NetCube-Systems-Austria/kumquat-buildroot
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
f45925a951
kumquat-buildroot/package/docker-containerd/docker-containerd.mk

45 lines
1.3 KiB
Makefile
Raw Normal View History

docker-containerd: new package docker-containerd is a daemon and API for controlling and managing runC containers. https://containerd.tools/ Signed-off-by: Christian Stewart <christian@paral.in> Reviewed-by: Romain Naour <romain.naour@gmail.com> [Thomas: - simplify a bit the comments about the runtime dependencies - add missing comment on wchar, and take into account the BR2_USE_MMU dependency in the comment - factorize the build step with a foreach loop.] Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
2016-07-05 00:30:32 +02:00
################################################################################
#
# docker-containerd
#
################################################################################
package/docker-containerd: security bump to version 1.4.3 Fixes the following security issue: - CVE-2020-15257: Access controls for the shim’s API socket verified that the connecting process had an effective UID of 0, but did not otherwise restrict access to the abstract Unix domain socket. This would allow malicious containers running in the same network namespace as the shim, with an effective UID of 0 but otherwise reduced privileges, to cause new processes to be run with elevated privileges. For more details, see the advisory: https://github.com/containerd/containerd/security/advisories/GHSA-36xw-fx78-c5r4 Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2020-12-01 23:23:46 +01:00
DOCKER_CONTAINERD_VERSION = 1.4.3
package: remove 'v' prefix from github-fetched packages On Github, a large number of projects name their tag vXYZ (i.e v3.0, v0.1, etc.). In some packages we do: <pkg>_VERSION = v0.3 <pkg>_SITE = $(call github foo,bar,$(<pkg>_VERSION)) And in some other packages we do: <pkg>_VERSION = 0.3 <pkg>_SITE = $(call github foo,bar,v$(<pkg>_VERSION)) I.e in one case we consider the version to be v0.3, in the other case we consider 0.3 to be the version. The problem with v0.3 is that when used in conjunction with release-monitoring.org, it doesn't work very well, because release-monitoring.org has the concept of "version prefix" and using that they drop the "v" prefix for the version. Therefore, a number of packages in Buildroot have a version that doesn't match with release-monitoring.org because Buildroot has 'v0.3' and release-monitoring.org has '0.3'. Since really the version number of 0.3, is makes sense to update our packages to drop this 'v'. This commit only addresses the (common) case of github packages where the prefix is simply 'v'. Other cases will be handled by separate commits. Also, there are a few cases that couldn't be handled mechanically that aren't covered by this commit. Signed-off-by: Victor Huesca <victor.huesca@bootlin.com> [Arnout: don't change flatbuffers, json-for-modern-cpp, libpagekite, python-scapy3k, softether] Signed-off-by: Arnout Vandecappelle (Essensium/Mind) <arnout@mind.be>
2019-06-12 08:42:06 +02:00
DOCKER_CONTAINERD_SITE = $(call github,containerd,containerd,v$(DOCKER_CONTAINERD_VERSION))
docker-containerd: new package docker-containerd is a daemon and API for controlling and managing runC containers. https://containerd.tools/ Signed-off-by: Christian Stewart <christian@paral.in> Reviewed-by: Romain Naour <romain.naour@gmail.com> [Thomas: - simplify a bit the comments about the runtime dependencies - add missing comment on wchar, and take into account the BR2_USE_MMU dependency in the comment - factorize the build step with a foreach loop.] Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
2016-07-05 00:30:32 +02:00
DOCKER_CONTAINERD_LICENSE = Apache-2.0
