The package rpms/oci-seccomp-bpf-hook.git has added or updated architecture specific
content in its
spec file (ExclusiveArch/ExcludeArch or %ifarch/%ifnarch) in commit(s):
https://src.fedoraproject.org/cgit/rpms/oci-seccomp-bpf-hook.git/commit/?....
Change:
+%ifarch x86_64
Thanks.
Full change:
============
commit ba8acdd617a89f68f5f80dbe169057f17e6a2c2b
Author: Lokesh Mandvekar <lsm5(a)fedoraproject.org>
Date: Wed Jan 27 14:19:11 2021 -0500
oci-seccomp-bpf-hook-1.2.1-1
- bump to v1.2.1
Signed-off-by: Lokesh Mandvekar <lsm5(a)fedoraproject.org>
diff --git a/oci-seccomp-bpf-hook.spec b/oci-seccomp-bpf-hook.spec
index a720b4f..a6c8784 100644
--- a/oci-seccomp-bpf-hook.spec
+++ b/oci-seccomp-bpf-hook.spec
@@ -28,16 +28,17 @@ ExclusiveArch: x86_64 %{power64} aarch64 s390x
# Used for comparing with latest upstream tag
# to decide whether to autobuild (non-rawhide only)
-%define built_tag v1.2.0
+%define built_tag v1.2.1
%define built_tag_strip %(b=%{built_tag}; echo ${b:1})
+%define download_url %{git0}/archive/%{built_tag}.tar.gz
Name: oci-seccomp-bpf-hook
-Version: 1.2.0
+Version: 1.2.1
Release: 1%{?dist}
Summary: OCI Hook to generate seccomp json files based on EBF syscalls used by container
License: ASL 2.0
URL: %{git0}
-Source0: %{git0}/archive/v%{version}.tar.gz
+Source0: %{download_url}
BuildRequires: golang
%if 0%{?fedora}
BuildRequires: go-rpm-macros
@@ -50,8 +51,10 @@ BuildRequires: git
BuildRequires: gpgme-devel
BuildRequires: libseccomp-devel
BuildRequires: make
+%if 0%{?fedora} || 0%{?centos} >= 8
Enhances: podman
Enhances: cri-o
+%endif
%description
%{summary}
@@ -59,9 +62,19 @@ Enhances: cri-o
the Container Pod concept popularized by Kubernetes.
%prep
-%autosetup -Sgit
+%autosetup -Sgit -n %{name}-%{built_tag_strip}
%build
+export CGO_CFLAGS="-O2 -g -grecord-gcc-switches -pipe -Wall -Werror=format-security
-Wp,-D_FORTIFY_SOURCE=2 -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -ffat-lto-objects
-fexceptions -fasynchronous-unwind-tables -fstack-protector-strong
-fstack-clash-protection -D_GNU_SOURCE -D_LARGEFILE_SOURCE -D_LARGEFILE64_SOURCE
-D_FILE_OFFSET_BITS=64"
+%ifarch x86_64
+export CGO_CFLAGS="$CGO_CFLAGS -m64 -mtune=generic"
+%if 0%{?fedora} || 0%{?centos} >= 8
+export CGO_CFLAGS="$CGO_CFLAGS -fcf-protection"
+%endif
+%endif
+# These extra flags present in %%{optflags} have been skipped for now as they break the
build
+#export CGO_CFLAGS="$CGO_CFLAGS -flto=auto -Wp,D_GLIBCXX_ASSERTIONS
-specs=/usr/lib/rpm/redhat/redhat-annobin-cc1"
+
mkdir _build
pushd _build
mkdir -p src/%{provider}.%{provider_tld}/%{project}
@@ -113,6 +126,9 @@ export GOPATH=%{buildroot}/%{gopath}:$(pwd)/vendor:%{gopath}
%{_mandir}/man1/%{name}.1*
%changelog
+* Wed Jan 27 2021 Lokesh Mandvekar <lsm5(a)fedoraproject.org> - 1.2.1-1
+- bump to v1.2.1
+
* Fri Sep 11 2020 Lokesh Mandvekar <lsm5(a)fedoraproject.org> - 1.2.0-1
- bump to v1.2.0
diff --git a/sources b/sources
index 4632587..f7a742a 100644
--- a/sources
+++ b/sources
@@ -1 +1 @@
-SHA512 (v1.2.0.tar.gz) =
9d686380bd250278b038660fa13085801396493bcfd71754d943840ad9af47f6206c33515b4a876460c67e8e2092fe22493d1c64acafff9d24585cb713c0b888
+SHA512 (v1.2.1.tar.gz) =
7979bec92b0e2d8dadd57ab16f86d6aec209b9968df01c4c538eddfb8d85fba9f04631eb5f9ed22ea1053c83c42cb88f5f12a704f8f20737b7402f44e72c4ccb