Hello community, here is the log from the commit of package kubernetes1.18 for openSUSE:Factory checked in at 2020-06-12 21:35:44 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/kubernetes1.18 (Old) and /work/SRC/openSUSE:Factory/.kubernetes1.18.new.3606 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "kubernetes1.18" Fri Jun 12 21:35:44 2020 rev:4 rq:813232 version:1.18.3 Changes: -------- --- /work/SRC/openSUSE:Factory/kubernetes1.18/kubernetes1.18.changes 2020-05-20 18:38:02.616303794 +0200 +++ /work/SRC/openSUSE:Factory/.kubernetes1.18.new.3606/kubernetes1.18.changes 2020-06-12 21:36:30.847582534 +0200 @@ -1,0 +2,57 @@ +Wed Jun 10 11:57:57 UTC 2020 - Richard Brown <[email protected]> + +- Remove %{?_smp_mflags} to make build more reliable [boo#1172744] + +------------------------------------------------------------------- +Wed Jun 10 03:52:54 UTC 2020 - Bernhard Wiedemann <[email protected]> + +- Add reproducible-buildid.patch to make package build reproducible + +------------------------------------------------------------------- +Tue Jun 09 14:41:32 UTC 2020 - [email protected] + +- Update to version 1.18.3: + * Move nfs-provisioner from quay.io/kubernetes_incubator to staging-csi + * Use staging-csi to work around quay.io availability + * Azure: support non-VMSS instances removal + * deps: Use debian-base:v2.1.0 and debian-iptables:v12.1.0 + * build: Add build-image OWNERS to debian-{base,iptables} and pause dirs + * count no nodes scheduling failure as unschedulable instead of error + * kubeadm: fix flakes when performing etcd MemberAdd on slower setups + * base-images: Update to kube-cross:v1.13.9-5 + * build: Alpha-sort dependencies.yaml + * fix: azure disk dangling attach issue + * kube-proxy: increase the session affinity timeout to ensure that the test passes in ipvs mode + * cluster: ipvs conntrack module vs kernel version + * allow k8s.io/kubernetes/third_party/forked/ipvs in e2e test framework import restrictions (transitive dep from pkg/kubemark) + * add license headers for third_party/forked/ipvs + * third_party/forked/ipvs: check the address family if the netlink address family attribute is not set + * run hack/update-vendor.sh to remove github.com/docker/libnetwork + * remove github.com/docker/libnetwork from go.mod + * update pkg/util/ipvs to use third_party/forked/ipvs + * move github.com/docker/libnetwork/ipvs to third_party/forked + * fix backoff manager timer initialization race + * fix: ACR auth fails in private azure clouds + * Restore cache-control header filter + * kube-scheduler: compatibility with ServerSideApply + * bugfix: initcontainer wasn't considered when calculate resource request + * fix: azure file csi migration failure + * Fix flaws in Azure CSI translation + * Revert "stop defaulting kubeconfig to http://localhost:8080"; + * Update CHANGELOG/CHANGELOG-1.18.md for v1.18.2 + * Fix Node initialization for GCP cloud provider + * Simplify unregistration of csiplugin + * Unregister csiplugin even if socket path is gone + * Move PSP tests behind a feature tag + * kube-openapi bump to release-1.18 + * Preserve int/float distinction when decoding raw values + * Check Annotations map against nil for ConfigMapLock#Update() + * Fix CSINodeInfo startup + * Wait for APIServer 'ok' forever during CSINode initialization during Kubelet init + +------------------------------------------------------------------- +Mon Jun 8 15:33:30 UTC 2020 - Richard Brown <[email protected]> + +- Add ConditionPathExists=/var/lib/kubelet/config.yaml to kubelet.service [boo#1146372] + +------------------------------------------------------------------- Old: ---- kubernetes-1.18.2.tar.xz New: ---- kubernetes-1.18.3.tar.xz reproducible-buildid.patch ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ kubernetes1.18.spec ++++++ --- /var/tmp/diff_new_pack.7DGCjU/_old 2020-06-12 21:36:33.411591961 +0200 +++ /var/tmp/diff_new_pack.7DGCjU/_new 2020-06-12 21:36:33.415591976 +0200 @@ -23,7 +23,7 @@ %define baseversion 1.18 Name: kubernetes%{baseversion} -Version: 1.18.2 +Version: 1.18.3 Release: 0 Summary: Container Scheduling and Management License: Apache-2.0 @@ -48,6 +48,8 @@ Patch3: opensuse-version-checks.patch # Patch to change the default flexvolume path in kubeadm to match that used by our kubelet, else kubeadm tries to write to /usr when kubelet is already looking at a path on /var thanks to the fix to bsc#1084766 Patch4: kubeadm-opensuse-flexvolume.patch +# PATCH-FIX-UPSTREAM https://github.com/kubernetes/kubernetes/pull/89136 +Patch5: reproducible-buildid.patch BuildRequires: bash-completion BuildRequires: fdupes BuildRequires: git @@ -170,6 +172,7 @@ %patch2 -p0 %patch3 -p1 %patch4 -p0 +%patch5 -p1 %build # This is fixing bug bsc#1065972 @@ -185,7 +188,7 @@ %endif #TEST -make %{?