9f0bd --- .gitignore | 1 + .packit.yaml | 67 ++++++++++++++++++++++++++++++++++-------- README.packit | 2 +- container-selinux.spec | 2 +- sources | 2 +- 5 files changed, 59 insertions(+), 15 deletions(-) diff --git a/.gitignore b/.gitignore index 16e4ef8..a935d69 100644 --- a/.gitignore +++ b/.gitignore @@ -218,3 +218,4 @@ /v2.221.0.tar.gz /v2.221.1.tar.gz /v2.222.0.tar.gz +/v2.224.0.tar.gz diff --git a/.packit.yaml b/.packit.yaml index b4167a5..6f84a58 100644 --- a/.packit.yaml +++ b/.packit.yaml @@ -11,36 +11,79 @@ srpm_build_deps: jobs: - job: copr_build trigger: pull_request + notifications: + failure_comment: + message: "Ephemeral COPR build failed. @containers/packit-build please check." enable_net: true # container-selinux is noarch so we only need to test on one arch - targets: &pr_copr_targets + targets: - fedora-all - - centos-stream-9 - - centos-stream-8 + - fedora-eln + - epel-9 + - epel-8 # Run on commit to main branch + # Build targets managed in copr settings - job: copr_build trigger: commit + notifications: + failure_comment: + message: "podman-next COPR build failed. @containers/packit-build please check." branch: main owner: rhcontainerbot project: podman-next enable_net: true # All tests specified in the `/plans/` subdir - # FIXME: uncomment e2e tests after disk space issues resolved on testing farm - #- job: tests - # trigger: pull_request - # targets: *test_targets - # identifier: podman_e2e_test - # tmt_plan: "/plans/podman_e2e_test" - + # Podman e2e tests for Fedora and CentOS Stream - job: tests trigger: pull_request - # arch assumed to be x86_64 by default. - targets: *pr_copr_targets + notifications: + failure_comment: + message: "podman e2e tests failed. @containers/packit-build please check." + targets: &pr_test_targets + - fedora-all + - epel-9 + - epel-8 + identifier: podman_e2e_test + tmt_plan: "/plans/podman_e2e_test" + + # Podman system tests for Fedora and CentOS Stream + - job: tests + trigger: pull_request + notifications: + failure_comment: + message: "podman system tests failed. @containers/packit-build please check." + targets: *pr_test_targets identifier: podman_system_test tmt_plan: "/plans/podman_system_test" + # Podman e2e tests for RHEL + - job: tests + trigger: pull_request + use_internal_tf: true + notifications: + failure_comment: + message: "podman e2e tests failed on RHEL. @containers/packit-build please check." + targets: &pr_test_targets_rhel + epel-9-x86_64: + distros: [RHEL-9.2.0-Nightly] + epel-8-x86_64: + distros: [RHEL-8.10.0-Nightly] + identifier: podman_e2e_test_internal + tmt_plan: "/plans/podman_e2e_test" + + # Podman system tests for RHEL + - job: tests + trigger: pull_request + use_internal_tf: true + notifications: + failure_comment: + message: "podman system tests failed on RHEL. @containers/packit-build please check." + targets: *pr_test_targets_rhel + identifier: podman_system_test_internal + tmt_plan: "/plans/podman_system_test" + - job: propose_downstream trigger: release update_release: false diff --git a/README.packit b/README.packit index 786c2a0..327dfec 100644 --- a/README.packit +++ b/README.packit @@ -1,3 +1,3 @@ This repository is maintained by packit. https://packit.dev/ -The file was generated using packit 0.80.0.post8+gf2b5fcbc. +The file was generated using packit 0.83.0.post1.dev4+g46d87465. diff --git a/container-selinux.spec b/container-selinux.spec index 324451a..3c995a5 100644 --- a/container-selinux.spec +++ b/container-selinux.spec @@ -33,7 +33,7 @@ Epoch: 2 # Keep Version in upstream specfile at 0. It will be automatically set # to the correct value by Packit for copr and koji builds. # IGNORE this comment if you're looking at it in dist-git. -Version: 2.222.0 +Version: 2.224.0 Release: %autorelease License: GPL-2.0-only URL: https://github.com/containers/%{name} diff --git a/sources b/sources index e18b4c0..2eec748 100644 --- a/sources +++ b/sources @@ -1 +1 @@ -SHA512 (v2.222.0.tar.gz) = f5475c4f0d99c0b594637d004b526f8c129e967ed93b558e11dbed772df958cd6967f0a3183ea02cd1c7ef941510b59e9ffdf1a1238ae6880c220466967d683a +SHA512 (v2.224.0.tar.gz) = ab838c379aae99347c5d49ef84513c5fa1cd03faf1ab6b1dd4b6c571875c7c9df389abfb41ce0e2c2a57e14d11c47cbac85e2a6ad8004c2db6087849d91282aa From 4d552c672dbb5fc5c72929c9c7e3947e0ceedcd0 Mon Sep 17 00:00:00 2001 From: Packit Date: Thu, 30 Nov 2023 00:41:51 +0000 Subject: [PATCH 126/160] [packit] 2.226.0 upstream release Upstream tag: v2.226.0 Upstream commit: cff8553f --- .gitignore | 1 + .packit.yaml | 4 ++-- README.packit | 2 +- container-selinux.spec | 2 +- sources | 2 +- 5 files changed, 6 insertions(+), 5 deletions(-) diff --git a/.gitignore b/.gitignore index a935d69..e57030a 100644 --- a/.gitignore +++ b/.gitignore @@ -219,3 +219,4 @@ /v2.221.1.tar.gz /v2.222.0.tar.gz /v2.224.0.tar.gz +/v2.226.0.tar.gz diff --git a/.packit.yaml b/.packit.yaml index 6f84a58..0f6b9fd 100644 --- a/.packit.yaml +++ b/.packit.yaml @@ -67,9 +67,9 @@ jobs: message: "podman e2e tests failed on RHEL. @containers/packit-build please check." targets: &pr_test_targets_rhel epel-9-x86_64: - distros: [RHEL-9.2.0-Nightly] + distros: [RHEL-9.3.0-Nightly,RHEL-9.4.0-Nightly] epel-8-x86_64: - distros: [RHEL-8.10.0-Nightly] + distros: [RHEL-8.9.0-Nightly,RHEL-8.10.0-Nightly] identifier: podman_e2e_test_internal tmt_plan: "/plans/podman_e2e_test" diff --git a/README.packit b/README.packit index 327dfec..ef95206 100644 --- a/README.packit +++ b/README.packit @@ -1,3 +1,3 @@ This repository is maintained by packit. https://packit.dev/ -The file was generated using packit 0.83.0.post1.dev4+g46d87465. +The file was generated using packit 0.87.0. diff --git a/container-selinux.spec b/container-selinux.spec index 3c995a5..7f2ac48 100644 --- a/container-selinux.spec +++ b/container-selinux.spec @@ -33,7 +33,7 @@ Epoch: 2 # Keep Version in upstream specfile at 0. It will be automatically set # to the correct value by Packit for copr and koji builds. # IGNORE this comment if you're looking at it in dist-git. -Version: 2.224.0 +Version: 2.226.0 Release: %autorelease License: GPL-2.0-only URL: https://github.com/containers/%{name} diff --git a/sources b/sources index 2eec748..d6bc57a 100644 --- a/sources +++ b/sources @@ -1 +1 @@ -SHA512 (v2.224.0.tar.gz) = ab838c379aae99347c5d49ef84513c5fa1cd03faf1ab6b1dd4b6c571875c7c9df389abfb41ce0e2c2a57e14d11c47cbac85e2a6ad8004c2db6087849d91282aa +SHA512 (v2.226.0.tar.gz) = 9decb066c62779336c22c027a2d3870c3dc1fe0afaa80ad59c4058c0030e0867352955d568e297f2258ba855a2be0d70c0d257cb64543b8726ff0755d63e95f8 From fce80f30080b39a96de5cd218482cd133eb1ff1a Mon Sep 17 00:00:00 2001 From: Packit Date: Thu, 21 Dec 2023 15:51:36 +0000 Subject: [PATCH 127/160] [packit] 2.227.0 upstream release Upstream tag: v2.227.0 Upstream commit: 289df825 --- .gitignore | 1 + README.packit | 2 +- container-selinux.spec | 2 +- sources | 2 +- 4 files changed, 4 insertions(+), 3 deletions(-) diff --git a/.gitignore b/.gitignore index e57030a..a6ea623 100644 --- a/.gitignore +++ b/.gitignore @@ -220,3 +220,4 @@ /v2.222.0.tar.gz /v2.224.0.tar.gz /v2.226.0.tar.gz +/v2.227.0.tar.gz diff --git a/README.packit b/README.packit index ef95206..f27b296 100644 --- a/README.packit +++ b/README.packit @@ -1,3 +1,3 @@ This repository is maintained by packit. https://packit.dev/ -The file was generated using packit 0.87.0. +The file was generated using packit 0.87.1.post1.dev11+gd1f7091b. diff --git a/container-selinux.spec b/container-selinux.spec index 7f2ac48..0aa2346 100644 --- a/container-selinux.spec +++ b/container-selinux.spec @@ -33,7 +33,7 @@ Epoch: 2 # Keep Version in upstream specfile at 0. It will be automatically set # to the correct value by Packit for copr and koji builds. # IGNORE this comment if you're looking at it in dist-git. -Version: 2.226.0 +Version: 2.227.0 Release: %autorelease License: GPL-2.0-only URL: https://github.com/containers/%{name} diff --git a/sources b/sources index d6bc57a..3b13bad 100644 --- a/sources +++ b/sources @@ -1 +1 @@ -SHA512 (v2.226.0.tar.gz) = 9decb066c62779336c22c027a2d3870c3dc1fe0afaa80ad59c4058c0030e0867352955d568e297f2258ba855a2be0d70c0d257cb64543b8726ff0755d63e95f8 +SHA512 (v2.227.0.tar.gz) = 604f6e8be89efb1dc6b70596149ea8cdd36958125dc740e3468757e732d452dda8b786b7d593bff099fb80fada369e54118a6d9e3eff0cdae2c15ac22c4acf04 From c63e6813d94835abfb00f5035acc225a00d605be Mon Sep 17 00:00:00 2001 From: Packit Date: Thu, 11 Jan 2024 03:13:23 +0000 Subject: [PATCH 128/160] [packit] 2.228.0 upstream release Upstream tag: v2.228.0 Upstream commit: 48c2b45f --- .gitignore | 1 + README.packit | 2 +- container-selinux.spec | 3 ++- sources | 2 +- 4 files changed, 5 insertions(+), 3 deletions(-) diff --git a/.gitignore b/.gitignore index a6ea623..5d86517 100644 --- a/.gitignore +++ b/.gitignore @@ -221,3 +221,4 @@ /v2.224.0.tar.gz /v2.226.0.tar.gz /v2.227.0.tar.gz +/v2.228.0.tar.gz diff --git a/README.packit b/README.packit index f27b296..8c508a5 100644 --- a/README.packit +++ b/README.packit @@ -1,3 +1,3 @@ This repository is maintained by packit. https://packit.dev/ -The file was generated using packit 0.87.1.post1.dev11+gd1f7091b. +The file was generated using packit 0.88.0. diff --git a/container-selinux.spec b/container-selinux.spec index 0aa2346..689dc58 100644 --- a/container-selinux.spec +++ b/container-selinux.spec @@ -33,7 +33,7 @@ Epoch: 2 # Keep Version in upstream specfile at 0. It will be automatically set # to the correct value by Packit for copr and koji builds. # IGNORE this comment if you're looking at it in dist-git. -Version: 2.227.0 +Version: 2.228.0 Release: %autorelease License: GPL-2.0-only URL: https://github.com/containers/%{name} @@ -71,6 +71,7 @@ sed -i 's/^install: man/install:/' Makefile sed -i 's/watch watch_reads//' container.if sed -i 's/watch watch_reads//' container.te sed -i '/sysfs_t:dir watch/d' container.te +sed -i '/fifo_file watch/d' container.te %endif %if %{defined no_systemd_chat_resolved} diff --git a/sources b/sources index 3b13bad..56eb602 100644 --- a/sources +++ b/sources @@ -1 +1 @@ -SHA512 (v2.227.0.tar.gz) = 604f6e8be89efb1dc6b70596149ea8cdd36958125dc740e3468757e732d452dda8b786b7d593bff099fb80fada369e54118a6d9e3eff0cdae2c15ac22c4acf04 +SHA512 (v2.228.0.tar.gz) = b6dcfdc7044d491c15fe582af7cd2a653318ccb0d793556a7222620b5d3d1270d6d514cb9fae83d8f9e8300c5a3a8aee3c9bf69d68f8955b3f87cc20fb035f97 From f2ab676dc0792b449cd57867643be5c6688fff6c Mon Sep 17 00:00:00 2001 From: Packit Date: Thu, 18 Jan 2024 02:53:21 +0000 Subject: [PATCH 129/160] [packit] 2.228.1 upstream release Upstream tag: v2.228.1 Upstream commit: d733187b --- .gitignore | 1 + README.packit | 2 +- container-selinux.spec | 2 +- sources | 2 +- 4 files changed, 4 insertions(+), 3 deletions(-) diff --git a/.gitignore b/.gitignore index 5d86517..755ae26 100644 --- a/.gitignore +++ b/.gitignore @@ -222,3 +222,4 @@ /v2.226.0.tar.gz /v2.227.0.tar.gz /v2.228.0.tar.gz +/v2.228.1.tar.gz diff --git a/README.packit b/README.packit index 8c508a5..115b422 100644 --- a/README.packit +++ b/README.packit @@ -1,3 +1,3 @@ This repository is maintained by packit. https://packit.dev/ -The file was generated using packit 0.88.0. +The file was generated using packit 0.88.0.post1.dev4+gc070191b. diff --git a/container-selinux.spec b/container-selinux.spec index 689dc58..efca51a 100644 --- a/container-selinux.spec +++ b/container-selinux.spec @@ -33,7 +33,7 @@ Epoch: 2 # Keep Version in upstream specfile at 0. It will be automatically set # to the correct value by Packit for copr and koji builds. # IGNORE this comment if you're looking at it in dist-git. -Version: 2.228.0 +Version: 2.228.1 Release: %autorelease License: GPL-2.0-only URL: https://github.com/containers/%{name} diff --git a/sources b/sources index 56eb602..ebebf32 100644 --- a/sources +++ b/sources @@ -1 +1 @@ -SHA512 (v2.228.0.tar.gz) = b6dcfdc7044d491c15fe582af7cd2a653318ccb0d793556a7222620b5d3d1270d6d514cb9fae83d8f9e8300c5a3a8aee3c9bf69d68f8955b3f87cc20fb035f97 +SHA512 (v2.228.1.tar.gz) = d746a9d843c6bbe9cec0d7bb4ab7de4c791f12d82cc2f95aa52b225729d2a0933019a4d588d8b565e92aaaf04a0e967a5db3d50caded4b3f446bc122e841da03 From 0ad7a38c63a57d5ac351eae8dc6447f74bb13277 Mon Sep 17 00:00:00 2001 From: Fedora Release Engineering Date: Fri, 19 Jan 2024 16:07:41 +0000 Subject: [PATCH 130/160] Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild From fb3dca68cbdc3f922256b63b7e82858dafb26d76 Mon Sep 17 00:00:00 2001 From: Packit Date: Mon, 22 Jan 2024 12:53:47 +0000 Subject: [PATCH 131/160] [packit] 2.229.0 upstream release Upstream tag: v2.229.0 Upstream commit: eac57925 --- .gitignore | 1 + container-selinux.spec | 2 +- sources | 2 +- 3 files changed, 3 insertions(+), 2 deletions(-) diff --git a/.gitignore b/.gitignore index 755ae26..ceb3a01 100644 --- a/.gitignore +++ b/.gitignore @@ -223,3 +223,4 @@ /v2.227.0.tar.gz /v2.228.0.tar.gz /v2.228.1.tar.gz +/v2.229.0.tar.gz diff --git a/container-selinux.spec b/container-selinux.spec index efca51a..70a34f3 100644 --- a/container-selinux.spec +++ b/container-selinux.spec @@ -33,7 +33,7 @@ Epoch: 2 # Keep Version in upstream specfile at 0. It will be automatically set # to the correct value by Packit for copr and koji builds. # IGNORE this comment if you're looking at it in dist-git. -Version: 2.228.1 +Version: 2.229.0 Release: %autorelease License: GPL-2.0-only URL: https://github.com/containers/%{name} diff --git a/sources b/sources index ebebf32..05ff519 100644 --- a/sources +++ b/sources @@ -1 +1 @@ -SHA512 (v2.228.1.tar.gz) = d746a9d843c6bbe9cec0d7bb4ab7de4c791f12d82cc2f95aa52b225729d2a0933019a4d588d8b565e92aaaf04a0e967a5db3d50caded4b3f446bc122e841da03 +SHA512 (v2.229.0.tar.gz) = 1341e0a6996d1ff2b06a0095f6720595f0775dff27f1f45702b3e03ea78f3b45708f55400b4dc8bfc4586efec4f72528512e8fbe461629a55a18936f8e6df30d From b0b9b555ec4a7c5785444b05cd0e09e339ccd535 Mon Sep 17 00:00:00 2001 From: Fedora Release Engineering Date: Wed, 24 Jan 2024 08:00:11 +0000 Subject: [PATCH 132/160] Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild From a24e6afd78102261b06788feb2788c773a0066a0 Mon Sep 17 00:00:00 2001 From: Packit