On Tue, Nov 12, 2019 at 11:26:14AM -0800, M Holmes wrote:

Unfortunately, I'm not qualified enough to undertake such a task. Sorry.

No worries. OBS is on our agenda yes, as that'll make it easier to ship for vanilla Debian too, but we're fighting some other fires so it's gonna take longer unless maybe we get additional community support.

Meanwhile, I hope to have 19.10 enabled on the PPA by early next week.

-- Lokesh IRC, GitHub: lsm5 GPG: 0xC7C3A0DD https://keybase.io/lsm5

@MycroftHolmes1989 in case you have experience with OBS, would you be willing to help out?

On Tue, Nov 12, 2019 at 09:40:05AM -0800, M Holmes wrote:

While you guys are at it, would you kindly consider adding it to OpenSUSE Build Services? It would be an easy way to target multiple distros and support latest releases,. For example, the official PPA does not have support for Ubunt 19.10 yet. Those problems would probably be easier to handle if you just add the project to OBS.

Ubuntu 19.10 on PPA is currently wip. I did ping the obs people for help but no response yet. /cc @vrothberg.

-- Lokesh IRC, GitHub: lsm5 GPG: 0xC7C3A0DD https://keybase.io/lsm5

hmm, seems like 1.14.11 never got built. Building it now...

Where do we stand here?

err not yet, I'll try to get this in soon as I can find the time, I really don't want to bundle it though if it has its own versions.

/assign @baude

/assing @baude

podman in Fedora gets seccomp.json from containers-common while the one in Ubuntu PPA gets seccomp.json from containers-golang.

This change will let me use install.config target unmodified in downstream packages.

Signed-off-by: Lokesh Mandvekar [email protected]

Note, that crio requires socat as well - see https://github.com/cri-o/cri-o/blob/55ccb1e9bd8508ced18198444a56fd51daa76611/internal/oci/runtime_oci.go#L809 and https://github.com/cri-o/cri-o/blob/5779b74e9e4ca11487b9c823bd4dc0dc183c65d6/contrib/test/integration/system-packages.yml#L117. Fedora spec is about to be updated by @lsm5

Hopefully these should be handled by: https://bodhi.fedoraproject.org/updates/FEDORA-MODULAR-2019-1c7afa1aa5 https://bodhi.fedoraproject.org/updates/FEDORA-MODULAR-2019-94a453d89b

autobuilding yes, but afaict, it's broken atm, will take a look asap.

ack, noted.

/retest

@dougbtv should this be rhel-8-golang-1.12?

I'd love to see this included, but I can't invest any time myself atm :( . @abitrolly any chance you'd be interested? :crossed_fingers: :) ?

If not, @TomSweeneyRedHat @baude @mheon @rhatdan we should reach out to the community.

Dockerfile template from Doug Smith [email protected]

Signed-off-by: Lokesh Mandvekar [email protected]

@dougbtv @mrunalp PTAL.

I see this got merged, so I'm gonna close it.

I honestly wish I knew what the holdup is. For some reason, the mirroring isn't working and their are no publicly available logs for me to troubleshoot, so I'm left pestering people on IRC to look into it. @lsm5, is there anything you can do to help get this unstuck?

Don't have anything apart from the nag them until they respond approach.

done

sure, that sounds much better, I'll revise..

is the make build output I posted in description wrong?

that gets handled in the other file that I changed, or am I reading it wrong?

handle CGO conditional in Makefile itself and not in Dockerfile.rhel

Signed-off-by: Lokesh Mandvekar [email protected]

