Hello community, here is the log from the commit of package charliecloud for openSUSE:Factory checked in at 2020-08-24 15:10:22 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/charliecloud (Old) and /work/SRC/openSUSE:Factory/.charliecloud.new.3399 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "charliecloud" Mon Aug 24 15:10:22 2020 rev:13 rq:828564 version:0.18 Changes: -------- --- /work/SRC/openSUSE:Factory/charliecloud/charliecloud.changes 2020-06-26 21:50:28.122797523 +0200 +++ /work/SRC/openSUSE:Factory/.charliecloud.new.3399/charliecloud.changes 2020-08-24 15:11:50.546649585 +0200 @@ -1,0 +2,25 @@ +Fri Aug 21 13:08:31 UTC 2020 - Ana Guerrero Lopez <aguerr...@suse.com> + +- Update to version 0.18 + - Fixes an important symlink handling bug in ch-tug and ch-grow. + Prior to version 0.18, if a pulled image contained a symlink in one + layer and then a regular file at the same path in a subsequent layer, + the *target* of the symlink would be overwritten even if it was + not within the image; i.e., unpacking inappropriately followed + the symlink. This allows a crafted image to overwrite any file + writeable by the invoking user. + Because Charliecloud is unprivileged, other files on the system, + e.g. system files, are unaffected. + - ch-grow: --version and --help work w/o dependencies installed + new switch --list to list images + now gives diagnostics for syntax errors and unsupported instructions + WORKDIR now supports relative paths (#786) + no longer crashes if input doesn’t end in newline (#474) + - miscellaneous bug fixes and improvements + - Full changelogs at https://groups.io/g/charliecloud/message/104 + and https://groups.io/g/charliecloud/message/105 +- Replace python2-base with python3-base. +- Update recommends used by ch-grow/ch-build +- Readd patch for hardcoded paths: + * Replace-hardcode-path.patch +------------------------------------------------------------------- Old: ---- charliecloud-0.16.tar.gz New: ---- Replace-hardcode-path.patch charliecloud-0.18.tar.gz ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ charliecloud.spec ++++++ --- /var/tmp/diff_new_pack.o8dUF7/_old 2020-08-24 15:11:54.918651715 +0200 +++ /var/tmp/diff_new_pack.o8dUF7/_new 2020-08-24 15:11:54.922651717 +0200 @@ -17,18 +17,24 @@ Name: charliecloud -Version: 0.16 +Version: 0.18 Release: 0 Summary: User-defined software stacks (UDSS) for HPC centers License: Apache-2.0 Group: Productivity/Clustering/Computing URL: https://hpc.github.io/charliecloud/ Source0: https://github.com/hpc/charliecloud/releases/download/v%{version}/%{name}-%{version}.tar.gz -BuildRequires: python2-base -# Docker and buildah are not needed to run charliecloud but can be +Patch0: Replace-hardcode-path.patch +BuildRequires: python3-base +# Recommend for ch-grow # used to build images Recommends: docker Recommends: buildah >= 1.11.2 +Recommends: python3-requests >= 2.6.0 +Recommends: squashfs >= 4.2 +%if !(0%{?sle_version} <= 120400 && 0%{?is_backports}) +Recommends: python3-lark-parser >= 0.7.1 +%endif # Build the documentation %if !(0%{?sle_version} <= 120400 && 0%{?is_backports}) BuildRequires: python3-Sphinx @@ -73,6 +79,7 @@ %prep %setup -q +%patch0 -p 1 %build %configure --disable-test ++++++ Replace-hardcode-path.patch ++++++ From: Ana Guerrero Lopez <aguerr...