From c61ce687686847e5916c4d47abc0dd6d2a7e1f99 Mon Sep 17 00:00:00 2001 From: ajayk Date: Fri, 30 Jun 2023 03:41:44 -0700 Subject: [PATCH] fix bad signatures --- 1.yaml | 38 ++++++ 2.yaml | 70 ++++++++++ aws-cli.yaml | 2 +- delve.yaml | 2 +- ...tro-kubernetes-csi-livenessprobe-1.23.yaml | 50 +++++++ fluent-bit.yaml | 2 +- goreleaser.yaml | 2 +- gtk-3.0.yaml | 118 +++++++++++++++++ kaniko.yaml | 2 +- kubernetes-1.24.yaml | 2 +- kubernetes-1.25.yaml | 2 +- kubernetes-1.26.yaml | 2 +- kubernetes-1.27.yaml | 2 +- l2.yaml | 123 ++++++++++++++++++ libvorbis.yaml | 2 +- libzip.yaml | 41 ++++++ mdbook.yaml | 2 +- opus.yaml | 2 +- p.yaml | 64 +++++++++ spark-operator copy.yaml | 48 +++++++ spark-test.yaml | 40 ++++++ spirv-headers.yaml | 2 +- syft.yaml | 2 +- test.yaml | 37 ++++++ withdrawn-packages.txt | 22 +++- 25 files changed, 664 insertions(+), 15 deletions(-) create mode 100644 1.yaml create mode 100644 2.yaml create mode 100644 eks-distro-kubernetes-csi-livenessprobe-1.23.yaml create mode 100644 gtk-3.0.yaml create mode 100644 l2.yaml create mode 100644 libzip.yaml create mode 100644 p.yaml create mode 100644 spark-operator copy.yaml create mode 100644 spark-test.yaml create mode 100755 test.yaml diff --git a/1.yaml b/1.yaml new file mode 100644 index 00000000000..1248e9ef388 --- /dev/null +++ b/1.yaml @@ -0,0 +1,38 @@ +package: + name: newrelic-prometheus-configurator + version: 1.4.0 + epoch: 2 + description: New Relic Prometheus Configurator + target-architecture: + - all + copyright: + - license: Apache-2.0 + +environment: + contents: + packages: + - busybox + - ca-certificates-bundle + - build-base + - go + - git + +pipeline: + - uses: git-checkout + with: + repository: https://github.com/newrelic/newrelic-prometheus-configurator + tag: v${{package.version}} + expected-commit: df4034f801f4f254243a38b110cb1b0af6b0aca5 + + - runs: | + GOOS=$(go env GOOS) + GOARCH=$(go env GOARCH) + make GOOS=${GOOS} GOARCH=${GOARCH} build + install -Dm755 ./bin/prometheus-configurator-${GOOS}-${GOARCH} "${{targets.destdir}}"/usr/bin/prometheus-configurator +update: + enabled: true + github: + identifier: newrelic/newrelic-prometheus-configurator + strip-prefix: v + use-tag: true + tag-filter: v diff --git a/2.yaml b/2.yaml new file mode 100644 index 00000000000..29dc1467b59 --- /dev/null +++ b/2.yaml @@ -0,0 +1,70 @@ +package: + name: bazel-6 + version: 6.2.1 + epoch: 0 + description: Bazel is an open-source build and test tool + copyright: + - license: Apache-2.0 + +environment: + contents: + packages: + - busybox + - ca-certificates-bundle + - build-base + - python3 + - zip + - bash + - gcc-6 + - libstdc++-6 + - libstdc++-6-dev + - openjdk-11 + +pipeline: + - uses: git-checkout + with: + repository: https://github.com/envoyproxy/envoy + tag: v${{package.version}} + expected-commit: c7e8e7356d3a969c1b8e4e1f2687699acd91c6a1 + destination: envoy + + - runs: | + export JAVA_HOME=/usr/lib/jvm/openjdk + mkdir -p .cache/bazel/_bazel_root + + cd envoy + + ./bazel/setup_clang.sh /usr + echo "build --config=clang" >> user.bazelrc + + bazel build --verbose_failures -c opt envoy + + mkdir -p ${{targets.destdir}}/usr/bin/ + mv