Hello community, here is the log from the commit of package docker-kubic for openSUSE:Factory checked in at 2018-07-31 16:03:52 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/docker-kubic (Old) and /work/SRC/openSUSE:Factory/.docker-kubic.new (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Package is "docker-kubic" Tue Jul 31 16:03:52 2018 rev:14 rq:626557 version:17.09.1_ce Changes: -------- --- /work/SRC/openSUSE:Factory/docker-kubic/docker-kubic.changes 2018-06-29 22:36:58.105972238 +0200 +++ /work/SRC/openSUSE:Factory/.docker-kubic.new/docker-kubic.changes 2018-07-31 16:04:19.732049448 +0200 @@ -1,0 +2,7 @@ +Mon Jul 30 09:44:47 UTC 2018 - asarai@suse.com + +- Build the client binary with -buildmode=pie to fix issues on POWER. + bsc#1100727 + + bsc1100727-0001-build-add-buildmode-pie.patch + +------------------------------------------------------------------- New: ---- bsc1100727-0001-build-add-buildmode-pie.patch ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ docker-kubic.spec ++++++ --- /var/tmp/diff_new_pack.wb1XYh/_old 2018-07-31 16:04:20.664051037 +0200 +++ /var/tmp/diff_new_pack.wb1XYh/_new 2018-07-31 16:04:20.668051043 +0200 @@ -72,6 +72,8 @@ Patch402: bsc1073877-0001-apparmor-allow-receiving-of-signals-from-docker-kill.patch # SUSE-BACKPORT: Backport of https://github.com/moby/moby/pull/37353. bsc#1099277 Patch403: bsc1073877-0002-apparmor-clobber-docker-default-profile-on-start.patch +# SUSE-BACKPORT: Backport of https://github.com/docker/cli/pull/1242. bsc#1100727 +Patch404: bsc1100727-0001-build-add-buildmode-pie.patch # SUSE-FEATURE: Add support to mirror inofficial/private registries # (https://github.com/moby/moby/pull/34319) Patch500: private-registry-0001-Add-private-registry-mirror-support.patch @@ -228,6 +230,8 @@ %patch402 -p1 # bsc#1099277 %patch403 -p1 +# bsc#1100727 +%patch404 -p1 # PATCH-SUSE: Mirror patch. %patch500 -p1 ++++++ bsc1100727-0001-build-add-buildmode-pie.patch ++++++

From d39172ffc6b245f02da1898793ccaef20bb6858a Mon Sep 17 00:00:00 2001 From: Aleksa Sarai <asarai@suse.de> Date: Mon, 30 Jul 2018 19:34:01 +1000 Subject: [PATCH] build: add -buildmode=pie

Make all dynbinary builds be position-independent (this adds both security benefits and can help with flaky builds on POWER architectures). Signed-off-by: Aleksa Sarai <asarai@suse.de> --- components/cli/scripts/build/dynbinary | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/components/cli/scripts/build/dynbinary b/components/cli/scripts/build/dynbinary index 3c32ed342ef7..4feb7e71d852 100755 --- a/components/cli/scripts/build/dynbinary +++ b/components/cli/scripts/build/dynbinary @@ -9,6 +9,6 @@ source ./scripts/build/.variables echo "Building dynamically linked $TARGET" export CGO_ENABLED=1 -go build -o "${TARGET}" -tags pkcs11 --ldflags "${LDFLAGS}" "${SOURCE}" +go build -o "${TARGET}" -tags pkcs11 --ldflags "${LDFLAGS}" -buildmode=pie "${SOURCE}" ln -sf "$(basename "${TARGET}")" build/docker -- 2.18.0