@suse.com> Date: Fri 21 Aug 2020 18:45:33 CEST Subject: [PATCH] Replace hardcoded ../lib/charliecloud All the resulting binaries and script will try to look for extra scripts in /usr/lib/charliecloud while it should be /usr/lib64/charliecloud diff -Nrua charliecloud-0.18/bin/ch-build charliecloud-0.18/bin/ch-build --- charliecloud-0.18/bin/ch-build 2020-05-20 21:11:36.000000000 +0200 +++ charliecloud-0.18/bin/ch-build 2020-08-21 19:39:02.977368081 +0200 @@ -1,6 +1,6 @@ #!/bin/sh -lib=$(cd "$(dirname "$0")" && pwd)/../lib/charliecloud +lib=/usr/lib64/charliecloud . "${lib}/base.sh" # shellcheck disable=SC2034 diff -Nrua charliecloud-0.18/bin/ch-build2dir charliecloud-0.18/bin/ch-build2dir --- charliecloud-0.18/bin/ch-build2dir 2020-05-20 21:11:36.000000000 +0200 +++ charliecloud-0.18/bin/ch-build2dir 2020-08-21 19:39:05.049368128 +0200 @@ -1,6 +1,6 @@ #!/bin/bash -lib=$(cd "$(dirname "$0")" && pwd)/../lib/charliecloud +lib=/usr/lib64/charliecloud . "${lib}/base.sh" # shellcheck disable=SC2034 diff -Nrua charliecloud-0.18/bin/ch-builder2squash charliecloud-0.18/bin/ch-builder2squash --- charliecloud-0.18/bin/ch-builder2squash 2020-05-20 21:11:36.000000000 +0200 +++ charliecloud-0.18/bin/ch-builder2squash 2020-08-21 19:39:07.589368184 +0200 @@ -1,6 +1,6 @@ #!/bin/sh -lib=$(cd "$(dirname "$0")" && pwd)/../lib/charliecloud +lib=/usr/lib64/charliecloud . "${lib}/base.sh" # shellcheck disable=SC2034 diff -Nrua charliecloud-0.18/bin/ch-builder2tar charliecloud-0.18/bin/ch-builder2tar --- charliecloud-0.18/bin/ch-builder2tar 2020-08-11 00:11:18.000000000 +0200 +++ charliecloud-0.18/bin/ch-builder2tar 2020-08-21 19:39:10.305368245 +0200 @@ -1,6 +1,6 @@ #!/bin/sh -lib=$(cd "$(dirname "$0")" && pwd)/../lib/charliecloud +lib=/usr/lib64/charliecloud . "${lib}/base.sh" # shellcheck disable=SC2034 diff -Nrua charliecloud-0.18/bin/ch-dir2squash charliecloud-0.18/bin/ch-dir2squash --- charliecloud-0.18/bin/ch-dir2squash 2020-05-20 21:11:36.000000000 +0200 +++ charliecloud-0.18/bin/ch-dir2squash 2020-08-21 19:41:47.140625456 +0200 @@ -2,7 +2,7 @@ set -e -lib=$(cd "$(dirname "$0")" && pwd)/../lib/charliecloud +lib=/usr/lib64/charliecloud . "${lib}/base.sh" # shellcheck disable=SC2034 diff -Nrua charliecloud-0.18/bin/ch-fromhost charliecloud-0.18/bin/ch-fromhost --- charliecloud-0.18/bin/ch-fromhost 2020-05-20 21:11:36.000000000 +0200 +++ charliecloud-0.18/bin/ch-fromhost 2020-08-21 19:39:16.765368390 +0200 @@ -35,7 +35,7 @@ # 3. Here string, e.g. 'while IFS= read -r FILE; do ... done <<< "$FILES"'. # This is a bashism. -lib=$(cd "$(dirname "$0")" && pwd)/../lib/charliecloud +lib=/usr/lib64/charliecloud . "${lib}/base.sh" set -e diff -Nrua charliecloud-0.18/bin/ch-grow.py.in charliecloud-0.18/bin/ch-grow.py.in --- charliecloud-0.18/bin/ch-grow.py.in 2020-08-19 01:04:31.000000000 +0200 +++ charliecloud-0.18/bin/ch-grow.py.in 2020-08-21 19:39:50.505369144 +0200 @@ -12,8 +12,7 @@ import shutil import sys -sys.path.insert(0, ( os.path.dirname(os.path.abspath(__file__)) - + "/../lib/charliecloud")) +sys.path.insert(0, ("/usr/lib64/charliecloud")) import charliecloud as ch diff -Nrua charliecloud-0.18/bin/ch-mount charliecloud-0.18/bin/ch-mount --- charliecloud-0.18/bin/ch-mount 2020-05-20 21:11:36.000000000 +0200 +++ charliecloud-0.18/bin/ch-mount 2020-08-21 19:39:54.565369235 +0200 @@ -1,6 +1,6 @@ #!