golang deps (rpms v/s bundled)
by Lokesh Mandvekar
Hi all,
I propose to prefer using vendored/bundled golang deps and use rpm dependencies only
as a last resort for golang packages.
Short story long: quite a few golang packages like docker, kubernetes and (hopefully soon)
rocket provide a dir like 'vendor/' or 'Godeps/' which includes the golang
dependencies used, thus making rpm dependencies redundant IMO. Using the
bundled sources makes building packages a lot more convenient than depending
on rpms.
I'm aware that the dependencies are different upstreams but since those are
bundled along with the main tool, perhaps we can relax that restriction.
As most of you may have already experienced, golang deps are a huge PITA to
update/use in docker/kube though props to jchaloup on making golang packaging very easy:
https://github.com/ingvagabund/GolangPackageGenerator
All that said, we could still continue to package golang repos in case
someone needs it for something.
I was hoping we could yay or nay on this and
also perhaps modify the golang packaging draft if everyone agrees.
https://fedoraproject.org/wiki/PackagingDrafts/Go#Dependencies
Comments?
PS: I'm doing this already for daily rebuilds of docker master branch on
fedora rawhide starting today.
--
Lokesh
Freenode, OFTC: lsm5
GPG: 0xC7C3A0DD
9 years, 2 months
[Bug 1170309] New: docker-io-1.2 no longer available. 1.3.1 doesn't work with RHEL 6.5.
by Red Hat Bugzilla
https://bugzilla.redhat.com/show_bug.cgi?id=1170309
Bug ID: 1170309
Summary: docker-io-1.2 no longer available. 1.3.1 doesn't work
with RHEL 6.5.
Product: Fedora EPEL
Version: el6
Component: docker-io
Assignee: lsm5(a)redhat.com
Reporter: kmayfiel(a)us.ibm.com
QA Contact: extras-qa(a)fedoraproject.org
CC: admiller(a)redhat.com, golang(a)lists.fedoraproject.org,
hushan.jia(a)gmail.com, jchaloup(a)redhat.com,
jperrin(a)centos.org, lsm5(a)redhat.com,
mattdm(a)redhat.com, mgoldman(a)redhat.com,
miminar(a)redhat.com, s(a)shk.io, thrcka(a)redhat.com,
vbatts(a)redhat.com
Description of problem:
Incorrectly upgraded to 1.3.1. Docker service daemon fails to start (panic).
Message recommends upgrade to 3.8 kernel, which is not an option for me at this
time.
Before upgrade 1.2 was working.
Attempt to remove package and install docker-io-1.2 is impossible without
access to that package in epel repository.
Version-Release number of selected component (if applicable):
1.2
Message from 1.3.1
2014/12/02 10:00:03 docker daemon: 1.3.1 c78088f/1.3.1; execdriver: native;
graphdriver:
[f9523c24] +job serveapi(unix:///var/run/docker.sock)
[info] WARNING: You are running linux kernel version
2.6.32-431.30.1.el6.x86_64, which might be unstable running docker. Please
upgrade your kernel to 3.8.0.
fatal error: unexpected signal during runtime execution
[signal 0xb code=0x1 addr=0x0 pc=0x0]
--
You are receiving this mail because:
You are on the CC list for the bug.
9 years, 2 months
[Bug 1179891] New: docker-io-fihs-completion 1.4.1-1.el6 add dependency on fish which is not available on epel6
by Red Hat Bugzilla
https://bugzilla.redhat.com/show_bug.cgi?id=1179891
Bug ID: 1179891
Summary: docker-io-fihs-completion 1.4.1-1.el6 add dependency
on fish which is not available on epel6
Product: Fedora EPEL
Version: el6
Component: docker-io
Severity: medium
Assignee: lsm5(a)redhat.com
Reporter: tis(a)foobar.fi
QA Contact: extras-qa(a)fedoraproject.org
CC: adimania(a)gmail.com, admiller(a)redhat.com,
golang(a)lists.fedoraproject.org, hushan.jia(a)gmail.com,
jchaloup(a)redhat.com, jperrin(a)centos.org,
lsm5(a)redhat.com, mattdm(a)redhat.com,
mgoldman(a)redhat.com, miminar(a)redhat.com, s(a)shk.io,
thrcka(a)redhat.com, vbatts(a)redhat.com
docker-io 1.4.1-1.el6 which is on epel6 testing is adding sub-package
docker-io-fish-completion which requires fish. Unfortunately fish is not
available on epel6.
