Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package nsjail for openSUSE:Factory checked in at 2022-01-06 15:50:55 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/nsjail (Old) and /work/SRC/openSUSE:Factory/.nsjail.new.1896 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "nsjail" Thu Jan 6 15:50:55 2022 rev:8 rq:943929 version:3.0+git72.dccf911 Changes: -------- --- /work/SRC/openSUSE:Factory/nsjail/nsjail.changes 2020-07-29 17:23:47.924730688 +0200 +++ /work/SRC/openSUSE:Factory/.nsjail.new.1896/nsjail.changes 2022-01-06 15:51:02.872963500 +0100 @@ -1,0 +2,75 @@ +Wed Jan 05 08:34:49 UTC 2022 - jseg...@suse.com + +- Changed version string to 3.0+git72.dccf911 and adjusted + service file. The previous version scheme results in version + strings that are "lower" that e.g. 3.0. + +------------------------------------------------------------------- +Wed Jan 05 03:41:13 UTC 2022 - william.br...@suse.com + +- Update to version 3.0~git72.dccf911: + * log: use TEMP_FAILURE_RETRY instead of fallback to dprintf + * make indent + * Fix compile using `FROM ubuntu:20.04` + * cgroup2: use cgroup_mem_swap_max and cgroup_mem_memsw_max + * cgroup2: support cgroup_mem_memsw_max + * fix mem clean in finishFromParent + * Fix whitespace in kafel + * Fix build + * Update kafel for RISC-V support + * Add support for setting cgroup memory.memsw.limit_in_bytes + * Allow mount options to contain colons. + * macros: make NS_VALSTR_STRUCT accept unsigned/64-bit vals + * configs/firefox-with-net-wayland.cfg: retain original WAYLAND_DISPLAY value + * The default rlimit_as value is 4096, not 512. + * configs: firefox+wayland example + * config.proto: renumerate fields + * configs/imagemagick: alternative file conversion command + * Fix duplicate field number + * Fix formatting + * Update kafel - x86 build fixes + * cgroup: write period before quota + * rtprio, msgqueue - defaulting to 'soft' + * Renaming use_switchroot option with no_pivotroot + * Consistentency with RLIMIT_* constant name + * Adding a warning when switchroot is used + * Added rt, memlock & msgq limits + * subproc: warn about CLONE_NEWTIME and clone(), and remove notice about CLONE_NEWCGROUP as the kernel versions should be now new enough for its support + * subproc: debug log for unshare() + * Merge branch '_test_switchroot_alternative' + * No Yoda + * cmdline: clone_newcgroup -> true by default; clone_newtime should be false + * Comment fix + * Added use_switchroot option + * make indent + * MACVLAN modes support + * Enable support for clone3() and for CLONE_NEWTIME + * Fixed macro in subproc.cc + * Initial support for CLONE_NEWTIME + * Update kafel to include bugfixes + * configs/ - add comments to config files using # + * Bump kafel + * Yet another bugfix Kafel version bump + * update kafel again to include a bugfix. + * Update kafel + * Fix default value of cgroup_cpu_mount in README + * Fix typo in command line description + * net: add support for max_conns + * subproc: refer users to dmesg in case si_syscall==31 (SIGSYS) + * Fix build + * Add new capabilities, ignore unsupported caps for bounding set + * nsjail: don't add connections to the proxy map if launching a new process failed + * subproc: kill a process once in the -Ml mode once the TCP connection has ended + * make indent + * remove build dependency on which + * Makefile: compile kafel with -fPIE (maybe fixes #149) + * Fix compilation errors on old gcc (5.4.0) + * config.proto: make indent + * config.proto: renumerate config fields + +------------------------------------------------------------------- +Wed Jan 05 03:32:47 UTC 2022 - william.br...@suse.com + +- Add _service file to allow updating directly from git + +------------------------------------------------------------------- Old: ---- kafel.tar.gz nsjail-3.0.tar.gz New: ---- _service _servicedata nsjail-3.0+git72.dccf911.tar.xz nsjail.obsinfo ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ nsjail.spec ++++++ --- /var/tmp/diff_new_pack.NxU9j8/_old 2022-01-06 15:51:03.536963865 +0100 +++ /var/tmp/diff_new_pack.NxU9j8/_new 2022-01-06 15:51:03.540963867 +0100 @@ -1,7 +1,7 @@ # # spec file for package nsjail # -# Copyright (c) 2020 SUSE LLC +# Copyright (c) 2022 SUSE LLC # # All modifications and additions to the file contributed by third parties # remain the property of their copyright owners, unless otherwise agreed @@ -17,14 +17,13 @@ Name: nsjail -Version: 3.0 +Version: 3.0+git72.dccf911 Release: 0 Summary: A light-weight process isolation tool License: Apache-2.0 Group: System/GUI/Other URL: https://nsjail.com -Source0: https://github.com/google/nsjail/archive/%{version}.tar.gz#/nsjail-%{version}.tar.gz -Source1: kafel.tar.gz +Source0: nsjail-%{version}.tar.xz BuildRequires: autoconf BuildRequires: bison BuildRequires: flex @@ -42,7 +41,7 @@ seccomp-bpf syscall filters (with help of the kafel bpf language) %prep -%setup -qa1 +%setup -qa0 %build %define _lto_cflags %{nil} @@ -67,6 +66,7 @@ %config %{_sysconfdir}/%{name}/demo-dont-use-chrome-with-net.cfg %config %{_sysconfdir}/%{name}/firefox-with-cloned-net.cfg %config %{_sysconfdir}/%{name}/firefox-with-net.cfg +%config %{_sysconfdir}/%{name}/firefox-with-net-wayland.cfg %config %{_sysconfdir}/%{name}/home-documents-with-xorg-no-net.cfg %config %{_sysconfdir}/%{name}/imagemagick-convert.cfg %config %{_sysconfdir}/%{name}/static-busybox-with-execveat.cfg ++++++ _service ++++++ <services> <service name="obs_scm" mode="disabled"> <param name="url">https://github.com/google/nsjail.git</param> <param name="versionformat">@PARENT_TAG@+git@TAG_OFFSET@.%h</param> <param name="scm">git</param> <param name="revision">master</param> <param name="match-tag">3.0</param> <param name="versionrewrite-pattern">(.*)</param> <param name="versionrewrite-replacement">\1</param> <param name="changesgenerate">enable</param> </service> <service mode="disabled" name="tar" /> <service mode="disabled" name="recompress"> <param name="file">*.tar</param> <param name="compression">xz</param> </service> <service mode="disabled" name="set_version" /> </services> ++++++ _servicedata ++++++ <servicedata> <service name="tar_scm"> <param name="url">https://github.com/google/nsjail.git</param> <param name="changesrevision">dccf911fd2659e7b08ce9507c25b2b38ec2c5800</param></service></servicedata> (No newline at EOF) ++++++ nsjail.obsinfo ++++++ name: nsjail version: 3.0+git72.dccf911 mtime: 1637789157 commit: dccf911fd2659e7b08ce9507c25b2b38ec2c5800