/bin/sh -lib=$(cd "$(dirname "$0")" && pwd)/../lib/charliecloud +lib=/usr/lib64/charliecloud . "${lib}/base.sh" # shellcheck disable=SC2034 diff -Nrua charliecloud-0.18/bin/ch-pull2dir charliecloud-0.18/bin/ch-pull2dir --- charliecloud-0.18/bin/ch-pull2dir 2020-08-11 00:11:18.000000000 +0200 +++ charliecloud-0.18/bin/ch-pull2dir 2020-08-21 19:39:57.109369292 +0200 @@ -1,6 +1,6 @@ #!/bin/sh -lib=$(cd "$(dirname "$0")" && pwd)/../lib/charliecloud +lib=/usr/lib64/charliecloud . "${lib}/base.sh" set -e diff -Nrua charliecloud-0.18/bin/ch-pull2tar charliecloud-0.18/bin/ch-pull2tar --- charliecloud-0.18/bin/ch-pull2tar 2020-05-20 21:11:36.000000000 +0200 +++ charliecloud-0.18/bin/ch-pull2tar 2020-08-21 19:39:59.781369352 +0200 @@ -1,6 +1,6 @@ #!/bin/sh -lib=$(cd "$(dirname "$0")" && pwd)/../lib/charliecloud +lib=/usr/lib64/charliecloud . "${lib}/base.sh" set -e diff -Nrua charliecloud-0.18/bin/ch-run-oci.py.in charliecloud-0.18/bin/ch-run-oci.py.in --- charliecloud-0.18/bin/ch-run-oci.py.in 2020-08-19 01:04:31.000000000 +0200 +++ charliecloud-0.18/bin/ch-run-oci.py.in 2020-08-21 19:40:46.149370389 +0200 @@ -13,8 +13,7 @@ import time import types -sys.path.insert(0, ( os.path.dirname(os.path.abspath(__file__)) - + "/../lib/charliecloud")) +sys.path.insert(0, ("/usr/lib64/charliecloud")) import version diff -Nrua charliecloud-0.18/bin/ch-tar2dir charliecloud-0.18/bin/ch-tar2dir --- charliecloud-0.18/bin/ch-tar2dir 2020-05-20 21:11:36.000000000 +0200 +++ charliecloud-0.18/bin/ch-tar2dir 2020-08-21 19:40:23.393369880 +0200 @@ -2,7 +2,7 @@ set -e -lib=$(cd "$(dirname "$0")" && pwd)/../lib/charliecloud +lib=/usr/lib64/charliecloud . "${lib}/base.sh" # shellcheck disable=SC2034 diff -Nrua charliecloud-0.18/bin/ch-test charliecloud-0.18/bin/ch-test --- charliecloud-0.18/bin/ch-test 2020-08-11 00:11:18.000000000 +0200 +++ charliecloud-0.18/bin/ch-test 2020-08-21 19:40:28.321369990 +0200 @@ -20,7 +20,7 @@ ### Setup -lib=$(cd "$(dirname "$0")" && pwd)/../lib/charliecloud +lib=/usr/lib64/charliecloud if [[ ! -f ${lib}/base.sh ]]; then fatal "install or build problem: not found: ${lib}/base.sh" fi diff -Nrua charliecloud-0.18/bin/ch-tug.py.in charliecloud-0.18/bin/ch-tug.py.in --- charliecloud-0.18/bin/ch-tug.py.in 2020-08-11 00:11:18.000000000 +0200 +++ charliecloud-0.18/bin/ch-tug.py.in 2020-08-21 19:40:54.201370569 +0200 @@ -4,8 +4,7 @@ import os import sys -sys.path.insert(0, ( os.path.dirname(os.path.abspath(__file__)) - + "/../lib/charliecloud")) +sys.path.insert(0, ("/usr/lib64/charliecloud")) import charliecloud as ch diff -Nrua charliecloud-0.18/bin/ch-umount charliecloud-0.18/bin/ch-umount --- charliecloud-0.18/bin/ch-umount 2020-05-20 21:11:36.000000000 +0200 +++ charliecloud-0.18/bin/ch-umount 2020-08-21 19:40:33.345370103 +0200 @@ -1,6 +1,6 @@ #!/bin/sh -lib=$(cd "$(dirname "$0")" && pwd)/../lib/charliecloud +lib=/usr/lib64/charliecloud . "${lib}/base.sh" # shellcheck disable=SC2034 diff -Nrua charliecloud-0.18.orig/lib/base.sh charliecloud-0.18/lib/base.sh --- charliecloud-0.18/lib/base.sh 2020-08-11 00:11:18.000000000 +0200 +++ charliecloud-0.18/lib/base.sh 2020-08-21 19:58:14.470325969 +0200 @@ -6,7 +6,7 @@ # shellcheck disable=SC2034 ch_base=${ch_bin%/*} -lib="${ch_bin}/../lib/charliecloud" +lib="/usr/lib64/charliecloud" . "${lib}/version.sh" ++++++ charliecloud-0.16.tar.gz -> charliecloud-0.18.tar.gz ++++++ ++++ 4535 lines of diff (skipped)
