commit: bff728ccef49fe4c5e834f9ea50a54f97c05b839 Author: Marek Szuba <marecki <AT> gentoo <DOT> org> AuthorDate: Fri Mar 29 13:40:19 2024 +0000 Commit: Marek Szuba <marecki <AT> gentoo <DOT> org> CommitDate: Fri Mar 29 13:41:02 2024 +0000 URL: https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=bff728cc
app-containers/apptainer: drop 1.2.4 No versions vulnerable to CVE-2024-28176, CVE-2024-28180 left in the tree. Bug: https://bugs.gentoo.org/928121 Signed-off-by: Marek Szuba <marecki <AT> gentoo.org> app-containers/apptainer/Manifest | 1 - app-containers/apptainer/apptainer-1.2.4.ebuild | 92 ------------------------- 2 files changed, 93 deletions(-) diff --git a/app-containers/apptainer/Manifest b/app-containers/apptainer/Manifest index 0542acc8ef27..41d909813726 100644 --- a/app-containers/apptainer/Manifest +++ b/app-containers/apptainer/Manifest @@ -1,2 +1 @@ -DIST apptainer-1.2.4.tar.gz 14387522 BLAKE2B 8435bf590149c4e83dc32a866198fdcaa44270cad4e6722e9174352c7b00e4b13c1aa4c290991c289d71797afcd9e2411e3bcc0a2b80440528babdcf3e19bec5 SHA512 bc2ad5f10f2c8e69b4bc5b997083e2dd5f62913d195eda6213d572c3dbfe03923845882e55e1a60d395ed3019100ce26919323f9523c59ccda51d7f1397bcba3 DIST apptainer-1.3.0.tar.gz 17103544 BLAKE2B ed42b763a20b2b71cce6081b903697dc506073f91f9d928d49801165289d15c1416044af8fcedddcbd2a260c17a2e6488ed3d06b1edb4fb5f5ca5e9d14a14312 SHA512 a72afcac8e783f43732517314a94ffe039ab8f29027bcc398295fed97b123e6777039c016b6655a3cefbcba7e69832f62f3418b11e1bbd0452edc702ecaef69e diff --git a/app-containers/apptainer/apptainer-1.2.4.ebuild b/app-containers/apptainer/apptainer-1.2.4.ebuild deleted file mode 100644 index f32ad5c89751..000000000000 --- a/app-containers/apptainer/apptainer-1.2.4.ebuild +++ /dev/null @@ -1,92 +0,0 @@ -# Copyright 1999-2023 Gentoo Authors -# Distributed under the terms of the GNU General Public License v2 - -EAPI=8 - -inherit linux-info toolchain-funcs - -DESCRIPTION="The container system for secure high-performance computing" -HOMEPAGE="https://apptainer.org/"; -SRC_URI="https://github.com/apptainer/${PN}/releases/download/v${PV}/${P}.tar.gz"; - -SLOT="0" -LICENSE="BSD" -KEYWORDS="amd64 ~riscv ~x86 ~amd64-linux ~x86-linux" -IUSE="examples +network suid systemd" - -# Do not complain about CFLAGS etc. since go projects do not use them. -QA_FLAGS_IGNORED='.*' - -DEPEND="app-crypt/gpgme - >=dev-lang/go-1.19.0 - dev-libs/openssl - sys-apps/util-linux - sys-fs/cryptsetup - sys-fs/squashfs-tools - sys-libs/libseccomp - !suid? ( - sys-fs/e2fsprogs[fuse] - sys-fs/squashfuse - )" -RDEPEND="${DEPEND} - !sys-cluster/singularity" -BDEPEND="virtual/pkgconfig" - -CONFIG_CHECK="~SQUASHFS" - -PATCHES=( - "${FILESDIR}"/${PN}-1.0.2-trim_upstream_cflags.patch -) - -DOCS=( README.md CONTRIBUTORS.md CONTRIBUTING.md ) - -src_configure() { - local myconfargs=( - -c "$(tc-getBUILD_CC)" \ - -x "$(tc-getBUILD_CXX)" \ - -C "$(tc-getCC)" \ - -X "$(tc-getCXX)" \ - --prefix="${EPREFIX}"/usr \ - --sysconfdir="${EPREFIX}"/etc \ - --runstatedir="${EPREFIX}"/run \ - --localstatedir="${EPREFIX}"/var \ - $(usex network "" "--without-network") \ - $(use_with suid) - ) - ./mconfig -v ${myconfargs[@]} || die "Error invoking mconfig" -} - -src_compile() { - emake -C builddir -} - -src_install() { - emake DESTDIR="${D}" -C builddir install - keepdir /var/${PN}/mnt/session - - if use systemd; then - sed -i -e '/systemd cgroups/ s/no/yes/' "${ED}"/etc/${PN}/${PN}.conf \ - || die "Failed to enable systemd use in configuration" - else - sed -i -e '/systemd cgroups/ s/yes/no/' "${ED}"/etc/${PN}/${PN}.conf \ - || die "Failed to disable systemd use in configuration" - fi - - einstalldocs - if use examples; then - dodoc -r examples - fi -} - -pkg_postinst() { - if ! use suid; then - local oldver - for oldver in ${REPLACING_VERSIONS}; do - if ver_test "${oldver}" -lt 1.1.0; then - ewarn "Since version 1.1.0 ${PN} no longer installs setuid-root components by default, relying on unprivileged user namespaces instead. For details, see https://apptainer.org/docs/admin/main/user_namespace.html"; - ewarn "Make sure user namespaces (possibly except network ones for improved security) are enabled on your system, or re-enable installation of setuid root components by passing USE=suid to ${CATEGORY}/${PN}" - break - fi - done - fi -}
