Hello community, here is the log from the commit of package docker for openSUSE:Factory checked in at 2018-08-03 12:29:11 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/docker (Old) and /work/SRC/openSUSE:Factory/.docker.new (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "docker" Fri Aug 3 12:29:11 2018 rev:79 rq:626556 version:17.09.1_ce Changes: -------- --- /work/SRC/openSUSE:Factory/docker/docker.changes 2018-07-02 23:29:29.565543925 +0200 +++ /work/SRC/openSUSE:Factory/.docker.new/docker.changes 2018-08-03 12:29:15.766857516 +0200 @@ -1,0 +2,7 @@ +Mon Jul 30 09:44:47 UTC 2018 - asa...@suse.com + +- Build the client binary with -buildmode=pie to fix issues on POWER. + bsc#1100727 + + bsc1100727-0001-build-add-buildmode-pie.patch + +------------------------------------------------------------------- New: ---- bsc1100727-0001-build-add-buildmode-pie.patch ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ docker.spec ++++++ --- /var/tmp/diff_new_pack.9aOliX/_old 2018-08-03 12:29:16.446858514 +0200 +++ /var/tmp/diff_new_pack.9aOliX/_new 2018-08-03 12:29:16.450858519 +0200 @@ -70,6 +70,8 @@ Patch402: bsc1073877-0001-apparmor-allow-receiving-of-signals-from-docker-kill.patch # SUSE-BACKPORT: Backport of https://github.com/moby/moby/pull/37353. bsc#1099277 Patch403: bsc1073877-0002-apparmor-clobber-docker-default-profile-on-start.patch +# SUSE-BACKPORT: Backport of https://github.com/docker/cli/pull/1242. bsc#1100727 +Patch404: bsc1100727-0001-build-add-buildmode-pie.patch BuildRequires: audit BuildRequires: bash-completion BuildRequires: ca-certificates @@ -202,6 +204,8 @@ %patch402 -p1 # bsc#1099277 %patch403 -p1 +# bsc#1100727 +%patch404 -p1 cp %{SOURCE7} . cp %{SOURCE9} . ++++++ bsc1100727-0001-build-add-buildmode-pie.patch ++++++ >From d39172ffc6b245f02da1898793ccaef20bb6858a Mon Sep 17 00:00:00 2001 From: Aleksa Sarai <asa...@suse.de> Date: Mon, 30 Jul 2018 19:34:01 +1000 Subject: [PATCH] build: add -buildmode=pie Make all dynbinary builds be position-independent (this adds both security benefits and can help with flaky builds on POWER architectures). Signed-off-by: Aleksa Sarai <asa...@suse.de> --- components/cli/scripts/build/dynbinary | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/components/cli/scripts/build/dynbinary b/components/cli/scripts/build/dynbinary index 3c32ed342ef7..4feb7e71d852 100755 --- a/components/cli/scripts/build/dynbinary +++ b/components/cli/scripts/build/dynbinary @@ -9,6 +9,6 @@ source ./scripts/build/.variables echo "Building dynamically linked $TARGET" export CGO_ENABLED=1 -go build -o "${TARGET}" -tags pkcs11 --ldflags "${LDFLAGS}" "${SOURCE}" +go build -o "${TARGET}" -tags pkcs11 --ldflags "${LDFLAGS}" -buildmode=pie "${SOURCE}" ln -sf "$(basename "${TARGET}")" build/docker -- 2.18.0
