Changelog for docker-kubic-20.10.5_ce-3.1.x86_64.rpm :

* Mon Apr 12 2021 Michał Rostecki - Backport of https://github.com/moby/moby/pull/42273
* Wed Mar 03 2021 Aleksa Sarai - Update to Docker 20.10.5-ce. See upstream changelog in the packaged /usr/share/doc/packages/docker/CHANGELOG.md. bsc#1182947- Update runc dependency to 1.0.0~rc93.- Remove upstreamed patches: - cli-0001-Rename-bin-md2man-to-bin-go-md2man.patch- Rebase patches:
* 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
* 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
* 0003-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
* 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch- Switch version to use -ce suffix rather than _ce to avoid confusing other tools. boo#1182476
* Sun Feb 14 2021 Aleksa Sarai [NOTE: This update was only ever released in SLES and Leap.]- It turns out the boo#1178801 libnetwork patch is also broken on Leap, so drop the patch entirely. bsc#1180401 bsc#1182168 - boo1178801-0001-Add-docker-interfaces-to-firewalld-docker-zone.patch
* Wed Feb 10 2021 Aleksa Sarai - Fix incorrect cast in SUSE secrets patches causing warnings on SLES.
* 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
* Sat Feb 06 2021 Aleksa Sarai [NOTE: This update was only ever released in SLES and Leap.]- Update Docker to 19.03.15-ce. See upstream changelog in the packaged /usr/share/doc/packages/docker/CHANGELOG.md. This update includes fixes for bsc#1181732 (CVE-2021-21284) and bsc#1181730 (CVE-2021-21285).- Rebase patches:
* bsc1073877-0001-apparmor-clobber-docker-default-profile-on-start.patch- Only apply the boo#1178801 libnetwork patch to handle firewalld on openSUSE. It appears that SLES doesn\'t like the patch. bsc#1180401
* Tue Feb 02 2021 Aleksa Sarai - Update to Docker 20.10.3-ce. See upstream changelog in the packaged /usr/share/doc/packages/docker/CHANGELOG.md. Fixes bsc#1181732 (CVE-2021-21284) and bsc#1181730 (CVE-2021-21285).- Rebase patches on top of 20.10.3-ce. - 0002-SECRETS-daemon-allow-directory-creation-in-run-secre.patch + 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch - 0003-SECRETS-SUSE-implement-SUSE-container-secrets.patch + 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch - 0004-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch + 0003-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch - 0005-bsc1073877-apparmor-clobber-docker-default-profile-o.patch + 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
* Tue Feb 02 2021 Aleksa Sarai - Drop docker-runc, docker-test and docker-libnetwork packages. We now just use the upstream runc package (it\'s stable enough and Docker no longer pins git versions). docker-libnetwork is so unstable that it doesn\'t have any versioning scheme and so it really doesn\'t make sense to maintain the project as a separate package. bsc#1181641 bsc#1181677- Remove no-longer-needed patch for packaging now that we\'ve dropped docker-runc and docker-libnetwork. - 0001-PACKAGING-revert-Remove-docker-prefix-for-containerd.patch
* Fri Jan 29 2021 Aleksa Sarai - Update to Docker 20.10.2-ce. See upstream changelog in the packaged /usr/share/doc/packages/docker/CHANGELOG.md. bsc#1181594- Remove upstreamed patches: - bsc1122469-0001-apparmor-allow-readby-and-tracedby.patch - boo1178801-0001-Add-docker-interfaces-to-firewalld-docker-zone.patch- Add patches to fix build: + cli-0001-Rename-bin-md2man-to-bin-go-md2man.patch- Since upstream has changed their source repo (again) we have to rebase all of our patches. While doing this, I\'ve collapsed all patches into one branch per-release and thus all the patches are now just one series: - packaging-0001-revert-Remove-docker-prefix-for-containerd-and-runc-.patch + 0001-PACKAGING-revert-Remove-docker-prefix-for-containerd.patch - secrets-0001-daemon-allow-directory-creation-in-run-secrets.patch + 0002-SECRETS-daemon-allow-directory-creation-in-run-secre.patch - secrets-0002-SUSE-implement-SUSE-container-secrets.patch + 0003-SECRETS-SUSE-implement-SUSE-container-secrets.patch - private-registry-0001-Add-private-registry-mirror-support.patch + 0004-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch - bsc1073877-0001-apparmor-clobber-docker-default-profile-on-start.patch + 0005-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
* Fri Jan 29 2021 Aleksa Sarai - Re-apply secrets fix for bsc#1065609 which appears to have been lost after it was fixed.
