January 2018 - openSUSE Commits - openSUSE Mailing Lists

commit libnss_nis for openSUSE:Factory
by root＠hilbert.suse.de 31 Jan '18

31 Jan '18

Hello community, here is the log from the commit of package libnss_nis for openSUSE:Factory checked in at 2018-01-31 19:49:39 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/libnss_nis (Old) and /work/SRC/openSUSE:Factory/.libnss_nis.new (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Package is "libnss_nis" Wed Jan 31 19:49:39 2018 rev:2 rq:569500 version:3.0 Changes: -------- --- /work/SRC/openSUSE:Factory/libnss_nis/libnss_nis.changes 2017-10-06 10:53:13.210139734 +0200 +++ /work/SRC/openSUSE:Factory/.libnss_nis.new/libnss_nis.changes 2018-01-31 19:49:41.275625671 +0100 @@ -1,0 +2,6 @@ +Thu Jan 25 12:13:36 UTC 2018 - kukuk(a)suse.de + +- Update to version 3.0 + - get ride of GLIBC_PRIVATE symbols + +------------------------------------------------------------------- Old: ---- libnss_nis-1.3.tar.bz2 New: ---- libnss_nis-3.0.tar.bz2 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ libnss_nis.spec ++++++ --- /var/tmp/diff_new_pack.EXFxPG/_old 2018-01-31 19:49:42.223581594 +0100 +++ /var/tmp/diff_new_pack.EXFxPG/_new 2018-01-31 19:49:42.247580477 +0100 @@ -1,7 +1,7 @@ # # spec file for package libnss_nis # -# Copyright (c) 2017 SUSE LINUX GmbH, Nuernberg, Germany. +# Copyright (c) 2018 SUSE LINUX GmbH, Nuernberg, Germany. # # All modifications and additions to the file contributed by third parties # remain the property of their copyright owners, unless otherwise agreed @@ -16,10 +16,9 @@ # - Name: libnss_nis -Version: 1.3 -Release: 1 +Version: 3.0 +Release: 0 Summary: NSS NIS plugin for glibc License: LGPL-2.1 Group: System/Libraries @@ -30,9 +29,6 @@ Source: %{name}-%{version}.tar.bz2 Source1: baselibs.conf BuildRoot: %{_tmppath}/%{name}-%{version}-build -# We need some private NSS functions -%define __filter_GLIBC_PRIVATE 1 - %description The NSS NIS plugin provides NIS support for get*nam() functions from ++++++ libnss_nis-1.3.tar.bz2 -> libnss_nis-3.0.tar.bz2 ++++++ diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/libnss_nis-1.3/NEWS new/libnss_nis-3.0/NEWS --- old/libnss_nis-1.3/NEWS 2017-02-23 13:42:33.000000000 +0100 +++ new/libnss_nis-3.0/NEWS 2018-01-25 12:12:07.000000000 +0100 @@ -1,5 +1,11 @@ libnss_nis NEWS -- history of user-visible changes. +Version 3.0 +* Get ride of all GLIBC_PRIVATE symbols + +Version 1.4 +* Make more Linux Distribution independent + Version 1.3 * Fix compiler warnings diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/libnss_nis-1.3/configure new/libnss_nis-3.0/configure --- old/libnss_nis-1.3/configure 2017-02-23 13:42:13.000000000 +0100 +++ new/libnss_nis-3.0/configure 2018-01-25 12:09:49.000000000 +0100 @@ -1,6 +1,6 @@ #! /bin/sh # Guess values for system-dependent variables and create Makefiles. -# Generated by GNU Autoconf 2.69 for libnss_nis 1.3. +# Generated by GNU Autoconf 2.69 for libnss_nis 3.0. # # # Copyright (C) 1992-1996, 1998-2012 Free Software Foundation, Inc. @@ -587,8 +587,8 @@ # Identity of this package. PACKAGE_NAME='libnss_nis' PACKAGE_TARNAME='libnss_nis' -PACKAGE_VERSION='1.3' -PACKAGE_STRING='libnss_nis 1.3' +PACKAGE_VERSION='3.0' +PACKAGE_STRING='libnss_nis 3.0' PACKAGE_BUGREPORT='' PACKAGE_URL='' @@ -1323,7 +1323,7 @@ # Omit some internal or obsolete options to make the list less imposing. # This message is too long to be a string in the A/UX 3.1 sh. cat <<_ACEOF -\`configure' configures libnss_nis 1.3 to adapt to many kinds of systems. +\`configure' configures libnss_nis 3.0 to adapt to many kinds of systems. Usage: $0 [OPTION]... [VAR=VALUE]... @@ -1393,7 +1393,7 @@ if test -n "$ac_init_help"; then case $ac_init_help in - short | recursive ) echo "Configuration of libnss_nis 1.3:";; + short | recursive ) echo "Configuration of libnss_nis 3.0:";; esac cat <<\_ACEOF @@ -1509,7 +1509,7 @@ test -n "$ac_init_help" && exit $ac_status if $ac_init_version; then cat <<\_ACEOF -libnss_nis configure 1.3 +libnss_nis configure 3.0 generated by GNU Autoconf 2.69 Copyright (C) 2012 Free Software Foundation, Inc. @@ -1874,7 +1874,7 @@ This file contains any messages produced by compilers while running configure, to aid debugging if configure makes a mistake. -It was created by libnss_nis $as_me 1.3, which was +It was created by libnss_nis $as_me 3.0, which was generated by GNU Autoconf 2.69. Invocation command line was $ $0 $@ @@ -2737,7 +2737,7 @@ # Define the identity of the package. PACKAGE='libnss_nis' - VERSION='1.3' + VERSION='3.0' cat >>confdefs.h <<_ACEOF @@ -12692,7 +12692,7 @@ # report actual input values of CONFIG_FILES etc. instead of their # values after options handling. ac_log=" -This file was extended by libnss_nis $as_me 1.3, which was +This file was extended by libnss_nis $as_me 3.0, which was generated by GNU Autoconf 2.69. Invocation command line was CONFIG_FILES = $CONFIG_FILES @@ -12758,7 +12758,7 @@ cat >>$CONFIG_STATUS <<_ACEOF || ac_write_fail=1 ac_cs_config="`$as_echo "$ac_configure_args" | sed 's/^ //; s/[\\""\`\$]/\\\\&/g'`" ac_cs_version="\\ -libnss_nis config.status 1.3 +libnss_nis config.status 3.0 configured by $0, generated by GNU Autoconf 2.69, with options \\"\$ac_cs_config\\" diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/libnss_nis-1.3/configure.ac new/libnss_nis-3.0/configure.ac --- old/libnss_nis-1.3/configure.ac 2017-02-23 13:41:49.000000000 +0100 +++ new/libnss_nis-3.0/configure.ac 2018-01-25 12:09:41.000000000 +0100 @@ -1,5 +1,5 @@ dnl Process this file with autoconf to produce a configure script. -AC_INIT(libnss_nis, 1.3) +AC_INIT(libnss_nis, 3.0) AM_INIT_AUTOMAKE AC_CONFIG_SRCDIR([src/nss-nis.c]) AM_CONFIG_HEADER(config.h) diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/libnss_nis-1.3/src/Makefile.am new/libnss_nis-3.0/src/Makefile.am --- old/libnss_nis-1.3/src/Makefile.am 2016-03-15 08:41:01.000000000 +0100 +++ new/libnss_nis-3.0/src/Makefile.am 2017-11-25 08:17:51.000000000 +0100 @@ -15,7 +15,8 @@ lib_LTLIBRARIES = libnss_nis.la -noinst_HEADERS = libc-lock.h libc-symbols.h netgroup.h nss-nis.h +noinst_HEADERS = libc-lock.h libc-symbols.h netgroup.h nss-nis.h \ + mapv4v6addr.h check_PROGRAMS = nss_loader-test nss_loader_test_LDADD = -ldl diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/libnss_nis-1.3/src/Makefile.in new/libnss_nis-3.0/src/Makefile.in --- old/libnss_nis-1.3/src/Makefile.in 2017-02-23 13:42:13.000000000 +0100 +++ new/libnss_nis-3.0/src/Makefile.in 2018-01-25 12:09:47.000000000 +0100 @@ -514,7 +514,9 @@ AM_CFLAGS = -D_REENTRANT=1 AM_CPPFLAGS = -I$(srcdir) @TIRPC_CFLAGS@ @LIBNSL_CFLAGS@ lib_LTLIBRARIES = libnss_nis.la -noinst_HEADERS = libc-lock.h libc-symbols.h netgroup.h nss-nis.h +noinst_HEADERS = libc-lock.h libc-symbols.h netgroup.h nss-nis.h \ + mapv4v6addr.h + nss_loader_test_LDADD = -ldl TESTS = $(check_PROGRAMS) libnss_nis_la_LDFLAGS = -version-info 2:0:0 \ diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/libnss_nis-1.3/src/mapv4v6addr.h new/libnss_nis-3.0/src/mapv4v6addr.h --- old/libnss_nis-1.3/src/mapv4v6addr.h 1970-01-01 01:00:00.000000000 +0100 +++ new/libnss_nis-3.0/src/mapv4v6addr.h 2015-06-27 08:25:01.000000000 +0200 @@ -0,0 +1,69 @@ +/* + * ++Copyright++ 1985, 1988, 1993 + * - + * Copyright (c) 1985, 1988, 1993 + * The Regents of the University of California. All rights reserved. + * + * Redistribution and use in source and binary forms, with or without + * modification, are permitted provided that the following conditions + * are met: + * 1. Redistributions of source code must retain the above copyright + * notice, this list of conditions and the following disclaimer. + * 2. Redistributions in binary form must reproduce the above copyright + * notice, this list of conditions and the following disclaimer in the + * documentation and/or other materials provided with the distribution. + * 4. Neither the name of the University nor the names of its contributors + * may be used to endorse or promote products derived from this software + * without specific prior written permission. + * + * THIS SOFTWARE IS PROVIDED BY THE REGENTS AND CONTRIBUTORS ``AS IS'' AND + * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE + * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE + * ARE DISCLAIMED. IN NO EVENT SHALL THE REGENTS OR CONTRIBUTORS BE LIABLE + * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL + * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS + * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) + * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT + * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY + * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF + * SUCH DAMAGE. + * - + * Portions Copyright (c) 1993 by Digital Equipment Corporation. + * + * Permission to use, copy, modify, and distribute this software for any + * purpose with or without fee is hereby granted, provided that the above + * copyright notice and this permission notice appear in all copies, and that + * the name of Digital Equipment Corporation not be used in advertising or + * publicity pertaining to distribution of the document or software without + * specific, written prior permission. + * + * THE SOFTWARE IS PROVIDED "AS IS" AND DIGITAL EQUIPMENT CORP. DISCLAIMS ALL + * WARRANTIES WITH REGARD TO THIS SOFTWARE, INCLUDING ALL IMPLIED WARRANTIES + * OF MERCHANTABILITY AND FITNESS. IN NO EVENT SHALL DIGITAL EQUIPMENT + * CORPORATION BE LIABLE FOR ANY SPECIAL, DIRECT, INDIRECT, OR CONSEQUENTIAL + * DAMAGES OR ANY DAMAGES WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR + * PROFITS, WHETHER IN AN ACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS + * ACTION, ARISING OUT OF OR IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS + * SOFTWARE. + * - + * --Copyright-- + */ + +#include <string.h> +#include <arpa/nameser.h> + +static void +map_v4v6_address (const char *src, char *dst) +{ + u_char *p = (u_char *) dst; + int i; + + /* Move the IPv4 part to the right position. */ + memcpy (dst + 12, src, INADDRSZ); + + /* Mark this ipv6 addr as a mapped ipv4. */ + for (i = 0; i < 10; i++) + *p++ = 0x00; + *p++ = 0xff; + *p = 0xff; +} diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/libnss_nis-1.3/src/nis-grp.c new/libnss_nis-3.0/src/nis-grp.c --- old/libnss_nis-1.3/src/nis-grp.c 2017-02-23 13:13:03.000000000 +0100 +++ new/libnss_nis-3.0/src/nis-grp.c 2018-01-25 12:03:53.000000000 +0100 @@ -30,11 +30,31 @@ #include "libc-lock.h" #include "nss-nis.h" -/* Get the declaration of the parser function. */ #define ENTNAME grent #define STRUCTURE group -#define EXTERN_PARSER +struct grent_data {}; + +#define TRAILING_LIST_MEMBER gr_mem +#define TRAILING_LIST_SEPARATOR_P(c) ((c) == ',') #include "files-parse.c" +LINE_PARSER +(, + STRING_FIELD (result->gr_name, ISCOLON, 0); + if (line[0] == '\0' + && (result->gr_name[0] == '+' || result->gr_name[0] == '-')) + { + result->gr_passwd = NULL; + result->gr_gid = 0; + } + else + { + STRING_FIELD (result->gr_passwd, ISCOLON, 0); + if (result->gr_name[0] == '+' || result->gr_name[0] == '-') + INT_FIELD_MAYBE_NULL (result->gr_gid, ISCOLON, 0, 10, , 0) + else + INT_FIELD (result->gr_gid, ISCOLON, 0, 10,) + } + ) /* Protect global state against multiple changers */ __libc_lock_define_initialized (static, lock) diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/libnss_nis-1.3/src/nis-hosts.c new/libnss_nis-3.0/src/nis-hosts.c --- old/libnss_nis-1.3/src/nis-hosts.c 2015-06-26 13:49:44.000000000 +0200 +++ new/libnss_nis-3.0/src/nis-hosts.c 2017-11-25 08:17:24.000000000 +0100 @@ -36,7 +36,7 @@ #include "nss-nis.h" /* Get implementation for some internal functions. */ -#include <resolv/mapv4v6addr.h> +#include "mapv4v6addr.h" #define ENTNAME hostent #define DATABASE "hosts" diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/libnss_nis-1.3/src/nis-pwd.c new/libnss_nis-3.0/src/nis-pwd.c --- old/libnss_nis-1.3/src/nis-pwd.c 2017-02-23 13:41:25.000000000 +0100 +++ new/libnss_nis-3.0/src/nis-pwd.c 2018-01-25 12:03:53.000000000 +0100 @@ -30,12 +30,47 @@ #include "libc-lock.h" #include "nss-nis.h" -/* Get the declaration of the parser function. */ #define ENTNAME pwent #define STRUCTURE passwd -#define EXTERN_PARSER +struct pwent_data {}; + #include "files-parse.c" +LINE_PARSER +(, + STRING_FIELD (result->pw_name, ISCOLON, 0); + if (line[0] == '\0' + && (result->pw_name[0] == '+' || result->pw_name[0] == '-')) + { + /* This a special case. We allow lines containing only a `+' sign + since this is used for nss_compat. All other services will + reject this entry later. Initialize all other fields now. */ + result->pw_passwd = NULL; + result->pw_uid = 0; + result->pw_gid = 0; + result->pw_gecos = NULL; + result->pw_dir = NULL; + result->pw_shell = NULL; + } + else + { + STRING_FIELD (result->pw_passwd, ISCOLON, 0); + if (result->pw_name[0] == '+' || result->pw_name[0] == '-') + { + INT_FIELD_MAYBE_NULL (result->pw_uid, ISCOLON, 0, 10, , 0) + INT_FIELD_MAYBE_NULL (result->pw_gid, ISCOLON, 0, 10, , 0) + } + else + { + INT_FIELD (result->pw_uid, ISCOLON, 0, 10,) + INT_FIELD (result->pw_gid, ISCOLON, 0, 10,) + } + STRING_FIELD (result->pw_gecos, ISCOLON, 0); + STRING_FIELD (result->pw_dir, ISCOLON, 0); + result->pw_shell = line; + } + ) + /* Protect global state against multiple changers */ __libc_lock_define_initialized (static, lock) diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/libnss_nis-1.3/src/nis-spwd.c new/libnss_nis-3.0/src/nis-spwd.c --- old/libnss_nis-1.3/src/nis-spwd.c 2015-06-29 13:20:24.000000000 +0200 +++ new/libnss_nis-3.0/src/nis-spwd.c 2018-01-25 12:03:53.000000000 +0100 @@ -32,11 +32,62 @@ #include "libc-lock.h" #include "nss-nis.h" -/* Get the declaration of the parser function. */ +/* Predicate which always returns false, needed below. */ +#define FALSEP(arg) 0 + #define ENTNAME spent #define STRUCTURE spwd -#define EXTERN_PARSER #include "files-parse.c" +LINE_PARSER +(, + STRING_FIELD (result->sp_namp, ISCOLON, 0); + if (line[0] == '\0' + && (result->sp_namp[0] == '+' || result->sp_namp[0] == '-')) + { + result->sp_pwdp = NULL; + result->sp_lstchg = 0; + result->sp_min = 0; + result->sp_max = 0; + result->sp_warn = -1l; + result->sp_inact = -1l; + result->sp_expire = -1l; + result->sp_flag = ~0ul; + } + else + { + STRING_FIELD (result->sp_pwdp, ISCOLON, 0); + INT_FIELD_MAYBE_NULL (result->sp_lstchg, ISCOLON, 0, 10, (long int) (int), + (long int) -1); + INT_FIELD_MAYBE_NULL (result->sp_min, ISCOLON, 0, 10, (long int) (int), + (long int) -1); + INT_FIELD_MAYBE_NULL (result->sp_max, ISCOLON, 0, 10, (long int) (int), + (long int) -1); + while (isspace (*line)) + ++line; + if (*line == '\0') + { + /* The old form. */ + result->sp_warn = -1l; + result->sp_inact = -1l; + result->sp_expire = -1l; + result->sp_flag = ~0ul; + } + else + { + INT_FIELD_MAYBE_NULL (result->sp_warn, ISCOLON, 0, 10, + (long int) (int), (long int) -1); + INT_FIELD_MAYBE_NULL (result->sp_inact, ISCOLON, 0, 10, + (long int) (int), (long int) -1); + INT_FIELD_MAYBE_NULL (result->sp_expire, ISCOLON, 0, 10, + (long int) (int), (long int) -1); + if (*line != '\0') + INT_FIELD_MAYBE_NULL (result->sp_flag, FALSEP, 0, 10, + (unsigned long int), ~0ul) + else + result->sp_flag = ~0ul; + } + } + ) /* Protect global state against multiple changers */ __libc_lock_define_initialized (static, lock)

