commit base-fips-image for openSUSE:Factory
Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package base-fips-image for openSUSE:Factory checked in at 2026-01-05 14:51:51 Comparing /work/SRC/openSUSE:Factory/base-fips-image (Old) and /work/SRC/openSUSE:Factory/.base-fips-image.new.1928 (New) Package is "base-fips-image" Mon Jan 5 14:51:51 2026 rev:16 rq:1325225 version:%OS_VERSION_ID_SP%.0.0 Changes: --- /work/SRC/openSUSE:Factory/base-fips-image/base-fips-image.changes 2026-01-03 17:28:06.257423426 +0100 +++ /work/SRC/openSUSE:Factory/.base-fips-image.new.1928/base-fips-image.changes 2026-01-05 14:52:50.217471520 +0100 @@ -1,0 +2,5 @@ +Sat Jan 3 15:35:34 UTC 2026 - SUSE Update Bot + +- typo fixes + +--- Other differences: -- ++ Dockerfile ++ --- /var/tmp/diff_new_pack.vO8nbB/_old 2026-01-05 14:52:51.201512504 +0100 +++ /var/tmp/diff_new_pack.vO8nbB/_new 2026-01-05 14:52:51.209512837 +0100 @@ -53,7 +53,7 @@ LABEL org.opensuse.release-stage="released" # endlabelprefix LABEL io.artifacthub.package.readme-url="%SOURCEURL_WITH(README.md)%" -LABEL usage="This container should only be used on a FIPS enabled host (fips=1 on kernel cmdline)." +LABEL usage="This container should only be used on a FIPS-140-3-enabled host (fips=1 on kernel cmdline)." RUN set -euo pipefail; fips-mode-setup --enable --no-bootcfg RUN set -euo pipefail; rpm -e crypto-policies-scripts libpython3_13-1_0 python313-base update-bootloader
commit base-fips-image for openSUSE:Factory
Script 'mail_helper' called by obssrc
Hello community,
here is the log from the commit of package base-fips-image for openSUSE:Factory
checked in at 2026-01-03 17:27:43
Comparing /work/SRC/openSUSE:Factory/base-fips-image (Old)
and /work/SRC/openSUSE:Factory/.base-fips-image.new.1928 (New)
Package is "base-fips-image"
Sat Jan 3 17:27:43 2026 rev:15 rq:1325141 version:%OS_VERSION_ID_SP%.0.0
Changes:
--- /work/SRC/openSUSE:Factory/base-fips-image/base-fips-image.changes
2026-01-02 14:30:22.517051098 +0100
+++
/work/SRC/openSUSE:Factory/.base-fips-image.new.1928/base-fips-image.changes
2026-01-03 17:28:06.257423426 +0100
@@ -1,0 +2,5 @@
+Fri Jan 2 10:12:48 UTC 2026 - SUSE Update Bot
+
+- order package installation alphabetically
+
+---
Other differences:
--
++ Dockerfile ++
--- /var/tmp/diff_new_pack.fgjyYd/_old 2026-01-03 17:28:09.249545841 +0100
+++ /var/tmp/diff_new_pack.fgjyYd/_new 2026-01-03 17:28:09.281547150 +0100
@@ -23,7 +23,7 @@
FROM opensuse/tumbleweed:latest
RUN set -euo pipefail; \
-zypper -n install --no-recommends openSUSE-release
openSUSE-release-appliance-docker coreutils crypto-policies-scripts
update-bootloader
+zypper -n install --no-recommends coreutils crypto-policies-scripts
openSUSE-release openSUSE-release-appliance-docker update-bootloader
# cleanup logs and temporary files
RUN set -euo pipefail; zypper -n clean -a; \
@@ -56,7 +56,7 @@
LABEL usage="This container should only be used on a FIPS enabled host (fips=1
on kernel cmdline)."