Date: Wed, 28 Feb 2024 15:07:51 +0000 Subject: [PATCH 133/160] [packit] 2.229.1 upstream release Upstream tag: v2.229.1 Upstream commit: a023e9ee --- .gitignore | 1 + README.packit | 2 +- container-selinux.spec | 2 +- sources | 2 +- 4 files changed, 4 insertions(+), 3 deletions(-) diff --git a/.gitignore b/.gitignore index ceb3a01..dd028fd 100644 --- a/.gitignore +++ b/.gitignore @@ -224,3 +224,4 @@ /v2.228.0.tar.gz /v2.228.1.tar.gz /v2.229.0.tar.gz +/v2.229.1.tar.gz diff --git a/README.packit b/README.packit index 115b422..31341b6 100644 --- a/README.packit +++ b/README.packit @@ -1,3 +1,3 @@ This repository is maintained by packit. https://packit.dev/ -The file was generated using packit 0.88.0.post1.dev4+gc070191b. +The file was generated using packit 0.93.0. diff --git a/container-selinux.spec b/container-selinux.spec index 70a34f3..3372761 100644 --- a/container-selinux.spec +++ b/container-selinux.spec @@ -33,7 +33,7 @@ Epoch: 2 # Keep Version in upstream specfile at 0. It will be automatically set # to the correct value by Packit for copr and koji builds. # IGNORE this comment if you're looking at it in dist-git. -Version: 2.229.0 +Version: 2.229.1 Release: %autorelease License: GPL-2.0-only URL: https://github.com/containers/%{name} diff --git a/sources b/sources index 05ff519..9c53c37 100644 --- a/sources +++ b/sources @@ -1 +1 @@ -SHA512 (v2.229.0.tar.gz) = 1341e0a6996d1ff2b06a0095f6720595f0775dff27f1f45702b3e03ea78f3b45708f55400b4dc8bfc4586efec4f72528512e8fbe461629a55a18936f8e6df30d +SHA512 (v2.229.1.tar.gz) = 19a3434093c1e30ae4e09988169435489c054f5eb9e0fb2a6ddd511da1393340913abbc5d848da280dfff1b314b1ee88bdff8092e59c51da839ca8e0bead531e From f7ef46bd6be7b4993f3147cc52fadfd4449ee7b7 Mon Sep 17 00:00:00 2001 From: Packit Date: Sat, 2 Mar 2024 18:44:04 +0000 Subject: [PATCH 134/160] [packit] 2.230.0 upstream release Upstream tag: v2.230.0 Upstream commit: 5cec8532 --- .gitignore | 1 + container-selinux.spec | 2 +- sources | 2 +- 3 files changed, 3 insertions(+), 2 deletions(-) diff --git a/.gitignore b/.gitignore index dd028fd..c22fbd6 100644 --- a/.gitignore +++ b/.gitignore @@ -225,3 +225,4 @@ /v2.228.1.tar.gz /v2.229.0.tar.gz /v2.229.1.tar.gz +/v2.230.0.tar.gz diff --git a/container-selinux.spec b/container-selinux.spec index 3372761..2aea4cd 100644 --- a/container-selinux.spec +++ b/container-selinux.spec @@ -33,7 +33,7 @@ Epoch: 2 # Keep Version in upstream specfile at 0. It will be automatically set # to the correct value by Packit for copr and koji builds. # IGNORE this comment if you're looking at it in dist-git. -Version: 2.229.1 +Version: 2.230.0 Release: %autorelease License: GPL-2.0-only URL: https://github.com/containers/%{name} diff --git a/sources b/sources index 9c53c37..17706d2 100644 --- a/sources +++ b/sources @@ -1 +1 @@ -SHA512 (v2.229.1.tar.gz) = 19a3434093c1e30ae4e09988169435489c054f5eb9e0fb2a6ddd511da1393340913abbc5d848da280dfff1b314b1ee88bdff8092e59c51da839ca8e0bead531e +SHA512 (v2.230.0.tar.gz) = 6534fb6e1360b6e64d6e49e674a976e711f42b8b75b0ad1dffb35f870e2ccf9fcfe38de5e4f695a7e2490c6fe880c36bb3c17c1510e4758d0d3aa877dea719a8 From 2d328af1cd85cfa3b228296f582709f5ba25dcf4 Mon Sep 17 00:00:00 2001 From: Packit Date: Wed, 24 Apr 2024 14:30:43 +0000 Subject: [PATCH 135/160] Update to 2.231.0 upstream release - Resolves: rhbz#2276827 Upstream tag: v2.231.0 Upstream commit: 5d983412 Commit authored by Packit automation (https://packit.dev/) --- .gitignore | 1 + .packit.yaml | 4 ++-- README.packit | 2 +- container-selinux.spec | 14 +++++++++++++- sources | 2 +- 5 files changed, 18 insertions(+), 5 deletions(-) diff --git a/.gitignore b/.gitignore index c22fbd6..07fedca 100644 --- a/.gitignore +++ b/.gitignore @@ -226,3 +226,4 @@ /v2.229.0.tar.gz /v2.229.1.tar.gz /v2.230.0.tar.gz +/v2.231.0.tar.gz diff --git a/.packit.yaml b/.packit.yaml index 0f6b9fd..b066cb5 100644 --- a/.packit.yaml +++ b/.packit.yaml @@ -67,9 +67,9 @@ jobs: message: "podman e2e tests failed on RHEL. @containers/packit-build please check." targets: &pr_test_targets_rhel epel-9-x86_64: - distros: [RHEL-9.3.0-Nightly,RHEL-9.4.0-Nightly] + distros: [RHEL-9.4.0-Nightly,RHEL-9-Nightly] epel-8-x86_64: - distros: [RHEL-8.9.0-Nightly,RHEL-8.10.0-Nightly] + distros: [RHEL-8.9.0-Nightly,RHEL-8-Nightly] identifier: podman_e2e_test_internal tmt_plan: "/plans/podman_e2e_test" diff --git a/README.packit b/README.packit index 31341b6..bee8d88 100644 --- a/README.packit +++ b/README.packit @@ -1,3 +1,3 @@ This repository is maintained by packit. https://packit.dev/ -The file was generated using packit 0.93.0. +The file was generated using packit 0.95.0. diff --git a/container-selinux.spec b/container-selinux.spec index 2aea4cd..87bd464 100644 --- a/container-selinux.spec +++ b/container-selinux.spec @@ -18,6 +18,14 @@ %global _selinux_policy_version 3.14.3-80.el8 %endif +# RHEL < 10 and Fedora < 40 use file context entries in /var/run +%if %{defined rhel} && 0%{?rhel} < 10 +%define legacy_var_run 1 +%endif +%if %{defined fedora} && 0%{?fedora} < 40 +%define legacy_var_run 1 +%endif + # https://github.com/containers/container-selinux/issues/203 %if %{!defined fedora} && %{!defined rhel} || %{defined fedora} && 0%{?fedora} <= 37 || %{defined rhel} && 0%{?rhel} <= 9 %define no_user_namespace 1 @@ -33,7 +41,7 @@ Epoch: 2 # Keep Version in upstream specfile at 0. It will be automatically set # to the correct value by Packit for copr and koji builds. # IGNORE this comment if you're looking at it in dist-git. -Version: 2.230.0 +Version: 2.231.0 Release: %autorelease License: GPL-2.0-only URL: https://github.com/containers/%{name} @@ -82,6 +90,10 @@ sed -i '/^systemd_chat_resolved/d' container.te sed -i '/user_namespace/d' container.te %endif +%if %{defined legacy_var_run} +sed -i 's|^/run/|/var/run/|' container.fc +%endif + %build make diff --git a/sources b/sources index 17706d2..2755628 100644 --- a/sources +++ b/sources @@ -1 +1 @@ -SHA512 (v2.230.0.tar.gz) = 6534fb6e1360b6e64d6e49e674a976e711f42b8b75b0ad1dffb35f870e2ccf9fcfe38de5e4f695a7e2490c6fe880c36bb3c17c1510e4758d0d3aa877dea719a8 +SHA512 (v2.231.0.tar.gz) = 1e1cf48dda96e72330719ec6b679cbb832e002903c94afee3d3a4754196712026a050bbf619e9b0fdba6efbd1c56aaf1e687cd0436cc3386ac23d5b5a83f6352 From 7c08fffb11ed1d7a6315a587346670ac9c9c064d Mon Sep 17 00:00:00 2001 From: Lokesh Mandvekar Date: Mon, 20 May 2024 15:00:44 -0400 Subject: [PATCH 136/160] Attempt to use TMT plans Signed-off-by: Lokesh Mandvekar --- .fmf/version | 1 + gating.yaml | 8 +++++- plans/main.fmf | 54 +++++++++++++++++++++++++++++++++++++ plans/podman_e2e_test.sh | 32 ++++++++++++++++++++++ plans/podman_system_test.sh | 9 +++++++ 5 files changed, 103 insertions(+), 1 deletion(-) create mode 100644 .fmf/version create mode 100644 plans/main.fmf create mode 100644 plans/podman_e2e_test.sh create mode 100644 plans/podman_system_test.sh diff --git a/.fmf/version b/.fmf/version new file mode 100644 index 0000000..d00491f --- /dev/null +++ b/.fmf/version @@ -0,0 +1 @@ +1 diff --git a/gating.yaml b/gating.yaml index c2182c7..e15b02e 100644 --- a/gating.yaml +++ b/gating.yaml @@ -3,4 +3,10 @@ product_versions: - fedora-* decision_context: bodhi_update_push_stable rules: - - !PassingTestCaseRule {test_case_name: fedora-ci.koji-build.tier0.functional} + #- !PassingTestCaseRule {test_case_name: fedora-ci.koji-build.tier0.functional} + - !PassingTestCaseRule {test_case_name: fedora-ci.koji-build./plans/podman_e2e_test_downstream.functional} + - !PassingTestCaseRule {test_case_name: fedora-ci.koji-build./plans/podman_system_test_downstream.functional} +product_versions: + - rhel-* +decision_context: osci_compose_gate +rules: [] diff --git a/plans/main.fmf b/plans/main.fmf new file mode 100644 index 0000000..17a055a --- /dev/null +++ b/plans/main.fmf @@ -0,0 +1,54 @@ +prepare+: + - name: Install bats + how: shell + script: | + BATS_VERSION=1.11.0 + curl -s -L -O https://github.com/bats-core/bats-core/archive/refs/tags/v$BATS_VERSION.tar.gz + tar zxf v$BATS_VERSION.tar.gz + cd bats-core-$BATS_VERSION + ./install.sh /usr + + # Install packages to run podman revdep tests + - how: install + package: + - golang + - podman + - podman-tests + +/podman_e2e_test_upstream: + summary: Run SELinux specific Podman e2e tests on upstream PRs + execute: + how: tmt + script: | + # Install podman-next copr and update from it + bash ./plans/repo_setup.sh + bash ./plans/podman_e2e_test.sh + adjust: + when: trigger == commit + +/podman_e2e_test_downstream: + summary: Run SELinux specific Podman e2e tests on downstream bodhi / errata + execute: + how: tmt + script: bash ./plans/podman_e2e_test.sh + adjust: + when: trigger == update + +/podman_system_test_upstream: + summary: Run SELinux specific Podman system tests on upstream PRs + execute: + how: tmt + script: | + # Install podman-next copr and update from it + bash ./plans/repo_setup.sh + bash ./plans/podman_system_test.sh + adjust: + when: trigger == commit + +/podman_system_test_downstream: + summary: Run SELinux specific Podman system tests on downstream bodhi / errata + execute: + how: tmt + script: bash ./plans/podman_system_test.sh + adjust: + when: trigger == update diff --git a/plans/podman_e2e_test.sh b/plans/podman_e2e_test.sh new file mode 100644 index 0000000..c2b5a27 --- /dev/null +++ b/plans/podman_e2e_test.sh @@ -0,0 +1,32 @@ +#!/usr/bin/env bash + +# Do not set -e as we want to work on all results of `rpm -q dnf[5]`. +set -xo pipefail + +cat /etc/redhat-release +rpm -q container-selinux golang podman + +# /tmp is often unsufficient +export TMPDIR=/var/tmp + +# dnf5 contains breaking changes +# Either of `dnf` OR `dnf5` will be installed, never both. +# To fetch srpm, dnf uses `--source`, dnf5 uses `--srpm`. +rpm -q dnf5 +if [[ $? -eq 0 ]]; then + SRPM_OPTS="--srpm" +else + SRPM_OPTS="--source" +fi + +# Fetch and extract latest podman source from the highest priority dnf repo +# NOTE: On upstream pull-requests, the srpm will be fetched from the +# podman-next copr while on bodhi updates, it will be fetched from Fedora's +# official repos. +dnf download $SRPM_OPTS podman +rpm2cpio podman*.src.rpm | cpio -di +tar zxf podman-*.tar.gz + +# Run podman e2e tests +cd podman-*/test/e2e +PODMAN_BINARY=/usr/bin/podman go test -v config.go config_amd64.go common_test.go libpod_suite_test.go run_selinux_test.go diff --git a/plans/podman_system_test.sh b/plans/podman_system_test.sh new file mode 100644 index 0000000..428145a --- /dev/null +++ b/plans/podman_system_test.sh @@ -0,0 +1,9 @@ +#!/usr/bin/env bash + +set -exo pipefail + +cat /etc/redhat-release +rpm -q container-selinux podman podman-tests + +# Run podman system tests +bats /usr/share/podman/test/system/410-selinux.bats From 114bba5ebc94bfb6e8b1522d2e3e5677a70c5a87 Mon Sep 17 00:00:00 2001 From: Lokesh Mandvekar Date: Mon, 20 May 2024 15:25:11 -0400 Subject: [PATCH 137/160] Reuse TMT tests: remove old STI tests Signed-off-by: Lokesh Mandvekar --- gating.yaml | 1 - plans/main.fmf | 1 + tests/tests.yml | 16 ---------------- 3 files changed, 1 insertion(+), 17 deletions(-) delete mode 100644 tests/tests.yml diff --git a/gating.yaml b/gating.yaml index e15b02e..d34f241 100644 --- a/gating.yaml +++ b/gating.yaml @@ -3,7 +3,6 @@ product_versions: - fedora-* decision_context: bodhi_update_push_stable rules: - #- !PassingTestCaseRule {test_case_name: fedora-ci.koji-build.tier0.functional} - !PassingTestCaseRule {test_case_name: fedora-ci.koji-build./plans/podman_e2e_test_downstream.functional} - !PassingTestCaseRule {test_case_name: fedora-ci.koji-build./plans/podman_system_test_downstream.functional} product_versions: diff --git a/plans/main.fmf b/plans/main.fmf index 17a055a..aeccfdf 100644 --- a/plans/main.fmf +++ b/plans/main.fmf @@ -12,6 +12,7 @@ prepare+: - how: install package: - golang + - iptables - podman - podman-tests diff --git a/tests/tests.yml b/tests/tests.yml deleted file mode 100644 index 552bdbb..0000000 --- a/tests/tests.yml +++ /dev/null @@ -1,16 +0,0 @@ -- hosts: localhost - tags: - - classic - roles: - - role: standard-test-basic - required_packages: - - policycoreutils - - container-selinux - - podman - tests: - - is-module-installed: - run: semodule --list=full | grep container - - can-rebuild-policy: - run: semodule -B - - can-run-podman: - run: podman run --rm quay.io/libpod/testimage:20210610 cat -v /proc/self/attr/current From 6548fb56c2be5e93a2e2b41e7fb031184bf90769 Mon Sep 17 00:00:00 2001 From: Lokesh Mandvekar Date: Mon, 20 May 2024 15:52:00 -0400 Subject: [PATCH 138/160] TMT: use fmf to discover tests Signed-off-by: Lokesh Mandvekar --- gating.yaml | 3 +-- plans/main.fmf | 4 ++++ 2 files changed, 5 insertions(+), 2 deletions(-) diff --git a/gating.yaml b/gating.yaml index d34f241..2866434 100644 --- a/gating.yaml +++ b/gating.yaml @@ -3,8 +3,7 @@ product_versions: - fedora-* decision_context: bodhi_update_push_stable rules: - - !PassingTestCaseRule {test_case_name: fedora-ci.koji-build./plans/podman_e2e_test_downstream.functional} - - !PassingTestCaseRule {test_case_name: fedora-ci.koji-build./plans/podman_system_test_downstream.functional} + - !PassingTestCaseRule {test_case_name: fedora-ci.koji-build.tier0.functional} product_versions: - rhel-* decision_context: osci_compose_gate diff --git a/plans/main.fmf b/plans/main.fmf index aeccfdf..640f679 100644 --- a/plans/main.fmf +++ b/plans/main.fmf @@ -29,6 +29,8 @@ prepare+: /podman_e2e_test_downstream: summary: Run SELinux specific Podman e2e tests on downstream bodhi / errata + discover: + how: fmf execute: how: tmt script: bash ./plans/podman_e2e_test.sh @@ -48,6 +50,8 @@ prepare+: /podman_system_test_downstream: summary: Run SELinux specific Podman system tests on downstream bodhi / errata + discover: + how: fmf execute: how: tmt script: bash ./plans/podman_system_test.sh From 1012b5368e910a6dbe43067af18040f9fbf81e61 Mon Sep 17 00:00:00 2001 From: Lokesh Mandvekar Date: Mon, 20 May 2024 16:13:42 -0400 Subject: [PATCH 139/160] fix gating.yaml Signed-off-by: Lokesh Mandvekar --- gating.yaml | 2 ++ plans/main.fmf | 21 +++++++++------------ 2 files changed, 11 