* secrets-0001-daemon-allow-directory-creation-in-run-secrets.patch
* secrets-0002-SUSE-implement-SUSE-container-secrets.patch
* Wed Dec 23 2020 Aleksa Sarai - Add Conflicts and Provides for kubic flavour of docker-fish-completion.
* Mon Dec 21 2020 Aleksa Sarai - Update to Docker 19.03.14-ce. See upstream changelog in the packaged /usr/share/doc/packages/docker/CHANGELOG.md. CVE-2020-15257 bsc#1180243 https://github.com/docker/docker-ce/releases/tag/v19.03.14
* Mon Dec 14 2020 Robert Munteanu - Enable fish-completion
* Thu Nov 12 2020 Michał Rostecki - Add a patch which makes Docker compatible with firewalld with nftables backend. Backport of https://github.com/moby/libnetwork/pull/2548 (boo#1178801, SLE-16460)
* boo1178801-0001-Add-docker-interfaces-to-firewalld-docker-zone.patch
* Fri Sep 18 2020 Aleksa Sarai - Update to Docker 19.03.13-ce. See upstream changelog in the packaged /usr/share/doc/packages/docker/CHANGELOG.md. bsc#1176708
* Mon Aug 03 2020 Callum Farmer - Fixes for %_libexecdir changing to /usr/libexec (bsc#1174075)
* Tue Jun 30 2020 Dominique Leuenberger - Emergency fix: %requires_eq does not work with provide symbols, only effective package names. Convert back to regular Requires.
* Thu Jun 25 2020 Aleksa Sarai - Update to Docker 19.03.12-ce. See upstream changelog in the packaged /usr/share/doc/packages/docker/CHANGELOG.md.- Use Go 1.13 instead of Go 1.14 because Go 1.14 can cause all sorts of spurrious errors due to Go returning -EINTR from I/O syscalls much more often (due to Go 1.14\'s pre-emptive goroutine support). - bsc1172377-0001-unexport-testcase.Cleanup-to-fix-Go-1.14.patch- Add BuildRequires for all -git dependencies so that we catch missing dependencies much more quickly.
* Tue Jun 02 2020 Aleksa Sarai - Update to Docker 19.03.11-ce. See upstream changelog in the packaged /usr/share/doc/packages/docker/CHANGELOG.md. bsc#1172377 CVE-2020-13401- Backport https://github.com/gotestyourself/gotest.tools/pull/169 so that we can build Docker with Go 1.14 (upstream uses Go 1.13). + bsc1172377-0001-unexport-testcase.Cleanup-to-fix-Go-1.14.patch
* Thu Dec 19 2019 Dominique Leuenberger - BuildRequire pkgconfig(libsystemd) instead of systemd-devel: Allow OBS to shortcut through the -mini flavors.
* Thu Dec 12 2019 Aleksa Sarai - Add backport of https://github.com/docker/docker/pull/39121. bsc#1122469 + bsc1122469-0001-apparmor-allow-readby-and-tracedby.patch
* Wed Dec 11 2019 Aleksa Sarai - Support older SLE systems which don\'t have \"usermod -w -v\".
* Mon Nov 18 2019 Aleksa Sarai - Update to Docker 19.03.5-ce. See upstream changelog in the packaged /usr/share/doc/packages/docker/CHANGELOG.md. bsc#1158590 bsc#1157330
* Sat Oct 19 2019 Aleksa Sarai - Update to Docker 19.03.4-ce. See upstream changelog in the packaged /usr/share/doc/packages/docker/CHANGELOG.md.
