From e1ee6c3fb26648fe56ae91945a14d01a9a3886e4 Mon Sep 17 00:00:00 2001 From: Pavol Loffay Date: Wed, 19 Aug 2026 18:46:27 +0200 Subject: [PATCH] FIPS: Drop openssl and use native golang impl Signed-off-by: Pavol Loffay --- Dockerfile.gateway | 5 +- Dockerfile.jaegerquery | 5 +- Dockerfile.opa | 5 +- Dockerfile.operator | 5 +- Dockerfile.tempo | 5 +- Dockerfile.tempoquery | 5 +- rpms.in.yaml | 1 - rpms.lock.yaml | 226 +++++++++++++++++++++++++++++++++++++++++ 8 files changed, 244 insertions(+), 13 deletions(-) diff --git a/Dockerfile.gateway b/Dockerfile.gateway index e4b3d418..3b93f925 100644 --- a/Dockerfile.gateway +++ b/Dockerfile.gateway @@ -13,7 +13,7 @@ COPY api api COPY api/LICENSE /licenses/ WORKDIR /opt/app-root/src/api -RUN CGO_ENABLED=1 GOEXPERIMENT=strictfipsruntime go build -mod=mod -tags strictfipsruntime -o tempostack-gateway -trimpath -ldflags "-s -w" +RUN CGO_ENABLED=0 GOFIPS140=certified go build -mod=mod -tags no_openssl -o tempostack-gateway -trimpath -ldflags "-s -w" FROM registry.redhat.io/ubi9/ubi-micro:latest@sha256:7e7f79ab747bf2b452e3043dd89f388e92be4c7fdcc8b815b58adf6c99c39c95 AS target-base @@ -21,7 +21,7 @@ FROM registry.redhat.io/ubi9/ubi:latest@sha256:5426a8f45e80a07168a30ea24d84f2660 COPY --from=target-base / /mnt/rootfs RUN rpm --root /mnt/rootfs --import /etc/pki/rpm-gpg/RPM-GPG-KEY-redhat-release -RUN dnf install --installroot /mnt/rootfs --releasever 9 --setopt install_weak_deps=false --setopt reposdir=/etc/yum.repos.d --nodocs -y openssl systemd && \ +RUN dnf install --installroot /mnt/rootfs --releasever 9 --setopt install_weak_deps=false --setopt reposdir=/etc/yum.repos.d --nodocs -y systemd && \ dnf clean all && \ rm -rf /var/cache/yum RUN rm -rf /mnt/rootfs/var/cache/* @@ -36,6 +36,7 @@ RUN mkdir /licenses COPY api/LICENSE /licenses/. COPY --from=builder /opt/app-root/src/api/tempostack-gateway /usr/bin/tempostack-gateway +ENV GODEBUG=fips140=auto ARG USER_UID=1001 USER ${USER_UID} ENTRYPOINT ["/usr/bin/tempostack-gateway"] diff --git a/Dockerfile.jaegerquery b/Dockerfile.jaegerquery index 350bc5da..ec1809d3 100644 --- a/Dockerfile.jaegerquery +++ b/Dockerfile.jaegerquery @@ -41,7 +41,7 @@ RUN go version && \ exportOrFail VERSION_DATE=`date -u +'%Y-%m-%dT%H:%M:%SZ'` && \ exportOrFail GIT_LATEST_TAG="1.68.0" && \ exportOrFail GIT_COMMIT_SHA=`git rev-parse HEAD` && \ - CGO_ENABLED=1 GOEXPERIMENT=strictfipsruntime go build -C ./cmd/query -mod=mod -tags strictfipsruntime,ui \ + CGO_ENABLED=0 GOFIPS140=certified go build -C ./cmd/query -mod=mod -tags no_openssl,ui \ -o ./jaeger -trimpath -ldflags "-s -w \ -X ${VERSION_PKG}.commitSHA=${GIT_COMMIT_SHA} \ -X ${VERSION_PKG}.latestVersion=${GIT_LATEST_TAG} \ @@ -53,7 +53,7 @@ FROM registry.redhat.io/ubi9/ubi:latest@sha256:5426a8f45e80a07168a30ea24d84f2660 COPY --from=target-base / /mnt/rootfs RUN rpm --root /mnt/rootfs --import /etc/pki/rpm-gpg/RPM-GPG-KEY-redhat-release -RUN dnf install --installroot /mnt/rootfs --releasever 9 --setopt install_weak_deps=false --setopt reposdir=/etc/yum.repos.d --nodocs -y openssl systemd && \ +RUN dnf install --installroot /mnt/rootfs --releasever 9 --setopt install_weak_deps=false --setopt reposdir=/etc/yum.repos.d --nodocs -y systemd && \ dnf clean all && \ rm -rf /var/cache/yum RUN rm -rf /mnt/rootfs/var/cache/* @@ -69,6 +69,7 @@ RUN mkdir /licenses COPY jaeger/LICENSE /licenses/. COPY --from=builder /opt/app-root/src/jaeger/cmd/query/jaeger /usr/bin/jaeger +ENV GODEBUG=fips140=auto ARG USER_UID=1001 USER ${USER_UID} ENTRYPOINT ["/usr/bin/jaeger"] diff --git a/Dockerfile.opa b/Dockerfile.opa index 1723de8a..18b07bd7 100644 --- a/Dockerfile.opa +++ b/Dockerfile.opa @@ -13,7 +13,7 @@ COPY opa-openshift opa-openshift COPY api/LICENSE /licenses/ WORKDIR /opt/app-root/src/opa-openshift -RUN CGO_ENABLED=1 