@dougbtv @squeed PTAL

$ make build
github.com/openshift/sdn/cmd/network-controller
CGO_ENABLED=1 go build -ldflags "-s -w -X github.com/openshift/sdn/pkg/version.versionFromGit="v0.0.0-alpha.0-79-ge5920be" -X github.com/openshift/sdn/pkg/version.commitFromGit="e5920bee" -X github.com/openshift/sdn/pkg/version.gitTreeState="clean" -X github.com/openshift/sdn/pkg/version.buildDate="2019-11-01T19:53:41Z" " github.com/openshift/sdn/cmd/network-controller
github.com/openshift/sdn/cmd/openshift-sdn
CGO_ENABLED=1 go build -ldflags "-s -w -X github.com/openshift/sdn/pkg/version.versionFromGit="v0.0.0-alpha.0-79-ge5920be" -X github.com/openshift/sdn/pkg/version.commitFromGit="e5920bee" -X github.com/openshift/sdn/pkg/version.gitTreeState="clean" -X github.com/openshift/sdn/pkg/version.buildDate="2019-11-01T19:53:41Z" " github.com/openshift/sdn/cmd/openshift-sdn
github.com/openshift/sdn/cmd/sdn-cni-plugin
CGO_ENABLED=0 go build -tags no_openssl -ldflags "-s -w -X github.com/openshift/sdn/pkg/version.versionFromGit="v0.0.0-alpha.0-79-ge5920be" -X github.com/openshift/sdn/pkg/version.commitFromGit="e5920bee" -X github.com/openshift/sdn/pkg/version.gitTreeState="clean" -X github.com/openshift/sdn/pkg/version.buildDate="2019-11-01T19:53:41Z" " github.com/openshift/sdn/cmd/sdn-cni-plugin
github.com/openshift/sdn/vendor/k8s.io/kubernetes/cmd/kube-proxy
CGO_ENABLED=1 go build -ldflags "-s -w -X github.com/openshift/sdn/pkg/version.versionFromGit="v0.0.0-alpha.0-79-ge5920be" -X github.com/openshift/sdn/pkg/version.commitFromGit="e5920bee" -X github.com/openshift/sdn/pkg/version.gitTreeState="clean" -X github.com/openshift/sdn/pkg/version.buildDate="2019-11-01T19:53:41Z" " github.com/openshift/sdn/vendor/k8s.io/kubernetes/cmd/kube-proxy

@lsm5 Any update on this?

Not yet, but hopefully once other distractions are outta the way ..

Dockerfile template from Doug Smith [email protected]

Signed-off-by: Lokesh Mandvekar [email protected]

@dougbtv @mrunalp PTAL

/retest

/retest

@jupierce @dougbtv @squeed PR updated to use new images, PTAL..

On Wed, Oct 30, 2019 at 01:48:23AM -0700, Valentin Rothberg wrote:

@shaicoleman @lsm5, what's the latest state on this work?

WIP, but nothing landed yet, but hopefully soon..

On Wed, Oct 30, 2019 at 01:55:38AM -0700, Valentin Rothberg wrote:

@lsm5 is the issue fixed in the meantime?

Not yet :(

These plugins don't use any crypto so this change disables openssl path completely for all plugins.

Obsoletes: pr#22

Signed-off-by: Lokesh Mandvekar [email protected]

Signed-off-by: Lokesh Mandvekar [email protected]

@squeed @dougbtv PTAL.

I guess there'll be another PR for multiple userspace rhel once the images are ready.

Just making sure we all note this comment before proceeding with this review.

This reverts commit 37442dc73084b80a1bac806b7849298baee4ff64. Dynamically link glibc and build with no_openssl for all plugins.

Signed-off-by: Lokesh Mandvekar [email protected]

• build loopback with no_openssl tag for FIPS compliance
• build with CGO_ENABLED=1 to avoid static linking in glibc

Signed-off-by: Lokesh Mandvekar [email protected]

(backport https://github.com/openshift/containernetworking-plugins/pull/18 to release-4.3) @dougbtv PTAL

ummm, so we should build all with no_openssl, right @mrunalp ?

So, IIUC, @jupierce and @sosiouxme will give us a rhel8 image which will have golang installed already. I'll revise this PR once that's done.

@dougbtv fwiw, on fedora /etc/os-release is a symlink to /usr/lib/os-release but on rhel8 and rhel7, they don't seem to be symlinks, atleast on my envs, but anyway uname -r looks great.

[@mrunalp, @squeed please correct me if I'm wrong below..]

We need this so that plugins can be built without for rhel7 and rhel8 without static linking in glibc of a particular rhel version and then the right version of the binaries can be installed by detecting the host's rhel version.

Dockerfile template from Doug Smith [email protected]

Signed-off-by: Lokesh Mandvekar [email protected]

@dougbtv @mrunalp PTAL.

