mirror of
https://github.com/gentoo-mirror/gentoo.git
synced 2026-09-24 04:59:14 -07:00
app-containers/podman: drop vulnerable version
Bug: https://bugs.gentoo.org/836609 Signed-off-by: Zac Medico <zmedico@gentoo.org>
This commit is contained in:
Zac Medico
@@ -1,3 +1 @@
|
||||
DIST podman-3.4.4.tar.gz 10945990 BLAKE2B 3de69c9bc3bd1334837d21cb2817a9e9757fbb561a0b047658c7401608ecf1fbe09d5cd0c65497a82150a67a3775c77705d0dbd314a54f7b3a1953733cfb2906 SHA512 cfd295bf50ce86ea70741c3e663b409ed47b1e560c962bc579f319151a0fe2b24cdd3045667660083cce89449a9c5de1508c94a9a02375165a72ce7c16166666
|
||||
DIST podman-4.0.2.tar.gz 11377152 BLAKE2B ab022c3e7ef40685301f08b2d939e936b07e08231d5b86a84fefa6ea7a60c8f20a5e15b79788d862c263336204a9cd8d7206748b4530f2f42ccdd31df370747f SHA512 f3c42b3b3c75ca451b4c22c2d6f9f1b9ab9437b118b16e19f17f92f28b5849f8e3de4ebc97d8d249f565a61ba187214928c25a031204163a59174e94ce300a59
|
||||
DIST podman-4.0.3.tar.gz 11392523 BLAKE2B 2d69fa8f52b061a931cf3dbe767edcb9eb5baf4f45fa77bcd9dd6e5541c126830c059a2bb97906f4fe9a4fd3257f77c801add06e1da910542ebafeaa2d032768 SHA512 a7c6f9a0f33641520c4143e6a3568129021783557f8ea7c846e4bc3f7da9bf70cb30b19cc7c6527809df2c46e6ded1d162a929dc4f44a5daafcf9d211b43b44a
|
||||
|
||||
@@ -1,165 +0,0 @@
|
||||
# Copyright 1999-2022 Gentoo Authors
|
||||
# Distributed under the terms of the GNU General Public License v2
|
||||
|
||||
EAPI=7
|
||||
EGIT_COMMIT="3450a60d2196cc0bee8a3fc28a7c93a7370d4515"
|
||||
|
||||
inherit bash-completion-r1 flag-o-matic go-module tmpfiles
|
||||
|
||||
DESCRIPTION="Library and podman tool for running OCI-based containers in Pods"
|
||||
HOMEPAGE="https://github.com/containers/podman/"
|
||||
MY_PN=podman
|
||||
MY_P=${MY_PN}-${PV}
|
||||
SRC_URI="https://github.com/containers/podman/archive/v${PV}.tar.gz -> ${MY_P}.tar.gz"
|
||||
LICENSE="Apache-2.0 BSD BSD-2 CC-BY-SA-4.0 ISC MIT MPL-2.0"
|
||||
SLOT="0"
|
||||
|
||||
KEYWORDS="amd64 arm64 ~ppc64 ~riscv"
|
||||
IUSE="apparmor btrfs +cgroup-hybrid +fuse +rootless selinux"
|
||||
RESTRICT+=" test"
|
||||
|
||||
COMMON_DEPEND="
|
||||
app-crypt/gpgme:=
|
||||
>=app-containers/conmon-2.0.0
|
||||
cgroup-hybrid? ( >=app-containers/runc-1.0.0_rc6 )
|
||||
!cgroup-hybrid? ( app-containers/crun )
|
||||
dev-libs/libassuan:=
|
||||
dev-libs/libgpg-error:=
|
||||
>=net-misc/cni-plugins-0.8.6
|
||||
sys-fs/lvm2
|
||||
sys-libs/libseccomp:=
|
||||
|
||||
apparmor? ( sys-libs/libapparmor )
|
||||
btrfs? ( sys-fs/btrfs-progs )
|
||||
rootless? ( app-containers/slirp4netns )
|
||||
selinux? ( sys-libs/libselinux:= )
|
||||
"
|
||||
DEPEND="
|
||||
${COMMON_DEPEND}
|
||||
dev-go/go-md2man"
|
||||
RDEPEND="${COMMON_DEPEND}
|
||||
fuse? ( sys-fs/fuse-overlayfs )"
