Hello community, here is the log from the commit of package kubernetes1.17 for openSUSE:Factory checked in at 2020-06-12 21:35:31 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/kubernetes1.17 (Old) and /work/SRC/openSUSE:Factory/.kubernetes1.17.new.3606 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "kubernetes1.17" Fri Jun 12 21:35:31 2020 rev:5 rq:813231 version:1.17.6 Changes: -------- --- /work/SRC/openSUSE:Factory/kubernetes1.17/kubernetes1.17.changes 2020-06-05 20:09:36.801622326 +0200 +++ /work/SRC/openSUSE:Factory/.kubernetes1.17.new.3606/kubernetes1.17.changes 2020-06-12 21:36:03.763482953 +0200 @@ -1,0 +2,42 @@ +Wed Jun 10 11:57:57 UTC 2020 - Richard Brown <[email protected]> + +- Add reproducible-buildid.patch to make package build reproducible +- Remove %{?_smp_mflags} to make build more reliable [boo#1172744] + +------------------------------------------------------------------- +Tue Jun 09 14:41:36 UTC 2020 - [email protected] + +- Update to version 1.17.6: + * Azure: support non-VMSS instances removal + * deps: Use debian-base:v2.1.0 and debian-iptables:v12.1.0 + * build: Add build-image OWNERS to debian-{base,iptables} and pause dirs + * count no nodes scheduling failure as unschedulable instead of error + * base-images: Update to kube-cross:v1.13.9-5 + * build: Alpha-sort dependencies.yaml + * Work-around for missing metrics on CRI-O exited containers + * fix: azure disk dangling attach issue + * fix: ACR auth fails in private azure clouds + * Restore cache-control header filter + * bugfix: initcontainer wasn't considered when calculate resource request + * fix: azure file csi migration failure + * Fix flaws in Azure CSI translation + * Update CHANGELOG/CHANGELOG-1.17.md for v1.17.5 + * Move PSP tests behind a feature tag + * Fix code for 1.17 + * kube-openapi bump to release-1.17 + * Do not reset managedFields in status update strategy + * Use discovery to test apply all status + * Preserve int/float distinction when decoding raw values + * All check for instanceID + * Fix AWS eventual consistency of AttachDisk + * fix: update max azure disk max count + * Fix cherry-pick errors + * Fix CSINodeInfo startup + * Wait for APIServer 'ok' forever during CSINode initialization during Kubelet init + +------------------------------------------------------------------- +Mon Jun 8 15:33:30 UTC 2020 - Richard Brown <[email protected]> + +- Add ConditionPathExists=/var/lib/kubelet/config.yaml to kubelet.service [boo#1146372] + +------------------------------------------------------------------- Old: ---- kubernetes-1.17.5.tar.xz New: ---- kubernetes-1.17.6.tar.xz reproducible-buildid.patch ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ kubernetes1.17.spec ++++++ --- /var/tmp/diff_new_pack.7EoD6S/_old 2020-06-12 21:36:09.551504233 +0200 +++ /var/tmp/diff_new_pack.7EoD6S/_new 2020-06-12 21:36:09.555504248 +0200 @@ -23,7 +23,7 @@ %define baseversion 1.17 Name: kubernetes%{baseversion} -Version: 1.17.5 +Version: 1.17.6 Release: 0 Summary: Container Scheduling and Management License: Apache-2.0 @@ -48,6 +48,8 @@ Patch3: opensuse-version-checks.patch # Patch to change the default flexvolume path in kubeadm to match that used by our kubelet, else kubeadm tries to write to /usr when kubelet is already looking at a path on /var thanks to the fix to bsc#1084766 Patch4: kubeadm-opensuse-flexvolume.patch +# PATCH-FIX-UPSTREAM https://github.com/kubernetes/kubernetes/pull/89136 +Patch5: reproducible-buildid.patch BuildRequires: bash-completion BuildRequires: fdupes BuildRequires: git @@ -171,6 +173,7 @@ %patch2 -p0 %patch3 -p1 %patch4 -p0 +%patch5 -p1 %build # This is fixing bug bsc#1065972 @@ -186,7 +189,7 @@ %endif #TEST -make %{?