insertions(+), 12 deletions(-) diff --git a/gating.yaml b/gating.yaml index 2866434..dbb1d91 100644 --- a/gating.yaml +++ b/gating.yaml @@ -4,6 +4,8 @@ product_versions: decision_context: bodhi_update_push_stable rules: - !PassingTestCaseRule {test_case_name: fedora-ci.koji-build.tier0.functional} + +--- !Policy product_versions: - rhel-* decision_context: osci_compose_gate diff --git a/plans/main.fmf b/plans/main.fmf index 640f679..81c4835 100644 --- a/plans/main.fmf +++ b/plans/main.fmf @@ -1,3 +1,8 @@ +discover: + how: fmf +execute: + how: tmt + prepare+: - name: Install bats how: shell @@ -18,8 +23,7 @@ prepare+: /podman_e2e_test_upstream: summary: Run SELinux specific Podman e2e tests on upstream PRs - execute: - how: tmt + execute+: script: | # Install podman-next copr and update from it bash ./plans/repo_setup.sh @@ -29,18 +33,14 @@ prepare+: /podman_e2e_test_downstream: summary: Run SELinux specific Podman e2e tests on downstream bodhi / errata - discover: - how: fmf - execute: - how: tmt + execute+: script: bash ./plans/podman_e2e_test.sh adjust: when: trigger == update /podman_system_test_upstream: summary: Run SELinux specific Podman system tests on upstream PRs - execute: - how: tmt + execute+: script: | # Install podman-next copr and update from it bash ./plans/repo_setup.sh @@ -50,10 +50,7 @@ prepare+: /podman_system_test_downstream: summary: Run SELinux specific Podman system tests on downstream bodhi / errata - discover: - how: fmf - execute: - how: tmt + execute+: script: bash ./plans/podman_system_test.sh adjust: when: trigger == update From 66b85a8781ee41973c2167c58b1cdb29f4982629 Mon Sep 17 00:00:00 2001 From: Lokesh Mandvekar Date: Tue, 21 May 2024 16:48:26 -0400 Subject: [PATCH 140/160] sync test plans from upstream --- .gitignore | 1 + .packit.yaml | 113 ++++++++++++++++++++++++------------ container-selinux.spec | 8 ++- plans/all.fmf | 20 +++++++ plans/main.fmf | 56 ------------------ plans/podman_e2e_test.sh | 32 ---------- plans/podman_system_test.sh | 9 --- sources | 2 +- test/Makefile | 23 ++++++++ test/main.fmf | 29 +++++++++ test/podman-tests.sh | 84 +++++++++++++++++++++++++++ 11 files changed, 238 insertions(+), 139 deletions(-) create mode 100644 plans/all.fmf delete mode 100644 plans/main.fmf delete mode 100644 plans/podman_e2e_test.sh delete mode 100644 plans/podman_system_test.sh create mode 100644 test/Makefile create mode 100644 test/main.fmf create mode 100644 test/podman-tests.sh diff --git a/.gitignore b/.gitignore index 07fedca..c48dcd9 100644 --- a/.gitignore +++ b/.gitignore @@ -227,3 +227,4 @@ /v2.229.1.tar.gz /v2.230.0.tar.gz /v2.231.0.tar.gz +/packit-tmt-bodhi-reuse.zip diff --git a/.packit.yaml b/.packit.yaml index b066cb5..9d0fa2f 100644 --- a/.packit.yaml +++ b/.packit.yaml @@ -2,16 +2,42 @@ # See the documentation for more information: # https://packit.dev/docs/configuration/ -specfile_path: rpm/container-selinux.spec +downstream_package_name: container-selinux upstream_tag_template: v{version} +# Ref: https://packit.dev/docs/configuration#files_to_sync +files_to_sync: + - src: rpm/gating.yaml + dest: gating.yaml + - src: plans/ + dest: plans/ + delete: true + - src: test/ + dest: test/ + delete: true + - src: .fmf/ + dest: .fmf/ + delete: true + - .packit.yaml + +packages: + container-selinux-fedora: + pkg_tool: fedpkg + specfile_path: rpm/container-selinux.spec + container-selinux-centos: + pkg_tool: centpkg + specfile_path: rpm/container-selinux.spec + container-selinux-rhel: + specfile_path: rpm/container-selinux.spec + srpm_build_deps: - make jobs: - job: copr_build trigger: pull_request - notifications: + packages: [container-selinux-fedora] + notifications: &copr_build_failure_notification failure_comment: message: "Ephemeral COPR build failed. @containers/packit-build please check." enable_net: true @@ -19,13 +45,29 @@ jobs: targets: - fedora-all - fedora-eln + + - job: copr_build + trigger: pull_request + packages: [container-selinux-centos] + notifications: *copr_build_failure_notification + enable_net: true + targets: + - centos-stream-9 + - centos-stream-10 + + - job: copr_build + trigger: pull_request + packages: [container-selinux-rhel] + notifications: *copr_build_failure_notification + enable_net: true + targets: - epel-9 - - epel-8 # Run on commit to main branch # Build targets managed in copr settings - job: copr_build trigger: commit + packages: [container-selinux-fedora] notifications: failure_comment: message: "podman-next COPR build failed. @containers/packit-build please check." @@ -35,67 +77,62 @@ jobs: enable_net: true # All tests specified in the `/plans/` subdir - # Podman e2e tests for Fedora and CentOS Stream + # Tests for Fedora - job: tests trigger: pull_request - notifications: + packages: [container-selinux-fedora] + notifications: &test_failure_notification failure_comment: - message: "podman e2e tests failed. @containers/packit-build please check." - targets: &pr_test_targets + message: "Tests failed. @containers/packit-build please check." + targets: - fedora-all - - epel-9 - - epel-8 - identifier: podman_e2e_test - tmt_plan: "/plans/podman_e2e_test" - # Podman system tests for Fedora and CentOS Stream + # Tests for CentOS Stream - job: tests trigger: pull_request - notifications: - failure_comment: - message: "podman system tests failed. @containers/packit-build please check." - targets: *pr_test_targets - identifier: podman_system_test - tmt_plan: "/plans/podman_system_test" + packages: [container-selinux-centos] + notifications: *test_failure_notification + targets: + - centos-stream-9 + - centos-stream-10 - # Podman e2e tests for RHEL + # Tests for RHEL - job: tests trigger: pull_request + packages: [container-selinux-rhel] use_internal_tf: true - notifications: - failure_comment: - message: "podman e2e tests failed on RHEL. @containers/packit-build please check." - targets: &pr_test_targets_rhel + notifications: *test_failure_notification + targets: epel-9-x86_64: distros: [RHEL-9.4.0-Nightly,RHEL-9-Nightly] - epel-8-x86_64: - distros: [RHEL-8.9.0-Nightly,RHEL-8-Nightly] - identifier: podman_e2e_test_internal - tmt_plan: "/plans/podman_e2e_test" - - # Podman system tests for RHEL - - job: tests - trigger: pull_request - use_internal_tf: true - notifications: - failure_comment: - message: "podman system tests failed on RHEL. @containers/packit-build please check." - targets: *pr_test_targets_rhel - identifier: podman_system_test_internal - tmt_plan: "/plans/podman_system_test" + # Use centos-stream-10 until we have epel-10 + # TODO: Enable after RHEL-10 gets selinux-policy >= 40.13.1 which is + # already on CentOS Stream 10. + #centos-stream-10-x86_64: + # distros: [RHEL-10-Beta-Nightly] - job: propose_downstream trigger: release update_release: false + packages: [container-selinux-fedora] dist_git_branches: - fedora-all + - job: propose_downstream + trigger: release + update_release: false + packages: [container-selinux-centos] + dist_git_branches: + - c10s + - job: koji_build trigger: commit + packages: [container-selinux-fedora] dist_git_branches: - fedora-all - job: bodhi_update trigger: commit + packages: [container-selinux-fedora] dist_git_branches: - fedora-branched # rawhide updates are created automatically diff --git a/container-selinux.spec b/container-selinux.spec index 87bd464..94c3b2c 100644 --- a/container-selinux.spec +++ b/container-selinux.spec @@ -44,9 +44,10 @@ Epoch: 2 Version: 2.231.0 Release: %autorelease License: GPL-2.0-only -URL: https://github.com/containers/%{name} +URL: https://github.com/lsm5/%{name} Summary: SELinux policies for container runtimes -Source0: %{url}/archive/v%{version}.tar.gz +#Source0: %%{url}/archive/v%%{version}.tar.gz +Source0: https://github.com/lsm5/container-selinux/archive/refs/heads/packit-tmt-bodhi-reuse.zip BuildArch: noarch BuildRequires: make BuildRequires: git-core @@ -70,7 +71,8 @@ Conflicts: k3s-selinux <= 0.4-1 SELinux policy modules for use with container runtimes. %prep -%autosetup -Sgit %{name}-%{version} +#%%autosetup -Sgit %%{name}-packit-tmt-bodhi-reuse +%setup -q -n %{name}-packit-tmt-bodhi-reuse sed -i 's/^man: install-policy/man:/' Makefile sed -i 's/^install: man/install:/' Makefile diff --git a/plans/all.fmf b/plans/all.fmf new file mode 100644 index 0000000..b6ec398 --- /dev/null +++ b/plans/all.fmf @@ -0,0 +1,20 @@ +discover: + how: fmf +execute: + how: tmt + +/upstream: + summary: Run SELinux specific Podman tests on upstream PRs + discover+: + filter: tag:upstream + adjust+: + enabled: false + when: initiator is not defined or initiator != packit + +/downstream: + summary: Run SELinux specific Podman e2e tests on bodhi / errata and dist-git PRs + discover+: + filter: tag:downstream + adjust+: + enabled: false + when: initiator == packit diff --git a/plans/main.fmf b/plans/main.fmf deleted file mode 100644 index 81c4835..0000000 --- a/plans/main.fmf +++ /dev/null @@ -1,56 +0,0 @@ -discover: - how: fmf -execute: - how: tmt - -prepare+: - - name: Install bats - how: shell - script: | - BATS_VERSION=1.11.0 - curl -s -L -O https://github.com/bats-core/bats-core/archive/refs/tags/v$BATS_VERSION.tar.gz - tar zxf v$BATS_VERSION.tar.gz - cd bats-core-$BATS_VERSION - ./install.sh /usr - - # Install packages to run podman revdep tests - - how: install - package: - - golang - - iptables - - podman - - podman-tests - -/podman_e2e_test_upstream: - summary: Run SELinux specific Podman e2e tests on upstream PRs - execute+: - script: | - # Install podman-next copr and update from it - bash ./plans/repo_setup.sh - bash ./plans/podman_e2e_test.sh - adjust: - when: trigger == commit - -/podman_e2e_test_downstream: - summary: Run SELinux specific Podman e2e tests on downstream bodhi / errata - execute+: - script: bash ./plans/podman_e2e_test.sh - adjust: - when: trigger == update - -/podman_system_test_upstream: - summary: Run SELinux specific Podman system tests on upstream PRs - execute+: - script: | - # Install podman-next copr and update from it - bash ./plans/repo_setup.sh - bash ./plans/podman_system_test.sh - adjust: - when: trigger == commit - -/podman_system_test_downstream: - summary: Run SELinux specific Podman system tests on downstream bodhi / errata - execute+: - script: bash ./plans/podman_system_test.sh - adjust: - when: trigger == update diff --git a/plans/podman_e2e_test.sh b/plans/podman_e2e_test.sh deleted file mode 100644 index c2b5a27..0000000 --- a/plans/podman_e2e_test.sh +++ /dev/null @@ -1,32 +0,0 @@ -#!/usr/bin/env bash - -# Do not set -e as we want to work on all results of `rpm -q dnf[5]`. -set -xo pipefail - -cat /etc/redhat-release -rpm -q container-selinux golang podman - -# /tmp is often unsufficient -export TMPDIR=/var/tmp - -# dnf5 contains breaking changes -# Either of `dnf` OR `dnf5` will be installed, never both. -# To fetch srpm, dnf uses `--source`, dnf5 uses `--srpm`. -rpm -q dnf5 -if [[ $? -eq 0 ]]; then - SRPM_OPTS="--srpm" -else - SRPM_OPTS="--source" -fi - -# Fetch and extract latest podman source from the highest priority dnf repo -# NOTE: On upstream pull-requests, the srpm will be fetched from the -# podman-next copr while on bodhi updates, it will be fetched from Fedora's -# official repos. -dnf download $SRPM_OPTS podman -rpm2cpio podman*.src.rpm | cpio -di -tar zxf podman-*.tar.gz - -# Run podman e2e tests -cd podman-*/test/e2e -PODMAN_BINARY=/usr/bin/podman go test -v config.go config_amd64.go common_test.go libpod_suite_test.go run_selinux_test.go diff --git a/plans/podman_system_test.sh b/plans/podman_system_test.sh deleted file mode 100644 index 428145a..0000000 --- a/plans/podman_system_test.sh +++ /dev/null @@ -1,9 +0,0 @@ -#!/usr/bin/env bash - -set -exo pipefail - -cat /etc/redhat-release -rpm -q container-selinux podman podman-tests - -# Run podman system tests -bats /usr/share/podman/test/system/410-selinux.bats diff --git a/sources b/sources index 2755628..be5f9f2 100644 --- a/sources +++ b/sources @@ -1 +1 @@ -SHA512 (v2.231.0.tar.gz) = 1e1cf48dda96e72330719ec6b679cbb832e002903c94afee3d3a4754196712026a050bbf619e9b0fdba6efbd1c56aaf1e687cd0436cc3386ac23d5b5a83f6352 +SHA512 (packit-tmt-bodhi-reuse.zip) = 91d25cd7fd97710c2ff1f1330f4f6d25d6ab0e7d17b05e956bb5975bbca9ba72c35276e4a5cd10163838b9ba84e5e30cb868715cbeb5fead6acb98a1697e0eac diff --git a/test/Makefile b/test/Makefile new file mode 100644 index 0000000..083ca93 --- /dev/null +++ b/test/Makefile @@ -0,0 +1,23 @@ +.PHONY: basic_check +basic_check: + semodule --list=full | grep container + semodule -B + +.PHONY: podman_e2e_test_upstream +podman_e2e_test_upstream: + bash ./podman-tests.sh e2e upstream + +.PHONY: podman_e2e_test_downstream +podman_e2e_test_downstream: + bash ./podman-tests.sh e2e downstream + +.PHONY: podman_system_test_upstream +podman_system_test_upstream: + bash ./podman-tests.sh system upstream + +.PHONY: podman_system_test_downstream +podman_system_test_downstream: + bash ./podman-tests.sh system downstream + +clean: + rm -rf podman-*dev* podman.spec diff --git a/test/main.fmf b/test/main.fmf new file mode 100644 index 0000000..6543521 --- /dev/null +++ b/test/main.fmf @@ -0,0 +1,29 @@ +# Only common dependencies that are NOT required to run podman-tests.sh are +# specified here. Everything else is in podman-tests.sh. +require: + - cpio + - make + - policycoreutils + +/basic_check: + summary: Run basic checks + tag: [ upstream, downstream ] + test: make basic_check + +/upstream: + tag: upstream +/upstream/podman_e2e_test: + summary: Run SELinux specific Podman e2e tests on upstream PRs + test: make podman_e2e_test_upstream +/upstream/podman_system_test: + summary: Run SELinux specific Podman system tests on upstream PRs + test: make podman_system_test_upstream + +/downstream: + tag: downstream +/downstream/podman_e2e_test: + summary: Run SELinux specific Podman e2e tests on downstream bodhi / errata and dist-git PRs + test: make podman_e2e_test_downstream +/downstream/podman_system_test: + summary: Run SELinux specific Podman system tests on downstream bodhi / errata and dist-git PRs + test: make podman_system_test_downstream diff --git a/test/podman-tests.sh b/test/podman-tests.sh new file mode 100644 index 0000000..0ff881e --- /dev/null +++ b/test/podman-tests.sh @@ -0,0 +1,84 @@ +#!