1 0

commit kernel-source for openSUSE:Factory
by root＠hilbert.suse.de 31 Jan '18

31 Jan '18

Hello community, here is the log from the commit of package kernel-source for openSUSE:Factory checked in at 2018-01-31 19:48:58 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/kernel-source (Old) and /work/SRC/openSUSE:Factory/.kernel-source.new (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Package is "kernel-source" Wed Jan 31 19:48:58 2018 rev:403 rq:570460 version:4.14.15 Changes: -------- --- /work/SRC/openSUSE:Factory/kernel-source/dtb-aarch64.changes 2018-01-26 13:38:16.804712003 +0100 +++ /work/SRC/openSUSE:Factory/.kernel-source.new/dtb-aarch64.changes 2018-01-31 19:48:59.913548906 +0100 @@ -1,0 +2,127 @@ +Mon Jan 29 09:15:43 CET 2018 - jslaby(a)suse.cz + +- Revert "module: Add retpoline tag to VERMAGIC" (fix loading + of KMPs). +- commit 9a6fca5 + +------------------------------------------------------------------- +Fri Jan 26 09:52:08 CET 2018 - jslaby(a)suse.cz + +- Refresh + patches.suse/netfilter-nfnetlink_cthelper-Add-missing-permission-.patch. +- Refresh + patches.suse/netfilter-xt_osf-Add-missing-permission-checks.patch. +- Refresh patches.suse/scsi-libfc-fix-ELS-request-handling.patch. + Update upstream status. +- commit 12e5c10 + +------------------------------------------------------------------- +Fri Jan 26 08:40:10 CET 2018 - jslaby(a)suse.cz + +- x86/ibrs: Add new helper macros to save/restore + MSR_IA32_SPEC_CTRL fix (bsc#1068032 CVE-2017-5753). +- commit 6f87133 + +------------------------------------------------------------------- +Thu Jan 25 21:47:49 CET 2018 - jslaby(a)suse.cz + +- Delete patches.suse/orc-fix-retpolines-segfaults.patch. + No longer needed. +- commit 9e84548 + +------------------------------------------------------------------- +Thu Jan 25 21:46:34 CET 2018 - jslaby(a)suse.cz + +- x86/cpufeatures: Add Intel feature bits for Speculation Control + (bsc#1068032 CVE-2017-5715). +- x86/cpufeatures: Add AMD feature bits for Speculation Control + (bsc#1068032 CVE-2017-5715). +- x86/pti: Do not enable PTI on processors which are not + vulnerable to Meltdown (bsc#1068032 CVE-2017-5715). +- x86/cpufeature: Blacklist SPEC_CTRL on early Spectre v2 + microcodes (bsc#1068032 CVE-2017-5715). +- x86/speculation: Add basic IBPB (Indirect Branch Prediction + Barrier) support (bsc#1068032 CVE-2017-5715). +- x86/kvm: Add IBPB support (bsc#1068032 CVE-2017-5715). +- x86/speculation: Use Indirect Branch Prediction Barrier in + context switch (bsc#1068032 CVE-2017-5715). +- x86/mm: Only flush indirect branches when switching into non + dumpable process (bsc#1068032 CVE-2017-5715). +- x86/speculation: Add basic IBRS support infrastructure + (bsc#1068032 CVE-2017-5715). +- x86/speculation: Add inlines to control Indirect Branch + Speculation (bsc#1068032 CVE-2017-5715). +- x86: Simplify spectre_v2 command line parsing (bsc#1068032 + CVE-2017-5715). +- x86/idle: Control Indirect Branch Speculation in idle + (bsc#1068032 CVE-2017-5715). +- x86/enter: Create macros to restrict/unrestrict Indirect Branch + Speculation (bsc#1068032 CVE-2017-5715). +- x86/enter: Use IBRS on syscall and interrupts (bsc#1068032 + CVE-2017-5715). +- x86/ibrs: Add new helper macros to save/restore + MSR_IA32_SPEC_CTRL (bsc#1068032 CVE-2017-5715). +- x86/vmx: Direct access to MSR_IA32_SPEC_CTRL (bsc#1068032 + CVE-2017-5715). +- Delete + patches.suse/0002-x86-cpufeatures-Add-AMD-feature-bits-for-Prediction-.patch. +- Delete + patches.suse/0004-x86-feature-Report-presence-of-IBPB-and-IBRS-control.patch. +- Delete + patches.suse/0005-x86-enter-MACROS-to-set-clear-IBRS-and-set-IBPB.patch. +- Delete + patches.suse/0006-x86-Add-macro-that-does-not-save-rax-rcx-rdx-on-stac.patch. +- Delete + patches.suse/0007-x86-enter-Use-IBRS-on-syscall-and-interrupts.patch. +- Delete + patches.suse/0008-x86-spec_ctrl-save-IBRS-MSR-value-in-paranoid_entry.patch. +- Delete + patches.suse/0009-x86-idle-Disable-IBRS-entering-idle-and-enable-it-on.patch. +- Delete + patches.suse/0010-x86-idle-Disable-IBRS-when-offlining-cpu-and-re-enab.patch. +- Delete + patches.suse/0011-x86-mm-Set-IBPB-upon-context-switch.patch. +- Delete + patches.suse/0012-x86-mm-Only-set-IBPB-when-the-new-thread-cannot-ptra.patch. +- Delete + patches.suse/0013-x86-entry-Stuff-RSB-for-entry-to-kernel-for-non-SMEP.patch. +- Delete + patches.suse/0014-x86-syscall-Clear-unused-extra-registers-on-syscall-.patch. +- Delete + patches.suse/0015-x86-syscall-Clear-unused-extra-registers-on-32-bit-c.patch. +- Delete + patches.suse/0016-x86-kvm-add-MSR_IA32_SPEC_CTRL-and-MSR_IA32_PRED_CMD.patch. +- Delete + patches.suse/0017-x86-kvm-Set-IBPB-when-switching-VM.patch. +- Delete + patches.suse/0018-x86-kvm-Toggle-IBRS-on-VM-entry-and-exit.patch. +- Delete + patches.suse/0021-x86-spec_ctrl-Add-sysctl-knobs-to-enable-disable-SPE.patch. +- Delete + patches.suse/0022-x86-spec_ctrl-Add-lock-to-serialize-changes-to-ibrs-.patch. +- Delete + patches.suse/0023-x86-Move-IBRS-IBPB-feature-detection-to-scattered.c.patch. +- Delete + patches.suse/0024-x86-microcode-Recheck-IBRS-and-IBPB-feature-on-micro.patch. +- Delete + patches.suse/0025-x86-cpu-AMD-Add-speculative-control-support-for-AMD.patch. +- Delete + patches.suse/0028-x86-svm-Set-IBPB-when-running-a-different-VCPU.patch. +- Delete + patches.suse/0029-kvm-svm-add-MSR_IA32_SPEC_CTRL-and-MSR_IA32_PRED_CMD.patch. +- Delete patches.suse/0030-Use-the-ibrs_inuse-variable.patch. +- Delete + patches.suse/0031-Reverting-the-commit-e5247c4f209530-to-replace.patch. +- Delete + patches.suse/0032-kvm-vmx-add-MSR_IA32_SPEC_CTRL-and-MSR_IA32_PRED_CMD.patch. +- Delete + patches.suse/0033-KVM-x86-add-SPEC_CTRL-to-MSR-and-CPUID-lists.patch. +- Delete + patches.suse/0034-Remove-the-code-that-uses-MSR-save-restore-list.patch. +- Delete patches.suse/0035-Use-the-ibpb_inuse-variable.patch. +- Delete + patches.suse/0037-Set-IBPB-when-running-a-different-VCPU.patch. + Update spectre_v1 to the upstream patches. +- commit 67b0a37 + +------------------------------------------------------------------- dtb-armv6l.changes: same change dtb-armv7l.changes: same change kernel-64kb.changes: same change kernel-debug.changes: same change kernel-default.changes: same change kernel-docs.changes: same change kernel-lpae.changes: same change kernel-obs-build.changes: same change kernel-obs-qa.changes: same change kernel-pae.changes: same change kernel-source.changes: same change kernel-syms.changes: same change kernel-syzkaller.changes: same change kernel-vanilla.changes: same change kernel-zfcpdump.changes: same change ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ dtb-aarch64.spec ++++++ --- /var/tmp/diff_new_pack.IyhK9Q/_old 2018-01-31 19:49:06.241254686 +0100 +++ /var/tmp/diff_new_pack.IyhK9Q/_new 2018-01-31 19:49:06.245254501 +0100 @@ -31,7 +31,7 @@ Name: dtb-aarch64 Version: 4.14.15 %if 0%{?is_kotd} -Release: <RELEASE>.g5b3d0ce +Release: <RELEASE>.g9a6fca5 %else Release: 0 %endif dtb-armv6l.spec: same change dtb-armv7l.spec: same change ++++++ kernel-64kb.spec ++++++ --- /var/tmp/diff_new_pack.IyhK9Q/_old 2018-01-31 19:49:06.349249665 +0100 +++ /var/tmp/diff_new_pack.IyhK9Q/_new 2018-01-31 19:49:06.353249479 +0100 @@ -60,7 +60,7 @@ Group: System/Kernel Version: 4.14.15 %if 0%{?is_kotd} -Release: <RELEASE>.g5b3d0ce +Release: <RELEASE>.g9a6fca5 %else Release: 0 %endif kernel-debug.spec: same change kernel-default.spec: same change ++++++ kernel-docs.spec ++++++ --- /var/tmp/diff_new_pack.IyhK9Q/_old 2018-01-31 19:49:06.445245202 +0100 +++ /var/tmp/diff_new_pack.IyhK9Q/_new 2018-01-31 19:49:06.449245016 +0100 @@ -33,7 +33,7 @@ Group: Documentation/Man Version: 4.14.15 %if 0%{?is_kotd} -Release: <RELEASE>.g5b3d0ce +Release: <RELEASE>.g9a6fca5 %else Release: 0 %endif ++++++ kernel-lpae.spec ++++++ --- /var/tmp/diff_new_pack.IyhK9Q/_old 2018-01-31 19:49:06.489243156 +0100 +++ /var/tmp/diff_new_pack.IyhK9Q/_new 2018-01-31 19:49:06.497242784 +0100 @@ -60,7 +60,7 @@ Group: System/Kernel Version: 4.14.15 %if 0%{?is_kotd} -Release: <RELEASE>.g5b3d0ce +Release: <RELEASE>.g9a6fca5 %else Release: 0 %endif ++++++ kernel-obs-build.spec ++++++ --- /var/tmp/diff_new_pack.IyhK9Q/_old 2018-01-31 19:49:06.525241482 +0100 +++ /var/tmp/diff_new_pack.IyhK9Q/_new 2018-01-31 19:49:06.529241296 +0100 @@ -59,7 +59,7 @@ Group: SLES Version: 4.14.15 %if 0%{?is_kotd} -Release: <RELEASE>.g5b3d0ce +Release: <RELEASE>.g9a6fca5 %else Release: 0 %endif kernel-obs-qa.spec: same change ++++++ kernel-pae.spec ++++++ --- /var/tmp/diff_new_pack.IyhK9Q/_old 2018-01-31 19:49:06.585238692 +0100 +++ /var/tmp/diff_new_pack.IyhK9Q/_new 2018-01-31 19:49:06.589238506 +0100 @@ -60,7 +60,7 @@ Group: System/Kernel Version: 4.14.15 %if 0%{?is_kotd} -Release: <RELEASE>.g5b3d0ce +Release: <RELEASE>.g9a6fca5 %else Release: 0 %endif ++++++ kernel-source.spec ++++++ --- /var/tmp/diff_new_pack.IyhK9Q/_old 2018-01-31 19:49:06.617237205 +0100 +++ /var/tmp/diff_new_pack.IyhK9Q/_new 2018-01-31 19:49:06.621237019 +0100 @@ -32,7 +32,7 @@ Group: Development/Sources Version: 4.14.15 %if 0%{?is_kotd} -Release: <RELEASE>.g5b3d0ce +Release: <RELEASE>.g9a6fca5 %else Release: 0 %endif ++++++ kernel-syms.spec ++++++ --- /var/tmp/diff_new_pack.IyhK9Q/_old 2018-01-31 19:49:06.649235716 +0100 +++ /var/tmp/diff_new_pack.IyhK9Q/_new 2018-01-31 19:49:06.653235531 +0100 @@ -27,7 +27,7 @@ Version: 4.14.15 %if %using_buildservice %if 0%{?is_kotd} -Release: <RELEASE>.g5b3d0ce +Release: <RELEASE>.g9a6fca5 %else Release: 0 %endif ++++++ kernel-syzkaller.spec ++++++ --- /var/tmp/diff_new_pack.IyhK9Q/_old 2018-01-31 19:49:06.673234601 +0100 +++ /var/tmp/diff_new_pack.IyhK9Q/_new 2018-01-31 19:49:06.673234601 +0100 @@ -60,7 +60,7 @@ Group: System/Kernel Version: 4.14.15 %if 0%{?is_kotd} -Release: <RELEASE>.g5b3d0ce +Release: <RELEASE>.g9a6fca5 %else Release: 0 %endif kernel-vanilla.spec: same change kernel-zfcpdump.spec: same change ++++++ patches.suse.tar.bz2 ++++++ ++++ 5244 lines of diff (skipped) ++++++ series.conf ++++++ --- /var/tmp/diff_new_pack.IyhK9Q/_old 2018-01-31 19:49:07.677187920 +0100 +++ /var/tmp/diff_new_pack.IyhK9Q/_new 2018-01-31 19:49:07.681187734 +0100 @@ -1535,6 +1535,7 @@ ######################################################## # Scheduler / Core ######################################################## + patches.suse/revert-module-Add-retpoline-tag-to-VERMAGIC.patch patches.suse/revert-futex-Prevent-overflow-by-strengthen-input-va.patch patches.suse/setuid-dumpable-wrongdir @@ -1551,41 +1552,25 @@ patches.suse/0009-kvm-x86-update-spectre-v1-mitigation.patch patches.suse/0010-nl80211-sanitize-array-index-in-parse_txq_params.patch - patches.suse/0001-x86-cpufeatures-Add-Intel-feature-bits-for-Speculati.patch - patches.suse/0002-x86-cpufeatures-Add-AMD-feature-bits-for-Prediction-.patch - patches.suse/0003-x86-msr-Add-definitions-for-new-speculation-control-.patch - - patches.suse/0004-x86-feature-Report-presence-of-IBPB-and-IBRS-control.patch - patches.suse/0005-x86-enter-MACROS-to-set-clear-IBRS-and-set-IBPB.patch - patches.suse/0006-x86-Add-macro-that-does-not-save-rax-rcx-rdx-on-stac.patch - patches.suse/0007-x86-enter-Use-IBRS-on-syscall-and-interrupts.patch - patches.suse/0008-x86-spec_ctrl-save-IBRS-MSR-value-in-paranoid_entry.patch - patches.suse/0009-x86-idle-Disable-IBRS-entering-idle-and-enable-it-on.patch - patches.suse/0010-x86-idle-Disable-IBRS-when-offlining-cpu-and-re-enab.patch - patches.suse/0011-x86-mm-Set-IBPB-upon-context-switch.patch - patches.suse/0012-x86-mm-Only-set-IBPB-when-the-new-thread-cannot-ptra.patch - patches.suse/0013-x86-entry-Stuff-RSB-for-entry-to-kernel-for-non-SMEP.patch - patches.suse/0014-x86-syscall-Clear-unused-extra-registers-on-syscall-.patch - patches.suse/0015-x86-syscall-Clear-unused-extra-registers-on-32-bit-c.patch - patches.suse/0016-x86-kvm-add-MSR_IA32_SPEC_CTRL-and-MSR_IA32_PRED_CMD.patch - patches.suse/0017-x86-kvm-Set-IBPB-when-switching-VM.patch - patches.suse/0018-x86-kvm-Toggle-IBRS-on-VM-entry-and-exit.patch - patches.suse/0021-x86-spec_ctrl-Add-sysctl-knobs-to-enable-disable-SPE.patch - patches.suse/0022-x86-spec_ctrl-Add-lock-to-serialize-changes-to-ibrs-.patch - patches.suse/0023-x86-Move-IBRS-IBPB-feature-detection-to-scattered.c.patch - patches.suse/0024-x86-microcode-Recheck-IBRS-and-IBPB-feature-on-micro.patch - patches.suse/0025-x86-cpu-AMD-Add-speculative-control-support-for-AMD.patch - patches.suse/0028-x86-svm-Set-IBPB-when-running-a-different-VCPU.patch - patches.suse/0029-kvm-svm-add-MSR_IA32_SPEC_CTRL-and-MSR_IA32_PRED_CMD.patch - patches.suse/0030-Use-the-ibrs_inuse-variable.patch - patches.suse/0031-Reverting-the-commit-e5247c4f209530-to-replace.patch - patches.suse/0032-kvm-vmx-add-MSR_IA32_SPEC_CTRL-and-MSR_IA32_PRED_CMD.patch - patches.suse/0033-KVM-x86-add-SPEC_CTRL-to-MSR-and-CPUID-lists.patch - patches.suse/0034-Remove-the-code-that-uses-MSR-save-restore-list.patch - patches.suse/0035-Use-the-ibpb_inuse-variable.patch - patches.suse/0037-Set-IBPB-when-running-a-different-VCPU.patch - - patches.suse/orc-fix-retpolines-segfaults.patch + patches.suse/0001-x86-cpufeatures-Add-CPUID_7_EDX-CPUID-leaf.patch + patches.suse/0002-x86-cpufeatures-Add-Intel-feature-bits-for-Speculati.patch + patches.suse/0003-x86-cpufeatures-Add-AMD-feature-bits-for-Speculation.patch + patches.suse/0004-x86-msr-Add-definitions-for-new-speculation-control-.patch + patches.suse/0005-x86-pti-Do-not-enable-PTI-on-processors-which-are-no.patch + patches.suse/0006-x86-cpufeature-Blacklist-SPEC_CTRL-on-early-Spectre-.patch + patches.suse/0007-x86-speculation-Add-basic-IBPB-Indirect-Branch-Predi.patch + patches.suse/0008-x86-kvm-Add-IBPB-support.patch + patches.suse/0009-x86-speculation-Use-Indirect-Branch-Prediction-Barri.patch + patches.suse/0010-x86-mm-Only-flush-indirect-branches-when-switching-i.patch + patches.suse/0011-x86-speculation-Add-basic-IBRS-support-infrastructur.patch + patches.suse/0012-x86-speculation-Add-inlines-to-control-Indirect-Bran.patch + patches.suse/0013-x86-Simplify-spectre_v2-command-line-parsing.patch + patches.suse/0014-x86-idle-Control-Indirect-Branch-Speculation-in-idle.patch + patches.suse/0015-x86-enter-Create-macros-to-restrict-unrestrict-Indir.patch + patches.suse/0016-x86-enter-Use-IBRS-on-syscall-and-interrupts.patch + patches.suse/0017-x86-ibrs-Add-new-helper-macros-to-save-restore-MSR_I.patch + patches.suse/0017-x86-ibrs-Add-new-helper-macros-to-save-restore-MSR_I-fix.patch + patches.suse/0018-x86-vmx-Direct-access-to-MSR_IA32_SPEC_CTRL.patch ######################################################## # Architecture-specific patches. These used to be all ++++++ source-timestamp ++++++ --- /var/tmp/diff_new_pack.IyhK9Q/_old 2018-01-31 19:49:07.717186060 +0100 +++ /var/tmp/diff_new_pack.IyhK9Q/_new 2018-01-31 19:49:07.721185874 +0100 @@ -1,3 +1,3 @@ -2018-01-25 14:26:16 +0100 -GIT Revision: 5b3d0ced9505101bb6a7c1f0eb4978d8f7e9d005 +2018-01-29 09:15:43 +0100 +GIT Revision: 9a6fca576ed483a18c4ef64b85e247fcb33e4c1b GIT Branch: stable