RUN set -euo pipefail; fips-mode-setup --enable --no-bootcfg
-RUN set -euo pipefail; rpm -e libpython3_13-1_0 python313-base
update-bootloader crypto-policies-scripts
+RUN set -euo pipefail; rpm -e crypto-policies-scripts libpython3_13-1_0
python313-base update-bootloader
RUN set -euo pipefail; rm -rf
{/target,}/var/log/{alternatives.log,lastlog,tallylog,zypper.log,zypp/history,YaST2};
\
rm -rf {/target,}/run/*; \
rm -f {/target,}/etc/{shadow-,group-,passwd-,.pwd.lock}; \
commit base-fips-image for openSUSE:Factory
Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package base-fips-image for openSUSE:Factory checked in at 2026-01-02 14:28:39 Comparing /work/SRC/openSUSE:Factory/base-fips-image (Old) and /work/SRC/openSUSE:Factory/.base-fips-image.new.1928 (New) Package is "base-fips-image" Fri Jan 2 14:28:39 2026 rev:14 rq:1324993 version:%OS_VERSION_ID_SP%.0.0 Changes: --- /work/SRC/openSUSE:Factory/base-fips-image/base-fips-image.changes 2025-12-19 16:43:33.288123211 +0100 +++ /work/SRC/openSUSE:Factory/.base-fips-image.new.1928/base-fips-image.changes 2026-01-02 14:30:22.517051098 +0100 @@ -1,0 +2,5 @@ +Thu Jan 1 14:16:34 UTC 2026 - SUSE Update Bot + +- update copyright year + +--- Other differences: -- ++ Dockerfile ++ --- /var/tmp/diff_new_pack.HD4OO2/_old 2026-01-02 14:30:24.049114336 +0100 +++ /var/tmp/diff_new_pack.HD4OO2/_new 2026-01-02 14:30:24.057114666 +0100 @@ -1,6 +1,6 @@ # SPDX-License-Identifier: MIT -# Copyright (c) 2025 SUSE LLC +# Copyright (c) 2026 SUSE LLC # All modifications and additions to the file contributed by third parties # remain the property of their copyright owners, unless otherwise agreed
commit base-fips-image for openSUSE:Factory
Script 'mail_helper' called by obssrc
Hello community,
here is the log from the commit of package base-fips-image for openSUSE:Factory
checked in at 2025-12-19 16:42:45
Comparing /work/SRC/openSUSE:Factory/base-fips-image (Old)
and /work/SRC/openSUSE:Factory/.base-fips-image.new.1928 (New)
Package is "base-fips-image"
Fri Dec 19 16:42:45 2025 rev:13 rq:1323572 version:%OS_VERSION_ID_SP%.0.0
Changes:
--- /work/SRC/openSUSE:Factory/base-fips-image/base-fips-image.changes
2025-12-17 17:40:25.265869382 +0100
+++
/work/SRC/openSUSE:Factory/.base-fips-image.new.1928/base-fips-image.changes
2025-12-19 16:43:33.288123211 +0100
@@ -1,0 +2,5 @@
+Thu Dec 18 19:50:49 UTC 2025 - SUSE Update Bot
+
+- switch to fips-mode-setup and cleanup scripts after run
+
+---
Other differences:
--
++ Dockerfile ++
--- /var/tmp/diff_new_pack.KtitLQ/_old 2025-12-19 16:43:35.744225922 +0100
+++ /var/tmp/diff_new_pack.KtitLQ/_new 2025-12-19 16:43:35.764226758 +0100
@@ -23,7 +23,7 @@
FROM opensuse/tumbleweed:latest
RUN set -euo pipefail; \
-zypper -n install --no-recommends openSUSE-release
openSUSE-release-appliance-docker coreutils crypto-policies-scripts
+zypper -n install --no-recommends openSUSE-release
openSUSE-release-appliance-docker coreutils crypto-policies-scripts
update-bootloader
# cleanup logs and temporary files
RUN set -euo pipefail; zypper -n clean -a; \
@@ -54,7 +54,15 @@
# endlabelprefix
LABEL io.artifacthub.package.readme-url="%SOURCEURL_WITH(README.md)%"
LABEL usage="This container should only be used on a FIPS enabled host (fips=1
on kernel cmdline)."