GOEXPERIMENT=strictfipsruntime go build -mod=mod -tags strictfipsruntime -o opa-openshift -trimpath -ldflags "-s -w" +RUN CGO_ENABLED=0 GOFIPS140=certified go build -mod=mod -tags no_openssl -o opa-openshift -trimpath -ldflags "-s -w" FROM registry.redhat.io/ubi9/ubi-micro:latest@sha256:7e7f79ab747bf2b452e3043dd89f388e92be4c7fdcc8b815b58adf6c99c39c95 AS target-base @@ -21,7 +21,7 @@ FROM registry.redhat.io/ubi9/ubi:latest@sha256:5426a8f45e80a07168a30ea24d84f2660 COPY --from=target-base / /mnt/rootfs RUN rpm --root /mnt/rootfs --import /etc/pki/rpm-gpg/RPM-GPG-KEY-redhat-release -RUN dnf install --installroot /mnt/rootfs --releasever 9 --setopt install_weak_deps=false --setopt reposdir=/etc/yum.repos.d --nodocs -y openssl systemd && \ +RUN dnf install --installroot /mnt/rootfs --releasever 9 --setopt install_weak_deps=false --setopt reposdir=/etc/yum.repos.d --nodocs -y systemd && \ dnf clean all && \ rm -rf /var/cache/yum RUN rm -rf /mnt/rootfs/var/cache/* @@ -36,6 +36,7 @@ RUN mkdir /licenses COPY opa-openshift/LICENSE /licenses/. COPY --from=builder /opt/app-root/src/opa-openshift/opa-openshift /usr/bin/opa-openshift +ENV GODEBUG=fips140=auto ARG USER_UID=1001 USER ${USER_UID} ENTRYPOINT ["/usr/bin/opa-openshift"] diff --git a/Dockerfile.operator b/Dockerfile.operator index 4f977219..6291346d 100644 --- a/Dockerfile.operator +++ b/Dockerfile.operator @@ -24,7 +24,7 @@ RUN exportOrFail() { echo $1; if [[ $1 == *= ]]; then echo "Error: empty variabl exportOrFail TEMPO_VERSION=`cat config/manager/manager.yaml | grep -oP "docker.io/grafana/tempo:\K.*"` && \ exportOrFail TEMPO_QUERY_VERSION=`cat config/manager/manager.yaml | grep -oP "docker.io/grafana/tempo-query:\K.*"` && \ ls -al && \ - CGO_ENABLED=1 GOEXPERIMENT=strictfipsruntime go build -mod=mod -tags strictfipsruntime \ + CGO_ENABLED=0 GOFIPS140=certified go build -mod=mod -tags no_openssl \ -o "tempo-operator" -trimpath -ldflags "-s -w \ -X ${VERSION_PKG}.buildDate=${BUILD_DATE} \ -X ${VERSION_PKG}.revision=${COMMIT_SHA} \ @@ -39,7 +39,7 @@ FROM registry.redhat.io/ubi9/ubi:latest@sha256:5426a8f45e80a07168a30ea24d84f2660 COPY --from=target-base / /mnt/rootfs RUN rpm --root /mnt/rootfs --import /etc/pki/rpm-gpg/RPM-GPG-KEY-redhat-release -RUN dnf install --installroot /mnt/rootfs --releasever 9 --setopt install_weak_deps=false --setopt reposdir=/etc/yum.repos.d --nodocs -y openssl systemd && \ +RUN dnf install --installroot /mnt/rootfs --releasever 9 --setopt install_weak_deps=false --setopt reposdir=/etc/yum.repos.d --nodocs -y systemd && \ dnf clean all && \ rm -rf /var/cache/yum RUN rm -rf /mnt/rootfs/var/cache/* @@ -54,6 +54,7 @@ RUN mkdir /licenses COPY tempo-operator/LICENSE /licenses/. COPY --from=builder /opt/app-root/src/tempo-operator/tempo-operator /usr/bin/tempo-operator +ENV GODEBUG=fips140=auto ARG USER_UID=1001 USER ${USER_UID} ENTRYPOINT ["/usr/bin/tempo-operator"] diff --git a/Dockerfile.tempo b/Dockerfile.tempo index 44195d0c..a56aa1d1 100644 --- a/Dockerfile.tempo +++ b/Dockerfile.tempo @@ -17,7 +17,7 @@ RUN exportOrFail() { echo $1; if [[ $1 == *= ]]; then echo "Error: empty variabl exportOrFail GIT_BRANCH=`git rev-parse --abbrev-ref HEAD` && \ exportOrFail GIT_REVISION=`git rev-parse --short HEAD` && \ exportOrFail VERSION="2.10.8" && \ - CGO_ENABLED=1 GOEXPERIMENT=strictfipsruntime go build -C ./cmd/tempo -tags strictfipsruntime -mod vendor \ + CGO_ENABLED=0 GOFIPS140=certified go build -C ./cmd/tempo -tags no_openssl -mod vendor \ -o "tempo" -trimpath -ldflags "-s -w -X main.Branch=${GIT_BRANCH} -X main.Revision=${GIT_REVISION} -X main.Version=${VERSION}" FROM registry.redhat.io/ubi9/ubi-micro:latest@sha256:7e7f79ab747bf2b452e3043dd89f388e92be4c7fdcc8b815b58adf6c99c39c95 AS target-base @@ -26,7 +26,7 @@ FROM registry.redhat.io/ubi9/ubi:latest@sha256:5426a8f45e80a07168a30ea24d84f2660 