1 0

commit installation-images for openSUSE:Factory
by root＠hilbert.suse.de 31 Jan '18

31 Jan '18

Hello community, here is the log from the commit of package installation-images for openSUSE:Factory checked in at 2018-01-31 19:48:38 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/installation-images (Old) and /work/SRC/openSUSE:Factory/.installation-images.new (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Package is "installation-images" Wed Jan 31 19:48:38 2018 rev:36 rq:571331 version:14.358 Changes: -------- --- /work/SRC/openSUSE:Factory/installation-images/installation-images.changes 2018-01-29 14:54:11.607671944 +0100 +++ /work/SRC/openSUSE:Factory/.installation-images.new/installation-images.changes 2018-01-31 19:48:39.598493489 +0100 @@ -1,0 +2,31 @@ +Wed Jan 31 09:35:28 UTC 2018 - wfeldt(a)opensuse.org + +- merge gh#openSUSE/installation-images#233 +- add missing drivers for ppc (bsc#1077546) +- 14.358 + +-------------------------------------------------------------------- +Tue Jan 30 09:43:51 UTC 2018 - wfeldt(a)opensuse.org + +- merge gh#openSUSE/installation-images#232 +- add full open-iscsi package to zenworks image (bsc# 1077301) +- 14.357 + +-------------------------------------------------------------------- +Mon Jan 29 16:34:50 UTC 2018 - dimstar(a)opensuse.org + +- merge gh#openSUSE/installation-images#231 +- mk_image: /var/lib/rpm/alternatives was moved to + /var/lib/alternatives +- 14.356 + +------------------------------------------------------------------- +Mon Jan 29 10:53:20 UTC 2018 - dimstar(a)opensuse.org + +- Do not explicitly BuildRequire libcryptsetup4-hmac and + libgcrypt20-hmac: since those packages change sonmae every now + and then, it makes it only difficult to follow it. They are + already pulled in by dracut-fips, so we still have them in the + buildroot available. + +-------------------------------------------------------------------- Old: ---- installation-images-14.355.tar.xz New: ---- installation-images-14.358.tar.xz ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ installation-images.spec ++++++ --- /var/tmp/diff_new_pack.AYZiZi/_old 2018-01-31 19:48:40.350458526 +0100 +++ /var/tmp/diff_new_pack.AYZiZi/_new 2018-01-31 19:48:40.350458526 +0100 @@ -253,8 +253,6 @@ BuildRequires: kmod-compat BuildRequires: krb5-devel BuildRequires: less -BuildRequires: libcryptsetup4-hmac -BuildRequires: libgcrypt20-hmac BuildRequires: libopenssl1_0_0-hmac BuildRequires: libpcsclite1 BuildRequires: libyui-ncurses-pkg @@ -502,7 +500,7 @@ Summary: Installation Image Files for %theme License: GPL-2.0+ Group: Metapackages -Version: 14.355 +Version: 14.358 Release: 0 Provides: installation-images = %version-%release Conflicts: otherproviders(installation-images) ++++++ installation-images-14.355.tar.xz -> installation-images-14.358.tar.xz ++++++ diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/installation-images-14.355/VERSION new/installation-images-14.358/VERSION --- old/installation-images-14.355/VERSION 2018-01-29 10:25:54.000000000 +0100 +++ new/installation-images-14.358/VERSION 2018-01-31 10:35:28.000000000 +0100 @@ -1 +1 @@ -14.355 +14.358 diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/installation-images-14.355/bin/mk_image new/installation-images-14.358/bin/mk_image --- old/installation-images-14.355/bin/mk_image 2018-01-29 10:25:54.000000000 +0100 +++ new/installation-images-14.358/bin/mk_image 2018-01-31 10:35:28.000000000 +0100 @@ -241,7 +241,7 @@ unlink "$dir/usr/sbin/alternatives"; unlink "$dir/var/log/update-alternatives.log"; system "rm -r $dir/etc/alternatives/"; - system "rm -r $dir/var/lib/rpm/alternatives/"; + system "rm -rf $dir/var/lib{/rpm,}/alternatives/"; } } diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/installation-images-14.355/changelog new/installation-images-14.358/changelog --- old/installation-images-14.355/changelog 2018-01-29 10:25:54.000000000 +0100 +++ new/installation-images-14.358/changelog 2018-01-31 10:35:28.000000000 +0100 @@ -1,3 +1,12 @@ +2018-01-31: 14.358 + - add missing drivers for ppc (bsc #1077546) + +2018-01-30: 14.357 + - add full open-iscsi package to zenworks image (bsc # 1077301) + +2018-01-29: 14.356 + - mk_image: /var/lib/rpm/alternatives was moved to /var/lib/alternatives + 2018-01-29: 14.355 - make dependency on bash explicit - make cypto lib dependencies more flexible diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/installation-images-14.355/data/root/zenroot.file_list new/installation-images-14.358/data/root/zenroot.file_list --- old/installation-images-14.355/data/root/zenroot.file_list 2018-01-29 10:25:54.000000000 +0100 +++ new/installation-images-14.358/data/root/zenroot.file_list 2018-01-31 10:35:28.000000000 +0100 @@ -70,6 +70,7 @@ net-tools: ?net-tools-deprecated: ntfsprogs: +open-iscsi: parted: polkit: procps: @@ -179,10 +180,6 @@ pciutils-ids: m /usr/share/pci.ids.d/pci.ids.dist /usr/share/pci.ids -open-iscsi: - /sbin - /etc - gawk: /usr/bin/gawk s gawk usr/bin/awk diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/installation-images-14.355/etc/module.config new/installation-images-14.358/etc/module.config --- old/installation-images-14.355/etc/module.config 2018-01-29 10:25:54.000000000 +0100 +++ new/installation-images-14.358/etc/module.config 2018-01-31 10:35:28.000000000 +0100 @@ -524,6 +524,8 @@ amd74xx,"JS20 IDE",,,,1 via82cxxx,"VIA IDE",,,,1 ; scsi +aacraid +kernel/drivers/scsi/megaraid/.* sym53c8xx,"Symbios 53c8xx",,,,1 ipr,"IBM Power Linux RAID adapter",,,,1 ibmvscsi,"IBM Virtual SCSI",,,,1

1 0

commit argon2 for openSUSE:Factory
by root＠hilbert.suse.de 31 Jan '18

31 Jan '18

Hello community, here is the log from the commit of package argon2 for openSUSE:Factory checked in at 2018-01-31 19:48:33 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/argon2 (Old) and /work/SRC/openSUSE:Factory/.argon2.new (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Package is "argon2" Wed Jan 31 19:48:33 2018 rev:6 rq:571066 version:0.0+git20171227.670229c Changes: -------- --- /work/SRC/openSUSE:Factory/argon2/argon2.changes 2018-01-10 23:35:22.419444412 +0100 +++ /work/SRC/openSUSE:Factory/.argon2.new/argon2.changes 2018-01-31 19:48:35.322692298 +0100 @@ -1,0 +2,5 @@ +Tue Jan 30 13:31:06 UTC 2018 - lnussel(a)suse.de + +- add baselibs.conf as cryptsetup also has 32bit variants + +------------------------------------------------------------------- New: ---- baselibs.conf ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ argon2.spec ++++++ --- /var/tmp/diff_new_pack.oXJfij/_old 2018-01-31 19:48:36.046658636 +0100 +++ /var/tmp/diff_new_pack.oXJfij/_new 2018-01-31 19:48:36.050658451 +0100 @@ -33,6 +33,7 @@ Group: Productivity/Networking/Security Url: https://github.com/P-H-C/phc-winner-argon2 Source: %{name}-%{version}.tar.xz +Source1: baselibs.conf Patch1: optflags.patch BuildRequires: pkgconfig BuildRequires: sed ++++++ baselibs.conf ++++++ libargon2-1

