Script 'mail_helper' called by obssrc
Hello community,
here is the log from the commit of package falcosecurity-container-plugin for
openSUSE:Factory checked in at 2026-09-08 17:07:36
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Comparing /work/SRC/openSUSE:Factory/falcosecurity-container-plugin (Old)
and /work/SRC/openSUSE:Factory/.falcosecurity-container-plugin.new.1265
(New)
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "falcosecurity-container-plugin"
Tue Sep 8 17:07:36 2026 rev:2 rq:1376283 version:0.7.2
Changes:
--------
---
/work/SRC/openSUSE:Factory/falcosecurity-container-plugin/falcosecurity-container-plugin.changes
2026-06-18 19:40:43.179420298 +0200
+++
/work/SRC/openSUSE:Factory/.falcosecurity-container-plugin.new.1265/falcosecurity-container-plugin.changes
2026-09-08 17:07:43.456085267 +0200
@@ -1,0 +2,17 @@
+Tue Sep 8 06:32:27 UTC 2026 - Martin Pluskal <[email protected]>
+
+- Update to version 0.7.2:
+ * Recognize systemd nerdctl cgroup paths
+ * Resubscribe to the CRI container events stream and reset
+ the backoff after a healthy subscription
+ * Link libresolv on Linux so libcontainer.so loads on
+ glibc < 2.34
+ * Migrate the Go worker to go.podman.io/podman/v6 and
+ containerd v2.2.5 (Podman API floor still 4.0.0)
+ * Rebase container-plugin-use-system-deps.patch for the
+ new go-worker.cmake resolv hunk
+- License: Apache-2.0 AND MPL-2.0 (vendored Go modules
+ go-pathrs, filepath-securejoin, hashicorp/errwrap and
+ go-multierror)
+
+-------------------------------------------------------------------
Old:
----
container-plugin-0.7.1.tar
New:
----
_servicedata
container-plugin-0.7.2.tar
container-plugin.obsinfo
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Other differences:
------------------
++++++ falcosecurity-container-plugin.spec ++++++
--- /var/tmp/diff_new_pack.NK1yAv/_old 2026-09-08 17:07:51.020401553 +0200
+++ /var/tmp/diff_new_pack.NK1yAv/_new 2026-09-08 17:07:51.022401637 +0200
@@ -17,10 +17,13 @@
Name: falcosecurity-container-plugin
-Version: 0.7.1
+Version: 0.7.2
Release: 0
Summary: Falcosecurity plugin providing container metadata
-License: Apache-2.0
+# Legal-Review-Notice: MPL-2.0 from vendored Go modules statically
+# linked into libworker.a; vendor.tar.gz in the src.rpm satisfies
+# MPL-2.0 ยง3.2.
+License: Apache-2.0 AND MPL-2.0
URL:
https://github.com/falcosecurity/plugins/tree/main/plugins/container
# Source0/Source1 are produced by _service (obs_scm + go_modules):
Source0: container-plugin-%{version}.tar
@@ -31,16 +34,15 @@
# to the system copies so the build works offline:
Patch0: container-plugin-use-system-deps.patch
BuildRequires: cmake
-BuildRequires: fdupes
BuildRequires: gcc-c++
BuildRequires: go >= 1.25
+BuildRequires: libbtrfs-devel
BuildRequires: ninja
BuildRequires: pkgconfig
-BuildRequires: cmake(fmt)
-BuildRequires: libbtrfs-devel
-BuildRequires: libcap-devel
-BuildRequires: cmake(Reflex)
