Script 'mail_helper' called by obssrc
Hello community,
here is the log from the commit of package post-build-checks-containers for
openSUSE:Factory checked in at 2026-07-14 13:47:43
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Comparing /work/SRC/openSUSE:Factory/post-build-checks-containers (Old)
and /work/SRC/openSUSE:Factory/.post-build-checks-containers.new.1991
(New)
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "post-build-checks-containers"
Tue Jul 14 13:47:43 2026 rev:3 rq:1365344 version:0.1
Changes:
--------
---
/work/SRC/openSUSE:Factory/post-build-checks-containers/post-build-checks-containers.changes
2025-11-24 17:17:46.314390072 +0100
+++
/work/SRC/openSUSE:Factory/.post-build-checks-containers.new.1991/post-build-checks-containers.changes
2026-07-14 13:47:48.894650691 +0200
@@ -1,0 +2,5 @@
+Sun Jun 21 08:19:41 UTC 2026 - Dirk Müller <[email protected]>
+
+- update for new NeuVector code (bsc#1268574)
+
+-------------------------------------------------------------------
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Other differences:
------------------
++++++ 80-vulnerability-scan-neuvector ++++++
--- /var/tmp/diff_new_pack.jQW2du/_old 2026-07-14 13:47:49.754679835 +0200
+++ /var/tmp/diff_new_pack.jQW2du/_new 2026-07-14 13:47:49.758679970 +0200
@@ -27,9 +27,8 @@
check_required_environment_variables BUILD_DIR BUILD_ROOT
# Obtain versions
-NV_VERSION="$(rpm -qa | grep -E '^neuvector-scanner-[a-f0-9]+-' |
- sed -E 's/.*-([a-f0-9]+)-.*/\1/g')"
-NV_DB_VERSION="$(scanner -d /etc/neuvector/db/ -v | grep -Eo '[0-9.]+')"
+NV_VERSION="$(rpm -q --qf "%{VERSION}\n" neuvector-scanner)"
+NV_DB_VERSION="$(scanner -license "on_demand" -d /etc/neuvector/db/ -v | grep
-Eo '[0-9.]+')"
log "Using NeuVector version $NV_VERSION (db version: $NV_DB_VERSION)"
log "Retrieving container image metadata"
@@ -41,11 +40,15 @@
<"$CONTAINERINFO")"
log "Container image tag to check: $CONTAINER_TAG"
+if ! grep -q "storage-driver" /etc/docker/daemon.json; then
+ log "Set storage driver to overlay2 for NeuVector"
+ printf '{\n "storage-driver": "overlay2",\n' > /etc/docker/daemon.json.new
+ tail -n +2 /etc/docker/daemon.json >> /etc/docker/daemon.json.new
+ mv /etc/docker/daemon.json.new /etc/docker/daemon.json
+fi
+
log "Starting Docker"
-"$BUILD_DIR/startdockerd" \
- --root "$BUILD_ROOT" \
- --webserver "$TOPDIR/SOURCES/repos" \
- --webserver-upload "$TOPDIR/SOURCES/repos/UPLOAD"
+"$BUILD_DIR/startdockerd" --root "$BUILD_ROOT"
# Load the final built image into Docker, this is based on build-recipe-docker
#
https://github.com/openSUSE/obs-build/blob/master/build-recipe-docker#L152-L170
@@ -80,10 +83,7 @@
fi
log "Scanning image with NeuVector"
-export SCANNER_ON_DEMAND=true
-export SCANNER_REPOSITORY="${CONTAINER_TAG%%:*}"
-export SCANNER_TAG="${CONTAINER_TAG#*:}"
-monitor
+monitor -d -i ${CONTAINER_TAG}
log "Stopping Docker"
"$BUILD_DIR/startdockerd" \
