http://bugzilla.suse.com/show_bug.cgi?id=1121412 http://bugzilla.suse.com/show_bug.cgi?id=1121412#c2 --- Comment #2 from Max Lin --- you can do something like. %define flavor @BUILD_FLAVOR@%{nil} %if "%flavor" == "kubic" %if 0%{?suse_version} == 1500 && 0%{?is_opensuse} ExclusiveArch: do_not_build %endif %endif this should excluding building kubic flavor on Leap(hoping I typed them correct :) -- You are receiving this mail because: You are on the CC list for the bug.

http://bugzilla.suse.com/show_bug.cgi?id=1121412 http://bugzilla.suse.com/show_bug.cgi?id=1121412#c4 --- Comment #4 from Max Lin --- (In reply to Flavio Castelli from comment #3)

We think it would be easier to just disable the kubic flavor when building these packages for Leap.

Unfortunately there are still some differences between the "plain" docker packages and the one built for kubic (and hence used by SUSE CaaS Platform).

You mean changing repository build setting to off on kubic flavor? No, it must to be done in packaging level ie. specfile. -- You are receiving this mail because: You are on the CC list for the bug.

http://bugzilla.suse.com/show_bug.cgi?id=1121412 http://bugzilla.suse.com/show_bug.cgi?id=1121412#c5 Flavio Castelli changed: What |Removed |Added ---------------------------------------------------------------------------- Status|NEW |IN_PROGRESS CC| |asarai@suse.com, | |fcastelli@suse.com Assignee|containers-bugowner@suse.de |sgrunert@suse.com --- Comment #5 from Flavio Castelli --- (In reply to Max Lin from comment #4)

You mean changing repository build setting to off on kubic flavor? No, it must to be done in packaging level ie. specfile.

Yes, Sascha is looking into that (the changes to perform to our spec files). -- You are receiving this mail because: You are on the CC list for the bug.

http://bugzilla.suse.com/show_bug.cgi?id=1121412 http://bugzilla.suse.com/show_bug.cgi?id=1121412#c6 --- Comment #6 from Sascha Grunert --- Hey, the packages (docker, docker-runc, containerd and golang-github-docker-libnetwork) are updated to be excluded as kubic flavor from leap > 15 and are currently under review in openSUSE:Factory. I will let you know when there is any status update on that. -- You are receiving this mail because: You are on the CC list for the bug.

http://bugzilla.suse.com/show_bug.cgi?id=1121412 http://bugzilla.suse.com/show_bug.cgi?id=1121412#c8 --- Comment #8 from Ludwig Nussel --- the docker packages in leap are from SLE. Could you please apply the fixes on top of SLE and submit to SLE maintenance? -- You are receiving this mail because: You are on the CC list for the bug.

http://bugzilla.suse.com/show_bug.cgi?id=1121412 http://bugzilla.suse.com/show_bug.cgi?id=1121412#c11 Ludwig Nussel changed: What |Removed |Added ---------------------------------------------------------------------------- Flags|needinfo?(lnussel@suse.com) | --- Comment #11 from Ludwig Nussel --- packages that are in SLE should come from SLE in Leap. As such Leap pulls docker, containerd, go etc from SUSE:SLE-15:Update. That is intentional, yes. Of course if you have version update in SLE that version update would come from Factory, right? :-) So in the end we'd end up with a Factory package in Leap, via SLE though. -- You are receiving this mail because: You are on the CC list for the bug.

http://bugzilla.suse.com/show_bug.cgi?id=1121412 http://bugzilla.suse.com/show_bug.cgi?id=1121412#c13 --- Comment #13 from Sascha Grunert --- Just to keep you up-to-date, the mentioned packages are now within the standard maintenance process: https://maintenance.suse.de/incident/10006 -- You are receiving this mail because: You are on the CC list for the bug.