/usr/bin/env bash + +# Do not set -e as we want to work on all results of `rpm -q dnf[5]`. +set -exo pipefail + +if [ "$(id -u)" -ne 0 ];then + echo "Please run this script as superuser" + exit 1 +fi + +if [[ $1 == '' ]]; then + echo -e "Usage: podman-tests.sh TEST_TYPE STREAM\nTEST_TYPE can be 'e2e' or 'system'\nSTREAM can be 'upstream' or 'downstream'" + exit 1 +fi + +# `rhel` macro exists on RHEL, CentOS Stream, and Fedora ELN +# `centos` macro exists only on CentOS Stream +CENTOS_VERSION=$(rpm --eval '%{?centos}') +RHEL_VERSION=$(rpm --eval '%{?rhel}') + +# For upstream tests, we need to test with podman and other packages from the +# podman-next copr. For downstream tests (bodhi, errata), we don't need any +# additional setup +if [[ $2 == "upstream" ]]; then + # Use CentOS Stream 10 copr target for RHEL-10 until EPEL 10 becomes + # available + if [[ -n $CENTOS_VERSION || $RHEL_VERSION -ge 10 ]]; then + dnf -y copr enable rhcontainerbot/podman-next centos-stream-$CENTOS_VERSION + else + dnf -y copr enable rhcontainerbot/podman-next + fi + echo "priority=5" >> /etc/yum.repos.d/_copr:copr.fedorainfracloud.org:rhcontainerbot:podman-next.repo +fi + +# Remove testing-farm repos if they exist +rm -f /etc/yum.repos.d/tag-repository.repo + +# Install common dependencies for tests +dnf -y install podman + +cat /etc/redhat-release +rpm -q container-selinux podman + +if [[ $1 == "e2e" ]]; then + # Install dependencies for tests + dnf -y install golang + rpm -q golang + + # /tmp is often unsufficient + export TMPDIR=/var/tmp + + # dnf5 contains breaking changes + # Either of `dnf` OR `dnf5` will be installed, never both. + # To fetch srpm, dnf uses `--source`, dnf5 uses `--srpm`. + rpm -q dnf5 && SRPM_OPTS="--srpm" || SRPM_OPTS="--source" + + # Fetch and extract latest podman source from the highest priority dnf repo + # NOTE: On upstream pull-requests, the srpm will be fetched from the + # podman-next copr while on bodhi updates, it will be fetched from Fedora's + # official repos. + dnf download $SRPM_OPTS podman + rpm2cpio podman*.src.rpm | cpio -di + tar zxf *.tar.gz + + # Run podman e2e tests + cd podman-*/test/e2e + PODMAN_BINARY=/usr/bin/podman go test -v config.go config_amd64.go common_test.go libpod_suite_test.go run_selinux_test.go +fi + +if [[ $1 == "system" ]]; then + # Enable EPEL to fetch bats + if [[ -n $(rpm --eval '%{?rhel}') ]]; then + # Until EPEL 10 is available use epel-9 for all RHEL and CentOS Stream + dnf -y install https://dl.fedoraproject.org/pub/epel/epel-release-latest-9.noarch.rpm + sed -i 's/$releasever/9/g' /etc/yum.repos.d/epel.repo + fi + + # Install test dependencies + dnf -y install bats podman-tests + rpm -q bats podman-tests + + # Run podman system tests + bats /usr/share/podman/test/system/410-selinux.bats +fi From 8377dcb72ba4c889ac241728b01ee1d98effd42e Mon Sep 17 00:00:00 2001 From: Packit Date: Mon, 10 Jun 2024 17:32:34 +0000 Subject: [PATCH 141/160] Update to 2.232.1 upstream release Upstream tag: v2.232.1 Upstream commit: 4ff1a398 Commit authored by Packit automation (https://packit.dev/) --- .gitignore | 1 + .packit.yaml | 2 - README.packit | 2 +- container-selinux.spec | 43 ++++++-------------- sources | 2 +- test/podman-tests.sh | 92 +++++++++++++++++++++++++----------------- 6 files changed, 72 insertions(+), 70 deletions(-) diff --git a/.gitignore b/.gitignore index c48dcd9..a973481 100644 --- a/.gitignore +++ b/.gitignore @@ -228,3 +228,4 @@ /v2.230.0.tar.gz /v2.231.0.tar.gz /packit-tmt-bodhi-reuse.zip +/v2.232.1.tar.gz diff --git a/.packit.yaml b/.packit.yaml index 9d0fa2f..4b6cb92 100644 --- a/.packit.yaml +++ b/.packit.yaml @@ -113,14 +113,12 @@ jobs: - job: propose_downstream trigger: release - update_release: false packages: [container-selinux-fedora] dist_git_branches: - fedora-all - job: propose_downstream trigger: release - update_release: false packages: [container-selinux-centos] dist_git_branches: - c10s diff --git a/README.packit b/README.packit index bee8d88..d2b528d 100644 --- a/README.packit +++ b/README.packit @@ -1,3 +1,3 @@ This repository is maintained by packit. https://packit.dev/ -The file was generated using packit 0.95.0. +The file was generated using packit 0.97.1.post1.dev6+gc8c0314a. diff --git a/container-selinux.spec b/container-selinux.spec index 94c3b2c..a56b428 100644 --- a/container-selinux.spec +++ b/container-selinux.spec @@ -11,29 +11,24 @@ # Format must contain '$x' somewhere to do anything useful %global _format() export %1=""; for x in %{modulenames}; do %1+=%2; %1+=" "; done; -# RHEL 8 doesn't allow watch and systemd_chat_resolved -%if %{defined rhel} && 0%{?rhel} == 8 -%define no_watch 1 -%define no_systemd_chat_resolved 1 -%global _selinux_policy_version 3.14.3-80.el8 -%endif - # RHEL < 10 and Fedora < 40 use file context entries in /var/run -%if %{defined rhel} && 0%{?rhel} < 10 -%define legacy_var_run 1 -%endif -%if %{defined fedora} && 0%{?fedora} < 40 +%if %{defined rhel} && 0%{?rhel} < 10 || %{defined fedora} && 0%{?fedora} < 40 %define legacy_var_run 1 %endif # https://github.com/containers/container-selinux/issues/203 -%if %{!defined fedora} && %{!defined rhel} || %{defined fedora} && 0%{?fedora} <= 37 || %{defined rhel} && 0%{?rhel} <= 9 +%if %{!defined fedora} && %{!defined rhel} || %{defined rhel} && 0%{?rhel} <= 9 %define no_user_namespace 1 %endif +# copr_build is more intuitive than copr_username +%if %{defined copr_username} +%define copr_build 1 +%endif + Name: container-selinux # Set different Epochs for copr and koji -%if %{defined copr_username} +%if %{defined copr_build} Epoch: 102 %else Epoch: 2 @@ -41,13 +36,12 @@ Epoch: 2 # Keep Version in upstream specfile at 0. It will be automatically set # to the correct value by Packit for copr and koji builds. # IGNORE this comment if you're looking at it in dist-git. -Version: 2.231.0 +Version: 2.232.1 Release: %autorelease License: GPL-2.0-only -URL: https://github.com/lsm5/%{name} +URL: https://github.com/containers/%{name} Summary: SELinux policies for container runtimes -#Source0: %%{url}/archive/v%%{version}.tar.gz -Source0: https://github.com/lsm5/container-selinux/archive/refs/heads/packit-tmt-bodhi-reuse.zip +Source0: %{url}/archive/v%{version}.tar.gz BuildArch: noarch BuildRequires: make BuildRequires: git-core @@ -71,23 +65,11 @@ Conflicts: k3s-selinux <= 0.4-1 SELinux policy modules for use with container runtimes. %prep -#%%autosetup -Sgit %%{name}-packit-tmt-bodhi-reuse -%setup -q -n %{name}-packit-tmt-bodhi-reuse +%autosetup -Sgit %{name}-%{version} sed -i 's/^man: install-policy/man:/' Makefile sed -i 's/^install: man/install:/' Makefile -%if %{defined no_watch} -sed -i 's/watch watch_reads//' container.if -sed -i 's/watch watch_reads//' container.te -sed -i '/sysfs_t:dir watch/d' container.te -sed -i '/fifo_file watch/d' container.te -%endif - -%if %{defined no_systemd_chat_resolved} -sed -i '/^systemd_chat_resolved/d' container.te -%endif - %if %{defined no_user_namespace} sed -i '/user_namespace/d' container.te %endif @@ -140,6 +122,7 @@ fi %{_datadir}/selinux/* %dir %{_datadir}/containers/selinux %{_datadir}/containers/selinux/contexts +%dir %{_datadir}/udica %dir %{_datadir}/udica/templates/ %{_datadir}/udica/templates/* # Ref: https://bugzilla.redhat.com/show_bug.cgi?id=2209120 diff --git a/sources b/sources index be5f9f2..07ddcc7 100644 --- a/sources +++ b/sources @@ -1 +1 @@ -SHA512 (packit-tmt-bodhi-reuse.zip) = 91d25cd7fd97710c2ff1f1330f4f6d25d6ab0e7d17b05e956bb5975bbca9ba72c35276e4a5cd10163838b9ba84e5e30cb868715cbeb5fead6acb98a1697e0eac +SHA512 (v2.232.1.tar.gz) = babaf5f65b639493482392674717284574859e4bbb03e897843265708f4f5cceeb260712cdff09771076d99c18aa89718c0e95dc33839e72e809de9e80079ae2 diff --git a/test/podman-tests.sh b/test/podman-tests.sh index 0ff881e..50a29e2 100644 --- a/test/podman-tests.sh +++ b/test/podman-tests.sh @@ -1,18 +1,20 @@ #!/usr/bin/env bash -# Do not set -e as we want to work on all results of `rpm -q dnf[5]`. set -exo pipefail -if [ "$(id -u)" -ne 0 ];then - echo "Please run this script as superuser" +if [[ "$(id -u)" -ne 0 ]];then + echo "Please run as superuser" exit 1 fi -if [[ $1 == '' ]]; then +if [[ -z "$1" ]]; then echo -e "Usage: podman-tests.sh TEST_TYPE STREAM\nTEST_TYPE can be 'e2e' or 'system'\nSTREAM can be 'upstream' or 'downstream'" exit 1 fi +TEST_TYPE=$1 +STREAM=$2 + # `rhel` macro exists on RHEL, CentOS Stream, and Fedora ELN # `centos` macro exists only on CentOS Stream CENTOS_VERSION=$(rpm --eval '%{?centos}') @@ -21,7 +23,7 @@ RHEL_VERSION=$(rpm --eval '%{?rhel}') # For upstream tests, we need to test with podman and other packages from the # podman-next copr. For downstream tests (bodhi, errata), we don't need any # additional setup -if [[ $2 == "upstream" ]]; then +if [[ "$STREAM" == "upstream" ]]; then # Use CentOS Stream 10 copr target for RHEL-10 until EPEL 10 becomes # available if [[ -n $CENTOS_VERSION || $RHEL_VERSION -ge 10 ]]; then @@ -32,53 +34,71 @@ if [[ $2 == "upstream" ]]; then echo "priority=5" >> /etc/yum.repos.d/_copr:copr.fedorainfracloud.org:rhcontainerbot:podman-next.repo fi -# Remove testing-farm repos if they exist +# Remove testing-farm repos if they exist as these interfere with the packages +# we want to install, especially when podman-next copr is involved rm -f /etc/yum.repos.d/tag-repository.repo -# Install common dependencies for tests -dnf -y install podman +# Fetch and extract latest podman source from the highest priority dnf repo +# NOTE: On upstream pull-requests, the srpm will be fetched from the +# podman-next copr while on bodhi updates, it will be fetched from Fedora's +# official repos. +PODMAN_DIR=$(mktemp -d) +pushd $PODMAN_DIR +# Download podman and podman-tests rpms, along with podman srpm +dnf download podman podman-tests +# Download srpm, srpm opts differ between dnf and dnf5 +rpm -q dnf5 && dnf download --srpm podman || dnf download --source podman + +# Ensure podman-tests RPM and podman SRPM version-release match +# NOTE: podman RPM and podman-tests RPM matching is ensured by podman.spec so +# matching podman-tests and podman srpm is sufficient here. +PODMAN_TESTS_VERSION=$(ls podman-tests* | sed -e "s/.$(uname -m).rpm//" -e "s/podman-tests-//") +PODMAN_SRPM_VERSION=$(ls podman*.src.rpm | sed -e "s/.src.rpm//" -e "s/podman-//") +if [[ "$PODMAN_TESTS_VERSION" != "$PODMAN_SRPM_VERSION" ]]; then + echo "podman-tests and podman srpm version-release don't match" + exit 1 +fi + +# Install downloaded podman and podman-tests rpms +dnf -y install ./podman*.$(uname -m).rpm + +# Extract and untar podman source from srpm +rpm2cpio $(ls podman*.src.rpm) | cpio -di +tar zxf *.tar.gz + +popd + +# Enable EPEL on RHEL/CentOS Stream envs to fetch bats +if [[ -n $(rpm --eval '%{?rhel}') ]]; then + # Until EPEL 10 is available use epel-9 for all RHEL and CentOS Stream + dnf -y install https://dl.fedoraproject.org/pub/epel/epel-release-latest-9.noarch.rpm + sed -i 's/$releasever/9/g' /etc/yum.repos.d/epel.repo +fi + +# Install dependencies for running tests +dnf -y install bats golang + +# Print versions of distro and installed packages cat /etc/redhat-release -rpm -q container-selinux podman - -if [[ $1 == "e2e" ]]; then - # Install dependencies for tests - dnf -y install golang - rpm -q golang +rpm -q bats container-selinux golang podman podman-tests selinux-policy +if [[ "$TEST_TYPE" == "e2e" ]]; then # /tmp is often unsufficient export TMPDIR=/var/tmp # dnf5 contains breaking changes # Either of `dnf` OR `dnf5` will be installed, never both. # To fetch srpm, dnf uses `--source`, dnf5 uses `--srpm`. - rpm -q dnf5 && SRPM_OPTS="--srpm" || SRPM_OPTS="--source" - - # Fetch and extract latest podman source from the highest priority dnf repo - # NOTE: On upstream pull-requests, the srpm will be fetched from the - # podman-next copr while on bodhi updates, it will be fetched from Fedora's - # official repos. - dnf download $SRPM_OPTS podman - rpm2cpio podman*.src.rpm | cpio -di - tar zxf *.tar.gz + #rpm -q dnf5 && SRPM_OPTS="--srpm" || SRPM_OPTS="--source" # Run podman e2e tests - cd podman-*/test/e2e + pushd $PODMAN_DIR/podman-*/test/e2e PODMAN_BINARY=/usr/bin/podman go test -v config.go config_amd64.go common_test.go libpod_suite_test.go run_selinux_test.go + popd fi -if [[ $1 == "system" ]]; then - # Enable EPEL to fetch bats - if [[ -n $(rpm --eval '%{?rhel}') ]]; then - # Until EPEL 10 is available use epel-9 for all RHEL and CentOS Stream - dnf -y install https://dl.fedoraproject.org/pub/epel/epel-release-latest-9.noarch.rpm - sed -i 's/$releasever/9/g' /etc/yum.repos.d/epel.repo - fi - - # Install test dependencies - dnf -y install bats podman-tests - rpm -q bats podman-tests - +if [[ "$TEST_TYPE" == "system" ]]; then # Run podman system tests bats /usr/share/podman/test/system/410-selinux.bats fi From 1d88ecfc5671417f42184cb232192e8c188f0a08 Mon Sep 17 00:00:00 2001 From: Fedora Release Engineering Date: Wed, 17 Jul 2024 19:56:23 +0000 Subject: [PATCH 142/160] Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild From b4ebc80e865c58cb49c63fb12b4659b125cf5dc8 Mon Sep 17 00:00:00 2001 From: Packit Date: Wed, 11 Sep 2024 14:00:39 +0000 Subject: [PATCH 143/160] Update to 2.233.0 upstream release Upstream tag: v2.233.0 Upstream commit: cc5da8a9 Commit authored by Packit automation (https://packit.dev/) --- .gitignore | 1 + .packit.yaml | 29 ++++++++++++++++++++--------- README.packit | 2 +- container-selinux.spec | 2 +- plans/all.fmf | 2 +- sources | 2 +- test/Makefile | 20 ++++++-------------- test/main.fmf | 26 +++++++++----------------- test/podman-tests.sh | 33 ++++----------------------------- 9 files changed, 44 insertions(+), 73 deletions(-) diff --git a/.gitignore b/.gitignore index a973481..d168437 100644 --- a/.gitignore +++ b/.gitignore @@ -229,3 +229,4 @@ /v2.231.0.tar.gz /packit-tmt-bodhi-reuse.zip /v2.232.1.tar.gz +/v2.233.0.tar.gz diff --git a/.packit.yaml b/.packit.yaml index 