Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package aws-efs-utils for openSUSE:Factory checked in at 2022-03-09 18:48:07 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/aws-efs-utils (Old) and /work/SRC/openSUSE:Factory/.aws-efs-utils.new.2349 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "aws-efs-utils" Wed Mar 9 18:48:07 2022 rev:7 rq:960484 version:1.31.3 Changes: -------- --- /work/SRC/openSUSE:Factory/aws-efs-utils/aws-efs-utils.changes 2020-11-04 18:32:07.864182457 +0100 +++ /work/SRC/openSUSE:Factory/.aws-efs-utils.new.2349/aws-efs-utils.changes 2022-03-11 11:40:23.642548932 +0100 @@ -1,0 +2,110 @@ +Wed Mar 9 11:47:22 UTC 2022 - John Paul Adrian Glaubitz <adrian.glaub...@suse.com> + +- Remove redundant python3 dependency from Requires +- Update regular expression to fix python shebang + +------------------------------------------------------------------- +Fri Feb 18 12:39:14 UTC 2022 - Robert Schweikert <rjsch...@suse.com> + +- Update to version 1.31.3 (bsc#1195916) + + Add skip-styletest.patch + - Style is enforced upstream and triggers unnecessary build version + requirements + + Allow specifying fs_id in cloudwatch log group name + + Includes fix for stunnel path + +------------------------------------------------------------------- +Wed Aug 11 12:32:39 UTC 2021 - Johannes Segitz <jseg...@suse.com> + +- Added hardening to systemd service(s). Added patch(es): + * harden_amazon-efs-mount-watchdog.service.patch + +------------------------------------------------------------------- +Thu Jun 24 11:57:02 UTC 2021 - John Paul Adrian Glaubitz <adrian.glaub...@suse.com> + +- Update to version 1.31.2 + + Handle HTTPError and other unknown exception when fetching IMDS token + + Support Oracle Enterprise Linux 8 +- from version 1.31.1 + + Support fallback to mount with mount target ip address when DNS resolution fails + + Bump py from 1.8.0 to 1.10.0 +- from version 1.30.2 + + Add helper message when config file on instance is not latest + + Fix the throughput regression due to read_ahead configuration change + on Linux distribution with kernel version 5.4.x and above +- from version 1.30.1 + + Support mounting to specific AZ mount target + + Revert "Support mounting to specific AZ mount target" + + Support mounting to specific AZ mount target + + Use regional AWS STS endpoints instead of the global endpoint to reduce latency +- from version 1.29.1-mac + + Fix issue where state files are removed after mount on EC2 + instances running on MacOS Big Sur + + Add support for EC2 Mac instances running macOS Big Sur +- from version 1.29.1 + + Update the python dependency to python3 + + Fix typo +- from version 1.28.2 + + Fix the issue that mounting with IAM authorization with + iam role does not work with IMDSv2 +- from version 1.28.1 + + Support publishing mount success/failure notification via CloudWatch log + + filename of .deb-package now includes architecture +- from version 1.27.1 + + Merge PR #60 on GitHub. Adds support for AssumeRoleWithWebIdentity. + + Add support for AssumeRoleWithWebIdentity +- from version 1.26.3 + + Fix an issue where watchdog crashed during restart because stunnel + was killed and pid key was removed from state file +- from version 1.26.2 + + Fixes an issue with watchdog where it sometimes fails to restart stunnels in + efs-csi-driver container * Fixes an issue where fs cannot be mounted with tls + using systemd.automount-units due to mountpoint check + + Revert "Fixes an issue with watchdog where it sometimes fails to restart stunnels + in efs-csi-driver container" + + Fixes an issue with watchdog where it sometimes fails to restart stunnels in + efs-csi-driver container + + Remove non-ascii character in dist/efs-utils.conf +- from version 1.25-3 + + Check if mountpoint is already mounted beforehand for tls mount + + Bug fix and enhancement, support fedora +- from version 1.25-2 + + Fix python3 IAM role name encoded format, add optional + override for stunnel log + + Encode IAM role name to UTF-8 +- from version 1.25-1 + + Create self-signed certificate for tls-only mount + + add CentOS 8 support +- from version 1.24 + + Fix the malformed certificate info + + bump the release id to 3 + + Use IMDSv1 by default, and use IMDSv2 where required + + Revert "Use IMDSv1 by default, and fall back to IMDSv2 if necessary" + + Use IMDSv1 by default, and fall back to IMDSv2 if necessary + + Modify rhel8-support.sh to handle Fedora as well, and rename it + + Remove which from DEB package dependency + + List which as dependency to search command exec path + + Enable region sourcing from efs-utils configuration file and fix + stunnel exec path issue in openSUSE + + Update rpm changelog for v1.23-2, fix circleCI build issue +- from version 1.23 + + Add