/retest

• build loopback with no_openssl tag for FIPS compliance
• build with CGO_ENABLED=1 to avoid static linking in glibc

Signed-off-by: Lokesh Mandvekar [email protected]

(backport https://github.com/openshift/containernetworking-plugins/pull/18 to release-4.3) @dougbtv PTAL

Signed-off-by: Lokesh Mandvekar [email protected]

@haircommander @umohnani8 @mrunalp

RE: rhbz#1725832

Signed-off-by: Lokesh Mandvekar [email protected]

@mrunalp @dougbtv PTAL

Signed-off-by: Lokesh Mandvekar [email protected]

@umohnani8 @haircommander PTAL

fedora bugzilla at https://bugzilla.redhat.com/show_bug.cgi?id=1754170

Fixed https://cbs.centos.org/koji/taskinfo?taskID=995170

With the current libseccomp, we see: undefined symbol: seccomp_api_get.

Updating libseccomp to 2.4.1 resolves this issue.

Signed-off-by: Lokesh Mandvekar [email protected]

@umohnani8 PTAL

New build happening at https://cbs.centos.org/koji/taskinfo?taskID=995101 which should take care of the dependency issue.

<!-- If you are reporting a new issue, make sure that we do not have any duplicates already open. You can ensure this by searching the issue list for this repository. If there is a duplicate, please close your issue and add a comment to the existing issue instead.

If you suspect your issue is a bug, please edit your issue description to include the BUG REPORT INFORMATION shown below. If you fail to provide this information within 7 days, we cannot debug your issue and will close it. We will, however, reopen it if you later provide the information.

BUG REPORT INFORMATION

Use the commands below to provide key information from your environment: You do NOT have to include this information if this is a FEATURE REQUEST -->

Description

<!-- Briefly describe the problem you are having in a few paragraphs. -->

Steps to reproduce the issue:

1. Download rpm from https://download-ib01.fedoraproject.org/pub/fedora/linux/updates/30/Everything/x86_64/Packages/b/buildah-1.11.3-2.fc30.x86_64.rpm
2. Install buildah using yum

yum -y --enablerepo=epel install buildah.rpm
Loaded plugins: fastestmirror, ovl
Examining buildah.rpm: buildah-1.11.3-2.fc30.x86_64
Marking buildah.rpm as an update to buildah-1.11.2-2.git0bafbfe.fc30.x86_64
Resolving Dependencies
--> Running transaction check
---> Package buildah.x86_64 0:1.11.2-2.git0bafbfe.fc30 will be updated
---> Package buildah.x86_64 0:1.11.3-2.fc30 will be an update
--> Finished Dependency Resolution

Dependencies Resolved

==============================================================================================================================================================================================================================================
 Package                                                 Arch                                                   Version                                                        Repository                                                Size
==============================================================================================================================================================================================================================================
Updating:
 buildah                                                 x86_64                                                 1.11.3-2.fc30                                                  /buildah                                                  36 M

Transaction Summary
==============================================================================================================================================================================================================================================
Upgrade  1 Package

Total size: 36 M
Downloading packages:
Running transaction check
Running transaction test
Transaction test succeeded
Running transaction
  Updating   : buildah-1.11.3-2.fc30.x86_64                                                                                                                                                                                               1/2 
  Cleanup    : buildah-1.11.2-2.git0bafbfe.fc30.x86_64                                                                                                                                                                                    2/2 
  Verifying  : buildah-1.11.3-2.fc30.x86_64                                                                                                                                                                                               1/2 
  Verifying  : buildah-1.11.2-2.git0bafbfe.fc30.x86_64                                                                                                                                                                                    2/2 

Updated:
  buildah.x86_64 0:1.11.3-2.fc30                                                                                                                                                                                                              

Complete!