4b6cb92..2f048d0 100644 --- a/.packit.yaml +++ b/.packit.yaml @@ -9,6 +9,7 @@ upstream_tag_template: v{version} files_to_sync: - src: rpm/gating.yaml dest: gating.yaml + delete: true - src: plans/ dest: plans/ delete: true @@ -51,7 +52,7 @@ jobs: packages: [container-selinux-centos] notifications: *copr_build_failure_notification enable_net: true - targets: + targets: ¢os_targets - centos-stream-9 - centos-stream-10 @@ -86,15 +87,23 @@ jobs: message: "Tests failed. @containers/packit-build please check." targets: - fedora-all + tf_extra_params: + environments: + - artifacts: + - type: repository-file + id: https://copr.fedorainfracloud.org/coprs/rhcontainerbot/podman-next/repo/fedora-$releasever/rhcontainerbot-podman-next-fedora-$releasever.repo # Tests for CentOS Stream - job: tests trigger: pull_request packages: [container-selinux-centos] notifications: *test_failure_notification - targets: - - centos-stream-9 - - centos-stream-10 + targets: *centos_targets + tf_extra_params: + environments: + - artifacts: + - type: repository-file + id: https://copr.fedorainfracloud.org/coprs/rhcontainerbot/podman-next/repo/centos-stream-$releasever/rhcontainerbot-podman-next-centos-stream-$releasever.repo # Tests for RHEL - job: tests @@ -105,11 +114,13 @@ jobs: targets: epel-9-x86_64: distros: [RHEL-9.4.0-Nightly,RHEL-9-Nightly] - # Use centos-stream-10 until we have epel-10 - # TODO: Enable after RHEL-10 gets selinux-policy >= 40.13.1 which is - # already on CentOS Stream 10. - #centos-stream-10-x86_64: - # distros: [RHEL-10-Beta-Nightly] + tf_extra_params: + environments: + - artifacts: + - type: repository-file + id: https://copr.fedorainfracloud.org/coprs/rhcontainerbot/podman-next/repo/epel-$releasever/rhcontainerbot-podman-next-epel-$releasever.repo + - type: repository-file + id: https://src.fedoraproject.org/rpms/epel-release/raw/epel9/f/epel.repo - job: propose_downstream trigger: release diff --git a/README.packit b/README.packit index d2b528d..459869a 100644 --- a/README.packit +++ b/README.packit @@ -1,3 +1,3 @@ This repository is maintained by packit. https://packit.dev/ -The file was generated using packit 0.97.1.post1.dev6+gc8c0314a. +The file was generated using packit 0.101.0. diff --git a/container-selinux.spec b/container-selinux.spec index a56b428..cc61060 100644 --- a/container-selinux.spec +++ b/container-selinux.spec @@ -36,7 +36,7 @@ Epoch: 2 # Keep Version in upstream specfile at 0. It will be automatically set # to the correct value by Packit for copr and koji builds. # IGNORE this comment if you're looking at it in dist-git. -Version: 2.232.1 +Version: 2.233.0 Release: %autorelease License: GPL-2.0-only URL: https://github.com/containers/%{name} diff --git a/plans/all.fmf b/plans/all.fmf index b6ec398..9e0d10b 100644 --- a/plans/all.fmf +++ b/plans/all.fmf @@ -12,7 +12,7 @@ execute: when: initiator is not defined or initiator != packit /downstream: - summary: Run SELinux specific Podman e2e tests on bodhi / errata and dist-git PRs + summary: Run SELinux specific Podman tests on bodhi / errata and dist-git PRs discover+: filter: tag:downstream adjust+: diff --git a/sources b/sources index 07ddcc7..e8e9fbc 100644 --- a/sources +++ b/sources @@ -1 +1 @@ -SHA512 (v2.232.1.tar.gz) = babaf5f65b639493482392674717284574859e4bbb03e897843265708f4f5cceeb260712cdff09771076d99c18aa89718c0e95dc33839e72e809de9e80079ae2 +SHA512 (v2.233.0.tar.gz) = f79380a3312cb57953bc1286ba7dcdbf29ab95ce72de79c5bac1eb6c4401d2bcb0c9875802c7198a9680af19affb34170581c609180408b21cc27cf680c3feb4 diff --git a/test/Makefile b/test/Makefile index 083ca93..5fee1ea 100644 --- a/test/Makefile +++ b/test/Makefile @@ -3,21 +3,13 @@ basic_check: semodule --list=full | grep container semodule -B -.PHONY: podman_e2e_test_upstream -podman_e2e_test_upstream: - bash ./podman-tests.sh e2e upstream +.PHONY: podman_e2e_test +podman_e2e_test: + bash ./podman-tests.sh e2e -.PHONY: podman_e2e_test_downstream -podman_e2e_test_downstream: - bash ./podman-tests.sh e2e downstream - -.PHONY: podman_system_test_upstream -podman_system_test_upstream: - bash ./podman-tests.sh system upstream - -.PHONY: podman_system_test_downstream -podman_system_test_downstream: - bash ./podman-tests.sh system downstream +.PHONY: podman_system_test +podman_system_test: + bash ./podman-tests.sh system clean: rm -rf podman-*dev* podman.spec diff --git a/test/main.fmf b/test/main.fmf index 6543521..8c30075 100644 --- a/test/main.fmf +++ b/test/main.fmf @@ -6,24 +6,16 @@ require: - policycoreutils /basic_check: - summary: Run basic checks tag: [ upstream, downstream ] + summary: Run basic checks test: make basic_check -/upstream: - tag: upstream -/upstream/podman_e2e_test: - summary: Run SELinux specific Podman e2e tests on upstream PRs - test: make podman_e2e_test_upstream -/upstream/podman_system_test: - summary: Run SELinux specific Podman system tests on upstream PRs - test: make podman_system_test_upstream +/podman_e2e_test: + tag: [ upstream, downstream ] + summary: Run SELinux specific Podman e2e tests + test: make podman_e2e_test -/downstream: - tag: downstream -/downstream/podman_e2e_test: - summary: Run SELinux specific Podman e2e tests on downstream bodhi / errata and dist-git PRs - test: make podman_e2e_test_downstream -/downstream/podman_system_test: - summary: Run SELinux specific Podman system tests on downstream bodhi / errata and dist-git PRs - test: make podman_system_test_downstream +/podman_system_test: + tag: [ upstream, downstream ] + summary: Run SELinux specific Podman system tests + test: make podman_system_test diff --git a/test/podman-tests.sh b/test/podman-tests.sh index 50a29e2..b758cc8 100644 --- a/test/podman-tests.sh +++ b/test/podman-tests.sh @@ -2,37 +2,19 @@ set -exo pipefail +cat /etc/redhat-release + if [[ "$(id -u)" -ne 0 ]];then echo "Please run as superuser" exit 1 fi if [[ -z "$1" ]]; then - echo -e "Usage: podman-tests.sh TEST_TYPE STREAM\nTEST_TYPE can be 'e2e' or 'system'\nSTREAM can be 'upstream' or 'downstream'" + echo -e "Usage: $(basename ${BASH_SOURCE[0]}) TEST_TYPE\nTEST_TYPE can be 'e2e' or 'system'\n" exit 1 fi TEST_TYPE=$1 -STREAM=$2 - -# `rhel` macro exists on RHEL, CentOS Stream, and Fedora ELN -# `centos` macro exists only on CentOS Stream -CENTOS_VERSION=$(rpm --eval '%{?centos}') -RHEL_VERSION=$(rpm --eval '%{?rhel}') - -# For upstream tests, we need to test with podman and other packages from the -# podman-next copr. For downstream tests (bodhi, errata), we don't need any -# additional setup -if [[ "$STREAM" == "upstream" ]]; then - # Use CentOS Stream 10 copr target for RHEL-10 until EPEL 10 becomes - # available - if [[ -n $CENTOS_VERSION || $RHEL_VERSION -ge 10 ]]; then - dnf -y copr enable rhcontainerbot/podman-next centos-stream-$CENTOS_VERSION - else - dnf -y copr enable rhcontainerbot/podman-next - fi - echo "priority=5" >> /etc/yum.repos.d/_copr:copr.fedorainfracloud.org:rhcontainerbot:podman-next.repo -fi # Remove testing-farm repos if they exist as these interfere with the packages # we want to install, especially when podman-next copr is involved @@ -69,18 +51,11 @@ tar zxf *.tar.gz popd -# Enable EPEL on RHEL/CentOS Stream envs to fetch bats -if [[ -n $(rpm --eval '%{?rhel}') ]]; then - # Until EPEL 10 is available use epel-9 for all RHEL and CentOS Stream - dnf -y install https://dl.fedoraproject.org/pub/epel/epel-release-latest-9.noarch.rpm - sed -i 's/$releasever/9/g' /etc/yum.repos.d/epel.repo -fi - # Install dependencies for running tests +# NOTE: bats will be fetched from Fedora repos on public testing-farm envs if EPEL repo is absent or disabled. dnf -y install bats golang # Print versions of distro and installed packages -cat /etc/redhat-release rpm -q bats container-selinux golang podman podman-tests selinux-policy if [[ "$TEST_TYPE" == "e2e" ]]; then From edda101018b1210c0b1a1d463b0ccacb1f716059 Mon Sep 17 00:00:00 2001 From: Packit Date: Mon, 11 Nov 2024 12:09:59 +0000 Subject: [PATCH 144/160] Update to 2.234.1 upstream release Upstream tag: v2.234.1 Upstream commit: 8ba68ee9 Commit authored by Packit automation (https://packit.dev/) --- .gitignore | 1 + .packit.yaml | 51 ++++++++++++++---------------------------- README.packit | 2 +- container-selinux.spec | 25 +++++++++++---------- sources | 2 +- test/Makefile | 1 + 6 files changed, 34 insertions(+), 48 deletions(-) diff --git a/.gitignore b/.gitignore index d168437..0c07861 100644 --- a/.gitignore +++ b/.gitignore @@ -230,3 +230,4 @@ /packit-tmt-bodhi-reuse.zip /v2.232.1.tar.gz /v2.233.0.tar.gz +/v2.234.1.tar.gz diff --git a/.packit.yaml b/.packit.yaml index 2f048d0..c9b56ad 100644 --- a/.packit.yaml +++ b/.packit.yaml @@ -28,7 +28,7 @@ packages: container-selinux-centos: pkg_tool: centpkg specfile_path: rpm/container-selinux.spec - container-selinux-rhel: + container-selinux-eln: specfile_path: rpm/container-selinux.spec srpm_build_deps: @@ -43,8 +43,18 @@ jobs: message: "Ephemeral COPR build failed. @containers/packit-build please check." enable_net: true # container-selinux is noarch so we only need to test on one arch + targets: &fedora_copr_targets + - fedora-development + - fedora-latest + - fedora-ltest-stable + - fedora-40 + + - job: copr_build + trigger: pull_request + packages: [container-selinux-eln] + notifications: *copr_build_failure_notification + enable_net: true targets: - - fedora-all - fedora-eln - job: copr_build @@ -52,18 +62,10 @@ jobs: packages: [container-selinux-centos] notifications: *copr_build_failure_notification enable_net: true - targets: ¢os_targets + targets: ¢os_copr_targets - centos-stream-9 - centos-stream-10 - - job: copr_build - trigger: pull_request - packages: [container-selinux-rhel] - notifications: *copr_build_failure_notification - enable_net: true - targets: - - epel-9 - # Run on commit to main branch # Build targets managed in copr settings - job: copr_build @@ -85,8 +87,7 @@ jobs: notifications: &test_failure_notification failure_comment: message: "Tests failed. @containers/packit-build please check." - targets: - - fedora-all + targets: *fedora_copr_targets tf_extra_params: environments: - artifacts: @@ -98,34 +99,17 @@ jobs: trigger: pull_request packages: [container-selinux-centos] notifications: *test_failure_notification - targets: *centos_targets + targets: *centos_copr_targets tf_extra_params: environments: - artifacts: - type: repository-file id: https://copr.fedorainfracloud.org/coprs/rhcontainerbot/podman-next/repo/centos-stream-$releasever/rhcontainerbot-podman-next-centos-stream-$releasever.repo - # Tests for RHEL - - job: tests - trigger: pull_request - packages: [container-selinux-rhel] - use_internal_tf: true - notifications: *test_failure_notification - targets: - epel-9-x86_64: - distros: [RHEL-9.4.0-Nightly,RHEL-9-Nightly] - tf_extra_params: - environments: - - artifacts: - - type: repository-file - id: https://copr.fedorainfracloud.org/coprs/rhcontainerbot/podman-next/repo/epel-$releasever/rhcontainerbot-podman-next-epel-$releasever.repo - - type: repository-file - id: https://src.fedoraproject.org/rpms/epel-release/raw/epel9/f/epel.repo - - job: propose_downstream trigger: release packages: [container-selinux-fedora] - dist_git_branches: + dist_git_branches: &fedora_targets - fedora-all - job: propose_downstream @@ -137,8 +121,7 @@ jobs: - job: koji_build trigger: commit packages: [container-selinux-fedora] - dist_git_branches: - - fedora-all + dist_git_branches: *fedora_targets - job: bodhi_update trigger: commit diff --git a/README.packit b/README.packit index 459869a..1b4760d 100644 --- a/README.packit +++ b/README.packit @@ -1,3 +1,3 @@ This repository is maintained by packit. https://packit.dev/ -The file was generated using packit 0.101.0. +The file was generated using packit 0.102.2.post1.dev4+g3142fcf8. diff --git a/container-selinux.spec b/container-selinux.spec index cc61060..646c38a 100644 --- a/container-selinux.spec +++ b/container-selinux.spec @@ -2,7 +2,6 @@ # container-selinux stuff (prefix with ds_ for version/release etc.) # Some bits borrowed from the openstack-selinux package -%global selinuxtype targeted %global moduletype services %global modulenames container @@ -36,7 +35,7 @@ Epoch: 2 # Keep Version in upstream specfile at 0. It will be automatically set # to the correct value by Packit for copr and koji builds. # IGNORE this comment if you're looking at it in dist-git. -Version: 2.233.0 +Version: 2.234.1 Release: %autorelease License: GPL-2.0-only URL: https://github.com/containers/%{name} @@ -51,7 +50,8 @@ BuildRequires: selinux-policy-devel >= %_selinux_policy_version # RE: rhbz#1195804 - ensure min NVR for selinux-policy Requires: selinux-policy >= %_selinux_policy_version Requires(post): selinux-policy-base >= %_selinux_policy_version -Requires(post): selinux-policy-targeted >= %_selinux_policy_version +Requires(post): selinux-policy-any >= %_selinux_policy_version +Recommends: selinux-policy-targeted >= %_selinux_policy_version Requires(post): policycoreutils Requires(post): libselinux-utils Requires(post): sed @@ -90,7 +90,7 @@ make rm %{buildroot}%{_mandir}/man8/container_selinux.8 %pre -%selinux_relabel_pre -s %{selinuxtype} +%selinux_relabel_pre %post # Install all modules in a single transaction @@ -98,21 +98,21 @@ if [ $1 -eq 1 ]; then %{_sbindir}/setsebool -P -N virt_use_nfs=1 virt_sandbox_use_all_caps=1 fi %_format MODULES %{_datadir}/selinux/packages/$x.pp.bz2 -%{_sbindir}/semodule -n -s %{selinuxtype} -r container 2> /dev/null -%{_sbindir}/semodule -n -s %{selinuxtype} -d docker 2> /dev/null -%{_sbindir}/semodule -n -s %{selinuxtype} -d gear 2> /dev/null -%selinux_modules_install -s %{selinuxtype} $MODULES . %{_sysconfdir}/selinux/config +%{_sbindir}/semodule -n -s ${SELINUXTYPE} -r container 2> /dev/null +%{_sbindir}/semodule -n -s ${SELINUXTYPE} -d docker 2> /dev/null +%{_sbindir}/semodule -n -s ${SELINUXTYPE} -d gear 2> /dev/null +%selinux_modules_install -s ${SELINUXTYPE} $MODULES sed -e "\|container_file_t|h; \${x;s|container_file_t||;{g;t};a\\" -e "container_file_t" -e "}" -i /etc/selinux/${SELINUXTYPE}/contexts/customizable_types matchpathcon -qV %{_sharedstatedir}/containers || restorecon -R %{_sharedstatedir}/containers &> /dev/null || : %postun if [ $1 -eq 0 ]; then - %selinux_modules_uninstall -s %{selinuxtype} %{modulenames} docker + %selinux_modules_uninstall %{modulenames} docker fi %posttrans -%selinux_relabel_post -s %{selinuxtype} +%selinux_relabel_post #define license tag if not already defined %{!?