Script 'mail_helper' called by obssrc
Hello community,
here is the log from the commit of package velociraptor for openSUSE:Factory
checked in at 2023-02-11 21:56:34
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Comparing /work/SRC/openSUSE:Factory/velociraptor (Old)
and /work/SRC/openSUSE:Factory/.velociraptor.new.1848 (New)
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "velociraptor"
Sat Feb 11 21:56:34 2023 rev:3 rq:1064242 version:0.6.7.4~git63.4a1ed09d
Changes:
--------
--- /work/SRC/openSUSE:Factory/velociraptor/velociraptor-client.changes
2023-01-21 19:10:40.120992749 +0100
+++
/work/SRC/openSUSE:Factory/.velociraptor.new.1848/velociraptor-client.changes
2023-02-11 21:57:31.119695478 +0100
@@ -1,0 +2,22 @@
+Thu Jan 26 20:06:09 UTC 2023 - je...@suse.com
+
+- Update to version 0.6.7.4~git63.4a1ed09d:
+ * utils/time.js: fix handling of nanosecond-resolution timestamps
+- Added patches:
+ * velociraptor-reproducible-timestamp.diff
+
+-------------------------------------------------------------------
+Tue Jan 24 20:57:08 UTC 2023 - Jeff Mahoney <je...@suse.com>
+
+- Use obsinfo mtime to produce stable build timestamp (bsc#1207369).
+
+-------------------------------------------------------------------
+Tue Jan 24 15:07:09 UTC 2023 - je...@suse.com
+
+- Update to version 0.6.7.4~git60.8abed37a:
+ * http_comms: create ring buffer temporary file in the same directory
+ * cronsnoop: plumb in real scope logging
+ * cronsnoop: don't treat routine errors as fatal
+ * cronsnoop: fix typo
+
+-------------------------------------------------------------------
@@ -30,5 +51,0 @@
-Fri Jan 20 16:37:17 UTC 2023 - Dirk Müller <dmuel...@suse.com>
-
-- add memory limit to systemd unit
-
----------------------------------------------------------------------
velociraptor.changes: same change
Old:
----
velociraptor-0.6.7.4~git53.0e85855.obscpio
New:
----
velociraptor-0.6.7.4~git63.4a1ed09d.obscpio
velociraptor-reproducible-timestamp.diff
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Other differences:
------------------
++++++ velociraptor-client.spec ++++++
--- /var/tmp/diff_new_pack.YofiXb/_old 2023-02-11 21:57:31.635698691 +0100
+++ /var/tmp/diff_new_pack.YofiXb/_new 2023-02-11 21:57:31.639698716 +0100
@@ -40,7 +40,7 @@
%endif
Name: velociraptor-client
-Version: 0.6.7.4~git53.0e85855
+Version: 0.6.7.4~git63.4a1ed09d
Release: 0
Summary: Endpoint visibility and collection tool (endpoint only)
Group: System/Monitoring
@@ -53,10 +53,12 @@
Source4: vmlinux.h-%{vmlinux_h_version}.tar.xz
Source5: update-vendoring.sh
Source6: sysconfig.%{name}
+Source7: %{projname}.obsinfo
Patch1: velociraptor-golang-mage-vendoring.diff
Patch2: velociraptor-skip-git-submodule-import-for-OBS-build.patch
Patch3: vendor-build-fixes-for-SLE12.patch
Patch4: sdjournal-build-fix-for-SLE12.patch
+Patch5: velociraptor-reproducible-timestamp.diff
BuildRequires: fileb0x
BuildRequires: golang-packaging
BuildRequires: mage
@@ -107,6 +109,14 @@
# rm -rf artifacts/definitions/Windows
%build
+
+# Reproductible builds need stable timestamps
+timestamp=$(date -Iseconds --utc --date=@$(grep mtime: %{SOURCE7}|sed -e
's/mtime: //'))
+git_commit=$(grep commit: %{SOURCE7}|sed -e 's/commit: //g')
+
+export VELOCIRAPTOR_BUILD_TIME=$timestamp
+export VELOCIRAPTOR_GIT_HEAD=$git_commit
+
PATH=$PATH:/usr/sbin make linux_bare BUILD_LIBBPFGO=%{with bpf}
%install
++++++ velociraptor.spec ++++++
--- /var/tmp/diff_new_pack.YofiXb/_old 2023-02-11 21:57:31.683698990 +0100
+++ /var/tmp/diff_new_pack.YofiXb/_new 2023-02-11 21:57:31.691699039 +0100
@@ -40,7 +40,7 @@
%endif
Name: velociraptor
-Version: 0.6.7.4~git53.0e85855
+Version: 0.6.7.4~git63.4a1ed09d
Release: 0
Summary: Endpoint visibility and collection tool
Group: System/Monitoring
@@ -58,10 +58,12 @@
Source9: update-vendoring.sh
Source10: sysconfig.%{name}
Source11: sysconfig.%{name}-client
+Source12: %{projname}.obsinfo
Patch1: velociraptor-golang-mage-vendoring.diff
Patch2: velociraptor-skip-git-submodule-import-for-OBS-build.patch