http://bugzilla.suse.com/show_bug.cgi?id=1121412 http://bugzilla.suse.com/show_bug.cgi?id=1121412#c17 --- Comment #17 from Swamp Workflow Management --- SUSE-SU-2019:0286-1: An update that solves three vulnerabilities and has 5 fixes is now available. Category: security (moderate) Bug References: 1001161,1112980,1115464,1118897,1118898,1118899,1118990,1121412 CVE References: CVE-2018-16873,CVE-2018-16874,CVE-2018-16875 Sources used: SUSE Linux Enterprise Module for Open Buildservice Development Tools 15 (src): containerd-1.1.2-5.6.1, docker-18.09.0_ce-6.11.2, docker-runc-1.0.0rc5+gitr3562_69663f0bd4b6-6.6.1, golang-github-docker-libnetwork-0.7.0.1+gitr2704_6da50d197830-4.6.1 SUSE Linux Enterprise Module for Containers 15 (src): containerd-1.1.2-5.6.1, docker-18.09.0_ce-6.11.2, docker-runc-1.0.0rc5+gitr3562_69663f0bd4b6-6.6.1, golang-github-docker-libnetwork-0.7.0.1+gitr2704_6da50d197830-4.6.1 -- You are receiving this mail because: You are on the CC list for the bug.

http://bugzilla.suse.com/show_bug.cgi?id=1121412 http://bugzilla.suse.com/show_bug.cgi?id=1121412#c22 --- Comment #22 from Swamp Workflow Management --- SUSE-SU-2019:0573-1: An update that solves 5 vulnerabilities and has 6 fixes is now available. Category: security (important) Bug References: 1001161,1048046,1051429,1112980,1114832,1118897,1118898,1118899,1121412,1121967,1124308 CVE References: CVE-2016-9962,CVE-2018-16873,CVE-2018-16874,CVE-2018-16875,CVE-2019-5736 Sources used: SUSE OpenStack Cloud 6-LTSS (src): containerd-1.2.2-16.14.2, docker-18.09.1_ce-98.34.2, docker-runc-1.0.0rc6+gitr3748_96ec2177ae84-1.17.2, golang-github-docker-libnetwork-0.7.0.1+gitr2711_2cfbf9b1f981-16.2 SUSE Linux Enterprise Module for Containers 12 (src): containerd-1.2.2-16.14.2, docker-18.09.1_ce-98.34.2, docker-runc-1.0.0rc6+gitr3748_96ec2177ae84-1.17.2, golang-github-docker-libnetwork-0.7.0.1+gitr2711_2cfbf9b1f981-16.2 -- You are receiving this mail because: You are on the CC list for the bug.

http://bugzilla.suse.com/show_bug.cgi?id=1121412 http://bugzilla.suse.com/show_bug.cgi?id=1121412#c23 --- Comment #23 from Swamp Workflow Management --- openSUSE-SU-2019:1079-1: An update that solves four vulnerabilities and has 7 fixes is now available. Category: security (important) Bug References: 1001161,1048046,1051429,1112980,1114832,1118897,1118898,1118899,1121412,1121967,1124308 CVE References: CVE-2018-16873,CVE-2018-16874,CVE-2018-16875,CVE-2019-5736 Sources used: openSUSE Leap 42.3 (src): containerd-1.2.2-22.1, containerd-kubic-1.2.2-22.1, docker-18.09.1_ce-54.1, docker-kubic-18.09.1_ce-54.1, docker-runc-1.0.0rc6+gitr3748_96ec2177ae84-11.1, docker-runc-kubic-1.0.0rc6+gitr3748_96ec2177ae84-11.1, golang-github-docker-libnetwork-0.7.0.1+gitr2711_2cfbf9b1f981-11.1, golang-github-docker-libnetwork-kubic-0.7.0.1+gitr2711_2cfbf9b1f981-11.1 *** NOTE: This information is not intended to be used for external communication, because this may only be a partial fix. If you have questions please reach out to maintenance coordination. -- You are receiving this mail because: You are on the CC list for the bug.