[lxc-devel] [lxc/lxc] e00f9e: lxc-alpine: fix verification of apk.static binary
Branch: refs/heads/master Home: https://github.com/lxc/lxc Commit: e00f9e4e7ab5a76cfd4068e09579f9f471666a90 https://github.com/lxc/lxc/commit/e00f9e4e7ab5a76cfd4068e09579f9f471666a90 Author: Natanael Copa nc...@alpinelinux.org Date: 2015-08-04 (Tue, 04 Aug 2015) Changed paths: M templates/lxc-alpine.in Log Message: --- lxc-alpine: fix verification of apk.static binary We need specify which hashing algorithm was used to create the signature we check. Fixes #609 Signed-off-by: Natanael Copa nc...@alpinelinux.org Acked-by: Stéphane Graber stgra...@ubuntu.com ___ lxc-devel mailing list lxc-devel@lists.linuxcontainers.org http://lists.linuxcontainers.org/listinfo/lxc-devel
[lxc-devel] [lxc/lxc] 996d77: doc: Update Korean lxc-usernet(5) for supporting u...
Branch: refs/heads/master Home: https://github.com/lxc/lxc Commit: 996d777025067b255e9ababc68d879294b1da468 https://github.com/lxc/lxc/commit/996d777025067b255e9ababc68d879294b1da468 Author: Sungbae Yoo sungbae@samsung.com Date: 2015-08-04 (Tue, 04 Aug 2015) Changed paths: M doc/ko/lxc-usernet.sgml.in Log Message: --- doc: Update Korean lxc-usernet(5) for supporting usergroups Update for commit 1940bff Signed-off-by: Sungbae Yoo sungbae@samsung.com Commit: 347597fa536bf3c6d9faf7fa3cb8da01f831398e https://github.com/lxc/lxc/commit/347597fa536bf3c6d9faf7fa3cb8da01f831398e Author: Sungbae Yoo sungbae@samsung.com Date: 2015-08-04 (Tue, 04 Aug 2015) Changed paths: M doc/ko/lxc-ls.sgml.in Log Message: --- doc: Add the description for -P and --version to Korean lxc-ls(1) Update for commit 2cf7c05 Signed-off-by: Sungbae Yoo sungbae@samsung.com Commit: 2aeb28ec17b8973de3b0d52463f661985a6332d6 https://github.com/lxc/lxc/commit/2aeb28ec17b8973de3b0d52463f661985a6332d6 Author: Sungbae Yoo sungbae@samsung.com Date: 2015-08-04 (Tue, 04 Aug 2015) Changed paths: M doc/ko/common_options.sgml.in Log Message: --- doc: Add the description for --version to Korean common_options Update for commit 7cab33b Signed-off-by: Sungbae Yoo sungbae@samsung.com Commit: b076d08b90329019589f9ba71493c9754aa14b20 https://github.com/lxc/lxc/commit/b076d08b90329019589f9ba71493c9754aa14b20 Author: Stéphane Graber stgra...@stgraber.org Date: 2015-08-04 (Tue, 04 Aug 2015) Changed paths: M doc/ko/common_options.sgml.in M doc/ko/lxc-ls.sgml.in M doc/ko/lxc-usernet.sgml.in Log Message: --- Merge pull request #613 from ysbnim/master Update Korean manuals Compare: https://github.com/lxc/lxc/compare/bfec108c772d...b076d08b9032___ lxc-devel mailing list lxc-devel@lists.linuxcontainers.org http://lists.linuxcontainers.org/listinfo/lxc-devel
[lxc-devel] Extending lxc_arguments struct
Hi Serge, hi Stéphane, currently the struct lxc_arguments lacks quite a few options which are required by e.g. lxc-snapshot and lxc-clone which leads to a non-uniform implementation of some of the executables. Would you be open to adding new members to the lxc_arguments struct in order to rewrite some of the executables? Best, Christian signature.asc Description: PGP signature ___ lxc-devel mailing list lxc-devel@lists.linuxcontainers.org http://lists.linuxcontainers.org/listinfo/lxc-devel
Re: [lxc-devel] [PATCH] lxc-alpine: fix verification of apk.static binary
On Mon, Aug 03, 2015 at 01:40:25PM +0200, Natanael Copa wrote:
We need specify which hashing algorithm was used to create the signature
we check.
Fixes #609
Signed-off-by: Natanael Copa nc...@alpinelinux.org
Acked-by: Stéphane Graber stgra...@ubuntu.com
---
This should also go to the stable-1.0 and stable-1.1 branches.
templates/lxc-alpine.in | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
diff --git a/templates/lxc-alpine.in b/templates/lxc-alpine.in
index 963c42a..6dcc51b 100644
--- a/templates/lxc-alpine.in
+++ b/templates/lxc-alpine.in
@@ -83,7 +83,7 @@ get_static_apk () {
# verify the static apk binary signature
APK=$rootfs/sbin/apk.static
-openssl dgst -verify $rootfs/etc/apk/keys/$keyname \
+openssl dgst -sha1 -verify $rootfs/etc/apk/keys/$keyname \
-signature $APK.SIGN.RSA.$keyname $APK || return 1
if [ $auto_repo_dir ]; then
--
2.5.0
___
lxc-devel mailing list
lxc-devel@lists.linuxcontainers.org
http://lists.linuxcontainers.org/listinfo/lxc-devel
--
Stéphane Graber
Ubuntu developer
http://www.ubuntu.com
signature.asc
Description: Digital signature
___
lxc-devel mailing list
lxc-devel@lists.linuxcontainers.org
http://lists.linuxcontainers.org/listinfo/lxc-devel
