On Thursday, June 9, 2022 5:55:34 PM CDT Stewart Smith wrote: > Unfortunately I don't think we can [help with EPEL 7] given the > likely packaging differences I'd be surprised if there's major differences, unless AL 2 backports newer go macros.
> the containerd version differences containerd in EPEL 7 actually *needs to* be updated to fix the CVEs. That would be one of the first jobs of the theoretical new EPEL 7 maintainer. > that we don't have infinite time and given a choice between EPEL7 work > and jumping into modern Fedora packaging to enhance both Fedora and our > Amazon Linux 2022 efforts, I'd pick the latter. As I said, that would also be appreciated. >> Additionally, I would appreciate co-maintainers to help with the Fedora >> branches of containerd, its unbundled go dependencies, and moby-engine >> (bundled go package). Long term, I'm not sure I'll have the time or the >> interest to maintain these packages. Note that on EPEL 7, containerd >> bundles its dependencies; moby-engine is not packaged there. > > This is 100% somewhere that Amazon Linux can step in and help with. We > have a continued interest in the containerd ecosystem working in Fedora > like distros (namely Amazon Linux), and the bundled/not-bundled split > existing in some working bconds is certainly in our interest (we're > likely to continue to bundle dependencies for the forseeable future). Currently, moby-engine (equivalent to docker-ce) already uses bundled dependencies. containerd on Fedora uses unbundled dependencies, which does create more work, but doing so is recommended by our packaging guidelines where it's feasible. It shouldn't be too difficult/messy to add bundling bconds, as long as we stick to the version of go-rpm-macros in Fedora and EL 9. It starts getting messier (repeated code and lots of conditionals) when you maintain unbundled Fedora and EPEL 7-8 compatibility in the same specfile. On a related note, I recently learned that it's possible to include snippets from other files in specfiles using the %include macro. This way, you can easily create a script to update virtual provides for bundled go packages without having to copy/paste text into the specfile. This also keeps your specfile cleaner. If anyone is interested, feel free to look at moby-engine for an example. -- Thanks, Maxwell G (@gotmax23) Pronouns: He/Him/His
signature.asc
Description: This is a digitally signed message part.
_______________________________________________ epel-devel mailing list -- epel-devel@lists.fedoraproject.org To unsubscribe send an email to epel-devel-le...@lists.fedoraproject.org Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/epel-devel@lists.fedoraproject.org Do not reply to spam on the list, report it: https://pagure.io/fedora-infrastructure