1 0

commit dracut for openSUSE:Factory
by root＠hilbert.suse.de 31 Jan '18

31 Jan '18

Hello community, here is the log from the commit of package dracut for openSUSE:Factory checked in at 2018-01-31 19:48:28 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/dracut (Old) and /work/SRC/openSUSE:Factory/.dracut.new (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Package is "dracut" Wed Jan 31 19:48:28 2018 rev:119 rq:569525 version:044.1 Changes: -------- --- /work/SRC/openSUSE:Factory/dracut/dracut.changes 2017-12-16 20:47:36.034261514 +0100 +++ /work/SRC/openSUSE:Factory/.dracut.new/dracut.changes 2018-01-31 19:48:29.846946900 +0100 @@ -1,0 +2,34 @@ +Thu Jan 25 09:19:05 UTC 2018 - daniel.molkentin(a)suse.com + +- support validating the IMA policy file signature, needed since Kernel 4.7 + * Adds 0552-98integrity-support-validating-the-IMA-policy-file-s.patch + +- IMA: improve support for evm key loading (bsc#1077359, fate#323906) + * Adds 0553-98integrity-support-loading-x509-into-the-trusted-bu.patch + * Adds 0554-98integrity-support-X.509-only-EVM-configuration.patch + +- FIPS: Adjust dependencies to work for cryptsetup 2.0 (bsc#1077070) + +- Added a few more patch annotations + +------------------------------------------------------------------- +Fri Jan 19 15:29:15 UTC 2018 - daniel.molkentin(a)suse.com + +- Fix typo for ima dependency (evmtcl vs evmctl) (bsc#1073466) + +- Updated Patch annotation regarding their upstream state + +------------------------------------------------------------------- +Wed Jan 10 11:25:13 UTC 2018 - daniel.molkentin(a)suse.com + +- FIPS: Try to fetch list of fips modules from the kernel's modules dir (bsc#1074984) + * Adds 0551-fips-use-lib-modules-uname-r-modules.fips.patch + +- Annotated patches regarding their upstream state + +------------------------------------------------------------------- +Tue Jan 9 08:08:01 UTC 2018 - daniel.molkentin(a)suse.com + +- dracut-ima requires evmctl and keyutils (bsc#1073466) + +------------------------------------------------------------------- New: ---- 0551-fips-use-lib-modules-uname-r-modules.fips.patch 0552-98integrity-support-validating-the-IMA-policy-file-s.patch 0553-98integrity-support-loading-x509-into-the-trusted-bu.patch 0554-98integrity-support-X.509-only-EVM-configuration.patch ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ dracut.spec ++++++ --- /var/tmp/diff_new_pack.ksBnNX/_old 2018-01-31 19:48:32.550821180 +0100 +++ /var/tmp/diff_new_pack.ksBnNX/_new 2018-01-31 19:48:32.554820994 +0100 @@ -1,7 +1,7 @@ # # spec file for package dracut # -# Copyright (c) 2017 SUSE LINUX GmbH, Nuernberg, Germany. +# Copyright (c) 2018 SUSE LINUX GmbH, Nuernberg, Germany. # # All modifications and additions to the file contributed by third parties # remain the property of their copyright owners, unless otherwise agreed @@ -36,7 +36,7 @@ Source7: 99-debug.conf Source8: s390x_persistent_device.conf -#Network: +# Network, none are upstream yet: Patch12: 0012-40network-Fix-race-condition-when-wait-for-networks.patch Patch13: 0013-40network-always-start-netroot-in-ifup.sh.patch Patch15: 0015-40network-replace-dhclient-with-wickedd-dhcp-supplic.patch @@ -59,33 +59,61 @@ Patch170: 0170-iscsi-skip-ibft-invalid-dhcp.patch #S390 +# Applied upstream as 55c763b1ff37405da390ab1ef5765683f3a7838e Patch16: 0016-Add-new-s390x-specific-rule-files.patch +# Submitted to upstream as d43cccf5885a84d688a3b526d5fc57865369da57 Patch21: 0021-95dcssblk-Add-new-module-for-DCSS-block-devices.patch +# Submitted to upstream as d0c97fdf4c33bb422f0a13a8752751d3054de143 Patch56: 0056-81cio_ignore-handle-cio_ignore-commandline.patch +# Applied upstream as 856d039ba4716ba080fc8d823b3329a4470a60ef Patch75: 0075-95dasd_rules-enable-parsing-of-rd.dasd-commandline-p.patch +# Applied upstream as 5d1ea2d72616ec7ed9cf5e1f3bc99d7d5bc4f003 Patch76: 0076-Correctly-set-cio_ignore-for-dynamic-s390-rules.patch +# Applied upstream as e5d21b80c054235114c4167e0bf7769aa698b4d4 Patch79: 0079-95dasd_rules-fixup-rd.dasd-parsing.patch +# Applied upstream as 13626413107b67ab493ccfc4f6a1c6bef228a74e Patch80: 0080-95dasd_rules-print-out-rd.dasd-commandline.patch +# Applied upstream as 6f1b5c0dabe57259d7e67ab9b643b11b70deb388 Patch81: 0081-95dasd_mod-do-not-set-module-parameters-if-dasd_cio_.patch +# Applied upstream as 9be4be7aa72af312c6b0588ddb008da7632612bc Patch83: 0083-95zfcp_rules-Fixup-rd.zfcp-parsing.patch +# Applied upstream as 624f173cbd49b7389577aac10a887f16d4f89b7a Patch85: 0085-95zfcp_rules-print-out-rd.zfcp-commandline-parameter.patch +# Applied upstream as c8e531239bf314ae532ca1bc820285250a3b35d7 Patch86: 0086-95zfcp_rules-Auto-generate-udev-rule-for-ipl-device.patch +# Applied upstream as bd355f8643555762acf02c6dd6179b683cd0a6aa Patch87: 0087-95dasd_rules-Auto-generate-udev-rule-for-ipl-device.patch +# Submitted to upstream as 73f89bbadbd61ffb4cb485e11b630571185b7ef2 Patch88: 0088-91zipl-Add-new-module-to-update-s390x-configuration.patch +# Applied upstream as 2600b54c187e5668f5b55d5d73f49e99c7b33212 Patch107: 0107-Fixup-typo-firmare-instead-of-firmware.patch +# Submitted to upstream as 73f89bbadbd61ffb4cb485e11b630571185b7ef2 Patch108: 0108-91zipl-Store-commandline-correctly.patch +# Applied upstream as 05bf32097201c24c56dc6bb7a59a428293247d61 Patch109: 0109-95dasd_rules-Store-all-devices-in-commandline.patch +# Applied upstream as 3a8ba440265696ce1279dc12eb5a7acda14c1712 Patch110: 0110-95zfcp_rules-Store-all-devices-in-commandline.patch +# Submitted to upstream as d118e9d94050ea65cb4514dda5fda10ef30275fe Patch113: 0113-91zipl-Install-script-as-executable.patch +# Submitted to upstream as 403f2c3e1dbb681c27b1279b9d023449cfc6d007 Patch114: 0114-91zipl-Translate-ext2-3-into-ext4.patch +# TODO: Apply upstream, already incorporated where original patches have been upstreamed Patch116: 0116-Mark-scripts-as-executable.patch +# Applied upstream as cf9c8c5fe3fdb899b57c25867bf54b74adc3272f Patch117: 0117-95dasd_rules-Enable-the-device-before-checking-devic.patch +# Applied upstream as 5e7bbe43a349a9d3ef0300c61f62a49a2e44c0a0 Patch118: 0118-95zfcp_rules-Enable-the-device-before-checking-devic.patch +# Applied upstream as 5f923256e33893bead8233852a741a4b0036f709 Patch123: 0123-95zfcp_rules-fix-typo-in-module_setup.patch +# Submitted to upstream as 33260dac6e0980da2d6577a29d83644b6637745c Patch157: 0157-Add-boot-zipl-to-host-devs-if-it-is-a-mount-point.patch +# Submitted to upstream as 8bae047a4e096e69a34c520dae15458e210eecdb Patch160: 0160-s390-update_active_devices_initrd.patch +# Applied upstream as c8aa1d949aecaf146b0a0e1ce269f69e6048dc5a Patch161: 0161-95zfcp_rules-simplified-rd.zfcp-commandline-for-NPIV.patch +# Applied upstream as e5bf1cecd635897e5f2c8ae373494d33af3b1996 Patch188: 0188-95dasd_rules-Install-collect-udev-helper-binary.patch +# TODO: Apply upstream (??) Patch506: 0506-Boot-on-s390x-with-fips-1-on-the-kernel-commnad-line.patch #FIPS @@ -99,25 +127,35 @@ Patch510: 0510-01fips-Some-modules-use-separators-other-than.patch Patch511: 0511-01fips-ensure-fips-initialization-succeeds-on-s390-x.patch -# Others +# Others, partly SUSE specific. Not submitted unless annotated otherwise + +# Submitted to upstream as 7ce2872be28a5463757651cc30049c3f4e81559a Patch20: 0020-00warpclock-Set-correct-timezone.patch Patch58: 0058-dracut-add-warning-when-including-unsupported-module.patch Patch59: 0059-99suse-Add-SUSE-specific-initrd-parsing.patch +# TODO: This should not be a patch, but be removed in the install section Patch90: 0090-dracut-caps-Remove-whole-caps-module.patch Patch91: 0091-dracut-biosdevname-In-SUSE-biosdevname-package-is-in.patch Patch121: 0121-Adjust-initramfs-kernel.img-to-SUSE-default-initrd-k.patch Patch130: 0130-nfs-Always-add-all-kernel-modules-for-kdump.patch +# Applied upstream as c3b6970394ad677f05a42bef420bf34b1d0652e0 Patch144: 0144-90crypt-Fixed-crypttab_contains-to-also-work-with-de.patch Patch150: 0150-Find-kernel-modules-in-extra-and-weak-updates-path-a.patch Patch158: 0158-Add-SUSE-kernel-module-dependencies-in-etc-modprobe.patch Patch163: 0163-Install-etc-sysconfig-console-to-see-specific-fonts.patch +# TODO: Verify: Should be obsolete due to fixes in systemd Patch164: 0164-Fix-initramfs-ver.img-vs-initrd-ver-in-dracut-initra.patch +# Submitted as a check to upstream as 446654703742e6c1d7b1134a7d73b2bf7ce20cda Patch168: 0168-remove_plymouth_logo_file.patch +# Applied upstream as 251afd36b2be35b7b27011b6f90b5ab3bbbbff84 Patch180: 0180-i18n_add_correct_fontmaps.patch +# Applied upstream as dcacd2b072c301a51c114256e8bb696346879a2b Patch182: 0182-fix-include-parsing.patch +# Applied upstream as d53bb5c01737270049fde82559ae72aae1943b81 Patch183: 0183-fix_add_drivers_hang.patch # iscsiadm +# TODO: Apply all patches in this section upstream Patch190: 0190-replace-iscsistart-with-systemd-service-files.patch Patch191: 0191-static_network_setup_return_zero.patch Patch192: 0192-iscsi_set_boot_protocol_from_ifcfg.patch @@ -128,31 +166,58 @@ Patch199: 0199-rd-iscsi-waitnet-default-false.patch # Submit mainline asap + +# Applied upstream as 5c84d51b3f258af9035a4031c6b482103adea4d9 Patch128: 0128-90lvm-Install-dm-snapshot-module.patch +# Applied upstream as d12ce1da8551c065616f81f158b6425b20ee191c Patch200: 0200-dracut_fix_multipath_without_config.patch +# Applied upstream as f5c10673de18d84f3b054df9a68ffa8d43f9571c Patch201: 0201-fix_nfs_with_ip_instead_of_hostname.patch +# TODO: Apply upstream Patch202: 0202-dracut_dmraid_use_udev.patch +# TODO: Check if still an issue with C-style insmod logic Patch203: 0203-no-fail-builtin-module.patch +# Applied upstream as 51d2436c22d64e45376c64ad3b6c90c48cc88d78 Patch204: 0204-mkinitrd-fix-monster.patch +# TODO: Apply upstream Patch205: 0205-mdraid_ignore_hostonly.patch +# Applied upstream as 8602e5986702f6118f8b30f1053a45af1df892bd Patch206: 0206-nfs_dns_alias.patch +# Applied upstream as 43819af68c7789ec932c25e699c56889fdf7276c Patch207: 0207-handle_module_aliases.patch +# TODO: Possibly made redundant by changes done by upstream Patch208: 0208-no_forced_virtnet.patch +# Applied upstream as 9fd3e045d5b41ba5cf9fb0c51db9750ce0e530d8 Patch209: 0209-fix_modules_load_d_hostonly.patch +# Applied upstream as 22836a092191c1abc0e04e4c6d68856f2603d6e8 Patch210: 0210-add_fcoe_uefi_check.patch +# Applied upstream as 6b96b50d2cd92d6598240e6061a81b29b889ecdd Patch212: 0212-fcoe_reorder_init_path.patch +# Applied upstream as 18729719a7091c35ffe377b21b860a60a352def8 Patch213: 0213-Fix-wrong-keymap-inclusion.patch +# Applied upstream as d066fcc3fb9080ffff412c8dc5177ca1dcc08e75 Patch214: 0214-95fcoe-Do-not-overwrite-FCoE-configuration.patch +# Applied upstream as 1279a9e1a0a28107e0a240ab344f700b465c96b3 by upstream Patch215: 0215-95fcoe-Do-not-complain-about-missing-etc-hba.conf.patch +# Applied upstream as d71c9ee286def5d1a5e90f549b65e21d0f18c9ac Patch216: 0216-95fcoe-silence-lldpad-warnings.patch +# Applied upstream as c75196e11ec4325fc76bb11aeb884ceade62df48 Patch217: 0217-95fcoe-Allow-to-specify-the-FCoE-mode-via-the-fcoe-p.patch +# Probably not upstreamable? Patch218: 0218-40network-allow-persistent-interface-names.patch +# Applied upstream as 164760f4b075ff564c349cb40d1fa308c139432d Patch219: 0219-95fcoe-use-interface-names-instead-of-MAC-addresses.patch +# Applied upstream as 2aac3194100b903740bb9057aed71a35ce92a2e3 Patch220: 0220-95fcoe-always-set-AUTO_VLAN-for-fcoemon.patch +# Applied upstream as a3f91db4768451a10fbbc3e28270c29e1368df6c Patch221: 0221-95fcoe-Add-shutdown-script.patch +# Applied upstream as 07e635748342aa70a76bc1a2237339f6a897d841 Patch222: 0222-90dm-Fixup-shutdown-script.patch +# Applied upstream as 870591acec41e854071129e7bf834cdfe43ae716 Patch223: 0223-90dm-fixup-dependency-cycle-between-MD-and-DM-shutdo.patch +# TODO: Apply upstream Patch224: 0224-95iscsi-setup-bnx2i-offload-connections-properly.patch +# Applied upstream as part of 36a8b2e3058518255dbd39e33bf2c72b7889cfae Patch225: 0225-95fcoe-do-not-start-fcoemon-twice.patch # SUSE-specific fixes @@ -173,68 +238,130 @@ Patch314: 0314-nfs_do_not_pass_ifname_for_bonding_devices.patch # New features/improvements +# TODO: Apply upstream Patch402: 0402-driver-fail-summary.patch +# Applied upstream as 10f06425a597ca797b8efbf45e8838c4d30651e9 Patch403: 0403-95lunmask-Add-module-to-handle-LUN-masking.patch +# Applied upstream as 1f8a7ae799effed1e57033167beca4281389391c Patch404: 0404-dracut-emergency-optionally-print-fs-help.patch # Workarounds/Patches no longer relevant in 045 Patch450: 0450-Strip-NUL-bytes-in-stream-before-push-in-string.patch +# Patch from upstream: d4efc0aeeecc470d9a267b7f3c130f472488905c Patch451: 0451-systemd-initrd-add-initrd-root-device.target.patch +# Applied upstream as 9ffab3f3a5105691b4b640649c3a99e3cce39c1a Patch452: 0452-Always-try-to-add-pinctrl-cherryview.patch +# Applied upstream as 7957bd01b097507a601495ed7cd2c8480c2af67b Patch453: 0453-Resolve-symbolic-links-for-i-and-k-parameters-bsc-90.patch +# Applied upstream as e69da98de1a4175fb3c745570471fc3a7d567a33 Patch454: 0454-Add-md4-and-arc4-modules-for-ntlm.patch # On top patches/fixes which have to be applied late +# Applied upstream as 8b0791fa010cf7e5fde3a37a8c2bb6d6f1264f59 Patch500: 0500-Reset-IFS-variable.patch +# Applied upstream as e0c3b0793f92c24d442f543a755aed8cc218ab20 Patch501: 0501-dasd_fix_ssid_bigger_zero.patch +# TODO: Apply upstream Patch502: 0502-persistent_device_policy_param_enhance.patch +# Applied upstream as 0db98910a11c12a454eac4c8e86dc7a7bbc764a4 Patch503: 0503-dracut.sh-create-the-initramfs-non-world-readable-al.patch +# TODO: Apply upstream Patch504: 0504-ibft-fix-boot-flag-check.patch +# Applied upstream as f1c790495baa017ec48b266a33b0dd558e760dde Patch505: 0505-Allow-booting-from-degraded-MD-RAID-arrays.patch +# Applied upstream as 649619f6a5775d1c94d9c4f3fec627c747633275 