I suggest disabling this sub-package on epel6.
--
You are receiving this mail because:
You are on the CC list for the bug.
9 years, 2 months
[Bug 1173325] New: CVE-2014-9357 docker-io: docker: Escalation of privileges during decompression of LZMA archives [epel-6]
by Red Hat Bugzilla
https://bugzilla.redhat.com/show_bug.cgi?id=1173325
Bug ID: 1173325
Summary: CVE-2014-9357 docker-io: docker: Escalation of
privileges during decompression of LZMA archives
[epel-6]
Product: Fedora EPEL
Version: el6
Component: docker-io
Keywords: Security, SecurityTracking
Severity: low
Priority: low
Assignee: lsm5(a)redhat.com
Reporter: vdanen(a)redhat.com
QA Contact: extras-qa(a)fedoraproject.org
CC: admiller(a)redhat.com, golang(a)lists.fedoraproject.org,
hushan.jia(a)gmail.com, jchaloup(a)redhat.com,
jperrin(a)centos.org, lsm5(a)redhat.com,
mattdm(a)redhat.com, mgoldman(a)redhat.com,
miminar(a)redhat.com, s(a)shk.io, thrcka(a)redhat.com,
vbatts(a)redhat.com
Blocks: 1172782 (CVE-2014-9357)
This is an automatically created tracking bug! It was created to ensure
that one or more security vulnerabilities are fixed in affected versions
of Fedora EPEL.
For comments that are specific to the vulnerability please use bugs filed
against the "Security Response" product referenced in the "Blocks" field.
For more information see:
http://fedoraproject.org/wiki/Security/TrackingBugs
When submitting as an update, use the fedpkg template provided in the next
comment(s). This will include the bug IDs of this tracking bug as well as
the relevant top-level CVE bugs.
Please also mention the CVE IDs being fixed in the RPM changelog and the
fedpkg commit message.
epel-6 tracking bug for docker-io: see blocks bug list for full details of the
security issue(s).
This bug is never intended to be made public, please put any public notes
in the blocked bugs.
[bug automatically created by: add-tracking-bugs]
Referenced Bugs:
https://bugzilla.redhat.com/show_bug.cgi?id=1172782
[Bug 1172782] CVE-2014-9357 docker: Escalation of privileges during
decompression of LZMA archives
--
You are receiving this mail because:
You are on the CC list for the bug.
9 years, 2 months
[Bug 1175144] New: docker-io-1.4.1 is available
by Red Hat Bugzilla
https://bugzilla.redhat.com/show_bug.cgi?id=1175144
Bug ID: 1175144
Summary: docker-io-1.4.1 is available
Product: Fedora
Version: rawhide
Component: docker-io
Keywords: FutureFeature, Triaged
Assignee: lsm5(a)redhat.com
Reporter: upstream-release-monitoring(a)fedoraproject.org
QA Contact: extras-qa(a)fedoraproject.org
CC: adimania(a)gmail.com, admiller(a)redhat.com,
golang(a)lists.fedoraproject.org, hushan.jia(a)gmail.com,
jchaloup(a)redhat.com, jperrin(a)centos.org,
lsm5(a)redhat.com, mattdm(a)redhat.com,
mgoldman(a)redhat.com, miminar(a)redhat.com, s(a)shk.io,
thrcka(a)redhat.com, vbatts(a)redhat.com
Latest upstream release: 1.4.1
Current version/release in Fedora Rawhide: 1.4.0-2.fc22
URL: https://github.com/docker/docker/releases
Please consult the package updates policy before you issue an update to a
stable branch: https://fedoraproject.org/wiki/Updates_Policy
More information about the service that created this bug can be found at:
https://fedoraproject.org/wiki/Upstream_release_monitoring Soon this service
will be implemented by a new system: https://release-monitoring.org/
It will require to manage monitored projects via a new web interface. Please
make yourself familiar with the new system to ease the transition.
