496 lines
14 KiB
RPMSpec
496 lines
14 KiB
RPMSpec
Name: docker-engine
|
|
Version: 18.09.0
|
|
Release: 240
|
|
Summary: The open-source application container engine
|
|
Group: Tools/Docker
|
|
|
|
License: ASL 2.0
|
|
Source: %{name}.tar.gz
|
|
|
|
URL: https://mobyproject.org
|
|
|
|
%global is_systemd 1
|
|
%global debug_package %{nil}
|
|
|
|
# required packages for build
|
|
# most are already in the container (see contrib/builder/rpm/ARCH/generate.sh)
|
|
BuildRequires: pkgconfig(systemd) golang >= 1.8.3 btrfs-progs-devel device-mapper-devel glibc-static libseccomp-devel
|
|
BuildRequires: libselinux-devel libtool-ltdl-devel pkgconfig selinux-policy selinux-policy-devel sqlite-devel systemd-devel
|
|
BuildRequires: tar containerd docker-runc docker-proxy
|
|
|
|
# required packages on install
|
|
Requires: /bin/sh iptables libcgroup tar xz device-mapper-libs >= 1.02.90-1 systemd-units
|
|
|
|
# conflicting packages
|
|
Provides: docker
|
|
Conflicts: docker-io
|
|
Conflicts: docker-engine-cs
|
|
|
|
%description
|
|
Docker is an open source project to build, ship and run any application as a
|
|
lightweight container.
|
|
|
|
Docker containers are both hardware-agnostic and platform-agnostic. This means
|
|
they can run anywhere, from your laptop to the largest EC2 compute instance and
|
|
everything in between - and they don't require you to use a particular
|
|
language, framework or packaging system. That makes them great building blocks
|
|
for deploying and scaling web apps, databases, and backend services without
|
|
depending on a particular stack or provider.
|
|
|
|
%prep
|
|
%autosetup -c -n %{name}
|
|
|
|
%build
|
|
|
|
./apply-patches
|
|
|
|
# build docker engine
|
|
WORKDIR=$(pwd)
|
|
GITCOMMIT=$(git rev-parse --short HEAD)
|
|
export VERSION=$(cat VERSION)
|
|
export DOCKER_GITCOMMIT=${GITCOMMIT}
|
|
export AUTO_GOPATH=1
|
|
export DOCKER_BUILDTAGS="pkcs11 seccomp selinux"
|
|
cd ${WORKDIR}/components/engine
|
|
./hack/make.sh dynbinary
|
|
|
|
# buid docker cli
|
|
cd ${WORKDIR}/components/cli
|
|
mkdir -p .gopath/src/github.com/docker
|
|
export GOPATH=`pwd`/.gopath
|
|
ln -sf `pwd` .gopath/src/github.com/docker/cli
|
|
ln -sf ${WORKDIR}/components/engine .gopath/src/github.com/docker/docker
|
|
cd .gopath/src/github.com/docker/cli
|
|
make dynbinary
|
|
|
|
# man is provided in docker --help and dockerd --help
|
|
# ./man/md2man-all.sh runs outside the build container (if at all), since we don't have go-md2man here
|
|
# ./man/md2man-all.sh -q
|
|
|
|
rm -rf .gopath
|
|
cd ${WORKDIR}
|
|
|
|
%check
|
|
./components/engine/bundles/dynbinary-daemon/dockerd -v
|
|
./components/cli/build/docker -v
|
|
|
|
%install
|
|
# install binary
|
|
install -d $RPM_BUILD_ROOT/%{_bindir}
|
|