Patch507: 0507-Set-TaskMax-inifinite-for-the-emergency-shell.patch +# Applied upstream as 8008d47fafcecd27c456215e910be33a23546519 Patch508: 0508-90multipath-start-before-local-fs-pre.target.patch +# Applied upstream as 8b6d136e625cb538f8845e858b37e9f6c67a5f1c Patch512: 0512-Make-binutils-optional-when-elfutils-are-available.patch +# TODO: Apply upstream Patch513: 0513-Fix-regression-caused-by-6f9bf2b8ac436259bdccb110545.patch +# Applied upstream as 4a739be99c409719e76078ece55e7ba3c817b054 Patch514: 0514-man-make-the-k-option-clear-using-mkinitrd.patch +# Reverted later. Do not submit! Patch515: 0515-90kernel-modules-also-add-block-device-driver-revers.patch +# Applied upstream as 7cf2c21798b537a5553ecc23df5ce8cfda631e9c Patch516: 0516-mkinitrd-suse.sh-Fix-prefix-calculation.patch +# Applied upstream as fd13d5d4d50dd837be393c4b7dc1859237f6daac Patch517: 0517-95fcoe-fixup-fcoe-genrules.sh-for-VN2VN-mode.patch +# Fixed more generically in upstream as feaaee4278077dd67fe24acebfbe47ba20738955 Patch518: 0518-90kernel-modules-Fix-backlight-on-Cherrytrail-device.patch +# TODO: Apply upstream if correct Patch519: 0519-90kernel-modules-Ensure-phy-drivers-are-loaded-in-in.patch +# TODO: Check if still relevant and apply upstream Patch520: 0520-Ignore-module-resolution-errors.patch +# TODO: Apply upstream Patch521: 0521-Ensure-udev-persistent-storage-compat-rules-get-crea.patch +# TODO: belongs with FIPS commits Patch522: 0522-Fix-typo-from-commit-3f1cdb520.patch +# Applied upstream as e3189ab1235748cda136b564668b697d1c87847b Patch523: 0523-98dracut-systemd-Fix-module-force-loading-with-syste.patch +# Fixes SUSE Patch Patch524: 0524-Suppress-nonsensical-error-message-bsc-1032029.patch +# Applied from upstream commit 106255afd46ea2be1d035aca0c5695186a3f2c41 Patch525: 0525-backport-bail-out-if-module-directory-does-not-exist.patch +# TODO: apply upstream Patch526: 0526-iscsiroot-call-handle_firmware-only-for-non-iface-in.patch +# TODO: belongs with FIPS commits Patch527: 0527-switch-fips-checking-to-use-the-libkcapi-based-fipsc.patch +# TODO: apply upstream Patch528: 0528-Ensure-dracut.sh-responds-properly-to-hostonly_cmdli.patch +# Applied from upstream commit 8261d2367ee673e24d03306b9623f4f3070dae5b Patch529: 0529-systemd-add-missing-.slice-unit.patch +# Applied from upstream commit eddca3c9c24e4cb9c5def0b98920e36b16fafaac Patch530: 0530-dracut-systemd-dracut-cmdline-ask-fix-dracut-kernel-.patch +# Applied from upstream commit c000a21c25bd436f2b3cc2076cb7025cc82d2807 Patch531: 0531-dracut-systemd-.service-conflict-with-shutdown-targe.patch +# Do not submit, reverts bogus patch Patch532: 0532-List-drivers-rather-than-looking-for-reverse-depende.patch +# TODO: check if still relevant Patch533: 0533-instmods-check-modules.builtin-in-srcmods.patch +# Applied upstream as 348935e3b65b5058e65f66682df6a5b184eaacb2 Patch534: 0534-ssh-client-Include-nss_-libraries.patch +# Applied upstream as e316ae0e4309726b2c067a70ac41f7b22011c063 Patch535: 0535-Sync-initramfs-after-creation.patch +# TODO: apply upstream Patch536: 0536-90multipath-drop-67-kpartx-compat.rules.patch +# TODO: check how to submit upstream Patch537: 0537-dracut-init.sh-ignore-crc32.ko-in-builtin-test.patch +# Applied upstream as afe4e2844ffa7c06160434430f0ce9e493c112e0 Patch538: 0538-Enable-core-dumps-with-systemd-from-initrd.patch +# Not eligable for submit, unless specfile gets submitted Patch539: 0539-Add-IMA-functionality-fate-323289.patch +# Applied from upstream commit 551cc3694e32be97084b1f198f76f4daf908d503 Patch540: 0540-Check-the-proper-variable-for-a-custom-IMA-keys-dire.patch # SLE and Leap have persistent net names, but not Factory/TW %if 0%{?suse_version} && ! 0%{?sle_version} +# TODO: Unsure if this can be sumbmitted Patch541: 0541-Make-sure-70-persistent-net.rules-is-included-in-ini.patch %endif +# Applied upstream as 9f2916cce13d584610295e001394274e823c3f15 Patch542: 0542-Include-crc32c-intel-module-when-using-btrfs.patch +# Applied upstream as b36d322bd2ccb6ef4eb31384c86a75572184bba1 Patch543: 0543-Remove-00systemd-bootchart.patch +# TODO: Check if still relevant Patch544: 0544-40network-Make-ip-dhcp-work.patch +# More generic fix upstream Patch545: 0545-Add-early-microcode-support-for-AMD-family-16h.patch +# More generic fix upstream Patch546: 0546-Support-Microcode-Updates-for-AMD-CPU-Family-0x17.patch +# Applied upstream as df96cccc8f562f8aeab7c09248c204f21ed42c4a Patch547: 0547-Fix-task-limit-in-emergency.service-the-same-change-.patch +# Applied upstream as 36a8b2e3058518255dbd39e33bf2c72b7889cfae Patch548: 0548-95fcoe-Switch-back-to-using-fipvlan-for-bnx2fc.patch +# Same patch applied by upstream: 3966a1e1ee0e3d27197258f446f54b683c415208 Patch549: 0549-fcoe-up-Increase-sleeptime-to-13s.patch +# Applied upstream as fd13d5d4d50dd837be393c4b7dc1859237f6daac Patch550: 0550-95fcoe-add-timeout-initqueue-entries.patch +# Patch adopted from upstream commit 7c29d205f4bfb465f1618fdb8984798522c8eb4a +Patch551: 0551-fips-use-lib-modules-uname-r-modules.fips.patch +# Patch adopted from upstream commit 479b5cd94f16052cf6ea28d0e8abba2b926fff83 +Patch552: 0552-98integrity-support-validating-the-IMA-policy-file-s.patch +# Patch submitted to upstream as 9e451d4770ec3a98816fcf97fdd745d6af135336 +Patch553: 0553-98integrity-support-loading-x509-into-the-trusted-bu.patch +# Patch submitted to upstream as cb2c9a4338ddc15d55c6c524276a1807bec23485 +Patch554: 0554-98integrity-support-X.509-only-EVM-configuration.patch BuildRequires: asciidoc BuildRequires: bash @@ -282,7 +409,7 @@ Requires(post): coreutils Requires: %{name} = %{version}-%{release} Requires: fipscheck -Requires: libcryptsetup4-hmac +Requires: libcryptsetup12-hmac Requires: libgcrypt20-hmac Requires: libkcapi-tools @@ -295,6 +422,8 @@ Summary: Dracut modules to build a dracut initramfs with IMA Group: System/Base Requires: %{name} = %{version}-%{release} +Requires: evmctl +Requires: keyutils %description ima This package requires everything which is needed to build an @@ -505,6 +634,10 @@ %patch548 -p1 %patch549 -p1 %patch550 -p1 +%patch551 -p1 +%patch552 -p1 +%patch553 -p1 +%patch554 -p1 %build %configure\ ++++++ 0551-fips-use-lib-modules-uname-r-modules.fips.patch ++++++ >From 2a7f2be7475dfaf5090bbafbbf5b7eb3067eef46 Mon Sep 17 00:00:00 2001 From: Daniel Molkentin <dmolkentin(a)suse.com> Date: Wed, 10 Jan 2018 11:03:22 +0100 Subject: [PATCH] fips: use /lib/modules/$(uname -r)/modules.fips if /lib/modules/$(uname -r)/modules.fips exists, use that list instead of the hardcoded dracut module list. Backported from upstream's master branch diff --git a/modules.d/01fips/module-setup.sh b/modules.d/01fips/module-setup.sh index 9e5eca4f..709cfc85 100755 --- a/modules.d/01fips/module-setup.sh +++ b/modules.d/01fips/module-setup.sh @@ -13,18 +13,22 @@ depends() { # called by dracut installkernel() { local _fipsmodules _mod - _fipsmodules="ansi_cprng arc4 authenc ccm " - _fipsmodules+="ctr cts deflate drbg " - _fipsmodules+="ecb fcrypt gcm ghash_generic khazad md4 michael_mic rmd128 " - _fipsmodules+="rmd160 rmd256 rmd320 seed " - _fipsmodules+="sha512_generic tcrypt tea wp512 xts " - _fipsmodules+="aes_s390 des_s390 sha256_s390 ghash_s390 sha1_s390 sha512_s390 " - _fipsmodules+="gf128mul " - _fipsmodules+="cmac vmac xcbc salsa20_generic salsa20_x86_64 camellia_generic camellia_x86_64 pcbc tgr192 anubis " - _fipsmodules+="cast6_generic cast5_generic cast_common sha512_ssse3 serpent_sse2_x86_64 serpent_generic twofish_generic " - _fipsmodules+="ablk_helper cryptd twofish_x86_64_3way lrw glue_helper twofish_x86_64 twofish_common blowfish_generic " - _fipsmodules+="blowfish_x86_64 blowfish_common des_generic cbc " - _fipsmodules+="algif_hash af_alg crypto_user " + if [[ -f "${srcmods}/modules.fips" ]]; then + _fipsmodules="$(cat "${srcmods}/modules.fips")" + else + _fipsmodules="ansi_cprng arc4 authenc ccm " + _fipsmodules+="ctr cts deflate drbg " + _fipsmodules+="ecb fcrypt gcm ghash_generic khazad md4 michael_mic rmd128 " + _fipsmodules+="rmd160 rmd256 rmd320 seed " + _fipsmodules+="sha512_generic tcrypt tea wp512 xts " + _fipsmodules+="aes_s390 des_s390 sha256_s390 ghash_s390 sha1_s390 sha512_s390 " + _fipsmodules+="gf128mul " + _fipsmodules+="cmac vmac xcbc salsa20_generic salsa20_x86_64 camellia_generic camellia_x86_64 pcbc tgr192 anubis " + _fipsmodules+="cast6_generic cast5_generic cast_common sha512_ssse3 serpent_sse2_x86_64 serpent_generic twofish_generic " + _fipsmodules+="ablk_helper cryptd twofish_x86_64_3way lrw glue_helper twofish_x86_64 twofish_common blowfish_generic " + _fipsmodules+="blowfish_x86_64 blowfish_common des_generic cbc " + _fipsmodules+="algif_hash af_alg crypto_user " + fi mkdir -m 0755 -p "${initdir}/etc/modprobe.d" -- 2.13.6 ++++++ 0552-98integrity-support-validating-the-IMA-policy-file-s.patch ++++++ >From d31e03d34cc743c6538f532704ec7fc3bc75a03d Mon Sep 17 00:00:00 2001 From: Stefan Berger <stefanb(a)us.ibm.com> Date: Thu, 13 Oct 2016 16:49:43 -0400 Subject: [PATCH] 98integrity: support validating the IMA policy file signature IMA validates file signatures based on the security.ima xattr. As of Linux-4.7, instead of cat'ing the IMA policy into the securityfs policy, the IMA policy pathname can be written, allowing the IMA policy file signature to be validated. This patch first attempts to write the pathname, but on failure falls back to cat'ing the IMA policy contents . Signed-off-by: Stefan Berger <stefanb(a)linux.vnet.ibm.com> Signed-off-by: Mimi Zohar <zohar(a)linux.vnet.ibm.com> --- modules.d/98integrity/ima-policy-load.sh | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/modules.d/98integrity/ima-policy-load.sh b/modules.d/98integrity/ima-policy-load.sh index 0061cfff..5460d025 100755 --- a/modules.d/98integrity/ima-policy-load.sh +++ b/modules.d/98integrity/ima-policy-load.sh @@ -30,7 +30,8 @@ load_ima_policy() # check the existence of the IMA policy file [ -f "${IMAPOLICYPATH}" ] && { info "Loading the provided IMA custom policy"; - cat ${IMAPOLICYPATH} > ${IMASECDIR}/policy; + echo -n "${IMAPOLICYPATH}" > ${IMASECDIR}/policy || \ + cat "${IMAPOLICYPATH}" > ${IMASECDIR}/policy } return 0 -- 2.13.6 ++++++ 0553-98integrity-support-loading-x509-into-the-trusted-bu.patch ++++++ >From 266d28ad09755c1c7016891f356bb75a9861f77c Mon Sep 17 00:00:00 2001 From: Matthias Gerstner <matthias.gerstner(a)suse.de> Date: Wed, 24 Jan 2018 16:58:15 +0100 Subject: [PATCH 1/2] 98integrity: support loading x509 into the trusted/builtin .evm keyring This implements logic analogous to the one already implemented in ima-keys-load.sh, only for the .evm/_evm keyrings. If the kernel was built with CONFIG_IMA_TRUSTED_KEYRING then the kernel initially creates and configures .ima and .evm keyrings. These keyrings only accept x509 certificates that have been signed by a local CA which belongs to the kernel builtin trusted keyring. Thus if such a keyring is already present then additional evm keys should be loaded into them. If this is not the case then the _evm keyring needs to be created in userspace and keys will be loaded into it instead. Before this change dracut always created the _evm keyring and loaded keys into it without considering an existing .evm keyring. In case of CONFIG_IMA_TRUSTED_KEYRING being enabled, the _evm keyring will not be used by the kernel, however, and EVM digital signatures will not work as expected. --- modules.d/98integrity/evm-enable.sh | 15 ++++++++++++++- 1 file changed, 14 insertions(+), 1 deletion(-) diff --git a/modules.d/98integrity/evm-enable.sh b/modules.d/98integrity/evm-enable.sh index ec4f03bc..a3ba59fd 100755 --- a/modules.d/98integrity/evm-enable.sh +++ b/modules.d/98integrity/evm-enable.sh @@ -76,8 +76,21 @@ load_evm_x509() return 1 fi + local evm_pubid + local line=$(keyctl describe %keyring:.evm) + if [ $? -eq 0 ]; then + # the kernel already setup a trusted .evm keyring so use that one + evm_pubid=${line%%:*} + else + # look for an existing regular keyring + evm_pubid=`keyctl search @u keyring _evm` + if [ -z "${evm_pubid}" ]; then + # create a new regular _evm keyring + evm_pubid=`keyctl newring _evm @u` + fi + fi + # load the EVM public key onto the EVM keyring - evm_pubid=`keyctl newring _evm @u` EVMX509ID=$(evmctl import ${EVMX509PATH} ${evm_pubid}) [ $? -eq 0 ] || { info "integrity: failed to load the EVM X509 cert ${EVMX509PATH}"; -- 2.13.6 ++++++ 0554-98integrity-support-X.509-only-EVM-configuration.patch ++++++ >From 16d52f692c2add82f54f712a7fc60885536dc39a Mon Sep 17 00:00:00 2001 From: Matthias Gerstner <matthias.gerstner(a)suse.de> Date: Wed, 24 Jan 2018 17:19:03 +0100 Subject: [PATCH 2/2] 98integrity: support X.509-only EVM configuration Previously if no symmetric key was configured for EVM, then the initialization process was aborted. It can be a valid use case, however, to only use EVM digital signatures. In this case only X.509 certificates need to be loaded. With this change EVM initialization will continue if any of the symmetric or X.509 keys could be loaded. --- modules.d/98integrity/evm-enable.sh | 15 +++++++++++---- 1 file changed, 11 insertions(+), 4 deletions(-) diff --git a/modules.d/98integrity/evm-enable.sh b/modules.d/98integrity/evm-enable.sh index a3ba59fd..5a92b598 100755 --- a/modules.d/98integrity/evm-enable.sh +++ b/modules.d/98integrity/evm-enable.sh @@ -125,11 +125,18 @@ enable_evm() return 0 fi - # load the EVM encrypted key - load_evm_key || return 1 + local evm_configured + + # try to load the EVM encrypted key + load_evm_key && evm_configured=1 + + # try to load the EVM public key + load_evm_x509 && evm_configured=1 - # load the EVM public key, if it exists - load_evm_x509 + # only enable EVM if a key or x509 certificate could be loaded + if [ -z "$evm_configured" ]; then + return 1 + fi # initialize EVM info "Enabling EVM" -- 2.13.6

