Re: Update golang-github-appc-cni to 1.0 (was Re: singularity-container: CVE-2021-33622)

2022-02-23 Thread Andreas Tille
Hi, Am Wed, Feb 23, 2022 at 10:47:28PM +0800 schrieb Shengjing Zhu: > appc-cni was uploaded yesterday. That's really great. I've just dput singularity-container to unstable. > However, I don't think the singularity-container package can sync to > Ubuntu automatically. > It build-depends

Re: Update golang-github-appc-cni to 1.0 (was Re: singularity-container: CVE-2021-33622)

2022-02-23 Thread Shengjing Zhu
On Wed, Feb 23, 2022 at 10:47 PM Shengjing Zhu wrote: > > Hi > > On Wed, Feb 23, 2022 at 9:30 PM Andreas Tille wrote: > > > > Am Mon, Feb 21, 2022 at 12:37:11AM +0800 schrieb Shengjing Zhu: > > > > From my naive perspective we most probably want last versions of > > > > containerd and podman

Re: Update golang-github-appc-cni to 1.0 (was Re: singularity-container: CVE-2021-33622)

2022-02-23 Thread Shengjing Zhu
Hi On Wed, Feb 23, 2022 at 9:30 PM Andreas Tille wrote: > > Am Mon, Feb 21, 2022 at 12:37:11AM +0800 schrieb Shengjing Zhu: > > > From my naive perspective we most probably want last versions of > > > containerd and podman anyway and we are early in the release cycle. So > > > breaking unstable

Re: Update golang-github-appc-cni to 1.0 (was Re: singularity-container: CVE-2021-33622)

2022-02-23 Thread Andreas Tille
Am Mon, Feb 21, 2022 at 12:37:11AM +0800 schrieb Shengjing Zhu: > > From my naive perspective we most probably want last versions of > > containerd and podman anyway and we are early in the release cycle. So > > breaking unstable for a limited time span might be tolerable, IMHO. > > > > We only

Re: Update golang-github-appc-cni to 1.0 (was Re: singularity-container: CVE-2021-33622)

2022-02-20 Thread Shengjing Zhu
On Mon, Feb 21, 2022 at 12:34 AM Andreas Tille wrote: > > Hi, > > Am Mon, Feb 21, 2022 at 12:05:48AM +0800 schrieb Shengjing Zhu: > > OK, I'll try to work on updating it and all reverse deps next week. > > The new version has breaking changes by removing old interfaces. > > The two main

Re: Update golang-github-appc-cni to 1.0 (was Re: singularity-container: CVE-2021-33622)

2022-02-20 Thread Andreas Tille
Hi, Am Mon, Feb 21, 2022 at 12:05:48AM +0800 schrieb Shengjing Zhu: > OK, I'll try to work on updating it and all reverse deps next week. > The new version has breaking changes by removing old interfaces. > The two main consumers(containerd and podman) have new > versions(containerd 1.6, podman

Re: Update golang-github-appc-cni to 1.0 (was Re: singularity-container: CVE-2021-33622)

2022-02-20 Thread Shengjing Zhu
On Sun, Feb 20, 2022 at 11:33 PM Nilesh Patra wrote: > > Hi Shengjing, > > On 2/18/22 10:14 PM, Shengjing Zhu wrote: > > On Sat, Feb 19, 2022 at 12:23 AM Andreas Tille wrote: > >> Cool. I'd be happy if you would ping me to let me continue with > >> singularity. > >> > > > > I think you can

Re: Update golang-github-appc-cni to 1.0 (was Re: singularity-container: CVE-2021-33622)

2022-02-20 Thread Nilesh Patra
Hi Shengjing, On 2/18/22 10:14 PM, Shengjing Zhu wrote: On Sat, Feb 19, 2022 at 12:23 AM Andreas Tille wrote: Cool. I'd be happy if you would ping me to let me continue with singularity. I think you can build singularity in experiment for now to see if there are other failures. It is

Re: Failing to replace vendored code copies by Debian packages (Was: Update golang-github-appc-cni to 1.0 (was Re: singularity-container: CVE-2021-33622))

2022-02-20 Thread Nilesh Patra
On 2/20/22 12:19 AM, Andreas Tille wrote: I'm afraid the version bump was not responsible for the strange grpc issue. I kept on working on version 3.9.4 of singularity-container to reduce the number of vendored code copies. As I wrote down in d/README.source[1] I failed in replacing any

Failing to replace vendored code copies by Debian packages (Was: Update golang-github-appc-cni to 1.0 (was Re: singularity-container: CVE-2021-33622))

2022-02-19 Thread Andreas Tille
Am Sat, Feb 19, 2022 at 02:22:43PM +0100 schrieb Andreas Tille: > Hi, > > Am Fri, Feb 18, 2022 at 10:19:01PM +0100 schrieb Andreas Tille: > > > So I do not know where this error comes from; or if you have something > > > else locally. > > > > I'll simply revert the version bump ... I'm afraid

Re: Update golang-github-appc-cni to 1.0 (was Re: singularity-container: CVE-2021-33622)