|
||||
|
||||
S=${WORKDIR}/${MY_P}
|
||||
|
||||
src_prepare() {
|
||||
default
|
||||
|
||||
# Disable installation of python modules here, since those are
|
||||
# installed by separate ebuilds.
|
||||
local makefile_sed_args=(
|
||||
-e '/^GIT_.*/d'
|
||||
-e 's/$(GO) build/$(GO) build -v -work -x/'
|
||||
-e 's/^\(install:.*\) install\.python$/\1/'
|
||||
-e 's|^pkg/varlink/iopodman.go: .gopathok pkg/varlink/io.podman.varlink$|pkg/varlink/iopodman.go: pkg/varlink/io.podman.varlink|'
|
||||
)
|
||||
|
||||
has_version -b '>=dev-lang/go-1.13.9' || makefile_sed_args+=(-e 's:GO111MODULE=off:GO111MODULE=on:')
|
||||
|
||||
sed "${makefile_sed_args[@]}" -i Makefile || die
|
||||
|
||||
sed -e 's|OUTPUT="${CIRRUS_TAG:.*|OUTPUT='v${PV}'|' \
|
||||
-i hack/get_release_info.sh || die
|
||||
}
|
||||
|
||||
src_compile() {
|
||||
local git_commiT=${EGIT_COMMIT}
|
||||
|
||||
# Filter unsupported linker flags
|
||||
filter-flags '-Wl,*'
|
||||
|
||||
[[ -f hack/apparmor_tag.sh ]] || die
|
||||
if use apparmor; then
|
||||
echo -e "#!/bin/sh\necho apparmor" > hack/apparmor_tag.sh || die
|
||||
else
|
||||
echo -e "#!/bin/sh\ntrue" > hack/apparmor_tag.sh || die
|
||||
fi
|
||||
|
||||
[[ -f hack/btrfs_installed_tag.sh ]] || die
|
||||
if use btrfs; then
|
||||
echo -e "#!/bin/sh\ntrue" > hack/btrfs_installed_tag.sh || die
|
||||
else
|
||||
echo -e "#!/bin/sh\necho exclude_graphdriver_btrfs" > \
|
||||
hack/btrfs_installed_tag.sh || die
|
||||
fi
|
||||
|
||||
[[ -f hack/selinux_tag.sh ]] || die
|
||||
if use selinux; then
|
||||
echo -e "#!/bin/sh\necho selinux" > hack/selinux_tag.sh || die
|
||||
else
|
||||
echo -e "#!/bin/sh\ntrue" > hack/selinux_tag.sh || die
|
||||
fi
|
||||
|
||||
# Avoid this error when generating pkg/varlink/iopodman.go:
|
||||
# cannot find package "github.com/varlink/go/varlink/idl"
|
||||
mkdir -p _output || die
|
||||
ln -snf ../vendor _output/src || die
|
||||
GO111MODULE=off GOPATH=${PWD}/_output go generate ./pkg/varlink/... || die
|
||||
rm _output/src || die
|
||||
|
||||
export -n GOCACHE GOPATH XDG_CACHE_HOME
|
||||
GOBIN="${S}/bin" \
|
||||
emake all \
|
||||
GIT_BRANCH=master \
|
||||
GIT_BRANCH_CLEAN=master \
|
||||
COMMIT_NO="${git_commit}" \
|
||||
GIT_COMMIT="${git_commit}"
|
||||
}
|
||||
|
||||
src_install() {
|
||||
emake DESTDIR="${D}" PREFIX="${EPREFIX}/usr" install
|
||||
|
||||
insinto /etc/containers
|
||||
newins test/registries.conf registries.conf.example
|
||||
newins test/policy.json policy.json.example
|
||||
|
||||
insinto /usr/share/containers
|
||||
doins vendor/github.com/containers/common/pkg/seccomp/seccomp.json
|
||||
|
||||
newconfd "${FILESDIR}"/podman.confd podman
|
||||
newinitd "${FILESDIR}"/podman.initd podman
|
||||
|
||||
insinto /etc/logrotate.d
|
||||
newins "${FILESDIR}/podman.logrotated" podman
|
||||
|
||||
dobashcomp completions/bash/*
|
||||
|
||||
insinto /usr/share/zsh/site-functions
|
||||
