Script 'mail_helper' called by obssrc
Hello community,
here is the log from the commit of package cdi-importer-container for
openSUSE:Factory checked in at 2022-10-14 15:42:08
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Comparing /work/SRC/openSUSE:Factory/cdi-importer-container (Old)
and /work/SRC/openSUSE:Factory/.cdi-importer-container.new.2275 (New)
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "cdi-importer-container"
Fri Oct 14 15:42:08 2022 rev:7 rq:1010515 version:unknown
Changes:
--------
---
/work/SRC/openSUSE:Factory/cdi-importer-container/cdi-importer-container.changes
2022-08-05 19:52:19.733661400 +0200
+++
/work/SRC/openSUSE:Factory/.cdi-importer-container.new.2275/cdi-importer-container.changes
2022-10-14 15:43:14.975989565 +0200
@@ -1,0 +2,5 @@
+Thu Oct 13 16:33:59 UTC 2022 - Vasily Ulyanov <[email protected]>
+
+- Create an unprivileged user to run as non-root
+
+-------------------------------------------------------------------
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Other differences:
------------------
++++++ Dockerfile ++++++
--- /var/tmp/diff_new_pack.PL1fm3/_old 2022-10-14 15:43:15.363990213 +0200
+++ /var/tmp/diff_new_pack.PL1fm3/_new 2022-10-14 15:43:15.367990220 +0200
@@ -26,10 +26,19 @@
# endlabelprefix
RUN zypper -n install \
- qemu-tools qemu-block-curl skopeo tar util-linux \
- nbdkit nbdkit-basic-filters nbdkit-gzip-filter \
- nbdkit-xz-filter nbdkit-curl-plugin \
- containerized-data-importer-importer
+ containerized-data-importer-importer \
+ curl \
+ nbdkit \
+ nbdkit-basic-filters \
+ nbdkit-curl-plugin \
+ nbdkit-gzip-filter \
+ nbdkit-xz-filter \
+ qemu-block-curl \
+ qemu-tools \
+ shadow \
+ skopeo \
+ tar \
+ util-linux
# nbdkit-vddk-plugin is available only on x86_64
#!ArchExclusiveLine: x86_64
@@ -37,7 +46,10 @@
zypper -n install nbdkit-vddk-plugin ; \
fi;
-RUN zypper clean -a
+RUN zypper clean -a && \
+ useradd -u 1001 --create-home -s /bin/bash cdi-importer
+WORKDIR /home/cdi-importer
+USER 1001
ENTRYPOINT [ "/usr/bin/virt-cdi-importer", "-alsologtostderr" ]