Describe the results you received:

[root@93fe8a5692a4 bin]# pwd 
/usr/bin
[root@93fe8a5692a4 bin]# ls -la buildah
-rwxr-xr-x 1 root root 37519624 Oct  4 18:20 buildah
[root@93fe8a5692a4 bin]# buildah version 
buildah: symbol lookup error: buildah: undefined symbol: seccomp_api_set

Describe the results you expected: Something like

buildah version
Version:         1.11.2
Go Version:      go1.12.9
Image Spec:      1.0.1
Runtime Spec:    1.0.1-dev
CNI Spec:        0.4.0
libcni Version:  
Git Commit:      
Built:           Thu Jan  1 00:00:00 1970
OS/Arch:         linux/amd64

Output of rpm -q buildah or apt list buildah:

rpm -q buildah
buildah-1.11.3-2.fc30.x86_64

Output of buildah version:

N/A, see above

Output of podman version if reporting a podman build issue:

(paste your output here)

Output of cat /etc/*release:

[root@codewind-workspaceemry865xg0d6rhrp-66cff68799-5c5zq bin]# cat /etc/*release
CentOS Linux release 7.6.1810 (Core) 
NAME="CentOS Linux"
VERSION="7 (Core)"
ID="centos"
ID_LIKE="rhel fedora"
VERSION_ID="7"
PRETTY_NAME="CentOS Linux 7 (Core)"
ANSI_COLOR="0;31"
CPE_NAME="cpe:/o:centos:centos:7"
HOME_URL="https://www.centos.org/"
BUG_REPORT_URL="https://bugs.centos.org/"

CENTOS_MANTISBT_PROJECT="CentOS-7"
CENTOS_MANTISBT_PROJECT_VERSION="7"
REDHAT_SUPPORT_PRODUCT="centos"
REDHAT_SUPPORT_PRODUCT_VERSION="7"

CentOS Linux release 7.6.1810 (Core) 
CentOS Linux release 7.6.1810 (Core) 

Output of uname -a:

uname -a
Linux codewind-workspaceemry865xg0d6rhrp-66cff68799-5c5zq 3.10.0-957.12.1.el7.x86_64 #1 SMP Wed Mar 20 11:34:37 UTC 2019 x86_64 x86_64 x86_64 GNU/Linux

Output of cat /etc/containers/storage.conf:

(paste your output here)

updated dependency in buildah spec file. Closing...

@maysunfaisal hmm, can you try installing libseccomp rpm from https://cbs.centos.org/koji/buildinfo?buildID=26448 and retry this? If it works, I'll update the minimum seccomp dependency in the rpm

@maysunfaisal try the centos SIG build instead. https://cbs.centos.org/koji/buildinfo?buildID=26863

@Davio yes, it will, but some rebase issues in autobuilder. Handling it now..

@TomSweeneyRedHat could you please give me access to assign issues to myself and set labels?

Thanks.

I'm just wondering about the general strategy related to podman to RHEL/CentOS 8 family.

CentOS Stream is coming. That should take care of this AFAICT.

@umohnani8 ya, just change fishs to fish and you should be good to go.

ummmm .. btw, el7 package install on el8 isn't supported, so even after conmon is built and available, it may not work, and there's not much I'll be able to do about it. Just FYI.

I'll build conmon for centos.

On Mon, Oct 14, 2019 at 04:58:25AM -0700, matihost wrote:

It would be nice if cbs.centos.org builds build also for CentOS8 (aka el8 arch) CentOS 8 is shipped with pretty alpha 1.0.0-5 podman release.

Trying to install podman-1.6.1-2.el7.x86_64 on CentOS 8 (risky thou) ends with:

 Problem: conflicting requests
  - nothing provides conmon needed by podman-1.6.1-2.el7.x86_64
  - nothing provides containernetworking-plugins >= 0.7.5-1 needed by podman-1.6.1-2.el7.x86_64
  - nothing provides podman-manpages = 1.6.1-2.el7 needed by podman-1.6.1-2.el7.x86_64
  - nothing provides runc >= 1.0.0-57 needed by podman-1.6.1-2.el7.x86_64
  - nothing provides slirp4netns >= 0.3.0-2 needed by podman-1.6.1-2.el7.x86_64
(try to add '--skip-broken' to skip uninstallable packages or '--nobest' to use not only best candidate packages)

There is no conmon package on cbs.centos.org at all.

-- You are receiving this because you were mentioned. Reply to this email directly or view it on GitHub: https://github.com/containers/libpod/issues/3835#issuecomment-541634424

-- Lokesh IRC, GitHub: lsm5 GPG: 0xC7C3A0DD https://keybase.io/lsm5