_smp_mflags} WHAT="cmd/kube-apiserver cmd/kube-controller-manager cmd/kube-scheduler cmd/kube-proxy cmd/kubelet cmd/kubectl cmd/kubeadm" GOFLAGS="-buildmode=pie" +make WHAT="cmd/kube-apiserver cmd/kube-controller-manager cmd/kube-scheduler cmd/kube-proxy cmd/kubelet cmd/kubectl cmd/kubeadm" GOFLAGS="-buildmode=pie" # The majority of the documentation has already been moved into # http://kubernetes.io/docs/admin, and most of the files stored in the `docs` ++++++ _service ++++++ --- /var/tmp/diff_new_pack.7EoD6S/_old 2020-06-12 21:36:09.635504542 +0200 +++ /var/tmp/diff_new_pack.7EoD6S/_new 2020-06-12 21:36:09.639504557 +0200 @@ -3,8 +3,8 @@ <param name="url">https://github.com/kubernetes/kubernetes.git</param> <param name="scm">git</param> <param name="exclude">.git</param> - <param name="versionformat">1.17.5</param> - <param name="revision">v1.17.5</param> + <param name="versionformat">1.17.6</param> + <param name="revision">v1.17.6</param> <param name="changesgenerate">enable</param> </service> <service name="tar" mode="disabled"/> ++++++ _servicedata ++++++ --- /var/tmp/diff_new_pack.7EoD6S/_old 2020-06-12 21:36:09.659504630 +0200 +++ /var/tmp/diff_new_pack.7EoD6S/_new 2020-06-12 21:36:09.659504630 +0200 @@ -1,4 +1,4 @@ <servicedata> <service name="tar_scm"> <param name="url">https://github.com/kubernetes/kubernetes.git</param> - <param name="changesrevision">a04e7d7c202142040c5dd3955fe55f8706f37056</param></service></servicedata> \ No newline at end of file + <param name="changesrevision">fd4285294a6370423794fb47505119e88314cf94</param></service></servicedata> \ No newline at end of file ++++++ kubelet.service ++++++ --- /var/tmp/diff_new_pack.7EoD6S/_old 2020-06-12 21:36:09.723504866 +0200 +++ /var/tmp/diff_new_pack.7EoD6S/_new 2020-06-12 21:36:09.723504866 +0200 @@ -3,6 +3,7 @@ Documentation=https://kubernetes.io/docs/ After=network.target network-online.target Wants=docker.service crio.service +ConditionPathExists=/var/lib/kubelet/config.yaml [Service] ExecStartPre=/bin/bash -c "findmnt -t bpf --mountpoint /sys/fs/bpf || mount bpffs /sys/fs/bpf -t bpf" ++++++ kubernetes-1.17.5.tar.xz -> kubernetes-1.17.6.tar.xz ++++++ /work/SRC/openSUSE:Factory/kubernetes1.17/kubernetes-1.17.5.tar.xz /work/SRC/openSUSE:Factory/.kubernetes1.17.new.3606/kubernetes-1.17.6.tar.xz differ: char 25, line 1 ++++++ kubernetes.obsinfo ++++++ --- /var/tmp/diff_new_pack.7EoD6S/_old 2020-06-12 21:36:09.811505189 +0200 +++ /var/tmp/diff_new_pack.7EoD6S/_new 2020-06-12 21:36:09.815505204 +0200 @@ -1,5 +1,5 @@ name: kubernetes -version: 1.17.5 -mtime: 1587036897 -commit: e0fccafd69541e3750d460ba0f9743b90336f24f +version: 1.17.6 +mtime: 1589980065 +commit: d32e40e20d167e103faf894261614c5b45c44198 ++++++ reproducible-buildid.patch ++++++ https://github.com/kubernetes/kubernetes/pull/89136 >From d70d04f92b0bcc277c759c3bfb05cb1ec911b500 Mon Sep 17 00:00:00 2001 From: Davanum Srinivas <[email protected]> Date: Sun, 15 Mar 2020 20:39:34 -0400 Subject: [PATCH] zero out the build id for reproducible builds We have been having issues with making builds reproducible, especially with the `.note.go.buildid` ELF section. One tip from a golang issue was to set `-ldflags=-buildid=` which seems to work well. You can confirm that the buildid is set to empty by inspecting the binaries with the go command example `go tool buildid _output/local/go/bin/kubectl` Signed-off-by: Davanum Srinivas <[email protected]> --- hack/lib/golang.sh | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/hack/lib/golang.sh b/hack/lib/golang.sh index b646bbe2edfdc..f1c0a3e10ef7a 100755 --- a/hack/lib/golang.sh +++ b/hack/lib/golang.sh @@ -784,7 +784,7 @@ kube::golang::build_binaries() { # Disable SC2153 for this, as it will throw a warning that the local # variable goldflags will exist, and it suggest changing it to this. # shellcheck disable=SC2153 - goldflags="${GOLDFLAGS=-s -w} $(kube::version::ldflags)" + goldflags="${GOLDFLAGS=-s -w -buildid=} $(kube::version::ldflags)" goasmflags="-trimpath=${KUBE_ROOT}" gogcflags="${GOGCFLAGS:-} -trimpath=${KUBE_ROOT}"