Patch3: vendor-build-fixes-for-SLE12.patch
Patch4: sdjournal-build-fix-for-SLE12.patch
+Patch5: velociraptor-reproducible-timestamp.diff
BuildRequires: fileb0x
BuildRequires: golang-packaging
BuildRequires: mage
@@ -96,7 +98,7 @@
%package kafka-humio-gateway
Summary: Gateway between Kafka and Humio for Velociraptor Artifacts
-Version: 0.6.7.4~git53.0e85855
+Version: 0.6.7.4~git63.4a1ed09d
%description kafka-humio-gateway
This tool is used to consume events generated by the Kafka Velociraptor plugin
@@ -122,6 +124,14 @@
# rm -rf artifacts/definitions/Windows
%build
+
+# Reproductible builds need stable timestamps
+timestamp=$(date -Iseconds --utc --date=@$(grep mtime: %{SOURCE12}|sed -e
's/mtime: //'))
+git_commit=$(grep commit: %{SOURCE12}|sed -e 's/commit: //g')
+
+export VELOCIRAPTOR_BUILD_TIME=$timestamp
+export VELOCIRAPTOR_GIT_HEAD=$git_commit
+
(cd gui/velociraptor ; npm run build)
PATH=$PATH:/usr/sbin make linux BUILD_LIBBPFGO=%{with bpf}
++++++ _service ++++++
--- /var/tmp/diff_new_pack.YofiXb/_old 2023-02-11 21:57:31.763699488 +0100
+++ /var/tmp/diff_new_pack.YofiXb/_new 2023-02-11 21:57:31.767699512 +0100
@@ -1,6 +1,6 @@
<services>
<service mode="manual" name="obs_scm">
- <param
name="url">https://github.com/jeffmahoney/linux-security-sensor</param>
+ <param name="url">https://github.com/SUSE/linux-security-sensor</param>
<param name="filename">velociraptor</param>
<param name="versionformat">@PARENT_TAG@~git@TAG_OFFSET@.%h</param>
<param name="revision">sensor-base-0.6.7</param>
++++++ _servicedata ++++++
--- /var/tmp/diff_new_pack.YofiXb/_old 2023-02-11 21:57:31.799699712 +0100
+++ /var/tmp/diff_new_pack.YofiXb/_new 2023-02-11 21:57:31.799699712 +0100
@@ -3,6 +3,6 @@
<param
name="url">https://github.com/jeffmahoney/linux-security-sensor</param>
<param
name="changesrevision">0e858552af3d6ab57bae796cc3e50ccef36b4aff</param></service><service
name="tar_scm">
<param
name="url">https://github.com/SUSE/linux-security-sensor</param>
- <param
name="changesrevision">b5931f73eb6c171a558d09d4ef8b3d4d7292d519</param></service></servicedata>
+ <param
name="changesrevision">4a1ed09d50339b902c6446686bd16deedbb23804</param></service></servicedata>
(No newline at EOF)
++++++ velociraptor-0.6.7.4~git53.0e85855.obscpio ->
velociraptor-0.6.7.4~git63.4a1ed09d.obscpio ++++++
/work/SRC/openSUSE:Factory/velociraptor/velociraptor-0.6.7.4~git53.0e85855.obscpio
/work/SRC/openSUSE:Factory/.velociraptor.new.1848/velociraptor-0.6.7.4~git63.4a1ed09d.obscpio
differ: char 49, line 1
++++++ velociraptor-reproducible-timestamp.diff ++++++
From: Jeff Mahoney <je...@suse.com>
Subject: magefile: use stable timestamps for build
In order to create reprodicible builds, we can't have timestamps that vary
without anything else changing.
diff --git a/magefile.go b/magefile.go
index 16badc2b..76011657 100644
--- a/magefile.go
+++ b/magefile.go
@@ -428,10 +428,18 @@ func build_gui_files() error {
}
func flags() string {
- timestamp := time.Now().Format(time.RFC3339)
+ timestamp := os.Getenv("VELOCIRAPTOR_BUILD_TIME")
+ if timestamp == "" {
+ timestamp = time.Now().Format(time.RFC3339)
+ }
flags := fmt.Sprintf(` -X
"www.velocidex.com/golang/velociraptor/config.build_time=%s"`, timestamp)
- flags += fmt.Sprintf(` -X
"www.velocidex.com/golang/velociraptor/config.commit_hash=%s"`, hash())
+ head := os.Getenv("VELOCIRAPTOR_GIT_HEAD")
+ if head == "" {
+ head = hash()
+ }
+
+ flags += fmt.Sprintf(` -X
"www.velocidex.com/golang/velociraptor/config.commit_hash=%s"`, head)
// If we are running on the CI pipeline we need to know the run
// number and URL so we can report them.
++++++ velociraptor.obsinfo ++++++
--- /var/tmp/diff_new_pack.YofiXb/_old 2023-02-11 21:57:31.963700732 +0100
+++ /var/tmp/diff_new_pack.YofiXb/_new 2023-02-11 21:57:31.967700758 +0100
@@ -1,5 +1,5 @@
name: velociraptor
-version: 0.6.7.4~git53.0e85855
-mtime: 1674098741
-commit: 0e858552af3d6ab57bae796cc3e50ccef36b4aff
+version: 0.6.7.4~git63.4a1ed09d
+mtime: 1674763484
+commit: 4a1ed09d50339b902c6446686bd16deedbb23804