1 0

commit open-iscsi for openSUSE:Factory
by root＠hilbert.suse.de 31 Jan '18

31 Jan '18

Hello community, here is the log from the commit of package open-iscsi for openSUSE:Factory checked in at 2018-01-31 19:48:22 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/open-iscsi (Old) and /work/SRC/openSUSE:Factory/.open-iscsi.new (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Package is "open-iscsi" Wed Jan 31 19:48:22 2018 rev:68 rq:568778 version:unknown Changes: -------- --- /work/SRC/openSUSE:Factory/open-iscsi/open-iscsi.changes 2017-12-19 10:48:47.853416784 +0100 +++ /work/SRC/openSUSE:Factory/.open-iscsi.new/open-iscsi.changes 2018-01-31 19:48:23.903223260 +0100 @@ -1,0 +2,32 @@ +Tue Jan 23 22:43:51 UTC 2018 - lduncan(a)suse.com + +- Removed the "rpm/" source directory from both the + open-iscsi-2.0.876-suse.tar.bz2 and open-iscsi-SUSE-latest.diff.bz2 + files, since they are not needed for building and are not part + of the upstream sources. They are still available under the + git repository at github.com/hreinecke/open-iscsi.git. This means + that changes to the spec file or the changes file will no longer + require a change to the "*SUSE-latest*" file. + +------------------------------------------------------------------- +Mon Jan 22 20:58:30 UTC 2018 - lduncan(a)suse.com + +- Update to latest upstream vesion 2.0.876, with very few + SUSE-specific modifications, namely around things upstream + does not care about, like SUSE-specific systemd files. Also, + version number modified to add "-suse", as usual. See + the Changelog file for more details on changes in this + upstream version. + + This replaces open-iscsi-2.0.875-suse.tar.bz2 with + open-iscsi-2.0.876-suse.tar.bz2, and resets + open-iscsi-SUSE-latest.diff.bz2 to contain only changes + since the 2.0.876-suse tag. + + These changes added a new libopeniscsiusr.so library, as + well as include files under a new open-iscsi-dev package, + if you want to link against this library. + + The SPEC file was also cleaned up using spec-cleaner. + +------------------------------------------------------------------- Old: ---- open-iscsi-2.0.875-suse.tar.bz2 New: ---- open-iscsi-2.0.876-suse.tar.bz2 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ open-iscsi.spec ++++++ --- /var/tmp/diff_new_pack.6PlYsv/_old 2018-01-31 19:48:24.563192574 +0100 +++ /var/tmp/diff_new_pack.6PlYsv/_new 2018-01-31 19:48:24.567192388 +0100 @@ -1,7 +1,7 @@ # # spec file for package open-iscsi # -# Copyright (c) 2017 SUSE LINUX GmbH, Nuernberg, Germany. +# Copyright (c) 2018 SUSE LINUX GmbH, Nuernberg, Germany. # # All modifications and additions to the file contributed by third parties # remain the property of their copyright owners, unless otherwise agreed @@ -16,11 +16,21 @@ # +%define iscsi_release 876-suse Name: open-iscsi +Version: 2.0.876 +Release: 0 +Summary: Linux* Open-iSCSI Software Initiator +License: GPL-2.0+ +Group: Productivity/Networking/Other +Url: http://www.open-iscsi.com +Source: %{name}-2.0.%{iscsi_release}.tar.bz2 +Patch1: %{name}-SUSE-latest.diff.bz2 BuildRequires: autoconf BuildRequires: automake BuildRequires: bison BuildRequires: db-devel < 5 +BuildRequires: fdupes BuildRequires: flex BuildRequires: libmount-devel BuildRequires: libtool @@ -29,18 +39,8 @@ BuildRequires: openssl-devel BuildRequires: suse-module-tools BuildRequires: systemd -Url: http://www.open-iscsi.com -Version: 2.0.875 -Release: 0 -%{?systemd_requires} -%define iscsi_release 875-suse -Summary: Linux* Open-iSCSI Software Initiator -License: GPL-2.0+ -Group: Productivity/Networking/Other Requires(post): coreutils -Source: %{name}-2.0.%{iscsi_release}.tar.bz2 -Patch1: %{name}-SUSE-latest.diff.bz2 -BuildRoot: %{_tmppath}/%{name}-%{version}-build +%{?systemd_requires} %description Open-iSCSI is a high-performance, transport independent, multi-platform @@ -62,10 +62,10 @@ and a management utility iscsiadm. %package -n iscsiuio -Summary: Linux Broadcom NetXtremem II iscsi server -Group: Productivity/Networking/Other Version: 0.7.8.2 Release: 0 +Summary: Linux Broadcom NetXtremem II iscsi server +Group: Productivity/Networking/Other Requires: logrotate %description -n iscsiuio @@ -82,44 +82,59 @@ The communication to the driver is done via Userspace I/O (Kernel module name 'uio'). +%package devel +Version: 2.0.876 +Release: 0 +Summary: Linux open-iscsi user-level library and include files +Group: Development/Libraries/C and C++ +Requires: %{name} + +%description devel +This development package contains the open-iscsi user-level library +include files and documentation. These are used to compile against +the libopeniscsiusr library. + %prep -%setup -n %{name}-2.0.%{iscsi_release} +%setup -q -n %{name}-2.0.%{iscsi_release} %patch1 -p1 %build -%{__make} OPTFLAGS="${RPM_OPT_FLAGS} -fno-strict-aliasing -DOFFLOAD_BOOT_SUPPORTED -DLOCK_DIR=\\\"/etc/iscsi\\\"" LDFLAGS="" user +make %{?_smp_mflags} OPTFLAGS="%{optflags} -fno-strict-aliasing -DOFFLOAD_BOOT_SUPPORTED -DLOCK_DIR=\\\"%{_sysconfdir}/iscsi\\\"" LDFLAGS="" user cd iscsiuio touch NEWS touch AUTHORS autoreconf --install %configure --sbindir=/sbin -make CFLAGS="${RPM_OPT_FLAGS}" +make %{?_smp_mflags} CFLAGS="%{optflags}" %install -make DESTDIR=${RPM_BUILD_ROOT} install_user +make DESTDIR=%{buildroot} install_user # install service files -make DESTDIR=${RPM_BUILD_ROOT} install_service_suse +make DESTDIR=%{buildroot} install_service_suse # create rc symlinks -[ -d ${RPM_BUILD_ROOT}/usr/sbin ] || mkdir -p ${RPM_BUILD_ROOT}/usr/sbin +[ -d %{buildroot}%{_sbindir} ] || mkdir -p %{buildroot}%{_sbindir} ln -s %{_sbindir}/service %{buildroot}%{_sbindir}/rciscsi ln -s %{_sbindir}/service %{buildroot}%{_sbindir}/rciscsid ln -s %{_sbindir}/service %{buildroot}%{_sbindir}/rciscsiuio -(cd ${RPM_BUILD_ROOT}/etc; ln -sf iscsi/iscsid.conf iscsid.conf) -touch ${RPM_BUILD_ROOT}/etc/iscsi/initiatorname.iscsi +(cd %{buildroot}/etc; ln -sf iscsi/iscsid.conf iscsid.conf) +touch %{buildroot}%{_sysconfdir}/iscsi/initiatorname.iscsi install -m 0755 usr/iscsistart %{buildroot}/sbin -make DESTDIR=${RPM_BUILD_ROOT} -C iscsiuio install +make DESTDIR=%{buildroot} -C iscsiuio install +%fdupes %{buildroot} %post %{?regenerate_initrd_post} -if [ ! -f /etc/iscsi/initiatorname.iscsi ] ; then +if [ ! -f %{_sysconfdir}/iscsi/initiatorname.iscsi ] ; then /sbin/iscsi-gen-initiatorname fi +%{run_ldconfig} %{service_add_post iscsid.socket iscsid.service iscsi.service} %posttrans %{?regenerate_initrd_posttrans} %postun +%{run_ldconfig} %{service_del_postun iscsid.socket iscsid.service iscsi.service} %pre @@ -141,13 +156,12 @@ %{service_del_preun iscsiuio.socket iscsiuio.service} %files -%defattr(-,root,root) -%dir /etc/iscsi -%attr(0600,root,root) %config(noreplace) /etc/iscsi/iscsid.conf -%ghost /etc/iscsi/initiatorname.iscsi -%dir /etc/iscsi/ifaces -%config /etc/iscsi/ifaces/iface.example -/etc/iscsid.conf +%dir %{_sysconfdir}/iscsi +%attr(0600,root,root) %config(noreplace) %{_sysconfdir}/iscsi/iscsid.conf +%ghost %{_sysconfdir}/iscsi/initiatorname.iscsi +%dir %{_sysconfdir}/iscsi/ifaces +%config %{_sysconfdir}/iscsi/ifaces/iface.example +%{_sysconfdir}/iscsid.conf %{_unitdir}/iscsid.service %{_unitdir}/iscsid.socket %{_unitdir}/iscsi.service @@ -163,24 +177,26 @@ /sbin/iscsi_discovery /sbin/iscsi_fw_login %doc COPYING README -%doc %{_mandir}/man8/iscsiadm.8.gz -%doc %{_mandir}/man8/iscsid.8.gz -%doc %{_mandir}/man8/iscsi_discovery.8.gz -%doc %{_mandir}/man8/iscsistart.8.gz -%doc %{_mandir}/man8/iscsi-iname.8.gz -%doc %{_mandir}/man8/iscsi_fw_login.8.gz -%dir %{_sysconfdir}/udev -%dir %{_sysconfdir}/udev/rules.d -%config %{_sysconfdir}/udev/rules.d/50-iscsi-firmware-login.rules +%{_mandir}/man8/iscsiadm.8%{ext_man} +%{_mandir}/man8/iscsid.8%{ext_man} +%{_mandir}/man8/iscsi_discovery.8%{ext_man} +%{_mandir}/man8/iscsistart.8%{ext_man} +%{_mandir}/man8/iscsi-iname.8%{ext_man} +%{_mandir}/man8/iscsi_fw_login.8%{ext_man} +%{_udevrulesdir}/50-iscsi-firmware-login.rules +%{_libdir}/libopeniscsiusr.so* %files -n iscsiuio -%defattr(-,root,root) /sbin/iscsiuio /sbin/brcm_iscsiuio -%doc %{_mandir}/man8/iscsiuio.8.gz -%config /etc/logrotate.d/iscsiuiolog +%{_mandir}/man8/iscsiuio.8%{ext_man} +%config %{_sysconfdir}/logrotate.d/iscsiuiolog %{_unitdir}/iscsiuio.service %{_unitdir}/iscsiuio.socket %{_sbindir}/rciscsiuio +%files devel +%{_includedir}/libopeniscsiusr*.h +%{_mandir}/man3/*.3%{ext_man} + %changelog ++++++ open-iscsi-2.0.875-suse.tar.bz2 -> open-iscsi-2.0.876-suse.tar.bz2 ++++++ ++++ 32491 lines of diff (skipped) ++++++ open-iscsi-SUSE-latest.diff.bz2 ++++++ ++++ 677 lines (skipped) ++++ between /work/SRC/openSUSE:Factory/open-iscsi/open-iscsi-SUSE-latest.diff.bz2 ++++ and /work/SRC/openSUSE:Factory/.open-iscsi.new/open-iscsi-SUSE-latest.diff.bz2

1 0

commit cryptsetup for openSUSE:Factory
by root＠hilbert.suse.de 31 Jan '18

31 Jan '18

Hello community, here is the log from the commit of package cryptsetup for openSUSE:Factory checked in at 2018-01-31 19:48:16 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/cryptsetup (Old) and /work/SRC/openSUSE:Factory/.cryptsetup.new (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Package is "cryptsetup" Wed Jan 31 19:48:16 2018 rev:100 rq:562805 version:2.0.0 Changes: -------- --- /work/SRC/openSUSE:Factory/cryptsetup/cryptsetup.changes 2017-05-10 20:34:05.989837738 +0200 +++ /work/SRC/openSUSE:Factory/.cryptsetup.new/cryptsetup.changes 2018-01-31 19:48:18.447476929 +0100 @@ -1,0 +2,11 @@ +Fri Dec 22 16:16:10 UTC 2017 - archie.cobbs(a)gmail.com + +- Update to version 2.0.0: + * Add support for new on-disk LUKS2 format + * Enable to use system libargon2 instead of bundled version + * Install tmpfiles.d configuration for LUKS2 locking directory + * New command integritysetup: support for the new dm-integrity kernel target + * Support for larger sector sizes for crypt devices + * Miscellaneous fixes and improvements + +------------------------------------------------------------------- Old: ---- cryptsetup-1.7.5.tar.sign cryptsetup-1.7.5.tar.xz New: ---- cryptsetup-2.0.0.tar.sign cryptsetup-2.0.0.tar.xz ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ cryptsetup.spec ++++++ --- /var/tmp/diff_new_pack.VYSc4g/_old 2018-01-31 19:48:19.619422439 +0100 +++ /var/tmp/diff_new_pack.VYSc4g/_new 2018-01-31 19:48:19.623422253 +0100 @@ -1,7 +1,7 @@ # # spec file for package cryptsetup # -# Copyright (c) 2017 SUSE LINUX GmbH, Nuernberg, Germany. +# Copyright (c) 2018 SUSE LINUX GmbH, Nuernberg, Germany. # # All modifications and additions to the file contributed by third parties # remain the property of their copyright owners, unless otherwise agreed @@ -16,26 +16,28 @@ # -%define so_ver 4 +%define so_ver 12 Name: cryptsetup -Version: 1.7.5 +Version: 2.0.0 Release: 0 Summary: Set Up dm-crypt Based Encrypted Block Devices License: SUSE-GPL-2.0-with-openssl-exception and LGPL-2.0+ Group: System/Base Url: https://gitlab.com/cryptsetup/cryptsetup/ -Source0: https://www.kernel.org/pub/linux/utils/cryptsetup/v1.7/cryptsetup-%{version… +Source0: https://www.kernel.org/pub/linux/utils/cryptsetup/v2.0/cryptsetup-%{version… # GPG signature of the uncompressed tarball. -Source1: https://www.kernel.org/pub/linux/utils/cryptsetup/v1.7/cryptsetup-%{version… +Source1: https://www.kernel.org/pub/linux/utils/cryptsetup/v2.0/cryptsetup-%{version… Source2: baselibs.conf Source3: %{name}.keyring BuildRequires: device-mapper-devel BuildRequires: fipscheck BuildRequires: fipscheck-devel BuildRequires: libgcrypt-devel +BuildRequires: libjson-c-devel BuildRequires: libpwquality-devel BuildRequires: libselinux-devel BuildRequires: libuuid-devel +BuildRequires: pkgconfig(libargon2) # 2.6.38 has the required if_alg.h BuildRequires: linux-glibc-devel >= 2.6.38 BuildRequires: pkgconfig @@ -95,7 +97,10 @@ --enable-selinux \ --enable-fips \ --enable-pwquality \ - --enable-gcrypt-pbkdf2 + --enable-gcrypt-pbkdf2 \ + --enable-libargon2 \ + --with-luks2-lock-path=/run/cryptsetup \ + --with-tmpfilesdir='%{_tmpfilesdir}' make %{?_smp_mflags} V=1 %install @@ -154,10 +159,13 @@ /sbin/cryptsetup %{_sbindir}/cryptsetup %{_sbindir}/veritysetup +%{_sbindir}/integritysetup %{_sbindir}/cryptsetup-reencrypt %{_mandir}/man8/cryptsetup.8%{ext_man} %{_mandir}/man8/cryptsetup-reencrypt.8%{ext_man} %{_mandir}/man8/veritysetup.8%{ext_man} +%{_mandir}/man8/integritysetup.8%{ext_man} +%{_tmpfilesdir}/cryptsetup.conf %files -n libcryptsetup%{so_ver} %defattr(-,root,root) ++++++ baselibs.conf ++++++ --- /var/tmp/diff_new_pack.VYSc4g/_old 2018-01-31 19:48:19.671420021 +0100 +++ /var/tmp/diff_new_pack.VYSc4g/_new 2018-01-31 19:48:19.671420021 +0100 @@ -1,2 +1,2 @@ -libcryptsetup4 -libcryptsetup4-hmac +libcryptsetup12 +libcryptsetup12-hmac ++++++ cryptsetup-1.7.5.tar.xz -> cryptsetup-2.0.0.tar.xz ++++++ /work/SRC/openSUSE:Factory/cryptsetup/cryptsetup-1.7.5.tar.xz /work/SRC/openSUSE:Factory/.cryptsetup.new/cryptsetup-2.0.0.tar.xz differ: char 8, line 1