BuildRequires: plugin-sdk-cpp-devel
+BuildRequires: cmake(Reflex)
+BuildRequires: cmake(fmt)
+BuildRequires: pkgconfig(libcap)
%description
The container plugin enriches Falco/libsinsp events with container metadata
++++++ _service ++++++
--- /var/tmp/diff_new_pack.NK1yAv/_old 2026-09-08 17:07:51.081404104 +0200
+++ /var/tmp/diff_new_pack.NK1yAv/_new 2026-09-08 17:07:51.084404230 +0200
@@ -6,10 +6,10 @@
<service name="obs_scm" mode="manual">
<param name="url">https://github.com/falcosecurity/plugins.git</param>
<param name="scm">git</param>
- <param name="revision">refs/tags/plugins/container/v0.7.1</param>
+ <param name="revision">refs/tags/plugins/container/v0.7.2</param>
<param name="subdir">plugins/container</param>
<param name="filename">container-plugin</param>
- <param name="versionformat">0.7.1</param>
+ <param name="versionformat">0.7.2</param>
<param name="changesgenerate">enable</param>
</service>
<service name="tar" mode="manual"/>
++++++ _servicedata ++++++
<servicedata>
<service name="tar_scm">
<param
name="url">https://github.com/falcosecurity/plugins.git</param>
<param
name="changesrevision">e9ce458cd848cde23394735d3877cebb2df05476</param></service></servicedata>
(No newline at EOF)
++++++ container-plugin-0.7.1.tar -> container-plugin-0.7.2.tar ++++++
/work/SRC/openSUSE:Factory/falcosecurity-container-plugin/container-plugin-0.7.1.tar
/work/SRC/openSUSE:Factory/.falcosecurity-container-plugin.new.1265/container-plugin-0.7.2.tar
differ: char 1, line 1
++++++ container-plugin-use-system-deps.patch ++++++
--- /var/tmp/diff_new_pack.NK1yAv/_old 2026-09-08 17:07:51.139406529 +0200
+++ /var/tmp/diff_new_pack.NK1yAv/_new 2026-09-08 17:07:51.144406738 +0200
@@ -1,63 +1,5 @@
---- a/cmake/modules/fmt.cmake 2026-06-18 08:47:32.879998842 +0200
-+++ b/cmake/modules/fmt.cmake 2026-06-18 08:49:07.006549254 +0200
-@@ -1,5 +1,3 @@
--include(FetchContent)
--FetchContent_Declare(fmt
-- GIT_REPOSITORY https://github.com/fmtlib/fmt.git
-- GIT_TAG 11.1.4)
--FetchContent_MakeAvailable(fmt)
-\ No newline at end of file
-+# SPDX-License-Identifier: Apache-2.0
-+# openSUSE: use the system fmt (provides the fmt::fmt-header-only target)
-+find_package(fmt REQUIRED)
---- a/cmake/modules/reflex.cmake 2026-06-18 08:47:32.879998842 +0200
-+++ b/cmake/modules/reflex.cmake 2026-06-18 09:36:31.889427610 +0200
-@@ -1,9 +1,8 @@
--include(FetchContent)
--FetchContent_Declare(
-- reflex
-- GIT_REPOSITORY https://github.com/Genivia/RE-flex.git
-- GIT_TAG v5.3.0
-- UPDATE_DISCONNECTED TRUE
-- EXCLUDE_FROM_ALL TRUE
--)
--FetchContent_MakeAvailable(reflex)
-+# SPDX-License-Identifier: Apache-2.0
-+# openSUSE: use the system re-flex shared library via its CMake package
instead
-+# of fetching RE-flex. The plugin links a target named ReflexLibStatic, so
alias
-+# that onto the system shared target Reflex::ReflexLib (openSUSE re-flex ships
-+# only the shared library).
