Hello community, here is the log from the commit of package singularity for openSUSE:Leap:15.2 checked in at 2020-02-14 17:58:09 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Leap:15.2/singularity (Old) and /work/SRC/openSUSE:Leap:15.2/.singularity.new.26092 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "singularity" Fri Feb 14 17:58:09 2020 rev:13 rq:758959 version:3.5.2 Changes: -------- --- /work/SRC/openSUSE:Leap:15.2/singularity/singularity.changes 2020-01-15 16:02:49.599906580 +0100 +++ /work/SRC/openSUSE:Leap:15.2/.singularity.new.26092/singularity.changes 2020-02-14 17:58:15.934833069 +0100 @@ -1,0 +2,224 @@ +Thu Dec 19 14:12:49 UTC 2019 - Ana Guerrero Lopez <[email protected]> + +- New version 3.5.2. Main change is a fix for a security issue related + to incorrect file permissions (CVE-2019-19724) on user configuration + and cache directories. (boo#1159550) + For other minor bug fixes please read CHANGELOG.md + +------------------------------------------------------------------- +Thu Dec 19 08:21:59 UTC 2019 - Ana Guerrero Lopez <[email protected]> + +- Update wording in SUSE.README +- New patch, to get a more clear error message when user doesn't + belong to the singularity group + * useful_error_message.patch + +------------------------------------------------------------------- +Fri Dec 13 09:46:13 UTC 2019 - Ana Guerrero Lopez <[email protected]> + +- New version 3.5.1. Many changes since 3.4.2, for the full changelog + please read CHANGELOG.md. Changes relevant to the package: + * New support for AMD GPUs via --rocm, install new configuration file + rocmliblist.conf + * Requires Go 1.13 +- Update Source to download the release tarball that includes + the vendored modules. +- Update patch: + * build-position-independent-binaries.patch + +------------------------------------------------------------------- +Thu Nov 7 09:48:06 UTC 2019 - Ana Guerrero Lopez <[email protected]> + +- New version 3.4.2, this release addresses the following issues: + - Sets workable permissions on OCI -> sandbox rootless builds + - Fallback correctly to user namespace for non setuid installation + - Correctly handle the starter-suid binary for non-root installs + - Creates CACHEDIR if it doesn't exist + - Set apex loglevel for umoci to match singularity loglevel + +------------------------------------------------------------------- +Tue Sep 24 16:51:53 UTC 2019 - Egbert Eich <[email protected]> + +- New version 3.4.1 + - This point release addresses the following issues: + - Fixes an issue where a PID namespace was always being used + - Fixes compilation on non 64-bit architectures + - Allows fakeroot builds for zypper, pacstrap, and debootstrap + - Correctly detects seccomp on OpenSUSE + - Honors GO_MODFLAGS properly in the mconfig generated makefile + - Passes the Mac hostname to the VM in MacOS Singularity builds + - Handles temporary EAGAIN failures when setting up loop devices on + recent kernels. + * Removed obsoleted patches: + - fix_build_in_32_bits.patch + - fix_flags_order.patch + +------------------------------------------------------------------- +Mon Sep 23 09:15:14 UTC 2019 - Ana Guerrero Lopez <[email protected]> + +- Fix build failure in i586. The patch is taken from upstream and should + be removed with the next release update. + * fix_build_in_32_bits.patch +------------------------------------------------------------------- +Tue Sep 3 14:39:35 UTC 2019 - Ana Guerrero Lopez <[email protected]> + +- New version 3.4.0. Many changes since 3.2.1, for the full changelog + please read CHANGELOG.md +- Add new BuildRequires on cryptsetup. +- Patches refreshed: + * build-position-independent-binaries.patch +- Patches removed, merged upstream: + * zypper-install-Fix-dbpath-for-newer-versions-of-SUSE-Linux.patch + * Handle-zypper-error-code-correctly.patch + * Support-multi-line-bootdef-settings.patch + * Add-support-for-numbered-variables.patch + * Improve-zypper-integration.patch + * Add-unit-tests-for-zypper-installation-on-SLE.patch + * Fix-pgp-key-version-strings-and-paths.patch +- Patches added, fix an issue with the flags order provided by the Makefile + * fix_flags_order.patch +------------------------------------------------------------------- +Sat Jul 20 18:20:40 UTC 2019 - Egbert Eich <[email protected]> + +- Fix-pgp-key-version-strings-and-paths.patch + Fixing pgp key, version strings and paths. + +------------------------------------------------------------------- +Tue Jun 11 14:49:00 UTC 2019 - Egbert Eich <[email protected]> + +- Update to version 3.2.1: + This point release fixes the following bugs: + * Allows users to join instances with non-suid workflow + * Removes false warning when seccomp is disabled on the host + * Fixes an issue in the terminal when piping output to commands + * Binds NVIDIA persistenced socket when `--nv` is invoked + +------------------------------------------------------------------- +Thu Jun 6 14:10:47 UTC 2019 - Egbert Eich <[email protected]> + +- Improve integration with SUSE Products: add support to create + Singularity images with SLE. + * build-position-independent-binaries.patch: + Make sure, the built binaries adhere to the packaging guidelines. + * zypper-install-Fix-dbpath-for-newer-versions-of-SUSE-Linux.patch: + Newer SUSE versions use a different path for the RPM database. + * Handle-zypper-error-code-correctly.patch: + When the installation succeeds by an installation scriptlet fails + zypper returns error code 107. Don't treat this as an error. + * Support-multi-line-bootdef-settings.patch: + In order to specify a repository GPG key, add support for + multi line variables. + * Add-support-for-numbered-variables.patch: + In order to specify a list of additional repos, add support + to 'indexed' variables. + * Improve-zypper-integration.patch: + Improve handling of SUSE repositires: + - For SLE, use SUSEConnect to get all product repos. + - Allow to specify a repository GPG key. + - Allow to specify additional installation repositories. + * Add-unit-tests-for-zypper-installation-on-SLE.patch + Add unit tests. + +------------------------------------------------------------------- +Sat May 18 15:42:45 UTC 2019 - Egbert Eich <[email protected]> + +- Add group 'singularity', fix ownerships. + +------------------------------------------------------------------- +Thu May 16 07:03:34 UTC 2019 - Egbert Eich <[email protected]> + +- Updated to singularity v3.2.0 + * [Security related fix](https://cve.mitre.org/cgi-bin/cvename.cgi?name=2019-11328) + Instance files are now stored in user's home directory for privacy and + many checks have been added to ensure that a user can't manipulate files + to change `starter-suid` behavior when instances are joined (many thanks + to Matthias Gerstner from the SUSE security team for finding and securely + reporting this vulnerability) + (CVE-2019-11328, bsc#1128598) + * New features / functionalities + - Introduced a new basic framework for creating and managing plugins + - Added the ability to create containers through multi-stage builds + - Created the concept of a Sylabs Cloud "remote" endpoint and added the + ability for users and admins to set them through CLI and conf files + - Added caching for images from Singularity Hub + - Made it possible to compile Singularity outside of `$GOPATH` + - Added a json partition to SIF files for OCI configuration when building + from an OCI source + - Full integration with Singularity desktop for MacOS code base + * New Commands + - Introduced the `plugin` command group for creating and managing plugins. + * Introduced the `remote` command group to support management of Singularity + endpoints. + * Added to the `key` command group to improve PGP key