311 lines
7.4 KiB
RPMSpec
311 lines
7.4 KiB
RPMSpec
%global _bindir /usr/bin
|
|
%global debug_package %{nil}
|
|
|
|
Name: runc
|
|
Version: 1.1.8
|
|
Release: 17
|
|
Summary: runc is a CLI tool for spawning and running containers according to the OCI specification.
|
|
|
|
License: ASL 2.0
|
|
Source0: https://github.com/opencontainers/runc/archive/refs/tags/v1.1.8.tar.gz
|
|
Source1: apply-patch
|
|
Source2: series.conf
|
|
Source3: git-commit
|
|
Source4: gen-commit.sh
|
|
Source5: patch.tar.gz
|
|
|
|
URL: https://www.opencontainers.org/
|
|
Vendor: OCI
|
|
Packager: OCI
|
|
|
|
BuildRequires: golang >= 1.8.3 glibc-static make libseccomp-devel libseccomp-static libselinux-devel
|
|
|
|
%description
|
|
runc is a CLI tool for spawning and running containers according to the OCI specification.
|
|
|
|
%prep
|
|
cp %{SOURCE0} .
|
|
cp %{SOURCE1} .
|
|
cp %{SOURCE2} .
|
|
cp %{SOURCE3} .
|
|
cp %{SOURCE4} .
|
|
cp %{SOURCE5} .
|
|
|
|
%install
|
|
sh ./apply-patch
|
|
|
|
mkdir -p .gopath/src/github.com/opencontainers
|
|
export GO111MODULE=off
|
|
export GOPATH=`pwd`/.gopath
|
|
ln -sf `pwd` .gopath/src/github.com/opencontainers/runc
|
|
cd .gopath/src/github.com/opencontainers/runc
|
|
%ifarch loongarch64
|
|
sed '1s/mips64le/mips64le || loong64/g' -i libcontainer/system/syscall_linux_64.go
|
|
%endif
|
|
|
|
make BUILDTAGS="seccomp selinux" static
|
|
rm -rf .gopath
|
|
strip runc
|
|
|
|
install -d $RPM_BUILD_ROOT/%{_bindir}
|
|
install -p -m 755 runc $RPM_BUILD_ROOT/%{_bindir}/runc
|
|
|
|
%clean
|
|
%{__rm} -rf %{_bindir}/runc
|
|
|
|
%files
|
|
%{_bindir}/runc
|
|
|
|
%changelog
|
|
* Fri Jun 14 2024 zhaixiaojuan<zhaixiaojuan@loongson.cn> - 1.1.8-17
|
|
- Type:bugfix
|
|
- CVE:NA
|
|
- SUG:NA
|
|
- DESC:add loongarch64 seccomp support
|
|
|
|
* Thu May 23 2024 zhongjiawei<zhongjiawei1@huawei.com> - 1.1.8-16
|
|
- Type:bugfix
|
|
- CVE:NA
|
|
- SUG:NA
|
|
- DESC:fix apply failed for patch of fix CVE-2024-3154
|
|
|
|
* Thu May 09 2024 zhaosai<zhaosaisai@kylinos.cn> - 1.1.8-15
|
|
- Type:cves
|
|
- CVE:CVE-2024-3154
|
|
- SUG:NA
|
|
- DESC:fix CVE-2024-3154
|
|
|
|
* Wed Apr 17 2024 Huang Yang <huangyang@loongson.cn> - 1.1.8-14
|
|
- Type:bugfix
|
|
- CVE:NA
|
|
- SUG:NA
|
|
- DESC:fix build error on loongarch64
|
|
|
|
* Thu Feb 22 2024 zhongjiawei<zhongjiawei1@huawei.com> - 1.1.8-13
|
|
- Type:bugfix
|
|
- CVE:NA
|
|
- SUG:NA
|
|
- DESC:sync some patches
|
|
|
|
* Thu Dec 21 2023 zhongjiawei<zhongjiawei1@huawei.com> - 1.1.8-12
|
|
- Type:bugfix
|
|
- CVE:NA
|
|
- SUG:NA
|
|
- DESC:sync some patches
|
|
|
|
* Fri Dec 8 2023 zhongjiawei<zhongjiawei1@huawei.com> - 1.1.8-11
|
|
- Type:bugfix
|
|
- CVE:NA
|
|
- SUG:NA
|
|
- DESC:libct: Destroy: don't proceed in case of errors
|
|
|
|
* Mon Dec 4 2023 zhongjiawei<zhongjiawei1@huawei.com> - 1.1.8-10
|
|
- Type:bugfix
|
|
- CVE:NA
|
|
- SUG:NA
|
|
- DESC:runc delete do not ignore error from destroy
|
|