bazel-bin/source/exe/envoy-static ${{targets.destdir}}/usr/bin/envoy + + - uses: strip + +subpackages: + - name: envoy-oci-entrypoint + description: Entrypoint for using Envoy in OCI containers + dependencies: + runtime: + - busybox + pipeline: + - runs: | + mkdir -p ${{targets.subpkgdir}}/var/lib/envoy/init + cp envoy/ci/docker-entrypoint.sh ${{targets.subpkgdir}}/var/lib/envoy/init/envoy-entrypoint.sh + chmod +x ${{targets.subpkgdir}}/var/lib/envoy/init/envoy-entrypoint.sh + + - name: envoy-config + description: Default Envoy configuration + pipeline: + - runs: | + mkdir -p ${{targets.subpkgdir}}/etc/envoy + cp envoy/configs/envoyproxy_io_proxy.yaml ${{targets.subpkgdir}}/etc/envoy/envoy.yaml + +update: + enabled: true + github: + identifier: envoyproxy/envoy + strip-prefix: v diff --git a/aws-cli.yaml b/aws-cli.yaml index 9a338180210..7fe4b6c0eb5 100644 --- a/aws-cli.yaml +++ b/aws-cli.yaml @@ -1,7 +1,7 @@ package: name: aws-cli version: 1.27.164 - epoch: 0 + epoch: 1 description: "Universal Command Line Interface for Amazon Web Services" copyright: - license: Apache-2.0 diff --git a/delve.yaml b/delve.yaml index 4a12a485217..0c940540600 100644 --- a/delve.yaml +++ b/delve.yaml @@ -1,7 +1,7 @@ package: name: delve version: 1.21.0 - epoch: 0 + epoch: 1 description: Delve is a debugger for the Go programming language. copyright: - license: MIT diff --git a/eks-distro-kubernetes-csi-livenessprobe-1.23.yaml b/eks-distro-kubernetes-csi-livenessprobe-1.23.yaml new file mode 100644 index 00000000000..0ec5657c562 --- /dev/null +++ b/eks-distro-kubernetes-csi-livenessprobe-1.23.yaml @@ -0,0 +1,50 @@ +package: + name: eks-distro-kubernetes-csi-livenessprobe-1.23 + version: 1.23.21 + epoch: 3 + description: A sidecar container that can be included in a CSI plugin pod to enable integration with Kubernetes Liveness Probe. + copyright: + - license: Apache-2.0 + dependencies: + provides: + - eks-distro-kubernetes-csi-livenessprobe=1.23 + +var-transforms: + - from: ${{package.version}} + match: \.(\d+)$ + replace: -eks-$1 + to: with-eks-package-version + - from: ${{vars.with-eks-package-version}} + match: \. + replace: '-' + to: mangled-package-version + +environment: + contents: + keyring: + - https://packages.wolfi.dev/os/wolfi-signing.rsa.pub + repositories: + - https://packages.wolfi.dev/os + packages: + - ca-certificates-bundle + - busybox + - go + +pipeline: + - uses: git-checkout + with: + repository: https://github.com/aws/eks-distro + tag: v${{vars.mangled-package-version}} + expected-commit: 3ad41b596f2454cd47fc7909f5e5eac1043d4dda + + - runs: | + make makes-binaries-kubernetes-csi_livenessprobe + mkdir -p "${{targets.destdir}}"/usr/bin + ARCH=$(go env GOARCH) + OS=$(go env GOOS) + cp ./projects/kubernetes-csi/livenessprobe/_output/1-26/bin/livenessprobe/${OS}-${ARCH}/livenessprobe "${{targets.destdir}}"/usr/bin/livenessprobe + + - uses: strip + +update: + manual: true # we need to manually update because melange bump doesn't yet handle pipeline mutations for var transforms diff --git a/fluent-bit.yaml b/fluent-bit.yaml index 88264fc646a..1b7c33e832e 100644 --- a/fluent-bit.yaml +++ b/fluent-bit.yaml @@ -1,7 +1,7 @@ package: name: fluent-bit version: 2.1.6 - epoch: 0 + epoch: 1 description: Fast and Lightweight Log processor and forwarder copyright: - license: Apache-2.0 diff --git a/goreleaser.yaml b/goreleaser.yaml index 2f8a8c006fb..5c08063406b 100644 --- a/goreleaser.yaml +++ b/goreleaser.yaml @@ -1,7 +1,7 @@ package: name: goreleaser version: 1.19.1 - epoch: 0 + epoch: 1 description: Deliver Go binaries as fast and easily as possible copyright: - license: Apache-2.0 diff --git a/gtk-3.0.yaml b/gtk-3.0.yaml new file mode 100644 index 00000000000..9960e3f2387 --- /dev/null +++ b/gtk-3.0.yaml @@ -0,0 +1,118 @@ +package: + name: gtk-3.0 + version: 3.24.38 + epoch: 0 + description: The GTK+ Toolkit (v3) + copyright: + - license: LGPL-2.1-or-later + +# creates a new var that contains only the major and minor version to be used in the fetch URL +# e.g. 2.46.0 will create a new var mangled-package-version=2.46 +var-transforms: + - from: ${{package.version}} + match: (\d+\.\d+)\.\d+ + replace: $1 + to: mangled-package-version + +environment: + contents: + packages: + - busybox + - ca-certificates-bundle + - build-base + - autoconf + - automake + - git + - cmake + - ninja + - harfbuzz-dev + - mesa-dev + - gtk-doc + - libtool + - shared-mime-info + - at-spi2-core-dev + - gdk-pixbuf-dev + - glib-dev + - libepoxy-dev + - libxext-dev + - libxi-dev + - libxinerama-dev + - libxkbcommon + - libxkbcommon-dev + - libatk-bridge-2.0 + - libxtst-dev + - dbus-dev + - cairo-dev + - cups-dev + - expat-dev + - fontconfig-dev + - gettext-dev + - gobject-introspection-dev + - hicolor-icon-theme + - iso-codes-dev + - libice-dev + - libx11-dev + - libxcomposite-dev + - libxcursor-dev + - libxdamage-dev + - libxfixes-dev + - libxrandr-dev + - meson + - pango-dev + - tiff-dev + - wayland-dev + - wayland-protocols + - zlib-dev + +pipeline: + - uses: fetch + with: + uri: https://download.gnome.org/sources/gtk+/${{vars.mangled-package-version}}/gtk+-${{package.version}}.tar.xz + expected-sha512: e99ec10959191b55013fce37e83f0e85bf36597db101e324081479792a2047d032cf0d213d69c02eeb4b7cd6d56d6489b7b2a60904b2bd7af23ea1b9c5a79528 + + - uses: meson/configure + with: + opts: | + -Db_lto=true \ + -Dman=true \ + -Dgtk_doc=false \ + -Dbroadway_backend=true + + - uses: meson/compile + + - uses: meson/install + + - uses: strip + +subpackages: + - name: gtk-3.0-dev + pipeline: + - uses: split/dev + dependencies: + runtime: + - shared-mime-info + - at-spi2-core-dev + - gdk-pixbuf-dev + - glib-dev + - libepoxy-dev + - libxext-dev + - libxi-dev + - libxinerama-dev + - libxkbcommon-dev + - wayland-dev + description: gtk+3.0 dev + + - name: gtk-3.0-doc + pipeline: + - uses: split/manpages + description: gtk+3.0 manpages + + - name: gtk-3.0-lang + pipeline: + - uses: split/locales + description: gtk+3.0 locales + +update: + enabled: true + release-monitor: + identifier: 311549 diff --git a/kaniko.yaml b/kaniko.yaml index 95dbd618b11..f0b6653034d 100644 --- a/kaniko.yaml +++ b/kaniko.yaml @@ -1,7 +1,7 @@ package: name: kaniko version: 1.12.1 - epoch: 0 + epoch: 1 description: Build Container Images In Kubernetes copyright: - license: Apache-2.0 diff --git a/kubernetes-1.24.yaml b/kubernetes-1.24.yaml