* Tue Oct 08 2019 Aleksa Sarai - Drop containerd.service workaround (we\'ve released enough versions without containerd.service -- there\'s no need to support package upgrades that old).- Update to Docker 19.03.3-ce. See upstream changelog in the packaged /usr/share/doc/packages/docker/CHANGELOG.md. bsc#1153367
* Tue Oct 01 2019 Aleksa Sarai - Update to Docker 19.03.2-ce. See upstream changelog in the packaged /usr/share/doc/packages/docker/CHANGELOG.md. bsc#1150397
* Sun Sep 22 2019 Chris Coutinho - Fix zsh-completion (docker -> _docker)
* Tue Jul 30 2019 Aleksa Sarai - Fix default installation such that --userns-remap=default works properly (this appears to be an upstream regression, where --userns-remap=default doesn\'t auto-create the group and results in an error on-start). boo#1143349
* Fri Jul 26 2019 Aleksa Sarai - Update to Docker 19.03.1-ce. See upstream changelog in the packaged /usr/share/doc/packages/docker/CHANGELOG.md. CVE-2019-14271
* Mon Jul 22 2019 Aleksa Sarai - Update to Docker 19.03.0-ce. See upstream changelog in the packaged /usr/share/doc/packages/docker/CHANGELOG.md. bsc#1142413- Remove upstreamed patches: - bsc1001161-0001-oci-include-the-domainname-in-kernel.domainname.patch - bsc1001161-0002-cli-add-a-separate-domainname-flag.patch - bsc1047218-0001-man-obey-SOURCE_DATE_EPOCH-when-generating-man-pages.patch - bsc1128746-0001-integration-cli-don-t-build-test-images-if-they-alre.patch- Rebase pacthes:
* bsc1073877-0001-apparmor-clobber-docker-default-profile-on-start.patch
* packaging-0001-revert-Remove-docker-prefix-for-containerd-and-runc-.patch
* private-registry-0001-Add-private-registry-mirror-support.patch
* secrets-0001-daemon-allow-directory-creation-in-run-secrets.patch
* secrets-0002-SUSE-implement-SUSE-container-secrets.patch
* Wed Jul 17 2019 Aleksa Sarai - Move bash-completion to correct location.- Update to Docker 18.09.8-ce. See upstream changelog in the packaged /usr/share/doc/packages/docker/CHANGELOG.md.
* Includes fixes for CVE-2019-13509 bsc#1142160.
* Fri Jun 28 2019 Aleksa Sarai - Update to Docker 18.09.7-ce. See upstream changelog in the packaged /usr/share/doc/packages/docker/CHANGELOG.md. bsc#1139649- Remove upstreamed patches: - CVE-2018-15664.patch
* Thu Jun 27 2019 Aleksa Sarai - Use %config(noreplace) for /etc/docker/daemon.json. bsc#1138920
* Fri Jun 07 2019 Aleksa Sarai - Add patch for CVE-2018-15664. bsc#1096726 + CVE-2018-15664.patch
* Mon May 06 2019 Aleksa Sarai - Update to Docker 18.09.6-ce see upstream changelog in the packaged /usr/share/doc/packages/docker/CHANGELOG.md.- Rebase patches:
* bsc1128746-0001-integration-cli-don-t-build-test-images-if-they-alre.patch
* Fri May 03 2019 Aleksa Sarai - Update to Docker 18.09.5-ce see upstream changelog in the packaged /usr/share/doc/packages/docker/CHANGELOG.md. bsc#1128376 boo#1134068- Rebase patches:
* bsc1001161-0001-oci-include-the-domainname-in-kernel.domainname.patch
* bsc1001161-0002-cli-add-a-separate-domainname-flag.patch
* bsc1047218-0001-man-obey-SOURCE_DATE_EPOCH-when-generating-man-pages.patch
* bsc1128746-0001-integration-cli-don-t-build-test-images-if-they-alre.patch
* packaging-0001-revert-Remove-docker-prefix-for-containerd-and-runc-.patch
* private-registry-0001-Add-private-registry-mirror-support.patch
* secrets-0001-daemon-allow-directory-creation-in-run-secrets.patch
* secrets-0002-SUSE-implement-SUSE-container-secrets.patch- Updated patch name: + bsc1073877-0001-apparmor-clobber-docker-default-profile-on-start.patch - bsc1073877-0002-apparmor-clobber-docker-default-profile-on-start.patch
* Fri Mar 22 2019 Sascha Grunert - Update to Docker 18.09.3-ce. See upstream changelog in the packaged /usr/share/doc/packages/docker/CHANGELOG.md.