|
|
* Thu Nov 16 2023 zhongjiawei<zhongjiawei1@huawei.com> - 1.1.8-9
|
|
- Type:bugfix
|
|
- CVE:NA
|
|
- SUG:NA
|
|
- DESC:modify runc rpm package name from docker-runc to runc
|
|
|
|
* Thu Oct 26 2023 zhongjiawei<zhongjiawei1@huawei.com> - 1.1.8-8
|
|
- Type:bugfix
|
|
- CVE:NA
|
|
- SUG:NA
|
|
- DESC:fix the bug when runc syscall.Exec cmd not exist cause panic
|
|
|
|
* Tue Oct 24 2023 zhongjiawei<zhongjiawei1@huawei.com> - 1.1.8-7
|
|
- Type:bugfix
|
|
- ID:NA
|
|
- SUG:NA
|
|
- DESC:fix update rt-runtime-us and rt-period-us failed
|
|
|
|
* Thu Oct 12 2023 zhongjiawei<zhongjiawei1@huawei.com> - 1.1.8-6
|
|
- Type:bugfix
|
|
- ID:NA
|
|
- SUG:NA
|
|
- DESC:handle kmem.limit_in_bytes removal
|
|
|
|
* Mon Sep 18 2023 zhongjiawei<zhongjiawei1@huawei.com> - 1.1.8-5
|
|
- Type:bugfix
|
|
- ID:NA
|
|
- SUG:NA
|
|
- DESC:fix init error return logic
|
|
|
|
* Tue Sep 12 2023 zhongjiawei<zhongjiawei1@huawei.com> - 1.1.8-4
|
|
- Type:bugfix
|
|
- ID:NA
|
|
- SUG:NA
|
|
- DESC:remove bindfd logic entirely
|
|
|
|
* Wed Sep 6 2023 zhongjiawei<zhongjiawei1@huawei.com> - 1.1.8-3
|
|
- Type:bugfix
|
|
- ID:NA
|
|
- SUG:NA
|
|
- DESC:modify and complement patch information
|
|
|
|
* Wed July 26 2023 zhongjiawei<zhongjiawei1@huawei.com> - 1.1.8-2
|
|
- Type:bugfix
|
|
- ID:NA
|
|
- SUG:NA
|
|
- DESC:modify patch for 1.1.8
|
|
|
|
* Fri July 21 2023 vegbir<yangjiaqi16@huawei.com> - 1.1.8-1
|
|
- Type:bugfix
|
|
- ID:NA
|
|
- SUG:NA
|
|
- DESC:upgrade to runc 1.1.8
|
|
|
|
* Wed Jun 21 2023 zhongjiawei<zhongjiawei1@huawei.com> - 1.1.3-16
|
|
- Type:bugfix
|
|
- CVE:NA
|
|
- SUG:NA
|
|
- DESC:sync some patches
|
|
|
|
* Fri Jun 09 2023 zhongjiawei<zhongjiawei1@huawei.com> - 1.1.3-15
|
|
- Type:bugfix
|
|
- CVE:NA
|
|
- SUG:NA
|
|
- DESC:modify runc make command to satisfy the compile options
|
|
|
|
* Mon Apr 3 2023 zhongjiawei<zhongjiawei1@huawei.com> - 1.1.3-14
|
|
- Type:bugfix
|
|
- CVE:NA
|
|
- SUG:NA
|
|
- DESC:fix rootless /sys/fs/cgroup mounts bug and Prohibit /proc and /sys to be symlinks
|
|
|
|
* Tue Mar 21 2023 zhongjiawei<zhongjiawei1@huawei.com> - 1.1.3-13
|
|
- Type:bugfix
|
|
- CVE:NA
|
|
- SUG:NA
|
|
- DESC:libcontainer: skip chown of /dev/null caused by fd redirection
|
|
|
|
* Thu Mar 16 2023 zhaozhen <zhaozhen@loongson.cn> - 1.1.3-12
|
|
- Type:feature
|
|
- CVE:NA
|
|
- SUG:NA
|
|
- DESC:Add loongarch64 support
|
|
|
|
* Thu Feb 9 2023 zhongjiawei<zhongjiawei1@huawei.com> - 1.1.3-11
|
|
- Type:bugfix
|
|
- CVE:NA
|
|
- SUG:NA
|
|
- DESC:make runc spec compatible 1.0.0.rc3
|
|
|
|
* Tue Jan 17 2023 zhongjiawei<zhongjiawei1@huawei.com> - 1.1.3-10
|
|
- Type:bugfix
|
|
- CVE:NA
|
|
- SUG:NA
|
|
- DESC:modify linuxcontainer starttime uint64 type tobe string
|
|
|
|
* Tue Jan 10 2023 zhongjiawei<zhongjiawei1@huawei.com> - 1.1.3-9
|
|
- Type:bugfix
|
|
- CVE:NA
|
|
- SUG:NA
|
|
- DESC:support specify umask
|
|
|
|
* Thu Jan 5 2023 zhongjiawei<zhongjiawei1@huawei.com> - 1.1.3-8