index 858dd66b679..df069698658 100644 --- a/kubernetes-1.24.yaml +++ b/kubernetes-1.24.yaml @@ -1,7 +1,7 @@ package: name: kubernetes-1.24 version: 1.24.15 - epoch: 0 + epoch: 1 description: Production-Grade Container Scheduling and Management copyright: - license: Apache-2.0 diff --git a/kubernetes-1.25.yaml b/kubernetes-1.25.yaml index 3b927b585e5..e4940dfc924 100644 --- a/kubernetes-1.25.yaml +++ b/kubernetes-1.25.yaml @@ -1,7 +1,7 @@ package: name: kubernetes-1.25 version: 1.25.11 - epoch: 0 + epoch: 1 description: Production-Grade Container Scheduling and Management copyright: - license: Apache-2.0 diff --git a/kubernetes-1.26.yaml b/kubernetes-1.26.yaml index d4fb1ed378f..8c6651b1700 100644 --- a/kubernetes-1.26.yaml +++ b/kubernetes-1.26.yaml @@ -1,7 +1,7 @@ package: name: kubernetes-1.26 version: 1.26.6 - epoch: 0 + epoch: 1 description: Production-Grade Container Scheduling and Management copyright: - license: Apache-2.0 diff --git a/kubernetes-1.27.yaml b/kubernetes-1.27.yaml index c03585353f0..4f8c88f145b 100644 --- a/kubernetes-1.27.yaml +++ b/kubernetes-1.27.yaml @@ -1,7 +1,7 @@ package: name: kubernetes-1.27 version: 1.27.3 - epoch: 2 + epoch: 3 description: Production-Grade Container Scheduling and Management copyright: - license: Apache-2.0 diff --git a/l2.yaml b/l2.yaml new file mode 100644 index 00000000000..049f6bc1cc1 --- /dev/null +++ b/l2.yaml @@ -0,0 +1,123 @@ +# Copyright 1999-2023 Gentoo Authors +# Distributed under the terms of the GNU General Public License v2 + +EAPI=8 + +PYTHON_COMPAT=( python3_{9..11} ) +inherit cmake-multilib flag-o-matic llvm llvm.org python-any-r1 \ + toolchain-funcs + +DESCRIPTION="C++ runtime stack unwinder from LLVM" +HOMEPAGE="https://llvm.org/docs/ExceptionHandling.html" + +LICENSE="Apache-2.0-with-LLVM-exceptions || ( UoI-NCSA MIT )" +SLOT="0" +KEYWORDS="~amd64 ~arm ~arm64 ~loong ~ppc ~ppc64 ~riscv ~sparc ~x86 ~x64-macos" +IUSE="+clang debug static-libs test" +REQUIRED_USE="test? ( clang )" +RESTRICT="!test? ( test )" + +RDEPEND=" + !sys-libs/libunwind +" +DEPEND=" + sys-devel/llvm:${LLVM_MAJOR} +" +BDEPEND=" + clang? ( + sys-devel/clang:${LLVM_MAJOR} + ) + !test? ( + ${PYTHON_DEPS} + ) + test? ( + $(python_gen_any_dep 'dev-python/lit[${PYTHON_USEDEP}]') + ) +" + +LLVM_COMPONENTS=( runtimes libunwind libcxx llvm/cmake cmake ) +LLVM_TEST_COMPONENTS=( libcxxabi llvm/utils/llvm-lit ) +llvm.org_set_globals + +python_check_deps() { + use test || return 0 + python_has_version "dev-python/lit[${PYTHON_USEDEP}]" +} + +pkg_setup() { + LLVM_MAX_SLOT=${LLVM_MAJOR} llvm_pkg_setup + python-any-r1_pkg_setup +} + +multilib_src_configure() { + local libdir=$(get_libdir) + + # https://github.com/llvm/llvm-project/issues/56825 + # also separately bug #863917 + filter-lto + + if use clang; then + local -x CC=${CHOST}-clang + local -x CXX=${CHOST}-clang++ + strip-unsupported-flags + fi + + # link to compiler-rt + # https://github.com/gentoo/gentoo/pull/21516 + local use_compiler_rt=OFF + [[ $(tc-get-c-rtlib) == compiler-rt ]] && use_compiler_rt=ON + + local mycmakeargs=( + -DCMAKE_CXX_COMPILER_TARGET="${CHOST}" + -DPython3_EXECUTABLE="${PYTHON}" + -DLLVM_ENABLE_RUNTIMES="libunwind" + -DLLVM_LIBDIR_SUFFIX=${libdir#lib} + -DLLVM_INCLUDE_TESTS=OFF + -DLIBUNWIND_ENABLE_ASSERTIONS=$(usex debug) + -DLIBUNWIND_ENABLE_STATIC=$(usex static-libs) + -DLIBUNWIND_INCLUDE_TESTS=$(usex test) + -DLIBUNWIND_INSTALL_HEADERS=ON + + # support non-native unwinding; given it's small enough, + # enable it unconditionally + -DLIBUNWIND_ENABLE_CROSS_UNWINDING=ON + + # avoid dependency on libgcc_s if compiler-rt is used + -DLIBUNWIND_USE_COMPILER_RT=${use_compiler_rt} + ) + if use test; then + mycmakeargs+=( + -DLLVM_ENABLE_RUNTIMES="libunwind;libcxxabi;libcxx" + -DLLVM_EXTERNAL_LIT="${EPREFIX}/usr/bin/lit" + -DLLVM_LIT_ARGS="$(get_lit_flags)" + -DLIBUNWIND_LIBCXX_PATH="${WORKDIR}/libcxx" + + -DLIBCXXABI_LIBDIR_SUFFIX= + -DLIBCXXABI_ENABLE_SHARED=OFF + -DLIBCXXABI_ENABLE_STATIC=ON + -DLIBCXXABI_USE_LLVM_UNWINDER=ON + -DLIBCXXABI_INCLUDE_TESTS=OFF + + -DLIBCXX_LIBDIR_SUFFIX= + -DLIBCXX_ENABLE_SHARED=OFF + -DLIBCXX_ENABLE_STATIC=ON + -DLIBCXX_CXX_ABI=libcxxabi + -DLIBCXX_ENABLE_ABI_LINKER_SCRIPT=OFF + -DLIBCXX_HAS_MUSL_LIBC=$(usex elibc_musl) + -DLIBCXX_HAS_GCC_S_LIB=OFF + -DLIBCXX_INCLUDE_TESTS=OFF + -DLIBCXX_INCLUDE_BENCHMARKS=OFF + ) + fi + + cmake_src_configure +} + +multilib_src_test() { + local -x LIT_PRESERVES_TMP=1 + cmake_build check-unwind +} + +multilib_src_install() { + DESTDIR=${D} cmake_build install-unwind +} diff --git a/libvorbis.yaml b/libvorbis.yaml index 77bbef25e4c..f23353358ee 100644 --- a/libvorbis.yaml +++ b/libvorbis.yaml @@ -1,7 +1,7 @@ package: name: libvorbis version: 1.3.7 - epoch: 1 + epoch: 2 description: Vorbis codec library copyright: - license: BSD-3-Clause diff --git a/libzip.yaml b/libzip.yaml new file mode 100644 index 00000000000..579ecec96c5 --- /dev/null +++ b/libzip.yaml @@ -0,0 +1,41 @@ +package: + name: libzip + version: 1.10.0 + epoch: 0 + description: "A C library for reading, creating, and modifying zip archives." + copyright: + - license: BSD-3-Clause + dependencies: + runtime: + - zlib + - bzip2 + +environment: + contents: + packages: + - build-base + - ca-certificates-bundle + - openssl + - busybox + - zlib-dev + - bzip2-dev + +pipeline: + - uses: fetch + with: + uri: https://libzip.org/download/libzip-${{package.version}}.tar.gz + expected-sha256: 52a60b46182587e083b71e2b82fcaaba64dd5eb01c5b1f1bc71069a3858e40fe + + - uses: cmake/configure + with: + output-dir: $HOME + + - uses: cmake/build + with: + output-dir: $HOME + + - uses: cmake/install + with: + output-dir: $HOME + + - uses: strip \ No newline at end of file diff --git a/mdbook.yaml b/mdbook.yaml index 49f01f1f762..727cec42a41 100644 --- a/mdbook.yaml +++ b/mdbook.yaml @@ -1,7 +1,7 @@ package: name: mdbook version: 0.4.31 - epoch: 0 + epoch: 1 description: "Create book from markdown files. Like Gitbook but implemented in Rust." copyright: - license: MPL-2.0 diff --git a/opus.yaml b/opus.yaml index a38f1e81bc0..7cbc3cf2936 100644 --- a/opus.yaml +++ b/opus.yaml @@ -1,7 +1,7 @@ package: name: opus version: 1.4 - epoch: 1 + epoch: 2 description: Codec designed for interactive speech and audio transmission over the Internet copyright: - license: BSD-3-Clause diff --git a/p.yaml b/p.yaml new file mode 100644 index 