Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package container-selinux for openSUSE:Factory checked in at 2024-07-14 08:48:57 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/container-selinux (Old) and /work/SRC/openSUSE:Factory/.container-selinux.new.17339 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "container-selinux" Sun Jul 14 08:48:57 2024 rev:21 rq:1186819 version:2.232.1 Changes: -------- --- /work/SRC/openSUSE:Factory/container-selinux/container-selinux.changes 2024-01-12 23:44:32.380649782 +0100 +++ /work/SRC/openSUSE:Factory/.container-selinux.new.17339/container-selinux.changes 2024-07-14 08:49:35.486446625 +0200 @@ -1,0 +2,41 @@ +Wed Jul 10 07:52:16 UTC 2024 - cathy...@suse.com + +- Update to version 2.232.1: + * Bump to v2.232.1 + * TMT: fix srpm download syntax on rawhide + * Bump to 2.232.0 + * Packit: remove `update_release` key from downstream jobs (#313) + * Update container-selinux.8 man page + * Add ownership of /usr/share/udica (#312) + * Packit/TMT: upstream maintenance of downstream gating tests + * extend container_engine_t again + * Allow spc_t to use localectl + * Allow spc_t to use timedatectl + * introduce container_use_xserver_devices boolean to allow GPU access + +------------------------------------------------------------------- +Mon May 06 07:36:02 UTC 2024 - jseg...@suse.com + +- Update to version 2.231.0: + * Allow container domains to communicate with spc_t unix_stream_sockets + * Move to %posttrans to ensure selinux-policy got updated before + the commands run (bsc#1221720) + +------------------------------------------------------------------- +Wed Apr 10 15:47:15 UTC 2024 - Cathy Hu <cathy...@suse.com> + +- Manual update to version 2.230.0+git4.a8e389d to include this + commit that is needed for the main selinux-policy update to work: + * Rename all /var/run file context entries to /run + +------------------------------------------------------------------- +Wed Apr 10 15:38:24 UTC 2024 - Cathy Hu <cathy...@suse.com> + +- Update to version 2.230.0: + * Move to tar_scm based packaging: added _service and _servicedata + * Allow containers to unmount file systems + * Add buildah as a container_runtime_exec_t label + * Additional rules for container_user_t + * improve container_engine_t + +------------------------------------------------------------------- Old: ---- v2.228.0.tar.gz New: ---- _service _servicedata container-selinux-2.232.1.tar.xz ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ container-selinux.spec ++++++ --- /var/tmp/diff_new_pack.klCJZX/_old 2024-07-14 08:49:36.602487447 +0200 +++ /var/tmp/diff_new_pack.klCJZX/_new 2024-07-14 08:49:36.606487593 +0200 @@ -26,20 +26,20 @@ # Version of SELinux we were using %define selinux_policyver %(rpm -q selinux-policy --qf '%%{version}') Name: container-selinux -Version: 2.228.0 +Version: 2.232.1 Release: 0 Summary: SELinux policies for container runtimes License: GPL-2.0-only URL: https://github.com/containers/container-selinux -Source0: https://github.com/containers/container-selinux/archive/refs/tags/v%{version}.tar.gz +Source0: container-selinux-%{version}.tar.xz BuildRequires: selinux-policy BuildRequires: selinux-policy-devel Requires: selinux-policy >= %(rpm -q selinux-policy --qf '%%{version}-%%{release}') -Requires(post): policycoreutils -Requires(post): /usr/bin/sed -Requires(post): selinux-policy-base >= %{selinux_policyver} -Requires(post): selinux-policy-targeted >= %{selinux_policyver} -Requires(post): selinux-tools +Requires(posttrans): policycoreutils +Requires(posttrans): /usr/bin/sed +Requires(posttrans): selinux-policy-base >= %{selinux_policyver} +Requires(posttrans): selinux-policy-targeted >= %{selinux_policyver} +Requires(posttrans): selinux-tools BuildArch: noarch %description @@ -68,7 +68,12 @@ %pre %selinux_relabel_pre -s %{selinuxtype} -%post +%postun +if [ $1 -eq 0 ]; then + %selinux_modules_uninstall -s %{selinuxtype} %{modulenames} docker +fi + +%posttrans # Install all modules in a single transaction if [ $1 -eq 1 ]; then %{_sbindir}/setsebool -P -N virt_use_nfs=1 virt_sandbox_use_all_caps=1 @@ -81,13 +86,6 @@ . %{_sysconfdir}/selinux/config sed -e "\|container_file_t|h; \${x;s|container_file_t||;{g;t};a\\" -e "container_file_t" -e "}" -i %{_sysconfdir}/selinux/${SELINUXTYPE}/contexts/customizable_types matchpathcon -qV %{_sharedstatedir}/containers || restorecon -R %{_sharedstatedir}/containers &> /dev/null || : - -%postun -if [ $1 -eq 0 ]; then - %selinux_modules_uninstall -s %{selinuxtype} %{modulenames} docker -fi - -%posttrans %selinux_relabel_post -s %{selinuxtype} %files ++++++ _service ++++++ <services> <service name="tar_scm" mode="manual"> <param name="version">_auto_</param> <param name="versionformat">@PARENT_TAG@</param> <param name="url">https://github.com/containers/container-selinux.git</param> <param name="scm">git</param> <param name="changesgenerate">enable</param> <param name="match-tag">v*</param> <param name="revision">main</param> <param name="versionrewrite-pattern">v(.*)</param> <param name="versionrewrite-replacement">\1</param> </service> <service name="recompress" mode="manual"> <param name="compression">xz</param> <param name="file">*.tar</param> </service> <service name="set_version" mode="manual" > <param name="file">container-selinux.spec</param> </service> </services> ++++++ _servicedata ++++++ <servicedata> <service name="tar_scm"> <param name="url">https://github.com/containers/container-selinux.git</param> <param name="changesrevision">a68865582e123856c191fe0ecbbba9301758e591</param></service></servicedata> (No newline at EOF)