-+find_package(Reflex REQUIRED)
-+add_library(ReflexLibStatic INTERFACE)
-+target_link_libraries(ReflexLibStatic INTERFACE Reflex::ReflexLib)
---- a/cmake/modules/plugin-sdk-cpp.cmake 2026-06-18 08:47:32.879998842
+0200
-+++ b/cmake/modules/plugin-sdk-cpp.cmake 2026-06-18 08:49:18.387824954
+0200
-@@ -1,18 +1,5 @@
--include(FetchContent)
--
--message(
-- STATUS
-- "Fetching plugin-sdk-cpp at
'https://github.com/falcosecurity/plugin-sdk-cpp.git'"
--)
--
--FetchContent_Declare(
-- plugin-sdk-cpp
-- GIT_REPOSITORY https://github.com/falcosecurity/plugin-sdk-cpp.git
-- GIT_TAG 0.3.0
--)
--
--FetchContent_MakeAvailable(plugin-sdk-cpp)
--set(PLUGIN_SDK_INCLUDE "${plugin-sdk-cpp_SOURCE_DIR}/include")
--# Since we use nlohmann-json provided by the sdk-cpp plugin, we need to also
use use this one
--set(PLUGIN_SDK_DEPS_INCLUDE
"${plugin-sdk-cpp_SOURCE_DIR}/include/falcosecurity/internal/deps")
--message(STATUS "Using plugin-sdk-cpp include at '${PLUGIN_SDK_INCLUDE}'")
-+# SPDX-License-Identifier: Apache-2.0
-+# openSUSE: use the system plugin-sdk-cpp headers instead of fetching them
-+set(PLUGIN_SDK_INCLUDE "${CMAKE_INSTALL_PREFIX}/include")
-+set(PLUGIN_SDK_DEPS_INCLUDE
"${CMAKE_INSTALL_PREFIX}/include/falcosecurity/internal/deps")
-+message(STATUS "Using system plugin-sdk-cpp include at
'${PLUGIN_SDK_INCLUDE}'")
---- a/cmake/modules/btrfs.cmake 2026-06-18 08:47:32.879998842 +0200
-+++ b/cmake/modules/btrfs.cmake 2026-06-18 08:49:28.933006937 +0200
+--- a/cmake/modules/btrfs.cmake 2026-09-08 08:28:00.000000000 +0200
++++ b/cmake/modules/btrfs.cmake 2026-09-08 08:29:21.280511187 +0200
@@ -1,33 +1,4 @@
-# NOTE: containerd go package does only depend on the
-# header files from libbtrfs.
@@ -97,8 +39,20 @@
+# openSUSE: use the system libbtrfs headers (libbtrfs-devel ships <btrfs/*.h>)
+# instead of fetching and building btrfs-progs just for the CGO include path.
+set(BTRFS_CGO_CFLAG -e CGO_CFLAGS=-I${CMAKE_INSTALL_PREFIX}/include)
---- a/cmake/modules/go-worker.cmake 2026-06-18 08:47:32.879998842 +0200
-+++ b/cmake/modules/go-worker.cmake 2026-06-18 09:20:51.908066032 +0200
+--- a/cmake/modules/fmt.cmake 2026-09-08 08:28:00.000000000 +0200
++++ b/cmake/modules/fmt.cmake 2026-09-08 08:29:21.280511187 +0200
+@@ -1,5 +1,3 @@
+-include(FetchContent)
+-FetchContent_Declare(fmt
+- GIT_REPOSITORY https://github.com/fmtlib/fmt.git
+- GIT_TAG 11.1.4)
+-FetchContent_MakeAvailable(fmt)
+\ No newline at end of file
++# SPDX-License-Identifier: Apache-2.0
++# openSUSE: use the system fmt (provides the fmt::fmt-header-only target)
++find_package(fmt REQUIRED)
+--- a/cmake/modules/go-worker.cmake 2026-09-08 08:28:00.000000000 +0200
++++ b/cmake/modules/go-worker.cmake 2026-09-08 08:29:21.280511187 +0200
@@ -1,25 +1,20 @@
include(ExternalProject)
-
@@ -130,7 +84,7 @@
if(APPLE)