* Sun Mar 10 2019 Aleksa Sarai - docker-test: improvements to test packaging (we don\'t need to ship around the entire source tree, and we also need to build the born-again integration/ tests which contain a suite-per-directory). We also need a new patch which fixes the handling of
*-test images. bsc#1128746 + bsc1128746-0001-integration-cli-don-t-build-test-images-if-they-alre.patch
* Tue Feb 26 2019 Michal Jura - Move daemon.json file to /etc/docker directory, bsc#1114832
* Sat Feb 09 2019 Aleksa Sarai - Update shell completion to use Group: System/Shells.
* Wed Feb 06 2019 Michal Jura - Add daemon.json file with rotation logs cofiguration, bsc#1114832
* Tue Feb 05 2019 Aleksa Sarai - Update to Docker 18.09.1-ce. See upstream changelog in the packaged /usr/share/doc/packages/docker/CHANGELOG.md. bsc#1124308
* Includes fix for CVE-2018-10892 bsc#1100331.
* Includes fix for CVE-2018-20699 bsc#1121768.- Remove upstreamed patches. - bsc1073877-0001-apparmor-allow-receiving-of-signals-from-docker-kill.patch
* Fri Jan 11 2019 Sascha Grunert - Disable leap based builds for kubic flavor. bsc#1121412
* Wed Dec 19 2018 cleeAATTsuse.com- Update go requirements to >= go1.10.6 to fix
* bsc#1118897 CVE-2018-16873 go#29230 cmd/go: remote command execution during \"go get -u\"
* bsc#1118898 CVE-2018-16874 go#29231 cmd/go: directory traversal in \"go get\" via curly braces in import paths
* bsc#1118899 CVE-2018-16875 go#29233 crypto/x509: CPU denial of service
* Tue Dec 18 2018 Aleksa Sarai - Handle build breakage due to missing \'export GOPATH\' (caused by resolution of boo#1119634). I believe Docker is one of the only packages with this problem.
* Mon Dec 03 2018 Aleksa Sarai - Add backports of https://github.com/docker/docker/pull/37302 and https://github.com/docker/cli/pull/1130, which allow for users to explicitly specify the NIS domainname of a container. bsc#1001161 + bsc1001161-0001-oci-include-the-domainname-in-kernel.domainname.patch + bsc1001161-0002-cli-add-a-separate-domainname-flag.patch
* Thu Nov 29 2018 Aleksa Sarai - Update docker.service to match upstream and avoid rlimit problems. bsc#1112980- Upgrade to Docker 18.09.0-ce. See upstream changelog in the packaged /usr/share/doc/packages/docker/CHANGELOG.md. boo#1115464 bsc#1118990- Add revert of an upstream patch to fix docker-
* handling. + packaging-0001-revert-Remove-docker-prefix-for-containerd-and-runc-.patch- Rebase patches:
* bsc1047218-0001-man-obey-SOURCE_DATE_EPOCH-when-generating-man-pages.patch
* bsc1073877-0001-apparmor-allow-receiving-of-signals-from-docker-kill.patch
* bsc1073877-0002-apparmor-clobber-docker-default-profile-on-start.patch
* private-registry-0001-Add-private-registry-mirror-support.patch
* secrets-0001-daemon-allow-directory-creation-in-run-secrets.patch
* secrets-0002-SUSE-implement-SUSE-container-secrets.patch- Remove upstreamed patches: - bsc1100727-0001-build-add-buildmode-pie.patch
* Mon Oct 08 2018 Valentin Rothberg - Reduce the disk footprint by recommending git-core instead of hard requiring it. bsc#1108038
* Tue Sep 04 2018 rbrownAATTsuse.com- ExcludeArch i586 for entire docker-kubic flavour
* Tue Sep 04 2018 rbrownAATTsuse.com- ExcludeArch i586 for docker-kubic-kubeadm-criconfig subpackage