install -p -m 755 components/engine/bundles/dynbinary-daemon/dockerd $RPM_BUILD_ROOT/%{_bindir}/dockerd
|
|
|
|
# install cli
|
|
install -p -m 755 components/cli/build/docker $RPM_BUILD_ROOT/%{_bindir}/docker
|
|
|
|
# install proxy
|
|
install -p -m 755 /usr/bin/docker-proxy $RPM_BUILD_ROOT/%{_bindir}/docker-proxy
|
|
|
|
# install containerd
|
|
install -p -m 755 /usr/bin/containerd $RPM_BUILD_ROOT/%{_bindir}/containerd
|
|
install -p -m 755 /usr/bin/containerd-shim $RPM_BUILD_ROOT/%{_bindir}/containerd-shim
|
|
|
|
# install runc
|
|
install -p -m 755 /usr/local/bin/runc $RPM_BUILD_ROOT/%{_bindir}/runc
|
|
|
|
# install udev rules
|
|
install -d $RPM_BUILD_ROOT/%{_sysconfdir}/udev/rules.d
|
|
install -p -m 644 components/engine/contrib/udev/80-docker.rules $RPM_BUILD_ROOT/%{_sysconfdir}/udev/rules.d/80-docker.rules
|
|
|
|
# add init scripts
|
|
install -d $RPM_BUILD_ROOT/etc/sysconfig
|
|
install -d $RPM_BUILD_ROOT/%{_initddir}
|
|
install -p -m 644 components/engine/contrib/init/sysvinit-redhat/docker.sysconfig $RPM_BUILD_ROOT/etc/sysconfig/docker
|
|
install -p -m 644 components/engine/contrib/init/sysvinit-redhat/docker-network $RPM_BUILD_ROOT/etc/sysconfig/docker-network
|
|
install -p -m 644 components/engine/contrib/init/sysvinit-redhat/docker-storage $RPM_BUILD_ROOT/etc/sysconfig/docker-storage
|
|
|
|
install -d $RPM_BUILD_ROOT/%{_unitdir}
|
|
install -p -m 644 components/engine/contrib/init/systemd/docker.service $RPM_BUILD_ROOT/%{_unitdir}/docker.service
|
|
# add bash, zsh, and fish completions
|
|
install -d $RPM_BUILD_ROOT/usr/share/bash-completion/completions
|
|
install -d $RPM_BUILD_ROOT/usr/share/zsh/vendor-completions
|
|
install -d $RPM_BUILD_ROOT/usr/share/fish/vendor_completions.d
|
|
install -p -m 644 components/cli/contrib/completion/bash/docker $RPM_BUILD_ROOT/usr/share/bash-completion/completions/docker
|
|
install -p -m 644 components/cli/contrib/completion/zsh/_docker $RPM_BUILD_ROOT/usr/share/zsh/vendor-completions/_docker
|
|
install -p -m 644 components/cli/contrib/completion/fish/docker.fish $RPM_BUILD_ROOT/usr/share/fish/vendor_completions.d/docker.fish
|
|
|
|
# install manpages
|
|
# install -d %{buildroot}%{_mandir}/man1
|
|
# install -p -m 644 components/cli/man/man1/*.1 $RPM_BUILD_ROOT/%{_mandir}/man1
|
|
# install -d %{buildroot}%{_mandir}/man5
|
|
# install -p -m 644 components/cli/man/man5/*.5 $RPM_BUILD_ROOT/%{_mandir}/man5
|
|
# install -d %{buildroot}%{_mandir}/man8
|
|
# install -p -m 644 components/cli/man/man8/*.8 $RPM_BUILD_ROOT/%{_mandir}/man8
|
|
|
|
# add vimfiles
|
|
install -d $RPM_BUILD_ROOT/usr/share/vim/vimfiles/doc
|
|
install -d $RPM_BUILD_ROOT/usr/share/vim/vimfiles/ftdetect
|
|
install -d $RPM_BUILD_ROOT/usr/share/vim/vimfiles/syntax
|
|
install -p -m 644 components/engine/contrib/syntax/vim/doc/dockerfile.txt $RPM_BUILD_ROOT/usr/share/vim/vimfiles/doc/dockerfile.txt