--
You are receiving this mail because:
You are on the CC list for the bug.
9 years, 2 months
[Bug 1169593] New: Creates /.docker
by Red Hat Bugzilla
https://bugzilla.redhat.com/show_bug.cgi?id=1169593
Bug ID: 1169593
Summary: Creates /.docker
Product: Fedora
Version: rawhide
Component: docker-io
Assignee: lsm5(a)redhat.com
Reporter: walters(a)redhat.com
QA Contact: extras-qa(a)fedoraproject.org
CC: admiller(a)redhat.com, golang(a)lists.fedoraproject.org,
hushan.jia(a)gmail.com, jchaloup(a)redhat.com,
jperrin(a)centos.org, lsm5(a)redhat.com,
mattdm(a)redhat.com, mgoldman(a)redhat.com,
miminar(a)redhat.com, s(a)shk.io, thrcka(a)redhat.com,
vbatts(a)redhat.com
On Atomic, docker-io-1.3.2-3.git353ff40 fails to start:
Dec 01 22:12:17 localhost.localdomain docker[816]:
time="2014-12-01T22:12:17-05:00" level="fatal" msg="mkdir .docker: permission
denied"
My magic 8 ball^copy of git grep says:
$ git grep -i dir.*\\.docker
docker/flags.go: dockerCertPath = filepath.Join(getHomeDir(),
".docker")
What's that doing? Well, when docker is started on the system, it doesn't have
a home directory, it's just /.
So on a mainline system, since docker runs with all privileges, it happily does
mkdir("/.docker").
This fails on Atomic due to the protection from:
https://bugzilla.gnome.org/show_bug.cgi?id=728006
--
You are receiving this mail because:
You are on the CC list for the bug.
9 years, 2 months
[docker-io] daily rebuild - Sat Jan 31 05:09:34 UTC 2015
by Lokesh Mandvekar
commit 0ac07451ca3dd6065250cea063a7d085568c7439
Author: Lokesh Mandvekar <lsm5(a)fedoraproject.org>
Date: Sat Jan 31 05:09:34 2015 +0000
daily rebuild - Sat Jan 31 05:09:34 UTC 2015
Signed-off-by: Lokesh Mandvekar <lsm5(a)fedoraproject.org>
docker-io.spec | 8 +++++++-
1 files changed, 7 insertions(+), 1 deletions(-)
---
diff --git a/docker-io.spec b/docker-io.spec
index 1bba725..fac2a9b 100644
--- a/docker-io.spec
+++ b/docker-io.spec
@@ -18,7 +18,7 @@
Name: %{repo}-io
Version: 1.4.1
-Release: 13.git%{shortcommit}%{?dist}
+Release: 15.git%{shortcommit}%{?dist}
Summary: Automates deployment of containerized applications
License: ASL 2.0
URL: http://www.docker.com
@@ -368,6 +368,12 @@ exit 0
%{_datadir}/zsh/site-functions/_docker
%changelog
+* Sat Jan 31 2015 Lokesh Mandvekar <lsm5(a)fedoraproject.org> - 1.4.1-15.gitd400ac7
+- daily rebuild - Sat Jan 31 05:08:46 UTC 2015
+
+* Sat Jan 31 2015 Lokesh Mandvekar <lsm5(a)fedoraproject.org> - 1.4.1-14.gitd400ac7
+- daily rebuild - Sat Jan 31 05:07:37 UTC 2015
+
* Thu Jan 29 2015 Lokesh Mandvekar <lsm5(a)fedoraproject.org> - 1.4.1-13.gitd400ac7