doins completions/zsh/*
|
||||
|
||||
insinto /usr/share/fish/vendor_completions.d
|
||||
doins completions/fish/*
|
||||
|
||||
keepdir /var/lib/containers
|
||||
}
|
||||
|
||||
pkg_preinst() {
|
||||
PODMAN_ROOTLESS_UPGRADE=false
|
||||
if use rootless; then
|
||||
has_version 'app-containers/podman[rootless]' || PODMAN_ROOTLESS_UPGRADE=true
|
||||
fi
|
||||
}
|
||||
|
||||
pkg_postinst() {
|
||||
tmpfiles_process podman.conf
|
||||
|
||||
local want_newline=false
|
||||
if [[ ! ( -e ${EROOT%/*}/etc/containers/policy.json && -e ${EROOT%/*}/etc/containers/registries.conf ) ]]; then
|
||||
elog "You need to create the following config files:"
|
||||
elog "/etc/containers/registries.conf"
|
||||
elog "/etc/containers/policy.json"
|
||||
elog "To copy over default examples, use:"
|
||||
elog "cp /etc/containers/registries.conf{.example,}"
|
||||
elog "cp /etc/containers/policy.json{.example,}"
|
||||
want_newline=true
|
||||
fi
|
||||
if [[ ${PODMAN_ROOTLESS_UPGRADE} == true ]] ; then
|
||||
${want_newline} && elog ""
|
||||
elog "For rootless operation, you need to configure subuid/subgid"
|
||||
elog "for user running podman. In case subuid/subgid has only been"
|
||||
elog "configured for root, run:"
|
||||
elog "usermod --add-subuids 1065536-1131071 <user>"
|
||||
elog "usermod --add-subgids 1065536-1131071 <user>"
|
||||
want_newline=true
|
||||
fi
|
||||
}
|
||||
@@ -1,163 +0,0 @@
|
||||
# Copyright 1999-2022 Gentoo Authors
|
||||
# Distributed under the terms of the GNU General Public License v2
|
||||
|
||||
EAPI=7
|
||||
EGIT_COMMIT="342c8259381b63296e96ad29519bd4b9c7afbf97"
|
||||
|
||||
inherit bash-completion-r1 flag-o-matic go-module tmpfiles
|
||||
|
||||
DESCRIPTION="Library and podman tool for running OCI-based containers in Pods"
|
||||
HOMEPAGE="https://github.com/containers/podman/"
|
||||
MY_PN=podman
|
||||
MY_P=${MY_PN}-${PV}
|
||||
SRC_URI="https://github.com/containers/podman/archive/v${PV}.tar.gz -> ${MY_P}.tar.gz"
|
||||
LICENSE="Apache-2.0 BSD BSD-2 CC-BY-SA-4.0 ISC MIT MPL-2.0"
|
||||
SLOT="0"
|
||||
|
||||
KEYWORDS="~amd64 ~arm64 ~ppc64 ~riscv"
|
||||
IUSE="apparmor btrfs cgroup-hybrid +fuse +init +rootless selinux"
|
||||
RESTRICT+=" test"
|
||||
|
||||
COMMON_DEPEND="
|
||||
app-crypt/gpgme:=
|
||||
>=app-containers/conmon-2.0.0
|
||||
cgroup-hybrid? ( >=app-containers/runc-1.0.0_rc6 )
|
||||
!cgroup-hybrid? ( app-containers/crun )
|
||||
dev-libs/libassuan:=
|
||||
dev-libs/libgpg-error:=
|
||||
>=net-misc/cni-plugins-0.8.6
|
||||
sys-fs/lvm2
|
||||
sys-libs/libseccomp:=
|
||||
|
||||
apparmor? ( sys-libs/libapparmor )
|
||||
btrfs? ( sys-fs/btrfs-progs )
|
||||
init? ( app-containers/catatonit )
|
||||
rootless? ( app-containers/slirp4netns )
|
||||
selinux? ( sys-libs/libselinux:= )
|
||||
"
|
||||
DEPEND="
|
||||
${COMMON_DEPEND}
|
||||
dev-go/go-md2man"
|
||||
RDEPEND="${COMMON_DEPEND}
|
||||
fuse? ( sys-fs/fuse-overlayfs )"