-RUN set -euo pipefail; update-crypto-policies --no-reload --set FIPS
+
+RUN set -euo pipefail; fips-mode-setup --enable --no-bootcfg
+RUN set -euo pipefail; rpm -e libpython3_13-1_0 python313-base
update-bootloader crypto-policies-scripts
+RUN set -euo pipefail; rm -rf
{/target,}/var/log/{alternatives.log,lastlog,tallylog,zypper.log,zypp/history,YaST2};
\
+rm -rf {/target,}/run/*; \
+rm -f {/target,}/etc/{shadow-,group-,passwd-,.pwd.lock}; \
+rm -f {/target,}/usr/lib/sysimage/rpm/.rpm.lock; \
+rm -f {/target,}/var/cache/ldconfig/aux-cache; \
+command -v zypper >/dev/null 2>&1 || rm -f /var/lib/zypp/AutoInstalled
ENV GNUTLS_FORCE_FIPS_MODE=1
ENV LIBGCRYPT_FORCE_FIPS_MODE=1
commit base-fips-image for openSUSE:Factory
Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package base-fips-image for openSUSE:Factory checked in at 2025-12-17 17:35:52 Comparing /work/SRC/openSUSE:Factory/base-fips-image (Old) and /work/SRC/openSUSE:Factory/.base-fips-image.new.1939 (New) Package is "base-fips-image" Wed Dec 17 17:35:52 2025 rev:12 rq:1323204 version:%OS_VERSION_ID_SP%.0.0 Changes: --- /work/SRC/openSUSE:Factory/base-fips-image/base-fips-image.changes 2025-10-21 11:19:05.885546356 +0200 +++ /work/SRC/openSUSE:Factory/.base-fips-image.new.1939/base-fips-image.changes 2025-12-17 17:40:25.265869382 +0100 @@ -1,0 +2,5 @@ +Tue Dec 16 15:28:01 UTC 2025 - SUSE Update Bot + +- README.md language cleanups + +--- Other differences: -- ++ README.md ++ --- /var/tmp/diff_new_pack.VtcmvH/_old 2025-12-17 17:40:25.817892594 +0100 +++ /var/tmp/diff_new_pack.VtcmvH/_new 2025-12-17 17:40:25.821892762 +0100 @@ -6,13 +6,12 @@ ## Description -This base container image is configured with FIPS mode enabled by default, but -**does not** include any certified binaries. +This base container image is configured with FIPS mode enabled by default, but it **does not** include any certified binaries. ## Usage The image is configured to enforce the use of FIPS mode by default, -independent of the host environment setup by specifying the following +independent of the host environment setup, by specifying the following environment variables: * `OPENSSL_FIPS=1`: Initialize the OpenSSL FIPS mode * `OPENSSL_FORCE_FIPS_MODE=1`: Set FIPS mode to enforcing independent of the host kernel
commit base-fips-image for openSUSE:Factory
Script 'mail_helper' called by obssrc
Hello community,
here is the log from the commit of package base-fips-image for openSUSE:Factory
checked in at 2025-09-29 16:38:33
Comparing /work/SRC/openSUSE:Factory/base-fips-image (Old)
and /work/SRC/openSUSE:Factory/.base-fips-image.new.11973 (New)
Package is "base-fips-image"
Mon Sep 29 16:38:33 2025 rev:9 rq:1307819 version:%OS_VERSION_ID_SP%.0.0
Changes:
--- /work/SRC/openSUSE:Factory/base-fips-image/base-fips-image.changes
2025-07-31 17:50:46.351551741 +0200
+++
/work/SRC/openSUSE:Factory/.base-fips-image.new.11973/base-fips-image.changes
2025-09-29 16:39:20.112310563 +0200
@@ -1,0 +2,5 @@
+Mon Sep 29 09:32:28 UTC 2025 - SUSE Update Bot
+
+- remove non-reproducible files from container
+
+---
Other differences:
--
++ Dockerfile ++
--- /var/tmp/diff_new_pack.4Tbo1M/_old 2025-09-29 16:39:20.588330518 +0200
+++ /var/tmp/diff_new_pack.4Tbo1M/_new 2025-09-29 16:39:20.592330685 +0200
@@ -25,7 +25,13 @@
RUN set -euo pipefail; \
zypper -n install --no-recommends openSUSE-release
openSUSE-release-appliance-docker coreutils crypto-policies-scripts