COPY --from=target-base / /mnt/rootfs RUN rpm --root /mnt/rootfs --import /etc/pki/rpm-gpg/RPM-GPG-KEY-redhat-release -RUN dnf install --installroot /mnt/rootfs --releasever 9 --setopt install_weak_deps=false --setopt reposdir=/etc/yum.repos.d --nodocs -y openssl systemd && \ +RUN dnf install --installroot /mnt/rootfs --releasever 9 --setopt install_weak_deps=false --setopt reposdir=/etc/yum.repos.d --nodocs -y systemd && \ dnf clean all && \ rm -rf /var/cache/yum RUN rm -rf /mnt/rootfs/var/cache/* @@ -41,6 +41,7 @@ RUN mkdir /licenses COPY tempo/LICENSE /licenses/. COPY --from=builder /opt/app-root/src/tempo/cmd/tempo/tempo /usr/bin/tempo +ENV GODEBUG=fips140=auto ARG USER_UID=1001 USER ${USER_UID} ENTRYPOINT ["/usr/bin/tempo"] diff --git a/Dockerfile.tempoquery b/Dockerfile.tempoquery index 6db899f6..28cd1d00 100644 --- a/Dockerfile.tempoquery +++ b/Dockerfile.tempoquery @@ -17,7 +17,7 @@ RUN exportOrFail() { echo $1; if [[ $1 == *= ]]; then echo "Error: empty variabl exportOrFail GIT_BRANCH=`git rev-parse --abbrev-ref HEAD` && \ exportOrFail GIT_REVISION=`git rev-parse --short HEAD` && \ exportOrFail VERSION="2.10.8" && \ - CGO_ENABLED=1 GOEXPERIMENT=strictfipsruntime go build -C ./cmd/tempo-query -tags strictfipsruntime -mod vendor \ + CGO_ENABLED=0 GOFIPS140=certified go build -C ./cmd/tempo-query -tags no_openssl -mod vendor \ -o "tempo-query" -trimpath -ldflags "-s -w -X main.Branch=${GIT_BRANCH} -X main.Revision=${GIT_REVISION} -X main.Version=${VERSION}" FROM registry.redhat.io/ubi9/ubi-micro:latest@sha256:7e7f79ab747bf2b452e3043dd89f388e92be4c7fdcc8b815b58adf6c99c39c95 AS target-base @@ -26,7 +26,7 @@ FROM registry.redhat.io/ubi9/ubi:latest@sha256:5426a8f45e80a07168a30ea24d84f2660 COPY --from=target-base / /mnt/rootfs RUN rpm --root /mnt/rootfs --import /etc/pki/rpm-gpg/RPM-GPG-KEY-redhat-release -RUN dnf install --installroot /mnt/rootfs --releasever 9 --setopt install_weak_deps=false --setopt reposdir=/etc/yum.repos.d --nodocs -y openssl systemd && \ +RUN dnf install --installroot /mnt/rootfs --releasever 9 --setopt install_weak_deps=false --setopt reposdir=/etc/yum.repos.d --nodocs -y systemd && \ dnf clean all && \ rm -rf /var/cache/yum RUN rm -rf /mnt/rootfs/var/cache/* @@ -41,6 +41,7 @@ RUN mkdir /licenses COPY tempo/LICENSE /licenses/. COPY --from=builder /opt/app-root/src/tempo/cmd/tempo-query/tempo-query /usr/bin/tempo-query +ENV GODEBUG=fips140=auto ARG USER_UID=1001 USER ${USER_UID} ENTRYPOINT ["/usr/bin/tempo-query"] diff --git a/rpms.in.yaml b/rpms.in.yaml index db119143..9f2d8985 100644 --- a/rpms.in.yaml +++ b/rpms.in.yaml @@ -8,7 +8,6 @@ contentOrigin: packages: - git - golang - - openssl - systemd - patch arches: diff --git a/rpms.lock.yaml b/rpms.lock.yaml index 38a75660..42fd022d 100644 --- a/rpms.lock.yaml +++ b/rpms.lock.yaml @@ -291,6 +291,13 @@ arches: name: audit-libs evr: 3.1.5-8.el9 sourcerpm: audit-3.1.5-8.el9.src.rpm + - url: https://cdn-ubi.redhat.com/content/public/ubi/dist/ubi9/9/aarch64/baseos/os/Packages/b/bash-5.1.8-9.el9.aarch64.rpm + repoid: ubi-9-for-aarch64-baseos-rpms + size: 1760045 + checksum: sha256:7dc1febec9c2fb184ed4407f8a188ab267b7e46b3534866f702c6266008ababa + name: bash + evr: 5.1.8-9.el9 + sourcerpm: bash-5.1.8-9.el9.src.rpm - url: https://cdn-ubi.redhat.com/content/public/ubi/dist/ubi9/9/aarch64/baseos/os/Packages/b/binutils-2.35.2-72.el9.aarch64.rpm repoid: ubi-9-for-aarch64-baseos-rpms size: 5021411 @@ -312,6 +319,20 @@ arches: name: bzip2-libs evr: 1.0.8-11.el9 sourcerpm: bzip2-1.0.8-11.el9.src.rpm + - url: https://cdn-ubi.redhat.com/content/public/ubi/dist/ubi9/9/aarch64/baseos/os/Packages/c/coreutils-8.32-41.el9_8.aarch64.rpm + repoid: ubi-9-for-aarch64-baseos-rpms + size: 1177900 + checksum: sha256:ee2de9f5fbc5e83bad920a353c45d3446997aa0e4023436528b2d6f817bd6f50 + name: coreutils + evr: 8.32-41.el9_8 + sourcerpm: coreutils-8.32-41.el9_8.src.rpm + - url: https://cdn-ubi.redhat.com/content/public/ubi/dist/ubi9/9/aarch64/baseos/os/Packages/c/coreutils-common-8.32-41.el9_8.aarch64.rpm + repoid: ubi-9-for-aarch64-baseos-rpms + size: 2114764 + checksum: sha256:cd79ca65bba152b9ccadcb9780ec78e3d06ce538b693078fd14459d038ab5c0c + name: coreutils-common + evr: 8.32-41.el9_8 + sourcerpm: coreutils-8.32-41.el9_8.src.rpm - url: https://cdn-ubi.redhat.com/content/public/ubi/dist/ubi9/9/aarch64/baseos/os/Packages/c/cracklib-2.9.6-28.el9.aarch64.rpm repoid: ubi-9-for-aarch64-baseos-rpms size: 102026 @@ -389,6 +410,13 @@ arches: name: expat evr: 2.5.0-6.el9_8.1 sourcerpm: expat-2.5.0-6.el9_8.1.src.rpm + - url: https://cdn-ubi.redhat.com/content/public/ubi/dist/ubi9/9/aarch64/baseos/os/Packages/f/filesystem-3.16-5.el9.aarch64.rpm + repoid: ubi-9-for-aarch64-baseos-rpms + size: 5003914 + checksum: sha256:484bc41109c49066cf350344150abe144e63263e0fafa0bf12c5a47f853e6a49 + name: filesystem + evr: 3.16-5.el9 + sourcerpm: filesystem-3.16-5.el9.src.rpm - url: https://cdn-ubi.redhat.com/content/public/ubi/dist/ubi9/9/aarch64/baseos/os/Packages/f/findutils-4.8.0-7.el9.aarch64.rpm repoid: ubi-9-for-aarch64-baseos-rpms size: 564807 @@ -410,6 +438,34 @@ arches: name: gdbm-libs evr: 1:1.23-1.el9 sourcerpm: gdbm-1.23-1.el9.src.rpm + - url: https://cdn-ubi.redhat.com/content/public/ubi/dist/ubi9/9/aarch64/baseos/os/Packages/g/glibc-2.34-275.el9_8.aarch64.rpm + repoid: ubi-9-for-aarch64-baseos-rpms + size: 1813928 + checksum: sha256:e40a78100f731b5f5a1b235880a0aaad5b08bb32e6521e90535b7f4a94c6e9e9 + name: glibc + evr: 2.34-275.el9_8 + sourcerpm: glibc-2.34-275.el9_8.src.rpm + - url: https://cdn-ubi.redhat.com/content/public/ubi/dist/ubi9/9/aarch64/baseos/os/Packages/g/glibc-common-2.34-275.el9_8.aarch64.rpm + repoid: ubi-9-for-aarch64-baseos-rpms + size: 312665 + checksum: sha256:24e1c7189d101531c526dd3cc1a42ab62d89f874824b54fb6b518ec24f190554 + name: glibc-common + evr: 2.34-275.el9_8 + sourcerpm: glibc-2.34-275.el9_8.src.rpm + - url: https://cdn-ubi.redhat.com/content/public/ubi/dist/ubi9/9/aarch64/baseos/os/Packages/g/glibc-gconv-extra-2.34-275.el9_8.aarch64.rpm + repoid: ubi-9-for-aarch64-baseos-rpms + size: 1829737 + checksum: sha256:7f2f23c07b84b3cd3bacb905dffaca4f4474298e936f3b10b93390d4127591da + name: glibc-gconv-extra + evr: 2.34-275.el9_8 + sourcerpm: glibc-2.34-275.el9_8.src.rpm + - url: https://cdn-ubi.redhat.com/content/public/ubi/dist/ubi9/9/aarch64/baseos/os/Packages/g/glibc-minimal-langpack-2.34-275.el9_8.aarch64.rpm + repoid: ubi-9-for-aarch64-baseos-rpms + size: 30881 + checksum: sha256:b1348c4c4fe3da979f342b0c27ff0d33a11688274a0b6708292d7750bbc8d853 + name: glibc-minimal-langpack + evr: 2.34-275.el9_8 + sourcerpm: glibc-2.34-275.el9_8.src.rpm - url: https://cdn-ubi.redhat.com/content/public/ubi/dist/ubi9/9/aarch64/baseos/os/Packages/g/gmp-6.2.0-13.el9.aarch64.rpm repoid: ubi-9-for-aarch64-baseos-rpms size: 275679 @@ -480,6 +536,13 @@ arches: name: less evr: 590-6.el9 sourcerpm: less-590-6.el9.src.rpm + - url: https://cdn-ubi.redhat.com/content/public/ubi/dist/ubi9/9/aarch64/baseos/os/Packages/l/libacl-2.4.0-1.el9_8.aarch64.rpm + repoid: ubi-9-for-aarch64-baseos-rpms + size: 31468 + checksum: sha256:70ba010505e9805254f772c3dd9cd9e6176fc9e007e8c9be7204c44f85d8bbd2 + name: libacl + evr: 2.4.0-1.el9_8 + sourcerpm: acl-2.4.0-1.el9_8.src.rpm - url: https://cdn-ubi.redhat.com/content/public/ubi/dist/ubi9/9/aarch64/baseos/os/Packages/l/libatomic-11.5.0-14.el9.aarch64.rpm repoid: ubi-9-for-aarch64-baseos-rpms size: 26108 @@ -487,6 +550,13 @@ arches: name: libatomic evr: 11.5.0-14.el9 sourcerpm: gcc-11.5.0-14.el9.src.rpm + - url: https://cdn-ubi.redhat.com/content/public/ubi/dist/ubi9/9/aarch64/baseos/os/Packages/l/libattr-2.5.1-3.el9.aarch64.rpm + repoid: ubi-9-for-aarch64-baseos-rpms + size: 20696 + checksum: sha256:b6a73c9da522df55690b886c0a9af39338571d34ee6f0d4d9b994c8289df3412 + name: libattr + evr: 2.5.1-3.el9 + sourcerpm: attr-2.5.1-3.el9.src.rpm - url: https://cdn-ubi.redhat.com/content/public/ubi/dist/ubi9/9/aarch64/baseos/os/Packages/l/libblkid-2.37.4-25.el9.aarch64.rpm repoid: ubi-9-for-aarch64-baseos-rpms size: 113931 @@ -501,6 +571,13 @@ arches: name: libbrotli evr: 1.0.9-9.el9_7 sourcerpm: brotli-1.0.9-9.el9_7.src.rpm + - url: https://cdn-ubi.redhat.com/content/public/ubi/dist/ubi9/9/aarch64/baseos/os/Packages/l/libcap-2.48-10.el9_8.1.aarch64.rpm + repoid: ubi-9-for-aarch64-baseos-rpms + size: 78021 + checksum: sha256:1ac3014c33b84d7a492b99d46d47940b096e034a3d5886e16ace7159724be012 + name: libcap + evr: 2.48-10.el9_8.1 + sourcerpm: libcap-2.48-10.el9_8.1.src.rpm - url: https://cdn-ubi.redhat.com/content/public/ubi/dist/ubi9/9/aarch64/baseos/os/Packages/l/libcap-ng-0.8.2-7.el9.aarch64.rpm repoid: ubi-9-for-aarch64-baseos-rpms size: 36033 @@ -578,6 +655,13 @@ arches: name: libfido2 evr: 1.13.0-2.el9 sourcerpm: libfido2-1.13.0-2.el9.src.rpm + - url: https://cdn-ubi.redhat.com/content/public/ubi/dist/ubi9/9/aarch64/baseos/os/Packages/l/libgcc-11.5.0-14.el9.aarch64.rpm + repoid: ubi-9-for-aarch64-baseos-rpms + size: 81211 + checksum: sha256:6923218fdef581189a4b51c7ba158083597f1c6df08cae021a1d90e9d61938a9 + name: libgcc + evr: 11.5.0-14.el9 + sourcerpm: gcc-11.5.0-14.el9.src.rpm - url: https://cdn-ubi.redhat.com/content/public/ubi/dist/ubi9/9/aarch64/baseos/os/Packages/l/libgcrypt-1.10.0-13.el9_8.aarch64.rpm repoid: ubi-9-for-aarch64-baseos-rpms size: 469908 @@ -648,6 +732,13 @@ arches: name: libseccomp evr: 2.5.2-2.el9 sourcerpm: libseccomp-2.5.2-2.el9.src.rpm + - url: https://cdn-ubi.redhat.com/content/public/ubi/dist/ubi9/9/aarch64/baseos/os/Packages/l/libselinux-3.6-3.el9.aarch64.rpm + repoid: ubi-9-for-aarch64-baseos-rpms + size: 89531 + checksum: sha256:3d7249adbf19206e319cd24acc2e01b0da39975aa3e5af73bdb6c6d438108fac + name: libselinux + evr: 3.6-3.el9 + sourcerpm: libselinux-3.6-3.el9.src.rpm - url: https://cdn-ubi.redhat.com/content/public/ubi/dist/ubi9/9/aarch64/baseos/os/Packages/l/libsemanage-3.6-5.el9_6.aarch64.rpm repoid: ubi-9-for-aarch64-baseos-rpms size: 120963 @@ -655,6 +746,13 @@ arches: name: libsemanage evr: 3.6-5.el9_6 sourcerpm: libsemanage-3.6-5.el9_6.src.rpm + - url: https://cdn-ubi.redhat.com/content/public/ubi/dist/ubi9/9/aarch64/baseos/os/Packages/l/libsepol-3.6-3.el9.aarch64.rpm + repoid: ubi-9-for-aarch64-baseos-rpms + size: 326966 + checksum: sha256:496ed9e2d7fac9704afe764eab4c2c43b4a47e8c229c14498dd19786f98f80c0 + name: libsepol + evr: 3.6-3.el9 + sourcerpm: libsepol-3.6-3.el9.src.rpm - url: https://cdn-ubi.redhat.com/content/public/ubi/dist/ubi9/9/aarch64/baseos/os/Packages/l/libsigsegv-2.13-4.el9.aarch64.rpm repoid: ubi-9-for-aarch64-baseos-rpms size: 30566 @@ -760,6 +858,13 @@ arches: name: ncurses evr: 6.2-12.20210508.el9 sourcerpm: ncurses-6.2-12.20210508.el9.src.rpm + - url: https://cdn-ubi.redhat.com/content/public/ubi/dist/ubi9/9/aarch64/baseos/os/Packages/n/ncurses-libs-6.2-12.20210508.el9.aarch64.rpm + repoid: ubi-9-for-aarch64-baseos-rpms + size: 324624 + checksum: sha256:b5dd452392d2f97bb050c9f5e5376998652c567dcbd8f035d26659b1b551b5c9 + name: ncurses-libs + evr: 6.2-12.20210508.el9 + sourcerpm: ncurses-6.2-12.20210508.el9.src.rpm - url: https://cdn-ubi.redhat.com/content/public/ubi/dist/ubi9/9/aarch64/baseos/os/Packages/o/openldap-2.6.8-4.el9.aarch64.rpm repoid: ubi-9-for-aarch64-baseos-rpms size: 291500 @@ -837,6 +942,13 @@ arches: name: pcre evr: 8.44-4.el9 sourcerpm: pcre-8.44-4.el9.src.rpm + - url: https://cdn-ubi.redhat.com/content/public/ubi/dist/ubi9/9/aarch64/baseos/os/Packages/p/pcre2-10.40-6.el9.aarch64.rpm + repoid: ubi-9-for-aarch64-baseos-rpms + size: 224938 + checksum: sha256:29285f81cef68f73b4f8ff81ee8fdf4ceaa007933302119ed1615e4aa1091613 + name: pcre2 + evr: 10.40-6.el9 + sourcerpm: pcre2-10.40-6.el9.src.rpm - url: https://cdn-ubi.redhat.com/content/public/ubi/dist/ubi9/9/aarch64/baseos/os/Packages/p/pkgconf-1.7.3-10.el9.aarch64.rpm repoid: ubi-9-for-aarch64-baseos-rpms size: 45196 @@ -858,6 +970,13 @@ arches: name: readline evr: 8.1-4.el9 sourcerpm: readline-8.1-4.el9.src.rpm + - url: https://cdn-ubi.redhat.com/content/public/ubi/dist/ubi9/9/aarch64/baseos/os/Packages/r/redhat-release-9.8-1.0.el9.aarch64.rpm + repoid: ubi-9-for-aarch64-baseos-rpms + size: 61683 + checksum: sha256:fa7f1d93927c7f8c6f6563a8d221af659074f026e4b12cd74d456b0db1878164 + name: redhat-release + evr: 9.8-1.0.el9 + sourcerpm: redhat-release-9.8-1.0.el9.src.rpm - url: https://cdn-ubi.redhat.com/content/public/ubi/dist/ubi9/9/aarch64/baseos/os/Packages/s/sed-4.8-10.el9.aarch64.rpm repoid: ubi-9-for-aarch64-baseos-rpms size: 315893 @@ -1222,6 +1341,13 @@ arches: name: perl-vars evr: 1.05-481.1.el9_6 sourcerpm: perl-5.32.1-481.1.el9_6.src.rpm + - url: https://cdn-ubi.redhat.com/content/public/ubi/dist/ubi9/9/x86_64/baseos/os/Packages/b/basesystem-11-13.el9.noarch.rpm + repoid: ubi-9-for-x86_64-baseos-rpms + size: 8229 + checksum: sha256:f498b0813fa1a825d550e8e3a9e42255eabfa18e6fc96adfc6cc8fa7e16dd513 + name: basesystem + evr: 11-13.el9 + sourcerpm: basesystem-11-13.el9.src.rpm - url: https://cdn-ubi.redhat.com/content/public/ubi/dist/ubi9/9/x86_64/baseos/os/Packages/c/ca-certificates-2025.2.80_v9.0.305-91.el9.noarch.rpm repoid: ubi-9-for-x86_64-baseos-rpms size: 1072208 @@ -1257,6 +1383,20 @@ arches: name: libssh-config evr: 0.10.4-18.el9 sourcerpm: libssh-0.10.4-18.el9.src.rpm + - url: https://cdn-ubi.redhat.com/content/public/ubi/dist/ubi9/9/x86_64/baseos/os/Packages/n/ncurses-base-6.2-12.20210508.el9.noarch.rpm + repoid: ubi-9-for-x86_64-baseos-rpms + size: 97840 + checksum: sha256:d62dfd41f9688efa2cf1ceedb96084c63e297fbdcfd1e72bc6757c730092b60c + name: ncurses-base + evr: 6.2-12.20210508.el9 + sourcerpm: ncurses-6.2-12.20210508.el9.src.rpm + - url: https://cdn-ubi.redhat.com/content/public/ubi/dist/ubi9/9/x86_64/baseos/os/Packages/p/pcre2-syntax-10.40-6.el9.noarch.rpm + repoid: ubi-9-for-x86_64-baseos-rpms + size: 147926 + checksum: sha256:d386b5e9b3a4b077b2ba143882e605750855dd3354f13c55fa12ed26908cb442 + name: pcre2-syntax + evr: 10.40-6.el9 + sourcerpm: pcre2-10.40-6.el9.src.rpm - url: https://cdn-ubi.redhat.com/content/public/ubi/dist/ubi9/9/x86_64/baseos/os/Packages/p/pkgconf-m4-1.7.3-10.el9.noarch.rpm repoid: ubi-9-for-x86_64-baseos-rpms size: 16054 @@ -1271,6 +1411,13 @@ arches: name: publicsuffix-list-dafsa evr: 20210518-3.el9 sourcerpm: publicsuffix-list-20210518-3.el9.src.rpm + - url: https://cdn-ubi.redhat.com/content/public/ubi/dist/ubi9/9/x86_64/baseos/os/Packages/s/setup-2.13.7-10.el9.noarch.rpm + repoid: ubi-9-for-x86_64-baseos-rpms + size: 153791 + checksum: sha256:0891d395ce067121c28932534237ad1ce231f2bfa987411ad62e73a12d11eb6a + name: setup + evr: 2.13.7-10.el9 + sourcerpm: setup-2.13.7-10.el9.src.rpm - url: https://cdn-ubi.redhat.com/content/public/ubi/dist/ubi9/9/x86_64/baseos/os/Packages/s/systemd-rpm-macros-252-67.el9_8.4.noarch.rpm repoid: ubi-9-for-x86_64-baseos-rpms size: 59475 @@ -1278,6 +1425,13 @@ arches: name: systemd-rpm-macros evr: 252-67.el9_8.4 sourcerpm: systemd-252-67.el9_8.4.src.rpm + - url: https://cdn-ubi.redhat.com/content/public/ubi/dist/ubi9/9/x86_64/baseos/os/Packages/t/tzdata-2026c-1.el9_8.noarch.rpm + repoid: ubi-9-for-x86_64-baseos-rpms + size: 933286 + checksum: sha256:8d6196e02853c0900c3c2e2367665beffb62cb2d0ff5f465ea2d00848a9a35dc + name: tzdata + evr: 