management. + * Added the `Stage: <name>` keyword to the definition file header and the + `from <stage name>` option/argument pair to the `%files` section to + support multistage builds + * Deprecated / removed commands + - The `--token/-t` option has been deprecated in favor of the `singularity + remote` command group + * Changed defaults / behaviors + - Ask to confirm password on a newly generated PGP key + - Prompt to push a key to the KeyStore when generated + - Refuse to push an unsigned container unless overridden with + `--allow-unauthenticated/-U` option + - Warn and prompt when pulling an unsigned container without the + `--allow-unauthenticated/-U` option + For more information check: + https://github.com/sylabs/singularity/blob/release-3.2/CHANGELOG.md +- Updated build-position-independent-binaries.patch + +------------------------------------------------------------------- +Tue Apr 9 09:59:13 UTC 2019 - Christian Goll <[email protected]> + +- building now non stripped version + +------------------------------------------------------------------- +Thu Apr 4 12:24:12 UTC 2019 - Christian Goll <[email protected]> + +- updated to singularity v3.1.1 + * New Commands + - New hidden `buildcfg` command to display compile-time parameters + - Added support for `LDFLAGS`, `CFLAGS`, `CGO_` variables in build system + - Added `--nocolor` flag to Singularity client to disable color in logging + * Removed Commands + `singularity capability <add/drop> --desc` has been removed + `singularity capability list <--all/--group/--user>` flags have all + been removed + * New features / functionalities + - The `--builder` flag to the `build` command implicitly sets `--remote` + - Repeated binds no longer cause Singularity to exit and fail, just warn + instead + - Corrected typos and improved docstrings throughout + - Removed warning when CWD does not exist on the host system + - Added support to spec file for RPM building on SLES 11 + +------------------------------------------------------------------- +Wed Mar 6 10:07:37 UTC 2019 - Christian Goll <[email protected]> + ++++ 34 more lines (skipped) ++++ between /work/SRC/openSUSE:Leap:15.2/singularity/singularity.changes ++++ and /work/SRC/openSUSE:Leap:15.2/.singularity.new.26092/singularity.changes Old: ---- _service singularity-2.6.1.tar.gz New: ---- build-position-independent-binaries.patch singularity-3.5.2.tar.gz useful_error_message.patch ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ singularity.spec ++++++ --- /var/tmp/diff_new_pack.pGbukv/_old 2020-02-14 17:58:16.686833520 +0100 +++ /var/tmp/diff_new_pack.pGbukv/_new 2020-02-14 17:58:16.686833520 +0100 @@ -1,7 +1,7 @@ # # spec file for package singularity # -# Copyright (c) 2018 SUSE LINUX GmbH, Nuernberg, Germany. +# Copyright (c) 2019 SUSE LLC # # All modifications and additions to the file contributed by third parties # remain the property of their copyright owners, unless otherwise agreed @@ -12,163 +12,156 @@ # license that conforms to the Open Source Definition (Version 1.9) # published by the Open Source Initiative. -# Please submit bugfixes or comments via http://bugs.opensuse.org/ +# Please submit bugfixes or comments via https://bugs.opensuse.org/ # -# -%define libsingularity libsingularity1 - -%define git_version 2.6.1 - -# slurm build broken -%define have_slurm 0 +%define singgopath src/github.com/sylabs/ +%define _buildshell /bin/bash -%define allow_suid 1 - -# for the perl git file parser to run, none of the -# macros used in the variables must contain shell code. -%define github_ref %{?git_sha}%{!?git_sha:%git_version} - -Name: singularity -Version: %git_version -Release: 0 Summary: Application and environment virtualization -License: BSD-3-Clause +License: BSD-3-Clause-LBNL Group: Productivity/Clustering/Computing -Url: http://singularity.lbl.gov/ -#Source: https://github.com/singularityware/%%{name}/tarball/%%{github_ref}#/%%{name}-%%{version}.tar.gz -Source: https://github.com/singularityware/%{name}/archive/%{github_ref}.tar.gz#/%{name}-%{version}.tar.gz +Name: singularity +Version: 3.5.2 +Release: 0 +# https://spdx.org/licenses/BSD-3-Clause-LBNL.html +URL: https://www.sylabs.io/singularity/ +Source0: https://github.com/sylabs/singularity/releases/download/v%{version}/singularity-%{version}.tar.gz Source1: README.SUSE -Source5: singularity-rpmlintrc -BuildRequires: autoconf -BuildRequires: automake -BuildRequires: libtool -%if 0%{?have_slurm} -BuildRequires: slurm-devel -%endif +Source5: %{name}-rpmlintrc +Patch0: build-position-independent-binaries.patch +Patch1: useful_error_message.patch +BuildRequires: cryptsetup BuildRequires: fdupes -BuildRequires: libarchive-devel -BuildRequires: python -%{?allow_suid:Requires(pre): shadow} -PreReq: permissions >= 20170922 -BuildRoot: %{_tmppath}/%{name}-%{version}-build +BuildRequires: gcc +BuildRequires: git +BuildRequires: go1.13 +BuildRequires: libuuid-devel +BuildRequires: make +BuildRequires: openssl-devel +%ifarch aarch64 +BuildRequires: binutils-gold +%endif +Requires: squashfs +PreReq: permissions + +# there's no golang for ppc64, just ppc64le +ExcludeArch: ppc64 + +Provides: %{name}-runtime %description -Singularity provides functionality to build the smallest most minimal -possible containers, and running those containers as single application -environments. - -%package devel -Summary: Development package for Singularity -Group: Development/Libraries/C and C++ -Requires: %{libsingularity} = %{version} -Requires: %{name} = %{version} - -%description devel -Development package for singularity. This package includes the header files -and libraries for the Singularity API. - -%package -n %{libsingularity} -Summary: Libraries for Singularity -Group: System/Libraries - -%description -n %{libsingularity} -This package contains the library needed to run programs dynamically linked -with Singularity. +Singularity provides functionality to make portable +containers that can be used across host environments. + %prep -%setup -q -n %{name}-%{github_ref} +%setup -q -n gopath/%{singgopath} -c +%patch0 -p 4 +%patch1 -p 4 cp %{S:1} . %build -./autogen.sh -%configure \ - %{!?allow_suid:--disable-suid} \ - --with-userns \ - --with-gnu-ld \ -%if 0%{?have_slurm} - --with-slurm -%endif - -make %{?_smp_mflags} CFLAGS+=-fPIE LDFLAGS+=-pie +export GOPATH=$PWD/gopath +export PATH=$GOPATH/bin:$PATH +cd %{name} + +# Not all of these parameters currently have an effect, but they might be +# used someday. They are the same parameters as in the configure macro. +./mconfig -V %{version}-%{release} \ + -P release \ + --prefix=%{_prefix} \ + --exec-prefix=%{_exec_prefix} \ + --bindir=%{_bindir} \ + --sbindir=%{_sbindir} \ + --sysconfdir=%{_sysconfdir} \ + --datadir=%{_datadir} \ + --includedir=%{_includedir} \ + --libdir=%{_libdir} \ + --libexecdir=%{_libexecdir} \ + --localstatedir=%{_localstatedir}/lib \ + --sharedstatedir=%{_sharedstatedir} \ + --mandir=%{_mandir} \ + --infodir=%{_infodir} +cd builddir +make V="" old_config= %install -%makeinstall -# remove static library stuff -rm -f %{buildroot}/%{_libdir}/%{name}/lib%{name}-*.a -rm -f %{buildroot}/%{_libdir}/%{name}/lib%{name}-*.la -# fix broken permissions -chmod a-x %{buildroot}/%{_libexecdir}/%{name}/python/docker/__init__.py -chmod a-x %{buildroot}/%{_libexecdir}/%{name}/python/__init__.py -mkdir -p %{buildroot}/%{_datadir}/bash-completion/completions/ -mv %{buildroot}/%{_sysconfdir}/bash_completion.d/%{name} \ - %{buildroot}/%{_datadir}/bash-completion/completions/%{name} -%fdupes %{buildroot} -for file in $(find %{buildroot}/%{_libexecdir} -name \*.py); do grep "/usr/bin/env" $file && sed -i 's@/usr/bin/env python@/usr/bin/python@' $file; done +export GOPATH=$PWD/gopath +export