|
|
install -p -m 644 components/engine/contrib/syntax/vim/ftdetect/dockerfile.vim $RPM_BUILD_ROOT/usr/share/vim/vimfiles/ftdetect/dockerfile.vim
|
|
install -p -m 644 components/engine/contrib/syntax/vim/syntax/dockerfile.vim $RPM_BUILD_ROOT/usr/share/vim/vimfiles/syntax/dockerfile.vim
|
|
|
|
# add nano
|
|
install -d $RPM_BUILD_ROOT/usr/share/nano
|
|
install -p -m 644 components/engine/contrib/syntax/nano/Dockerfile.nanorc $RPM_BUILD_ROOT/usr/share/nano/Dockerfile.nanorc
|
|
|
|
# list files owned by the package here
|
|
%files
|
|
%doc components/engine/AUTHORS components/engine/CHANGELOG.md components/engine/CONTRIBUTING.md components/engine/LICENSE components/engine/MAINTAINERS components/engine/NOTICE components/engine/README.md
|
|
/%{_bindir}/docker
|
|
/%{_bindir}/dockerd
|
|
/%{_bindir}/containerd
|
|
/%{_bindir}/docker-proxy
|
|
/%{_bindir}/containerd-shim
|
|
/%{_bindir}/runc
|
|
/%{_sysconfdir}/udev/rules.d/80-docker.rules
|
|
%if 0%{?is_systemd}
|
|
/%{_unitdir}/docker.service
|
|
%else
|
|
/%{_initddir}/docker
|
|
%endif
|
|
/usr/share/bash-completion/completions/docker
|
|
/usr/share/zsh/vendor-completions/_docker
|
|
/usr/share/fish/vendor_completions.d/docker.fish
|
|
%doc
|
|
|
|
%config(noreplace,missingok) /etc/sysconfig/docker
|
|
%config(noreplace,missingok) /etc/sysconfig/docker-storage
|
|
%config(noreplace,missingok) /etc/sysconfig/docker-network
|
|
|
|
/usr/share/vim/vimfiles/doc/dockerfile.txt
|
|
/usr/share/vim/vimfiles/ftdetect/dockerfile.vim
|
|
/usr/share/vim/vimfiles/syntax/dockerfile.vim
|
|
/usr/share/nano/Dockerfile.nanorc
|
|
|
|
%post
|
|
if ! getent group docker > /dev/null; then
|
|
groupadd --system docker
|
|
fi
|
|
%if 0%{?is_systemd}
|
|
#%systemd_post docker
|
|
systemctl enable docker
|
|
systemctl start docker
|
|
%else
|
|
# This adds the proper /etc/rc*.d links for the script
|
|
/sbin/chkconfig --add docker
|
|
%endif
|
|
if ! getent group docker > /dev/null; then
|
|
groupadd --system docker
|
|
fi
|
|
|
|
%preun
|
|
%if 0%{?is_systemd}
|
|
%systemd_preun docker
|
|
%else
|
|
if [ $1 -eq 0 ] ; then
|
|
/sbin/service docker stop >/dev/null 2>&1
|
|
/sbin/chkconfig --del docker
|
|
fi
|
|
%endif
|
|
|
|
%postun
|
|
%if 0%{?is_systemd}
|
|
%systemd_postun_with_restart docker
|
|
%else
|
|
if [ "$1" -ge "1" ] ; then
|
|
/sbin/service docker condrestart >/dev/null 2>&1 || :
|
|
fi
|
|
%endif
|
|
|
|
%changelog
|
|
* Thu Sep 15 2022 chenjiankun <chenjiankun1@huawei.com> - 18.09.0-240
|
|
- Type:bugfix
|
|
- CVE:NA
|
|
- SUG:NA
|
|
- DESC:Add an ExitPid field for State struct to record exit process id
|
|
|
|
* Thu Sep 15 2022 chenjiankun <chenjiankun1@huawei.com> - 18.09.0-239
|
|
- Type:bugfix
|
|
- CVE:NA
|
|
- SUG:NA
|
|
- DESC:fix terminal abnormal after docker run