00000000000..5437c6681cd --- /dev/null +++ b/p.yaml @@ -0,0 +1,64 @@ +package: + name: kyverno-policy-reporter-ui-1.7 + version: 1.7.1 + epoch: 0 + description: Policy Reporter UI + copyright: + - license: Apache-2.0 + +environment: + contents: + repositories: + - https://packages.wolfi.dev/os + keyring: + - https://packages.wolfi.dev/os/wolfi-signing.rsa.pub + packages: + - wolfi-baselayout + - busybox + - build-base + - ca-certificates-bundle + - curl + - bash + - git + - nodejs-16 + - cmake + - python3 + +pipeline: + - uses: git-checkout + with: + repository: https://github.com/kyverno/policy-reporter-ui + tag: v${{package.version}} + expected-commit: 192984cf3f9728868d1dc9b0398fceb53ca11bf9 + + - runs: | + npm audit fix --force + npm set progress=false + npm config set depth 0 + npm install + npm run generate + + mkdir -p ${{targets.destdir}}/app + cp -R ./dist ${{targets.destdir}}/app/dist + + # Mitigate GHSA-vvpx-j8f3-3w6h + go get golang.org/x/net@v0.7.0 + go mo tidy + + mkdir -p ${{targets.destdir}}/usr/bin + LD_FLAGS='-s -w + CGO_ENABLED=0 go build -ldflags="${LD_FLAGS}" -o ${{targets.destdir}}/usr/bin/policyreporter-ui -v + + - uses: strip + +subpackages: + - name: kyverno/policy-reporter-ui-compat + description: compatibility symlinks package for policyreporter-ui Dockerfile + pipeline: + - runs: | + # Symlink the binary from usr/bin to /app/ + mkdir -p ${{targets.subpkgdir}}/app + ln -sf /usr/bin/policyreporter-ui ${{targets.subpkgdir}}/app/policyreporter-ui + +update: + enabled: false diff --git a/spark-operator copy.yaml b/spark-operator copy.yaml new file mode 100644 index 00000000000..8d8cbdbd66f --- /dev/null +++ b/spark-operator copy.yaml @@ -0,0 +1,48 @@ +package: + name: node-problem-detector + version: 0.8.13 + epoch: 0 + description: This is a place for various problem detectors running on the Kubernetes nodes. + copyright: + - paths: + - "*" + attestation: TODO + license: Apache-2.0 + +environment: + contents: + packages: + - wolfi-baselayout + - wolfi-base + - ca-certificates-bundle + - build-base + - git + - go + - make + - gcc + - clang-15 + +pipeline: + - uses: git-checkout + with: + repository: https://github.com/kubernetes/node-problem-detector + tag: v${{package.version}} + expected-commit: 6e57ca6e6c0135ff4a73788e28563476ed9c9334 + + - runs: | + mkdir -p ${{targets.destdir}}/usr/bin + GOOS=$(go env GOOS) GOARCH=$(go env GOARCH) CGO_ENABLED=1 GO111MODULE=on \ + CC=gcc go build \ + -mod vendor \ + -o output/$(go env GOOS)_$(go env GOARCH)/bin/node-problem-detector \ + -ldflags '-X k8s.io/node-problem-detector/pkg/version.version=v0.8.13' \ + ./cmd/nodeproblemdetector + + +update: + enabled: true + github: + identifier: GoogleCloudPlatform/spark-on-k8s-operator + strip-prefix: spark-operator-chart- + use-tag: true + tag-filter: "spark-operator-chart-" diff --git a/spark-test.yaml b/spark-test.yaml new file mode 100644 index 00000000000..4f5fc2d12fd --- /dev/null +++ b/spark-test.yaml @@ -0,0 +1,40 @@ +apiVersion: "sparkoperator.k8s.io/v1beta2" +kind: SparkApplication +metadata: + name: spark-pi + namespace: default +spec: + type: Scala + mode: cluster + image: "gcr.io/spark-operator/spark:v3.1.1" + imagePullPolicy: Always + mainClass: org.apache.spark.examples.SparkPi + mainApplicationFile: "local:///opt/spark/examples/jars/spark-examples_2.12-3.1.1.jar" + sparkVersion: "3.1.1" + restartPolicy: + type: Never + volumes: + - name: "test-volume" + hostPath: + path: "/tmp" + type: Directory + driver: + cores: 1 + coreLimit: "1200m" + memory: "512m" + labels: + version: 3.1.1 + serviceAccount: spark + volumeMounts: + - name: "test-volume" + mountPath: "/tmp" + executor: + cores: 1 + instances: 1 + memory: "512m" + labels: + version: 3.1.1 + volumeMounts: + - name: "test-volume" + mountPath: "/tmp" + diff --git a/spirv-headers.yaml b/spirv-headers.yaml index 409c411525c..069c441d0fe 100644 --- a/spirv-headers.yaml +++ b/spirv-headers.yaml @@ -2,7 +2,7 @@ package: name: spirv-headers version: 1.3.250.1 - epoch: 0 + epoch: 1 description: Machine-readable files for the SPIR-V Registry copyright: - license: GPL-3.0-or-later diff --git a/syft.yaml b/syft.yaml index 7a70cf5fc5d..01d523718b9 100644 --- a/syft.yaml +++ b/syft.yaml @@ -1,7 +1,7 @@ package: name: syft version: 0.84.1 - epoch: 0 + epoch: 1 description: CLI tool and library for generating a Software Bill of Materials from container images and filesystems copyright: - license: Apache-2.0 diff --git a/test.yaml b/test.yaml new file mode 100755 index 00000000000..51317fba02a --- /dev/null +++ b/test.yaml @@ -0,0 +1,37 @@ +contents: + repositories: + - https://packages.wolfi.dev/os + keyring: + - https://packages.wolfi.dev/os/wolfi-signing.rsa.pub + packages: + - ca-certificates-bundle + - wolfi-baselayout + - guacamole-server + - busybox + - ttf-dejavu + - netcat-openbsd + +environment: + LC_ALL: C.UTF-8 + LD_LIBRARY_PATH: /usr/lib + +cmd: /usr/sbin/guacd -b 0.0.0.0 -L info -f + +accounts: + groups: + - groupname: guacd + gid: 1000 + users: + - username: guacd + uid: 1000 + run-as: guacd + recursive: true + +archs: + - x86_64 + - aarch64 + +annotations: + "org.opencontainers.image.authors": "Chainguard Team https://www.chainguard.dev/" + "org.opencontainers.image.url": https://edu.chainguard.dev/chainguard/chainguard-images/reference/guacamole-server/ + "org.opencontainers.image.source": https://github.com/chainguard-images/images/tree/main/images/guacamole-server diff --git a/withdrawn-packages.txt b/withdrawn-packages.txt index da8dca9f6a6..e65fb40baf1 100644 --- a/withdrawn-packages.txt +++ b/withdrawn-packages.txt @@ -138,4 +138,24 @@ boost-static-1.82.0-r0.apk cdparanoia-10.2-r0.apk cdparanoia-dev-10.2-r0.apk cdparanoia-doc-10.2-r0.apk -cdparanoia-libs-10.2-r0.apk \ No newline at end of file +cdparanoia-libs-10.2-r0.apk +kaniko-1.12.1-r0.apk +goreleaser-1.19.1-r0.apk +syft-0.84.1-r0.apk +kubernetes-1.25-1.25.11-r0.apk +spirv-headers-1.3.250.1-r0.apk +opus-1.4-r1.apk +mdbook-0.4.31-r0.apk +fluent-bit-2.1.6-r0.apk +clickhouse-23.5.4.25-r0.apk +kubernetes-1.24-1.24.15-r0.apk +libvorbis-1.3.7-r1.apk +aws-cli-1.27.164-r0.apk +gst-plugins-base-1.22.4-r0.apk +kubectl-1.27-1.27.3-r2.apk +kubernetes-1.26-1.26.6-r0.apk +kubernetes-1.27-1.27.3-r2.apk +guacamole-server-1.5.2-r2.apk +libguac-client-vnc-1.5.2-r2.apk +erlang-25-dev-25.3.2.3-r0.apk +delve-1.21.0-r0.apk