|
|
- Type:bugfix
|
|
- CVE:NA
|
|
- SUG:NA
|
|
- DESC:modify apply-patch path
|
|
|
|
* Sat Dec 17 2022 zhongjiawei<zhongjiawei1@huawei.com> - 1.1.3-7
|
|
- Type:bugfix
|
|
- CVE:NA
|
|
- SUG:NA
|
|
- DESC:support specify umask
|
|
|
|
* Mon Nov 7 2022 zhongjiawei<zhongjiawei1@huawei.com> - 1.1.3-6
|
|
- Type:bugfix
|
|
- CVE:NA
|
|
- SUG:NA
|
|
- DESC:runc log forward to syslog
|
|
|
|
* Fri Nov 4 2022 zhongjiawei<zhongjiawei1@huawei.com> - 1.1.3-5
|
|
- Type:bugfix
|
|
- CVE:NA
|
|
- SUG:NA
|
|
- DESC:move install path to /usr/bin
|
|
|
|
* Tue Oct 18 2022 zhongjiawei<zhongjiawei1@huawei.com> - 1.1.3-4
|
|
- Type:bugfix
|
|
- CVE:NA
|
|
- SUG:NA
|
|
- DESC:move install path to /usr/bin
|
|
|
|
* Tue Aug 16 2022 zhongjiawei<zhongjiawei1@huawei.com> - 1.1.3-3
|
|
- Type:bugfix
|
|
- CVE:NA
|
|
- SUG:NA
|
|
- DESC:fix systemd cgroup after memory type changed
|
|
|
|
* Tue Aug 9 2022 zhongjiawei<zhongjiawei1@huawei.com> - 1.1.3-2
|
|
- Type:bugfix
|
|
- CVE:NA
|
|
- SUG:NA
|
|
- DESC:change Umask to 0022
|
|
|
|
* Tue Aug 9 2022 wangjunqi <wangjunqi@kylinos.cn> - 1.1.3-1
|
|
- update to 1.1.3
|
|
|
|
* Tue Aug 9 2022 zhongjiawei<zhongjiawei1@huawei.com> - 1.0.0.rc3-303
|
|
- Type:bugfix
|
|
- CVE:NA
|
|
- SUG:NA
|
|
- DESC:bump version to 303
|
|
|
|
* Fri Jul 8 2022 cenhuilin <cenhuilin@kylinos.cn> - 1.0.0.rc3-118
|
|
- Type:bugfix
|
|
- ID:NA
|
|
- SUG:NA
|
|
- DESC:fix connect container failed when reading partially written state.json content
|
|
|
|
* Mon Apr 11 2022 fushanqing <fushanqing@kylinos.cn> - 1.0.0.rc3-117
|
|
- add macro
|
|
|
|
* Thu Feb 10 2022 fushanqing <fushanqing@kylinos.cn> - 1.0.0.rc3-116
|
|
- remove "%global _bindir /usr/local/bin"
|
|
|
|
* Wed Jan 26 2022 songyanting <songyanting@huawei.com> - 1.0.0.rc3-115
|
|
- Type:bugfix
|
|
- CVE:NA
|
|
- SUG:NA
|
|
- DESC:sync bugfix, include
|
|
1. add check in spec
|
|
2. add mount destination validation(fix CVE-2021-30465)
|
|
3. fix backport patch apply ignored
|
|
4. optimize nsexec logging
|
|
5. improve log for debugging
|
|
6. fix cgroup info print error
|
|
7. support unit test
|
|
|
|
* Tue Oct 26 2021 chenchen <chen_aka_jan@163.com> - 1.0.0.rc3-114
|
|
- change the spec file name to be the same as the repo name
|
|
|
|
* Thu Mar 18 2021 xiadanni<xiadanni1@huawei.com> - 1.0.0.rc3-113
|
|
- Type:bugfix
|
|
- CVE:NA
|
|
- SUG:NA
|
|
- DESC:do not use -i in go build
|
|
|
|
* Thu Mar 18 2021 xiadanni<xiadanni1@huawei.com> - 1.0.0.rc3-112
|
|
- Type:bugfix
|
|
- CVE:NA
|
|
- SUG:NA
|
|
- DESC:build security option
|
|
|
|
* Thu Mar 18 2021 xiadanni<xiadanni1@huawei.com> - 1.0.0.rc3-111
|
|
- Type:bugfix
|
|
- ID:NA
|
|
- SUG:NA
|
|
- DESC:sync bugfix, include
|
|
1. add cpu and memory info when print cgroup info
|
|
2. fix freezing race
|
|
|
|
* Fri Dec 11 2020 yangyanchao <yangyanchao6@huawei.com> - 1.0.0.rc-110
|
|
- add symbol in sys to support riscv
|