|
|
|
|
* Thu Jun 28 2022 chenjiankun <chenjiankun1@huawei.com> - 18.09.0-238
|
|
- Type:CVE
|
|
- CVE:CVE-2021-41092
|
|
- SUG:NA
|
|
- DESC:fix CVE-2021-41092
|
|
|
|
* Thu Jun 28 2022 chenjiankun <chenjiankun1@huawei.com> - 18.09.0-237
|
|
- Type:CVE
|
|
- CVE:CVE-2021-41091
|
|
- SUG:NA
|
|
- DESC:fix CVE-2021-41091
|
|
|
|
* Thu Jun 28 2022 chenjiankun <chenjiankun1@huawei.com> - 18.09.0-236
|
|
- Type:CVE
|
|
- CVE:CVE-2021-41089
|
|
- SUG:NA
|
|
- DESC:fix CVE-2021-41089
|
|
|
|
* Thu Jun 28 2022 chenjiankun <chenjiankun1@huawei.com> - 18.09.0-235
|
|
- Type:bugfix
|
|
- CVE:NA
|
|
- SUG:NA
|
|
- DESC:close channel in write side to avoid panic in docker stats
|
|
|
|
* Thu Jun 28 2022 chenjiankun <chenjiankun1@huawei.com> - 18.09.0-234
|
|
- Type:bugfix
|
|
- CVE:NA
|
|
- SUG:NA
|
|
- DESC:fix status inconsistent after restart container
|
|
|
|
* Thu Jun 16 2022 duyiwei <duyiwei@kylinos.cn> - 18.09.0-233
|
|
- Type:bugfix
|
|
- CVE:CVE-2022-24769
|
|
- SUG:NA
|
|
- DESC:fix CVE-2022-24769
|
|
|
|
* Fri Mar 11 2022 chenjiankun<chenjiankun1@huawei.com> - 18.09.0-232
|
|
- Type:bugfix
|
|
- ID:NA
|
|
- SUG:NA
|
|
- DESC:fix "Up 292 years" in status in docker ps -a
|
|
|
|
* Fri Mar 11 2022 chenjiankun<chenjiankun1@huawei.com> - 18.09.0-231
|
|
- Type:bugfix
|
|
- ID:NA
|
|
- SUG:NA
|
|
- DESC:fix "endpoint with name container_xx already exists in network none" error
|
|
|
|
* Fri Mar 11 2022 chenjiankun<chenjiankun1@huawei.com> - 18.09.0-230
|
|
- Type:bugfix
|
|
- ID:NA
|
|
- SUG:NA
|
|
- DESC:fix container exited after docker restart when processEvent hang
|
|
|
|
* Fri Mar 11 2022 chenjiankun<chenjiankun1@huawei.com> - 18.09.0-229
|
|
- Type:bugfix
|
|
- ID:NA
|
|
- SUG:NA
|
|
- DESC:change log level when containerd return "container not found" err
|
|
|
|
* Fri Mar 11 2022 chenjiankun<chenjiankun1@huawei.com> - 18.09.0-228
|
|
- Type:bugfix
|
|
- ID:NA
|
|
- SUG:NA
|
|
- DESC:add log for easy debug in exit event handler
|
|
|
|
* Fri Mar 11 2022 chenjiankun<chenjiankun1@huawei.com> - 18.09.0-227
|
|
- Type:bugfix
|
|
- ID:NA
|
|
- SUG:NA
|
|
- DESC:adding logs for debugging in docker stop
|
|
|
|
* Fri Mar 11 2022 chenjiankun<chenjiankun1@huawei.com> - 18.09.0-226
|
|
- Type:bugfix
|
|
- ID:NA
|
|
- SUG:NA
|
|
- DESC:add info log for pulling image
|
|
|
|
* Wed Mar 10 2022 chenjiankun<chenjiankun1@huawei.com> - 18.09.0-225
|
|
- Type:bugfix
|
|
- ID:NA
|
|
- SUG:NA
|
|
- DESC:do not check result of issueDiscard
|
|
|
|
* Wed Mar 10 2022 chenjiankun<chenjiankun1@huawei.com> - 18.09.0-224
|
|
- Type:bugfix
|
|
- ID:NA
|
|
- SUG:NA
|
|
- DESC:fix bug where failed kills didnt fallback to unix kill
|
|
|
|
* Wed Mar 10 2022 chenjiankun<chenjiankun1@huawei.com> - 18.09.0-223
|
|
- Type:bugfix
|
|
- ID:NA
|
|
- SUG:NA
|
|
- DESC:fix time Ticker leak