PATH=$GOPATH/bin:$PATH +cd %{name}/builddir + +mkdir -p $RPM_BUILD_ROOT%{_mandir}/man1 +make DESTDIR=$RPM_BUILD_ROOT install man +chmod 644 $RPM_BUILD_ROOT%{_sysconfdir}/singularity/actions/* +# move bash completion to the right place +mkdir -pv %{buildroot}/%{_datadir}/bash-completion/completions/ +mv %{buildroot}/%{_sysconfdir}/bash_completion.d/singularity \ + %{buildroot}/%{_datadir}/bash-completion/completions/ +cd ../.. +%fdupes singularity/examples +mkdir -p .tmp +for j in LICENSE.md LICENSE; do + for i in `find . -name $j`; do + k="`basename ${i/%\/$j/-$j}`" + if ! [[ $k =~ singularity-.* ]]; then + cp $i .tmp/$k + fi + done +done +%fdupes -s .tmp +mv .tmp/* . +rmdir .tmp -%post -n %{libsingularity} -p /sbin/ldconfig - -%postun -n %{libsingularity} -p /sbin/ldconfig - -%if 0%{allow_suid:1} %pre -getent group %{name} >/dev/null || groupadd -r %{name} +getent group singularity >/dev/null || groupadd -r singularity exit 0 %post -%set_permissions %{_libexecdir}/%{name}/bin/expand-suid -%set_permissions %{_libexecdir}/%{name}/bin/mount-suid -%set_permissions %{_libexecdir}/%{name}/bin/create-suid -%set_permissions %{_libexecdir}/%{name}/bin/action-suid -%set_permissions %{_libexecdir}/%{name}/bin/export-suid -%set_permissions %{_libexecdir}/%{name}/bin/import-suid -%set_permissions %{_libexecdir}/%{name}/bin/start-suid +%set_permissions %{_libexecdir}/singularity/bin/starter-suid %verifyscript -%verify_permissions %{_libexecdir}/%{name}/bin/expand-suid -%verify_permissions %{_libexecdir}/%{name}/bin/mount-suid -%verify_permissions %{_libexecdir}/%{name}/bin/create-suid -%verify_permissions %{_libexecdir}/%{name}/bin/action-suid -%verify_permissions %{_libexecdir}/%{name}/bin/export-suid -%verify_permissions %{_libexecdir}/%{name}/bin/import-suid -%set_permissions %{_libexecdir}/%{name}/bin/start-suid -%endif - -%if 0%{?sle_version} > 120200 || 0%{?suse_version} > 1320 -%define files_license %license -%else -%define files_license %doc -%endif +%set_permissions %{_libexecdir}/singularity/bin/starter-suid %files -%defattr(-,root,root) -%doc examples CONTRIBUTING.md README.md %{basename:%{S:1}} -%doc CONTRIBUTORS.md CHANGELOG.md LICENSE-LBNL.md -%files_license COPYRIGHT.md LICENSE.md -%attr(0755,root,root) %dir %{_sysconfdir}/%{name} -%config(noreplace) %{_sysconfdir}/%{name}/default-nsswitch.conf -%config(noreplace) %{_sysconfdir}/%{name}/init -%config(noreplace) %{_sysconfdir}/%{name}/%{name}.conf -%config(noreplace) %{_sysconfdir}/%{name}/nvliblist.conf -%{_datadir}/bash-completion/completions/%{name} -%{_bindir}/%{name} -%{_bindir}/run-%{name} -%{_libexecdir}/%{name} -%exclude %{_libdir}/%{name}/lib%{name}-*.so* -%{?allow_suid:%verify(not mode) %attr(4750,root,%{name}) %{_libexecdir}/%{name}/bin/*-suid} -%{_mandir}/man1/%{name}.1.gz -%{_var}/%{name} - -%files -n %{libsingularity} -%defattr(-,root,root) -%dir %{_libdir}/%{name} -%{_libdir}/%{name}/lib%{name}-*.so.* - -%files devel -%defattr(-,root,root) -%dir /usr/include/%{name} -/usr/include/%{name}/*.h -%{_libdir}/%{name}/lib%{name}-*.so +%doc singularity/examples +%doc singularity/CONTRIBUTING.md +%doc singularity/README.md +%doc singularity/CHANGELOG.md +%doc singularity/CONTRIBUTORS.md +%doc %{basename:%{S:1}} +%license singularity/LICENSE-LBNL.md +%license singularity/COPYRIGHT.md +%license singularity/LICENSE.md +%license *-LICENSE.md *-LICENSE +%attr(4750, root, singularity) %{_libexecdir}/singularity/bin/starter-suid +%{_bindir}/* +%dir %{_libexecdir}/singularity +%dir %{_libexecdir}/singularity/bin +%dir %{_libexecdir}/singularity/cni +%{_libexecdir}/singularity/bin/starter +%{_libexecdir}/singularity/cni/* +%dir %{_sysconfdir}/singularity +%dir %{_sysconfdir}/singularity/actions/ +%config(noreplace) %attr(755, root, singularity) %{_sysconfdir}/singularity/actions/exec +%config(noreplace) %attr(755, root, singularity) %{_sysconfdir}/singularity/actions/run +%config(noreplace) %attr(755, root, singularity) %{_sysconfdir}/singularity/actions/shell +%config(noreplace) %attr(755, root, singularity) %{_sysconfdir}/singularity/actions/start +%config(noreplace) %attr(755, root, singularity) %{_sysconfdir}/singularity/actions/test +%config(noreplace) %{_sysconfdir}/singularity/capability.json +%config(noreplace) %{_sysconfdir}/singularity/cgroups +%config(noreplace) %{_sysconfdir}/singularity/ecl.toml +%config(noreplace) %{_sysconfdir}/singularity/network +%config(noreplace) %{_sysconfdir}/singularity/nvliblist.conf +%config(noreplace) %{_sysconfdir}/singularity/seccomp-profiles +%config(noreplace) %{_sysconfdir}/singularity/singularity.conf +%config(noreplace) %{_sysconfdir}/singularity/remote.yaml +%config(noreplace) %{_sysconfdir}/singularity/rocmliblist.conf +%{_datadir}/bash-completion/completions/singularity +%dir %{_localstatedir}/lib/singularity +%dir %{_localstatedir}/lib/singularity/mnt +%dir %{_localstatedir}/lib/singularity/mnt/session +%{_mandir}/man1/* %changelog ++++++ README.SUSE ++++++ --- /var/tmp/diff_new_pack.pGbukv/_old 2020-02-14 17:58:16.730833546 +0100 +++ /var/tmp/diff_new_pack.pGbukv/_new 2020-02-14 17:58:16.730833546 +0100 @@ -1,9 +1,89 @@ -openSUSE/SUSE specific settings +openSUSE/SUSE specific Settings =============================== -Different from the upstream default, the SUID root binaries -are executible only by users belonging to the group 'singularity'. +openSUSE and SUSE have a small difference with upstream default. +This means the SUID root binaries distributed by singularty are +executable only by users belonging to the group 'singularity'. + +Otherwise, users will get an error message like this one: + +FATAL: while executing /usr/lib/singularity/bin/starter-suid: permission denied To add a user to the group singularity, execute (as root): # usermod -a -G singularity <user_login> + +Create Singularity Images from openSUSE/SLE +=========================================== + +To create openSUSE/SLE singularity images from scratch a number +of bootdef variables need to be specified: + +1. Create a bootdef file (for instance 'sle.def'), add + BootStrap: zypper +2. Set the OS version: + OSVersion: 15.0 + The version number corresponds to the Leap version or the + SLE version and service pack level: <version>.<service_pack_level> + Example: SLE-12 SP4 would be 12.4. + The inital release of a major version corresponds to + <service_pack_level> 0. +3. For openSUSE the following additional variables need to be + specified: + * MirrorURL: URL to the installation repository. + Check 'man 8 zypper' for supported formats + * UpdateURL: (optional) URI of the update repository +4. For SLE, all required settings are obtained from SCC. + The following variables are recognized: + * Product: The product code: The following forms may be + used: + <product_id> + <product_id>/<os_version> + <product_id>/<os_version>/<arch> + <product_id>: SLES, SLE-HPC (SLE-12), + SLE_HPC (SLE-15), SLED + <os_version>: optional, if ommitted, the value + of OSVersion will be used. + The variable %{OSVERSION} is + recognized and replaced by OSVersion. + <arch> : The architecture to use. Defaults + to 'uname -m'. + * User: The email a subscription is registed with SCC. + * Regcode: The SCC registration code provided with the subscription. + * ProductPGP: The PGP key used to sign the repositories. Each line must + be terminated with \n. Long lines may be broken using the + continuation character '\'. See below. + Note: this is not required when an installer repository is + provided with MirrorURL. + Beginning with version 15, the URI to the installer image needs to be + provided as well: + * MirrorURL: Repository containing the SLE Installer (see also above). + Since SLE-15 consists of modules, a list of modules to be used should + to be