RUN set -euo pipefail; zypper -n clean -a; \
-rm -rf
{/target,}/var/log/{alternatives.log,lastlog,tallylog,zypper.log,zypp/history,YaST2};
rm -f {/target,}/etc/shadow-
+rm -rf
{/target,}/var/log/{alternatives.log,lastlog,tallylog,zypper.log,zypp/history,YaST2};
\
+rm -rf {/target,}/run/*; \
+rm -f {/target,}/etc/{shadow-,group-,passwd-,.pwd.lock}; \
+rm -f {/target,}/usr/lib/sysimage/rpm/.rpm.lock; \
+rm -f {/target,}/var/cache/ldconfig/aux-cache; \
+command -v zypper >/dev/null 2>&1 || rm -f /var/lib/zypp/AutoInstalled
+
# Define labels according to
https://en.opensuse.org/Building_derived_containers
# labelprefix=org.opensuse.bci.base-fips
commit base-fips-image for openSUSE:Factory
Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package base-fips-image for openSUSE:Factory checked in at 2025-06-01 21:36:36 Comparing /work/SRC/openSUSE:Factory/base-fips-image (Old) and /work/SRC/openSUSE:Factory/.base-fips-image.new.16005 (New) Package is "base-fips-image" Sun Jun 1 21:36:36 2025 rev:7 rq:1281451 version:%OS_VERSION_ID_SP%.0.0 Changes: --- /work/SRC/openSUSE:Factory/base-fips-image/base-fips-image.changes 2025-05-30 17:20:03.586090591 +0200 +++ /work/SRC/openSUSE:Factory/.base-fips-image.new.16005/base-fips-image.changes 2025-06-01 21:37:01.362454213 +0200 @@ -1,0 +2,5 @@ +Wed May 28 11:43:16 UTC 2025 - SUSE Update Bot + +- set a buildname to avoid constant have-choice errors + +--- Other differences: -- ++ Dockerfile ++ --- /var/tmp/diff_new_pack.FhNJ6m/_old 2025-06-01 21:37:01.818473102 +0200 +++ /var/tmp/diff_new_pack.FhNJ6m/_new 2025-06-01 21:37:01.822473268 +0200 @@ -18,7 +18,8 @@ #!BuildTag: opensuse/bci/bci-base-fips:%OS_VERSION_ID_SP%-%RELEASE% #!BuildTag: opensuse/bci/bci-base-fips:%OS_VERSION_ID_SP% #!BuildTag: opensuse/bci/bci-base-fips:latest - +#!BuildName: opensuse-bci-bci-base-fips-%OS_VERSION_ID_SP% +#!BuildVersion: %OS_VERSION_ID_SP%.0.0 FROM opensuse/tumbleweed:latest RUN set -euo pipefail; \
commit base-fips-image for openSUSE:Factory
Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package base-fips-image for openSUSE:Factory checked in at 2025-05-30 14:29:27 Comparing /work/SRC/openSUSE:Factory/base-fips-image (Old) and /work/SRC/openSUSE:Factory/.base-fips-image.new.25440 (New) Package is "base-fips-image" Fri May 30 14:29:27 2025 rev:6 rq:1280184 version:unknown Changes: --- /work/SRC/openSUSE:Factory/base-fips-image/base-fips-image.changes 2025-04-28 16:21:06.169142317 +0200 +++ /work/SRC/openSUSE:Factory/.base-fips-image.new.25440/base-fips-image.changes 2025-05-30 17:20:03.586090591 +0200 @@ -1,0 +2,5 @@ +Fri May 23 11:23:16 UTC 2025 - SUSE Update Bot + +- use SOURCEURL_WITH to generate proper artifacthub urls + +--- Other differences: -- ++ Dockerfile ++ --- /var/tmp/diff_new_pack.34RHZh/_old 2025-05-30 17:20:04.786140260 +0200 +++ /var/tmp/diff_new_pack.34RHZh/_new 2025-05-30 17:20:04.802140922 +0200 @@ -41,7 +41,7 @@ LABEL org.opensuse.lifecycle-url="https://en.opensuse.org/Lifetime#openSUSE_BCI"; LABEL org.opensuse.release-stage="released" # endlabelprefix -LABEL io.artifacthub.package.readme-url="https://raw.githubusercontent.com/SUSE/BCI-dockerfile-generator/Tumbleweed/base-fips-image/README.md"; +LABEL io.artifacthub.package.readme-url="%SOURCEURL_WITH(README.md)%" LABEL usage="This container should only be used on a FIPS enabled host (fips=1 on kernel cmdline)." RUN set -euo pipefail; update-crypto-policies --no-reload --set FIPS