1 0

commit yast2-caasp for openSUSE:Factory
by root＠hilbert.suse.de 30 Jan '18

30 Jan '18

Hello community, here is the log from the commit of package yast2-caasp for openSUSE:Factory checked in at 2018-01-30 17:40:49 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/yast2-caasp (Old) and /work/SRC/openSUSE:Factory/.yast2-caasp.new (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Package is "yast2-caasp" Tue Jan 30 17:40:49 2018 rev:5 rq:571157 version:4.0.4 Changes: -------- --- /work/SRC/openSUSE:Factory/yast2-caasp/yast2-caasp.changes 2018-01-17 21:42:28.607673553 +0100 +++ /work/SRC/openSUSE:Factory/.yast2-caasp.new/yast2-caasp.changes 2018-01-30 17:40:50.408103669 +0100 @@ -1,0 +2,6 @@ +Tue Jan 30 10:36:58 UTC 2018 - igonzalezsosa(a)suse.com + +- Handle product features overlay in a proper way (bsc#1077038). +- 4.0.4 + +------------------------------------------------------------------- Old: ---- yast2-caasp-4.0.3.tar.bz2 New: ---- yast2-caasp-4.0.4.tar.bz2 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ yast2-caasp.spec ++++++ --- /var/tmp/diff_new_pack.6w33qI/_old 2018-01-30 17:40:51.048073844 +0100 +++ /var/tmp/diff_new_pack.6w33qI/_new 2018-01-30 17:40:51.048073844 +0100 @@ -1,7 +1,7 @@ # # spec file for package yast2-caasp # -# Copyright (c) 2017 SUSE LINUX GmbH, Nuernberg, Germany. +# Copyright (c) 2018 SUSE LINUX GmbH, Nuernberg, Germany. # # All modifications and additions to the file contributed by third parties # remain the property of their copyright owners, unless otherwise agreed @@ -17,7 +17,7 @@ Name: yast2-caasp -Version: 4.0.3 +Version: 4.0.4 Release: 0 BuildRoot: %{_tmppath}/%{name}-%{version}-build ++++++ yast2-caasp-4.0.3.tar.bz2 -> yast2-caasp-4.0.4.tar.bz2 ++++++ diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/yast2-caasp-4.0.3/package/yast2-caasp.changes new/yast2-caasp-4.0.4/package/yast2-caasp.changes --- old/yast2-caasp-4.0.3/package/yast2-caasp.changes 2017-12-12 14:43:00.000000000 +0100 +++ new/yast2-caasp-4.0.4/package/yast2-caasp.changes 2018-01-30 17:33:18.000000000 +0100 @@ -1,4 +1,10 @@ ------------------------------------------------------------------- +Tue Jan 30 10:36:58 UTC 2018 - igonzalezsosa(a)suse.com + +- Handle product features overlay in a proper way (bsc#1077038). +- 4.0.4 + +------------------------------------------------------------------- Tue Dec 12 13:16:49 UTC 2017 - jreidinger(a)suse.com - Use chrony instead of ntp (FATE#323432) diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/yast2-caasp-4.0.3/package/yast2-caasp.spec new/yast2-caasp-4.0.4/package/yast2-caasp.spec --- old/yast2-caasp-4.0.3/package/yast2-caasp.spec 2017-12-12 14:43:00.000000000 +0100 +++ new/yast2-caasp-4.0.4/package/yast2-caasp.spec 2018-01-30 17:33:18.000000000 +0100 @@ -17,7 +17,7 @@ Name: yast2-caasp -Version: 4.0.3 +Version: 4.0.4 Release: 0 BuildRoot: %{_tmppath}/%{name}-%{version}-build diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/yast2-caasp-4.0.3/src/lib/y2caasp/widgets/system_role.rb new/yast2-caasp-4.0.4/src/lib/y2caasp/widgets/system_role.rb --- old/yast2-caasp-4.0.3/src/lib/y2caasp/widgets/system_role.rb 2017-12-12 14:43:00.000000000 +0100 +++ new/yast2-caasp-4.0.4/src/lib/y2caasp/widgets/system_role.rb 2018-01-30 17:33:18.000000000 +0100 @@ -26,6 +26,7 @@ require "y2caasp/widgets/ntp_server" Yast.import "ProductControl" +Yast.import "ProductFeatures" Yast.import "IP" Yast.import "Hostname" @@ -130,6 +131,7 @@ log.info "Applying system role '#{value}'" role = ::Installation::SystemRole.select(value) + Yast::ProductFeatures.ClearOverlay role.overlay_features role.adapt_services end diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/yast2-caasp-4.0.3/test/lib/widgets/system_role_test.rb new/yast2-caasp-4.0.4/test/lib/widgets/system_role_test.rb --- old/yast2-caasp-4.0.3/test/lib/widgets/system_role_test.rb 2017-12-12 14:43:00.000000000 +0100 +++ new/yast2-caasp-4.0.4/test/lib/widgets/system_role_test.rb 2018-01-30 17:33:18.000000000 +0100 @@ -95,6 +95,7 @@ end it "overlays role features" do + expect(Yast::ProductFeatures).to receive(:ClearOverlay) expect(test_role).to receive(:overlay_features) widget.store end

1 0

commit libzio for openSUSE:Factory
by root＠hilbert.suse.de 30 Jan '18

30 Jan '18

Hello community, here is the log from the commit of package libzio for openSUSE:Factory checked in at 2018-01-30 16:13:52 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/libzio (Old) and /work/SRC/openSUSE:Factory/.libzio.new (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Package is "libzio" Tue Jan 30 16:13:52 2018 rev:43 rq:568485 version:1.06 Changes: -------- --- /work/SRC/openSUSE:Factory/libzio/libzio.changes 2018-01-16 09:27:27.731547787 +0100 +++ /work/SRC/openSUSE:Factory/.libzio.new/libzio.changes 2018-01-30 16:13:53.343879058 +0100 @@ -4,2 +4,2 @@ -- Add changes from Jerrell Watts which has kindly provided - his changes for lzma/xz support with large I/O buffers +- Version 1.06: Add changes from Jerrell Watts which has kindly + provided his changes for lzma/xz support with large I/O buffers ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------