find_library(SECURITY_FRAMEWORK Security REQUIRED)
find_library(RESOLV resolv REQUIRED)
-@@ -28,5 +23,4 @@
+@@ -37,5 +32,4 @@
endif()
set(WORKER_LIB ${CMAKE_SOURCE_DIR}/go-worker/libworker.a)
set(WORKER_INCLUDE ${CMAKE_SOURCE_DIR}/go-worker)
@@ -138,4 +92,50 @@
-message(STATUS "Using worker library at '${WORKER_LIB}' with header in
${WORKER_INCLUDE}")
\ No newline at end of file
+message(STATUS "Using worker library at '${WORKER_LIB}' with header in
${WORKER_INCLUDE}")
+--- a/cmake/modules/plugin-sdk-cpp.cmake 2026-09-08 08:28:00.000000000
+0200
++++ b/cmake/modules/plugin-sdk-cpp.cmake 2026-09-08 08:29:21.280511187
+0200
+@@ -1,18 +1,5 @@
+-include(FetchContent)
+-
+-message(
+- STATUS
+- "Fetching plugin-sdk-cpp at
'https://github.com/falcosecurity/plugin-sdk-cpp.git'"
+-)
+-
+-FetchContent_Declare(
+- plugin-sdk-cpp
+- GIT_REPOSITORY https://github.com/falcosecurity/plugin-sdk-cpp.git
+- GIT_TAG 0.3.0
+-)
+-
+-FetchContent_MakeAvailable(plugin-sdk-cpp)
+-set(PLUGIN_SDK_INCLUDE "${plugin-sdk-cpp_SOURCE_DIR}/include")
+-# Since we use nlohmann-json provided by the sdk-cpp plugin, we need to also
use use this one
+-set(PLUGIN_SDK_DEPS_INCLUDE
"${plugin-sdk-cpp_SOURCE_DIR}/include/falcosecurity/internal/deps")
+-message(STATUS "Using plugin-sdk-cpp include at '${PLUGIN_SDK_INCLUDE}'")
++# SPDX-License-Identifier: Apache-2.0
++# openSUSE: use the system plugin-sdk-cpp headers instead of fetching them
++set(PLUGIN_SDK_INCLUDE "${CMAKE_INSTALL_PREFIX}/include")
++set(PLUGIN_SDK_DEPS_INCLUDE
"${CMAKE_INSTALL_PREFIX}/include/falcosecurity/internal/deps")
++message(STATUS "Using system plugin-sdk-cpp include at
'${PLUGIN_SDK_INCLUDE}'")
+--- a/cmake/modules/reflex.cmake 2026-09-08 08:28:00.000000000 +0200
++++ b/cmake/modules/reflex.cmake 2026-09-08 08:29:21.280511187 +0200
+@@ -1,9 +1,8 @@
+-include(FetchContent)
+-FetchContent_Declare(
+- reflex
+- GIT_REPOSITORY https://github.com/Genivia/RE-flex.git
+- GIT_TAG v5.3.0
+- UPDATE_DISCONNECTED TRUE
+- EXCLUDE_FROM_ALL TRUE
+-)
+-FetchContent_MakeAvailable(reflex)
++# SPDX-License-Identifier: Apache-2.0
++# openSUSE: use the system re-flex shared library via its CMake package
instead
++# of fetching RE-flex. The plugin links a target named ReflexLibStatic, so
alias
++# that onto the system shared target Reflex::ReflexLib (openSUSE re-flex ships
++# only the shared library).
++find_package(Reflex REQUIRED)
++add_library(ReflexLibStatic INTERFACE)
++target_link_libraries(ReflexLibStatic INTERFACE Reflex::ReflexLib)
++++++ container-plugin.obsinfo ++++++
name: container-plugin
version: 0.7.2
mtime: 1788536410
commit: 88f3c41817a1614f4215b1beb24af7b07be23a8a
++++++ vendor.tar.gz ++++++
/work/SRC/openSUSE:Factory/falcosecurity-container-plugin/vendor.tar.gz
/work/SRC/openSUSE:Factory/.falcosecurity-container-plugin.new.1265/vendor.tar.gz
differ: char 5, line 1