docker-containerd: bump to v1.1.3 This commit bumps docker-containerd to v1.1.3. This is a requisite bump for the upgrade of docker-engine to 2018.06. The license file was renamed from LICENSE.code to LICENSE, so we take this opportunity to add the hash for the license file. The only change between LICENSE.code and LICENSE is: - Copyright 2013-2016 Docker, Inc. + Copyright The containerd Authors Signed-off-by: Christian Stewart <christian@paral.in> [Thomas: fix legal info, add hash for license file.] Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
2018-09-13 07:22:24 +02:00
DOCKER_CONTAINERD_LICENSE_FILES = LICENSE
package/docker-containerd: add CPE variables cpe:2.3:a:linuxfoundation:containerd is a valid CPE identifier for this package: https://nvd.nist.gov/products/cpe/search/results?namingFormat=2.3&keyword=cpe%3A2.3%3Aa%3Alinuxfoundation%3Acontainerd Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
2021-01-21 23:13:52 +01:00
DOCKER_CONTAINERD_CPE_ID_VENDOR = linuxfoundation
DOCKER_CONTAINERD_CPE_ID_PRODUCT = containerd
docker-containerd: new package docker-containerd is a daemon and API for controlling and managing runC containers. https://containerd.tools/ Signed-off-by: Christian Stewart <christian@paral.in> Reviewed-by: Romain Naour <romain.naour@gmail.com> [Thomas: - simplify a bit the comments about the runtime dependencies - add missing comment on wchar, and take into account the BR2_USE_MMU dependency in the comment - factorize the build step with a foreach loop.] Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
2016-07-05 00:30:32 +02:00
package/docker-containerd: define <pkg>_GOMOD variable In preparation for the go.mod integration, define the DOCKER_CONTAINERD_GOMOD variable. Signed-off-by: Christian Stewart <christian@paral.in> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
2020-08-29 11:38:11 +02:00
DOCKER_CONTAINERD_GOMOD = github.com/containerd/containerd
docker-containerd: new package docker-containerd is a daemon and API for controlling and managing runC containers. https://containerd.tools/ Signed-off-by: Christian Stewart <christian@paral.in> Reviewed-by: Romain Naour <romain.naour@gmail.com> [Thomas: - simplify a bit the comments about the runtime dependencies - add missing comment on wchar, and take into account the BR2_USE_MMU dependency in the comment - factorize the build step with a foreach loop.] Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
2016-07-05 00:30:32 +02:00
package/docker-containerd: convert to golang infrastructure Signed-off-by: Angelo Compagnucci <angelo@amarulasolutions.com> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com> Reviewed-by: "Yann E. MORIN" <yann.morin.1998@free.fr> Signed-off-by: Arnout Vandecappelle (Essensium/Mind) <arnout@mind.be>
2018-03-31 15:27:34 +02:00
DOCKER_CONTAINERD_LDFLAGS = \
package/docker-containerd: fix version output ldflags Fix the ldflags specifying the version info for "version" command. Signed-off-by: Tian Yuanhao <tianyuanhao@aliyun.com> Signed-off-by: Christian Stewart <christian@paral.in> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
2020-12-16 09:00:08 +01:00
-X $(DOCKER_CONTAINERD_GOMOD)/version.Version=$(DOCKER_CONTAINERD_VERSION)
docker-containerd: pass -extldflags '-static' on when BR2_STATIC_LIBS=y There is no reason to link Go binaries statically, unless when BR2_STATIC_LIBS=y. Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com> Tested-by: Christian Stewart <christian@paral.in> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
2016-07-24 16:43:45 +02:00
package/docker-containerd: specify correct build targets Adds build targets for runc shims. Removes the outdated and now unnecessary symlinks to docker-runc docker-containerd etc as well. Signed-off-by: Christian Stewart <christian@paral.in> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
2020-12-16 09:00:10 +01:00
DOCKER_CONTAINERD_BUILD_TARGETS = \
cmd/containerd \
cmd/containerd-shim \
cmd/containerd-shim-runc-v1 \
cmd/containerd-shim-runc-v2 \
cmd/ctr