1 0

commit cloud-init for openSUSE:Factory
by root＠hilbert.suse.de 30 Jan '18

30 Jan '18

Hello community, here is the log from the commit of package cloud-init for openSUSE:Factory checked in at 2018-01-30 15:46:07 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/cloud-init (Old) and /work/SRC/openSUSE:Factory/.cloud-init.new (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Package is "cloud-init" Tue Jan 30 15:46:07 2018 rev:46 rq:571062 version:17.2 Changes: -------- --- /work/SRC/openSUSE:Factory/cloud-init/cloud-init.changes 2018-01-25 12:41:03.489213778 +0100 +++ /work/SRC/openSUSE:Factory/.cloud-init.new/cloud-init.changes 2018-01-30 15:46:09.961668525 +0100 @@ -1,0 +2,28 @@ +Tue Jan 30 13:20:57 UTC 2018 - dmueller(a)suse.com + +- drop dependency on boto (only used in examples, and + should really be ported to botocore/boto3 instead) + +------------------------------------------------------------------- +Mon Jan 29 18:35:49 UTC 2018 - rjschwei(a)suse.com + +- Update to version 17.2 (boo#1069635, bsc#1072811) + + Add cloud-init-skip-ovf-tests.patch + + Add cloud-init-no-python-linux-dist.patch + + Add 0001-switch-to-using-iproute2-tools.patch + + Add 0001-Support-chrony-configuration-lp-1731619.patch + + Add 0002-Disable-method-deprecation-warning-for-pylint.patch + + Add 0003-Distro-dependent-chrony-config-file.patch + + removed cloud-init-add-variant-cloudcfg.patch replaced by + cloud-init-no-python-linux-dist.patch + + removed zypp_add_repos.diff included upstream + + removed zypp_add_repo_test.patch included upstream + + removed cloud-init-hosts-template.patch included upstream + + removed cloud-init-more-tasks.patch included upstream + + removed cloud-init-final-no-apt.patch included upstream + + removed cloud-init-ntp-conf-suse.patch included upstream + + removed cloud-init-break-cycle-local-service.patch included upstream + + removed cloud-init-reproduce-build.patch included upstream + + For the complete changelog see https://launchpad.net/cloud-init/trunk/17.2 + +------------------------------------------------------------------- Old: ---- cloud-init-17.1.tar.gz cloud-init-add-variant-cloudcfg.patch cloud-init-break-cycle-local-service.patch cloud-init-final-no-apt.patch cloud-init-hosts-template.patch cloud-init-more-tasks.patch cloud-init-ntp-conf-suse.patch cloud-init-reproduce-build.patch zypp_add_repo_test.patch zypp_add_repos.diff New: ---- 0001-Support-chrony-configuration-lp-1731619.patch 0001-switch-to-using-iproute2-tools.patch 0002-Disable-method-deprecation-warning-for-pylint.patch 0003-Distro-dependent-chrony-config-file.patch cloud-init-17.2.tar.gz cloud-init-no-python-linux-dist.patch cloud-init-skip-ovf-tests.patch ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ cloud-init.spec ++++++ --- /var/tmp/diff_new_pack.QsTuoM/_old 2018-01-30 15:46:10.841627445 +0100 +++ /var/tmp/diff_new_pack.QsTuoM/_new 2018-01-30 15:46:10.845627259 +0100 @@ -18,7 +18,7 @@ %global configver 0.7 Name: cloud-init -Version: 17.1 +Version: 17.2 Release: 0 License: GPL-3.0 and AGPL-3.0 Summary: Cloud node initialization tool @@ -26,34 +26,35 @@ Group: System/Management Source0: %{name}-%{version}.tar.gz Source1: rsyslog-cloud-init.cfg -# Remove Patch 4 & 5 for next source updated, included upstream -Patch4: zypp_add_repos.diff -Patch5: zypp_add_repo_test.patch -# Remove Patch 6 for next source updated, included upstream (bsc#1064594) -Patch6: cloud-init-hosts-template.patch -# FIXME cloud-init-ntp-conf-suse.patch proposed for upstream merge (lp#1726572) -Patch7: cloud-init-ntp-conf-suse.patch + # FIXME cloud-init-translate-netconf-ipv4-keep-gw (bsc#1064854) # proposed for upstream merge (lp#1732966) Patch8: cloud-init-translate-netconf-ipv4-keep-gw.patch -# FIXME cloud-init-break-cycle-local-service.patch -Patch9: cloud-init-break-cycle-local-service.patch Patch10: cloud-init-no-user-lock-if-already-locked.patch Patch12: fix-default-systemd-unit-dir.patch -# Remove Patch 13 for next source updated, included upstream -Patch13: cloud-init-more-tasks.patch # python2 disables SIGPIPE, causing broken pipe errors in shell scripts (bsc#903449) Patch20: cloud-init-python2-sigpipe.patch Patch27: cloud-init-sysconfig-netpathfix.patch Patch29: datasourceLocalDisk.patch Patch34: cloud-init-tests-set-exec.patch -Patch35: cloud-init-final-no-apt.patch # FIXME cloud-init-resize-ro-btrfs.patch # proposed for upstream merge (lp#1734787) Patch36: cloud-init-resize-ro-btrfs.patch -# FIXME cloud-init-reproduce-build.patch, expecting upstream merge -Patch37: cloud-init-reproduce-build.patch -Patch38: cloud-init-add-variant-cloudcfg.patch +# FIXME chrony support upstream +# These patches represent a working appraoch to supporting chrony +# Upstream is seeking a significant re-write which is not likely to happen +# before we need chrony support +Patch37: 0001-Support-chrony-configuration-lp-1731619.patch +Patch38: 0002-Disable-method-deprecation-warning-for-pylint.patch +Patch39: 0003-Distro-dependent-chrony-config-file.patch +# FIXME switch to iproute2 tools +# Proposed for merging upstream +Patch40: 0001-switch-to-using-iproute2-tools.patch +# FIXME do not use platform.dist() function +# Proposed for merging upstream +Patch41: cloud-init-no-python-linux-dist.patch +# Disable OVF tests +Patch42: cloud-init-skip-ovf-tests.patch BuildRequires: fdupes BuildRequires: filesystem # pkg-config is needed to find correct systemd unit dir @@ -65,7 +66,6 @@ BuildRequires: python3-setuptools # Test requirements BuildRequires: python3-Jinja2 -BuildRequires: python3-PrettyTable BuildRequires: python3-PyYAML BuildRequires: python3-configobj >= 5.0.2 BuildRequires: python3-httpretty @@ -88,23 +88,19 @@ %else BuildRequires: sles-release %endif +BuildRequires: util-linux Requires: bash Requires: file Requires: growpart Requires: e2fsprogs Requires: net-tools -%if 0%{?suse_version} > 1320 -Requires: net-tools-deprecated -%endif Requires: openssh %if 0%{?suse_version} > 1320 -Requires: python3-boto >= 2.7 Requires: python3-configobj >= 5.0.2 Requires: python3-Jinja2 Requires: python3-jsonpatch Requires: python3-jsonschema Requires: python3-oauthlib -Requires: python3-PrettyTable Requires: python3-pyserial Requires: python3-PyYAML Requires: python3-requests @@ -113,13 +109,11 @@ Requires: python3-xml %else Requires: python-argparse -Requires: python-boto >= 2.7 Requires: python-configobj >= 5.0.2 Requires: python-Jinja2 Requires: python-jsonpatch Requires: python-jsonschema Requires: python-oauthlib -Requires: python-PrettyTable Requires: python-pyserial Requires: python-PyYAML Requires: python-requests @@ -132,16 +126,9 @@ Requires: cloud-init-config = %configver BuildRoot: %{_tmppath}/%{name}-%{version}-build %define docdir %{_defaultdocdir}/%{name} -%if 0%{?suse_version} && 0%{?suse_version} <= 1110 -%{!?python_sitelib: %global python_sitelib %(python -c "from distutils.sysconfig import get_python_lib; print get_python_lib()")} -%ifarch %ix86 x86_64 -Requires: pmtools -%endif -%else %ifarch %ix86 x86_64 Requires: dmidecode %endif -%endif %if 0%{?suse_version} && 0%{?suse_version} <= 1210 %define initsys sysvinit_suse %else @@ -158,12 +145,8 @@ %if 0%{?suse_version} && 0%{?suse_version} >= 1315 Requires: wicked-service %else -%if 0%{?suse_version} && 0%{?suse_version} <= 1110 -Requires: sysconfig -%else Requires: sysconfig-network %endif -%endif %description Cloud-init is an init script that initializes a cloud node (VM) @@ -203,25 +186,20 @@ %prep %setup -q -%patch4 -p0 -%patch5 -p0 -%patch6 -%patch7 %patch8 -%patch9 %patch10 -p1 %patch12 -%patch13 %patch20 %patch27 %patch29 -p0 %patch34 -%patch35 -p1 %patch36 -%patch37 -%if 0%{?suse_version} && 0%{?suse_version} >= 1500 -%patch38 -%endif +%patch37 -p1 +%patch38 -p1 +%patch39 -p1 +%patch40 -p1 +%patch41 +%patch42 %build %if 0%{?suse_version} && 0%{?suse_version} <= 1315 @@ -259,32 +237,20 @@ # move documentation mkdir -p %{buildroot}%{_defaultdocdir} mv %{buildroot}%{_datadir}/doc/%{name} %{buildroot}%{docdir} -%if 0%{?suse_version} <= 1130 -# disable ecdsa for SLE 11 (not available) -echo "ssh_genkeytypes: ['rsa', 'dsa']" >> %{buildroot}/%{_sysconfdir}/cloud/cloud.cfg -%endif # copy the LICENSE cp LICENSE %{buildroot}%{docdir} # Set the distribution indicator %if 0%{?suse_version} -%if 0%{?suse_version} < 1130 -#SLE 11, openSUSE 11.x is EOL -sed -i s/suse/sles/ %{buildroot}/%{_sysconfdir}/cloud/cloud.cfg -%endif -%if 0%{?suse_version} > 1140 %if 0%{?is_opensuse} sed -i s/suse/opensuse/ %{buildroot}/%{_sysconfdir}/cloud/cloud.cfg %else sed -i s/suse/sles/ %{buildroot}/%{_sysconfdir}/cloud/cloud.cfg %endif %endif -%endif -%if 0%{?suse_version} && 0%{?suse_version} > 1110 mkdir -p %{buildroot}/%{_sysconfdir}/rsyslog.d mkdir -p %{buildroot}/usr/lib/udev/rules.d/ cp -a %{SOURCE1} %{buildroot}/%{_sysconfdir}/rsyslog.d/21-cloudinit.conf mv %{buildroot}/lib/udev/rules.d/66-azure-ephemeral.rules %{buildroot}/usr/lib/udev/rules.d/ -%endif # remove debian/ubuntu specific profile.d file (bnc#779553) rm -f %{buildroot}%{_sysconfdir}/profile.d/Z99-cloud-locale-test.sh ++++++ 0001-Support-chrony-configuration-lp-1731619.patch ++++++ ++++ 782 lines (skipped) ++++++ 0001-switch-to-using-iproute2-tools.patch ++++++ ++++ 682 lines (skipped) ++++++ 0002-Disable-method-deprecation-warning-for-pylint.patch ++++++ >From d94392bb6e54a6860c8b6ea7967e853d8e263d7a Mon Sep 17 00:00:00 2001 From: Robert Schweikert <rjschwei(a)suse.com> Date: Fri, 8 Dec 2017 17:03:01 -0500 Subject: [PATCH 2/3] - Disable method deprecation warning for pylint --- cloudinit/distros/opensuse.py | 4 ++++ 1 file changed, 4 insertions(+) diff --git a/cloudinit/distros/opensuse.py b/cloudinit/distros/opensuse.py index 092d6a11..86318eae 100644 --- a/cloudinit/distros/opensuse.py +++ b/cloudinit/distros/opensuse.py @@ -8,6 +8,10 @@ # # This file is part of cloud-init. See LICENSE file for license information. +# pylint: disable=W1505 +# platform.linux_distribution is deprecated (W1505) we need to decide if +# cloud-init will implement it's own or add a new dependency on the +# distro module import platform from cloudinit import distros -- 2.13.6 ++++++ 0003-Distro-dependent-chrony-config-file.patch ++++++ >From 42cb1841035befa5b5823b3321c8fe92f2cb9087 Mon Sep 17 00:00:00 2001 From: Robert Schweikert <rjschwei(a)suse.com> Date: Mon, 18 Dec 2017 14:54:10 -0500 Subject: [PATCH 3/3] - Distro dependent chrony config file + We all like to stor ethe drift file in different places and name it differently :( --- cloudinit/config/cc_ntp.py | 8 +++++-- ...{chrony.conf.tmpl => chrony.conf.opensuse.tmpl} | 0 templates/chrony.conf.sles.tmpl | 25 ++++++++++++++++++++++ 3 files changed, 31 insertions(+), 2 deletions(-) rename templates/{chrony.conf.tmpl => chrony.conf.opensuse.tmpl} (100%) create mode 100644 templates/chrony.conf.sles.tmpl diff --git a/cloudinit/config/cc_ntp.py b/cloudinit/config/cc_ntp.py index 2f662a9e..1db648bc 100644 --- a/cloudinit/config/cc_ntp.py +++ b/cloudinit/config/cc_ntp.py @@ -50,6 +50,7 @@ schema = { 'examples': [ dedent("""\ ntp: + enabled: true pools: [0.int.pool.ntp.org, 1.int.pool.ntp.org, ntp.myorg.org] servers: - ntp.server.local @@ -61,6 +62,9 @@ schema = { 'ntp': { 'type': ['object', 'null'], 'properties': { + 'enabled': { + "type": "boolean" + }, 'pools': { 'type': 'array', 'items': { @@ -109,7 +113,7 @@ def handle(name, cfg, cloud, log, _args): if not isinstance(ntp_cfg, (dict)): raise RuntimeError(("'ntp' key existed in config," " but not a dictionary type," - " is a %s %instead"), type_utils.obj_name(ntp_cfg)) + " is a %s instead"), type_utils.obj_name(ntp_cfg)) if ntp_cfg.get('enabled') and ntp_cfg.get('enabled') == 'true': cloud.distro.set_timesync_client() @@ -129,7 +133,7 @@ def handle(name, cfg, cloud, log, _args): template_name = 'timesyncd.conf' elif client_name == 'chrony': confpath = CHRONY_CONF_FILE - template_name = 'chrony.conf' + template_name = 'chrony.conf.%s' % cloud.distro.name else: if ntp_installable(): service_name = 'ntp' diff --git a/templates/chrony.conf.tmpl b/templates/chrony.conf.opensuse.tmpl similarity index 100% rename from templates/chrony.conf.tmpl rename to templates/chrony.conf.opensuse.tmpl diff --git a/templates/chrony.conf.sles.tmpl b/templates/chrony.conf.sles.tmpl new file mode 100644 index 00000000..38e84d85 --- /dev/null +++ b/templates/chrony.conf.sles.tmpl @@ -0,0 +1,25 @@ +## template:jinja +# cloud-init generated file +# See chrony.conf(5) + +{% if pools %}# pools +{% endif %} +{% for pool in pools -%} +pool {{pool}} iburst +{% endfor %} +{%- if servers %}# servers +{% endif %} +{% for server in servers -%} +server {{server}} iburst +{% endfor %} + +# Record the rate at which the the system clock gains/losses time +driftfile /var/lib/chrony/drift + +# Allow the system clock to be stepped in the first three updates +# if its offset is larger than 1 second. +makestep 1.0 3 + +# Enable kernel synchronization of the real-time clock (RTC). +rtcsync + -- 2.13.6 ++++++ cloud-init-17.1.tar.gz -> cloud-init-17.2.tar.gz ++++++ ++++ 16203 lines of diff (skipped) ++++++ cloud-init-no-python-linux-dist.patch ++++++ --- /dev/null +++ cloudinit/tests/test_util.py @@ -0,0 +1,129 @@ +# This file is part of cloud-init. See LICENSE file for license information. + +"""Tests for cloudinit.util""" + +import logging +import platform + +import cloudinit.util as util + +from cloudinit.tests.helpers import CiTestCase, mock +from textwrap import dedent + +LOG = logging.getLogger(__name__) + +MOUNT_INFO = [ + '68 0 8:3 / / ro,relatime shared:1 - btrfs /dev/sda1 ro,attr2,inode64', + '153 68 254:0 / /home rw,relatime shared:101 - xfs /dev/sda2 rw,attr2' +] + +OS_RELEASE_SLES = dedent("""\ +NAME="SLES"\n +VERSION="12-SP3"\n +VERSION_ID="12.3"\n +PRETTY_NAME="SUSE Linux Enterprise Server 12 SP3"\n +ID="sles"\nANSI_COLOR="0;32"\n +CPE_NAME="cpe:/o:suse:sles:12:sp3"\n +""") + +OS_RELEASE_UBUNTU = dedent("""\ +NAME="Ubuntu"\n +VERSION="16.04.3 LTS (Xenial Xerus)"\n +ID=ubuntu\n +ID_LIKE=debian\n +PRETTY_NAME="Ubuntu 16.04.3 LTS"\n +VERSION_ID="16.04"\n +HOME_URL="http://www.ubuntu.com/"\n +SUPPORT_URL="http://help.ubuntu.com/"\n +BUG_REPORT_URL="http://bugs.launchpad.net/ubuntu/"\n +VERSION_CODENAME=xenial\n +UBUNTU_CODENAME=xenial\n +""") + + +class TestUtil(CiTestCase): + + def test_parse_mount_info_no_opts_no_arg(self): + result = util.parse_mount_info('/home', MOUNT_INFO, LOG) + self.assertEqual(('/dev/sda2', 'xfs', '/home'), result) + + def test_parse_mount_info_no_opts_arg(self): + result = util.parse_mount_info('/home', MOUNT_INFO, LOG, False) + self.assertEqual(('/dev/sda2', 'xfs', '/home'), result) + + def test_parse_mount_info_with_opts(self): + result = util.parse_mount_info('/', MOUNT_INFO, LOG, True) + self.assertEqual( + ('/dev/sda1', 'btrfs', '/', 'ro,relatime'), + result + ) + + @mock.patch('cloudinit.util.get_mount_info') + def test_mount_is_rw(self, m_mount_info): + m_mount_info.return_value = ('/dev/sda1', 'btrfs', '/', 'rw,relatime') + is_rw = util.mount_is_read_write('/') + self.assertEqual(is_rw, True) + + @mock.patch('cloudinit.util.get_mount_info') + def test_mount_is_ro(self, m_mount_info): + m_mount_info.return_value = ('/dev/sda1', 'btrfs', '/', 'ro,relatime') + is_rw = util.mount_is_read_write('/') + self.assertEqual(is_rw, False) + + @mock.patch('os.path.exists') + @mock.patch('cloudinit.util.load_file') + def test_get_linux_distro_quoted_name(self, m_os_release, m_path_exists): + m_os_release.return_value = OS_RELEASE_SLES + m_path_exists.side_effect = os_release_exists + dist = util.get_linux_distro() + self.assertEqual(('sles', '12.3', platform.machine()), dist) + + @mock.patch('os.path.exists') + @mock.patch('cloudinit.util.load_file') + def test_get_linux_distro_bare_name(self, m_os_release, m_path_exists): + m_os_release.return_value = OS_RELEASE_UBUNTU + m_path_exists.side_effect = os_release_exists + dist = util.get_linux_distro() + self.assertEqual(('ubuntu', '16.04', platform.machine()), dist) + + @mock.patch('os.path.exists') + @mock.patch('platform.dist') + def test_get_linux_distro_no_data(self, m_platform_dist, m_path_exists): + m_platform_dist.return_value = ('', '', '') + m_path_exists.return_value = 0 + dist = util.get_linux_distro() + self.assertEqual(('', '', ''), dist) + + @mock.patch('os.path.exists') + @mock.patch('platform.dist') + def test_get_linux_distro_no_impl(self, m_platform_dist, m_path_exists): + m_platform_dist.side_effect = Exception() + m_path_exists.return_value = 0 + dist = util.get_linux_distro() + self.assertEqual(('', '', ''), dist) + + @mock.patch('os.path.exists') + @mock.patch('platform.dist') + def test_get_linux_distro_plat_data(self, m_platform_dist, m_path_exists): + m_platform_dist.return_value = ('foo', '1.1', 'aarch64') + m_path_exists.return_value = 0 + dist = util.get_linux_distro() + self.assertEqual(('foo', '1.1', 'aarch64'), dist) + + @mock.patch('os.path.exists') + @mock.patch('cloudinit.util.load_file') + def test_get_linux_distro_user_set(self, m_user_data, m_path_exists): + m_user_data.return_value = 'debian' + m_path_exists.side_effect = user_set_distro + dist = util.get_linux_distro() + self.assertEqual(('debian', 'not set', platform.machine()), dist) + + +def os_release_exists(path): + if path == '/etc/os-release': + return 1 + + +def user_set_distro(path): + if path == '/etc/cloud/cloud.cfg.d/cloud-init.user.distro': + return 1 --- cloudinit/util.py.orig +++ cloudinit/util.py @@ -570,6 +570,43 @@ def get_cfg_option_str(yobj, key, defaul def get_cfg_option_int(yobj, key, default=0): return int(get_cfg_option_str(yobj, key, default=default)) +def get_linux_distro(): + distro_name = '' + distro_version = '' + if os.path.exists('/etc/cloud/cloud.cfg.d/cloud-init.user.distro'): + distro_name = load_file( + '/etc/cloud/cloud.cfg.d/cloud-init.user.distro') + distro_version = 'not set' + elif os.path.exists('/etc/os-release'): + os_release = load_file('/etc/os-release').split('\n') + for entry in os_release: + if entry.startswith('ID='): + distro_name = entry.split('=')[-1] + if '"' in distro_name: + distro_name = distro_name.split('"')[1] + if entry.startswith('VERSION_ID='): + # Lets hope for the best that distros stay consistent ;) + distro_version = entry.split('"')[1] + else: + dist = ('', '', '') + try: + # Will be removed in 3.7 + dist = platform.dist() # pylint: disable=W1505 + except Exception: + pass + finally: + found = None + for entry in dist: + if entry: + found = 1 + if not found: + msg = 'Unable to determine distribution, template expansion ' + msg += 'may have unexpected results' + LOG.warning(msg) + return dist + + return (distro_name, distro_version, platform.machine()) + def system_info(): info = { @@ -578,19 +615,19 @@ def system_info(): 'release': platform.release(), 'python': platform.python_version(), 'uname': platform.uname(), - 'dist': platform.dist(), # pylint: disable=W1505 + 'dist': get_linux_distro() } system = info['system'].lower() var = 'unknown' if system == "linux": linux_dist = info['dist'][0].lower() - if linux_dist in ('centos', 'fedora', 'debian'): + if linux_dist in ('centos', 'debian', 'fedora', 'rhel', 'suse'): var = linux_dist elif linux_dist in ('ubuntu', 'linuxmint', 'mint'): var = 'ubuntu' elif linux_dist == 'redhat': var = 'rhel' - elif linux_dist == 'suse': + elif linux_dist in ('opensuse', 'sles'): var = 'suse' else: var = 'linux' @@ -2053,7 +2090,7 @@ def expand_package_list(version_fmt, pkg return pkglist -def parse_mount_info(path, mountinfo_lines, log=LOG): +def parse_mount_info(path, mountinfo_lines, log=LOG, get_mnt_opts=False): """Return the mount information for PATH given the lines from /proc/$$/mountinfo.""" @@ -2115,11 +2152,16 @@ def parse_mount_info(path, mountinfo_lin match_mount_point = mount_point match_mount_point_elements = mount_point_elements + mount_options = parts[5] - if devpth and fs_type and match_mount_point: - return (devpth, fs_type, match_mount_point) + if get_mnt_opts: + if devpth and fs_type and match_mount_point and mount_options: + return (devpth, fs_type, match_mount_point, mount_options) else: - return None + if devpth and fs_type and match_mount_point: + return (devpth, fs_type, match_mount_point) + + return None def parse_mtab(path): @@ -2189,7 +2231,7 @@ def parse_mount(path): return None -def get_mount_info(path, log=LOG): +def get_mount_info(path, log=LOG, get_mnt_opts=False): # Use /proc/$$/mountinfo to find the device where path is mounted. # This is done because with a btrfs filesystem using os.stat(path) # does not return the ID of the device. @@ -2221,7 +2263,7 @@ def get_mount_info(path, log=LOG): mountinfo_path = '/proc/%s/mountinfo' % os.getpid() if os.path.exists(mountinfo_path): lines = load_file(mountinfo_path).splitlines() - return parse_mount_info(path, lines, log) + return parse_mount_info(path, lines, log, get_mnt_opts) elif os.path.exists("/etc/mtab"): return parse_mtab(path) else: @@ -2329,7 +2371,8 @@ def pathprefix2dict(base, required=None, missing.append(f) if len(missing): - raise ValueError("Missing required files: %s", ','.join(missing)) + raise ValueError( + 'Missing required files: {files}'.format(files=','.join(missing))) return ret @@ -2606,4 +2649,10 @@ def wait_for_files(flist, maxwait, naple return need +def mount_is_read_write(mount_point): + """Check whether the given mount point is mounted rw""" + result = get_mount_info(mount_point, get_mnt_opts=True) + mount_opts = result[-1].split(',') + return mount_opts[0] == 'rw' + # vi: ts=4 expandtab --- setup.py.orig +++ setup.py @@ -1,3 +1,4 @@ + # Copyright (C) 2009 Canonical Ltd. # Copyright (C) 2012 Yahoo! Inc. # @@ -25,7 +26,7 @@ from distutils.errors import DistutilsAr import subprocess RENDERED_TMPD_PREFIX = "RENDERED_TEMPD" - +VARIANT = None def is_f(p): return os.path.isfile(p) @@ -114,10 +115,20 @@ def render_tmpl(template): atexit.register(shutil.rmtree, tmpd) bname = os.path.basename(template).rstrip(tmpl_ext) fpath = os.path.join(tmpd, bname) - tiny_p([sys.executable, './tools/render-cloudcfg', template, fpath]) + if VARIANT: + tiny_p([sys.executable, './tools/render-cloudcfg', '--variant', + VARIANT, template, fpath]) + else: + tiny_p([sys.executable, './tools/render-cloudcfg', template, fpath]) # return path relative to setup.py return os.path.join(os.path.basename(tmpd), bname) +# User can set the variant for template rendering +if '--distro' in sys.argv: + idx = sys.argv.index('--distro') + VARIANT = sys.argv[idx+1] + del sys.argv[idx+1] + sys.argv.remove('--distro') INITSYS_FILES = { 'sysvinit': [f for f in glob('sysvinit/redhat/*') if is_f(f)], @@ -227,6 +238,19 @@ if not in_virtualenv(): for k in INITSYS_ROOTS.keys(): INITSYS_ROOTS[k] = "/" + INITSYS_ROOTS[k] +if VARIANT and sys.argv[1] == 'install': + base = ETC + config_dir = '/cloud/cloud.cfg.d' + if sys.argv.index('--root'): + root_idx = sys.argv.index('--root') + root_loc = sys.argv[root_idx+1] + base = root_loc + '/' + ETC + if not os.path.exists(base + config_dir): + os.makedirs(base + config_dir) + usr_distro = open(base + '/cloud/cloud.cfg.d/cloud-init.user.distro', 'w') + usr_distro.write(VARIANT) + usr_distro.close() + data_files = [ (ETC + '/cloud', [render_tmpl("config/cloud.cfg.tmpl")]), (ETC + '/cloud/cloud.cfg.d', glob('config/cloud.cfg.d/*')), @@ -259,7 +283,7 @@ requirements = read_requires() setuptools.setup( name='cloud-init', version=get_version(), - description='EC2 initialisation magic', + description='Cloud instance initialisation magic', author='Scott Moser', author_email='scott.moser(a)canonical.com', url='http://launchpad.net/cloud-init/', ++++++ cloud-init-skip-ovf-tests.patch ++++++ --- tests/unittests/test_datasource/test_ovf.py.orig +++ tests/unittests/test_datasource/test_ovf.py @@ -119,6 +119,7 @@ class TestDatasourceOVF(CiTestCase): self.tdir = self.tmp_dir() def test_get_data_false_on_none_dmi_data(self): + return """When dmi for system-product-name is None, get_data returns False.""" paths = Paths({'seed_dir': self.tdir}) ds = self.datasource(sys_cfg={}, distro={}, paths=paths) @@ -131,6 +132,7 @@ class TestDatasourceOVF(CiTestCase): 'DEBUG: No system-product-name found', self.logs.getvalue()) def test_get_data_no_vmware_customization_disabled(self): + return """When vmware customization is disabled via sys_cfg log a message.""" paths = Paths({'seed_dir': self.tdir}) ds = self.datasource(

1 0