|
|
|
|
* Wed Mar 10 2022 chenjiankun<chenjiankun1@huawei.com> - 18.09.0-222
|
|
- Type:bugfix
|
|
- ID:NA
|
|
- SUG:NA
|
|
- DESC:add timeout for IO.Wait
|
|
|
|
* Wed Mar 10 2022 chenjiankun<chenjiankun1@huawei.com> - 18.09.0-221
|
|
- Type:bugfix
|
|
- ID:NA
|
|
- SUG:NA
|
|
- DESC:fix dangling unpigz
|
|
|
|
* Sat Mar 9 2022 chenjiankun<chenjiankun1@huawei.com> - 18.09.0-220
|
|
- Type:bugfix
|
|
- ID:NA
|
|
- SUG:NA
|
|
- DESC:check db file size before start containerd
|
|
|
|
* Sat Mar 9 2022 chenjiankun<chenjiankun1@huawei.com> - 18.09.0-219
|
|
- Type:bugfix
|
|
- ID:NA
|
|
- SUG:NA
|
|
- DESC:fix ProcessEvent block when CloseStreams block
|
|
|
|
* Sat Mar 9 2022 chenjiankun<chenjiankun1@huawei.com> - 18.09.0-218
|
|
- Type:bugfix
|
|
- ID:NA
|
|
- SUG:NA
|
|
- DESC:fix runc data and dm left when periodically kill containerd
|
|
|
|
* Sat Mar 9 2022 chenjiankun<chenjiankun1@huawei.com> - 18.09.0-217
|
|
- Type:bugfix
|
|
- ID:NA
|
|
- SUG:NA
|
|
- DESC:fix race condition in cmdStream
|
|
|
|
* Sat Mar 9 2022 chenjiankun<chenjiankun1@huawei.com> - 18.09.0-216
|
|
- Type:bugfix
|
|
- ID:NA
|
|
- SUG:NA
|
|
- DESC:Unexport testcase.Cleanup to fix Go 1.14
|
|
|
|
* Tue Mar 8 2022 chenjiankun<chenjiankun1@huawei.com> - 18.09.0-215
|
|
- Type:bugfix
|
|
- ID:NA
|
|
- SUG:NA
|
|
- DESC:Don't fail on two concurrent reference.store.AddDigest calls
|
|
|
|
* Tue Mar 8 2022 chenjiankun<chenjiankun1@huawei.com> - 18.09.0-214
|
|
- Type:bugfix
|
|
- ID:NA
|
|
- SUG:NA
|
|
- DESC:Fix for lack of synchronization in daemon/update.go
|
|
|
|
* Tue Mar 8 2022 chenjiankun<chenjiankun1@huawei.com> - 18.09.0-213
|
|
- Type:bugfix
|
|
- ID:NA
|
|
- SUG:NA
|
|
- DESC:rollback if docker restart when doing BlkDiscard
|
|
|
|
* Tue Mar 8 2022 chenjiankun<chenjiankun1@huawei.com> - 18.09.0-212
|
|
- Type:bugfix
|
|
- ID:NA
|
|
- SUG:NA
|
|
- DESC:use info level for create stop command
|
|
|
|
* Mon Mar 7 2022 chenjiankun<chenjiankun1@huawei.com> - 18.09.0-211
|
|
- Type:bugfix
|
|
- ID:NA
|
|
- SUG:NA
|
|
- DESC:fix unittest case error
|
|
|
|
* Mon Mar 7 2022 chenjiankun<chenjiankun1@huawei.com> - 18.09.0-210
|
|
- Type:bugfix
|
|
- ID:NA
|
|
- SUG:NA
|
|
- DESC:fix docker kill command block
|
|
|
|
* Thu Mar 4 2022 chenjiankun<chenjiankun1@huawei.com> - 18.09.0-209
|
|
- Type:bugfix
|
|
- ID:NA
|
|
- SUG:NA
|
|
- DESC:fix hijack hang
|
|
|
|
* Thu Mar 3 2022 chenjiankun<chenjiankun1@huawei.com> - 18.09.0-208
|
|
- Type:bugfix
|
|
- ID:NA
|
|
- SUG:NA
|
|
- DESC:fix container status not consistent with its shim process status
|
|
|
|
* Thu Mar 3 2022 chenjiankun<chenjiankun1@huawei.com> - 18.09.0-207
|
|
- Type:bugfix
|
|
- ID:NA
|
|
- SUG:NA
|
|
- DESC:sync from internal
|
|
|
|
* Tue Oct 12 2021 xiadanni<xiadanni1@huawei.com> - 18.09.0-206
|
|
- Type:bugfix