_licensedir:%global license %doc} @@ -127,8 +127,9 @@ fi %{_datadir}/udica/templates/* # Ref: https://bugzilla.redhat.com/show_bug.cgi?id=2209120 #%%{_mandir}/man8/container_selinux.8.gz -%{_sysconfdir}/selinux/targeted/contexts/users/* -%ghost %{_sharedstatedir}/selinux/%{selinuxtype}/active/modules/200/%{modulenames} +%{_sysconfdir}/selinux/targeted/contexts/users/container_u +%ghost %verify(not mode) %{_selinux_store_path}/targeted/active/modules/200/%{modulenames} +%ghost %verify(not mode) %{_selinux_store_path}/mls/active/modules/200/%{modulenames} %triggerpostun -- container-selinux < 2:2.162.1-3 if %{_sbindir}/selinuxenabled ; then diff --git a/sources b/sources index e8e9fbc..3c5862b 100644 --- a/sources +++ b/sources @@ -1 +1 @@ -SHA512 (v2.233.0.tar.gz) = f79380a3312cb57953bc1286ba7dcdbf29ab95ce72de79c5bac1eb6c4401d2bcb0c9875802c7198a9680af19affb34170581c609180408b21cc27cf680c3feb4 +SHA512 (v2.234.1.tar.gz) = 6ffc70aa42134aec10eaf5f5b4b10a0481309e4285a419d65df9afabc033a34c86147fade0640e7b641b89aaaea3c525ae23700bea675ea6a1319c8fdb7a1859 diff --git a/test/Makefile b/test/Makefile index 5fee1ea..9088bd9 100644 --- a/test/Makefile +++ b/test/Makefile @@ -2,6 +2,7 @@ basic_check: semodule --list=full | grep container semodule -B + rpm -Vqf /var/lib/selinux/*/active/modules/200/container .PHONY: podman_e2e_test podman_e2e_test: From 038f1b6063dc8a9960157896a00a0f33121c6e7d Mon Sep 17 00:00:00 2001 From: Packit Date: Mon, 11 Nov 2024 14:12:33 +0000 Subject: [PATCH 145/160] Update to 2.234.2 upstream release Upstream tag: v2.234.2 Upstream commit: cd0a1758 Commit authored by Packit automation (https://packit.dev/) --- .gitignore | 1 + README.packit | 2 +- container-selinux.spec | 7 ++----- sources | 2 +- 4 files changed, 5 insertions(+), 7 deletions(-) diff --git a/.gitignore b/.gitignore index 0c07861..2069158 100644 --- a/.gitignore +++ b/.gitignore @@ -231,3 +231,4 @@ /v2.232.1.tar.gz /v2.233.0.tar.gz /v2.234.1.tar.gz +/v2.234.2.tar.gz diff --git a/README.packit b/README.packit index 1b4760d..c18262a 100644 --- a/README.packit +++ b/README.packit @@ -1,3 +1,3 @@ This repository is maintained by packit. https://packit.dev/ -The file was generated using packit 0.102.2.post1.dev4+g3142fcf8. +The file was generated using packit 0.103.0. diff --git a/container-selinux.spec b/container-selinux.spec index 646c38a..e34b6fd 100644 --- a/container-selinux.spec +++ b/container-selinux.spec @@ -35,7 +35,7 @@ Epoch: 2 # Keep Version in upstream specfile at 0. It will be automatically set # to the correct value by Packit for copr and koji builds. # IGNORE this comment if you're looking at it in dist-git. -Version: 2.234.1 +Version: 2.234.2 Release: %autorelease License: GPL-2.0-only URL: https://github.com/containers/%{name} @@ -86,9 +86,6 @@ make %_format MODULES $x.pp.bz2 %{__make} DATADIR=%{buildroot}%{_datadir} SYSCONFDIR=%{buildroot}%{_sysconfdir} install install.udica-templates install.selinux-user -# Ref: https://bugzilla.redhat.com/show_bug.cgi?id=2209120 -rm %{buildroot}%{_mandir}/man8/container_selinux.8 - %pre %selinux_relabel_pre @@ -126,7 +123,7 @@ fi %dir %{_datadir}/udica/templates/ %{_datadir}/udica/templates/* # Ref: https://bugzilla.redhat.com/show_bug.cgi?id=2209120 -#%%{_mandir}/man8/container_selinux.8.gz +%{_mandir}/man8/container_selinux.8.gz %{_sysconfdir}/selinux/targeted/contexts/users/container_u %ghost %verify(not mode) %{_selinux_store_path}/targeted/active/modules/200/%{modulenames} %ghost %verify(not mode) %{_selinux_store_path}/mls/active/modules/200/%{modulenames} diff --git a/sources b/sources index 3c5862b..1703887 100644 --- a/sources +++ b/sources @@ -1 +1 @@ -SHA512 (v2.234.1.tar.gz) = 6ffc70aa42134aec10eaf5f5b4b10a0481309e4285a419d65df9afabc033a34c86147fade0640e7b641b89aaaea3c525ae23700bea675ea6a1319c8fdb7a1859 +SHA512 (v2.234.2.tar.gz) = 2ec931ca1bf3f62659944389ef9679c6bc283aa001c275ef84e5be0430e79090ec20a993cccd24c4122f7adc3bcf8338489e09b1e5ad548fde1eef840022281c From c2d42deedf06526ec01b5492de41d4dec146d7c6 Mon Sep 17 00:00:00 2001 From: Lokesh Mandvekar Date: Thu, 26 Dec 2024 15:35:49 +0530 Subject: [PATCH 146/160] TMT: sync tests with upstream Signed-off-by: Lokesh Mandvekar --- plans/all.fmf | 20 ------------- plans/main.fmf | 40 ++++++++++++++++++++++++++ test/main.fmf | 12 ++++---- test/podman-tests.sh | 67 ++------------------------------------------ 4 files changed, 47 insertions(+), 92 deletions(-) delete mode 100644 plans/all.fmf create mode 100644 plans/main.fmf diff --git a/plans/all.fmf b/plans/all.fmf deleted file mode 100644 index 9e0d10b..0000000 --- a/plans/all.fmf +++ /dev/null @@ -1,20 +0,0 @@ -discover: - how: fmf -execute: - how: tmt - -/upstream: - summary: Run SELinux specific Podman tests on upstream PRs - discover+: - filter: tag:upstream - adjust+: - enabled: false - when: initiator is not defined or initiator != packit - -/downstream: - summary: Run SELinux specific Podman tests on bodhi / errata and dist-git PRs - discover+: - filter: tag:downstream - adjust+: - enabled: false - when: initiator == packit diff --git a/plans/main.fmf b/plans/main.fmf new file mode 100644 index 0000000..2e13af5 --- /dev/null +++ b/plans/main.fmf @@ -0,0 +1,40 @@ +discover: + how: fmf +execute: + how: tmt +adjust: + - when: initiator == packit + because: "We need to test with updated packages from rhcontainerbot/podman-next copr" + prepare+: + how: shell + script: | + sed -i -n '/^priority=/!p;$apriority=1' /etc/yum.repos.d/*podman-next*.repo + dnf -y upgrade --allowerasing + # FIXME: Use epel10 once bats is available there + - when: distro == centos-stream-10 or distro == rhel-10 + because: "bats isn't yet available on epel10" + prepare+: + how: install + copr: rhcontainerbot/bats-el10 + package: bats + - when: distro == centos-stream-9 or distro == rhel-9 + because: "bats is present on EPEL on rhel9 / c9s" + prepare+: + how: feature + epel: enabled + +/upstream: + summary: Run SELinux specific Podman tests on upstream PRs + discover+: + filter: tag:upstream + adjust+: + - enabled: false + when: initiator is not defined or initiator != packit + +/downstream: + summary: Run SELinux specific Podman tests on bodhi / errata and dist-git PRs + discover+: + filter: tag:downstream + adjust+: + - enabled: false + when: initiator == packit diff --git a/test/main.fmf b/test/main.fmf index 8c30075..bded6bc 100644 --- a/test/main.fmf +++ b/test/main.fmf @@ -1,8 +1,11 @@ -# Only common dependencies that are NOT required to run podman-tests.sh are -# specified here. Everything else is in podman-tests.sh. require: + - bats + - container-selinux - cpio + - golang - make + - podman + - podman-tests - policycoreutils /basic_check: @@ -10,11 +13,6 @@ require: summary: Run basic checks test: make basic_check -/podman_e2e_test: - tag: [ upstream, downstream ] - summary: Run SELinux specific Podman e2e tests - test: make podman_e2e_test - /podman_system_test: tag: [ upstream, downstream ] summary: Run SELinux specific Podman system tests diff --git a/test/podman-tests.sh b/test/podman-tests.sh index b758cc8..0033d25 100644 --- a/test/podman-tests.sh +++ b/test/podman-tests.sh @@ -9,71 +9,8 @@ if [[ "$(id -u)" -ne 0 ]];then exit 1 fi -if [[ -z "$1" ]]; then - echo -e "Usage: $(basename ${BASH_SOURCE[0]}) TEST_TYPE\nTEST_TYPE can be 'e2e' or 'system'\n" - exit 1 -fi - -TEST_TYPE=$1 - -# Remove testing-farm repos if they exist as these interfere with the packages -# we want to install, especially when podman-next copr is involved -rm -f /etc/yum.repos.d/tag-repository.repo - -# Fetch and extract latest podman source from the highest priority dnf repo -# NOTE: On upstream pull-requests, the srpm will be fetched from the -# podman-next copr while on bodhi updates, it will be fetched from Fedora's -# official repos. -PODMAN_DIR=$(mktemp -d) -pushd $PODMAN_DIR - -# Download podman and podman-tests rpms, along with podman srpm -dnf download podman podman-tests -# Download srpm, srpm opts differ between dnf and dnf5 -rpm -q dnf5 && dnf download --srpm podman || dnf download --source podman - -# Ensure podman-tests RPM and podman SRPM version-release match -# NOTE: podman RPM and podman-tests RPM matching is ensured by podman.spec so -# matching podman-tests and podman srpm is sufficient here. -PODMAN_TESTS_VERSION=$(ls podman-tests* | sed -e "s/.$(uname -m).rpm//" -e "s/podman-tests-//") -PODMAN_SRPM_VERSION=$(ls podman*.src.rpm | sed -e "s/.src.rpm//" -e "s/podman-//") -if [[ "$PODMAN_TESTS_VERSION" != "$PODMAN_SRPM_VERSION" ]]; then - echo "podman-tests and podman srpm version-release don't match" - exit 1 -fi - -# Install downloaded podman and podman-tests rpms -dnf -y install ./podman*.$(uname -m).rpm - -# Extract and untar podman source from srpm -rpm2cpio $(ls podman*.src.rpm) | cpio -di -tar zxf *.tar.gz - -popd - -# Install dependencies for running tests -# NOTE: bats will be fetched from Fedora repos on public testing-farm envs if EPEL repo is absent or disabled. -dnf -y install bats golang - # Print versions of distro and installed packages rpm -q bats container-selinux golang podman podman-tests selinux-policy -if [[ "$TEST_TYPE" == "e2e" ]]; then - # /tmp is often unsufficient - export TMPDIR=/var/tmp - - # dnf5 contains breaking changes - # Either of `dnf` OR `dnf5` will be installed, never both. - # To fetch srpm, dnf uses `--source`, dnf5 uses `--srpm`. - #rpm -q dnf5 && SRPM_OPTS="--srpm" || SRPM_OPTS="--source" - - # Run podman e2e tests - pushd $PODMAN_DIR/podman-*/test/e2e - PODMAN_BINARY=/usr/bin/podman go test -v config.go config_amd64.go common_test.go libpod_suite_test.go run_selinux_test.go - popd -fi - -if [[ "$TEST_TYPE" == "system" ]]; then - # Run podman system tests - bats /usr/share/podman/test/system/410-selinux.bats -fi +# Run podman system tests +bats /usr/share/podman/test/system/410-selinux.bats From 67ab29b766617e11fd06df08c1f94f6accba25cd Mon Sep 17 00:00:00 2001 From: Fedora Release Engineering Date: Thu, 16 Jan 2025 14:27:37 +0000 Subject: [PATCH 147/160] Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild From 58f6209191b5fe9d0353db218b8cfab135e4a555 Mon Sep 17 00:00:00 2001 From: Packit Date: Mon, 24 Feb 2025 10:42:38 +0000 Subject: [PATCH 148/160] Update to 2.235.0 upstream release Upstream tag: v2.235.0 Upstream commit: c9b3eca0 Commit authored by Packit automation (https://packit.dev/) --- .gitignore | 1 + .packit.yaml | 17 ++++++++------ README.packit | 2 +- container-selinux.spec | 4 ++-- gating.yaml | 4 +++- plans/main.fmf | 50 +++++++++++++----------------------------- sources | 2 +- test/Makefile | 16 -------------- test/main.fmf | 14 +++++------- test/podman-tests.sh | 2 +- 10 files changed, 40 insertions(+), 72 deletions(-) delete mode 100644 test/Makefile diff --git a/.gitignore b/.gitignore index 2069158..abf490c 100644 --- a/.gitignore +++ b/.gitignore @@ -232,3 +232,4 @@ /v2.233.0.tar.gz /v2.234.1.tar.gz /v2.234.2.tar.gz +/v2.235.0.tar.gz diff --git a/.packit.yaml b/.packit.yaml index c9b56ad..cc1d83b 100644 --- a/.packit.yaml +++ b/.packit.yaml @@ -13,9 +13,11 @@ files_to_sync: - src: plans/ dest: plans/ delete: true + mkpath: true - src: test/ dest: test/ delete: true + mkpath: true - src: .fmf/ dest: .fmf/ delete: true @@ -44,10 +46,8 @@ jobs: enable_net: true # container-selinux is noarch so we only need to test on one arch targets: &fedora_copr_targets - - fedora-development - - fedora-latest - - fedora-ltest-stable - - fedora-40 + - fedora-all-x86_64 + - fedora-all-aarch64 - job: copr_build trigger: pull_request @@ -55,7 +55,8 @@ jobs: notifications: *copr_build_failure_notification enable_net: true targets: - - fedora-eln + - fedora-eln-x86_64 + - fedora-eln-aarch64 - job: copr_build trigger: pull_request @@ -63,8 +64,10 @@ jobs: notifications: *copr_build_failure_notification enable_net: true targets: ¢os_copr_targets - - centos-stream-9 - - centos-stream-10 + - centos-stream-9-x86_64 + - centos-stream-9-aarch64 + - centos-stream-10-x86_64 + - centos-stream-10-aarch64 # Run on commit to main branch # Build targets managed in copr settings diff --git a/README.packit b/README.packit index c18262a..2cdc258 100644 --- a/README.packit +++ b/README.packit @@ -1,3 +1,3 @@ This repository is maintained by packit. https://packit.dev/ -The file was generated using packit 0.103.0. +The file was generated using packit 1.1.1.post1.dev1+g7c5e02df. diff --git a/container-selinux.spec b/container-selinux.spec index e34b6fd..6fd90dd 100644 --- a/container-selinux.spec +++ b/container-selinux.spec @@ -30,12 +30,12 @@ Name: container-selinux %if %{defined copr_build} Epoch: 102 %else -Epoch: 2 +Epoch: 4 %endif # Keep Version in upstream specfile at 0. It will be automatically set # to the correct value by Packit for copr and koji builds. # IGNORE this comment if you're looking at it in dist-git. -Version: 2.234.2 +Version: 2.235.0 Release: %autorelease License: GPL-2.0-only URL: https://github.com/containers/%{name} diff --git a/gating.yaml b/gating.yaml index dbb1d91..8f949e2 100644 --- a/gating.yaml +++ b/gating.yaml @@ -1,7 +1,9 @@ --- !Policy product_versions: - fedora-* -decision_context: bodhi_update_push_stable +decision_context: + - bodhi_update_push_stable + - bodhi_update_push_testing rules: - !PassingTestCaseRule {test_case_name: fedora-ci.koji-build.tier0.functional} diff --git a/plans/main.fmf b/plans/main.fmf index 2e13af5..baa8b2f 100644 --- a/plans/main.fmf +++ b/plans/main.fmf @@ -2,39 +2,19 @@ discover: how: fmf execute: how: tmt -adjust: +prepare: + - when: distro == centos-stream or distro == rhel + how: shell + script: | + dnf -y install https://dl.fedoraproject.org/pub/epel/epel-release-latest-$(rpm --eval '%{?rhel}').noarch.rpm + dnf -y config-manager --set-enabled epel + order: 10 - when: initiator == packit - because: "We need to test with updated packages from rhcontainerbot/podman-next copr" - prepare+: - how: shell - script: | - sed -i -n '/^priority=/!p;$apriority=1' /etc/yum.repos.d/*podman-next*.repo - dnf -y upgrade --allowerasing - # FIXME: Use epel10 once bats is available there - - when: distro == centos-stream-10 or distro == rhel-10 - because: "bats isn't yet available on epel10" - prepare+: - how: install - copr: rhcontainerbot/bats-el10 - package: bats - - when: distro == centos-stream-9 or distro == rhel-9 - because: "bats is present on EPEL on rhel9 / c9s" - prepare+: - how: feature - epel: enabled - -/upstream: - summary: Run SELinux specific Podman tests on upstream PRs - discover+: - filter: tag:upstream - adjust+: - - enabled: false - when: initiator is not defined or initiator != packit - -/downstream: - summary: Run SELinux specific Podman tests on bodhi / errata and dist-git PRs - discover+: - filter: tag:downstream - adjust+: - - enabled: false - when: initiator == packit + how: shell + script: | + COPR_REPO_FILE="/etc/yum.repos.d/*podman-next*.repo" + if compgen -G $COPR_REPO_FILE > /dev/null; then + sed -i -n '/^priority=/!p;$apriority=1' $COPR_REPO_FILE + fi + dnf -y upgrade --allowerasing + order: 20 diff --git a/sources b/sources index 1703887..1602c69 100644 --- a/sources +++ b/sources @@ -1 +1 @@ -SHA512 (v2.234.2.tar.gz) = 2ec931ca1bf3f62659944389ef9679c6bc283aa001c275ef84e5be0430e79090ec20a993cccd24c4122f7adc3bcf8338489e09b1e5ad548fde1eef840022281c +SHA512 (v2.235.0.tar.gz) = 5d422ffe69e994d2b30460bef39598ccac52d3607a23dd15e300374f1704c6e5883069aa74cb3b362b9545f4dd4e048b6e9893a6086cbba53e9d5f8185b2ffd2 diff --git a/test/Makefile b/test/Makefile deleted file mode 100644 index 9088bd9..0000000 --- a/test/Makefile +++ /dev/null @@ -1,16 +0,0 @@ -.PHONY: basic_check -basic_check: - semodule --list=full | grep container - semodule -B - rpm -Vqf /var/lib/selinux/*/active/modules/200/container - -.PHONY: podman_e2e_test -podman_e2e_test: - bash ./podman-tests.sh e2e - -.PHONY: podman_system_test -podman_system_test: - bash ./podman-tests.sh system - -clean: - rm -rf podman-*dev* podman.spec diff --git a/test/main.fmf b/test/main.fmf index bded6bc..4b186d5 100644 --- a/test/main.fmf +++ b/test/main.fmf @@ -1,19 +1,17 @@ require: + - attr - bats - container-selinux - - cpio - - golang - - make - - podman - podman-tests - policycoreutils /basic_check: - tag: [ upstream, downstream ] summary: Run basic checks - test: make basic_check + test: | + semodule --list=full | grep container + semodule -B + rpm -Vqf /var/lib/selinux/*/active/modules/200/container /podman_system_test: - tag: [ upstream, downstream ] summary: Run SELinux specific Podman system tests - test: make podman_system_test + test: bash ./podman-tests.sh diff --git a/test/podman-tests.sh b/test/podman-tests.sh index 0033d25..faa504b 100644 --- a/test/podman-tests.sh +++ b/test/podman-tests.sh @@ -10,7 +10,7 @@ if [[ "$(id -u)" -ne 0 ]];then fi # Print versions of distro and installed packages -rpm -q bats container-selinux golang podman podman-tests selinux-policy +rpm -q bats container-selinux podman podman-tests policycoreutils selinux-policy # Run podman system tests bats /usr/share/podman/test/system/410-selinux.bats From a15b46699ba2930583bd677a292cfc1ce7df64e5 Mon Sep 17 00:00:00 2001 From: Lokesh Mandvekar Date: Mon, 24 Feb 2025 17:01:52 +0530 Subject: [PATCH 149/160] fix gating.yaml --- gating.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/gating.yaml b/gating.yaml index 8f949e2..c692db7 100644 --- a/gating.yaml +++ b/gating.yaml @@ -1,7 +1,7 @@ --- !Policy product_versions: - fedora-* -decision_context: +decision_contexts: - bodhi_update_push_stable - bodhi_update_push_testing rules: From 5c4e72179b5f16ca28ee0d03a08322e6e9d00912 Mon Sep 17 00:00:00 2001 From: Packit Date: Thu, 13 Mar 2025 20:26:37 +0000 Subject: [PATCH 150/160] Update to 2.236.0 upstream release Upstream tag: v2.236.0 Upstream commit: 4244f856 Commit authored by Packit automation (https://packit.dev/) --- .gitignore | 1 + README.packit | 2 +- container-selinux.spec | 2 +- sources | 2 +- 4 files changed, 4 insertions(+), 3 deletions(-) diff --git a/.gitignore b/.gitignore index abf490c..1dfba9e 100644 --- a/.gitignore +++ b/.gitignore @@ -233,3 +233,4 @@ /v2.234.1.tar.gz /v2.234.2.tar.gz /v2.235.0.tar.gz +/v2.236.0.tar.gz diff --git a/README.packit b/README.packit index 2cdc258..f5cc99f 100644 --- a/README.packit +++ b/README.packit @@ -1,3 +1,3 @@ This repository is maintained by packit. https://packit.dev/ -The file was generated using packit 1.1.1.post1.dev1+g7c5e02df. +The file was generated using packit 1.2.0.post1.dev13+g55ed4527. diff --git a/container-selinux.spec b/container-selinux.spec index 6fd90dd..cf61d09 100644 --- a/container-selinux.spec +++ b/container-selinux.spec @@ -35,7 +35,7 @@ Epoch: 4 # Keep Version in upstream specfile at 0. It will be automatically set # to the correct value by Packit for copr and koji builds. # IGNORE this comment if you're looking at it in dist-git. -Version: 2.235.0 +Version: 2.236.0 Release: %autorelease License: GPL-2.0-only URL: https://github.com/containers/%{name} diff --git a/sources b/sources index 1602c69..f7b9b50 100644 --- a/sources +++ b/sources @@ -1 +1 @@ -SHA512 (v2.235.0.tar.gz) = 5d422ffe69e994d2b30460bef39598ccac52d3607a23dd15e300374f1704c6e5883069aa74cb3b362b9545f4dd4e048b6e9893a6086cbba53e9d5f8185b2ffd2 +SHA512 (v2.236.0.tar.gz) = 02f4cf1549bbe8c647fc2d2af9f239a23b47e67964d2ee66a45578b6494a9257185f210a61a3e666470489698760b6dd336db3e6a867002fdac68f64689d3841 From 1b9c808c738d24f95cfe5d479f4ffc9ce606276f Mon Sep 17 00:00:00 2001 From: Packit Date: Mon, 28 Apr 2025 19:06:43 +0000 Subject: [PATCH 151/160] Update to 2.237.0 upstream release Upstream tag: v2.237.0 Upstream commit: d7e420a1 Commit authored by Packit automation (https://packit.dev/) --- .gitignore | 1 + README.packit | 2 +- container-selinux.spec | 5 ++++- sources | 2 +- 4 files changed, 7 insertions(+), 3 deletions(-) diff --git a/.gitignore b/.gitignore index 1dfba9e..b1d1698 100644 --- a/.gitignore +++ b/.gitignore @@ -234,3 +234,4 @@ /v2.234.2.tar.gz /v2.235.0.tar.gz /v2.236.0.tar.gz +/v2.237.0.tar.gz diff --git a/README.packit b/README.packit index f5cc99f..807ffc6 100644 --- a/README.packit +++ b/README.packit @@ -1,3 +1,3 @@ This repository is maintained by packit. https://packit.dev/ -The file was generated using packit 1.2.0.post1.dev13+g55ed4527. +The file was generated using packit 1.6.0.post1.dev2+gd5a7662a. diff --git a/container-selinux.spec b/container-selinux.spec index cf61d09..afe8b30 100644 --- a/container-selinux.spec +++ b/container-selinux.spec @@ -35,7 +35,7 @@ Epoch: 4 # Keep Version in upstream specfile at 0. It will be automatically set # to the correct value by Packit for copr and koji builds. # IGNORE this comment if you're looking at it in dist-git. -Version: 2.236.0 +Version: 2.237.0 Release: %autorelease License: GPL-2.0-only URL: https://github.com/containers/%{name} @@ -111,6 +111,9 @@ fi %posttrans %selinux_relabel_post +# Empty placeholder check to silence rpmlint +%check + #define license tag if not already defined %{!?_licensedir:%global license %doc} diff --git a/sources b/sources index f7b9b50..907c8b1 100644 --- a/sources +++ b/sources @@ -1 +1 @@ -SHA512 (v2.236.0.tar.gz) = 02f4cf1549bbe8c647fc2d2af9f239a23b47e67964d2ee66a45578b6494a9257185f210a61a3e666470489698760b6dd336db3e6a867002fdac68f64689d3841 +SHA512 (v2.237.0.tar.gz) = 39226dc5474934eb509bde812a7df3647d38c69d33ff3d54d0774286d1bc325dae867280571d3681e23a334aa785acfb6a1c22ca2f3df6031f95d005145930df From 556c1de55498dc30db550ad67f0e63a7d7de4d90 Mon Sep 17 00:00:00 2001 From: Packit Date: Fri, 30 May 2025 18:02:24 +0000 Subject: [PATCH 152/160] Update to 2.238.0 upstream release Upstream tag: v2.238.0 Upstream commit: 36e8f213 Commit authored by Packit automation (https://packit.dev/) --- .gitignore | 1 + README.packit | 2 +- container-selinux.spec | 2 +- sources | 2 +- 4 files changed, 4 insertions(+), 3 deletions(-) diff --git a/.gitignore b/.gitignore index b1d1698..8101221 100644 --- a/.gitignore +++ b/.gitignore @@ -235,3 +235,4 @@ /v2.235.0.tar.gz /v2.236.0.tar.gz /v2.237.0.tar.gz +/v2.238.0.tar.gz diff --git a/README.packit b/README.packit index 807ffc6..7e268b5 100644 --- a/README.packit +++ b/README.packit @@ -1,3 +1,3 @@ This repository is maintained by packit. https://packit.dev/ -The file was generated using packit 1.6.0.post1.dev2+gd5a7662a. +The file was generated using packit 1.8.0.post1.dev15+g39511efc. diff --git a/container-selinux.spec b/container-selinux.spec index afe8b30..76589ec 100644 --- a/container-selinux.spec +++ b/container-selinux.spec @@ -35,7 +35,7 @@ Epoch: 4 # Keep Version in upstream specfile at 0. It will be automatically set # to the correct value by Packit for copr and koji builds. # IGNORE this comment if you're looking at it in dist-git. -Version: 2.237.0 +Version: 2.238.0 Release: %autorelease License: GPL-2.0-only URL: https://github.com/containers/%{name} diff --git a/sources b/sources index 907c8b1..866448b 100644 --- a/sources +++ b/sources @@ -1 +1 @@ -SHA512 (v2.237.0.tar.gz) = 39226dc5474934eb509bde812a7df3647d38c69d33ff3d54d0774286d1bc325dae867280571d3681e23a334aa785acfb6a1c22ca2f3df6031f95d005145930df +SHA512 (v2.238.0.tar.gz) = f251bab5a5992feb6ce3d295d39a75627bd3c5deddbdb7ad64018c4f3b652637ff27760f40082b1cd31802f500f8927ae96256a4a11aa085b4b84703906f856f From b938868d0dcd742da3f42d4e48a8798e8cff8ac2 Mon Sep 17 00:00:00 2001 From: Packit Date: Mon, 7 Jul 2025 16:09:13 +0000 Subject: [PATCH 153/160] Update to 2.239.0 upstream release Upstream tag: v2.239.0 Upstream commit: 229e8d8b Commit authored by Packit automation (https://packit.dev/) --- .gitignore | 1 + README.packit | 2 +- container-selinux.spec | 2 +- sources | 2 +- 4 files changed, 4 insertions(+), 3 deletions(-) diff --git a/.gitignore b/.gitignore index 8101221..f3b7604 100644 --- a/.gitignore +++ b/.gitignore @@ -236,3 +236,4 @@ /v2.236.0.tar.gz /v2.237.0.tar.gz /v2.238.0.tar.gz +/v2.239.0.tar.gz diff --git a/README.packit b/README.packit index 7e268b5..dde2a46 100644 --- a/README.packit +++ b/README.packit @@ -1,3 +1,3 @@ This repository is maintained by packit. https://packit.dev/ -The file was generated using packit 1.8.0.post1.dev15+g39511efc. +The file was generated using packit 1.9.0.post1.dev4+g48b4c222. diff --git a/container-selinux.spec b/container-selinux.spec index 76589ec..c070080 100644 --- a/container-selinux.spec +++ b/container-selinux.spec @@ -35,7 +35,7 @@ Epoch: 4 # Keep Version in upstream specfile at 0. It will be automatically set # to the correct value by Packit for copr and koji builds. # IGNORE this comment if you're looking at it in dist-git. -Version: 2.238.0 +Version: 2.239.0 Release: %autorelease License: GPL-2.0-only URL: https://github.com/containers/%{name} diff --git a/sources b/sources index 866448b..3280111 100644 --- a/sources +++ b/sources @@ -1 +1 @@ -SHA512 (v2.238.0.tar.gz) = f251bab5a5992feb6ce3d295d39a75627bd3c5deddbdb7ad64018c4f3b652637ff27760f40082b1cd31802f500f8927ae96256a4a11aa085b4b84703906f856f +SHA512 (v2.239.0.tar.gz) = a3bafe979394358c9e0d51816fd92765ff88f2fab4a5aa22e1ce533e8ee4d1ce2b59435891ba39acb795f44509104fc558588ded180bfb3b27c4662a0b5a6643 From ae2bda3b191919740e1e08402c9e7197f95126ed Mon Sep 17 00:00:00 2001 From: Fedora Release Engineering Date: Wed, 23 Jul 2025 18:38:20 +0000 Subject: [PATCH 154/160] Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild From 33a94c0fec233beb298dfcdb28d6f60f52fd6c0f Mon Sep 17 00:00:00 2001 From: Packit Date: Thu, 7 Aug 2025 12:54:13 +0000 Subject: [PATCH 155/160] Update to 2.240.0 upstream release Upstream tag: v2.240.0 Upstream commit: 10cc7eca Commit authored by Packit automation (https://packit.dev/) --- .gitignore | 1 + README.packit | 2 +- container-selinux.spec | 2 +- sources | 2 +- 4 files changed, 4 insertions(+), 3 deletions(-) diff --git a/.gitignore b/.gitignore index f3b7604..67fd154 100644 --- a/.gitignore +++ b/.gitignore @@ -237,3 +237,4 @@ /v2.237.0.tar.gz /v2.238.0.tar.gz /v2.239.0.tar.gz +/v2.240.0.tar.gz diff --git a/README.packit b/README.packit index dde2a46..3ad54d6 100644 --- a/README.packit +++ b/README.packit @@ -1,3 +1,3 @@ This repository is maintained by packit. https://packit.dev/ -The file was generated using packit 1.9.0.post1.dev4+g48b4c222. +The file was generated using packit 1.11.0. diff --git a/container-selinux.spec b/container-selinux.spec index c070080..f874f51 100644 --- a/container-selinux.spec +++ b/container-selinux.spec @@ -35,7 +35,7 @@ Epoch: 4 # Keep Version in upstream specfile at 0. It will be automatically set # to the correct value by Packit for copr and koji builds. # IGNORE this comment if you're looking at it in dist-git. -Version: 2.239.0 +Version: 2.240.0 Release: %autorelease License: GPL-2.0-only URL: https://github.com/containers/%{name} diff --git a/sources b/sources index 3280111..64f44ff 100644 --- a/sources +++ b/sources @@ -1 +1 @@ -SHA512 (v2.239.0.tar.gz) = a3bafe979394358c9e0d51816fd92765ff88f2fab4a5aa22e1ce533e8ee4d1ce2b59435891ba39acb795f44509104fc558588ded180bfb3b27c4662a0b5a6643 +SHA512 (v2.240.0.tar.gz) = d5077aa547c2d85613eb168348fe01d92c198b72f3d3523c90d587f12ff8d221c9ee63da1ed1d7201f592853e1aa77406d10b751a0cd7ba9203ea0a22fea3f9b From f5e56373a3e582ff84fac2bc4e4874a23230f7be Mon Sep 17 00:00:00 2001 From: Packit Date: Tue, 19 Aug 2025 16:05:32 +0000 Subject: [PATCH 156/160] Update to 2.241.0 upstream release Upstream tag: v2.241.0 Upstream commit: 5997aa52 Commit authored by Packit automation (https://packit.dev/) --- .gitignore | 1 + README.packit | 2 +- container-selinux.spec | 2 +- sources | 2 +- 4 files changed, 4 insertions(+), 3 deletions(-) diff --git a/.gitignore b/.gitignore index 67fd154..a27fbf9 100644 --- a/.gitignore +++ b/.gitignore @@ -238,3 +238,4 @@ /v2.238.0.tar.gz /v2.239.0.tar.gz /v2.240.0.tar.gz +/v2.241.0.tar.gz diff --git a/README.packit