Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package warewulf4 for openSUSE:Factory checked in at 2026-10-31 23:07:01 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/warewulf4 (Old) and /work/SRC/openSUSE:Factory/.warewulf4.new.1255 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "warewulf4" Sat Oct 31 23:07:01 2026 rev:45 rq:1393928 version:4.7.1 Changes: -------- --- /work/SRC/openSUSE:Factory/warewulf4/warewulf4.changes 2026-09-17 15:21:45.858881033 +0200 +++ /work/SRC/openSUSE:Factory/.warewulf4.new.1255/warewulf4.changes 2026-10-31 23:08:58.818435669 +0100 @@ -1,0 +2,13 @@ +Fri Oct 30 16:17:55 UTC 2026 - Christian Goll <[email protected]> + +- removed fix-CVE-2026-84303.patch as grpc 1.84.0 is now set + in the service file which fixes: + * CVE-2026-84445 (bsc#1278760) + +------------------------------------------------------------------- +Mon Oct 12 12:17:28 UTC 2026 - Christian Goll <[email protected]> + +- fix CVE-2026-84303 (bsc#1279257) and only update with host values + on fresh install + +------------------------------------------------------------------- ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ warewulf4.spec ++++++ --- /var/tmp/diff_new_pack.jzucA6/_old 2026-10-31 23:08:59.833477694 +0100 +++ /var/tmp/diff_new_pack.jzucA6/_new 2026-10-31 23:08:59.835477777 +0100 @@ -41,7 +41,8 @@ License: BSD-3-Clause Group: Productivity/Clustering/Computing URL: https://warewulf.org -Source0: https://github.com/warewulf/warewulf/releases/download/v%{version}/warewulf-%{version}.tar.gz#/warewulf4-v%{version}.tar.gz +# use src without ./vendor +Source0: https://github.com/warewulf/warewulf/archive/refs/tags/v%{version}.tar.gz#/warewulf4-v%{version}.tar.gz Source1: vendor.tar.gz Source5: warewulf4-rpmlintrc Source10: config-ww4.sh @@ -52,6 +53,7 @@ BuildRequires: %{python_module Sphinx-latex} BuildRequires: distribution-release BuildRequires: dracut +BuildRequires: fdupes BuildRequires: firewalld BuildRequires: go >= 1.23 BuildRequires: golang-packaging @@ -171,6 +173,7 @@ export LOCALSTATEDIR=%{_localstatedir}/lib %{makeinstall} + # cleanup mkdir -p %{buildroot}%{_sbindir}/ ln -s %{_sbindir}/service %{buildroot}%{_sbindir}/rcwarewulfd @@ -200,6 +203,8 @@ mv %{buildroot}%{ww4dir}/warewulf/overlays/host/rootfs/etc/dhcp/dhcpd.conf.ww %{buildroot}%{ww4dir}/warewulf/overlays/host/rootfs/etc/dhcpd.conf.ww rmdir %{buildroot}%{ww4dir}/warewulf/overlays/host/rootfs/etc/dhcp +%fdupes %{buildroot}%{ww4dir}/warewulf/overlays + # create systemuser echo "u warewulf -" > system-user-%{name}.conf echo "g warewulf -" >> system-user-%{name}.conf @@ -207,6 +212,7 @@ install -D -m 644 system-user-%{name}.conf %{buildroot}%{_sysusersdir}/system-user-%{name}.conf install -D -m 755 %{S:10} %{buildroot}%{ww4dir}/warewulf/scripts/config-warewulf.sh install -D -m 755 %{S:11} %{buildroot}%{ww4dir}/warewulf/scripts/adjust_overlays.sh +touch %{buildroot}%{ww4dir}/warewulf/.upgraded-version # prepare RKE2 configuration template mkdir -p %{buildroot}%{ww4dir}/warewulf/overlays/rke2-config/etc/rancher/rke2 @@ -240,15 +246,17 @@ %service_add_pre warewulfd.service %post -%service_add_post warewulfd.service -if [ $1 -eq 1 ] ; then +if [ "$1" -eq 1 ] ; then + %{ww4dir}/warewulf/scripts/config-warewulf.sh +elif [ "$1" -ge 2 ] && [ "$(cat %{ww4dir}/warewulf/.upgraded-version 2>/dev/null)" != "%{version}" ] ; then + # only upgrade the configuration on a version change, not on reinstall cp %{_sysconfdir}/warewulf/nodes.conf %{_sysconfdir}/warewulf/nodes.conf.4.6.x cp %{_sysconfdir}/warewulf/warewulf.conf %{_sysconfdir}/warewulf/warewulf.conf.4.6.x %{_bindir}/wwctl upgrade nodes --replace-overlays --add-defaults %{_bindir}/wwctl upgrade config -else - %{ww4dir}/warewulf/scripts/config-warewulf.sh