commit base-fips-image for openSUSE:Factory
Script 'mail_helper' called by obssrc
Hello community,
here is the log from the commit of package base-fips-image for openSUSE:Factory
checked in at 2025-04-28 16:20:51
Comparing /work/SRC/openSUSE:Factory/base-fips-image (Old)
and /work/SRC/openSUSE:Factory/.base-fips-image.new.30101 (New)
Package is "base-fips-image"
Mon Apr 28 16:20:51 2025 rev:5 rq:1273140 version:unknown
Changes:
--- /work/SRC/openSUSE:Factory/base-fips-image/base-fips-image.changes
2025-01-02 19:20:25.125974905 +0100
+++
/work/SRC/openSUSE:Factory/.base-fips-image.new.30101/base-fips-image.changes
2025-04-28 16:21:06.169142317 +0200
@@ -1,0 +2,5 @@
+Mon Apr 28 10:47:42 UTC 2025 - SUSE Update Bot
+
+- zypper clean also the system repository from the container
+
+---
Other differences:
--
++ Dockerfile ++
--- /var/tmp/diff_new_pack.PIsutD/_old 2025-04-28 16:21:06.641162095 +0200
+++ /var/tmp/diff_new_pack.PIsutD/_new 2025-04-28 16:21:06.645162262 +0200
@@ -22,8 +22,8 @@
FROM opensuse/tumbleweed:latest
RUN set -euo pipefail; \
-zypper -n install --no-recommends openSUSE-release
openSUSE-release-appliance-docker coreutils crypto-policies-scripts; \
-zypper -n clean; \
+zypper -n install --no-recommends openSUSE-release
openSUSE-release-appliance-docker coreutils crypto-policies-scripts
+RUN set -euo pipefail; zypper -n clean -a; \
rm -rf
{/target,}/var/log/{alternatives.log,lastlog,tallylog,zypper.log,zypp/history,YaST2}
# Define labels according to
https://en.opensuse.org/Building_derived_containers
commit base-fips-image for openSUSE:Factory
Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package base-fips-image for openSUSE:Factory checked in at 2025-01-29 16:15:37 Comparing /work/SRC/openSUSE:Factory/base-fips-image (Old) and /work/SRC/openSUSE:Factory/.base-fips-image.new.2316 (New) Package is "base-fips-image" Wed Jan 29 16:15:37 2025 rev:3 rq:1240955 version:unknown Changes: New: _scmsync.obsinfo Other differences: -- ++ _scmsync.obsinfo ++ mtime: 1735740828 commit: 8720cff6b7dc48da6eab529ec066581a09603659 url: https://github.com/SUSE/bci-dockerfile-generator revision: Tumbleweed subdir: base-fips-image
commit base-fips-image for openSUSE:Factory
Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package base-fips-image for openSUSE:Factory checked in at 2025-01-02 19:19:52 Comparing /work/SRC/openSUSE:Factory/base-fips-image (Old) and /work/SRC/openSUSE:Factory/.base-fips-image.new.1881 (New) Package is "base-fips-image" Thu Jan 2 19:19:52 2025 rev:2 rq:1234338 version:unknown Changes: --- /work/SRC/openSUSE:Factory/base-fips-image/base-fips-image.changes 2024-11-30 13:27:53.817833183 +0100 +++ /work/SRC/openSUSE:Factory/.base-fips-image.new.1881/base-fips-image.changes 2025-01-02 19:20:25.125974905 +0100 @@ -1,0 +2,5 @@ +Wed Jan 1 14:13:48 UTC 2025 - SUSE Update Bot + +- update copyright year + +--- Other differences: -- ++ Dockerfile ++ --- /var/tmp/diff_new_pack.UL1VoQ/_old 2025-01-02 19:20:25.717999251 +0100 +++ /var/tmp/diff_new_pack.UL1VoQ/_new 2025-01-02 19:20:25.721999416 +0100 @@ -1,6 +1,6 @@ # SPDX-License-Identifier: MIT -# Copyright (c) 2024 SUSE LLC +# Copyright (c) 2025 SUSE LLC # All modifications and additions to the file contributed by third parties # remain the property of their copyright owners, unless otherwise agreed