|
||||
|
||||
S=${WORKDIR}/${MY_P}
|
||||
|
||||
src_prepare() {
|
||||
default
|
||||
|
||||
# Disable installation of python modules here, since those are
|
||||
# installed by separate ebuilds.
|
||||
local makefile_sed_args=(
|
||||
-e '/^GIT_.*/d'
|
||||
-e 's/$(GO) build/$(GO) build -v -work -x/'
|
||||
-e 's/^\(install:.*\) install\.python$/\1/'
|
||||
-e 's|^pkg/varlink/iopodman.go: .gopathok pkg/varlink/io.podman.varlink$|pkg/varlink/iopodman.go: pkg/varlink/io.podman.varlink|'
|
||||
)
|
||||
|
||||
has_version -b '>=dev-lang/go-1.13.9' || makefile_sed_args+=(-e 's:GO111MODULE=off:GO111MODULE=on:')
|
||||
|
||||
sed "${makefile_sed_args[@]}" -i Makefile || die
|
||||
}
|
||||
|
||||
src_compile() {
|
||||
local git_commit=${EGIT_COMMIT}
|
||||
|
||||
# Filter unsupported linker flags
|
||||
filter-flags '-Wl,*'
|
||||
|
||||
[[ -f hack/apparmor_tag.sh ]] || die
|
||||
if use apparmor; then
|
||||
echo -e "#!/bin/sh\necho apparmor" > hack/apparmor_tag.sh || die
|
||||
else
|
||||
echo -e "#!/bin/sh\ntrue" > hack/apparmor_tag.sh || die
|
||||
fi
|
||||
|
||||
[[ -f hack/btrfs_installed_tag.sh ]] || die
|
||||
if use btrfs; then
|
||||
echo -e "#!/bin/sh\ntrue" > hack/btrfs_installed_tag.sh || die
|
||||
else
|
||||
echo -e "#!/bin/sh\necho exclude_graphdriver_btrfs" > \
|
||||
hack/btrfs_installed_tag.sh || die
|
||||
fi
|
||||
|
||||
[[ -f hack/selinux_tag.sh ]] || die
|
||||
if use selinux; then
|
||||
echo -e "#!/bin/sh\necho selinux" > hack/selinux_tag.sh || die
|
||||
else
|
||||
echo -e "#!/bin/sh\ntrue" > hack/selinux_tag.sh || die
|
||||
fi
|
||||
|
||||
# Avoid this error when generating pkg/varlink/iopodman.go:
|
||||
# cannot find package "github.com/varlink/go/varlink/idl"
|
||||
mkdir -p _output || die
|
||||
ln -snf ../vendor _output/src || die
|
||||
GO111MODULE=off GOPATH=${PWD}/_output go generate ./pkg/varlink/... || die
|
||||
rm _output/src || die
|
||||
|
||||
export -n GOCACHE GOPATH XDG_CACHE_HOME
|
||||
GOBIN="${S}/bin" \
|
||||
emake all \
|
||||
GIT_BRANCH=master \
|
||||
GIT_BRANCH_CLEAN=master \
|
||||
COMMIT_NO="${git_commit}" \
|
||||
GIT_COMMIT="${git_commit}"
|
||||
}
|
||||
|
||||
src_install() {
|
||||
emake DESTDIR="${D}" PREFIX="${EPREFIX}/usr" install
|
||||
|
||||
insinto /etc/containers
|
||||
newins test/registries.conf registries.conf.example
|
||||
newins test/policy.json policy.json.example
|
||||
|
||||
insinto /usr/share/containers
|
||||
doins vendor/github.com/containers/common/pkg/seccomp/seccomp.json
|
||||
|
||||
newconfd "${FILESDIR}"/podman.confd podman
|
||||
newinitd "${FILESDIR}"/podman.initd podman
|
||||
|
||||
insinto /etc/logrotate.d
|
||||
newins "${FILESDIR}/podman.logrotated" podman
|
||||
|
||||
dobashcomp completions/bash/*
|
||||
|
||||
insinto /usr/share/zsh/site-functions
|
||||
doins completions/zsh/*
|
||||
|
||||
insinto /usr/share/fish/vendor_completions.d
|
||||
doins completions/fish/*
|
||||
|
||||
keepdir /var/lib/containers
|
||||
}
|
||||
|
||||
pkg_preinst() {
|
||||
PODMAN_ROOTLESS_UPGRADE=false
|
||||
if use rootless; then
|
||||
has_version 'app-containers/podman[rootless]' || PODMAN_ROOTLESS_UPGRADE=true
|
||||
fi
|
||||
}
|
||||
|
||||
pkg_postinst() {
|
||||
tmpfiles_process podman.conf
|
||||
|
||||
local want_newline=false
|
||||
if [[ ! ( -e ${EROOT%/*}/etc/containers/policy.json && -e ${EROOT%/*}/etc/containers/registries.conf ) ]]; then
|
||||
elog "You need to create the following config files:"
|
||||
elog "/etc/containers/registries.conf"
|
||||
elog "/etc/containers/policy.json"
|
||||
elog "To copy over default examples, use:"
|
||||
elog "cp /etc/containers/registries.conf{.example,}"
|
||||
elog "cp /etc/containers/policy.json{.example,}"
|
||||
want_newline=true
|
||||
fi
|
||||
if [[ ${PODMAN_ROOTLESS_UPGRADE} == true ]] ; then
|
||||
${want_newline} && elog ""
|
||||
elog "For rootless operation, you need to configure subuid/subgid"
|
||||
elog "for user running podman. In case subuid/subgid has only been"
|
||||
elog "configured for root, run:"
|
||||
elog "usermod --add-subuids 1065536-1131071 <user>"
|
||||
elog "usermod --add-subgids 1065536-1131071 <user>"
|
||||
want_newline=true
|
||||
fi
|
||||
}
|
||||
Reference in New Issue
Block a user