_smp_mflags} WHAT="cmd/kube-apiserver cmd/kube-controller-manager cmd/kube-scheduler cmd/kube-proxy cmd/kubelet cmd/kubectl cmd/kubeadm" GOFLAGS="-buildmode=pie" +make WHAT="cmd/kube-apiserver cmd/kube-controller-manager cmd/kube-scheduler cmd/kube-proxy cmd/kubelet cmd/kubectl cmd/kubeadm" GOFLAGS="-buildmode=pie" # The majority of the documentation has already been moved into # http://kubernetes.io/docs/admin, and most of the files stored in the `docs` ++++++ _service ++++++ --- /var/tmp/diff_new_pack.7DGCjU/_old 2020-06-12 21:36:33.491592255 +0200 +++ /var/tmp/diff_new_pack.7DGCjU/_new 2020-06-12 21:36:33.491592255 +0200 @@ -3,8 +3,8 @@ <param name="url">https://github.com/kubernetes/kubernetes.git</param> <param name="scm">git</param> <param name="exclude">.git</param> - <param name="versionformat">1.18.2</param> - <param name="revision">v1.18.2</param> + <param name="versionformat">1.18.3</param> + <param name="revision">v1.18.3</param> <param name="changesgenerate">enable</param> </service> <service name="tar" mode="disabled"/> ++++++ _servicedata ++++++ --- /var/tmp/diff_new_pack.7DGCjU/_old 2020-06-12 21:36:33.515592344 +0200 +++ /var/tmp/diff_new_pack.7DGCjU/_new 2020-06-12 21:36:33.515592344 +0200 @@ -1,4 +1,4 @@ <servicedata> <service name="tar_scm"> <param name="url">https://github.com/kubernetes/kubernetes.git</param> - <param name="changesrevision">a78cd082e8c9130278da04e3583d16b10930a922</param></service></servicedata> \ No newline at end of file + <param name="changesrevision">d6e40f410ca91c47daa4649bbb34801aa7c7cb5a</param></service></servicedata> \ No newline at end of file ++++++ kubelet.service ++++++ --- /var/tmp/diff_new_pack.7DGCjU/_old 2020-06-12 21:36:33.571592550 +0200 +++ /var/tmp/diff_new_pack.7DGCjU/_new 2020-06-12 21:36:33.571592550 +0200 @@ -3,6 +3,7 @@ Documentation=https://kubernetes.io/docs/ After=network.target network-online.target Wants=docker.service crio.service +ConditionPathExists=/var/lib/kubelet/config.yaml [Service] ExecStartPre=/bin/bash -c "findmnt -t bpf --mountpoint /sys/fs/bpf || mount bpffs /sys/fs/bpf -t bpf" ++++++ kubernetes-1.18.2.tar.xz -> kubernetes-1.18.3.tar.xz ++++++ /work/SRC/openSUSE:Factory/kubernetes1.18/kubernetes-1.18.2.tar.xz /work/SRC/openSUSE:Factory/.kubernetes1.18.new.3606/kubernetes-1.18.3.tar.xz differ: char 25, line 1 ++++++ kubernetes.obsinfo ++++++ --- /var/tmp/diff_new_pack.7DGCjU/_old 2020-06-12 21:36:33.635592785 +0200 +++ /var/tmp/diff_new_pack.7DGCjU/_new 2020-06-12 21:36:33.635592785 +0200 @@ -1,5 +1,5 @@ name: kubernetes -version: 1.18.2 -mtime: 1587037663 -commit: 52c56ce7a8272c798dbc29846288d7cd9fbae032 +version: 1.18.3 +mtime: 1589978560 +commit: 2e7996e3e2712684bc73f0dec0200d64eec7fe40 ++++++ reproducible-buildid.patch ++++++ https://github.com/kubernetes/kubernetes/pull/89136 >From d70d04f92b0bcc277c759c3bfb05cb1ec911b500 Mon Sep 17 00:00:00 2001 From: Davanum Srinivas <[email protected]> Date: Sun, 15 Mar 2020 20:39:34 -0400 Subject: [PATCH] zero out the build id for reproducible builds We have been having issues with making builds reproducible, especially with the `.note.go.buildid` ELF section. One tip from a golang issue was to set `-ldflags=-buildid=` which seems to work well. You can confirm that the buildid is set to empty by inspecting the binaries with the go command example `go tool buildid _output/local/go/bin/kubectl` Signed-off-by: Davanum Srinivas <[email protected]> --- hack/lib/golang.sh | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/hack/lib/golang.sh b/hack/lib/golang.sh index b646bbe2edfdc..f1c0a3e10ef7a 100755 --- a/hack/lib/golang.sh +++ b/hack/lib/golang.sh @@ -784,7 +784,7 @@ kube::golang::build_binaries() { # Disable SC2153 for this, as it will throw a warning that the local # variable goldflags will exist, and it suggest changing it to this. # shellcheck disable=SC2153 - goldflags="${GOLDFLAGS=-s -w} $(kube::version::ldflags)" + goldflags="${GOLDFLAGS=-s -w -buildid=} $(kube::version::ldflags)" goasmflags="-trimpath=${KUBE_ROOT}" gogcflags="${GOGCFLAGS:-} -trimpath=${KUBE_ROOT}"