specified as well: + * Modules: Specify the modules in a comma separated list without + spaces. Example: + SLEModules: sle-module-basesystem,sle-module-server-applications,sle-module-web-scripting,sle-module-hpc + +ProductPGP +====== +SLEpgp: -----BEGIN PGP PUBLIC KEY BLOCK-----\n\ +Version: rpm-4.11.2 (NSS-3)\n\ +\n\ +mQENBFEKlmsBCADbpZZbbSC5Zi+HxCR/ynYsVxU5JNNiSSZabN5GMgc9Z0hxeXxp\n\ +YWvFoE/4n0+IXIsp83iKvxf06Eu8je/DXp0lMqDZu7WiT3XXAlkOPSNV4akHTDoY\n\ +91SJaZCpgUJ7K1QXOPABNbREsAMN1a7rxBowjNjBUyiTJ2YuvQRLtGdK1kExsVma\n\ +hieh/QxpoDyYd5w/aky3z23erCoEd+OPfAqEHd5tQIa6LOosa63BSCEl3milJ7J9\n\ +vDmoGPAoS6ui7S2R5X4/+PLN8Mm2kOBrFjhmL93LX0mrGCMxsNsKgP6zabYKQEb8\n\ +L028SXvl7EGoA+Vw5Vd3wIGbM73PfbgNrXjfABEBAAG0KFN1U0UgUGFja2FnZSBT\n\ +aWduaW5nIEtleSA8YnVpbGRAc3VzZS5kZT6JATwEEwECACYCGwMGCwkIBwMCBBUC\n\ +CAMEFgIDAQIeAQIXgAUCWEfrHwUJDsIitAAKCRBwr56BOdt8gpqUB/wPSSS5BcDu\n\ +Oi4n02cj4Hdt7WITKBjjo0lG1fXG1ppx1wOST+s8FertMVFY53TW6FGjcYtwVOIq\n\ +rsMYiV6kf1NxUV/jcAy7VmC5EZnO0R/D3sT4Oh5hsLtERauZolK5BZmd0S51Qa8e\n\ +TxZ5mX9PL2i3s/ShETc30drf83ugc7B4yZPNQWXNDPgGcC+hEeC5qw48RzHYIpUt\n\ +RzHmefR5Z3ioTUbDlzy+SGP2uA7mhR4Lfk/df5fYxWfCoKlyGjtrvA65cB+Pksyn\n\ +xrAeBuB+vBM+KnDrxW2Sn4AbWkzH//dfz9OJDJu4UM91hb7qxM0OkrXHQV3iNqzg\n\ +MDEhky/9NqMy\n\ +=GdP5\n\ +-----END PGP PUBLIC KEY BLOCK----- + + ++++++ build-position-independent-binaries.patch ++++++ Subject: build position independent binaries Date: 2019.12.13 --- src/github.com/sylabs/singularity/mlocal/frags/go_common_opts.mk | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/src/github.com/sylabs/singularity/mlocal/frags/go_common_opts.mk b/src/github.com/sylabs/singularity/mlocal/frags/go_common_opts.mk index 87359af..045563a 100644 --- a/src/github.com/sylabs/singularity/mlocal/frags/go_common_opts.mk +++ b/src/github.com/sylabs/singularity/mlocal/frags/go_common_opts.mk @@ -3,7 +3,7 @@ GO_TAGS := containers_image_openpgp sylog imgbuild_engine oci_engine singularity_engine fakeroot_engine GO_TAGS_SUID := containers_image_openpgp sylog singularity_engine fakeroot_engine GO_LDFLAGS := -GO_BUILDMODE := -buildmode=default +GO_BUILDMODE := -buildmode=pie GO_GCFLAGS := GO_ASMFLAGS := GO_MODFLAGS := $(if $(wildcard $(SOURCEDIR)/vendor/modules.txt),-mod=vendor,-mod=readonly) ++++++ singularity-2.6.1.tar.gz -> singularity-3.5.2.tar.gz ++++++ /work/SRC/openSUSE:Leap:15.2/singularity/singularity-2.6.1.tar.gz /work/SRC/openSUSE:Leap:15.2/.singularity.new.26092/singularity-3.5.2.tar.gz differ: char 5, line 1 ++++++ singularity-rpmlintrc ++++++ --- /var/tmp/diff_new_pack.pGbukv/_old 2020-02-14 17:58:16.786833579 +0100 +++ /var/tmp/diff_new_pack.pGbukv/_new 2020-02-14 17:58:16.786833579 +0100 @@ -1,5 +1,2 @@ -# This will be removed as soon as the update to -# devel:openSUSE:Factory:rpmlint/rpmlint is in -# Factory -addFilter(".*non-standard-gid.*") -addFilter(".*missing-call-to-chdir-with-chroot.*") +# Have the same binary with and without setuid bit +addFilter("files-duplicated-waste") ++++++ useful_error_message.patch ++++++ Subject: Add an useful error message when the user doesn't belong to the singularity group Date: 2019.12.19 diff -Nrua src/github.com/sylabs/singularity/internal/pkg/util/starter/starter.go src/github.com/sylabs/singularity/internal/pkg/util/starter/starter.go --- a/src/github.com/sylabs/singularity/internal/pkg/util/starter/starter.go 2019-12-03 23:07:06.000000000 +0100 +++ b/src/github.com/sylabs/singularity/internal/pkg/util/starter/starter.go 2019-12-18 00:48:35.670565337 +0100 @@ -90,7 +90,7 @@ return fmt.Errorf("while initializing starter command: %s", err) } err := unix.Exec(c.path, []string{name}, c.env) - return fmt.Errorf("while executing %s: %s", c.path, err) + return fmt.Errorf("while executing %s: %s\nPlease read /usr/share/doc/packages/singularity/README.SUSE to get help\n", c.path, err) } // Run executes the starter binary and returns once starter