docker-containerd: new package docker-containerd is a daemon and API for controlling and managing runC containers. https://containerd.tools/ Signed-off-by: Christian Stewart <christian@paral.in> Reviewed-by: Romain Naour <romain.naour@gmail.com> [Thomas: - simplify a bit the comments about the runtime dependencies - add missing comment on wchar, and take into account the BR2_USE_MMU dependency in the comment - factorize the build step with a foreach loop.] Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
2016-07-05 00:30:32 +02:00
package/docker-containerd: specify correct build targets Adds build targets for runc shims. Removes the outdated and now unnecessary symlinks to docker-runc docker-containerd etc as well. Signed-off-by: Christian Stewart <christian@paral.in> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
2020-12-16 09:00:10 +01:00
DOCKER_CONTAINERD_INSTALL_BINS = $(notdir $(DOCKER_CONTAINERD_BUILD_TARGETS))
docker-containerd: new package docker-containerd is a daemon and API for controlling and managing runC containers. https://containerd.tools/ Signed-off-by: Christian Stewart <christian@paral.in> Reviewed-by: Romain Naour <romain.naour@gmail.com> [Thomas: - simplify a bit the comments about the runtime dependencies - add missing comment on wchar, and take into account the BR2_USE_MMU dependency in the comment - factorize the build step with a foreach loop.] Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
2016-07-05 00:30:32 +02:00
package/docker-containerd: add AppArmor support Signed-off-by: Pascal Vizeli <pvizeli@syshack.ch> Signed-off-by: Stefan Agner <stefan@agner.ch> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
2020-12-28 17:05:32 +01:00
ifeq ($(BR2_PACKAGE_LIBAPPARMOR),y)
DOCKER_CONTAINERD_DEPENDENCIES += libapparmor
DOCKER_CONTAINERD_TAGS += apparmor
endif
docker-containerd: bump to v1.1.3 This commit bumps docker-containerd to v1.1.3. This is a requisite bump for the upgrade of docker-engine to 2018.06. The license file was renamed from LICENSE.code to LICENSE, so we take this opportunity to add the hash for the license file. The only change between LICENSE.code and LICENSE is: - Copyright 2013-2016 Docker, Inc. + Copyright The containerd Authors Signed-off-by: Christian Stewart <christian@paral.in> [Thomas: fix legal info, add hash for license file.] Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
2018-09-13 07:22:24 +02:00
ifeq ($(BR2_PACKAGE_LIBSECCOMP),y)
package/docker-containerd: add missing dependency on host-pkgconf When libsseccomp support is enabled, docker-containerd uses pkg-config to find libsseccomp, so we must depend on host-pkconf. Fixes the following build issue, detected with per-package directory support: pkg-config: exec: "pkg-config": executable file not found in $PATH Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com> Signed-off-by: Christian Stewart <christian@paral.in> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
2018-12-28 16:07:40 +01:00
DOCKER_CONTAINERD_DEPENDENCIES += libseccomp host-pkgconf
docker-containerd: bump to v1.1.3 This commit bumps docker-containerd to v1.1.3. This is a requisite bump for the upgrade of docker-engine to 2018.06. The license file was renamed from LICENSE.code to LICENSE, so we take this opportunity to add the hash for the license file. The only change between LICENSE.code and LICENSE is: - Copyright 2013-2016 Docker, Inc. + Copyright The containerd Authors Signed-off-by: Christian Stewart <christian@paral.in> [Thomas: fix legal info, add hash for license file.] Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
2018-09-13 07:22:24 +02:00
DOCKER_CONTAINERD_TAGS += seccomp
endif
ifeq ($(BR2_PACKAGE_DOCKER_CONTAINERD_DRIVER_BTRFS),y)
DOCKER_CONTAINERD_DEPENDENCIES += btrfs-progs
else
DOCKER_CONTAINERD_TAGS += no_btrfs
endif
package/docker-containerd: convert to golang infrastructure Signed-off-by: Angelo Compagnucci <angelo@amarulasolutions.com> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com> Reviewed-by: "Yann E. MORIN" <yann.morin.1998@free.fr> Signed-off-by: Arnout Vandecappelle (Essensium/Mind) <arnout@mind.be>
2018-03-31 15:27:34 +02:00
$(eval $(golang-package))
Reference in New Issue Copy Permalink