2022-02-19 Thread Andreas Tille
Hi, Am Fri, Feb 18, 2022 at 10:19:01PM +0100 schrieb Andreas Tille: > > So I do not know where this error comes from; or if you have something else > > locally. > > I'll simply revert the version bump ... I did so and uploaded to experimental[1]. I think once all preconditions are in unstable

Re: Update golang-github-appc-cni to 1.0 (was Re: singularity-container: CVE-2021-33622)

2022-02-18 Thread Andreas Tille
Hi Nilesh, Am Sat, Feb 19, 2022 at 02:34:16AM +0530 schrieb Nilesh Patra: > > I disabled the attempt `chown -c root.root` which is not permitted on > > one hand and not needed on the other hand since the resulting files > > inside the Debian package are owned by root anyway. > > Yeah, as we

Re: Update golang-github-appc-cni to 1.0 (was Re: singularity-container: CVE-2021-33622)

2022-02-18 Thread Nilesh Patra
On 2/19/22 2:08 AM, Andreas Tille wrote: Am Fri, Feb 18, 2022 at 11:31:23PM +0530 schrieb Nilesh Patra: | dh_fixperms | chown -c root.root debian/singularity-container/usr/lib/*/singularity/bin/* | chown: changing ownership of

Re: Update golang-github-appc-cni to 1.0 (was Re: singularity-container: CVE-2021-33622)

2022-02-18 Thread Andreas Tille
Hi again, I can confirm I've got version 3.9.4 building thanks to all your help. Am Fri, Feb 18, 2022 at 11:31:23PM +0530 schrieb Nilesh Patra: > | dh_fixperms > | chown -c root.root debian/singularity-container/usr/lib/*/singularity/bin/* > | chown: changing ownership of >

Re: Update golang-github-appc-cni to 1.0 (was Re: singularity-container: CVE-2021-33622)

2022-02-18 Thread Nilesh Patra
On 2/18/22 10:54 PM, Andreas Tille wrote: Hi Shengjing, Am Sat, Feb 19, 2022 at 12:44:39AM +0800 schrieb Shengjing Zhu: I think you can build singularity in experiment for now to see if there are other failures. I've bumped Build-Depends: golang-github-appc-cni-dev (>= 1.0.1~) [1] but when

Re: Update golang-github-appc-cni to 1.0 (was Re: singularity-container: CVE-2021-33622)

2022-02-18 Thread Andreas Tille
Hi Shengjing, Am Sat, Feb 19, 2022 at 12:44:39AM +0800 schrieb Shengjing Zhu: > I think you can build singularity in experiment for now to see if > there are other failures. I've bumped Build-Depends: golang-github-appc-cni-dev (>= 1.0.1~) [1] but when doing so Salsa-CI does not produce helpful

Re: Update golang-github-appc-cni to 1.0 (was Re: singularity-container: CVE-2021-33622)

2022-02-18 Thread Shengjing Zhu
On Sat, Feb 19, 2022 at 12:23 AM Andreas Tille wrote: > > Am Sat, Feb 19, 2022 at 12:09:03AM +0800 schrieb Shengjing Zhu: > > Yes. It's needed for updating containerd(which was just released a few > > days ago) as well. And I guess it's also needed by podman too. > > Cool. I'd be happy if you

Re: Update golang-github-appc-cni to 1.0 (was Re: singularity-container: CVE-2021-33622)

2022-02-18 Thread Andreas Tille
Am Sat, Feb 19, 2022 at 12:09:03AM +0800 schrieb Shengjing Zhu: > Yes. It's needed for updating containerd(which was just released a few > days ago) as well. And I guess it's also needed by podman too. Cool. I'd be happy if you would ping me to let me continue with singularity. Kind regards

Re: Update golang-github-appc-cni to 1.0 (was Re: singularity-container: CVE-2021-33622)

2022-02-18 Thread Shengjing Zhu
On Sat, Feb 19, 2022 at 12:06 AM Andreas Tille wrote: > > Am Fri, Feb 18, 2022 at 11:55:55PM +0800 schrieb Shengjing Zhu: > > > > The pseudo-excuses don't show regression, since I added a patch to > > work around. But I'm not satisfied with my own patch. I guess it's > > wrong I planned to

Re: Update golang-github-appc-cni to 1.0 (was Re: singularity-container: CVE-2021-33622)

2022-02-18 Thread Andreas Tille
Am Fri, Feb 18, 2022 at 11:55:55PM +0800 schrieb Shengjing Zhu: > > The pseudo-excuses don't show regression, since I added a patch to > work around. But I'm not satisfied with my own patch. I guess it's > wrong I planned to update > golang-github-containernetworking-plugin, but it seems I

Update golang-github-appc-cni to 1.0 (was Re: singularity-container: CVE-2021-33622)

2022-02-18 Thread Shengjing Zhu
On Fri, Feb 18, 2022 at 11:42 PM Nilesh Patra wrote: > > On 2/18/22 6:01 PM, Andreas Tille wrote: > > Control: tags -1 help > > > > Hi, > > > > I updated singularity-container in Salsa to the latest available CE > > release and added some new Build-Depends. Unfortunately it does not > > build as