* Fri Aug 24 2018 asaraiAATTsuse.com- Add patch to make package reproducible, which is a backport of https://github.com/docker/cli/pull/1306. boo#1047218 + bsc1047218-0001-man-obey-SOURCE_DATE_EPOCH-when-generating-man-pages.patch
* Wed Aug 22 2018 asaraiAATTsuse.com- Upgrade to docker-ce v18.06.1-ce. bsc#1102522 bsc#1113313 Upstream changelog: https://github.com/docker/docker-ce/releases/tag/v18.06.1-ce- Remove patches that were merged upstream: - bsc1102522-0001-18.06-disable-containerd-CRI-plugin.patch
* Tue Aug 21 2018 asaraiAATTsuse.com- Add a backport of https://github.com/docker/engine/pull/29 for the 18.06.0-ce upgrade. This is a potential security issue (the CRI plugin was enabled by default, which listens on a TCP port bound to 0.0.0.0) that will be fixed upstream in the 18.06.1-ce upgrade. bsc#1102522 + bsc1102522-0001-18.06-disable-containerd-CRI-plugin.patch
* Tue Aug 21 2018 rbrownAATTsuse.com- Kubic: Make crio default, docker as alternative runtime (boo#1104821)- Provide kubernetes CRI config with docker-kubic-kubeadm-criconfig subpackage
* Thu Aug 16 2018 asaraiAATTsuse.com- Merge -kubic packages back into the main Virtualization:containers packages. This is done using _multibuild to add a \"kubic\" flavour, which is then used to conditionally compile patches and other kubic-specific features. bsc#1105000- Rework docker-rpmlintrc with the new _multibuild setup.
* Wed Aug 01 2018 asaraiAATTsuse.com- Enable seccomp support on SLE12, since libseccomp is now a new enough vintage to work with Docker and containerd. fate#325877
* Tue Jul 31 2018 asaraiAATTsuse.com- Upgrade to docker-ce v18.06.0-ce. bsc#1102522- Remove systemd-service dependency on containerd, which is now being started by dockerd to align with upstream defaults.- Removed the following patches as they are merged upstream: - bsc1021227-0001-pkg-devmapper-dynamically-load-dm_task_deferred_remo.patch - bsc1055676-0001-daemon-oci-obey-CL_UNPRIVILEGED-for-user-namespaced-.patch- Rebased the following patches:
* bsc1073877-0001-apparmor-allow-receiving-of-signals-from-docker-kill.patch
* bsc1073877-0002-apparmor-clobber-docker-default-profile-on-start.patch
* bsc1100727-0001-build-add-buildmode-pie.patch
* secrets-0001-daemon-allow-directory-creation-in-run-secrets.patch
* secrets-0002-SUSE-implement-SUSE-container-secrets.patch
* Mon Jul 30 2018 asaraiAATTsuse.com- Build the client binary with -buildmode=pie to fix issues on POWER. bsc#1100727 + bsc1100727-0001-build-add-buildmode-pie.patch
* Fri Jun 29 2018 asaraiAATTsuse.com- Update the AppArmor patchset again to fix a separate issue where changed AppArmor profiles don\'t actually get applied on Docker daemon reboot. bsc#1099277
* bsc1073877-0001-apparmor-allow-receiving-of-signals-from-docker-kill.patch + bsc1073877-0002-apparmor-clobber-docker-default-profile-on-start.patch
* Tue Jun 05 2018 asaraiAATTsuse.com- Update to AppArmor patch so that signal mediation also works for signals between in-container processes. bsc#1073877
* bsc1073877-0001-apparmor-allow-receiving-of-signals-from-docker-kill.patch
* Tue Jun 05 2018 dcassanyAATTsuse.com- Make use of %license macro