b/README.packit index 3ad54d6..2be479e 100644 --- a/README.packit +++ b/README.packit @@ -1,3 +1,3 @@ This repository is maintained by packit. https://packit.dev/ -The file was generated using packit 1.11.0. +The file was generated using packit 1.11.0.post1.dev3+g351a3979f. diff --git a/container-selinux.spec b/container-selinux.spec index f874f51..cd7fd8e 100644 --- a/container-selinux.spec +++ b/container-selinux.spec @@ -35,7 +35,7 @@ Epoch: 4 # Keep Version in upstream specfile at 0. It will be automatically set # to the correct value by Packit for copr and koji builds. # IGNORE this comment if you're looking at it in dist-git. -Version: 2.240.0 +Version: 2.241.0 Release: %autorelease License: GPL-2.0-only URL: https://github.com/containers/%{name} diff --git a/sources b/sources index 64f44ff..3211fe3 100644 --- a/sources +++ b/sources @@ -1 +1 @@ -SHA512 (v2.240.0.tar.gz) = d5077aa547c2d85613eb168348fe01d92c198b72f3d3523c90d587f12ff8d221c9ee63da1ed1d7201f592853e1aa77406d10b751a0cd7ba9203ea0a22fea3f9b +SHA512 (v2.241.0.tar.gz) = acab4eb986e494c09a7f01d0263c2908bae8b93039fd0584c0cfa32c44b59e72db2d3f09d1c9213e9640b5f7af2361a460658cd49deafca0a37535f5e8b6fd80 From ac7e099b8e4e99fd11302236418597f6041888ff Mon Sep 17 00:00:00 2001 From: Packit Date: Fri, 5 Sep 2025 14:44:40 +0000 Subject: [PATCH 157/160] Update to 2.242.0 upstream release Upstream tag: v2.242.0 Upstream commit: edfbda46 Commit authored by Packit automation (https://packit.dev/) --- .gitignore | 1 + .packit.yaml | 14 +++++++++++++- README.packit | 2 +- container-selinux.spec | 12 ++++++------ sources | 2 +- 5 files changed, 22 insertions(+), 9 deletions(-) diff --git a/.gitignore b/.gitignore index a27fbf9..9f6dc41 100644 --- a/.gitignore +++ b/.gitignore @@ -239,3 +239,4 @@ /v2.239.0.tar.gz /v2.240.0.tar.gz /v2.241.0.tar.gz +/v2.242.0.tar.gz diff --git a/.packit.yaml b/.packit.yaml index cc1d83b..d25d664 100644 --- a/.packit.yaml +++ b/.packit.yaml @@ -54,7 +54,7 @@ jobs: packages: [container-selinux-eln] notifications: *copr_build_failure_notification enable_net: true - targets: + targets: &eln_copr_targets - fedora-eln-x86_64 - fedora-eln-aarch64 @@ -97,6 +97,18 @@ jobs: - type: repository-file id: https://copr.fedorainfracloud.org/coprs/rhcontainerbot/podman-next/repo/fedora-$releasever/rhcontainerbot-podman-next-fedora-$releasever.repo + # Tests for Fedora + - job: tests + trigger: pull_request + packages: [container-selinux-eln] + notifications: *test_failure_notification + targets: *eln_copr_targets + tf_extra_params: + environments: + - artifacts: + - type: repository-file + id: https://copr.fedorainfracloud.org/coprs/rhcontainerbot/podman-next/repo/fedora-eln/rhcontainerbot-podman-next-fedora-eln.repo + # Tests for CentOS Stream - job: tests trigger: pull_request diff --git a/README.packit b/README.packit index 2be479e..fb341a1 100644 --- a/README.packit +++ b/README.packit @@ -1,3 +1,3 @@ This repository is maintained by packit. https://packit.dev/ -The file was generated using packit 1.11.0.post1.dev3+g351a3979f. +The file was generated using packit 1.11.0.post1.dev7+gfdcdf3a32. diff --git a/container-selinux.spec b/container-selinux.spec index cd7fd8e..273ec70 100644 --- a/container-selinux.spec +++ b/container-selinux.spec @@ -20,14 +20,14 @@ %define no_user_namespace 1 %endif -# copr_build is more intuitive than copr_username -%if %{defined copr_username} -%define copr_build 1 +# set copr_build is more intuitive than copr_username +%if %{defined copr_username} && "%{copr_username}" == "rhcontainerbot" && "%{copr_projectname}" == "podman-next" +%define next_build 1 %endif Name: container-selinux -# Set different Epochs for copr and koji -%if %{defined copr_build} +# Set different Epoch for rhcontainerbot/podman-next copr build +%if %{defined next_build} Epoch: 102 %else Epoch: 4 @@ -35,7 +35,7 @@ Epoch: 4 # Keep Version in upstream specfile at 0. It will be automatically set # to the correct value by Packit for copr and koji builds. # IGNORE this comment if you're looking at it in dist-git. -Version: 2.241.0 +Version: 2.242.0 Release: %autorelease License: GPL-2.0-only URL: https://github.com/containers/%{name} diff --git a/sources b/sources index 3211fe3..ab44a19 100644 --- a/sources +++ b/sources @@ -1 +1 @@ -SHA512 (v2.241.0.tar.gz) = acab4eb986e494c09a7f01d0263c2908bae8b93039fd0584c0cfa32c44b59e72db2d3f09d1c9213e9640b5f7af2361a460658cd49deafca0a37535f5e8b6fd80 +SHA512 (v2.242.0.tar.gz) = 48ed0644081cd1f52d2e842c46af9c7dd64685aab121a9a275da2ea75eb8b48b7b24ffc45658b6bc78b41a9bad116c3352e1bd540cfba298276519cd6ddea47c From 99f38c064f082eeda912d7da59b822f80d4bbbc6 Mon Sep 17 00:00:00 2001 From: Packit Date: Fri, 7 Nov 2025 19:05:10 +0000 Subject: [PATCH 158/160] Update to 2.243.0 upstream release Upstream tag: v2.243.0 Upstream commit: efdee4df Commit authored by Packit automation (https://packit.dev/) --- .gitignore | 1 + README.packit | 2 +- container-selinux.spec | 2 +- plans/main.fmf | 26 +++++++++++++------ plans/tmt.fmf | 9 +++++++ sources | 2 +- test/main.fmf | 23 +++++++++++++--- ...odman-tests.sh => podman-rootful-tests.sh} | 0 test/podman-rootless-tests.sh | 15 +++++++++++ 9 files changed, 66 insertions(+), 14 deletions(-) create mode 100644 plans/tmt.fmf rename test/{podman-tests.sh => podman-rootful-tests.sh} (100%) create mode 100644 test/podman-rootless-tests.sh diff --git a/.gitignore b/.gitignore index 9f6dc41..9ae95ce 100644 --- a/.gitignore +++ b/.gitignore @@ -240,3 +240,4 @@ /v2.240.0.tar.gz /v2.241.0.tar.gz /v2.242.0.tar.gz +/v2.243.0.tar.gz diff --git a/README.packit b/README.packit index fb341a1..2511bf4 100644 --- a/README.packit +++ b/README.packit @@ -1,3 +1,3 @@ This repository is maintained by packit. https://packit.dev/ -The file was generated using packit 1.11.0.post1.dev7+gfdcdf3a32. +The file was generated using packit 1.12.0. diff --git a/container-selinux.spec b/container-selinux.spec index 273ec70..fa68c27 100644 --- a/container-selinux.spec +++ b/container-selinux.spec @@ -35,7 +35,7 @@ Epoch: 4 # Keep Version in upstream specfile at 0. It will be automatically set # to the correct value by Packit for copr and koji builds. # IGNORE this comment if you're looking at it in dist-git. -Version: 2.242.0 +Version: 2.243.0 Release: %autorelease License: GPL-2.0-only URL: https://github.com/containers/%{name} diff --git a/plans/main.fmf b/plans/main.fmf index baa8b2f..c758669 100644 --- a/plans/main.fmf +++ b/plans/main.fmf @@ -3,12 +3,12 @@ discover: execute: how: tmt prepare: - - when: distro == centos-stream or distro == rhel - how: shell - script: | - dnf -y install https://dl.fedoraproject.org/pub/epel/epel-release-latest-$(rpm --eval '%{?rhel}').noarch.rpm - dnf -y config-manager --set-enabled epel - order: 10 + - how: feature + epel: enabled + # TODO: Revisit this once https://github.com/teemtee/tmt/issues/3990 is in place. + # FIXME: For whatever reason, CentOS Stream envs end up upgrading container-selinux + # from podman-next instead of using the one installed by Packit. This apparently should + # be easier to handle once tmt#3990 is done. Things work as expected on Fedora already. - when: initiator == packit how: shell script: | @@ -16,5 +16,15 @@ prepare: if compgen -G $COPR_REPO_FILE > /dev/null; then sed -i -n '/^priority=/!p;$apriority=1' $COPR_REPO_FILE fi - dnf -y upgrade --allowerasing - order: 20 + +/basic_check: + discover+: + test: /test/basic_check + +/podman_rootful_system: + discover+: + test: /test/podman_rootful_system + +/podman_rootless_system: + discover+: + test: /test/podman_rootless_system diff --git a/plans/tmt.fmf b/plans/tmt.fmf new file mode 100644 index 0000000..1941978 --- /dev/null +++ b/plans/tmt.fmf @@ -0,0 +1,9 @@ +/: + inherit: false + +summary: Run tmt's integration tests +plan: + import: + url: https://github.com/teemtee/tmt + path: /plans/friends + name: /podman diff --git a/sources b/sources index ab44a19..06d448c 100644 --- a/sources +++ b/sources @@ -1 +1 @@ -SHA512 (v2.242.0.tar.gz) = 48ed0644081cd1f52d2e842c46af9c7dd64685aab121a9a275da2ea75eb8b48b7b24ffc45658b6bc78b41a9bad116c3352e1bd540cfba298276519cd6ddea47c +SHA512 (v2.243.0.tar.gz) = 8ed193e467d247a277f1d21b6f1f2044273e15301e27ed33e0240af27f8d6ade4585a6fa9953a05bf11298d3a4ef2ea4fdc7f6e43abddd7e03c9c38835ad4429 diff --git a/test/main.fmf b/test/main.fmf index 4b186d5..13b8104 100644 --- a/test/main.fmf +++ b/test/main.fmf @@ -1,9 +1,10 @@ require: - attr - - bats - container-selinux - podman-tests - policycoreutils +recommend: + - bats /basic_check: summary: Run basic checks @@ -12,6 +13,22 @@ require: semodule -B rpm -Vqf /var/lib/selinux/*/active/modules/200/container -/podman_system_test: +/podman_rootful_system: summary: Run SELinux specific Podman system tests - test: bash ./podman-tests.sh + test: bash ./podman-rootful-tests.sh + +/podman_rootless_system: + summary: Run rootless Podman system tests + test: bash ./podman-rootless-tests.sh + require+: + - passt + - passt-selinux + environment: + ROOTLESS_USER: "fedora" + adjust: + - when: distro == centos-stream + environment+: + ROOTLESS_USER: "ec2-user" + - when: distro == fedora-eln or distro == rhel + environment+: + ROOTLESS_USER: "cloud-user" diff --git a/test/podman-tests.sh b/test/podman-rootful-tests.sh similarity index 100% rename from test/podman-tests.sh rename to test/podman-rootful-tests.sh diff --git a/test/podman-rootless-tests.sh b/test/podman-rootless-tests.sh new file mode 100644 index 0000000..e5583e0 --- /dev/null +++ b/test/podman-rootless-tests.sh @@ -0,0 +1,15 @@ +#!/usr/bin/env bash + +set -exo pipefail + +cat /etc/redhat-release + +# Print versions of distro and installed packages +rpm -q bats container-selinux passt passt-selinux podman podman-tests policycoreutils selinux-policy + +loginctl enable-linger "$ROOTLESS_USER" + +# Run podman system tests +su - "$ROOTLESS_USER" -c "bats /usr/share/podman/test/system/410-selinux.bats" +su - "$ROOTLESS_USER" -c "bats /usr/share/podman/test/system/500-networking.bats" +su - "$ROOTLESS_USER" -c "bats /usr/share/podman/test/system/505-networking-pasta.bats" From 3f88bda292ee2de6b5bc847b37f68206c4c009ec Mon Sep 17 00:00:00 2001 From: Packit Date: Mon, 1 Dec 2025 15:51:17 +0000 Subject: [PATCH 159/160] Update to 2.244.0 upstream release Upstream tag: v2.244.0 Upstream commit: 9017e1f8 Commit authored by Packit automation (https://packit.dev/) --- .gitignore | 1 + README.packit | 2 +- container-selinux.spec | 2 +- sources | 2 +- test/main.fmf | 2 +- 5 files changed, 5 insertions(+), 4 deletions(-) diff --git a/.gitignore b/.gitignore index 9ae95ce..0891100 100644 --- a/.gitignore +++ b/.gitignore @@ -241,3 +241,4 @@ /v2.241.0.tar.gz /v2.242.0.tar.gz /v2.243.0.tar.gz +/v2.244.0.tar.gz diff --git a/README.packit b/README.packit index 2511bf4..b4b46e3 100644 --- a/README.packit +++ b/README.packit @@ -1,3 +1,3 @@ This repository is maintained by packit. https://packit.dev/ -The file was generated using packit 1.12.0. +The file was generated using packit 1.12.0.post1.dev20+g7d30dac21. diff --git a/container-selinux.spec b/container-selinux.spec index fa68c27..07c8f41 100644 --- a/container-selinux.spec +++ b/container-selinux.spec @@ -35,7 +35,7 @@ Epoch: 4 # Keep Version in upstream specfile at 0. It will be automatically set # to the correct value by Packit for copr and koji builds. # IGNORE this comment if you're looking at it in dist-git. -Version: 2.243.0 +Version: 2.244.0 Release: %autorelease License: GPL-2.0-only URL: https://github.com/containers/%{name} diff --git a/sources b/sources index 06d448c..68be440 100644 --- a/sources +++ b/sources @@ -1 +1 @@ -SHA512 (v2.243.0.tar.gz) = 8ed193e467d247a277f1d21b6f1f2044273e15301e27ed33e0240af27f8d6ade4585a6fa9953a05bf11298d3a4ef2ea4fdc7f6e43abddd7e03c9c38835ad4429 +SHA512 (v2.244.0.tar.gz) = 21bb73a226d96a152de53475ad23d1daa119a20d83c835c7c5c2da011a2fd066955db1b4d4e11527883f7ef5dc027937bd9f1f65bc4388b44aed10337936f877 diff --git a/test/main.fmf b/test/main.fmf index 13b8104..741aef1 100644 --- a/test/main.fmf +++ b/test/main.fmf @@ -29,6 +29,6 @@ recommend: - when: distro == centos-stream environment+: ROOTLESS_USER: "ec2-user" - - when: distro == fedora-eln or distro == rhel + - when: distro == rhel environment+: ROOTLESS_USER: "cloud-user" From 615e4619a44c9275352a61d5fc766b77d439b869 Mon Sep 17 00:00:00 2001 From: Packit Date: Mon, 15 Dec 2025 15:49:15 +0000 Subject: [PATCH 160/160] Update to 2.245.0 upstream release Upstream tag: v2.245.0 Upstream commit: 3f7c37e9 Commit authored by Packit automation (https://packit.dev/) --- .gitignore | 1 + README.packit | 2 +- container-selinux.spec | 2 +- sources | 2 +- 4 files changed, 4 insertions(+), 3 deletions(-) diff --git a/.gitignore b/.gitignore index 0891100..523a91e 100644 --- a/.gitignore +++ b/.gitignore @@ -242,3 +242,4 @@ /v2.242.0.tar.gz /v2.243.0.tar.gz /v2.244.0.tar.gz +/v2.245.0.tar.gz diff --git a/README.packit b/README.packit index b4b46e3..db537f9 100644 --- a/README.packit +++ b/README.packit @@ -1,3 +1,3 @@ This repository is maintained by packit. https://packit.dev/ -The file was generated using packit 1.12.0.post1.dev20+g7d30dac21. +The file was generated using packit 1.13.0. diff --git a/container-selinux.spec b/container-selinux.spec index 07c8f41..6348202 100644 --- a/container-selinux.spec +++ b/container-selinux.spec @@ -35,7 +35,7 @@ Epoch: 4 # Keep Version in upstream specfile at 0. It will be automatically set # to the correct value by Packit for copr and koji builds. # IGNORE this comment if you're looking at it in dist-git. -Version: 2.244.0 +Version: 2.245.0 Release: %autorelease License: GPL-2.0-only URL: https://github.com/containers/%{name} diff --git a/sources b/sources index 68be440..ce107a4 100644 --- a/sources +++ b/sources @@ -1 +1 @@ -SHA512 (v2.244.0.tar.gz) = 21bb73a226d96a152de53475ad23d1daa119a20d83c835c7c5c2da011a2fd066955db1b4d4e11527883f7ef5dc027937bd9f1f65bc4388b44aed10337936f877 +SHA512 (v2.245.0.tar.gz) = 0bc85980780631ceccb38f2fde64ff7f3792be18d4501806532f097deedde70f446e2389c543dd78e9087b45cd1a6916c0e096e6ea42dd77ac377ad4111b7db2