support for Amazon Elastic Container Service +- from version 1.22 + + Improvements to metadata retrieval and IAM authentication +- from version 1.21 + + Improvements to auth and access point support +- from version 1.20 + + Fixes the mount issue with full DNS name in the AWS China Regions; + Upgrades unit test coverage version dependency to enable accurate + python3.8 coverage test +- from version 1.19 + + Added region localization, Integrate repository with CircleCI to enable + package build visualization, Unit tests bug fixes for python3.5 +- from version 1.18 + + Support IAM authentication and access points. +- Add patch to disable mount_efs_test which requires networking + + disable_mount_efs_test.patch +- Add openssl to BuildRequires, required for testsuite +- Update Requires from requirements.txt + +------------------------------------------------------------------- Old: ---- v1.17.tar.gz New: ---- disable_mount_efs_test.patch efs-utils-1.31.3.tar.gz harden_amazon-efs-mount-watchdog.service.patch skip-styletest.patch ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ aws-efs-utils.spec ++++++ --- /var/tmp/diff_new_pack.qdFHj3/_old 2022-03-11 11:40:24.098549443 +0100 +++ /var/tmp/diff_new_pack.qdFHj3/_new 2022-03-11 11:40:24.102549447 +0100 @@ -1,7 +1,7 @@ # # spec file for package aws-efs-utils # -# Copyright (c) 2020 SUSE LLC +# Copyright (c) 2022 SUSE LLC # # All modifications and additions to the file contributed by third parties # remain the property of their copyright owners, unless otherwise agreed @@ -17,21 +17,27 @@ Name: aws-efs-utils -Version: 1.17 +Version: 1.31.3 Release: 0 Summary: Utilities for using the EFS file systems License: MIT Group: System/Management URL: https://github.com/aws/efs-utils -Source0: https://github.com/aws/efs-utils/archive/v%{version}.tar.gz +Source0: efs-utils-%{version}.tar.gz +Patch0: disable_mount_efs_test.patch +Patch1: harden_amazon-efs-mount-watchdog.service.patch +Patch2: skip-styletest.patch +BuildRequires: openssl BuildRequires: python3-attrs >= 17.4.0 -BuildRequires: python3-coverage >= 4.5 -BuildRequires: python3-flake8 >= 3.7.9 +BuildRequires: python3-botocore >= 1.17.53 +BuildRequires: python3-coverage >= 4.5.4 +#BuildRequires: python3-flake8 >= 3.7.9 +BuildRequires: python3-flake8 BuildRequires: python3-mccabe >= 0.6.1 BuildRequires: python3-mock >= 2.0.0 BuildRequires: python3-pbr >= 3.1.1 BuildRequires: python3-pluggy >= 0.13.0 -BuildRequires: python3-py >= 1.8.0 +BuildRequires: python3-py >= 1.10.0 BuildRequires: python3-pycodestyle >= 2.5.0 BuildRequires: python3-pyflakes >= 2.1.1 BuildRequires: python3-pytest >= 4.6.7 @@ -43,7 +49,6 @@ BuildRequires: systemd-rpm-macros BuildRequires: pkgconfig(systemd) Requires: nfs-utils -Requires: python3 Requires: stunnel >= 4.56 BuildArch: noarch @@ -52,7 +57,10 @@ %prep %setup -n efs-utils-%{version} -find . -name "*.py" -exec sed -i 's/env python/python3/' {} + +%patch0 -p1 +find . -name "*.py" -exec sed -i 's/env python3/python3/' {} + +%patch1 -p1 +%patch2 %build # No build required ++++++ disable_mount_efs_test.patch ++++++ diff -Nru efs-utils-1.31.2.orig/Makefile efs-utils-1.31.2/Makefile --- efs-utils-1.31.2.orig/Makefile 2021-06-17 17:05:57.000000000 +0200 +++ efs-utils-1.31.2/Makefile 2021-06-24 13:55:03.285623213 +0200 @@ -57,5 +57,5 @@ .PHONY: test test: - pytest + pytest --ignore=test/mount_efs_test flake8 diff -Nru efs-utils-1.31.2.orig/setup.cfg efs-utils-1.31.2/setup.cfg --- efs-utils-1.31.2.orig/setup.cfg 2021-06-17 17:05:57.000000000 +0200 +++ efs-utils-1.31.2/setup.cfg 2021-06-24 13:54:45.397645746 +0200 @@ -6,7 +6,6 @@ addopts = --verbose --html build/pytest/index.html - --cov mount_efs --cov watchdog --cov-report html:build/coverage --cov-fail-under 80 ++++++ harden_amazon-efs-mount-watchdog.service.patch ++++++ Index: efs-utils-1.17/dist/amazon-efs-mount-watchdog.service =================================================================== --- efs-utils-1.17.orig/dist/amazon-efs-mount-watchdog.service +++ efs-utils-1.17/dist/amazon-efs-mount-watchdog.service @@ -11,6 +11,19 @@ Description=amazon-efs-mount-watchdog Before=remote-fs-pre.target [Service] +# added automatically, for details please see +# https://en.opensuse.org/openSUSE:Security_Features#Systemd_hardening_effort +ProtectSystem=full +ProtectHome=true +PrivateDevices=true +ProtectHostname=true +ProtectClock=true +ProtectKernelTunables=true +ProtectKernelModules=true +ProtectKernelLogs=true +ProtectControlGroups=true +RestrictRealtime=true +# end of automatic additions Type=simple ExecStart=/usr/bin/env amazon-efs-mount-watchdog KillMode=process ++++++ skip-styletest.patch ++++++ --- Makefile.orig +++ Makefile @@ -58,4 +58,3 @@ deb: .PHONY: test test: pytest --ignore=test/mount_efs_test - flake8