2026c-1.el9_8 + sourcerpm: tzdata-2026c-1.el9_8.src.rpm source: - url: https://cdn-ubi.redhat.com/content/public/ubi/dist/ubi9/9/x86_64/appstream/source/SRPMS/Packages/g/git-2.52.0-1.el9.src.rpm repoid: ubi-9-for-x86_64-appstream-source-rpms @@ -1531,12 +1685,30 @@ arches: checksum: sha256:b140deb68f46517b0093e18969d8fb42a17216064fb2ee5783e9316d786430db name: acl evr: 2.4.0-1.el9_8 + - url: https://cdn-ubi.redhat.com/content/public/ubi/dist/ubi9/9/x86_64/baseos/source/SRPMS/Packages/a/attr-2.5.1-3.el9.src.rpm + repoid: ubi-9-for-x86_64-baseos-source-rpms + size: 482234 + checksum: sha256:5171534e7de11df197f3c5e08658544983198288e04624c739b5c3d9db07b59c + name: attr + evr: 2.5.1-3.el9 - url: https://cdn-ubi.redhat.com/content/public/ubi/dist/ubi9/9/x86_64/baseos/source/SRPMS/Packages/a/audit-3.1.5-8.el9.src.rpm repoid: ubi-9-for-x86_64-baseos-source-rpms size: 1275064 checksum: sha256:e0a3e72c863512032e0ba95337db076fa5af9368d9a80529a9624afc8877401c name: audit evr: 3.1.5-8.el9 + - url: https://cdn-ubi.redhat.com/content/public/ubi/dist/ubi9/9/x86_64/baseos/source/SRPMS/Packages/b/basesystem-11-13.el9.src.rpm + repoid: ubi-9-for-x86_64-baseos-source-rpms + size: 9884 + checksum: sha256:5a4ed0779fc06f08115d6e06aa95486f1e1e251f8f9ddb6c7e14e811bb2e24ef + name: basesystem + evr: 11-13.el9 + - url: https://cdn-ubi.redhat.com/content/public/ubi/dist/ubi9/9/x86_64/baseos/source/SRPMS/Packages/b/bash-5.1.8-9.el9.src.rpm + repoid: ubi-9-for-x86_64-baseos-source-rpms + size: 10512850 + checksum: sha256:5d7bbbf2538361be1a11846602862c3a56809b3ea43b69b86bcf407538e9e260 + name: bash + evr: 5.1.8-9.el9 - url: https://cdn-ubi.redhat.com/content/public/ubi/dist/ubi9/9/x86_64/baseos/source/SRPMS/Packages/b/binutils-2.35.2-72.el9.src.rpm repoid: ubi-9-for-x86_64-baseos-source-rpms size: 22476311 @@ -1567,6 +1739,12 @@ arches: checksum: sha256:b2618b278f5c8d6dacfae790c8c73b1fc1578b8f64011f325ced5a4a2e3b58bc name: chkconfig evr: 1.24-2.el9 + - url: https://cdn-ubi.redhat.com/content/public/ubi/dist/ubi9/9/x86_64/baseos/source/SRPMS/Packages/c/coreutils-8.32-41.el9_8.src.rpm + repoid: ubi-9-for-x86_64-baseos-source-rpms + size: 5696745 + checksum: sha256:9129bd65888eb0b6d802d8fe912609726af5d1f6347df8a18b243c426dcbb4db + name: coreutils + evr: 8.32-41.el9_8 - url: https://cdn-ubi.redhat.com/content/public/ubi/dist/ubi9/9/x86_64/baseos/source/SRPMS/Packages/c/cracklib-2.9.6-28.el9.src.rpm repoid: ubi-9-for-x86_64-baseos-source-rpms size: 6416053 @@ -1633,6 +1811,12 @@ arches: checksum: sha256:3ef9a4df767dbc5e75944b5c197d186f8b5ca8745522e07cdf1a195229d381b4 name: expat evr: 2.5.0-6.el9_8.1 + - url: https://cdn-ubi.redhat.com/content/public/ubi/dist/ubi9/9/x86_64/baseos/source/SRPMS/Packages/f/filesystem-3.16-5.el9.src.rpm + repoid: ubi-9-for-x86_64-baseos-source-rpms + size: 20486 + checksum: sha256:c795690df30c46e521372e2f649c995a2abc159b76c8ef6cd5da8a713ea17937 + name: filesystem + evr: 3.16-5.el9 - url: https://cdn-ubi.redhat.com/content/public/ubi/dist/ubi9/9/x86_64/baseos/source/SRPMS/Packages/f/findutils-4.8.0-7.el9.src.rpm repoid: ubi-9-for-x86_64-baseos-source-rpms size: 2010585 @@ -1717,6 +1901,12 @@ arches: checksum: sha256:4a5023846942905da4226503f6a9da91a66bf6c179dc21d2e4210b3371399b17 name: less evr: 590-6.el9 + - url: https://cdn-ubi.redhat.com/content/public/ubi/dist/ubi9/9/x86_64/baseos/source/SRPMS/Packages/l/libcap-2.48-10.el9_8.1.src.rpm + repoid: ubi-9-for-x86_64-baseos-source-rpms + size: 208035 + checksum: sha256:7f96d98c99f190b840985b3589183a3f1dc444e0932f256491b24d28c5031de3 + name: libcap + evr: 2.48-10.el9_8.1 - url: https://cdn-ubi.redhat.com/content/public/ubi/dist/ubi9/9/x86_64/baseos/source/SRPMS/Packages/l/libcap-ng-0.8.2-7.el9.src.rpm repoid: ubi-9-for-x86_64-baseos-source-rpms size: 470599 @@ -1801,12 +1991,24 @@ arches: checksum: sha256:43dd0fa2cd26306e2017704075e628bbe675c8731b17848df82f3b59337f1be8 name: libseccomp evr: 2.5.2-2.el9 + - url: https://cdn-ubi.redhat.com/content/public/ubi/dist/ubi9/9/x86_64/baseos/source/SRPMS/Packages/l/libselinux-3.6-3.el9.src.rpm + repoid: ubi-9-for-x86_64-baseos-source-rpms + size: 271153 + checksum: sha256:a08a84389665ef614eb6d9b06a53128eab89b650c799c0558f3ae04df97c4b13 + name: libselinux + evr: 3.6-3.el9 - url: https://cdn-ubi.redhat.com/content/public/ubi/dist/ubi9/9/x86_64/baseos/source/SRPMS/Packages/l/libsemanage-3.6-5.el9_6.src.rpm repoid: ubi-9-for-x86_64-baseos-source-rpms size: 223978 checksum: sha256:33e4ad8374bdaa1dd4b4a46b2b379d025590d80e5d666801aea4f437a9a6ccd9 name: libsemanage evr: 3.6-5.el9_6 + - url: https://cdn-ubi.redhat.com/content/public/ubi/dist/ubi9/9/x86_64/baseos/source/SRPMS/Packages/l/libsepol-3.6-3.el9.src.rpm + repoid: ubi-9-for-x86_64-baseos-source-rpms + size: 543960 + checksum: sha256:2dacf2f1c1f61562ccc5ad082939158745e5a4a572d135d4f8ff00f75e1e94df + name: libsepol + evr: 3.6-3.el9 - url: https://cdn-ubi.redhat.com/content/public/ubi/dist/ubi9/9/x86_64/baseos/source/SRPMS/Packages/l/libsigsegv-2.13-4.el9.src.rpm repoid: ubi-9-for-x86_64-baseos-source-rpms size: 473267 @@ -1921,6 +2123,12 @@ arches: checksum: sha256:7edbd87b866a3f6e3df1426d660b902e063193d6186027bf99f6d77626a43817 name: pcre evr: 8.44-4.el9 + - url: https://cdn-ubi.redhat.com/content/public/ubi/dist/ubi9/9/x86_64/baseos/source/SRPMS/Packages/p/pcre2-10.40-6.el9.src.rpm + repoid: ubi-9-for-x86_64-baseos-source-rpms + size: 1789790 + checksum: sha256:a570f7192be555222aa3704882b9199fb013a84ad4d7dcf40a93d8de2ecf6e0a + name: pcre2 + evr: 10.40-6.el9 - url: https://cdn-ubi.redhat.com/content/public/ubi/dist/ubi9/9/x86_64/baseos/source/SRPMS/Packages/p/pkgconf-1.7.3-10.el9.src.rpm repoid: ubi-9-for-x86_64-baseos-source-rpms size: 310904 @@ -1939,12 +2147,24 @@ arches: checksum: sha256:bc7a168b7275d1f9bd0f16b47029dd857ddce83fa80c3cb32eac63cb55f591f3 name: readline evr: 8.1-4.el9 + - url: https://cdn-ubi.redhat.com/content/public/ubi/dist/ubi9/9/x86_64/baseos/source/SRPMS/Packages/r/redhat-release-9.8-1.0.el9.src.rpm + repoid: ubi-9-for-x86_64-baseos-source-rpms + size: 85364 + checksum: sha256:6c3f4a1287fb76e05e49217a15a33b9c228a56fc06e96376afb37201bfbe32da + name: redhat-release + evr: 9.8-1.0.el9 - url: https://cdn-ubi.redhat.com/content/public/ubi/dist/ubi9/9/x86_64/baseos/source/SRPMS/Packages/s/sed-4.8-10.el9.src.rpm repoid: ubi-9-for-x86_64-baseos-source-rpms size: 1428416 checksum: sha256:981073f2c251395b5ae42b7ff929f743260eea9738187fbb207042f11eae7ea7 name: sed evr: 4.8-10.el9 + - url: https://cdn-ubi.redhat.com/content/public/ubi/dist/ubi9/9/x86_64/baseos/source/SRPMS/Packages/s/setup-2.13.7-10.el9.src.rpm + repoid: ubi-9-for-x86_64-baseos-source-rpms + size: 195940 + checksum: sha256:3acdbbd63bd77dd8b18210b9d597bd59ddf455ff728067638c54194ac3a8a32b + name: setup + evr: 2.13.7-10.el9 - url: https://cdn-ubi.redhat.com/content/public/ubi/dist/ubi9/9/x86_64/baseos/source/SRPMS/Packages/s/shadow-utils-4.9-16.el9.src.rpm repoid: ubi-9-for-x86_64-baseos-source-rpms size: 1713058 @@ -1963,6 +2183,12 @@ arches: checksum: sha256:74090e1b1b24041da4c39f8e04114722575564f54bd1c43162884bcebc1aecaf name: texinfo evr: 6.7-15.el9 + - url: https://cdn-ubi.redhat.com/content/public/ubi/dist/ubi9/9/x86_64/baseos/source/SRPMS/Packages/t/tzdata-2026c-1.el9_8.src.rpm + repoid: ubi-9-for-x86_64-baseos-source-rpms + size: 933774 + checksum: sha256:4cc10832b19807c03a30bd9317fb37dc811d2f13c11b1ed35af8d2efa481622f + name: tzdata + evr: 2026c-1.el9_8 - url: https://cdn-ubi.redhat.com/content/public/ubi/dist/ubi9/9/x86_64/baseos/source/SRPMS/Packages/u/util-linux-2.37.4-25.el9.src.rpm repoid: ubi-9-for-x86_64-baseos-source-rpms size: 6291867