fi +echo "%{version}" > %{ww4dir}/warewulf/.upgraded-version +%service_add_post warewulfd.service %preun %service_del_preun warewulfd.service @@ -283,6 +291,7 @@ %ghost %{_sysconfdir}/profile.d/ssh_setup.sh %ghost %{_sysconfdir}/profile.d/ssh_setup.csh %dir %{ww4dir}/warewulf +%ghost %attr(0644,root,root) %{ww4dir}/warewulf/.upgraded-version %files man %{_mandir}/man1/wwctl*1.gz ++++++ _scmsync.obsinfo ++++++ --- /var/tmp/diff_new_pack.jzucA6/_old 2026-10-31 23:08:59.890480054 +0100 +++ /var/tmp/diff_new_pack.jzucA6/_new 2026-10-31 23:08:59.893480178 +0100 @@ -1,5 +1,5 @@ -mtime: 1789553058 -commit: 1f1b96e42e2c47f4cb112c160aecde54bb8c0cab4b8690288a5e25bb68f59c65 +mtime: 1793377592 +commit: 092138a7398e09341222a0d8d5876415783f78574ba54705c3d6e6a72704de59 url: https://src.opensuse.org/Cluster/warewulf4.git revision: main ++++++ _service ++++++ --- /var/tmp/diff_new_pack.jzucA6/_old 2026-10-31 23:08:59.914481048 +0100 +++ /var/tmp/diff_new_pack.jzucA6/_new 2026-10-31 23:08:59.917481172 +0100 @@ -1,11 +1,13 @@ <services> <service name="go_modules" mode="disabled"> <param name="replace"> - golang.org/x/text= golang.org/x/[email protected] + google.golang.org/grpc=google.golang.org/[email protected] </param> + <!-- <param name="replace"> golang.org/x/sync= golang.org/x/[email protected] </param> + --> </service> </services> ++++++ build.specials.obscpio ++++++ ++++++ build.specials.obscpio ++++++ diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/.gitignore new/.gitignore --- old/.gitignore 1970-01-01 01:00:00.000000000 +0100 +++ new/.gitignore 2026-10-30 17:26:32.000000000 +0100 @@ -0,0 +1,4 @@ +*.obscpio +*.osc +_build.* +.pbuild ++++++ vendor.tar.gz ++++++ /work/SRC/openSUSE:Factory/warewulf4/vendor.tar.gz /work/SRC/openSUSE:Factory/.warewulf4.new.1255/vendor.tar.gz differ: char 13, line 1 ++++++ warewulf4-rpmlintrc ++++++ --- /var/tmp/diff_new_pack.jzucA6/_old 2026-10-31 23:09:00.093488459 +0100 +++ /var/tmp/diff_new_pack.jzucA6/_new 2026-10-31 23:09:00.096488583 +0100 @@ -1,21 +1,18 @@ # ignore hidden files and executable bits in overlay # directories, as this files are meant to be run on # compute nodes -#addFilter("hidden-file-or-dir /var/lib/warewulf/overlays/,*") -#addFilter("non-executable-script /var/lib/warewulf/overlays/.*") +addFilter("hidden-file-or-dir /var/lib/warewulf/overlays/.*") +addFilter("non-executable-script /var/lib/warewulf/overlays/.*") +addFilter("non-executable-script /usr/lib/dracut/.*") # wwclient is called on a compute node *before* systemd in # order to provision the system, so it *must* be statically linked addFilter("statically-linked-binary .*/wwclient") -addFilter("shared-lib-without-dependency-information .*/wwclient") -# go binaries are hard to strip -addFilter("unstripped-binary-or-object.*") -# Intentional - symlinks will be copied to the client -addFilter("dangling-symlink .*/warewulf/overlays") # LOL. Not every changelog entry marks a version update. addFilter("no-version-in-last-changelog") # C'on, really? We have to build for multiple target version with different rpmlint settings. addFilter("unused-rpmlintrc-filter") -# ignore the binary in /usr/share as this binary will to the nodes and not run on -# the host where the rpm is installed. -addFilter("arch-dependent-file-in-usr-share") +# also ignore shell syntax errors in templates as the templates need to be rendered first +addFilter("bin-sh-syntax-error /var/lib/warewulf/overlays/.*") +# bashims in the templates do not touch the package +addFilter("potential-bashisms /var/lib/warewulf/overlays/.*") ++++++ warewulf4-v4.7.1.tar.gz ++++++ /work/SRC/openSUSE:Factory/warewulf4/warewulf4-v4.7.1.tar.gz /work/SRC/openSUSE:Factory/.warewulf4.new.1255/warewulf4-v4.7.1.tar.gz differ: char 12, line 1