|
|
- ID:NA
|
|
- SUG:NA
|
|
- DESC:update seccomp whitelist to Linux 5.10 syscall list
|
|
|
|
* Tue Sep 14 2021 xiadanni<xiadanni1@huawei.com> - 18.09.0-205
|
|
- Type:bugfix
|
|
- ID:NA
|
|
- SUG:NA
|
|
- DESC:bump version again for runc fix systemd cgroup
|
|
|
|
* Mon Aug 09 2021 xiadanni<xiadanni1@huawei.com> - 18.09.0-204
|
|
- Type:bugfix
|
|
- ID:NA
|
|
- SUG:NA
|
|
- DESC:runc fix systemd cgroup after memory type changed
|
|
|
|
* Thu May 6 2021 chenjiankun<chenjiankun1@huawei.com> - 18.09.0-203
|
|
- Type:bugfix
|
|
- ID:NA
|
|
- SUG:NA
|
|
- DESC:remove go-md2man build require
|
|
|
|
* Thu Mar 18 2021 xiadanni<xiadanni1@huawei.com> - 18.09.0-202
|
|
- Type:bugfix
|
|
- ID:NA
|
|
- SUG:NA
|
|
- DESC:prevent an invalid image from crashing docker daemon(CVE-2021-21285)
|
|
|
|
* Wed Feb 24 2021 xiadanni<xiadanni1@huawei.com> - 18.09.0-201
|
|
- Type:bugfix
|
|
- ID:NA
|
|
- SUG:NA
|
|
- DESC:Fix Access to remapped root allows privilege escalation to real root (CVE-2021-21284)
|
|
|
|
* Wed Feb 9 2021 xiadanni<xiadanni1@huawei.com> - 18.09.0-200
|
|
- Type:bugfix
|
|
- ID:NA
|
|
- SUG:NA
|
|
- DESC:sync bugfix and bump version to 200, bugfix include
|
|
1. fix execCommands leak in health-check.
|
|
2. check containerd pid before kill it.
|
|
|
|
* Mon Jan 18 2021 jingrui<jingrui@huawei.com> - 18.09.0-105
|
|
- Type:bugfix
|
|
- ID:NA
|
|
- SUG:NA
|
|
- DESC:sync bugfix include
|
|
1. fix image cleanup failed.
|
|
2. cleanup load tmp files.
|
|
3. kill residual container process.
|
|
4. resume suspend dm device.
|
|
5. dont kill containerd during dockerd starting.
|
|
6. handle exit event for restore failed container.
|
|
7. wait io with timeout when start failed.
|
|
8. support hostname mirror registry.
|
|
9. mask unused proc files.
|
|
|
|
* Tue Dec 8 2020 xiadanni<xiadanni1@huawei.com> - 18.09.0-104
|
|
- Type:bugfix
|
|
- ID:NA
|
|
- SUG:NA
|
|
- DESC:runc don't deny all devices when update cgroup resource
|
|
|
|
* Thu Dec 3 2020 xiadanni<xiadanni1@huawei.com> - 18.09.0-103
|
|
- Type:bugfix
|
|
- ID:NA
|
|
- SUG:restart
|
|
- DESC:containerd fix CVE-2020-15257
|
|
|
|
* Fri Nov 27 2020 liuzekun<liuzekun@huawei.com> - 18.09.0-102
|
|
- Type:bugfix
|
|
- ID:NA
|
|
- CVE:NA
|
|
- SUG:restart
|
|
- DESC:
|
|
1.delete stale containerd object on start failure
|
|
2.remove redundant word item
|
|
3.delete event is not need to process
|
|
4.stat process exit file when kill process dire
|
|
5.sync cli vendor
|
|
6.fix CVE-2020-13401
|
|
7.do not add w to LDFLAGS
|
|
8.add files in proc for mask
|
|
9.fix docker load files leak
|
|
10.do not sync if BYPAAS_SYNC is false
|
|
11.fix panic on single character volumes
|
|
12.fix stats memory usage display error
|
|
13.add more messages for ops when device not found
|
|
14.mask proc pin_memory
|