- daily rebuild - Thu Jan 29 14:13:04 UTC 2015
9 years, 2 months
[kubernetes] Bump to upstream 55793ac2066745f7243c666316499e1a8cf074f0
by Jan Chaloupka
commit 96e197ddff4e5bec887ea3b9dabcf6d7a3c6dff9
Author: Jan Chaloupka <jchaloup(a)redhat.com>
Date: Fri Jan 30 15:12:55 2015 +0100
Bump to upstream 55793ac2066745f7243c666316499e1a8cf074f0
.gitignore | 2 +-
kubernetes.spec | 10 ++++++----
sources | 2 +-
update-tests-to-etcd-2.0.patch | 32 --------------------------------
4 files changed, 8 insertions(+), 38 deletions(-)
---
diff --git a/.gitignore b/.gitignore
index 20e391c..749b702 100644
--- a/.gitignore
+++ b/.gitignore
@@ -1 +1 @@
-/kubernetes-ca6de16.tar.gz
+/kubernetes-55793ac.tar.gz
diff --git a/kubernetes.spec b/kubernetes.spec
index f699756..a6b23ab 100644
--- a/kubernetes.spec
+++ b/kubernetes.spec
@@ -5,7 +5,7 @@
%global project GoogleCloudPlatform
%global repo kubernetes
%global import_path %{provider}.%{provider_tld}/%{project}/%{repo}
-%global commit ca6de16df7762d4fc9b4ad44baa78d22e3f30742
+%global commit 55793ac2066745f7243c666316499e1a8cf074f0
%global shortcommit %(c=%{commit}; echo ${c:0:7})
#I really need this, otherwise "version_ldflags=$(kube::version_ldflags)"
@@ -15,7 +15,7 @@
Name: kubernetes
Version: 0.9.1
-Release: 0.2.git%{shortcommit}%{?dist}
+Release: 0.3.git%{shortcommit}%{?dist}
Summary: Container cluster management
License: ASL 2.0
URL: https://github.com/GoogleCloudPlatform/kubernetes
@@ -40,7 +40,6 @@ BuildRequires: hostname
%if 0%{?fedora}
Patch1: rename-import-paths.patch
-Patch2: update-tests-to-etcd-2.0.patch
# needed for go cover. Not available in RHEL/CentOS (available in Fedora/EPEL)
BuildRequires: golang-cover
@@ -301,7 +300,7 @@ building other packages which use %{project}/%{repo}.
%build
export KUBE_GIT_TREE_STATE="clean"
export KUBE_GIT_COMMIT=%{commit}
-export KUBE_GIT_VERSION=v0.9.1
+export KUBE_GIT_VERSION=v0.9.0-331-g55793ac2066745
%if 0%{?fedora}
export KUBE_GIT_TREE_STATE="dirty"
@@ -411,6 +410,9 @@ getent passwd kube >/dev/null || useradd -r -g kube -d / -s /sbin/nologin \
%systemd_postun
%changelog
+* Fri Jan 30 2015 jchaloup <jchaloup(a)redhat.com> - 0.9.1-0.3.git55793ac
+- Bump to upstream 55793ac2066745f7243c666316499e1a8cf074f0
+
* Thu Jan 29 2015 jchaloup <jchaloup(a)redhat.com> - 0.9.1-0.2.gitca6de16
- Bump to upstream ca6de16df7762d4fc9b4ad44baa78d22e3f30742
diff --git a/sources b/sources
index e3e4b46..fbd1b82 100644
--- a/sources
+++ b/sources
@@ -1 +1 @@
-b7ec6a3dbdc1a1b785174d2c49338cea kubernetes-ca6de16.tar.gz
+2f876e87ae4a33fa77cf7ea587a2d764 kubernetes-55793ac.tar.gz
9 years, 2 months