* Tue Jun 05 2018 asaraiAATTsuse.com- Remove \'go test\' from %check section, as it has only ever caused us problems and hasn\'t (as far as I remember) ever caught a release-blocking issue. Smoke testing has been far more useful. boo#1095817
* Tue May 29 2018 asaraiAATTsuse.com- Update secrets patch to not log incorrect warnings when attempting to inject non-existent host files. bsc#1065609
* secrets-0001-daemon-allow-directory-creation-in-run-secrets.patch
* secrets-0002-SUSE-implement-SUSE-container-secrets.patch
* Wed May 16 2018 jmassaguerplaAATTsuse.com- Review Obsoletes to fix bsc#1080978
* Thu Apr 12 2018 fcastelliAATTsuse.com- Put docker under the podruntime slice. This the recommended deployment to allow fine resource control on Kubernetes. bsc#1086185
* Tue Apr 10 2018 mmeisterAATTsuse.com- Add patch to handle AppArmor changes that make \'docker kill\' stop working. bsc#1073877 boo#1089732 + bsc1073877-0001-apparmor-allow-receiving-of-signals-from-docker-kill.patch
* Fri Apr 06 2018 asaraiAATTsuse.com- Fix manpage generation breaking ppc64le builds due to a missing - buildemode=pie.
* Wed Apr 04 2018 vrothbergAATTsuse.com- Compile and install all manpages. bsc#1085117
* Tue Mar 27 2018 asaraiAATTsuse.com- Add requirement for catatonit, which provides a docker-init implementation. fate#324652 bsc#1085380
* Thu Mar 08 2018 vrothbergAATTsuse.com- Fix private-registry-0001-Add-private-registry-mirror-support.patch to deal corretly with TLS configs of 3rd party registries. fix bsc#1084533
* Tue Feb 13 2018 asaraiAATTsuse.com- Update patches to be sourced from https://github.com/suse/docker-ce (which are based on the upstream docker/docker-ce repo). The reason for this change (though it is functionally identical to the old patches) is so that public patch maintenance is much simpler.
* bsc1021227-0001-pkg-devmapper-dynamically-load-dm_task_deferred_remo.patch
* bsc1055676-0001-daemon-oci-obey-CL_UNPRIVILEGED-for-user-namespaced-.patch
* private-registry-0001-Add-private-registry-mirror-support.patch
* secrets-0001-daemon-allow-directory-creation-in-run-secrets.patch
* secrets-0002-SUSE-implement-SUSE-container-secrets.patch
* Mon Feb 12 2018 rbrownAATTsuse.com- Add ${version} to equivalent non-kubic package provides
* Thu Feb 08 2018 rbrownAATTsuse.com- Add Provides for equivalent non-kubic packages
* Tue Jan 30 2018 vrothbergAATTsuse.com- Disable all tests for docker/client and docker/pkg/discovery. The unit tests of those packages broke reproducibly the builds in IBS.
* Mon Jan 29 2018 vrothbergAATTsuse.com- Disable flaky tests github.com/docker/docker/pkg/discovery/kv.
* Fri Jan 26 2018 vrothbergAATTsuse.com- Add patch to support mirroring of private/non-upstream registries. As soon as the upstream PR (https://github.com/moby/moby/pull/34319) is merged, this patch will be replaced by the backported one from upstream. + private-registry-0001-Add-private-registry-mirror-support.patch fix bsc#1074971
* Fri Jan 19 2018 asaraiAATTsuse.com- Add Obsoletes: docker-image-migrator, as the tool is no longer needed and we\'ve pretty much removed it from everywhere except the containers module. bsc#1069758
* Fri Jan 19 2018 vrothbergAATTsuse.com- Remove requirement on bridge-utils, which has been replaced by libnetwork in Docker. bsc#1072798