Index | index by Group | index by Distribution | index by Vendor | index by creation date | index by Name | Mirrors | Help | Search |
Name: umoci | Distribution: openSUSE Tumbleweed |
Version: 0.6.0 | Vendor: openSUSE |
Release: 1.1 | Build date: Wed Oct 15 11:05:55 2025 |
Group: System/Management | Build host: reproducible |
Size: 9211969 | Source RPM: umoci-0.6.0-1.1.src.rpm |
Packager: https://bugs.opensuse.org | |
Url: https://umo.ci | |
Summary: Open Container Image manipulation tool |
umoci modifies Open Container images. umoci is a manipulation tool for OCI images. In particular, it is a more complete alternative to oci-image-tools provided by the OCI.
Apache-2.0
* Wed Oct 15 2025 Aleksa Sarai <asarai@suse.com> - Update to umoci v0.6.0. Upstream changelog is available from <https://github.com/opencontainers/umoci/releases/tag/v0.6.0> bsc#1252025 * umoci now has automatic SOURCE_DATE_EPOCH support, improving the reproducibility of generated images. * "umoci stat" now provides more information about theimage. * "umoci config" now supports --platform.variant (architecture variants) which resolves issues with images on ARM (on ARM systems, "umoci new" will auto-fill the host CPU variant). - Remove upstreamed patches: - 0001-oci-config-gracefully-fallback-if-etc-resolv.conf-do.patch - Bump to Go >= 1.24. - Switch to "%autosetup -p1". * Mon Sep 08 2025 Aleksa Sarai <asarai@suse.com> - Add smoke-test for "umoci --version" in %check. * Sat Sep 06 2025 Aleksa Sarai <asarai@suse.com> - Add %check section to run "go test". - Add backport of <https://github.com/opencontainers/umoci/pull/617> to let "go test" run in OBS (where /etc/resolv.conf doesn't exist). + 0001-oci-config-gracefully-fallback-if-etc-resolv.conf-do.patch * Sat Sep 06 2025 Aleksa Sarai <asarai@suse.com> - Update to umoci v0.5.1. Upstream changelog is available from <https://github.com/opencontainers/umoci/releases/tag/v0.5.1> bsc#1249450 * For images with an empty index.json, umoci will no longer incorrectly set the manifests entry to null. * umoci will now produce an error for images with negative-sized descriptors, based on recent discussions in the upstream image-spec. * Use go:embed to fill umoci --version information from VERSION. * Stop using oci-image-tools for integration tests, instead use some smoke tests and the docker-library-maintained meta-scripts. This release is dedicated to our cat Yuki who sadly passed away on Friday. Most of the code I've written in the past four years was written with him purring away on my chest, and he was the most loving cat I've ever met. Rest in peace, little buddy. I hope you enjoyed your time with us, and I'll always keep you in my heart. * Wed May 21 2025 Aleksa Sarai <asarai@suse.com> - Update to umoci v0.5.0. Upstream changelog is available from <https://github.com/opencontainers/umoci/releases/tag/v0.5.0> bsc#1243388 A security flaw was found in the OCI image-spec, where it is possible to cause a blob with one media-type to be interpreted as a different media-type. As umoci is not a registry nor does it handle signatures, this vulnerability had no real impact on umoci but for safety we implemented the now-recommended media-type embedding and verification. CVE-2021-41190 Other changes in this release: * Several large reworks and API-related changes to the umoci's overlayfs support. This is only available to Go API users. * The runtime-spec config.json generated by umoci is updated to be more modern and work properly with modern runc versions. * The default gzip compression blocksize has been adjusted to match Docker. * zstd-compressed images are now fully supported. Users can explcitily request the compression algorithm for newly-generated layers with the - -compress option. - Remove upstreamed patches: - 0001-makefile-fix-bad-build-flags.patch - Update umoci.keyring from upstream to include new signing keys. * Tue Feb 20 2024 Dominique Leuenberger <dimstar@opensuse.org> - Use %patch -P N instead of deprecated %patchN. * Mon Mar 27 2023 Frederic Crozat <fcrozat@suse.com> - Drop explicit BuildRequires on go1.14, no longer needed. * Tue Apr 06 2021 Aleksa Sarai <asarai@suse.com> - Update to umoci v0.4.7. CVE-2021-29136 bsc#1184147 A security flaw was found in umoci, and has been fixed in this release. If umoci was used to unpack a malicious image (using either umoci unpack or umoci raw unpack) that contained a symlink entry for /., umoci would apply subsequent layers to the target of the symlink (resolved on the host filesystem). This means that if you ran umoci as root, a malicious image could overwrite any file on the system (assuming you didn't have any other access control restrictions). Thanks to Robin Peraglie from Cure53 for discovering this bug. CVE-2021-29136 Other changes in this release: * umoci now compiles on FreeBSD and appears to work, with the notable limitation that it currently refuses to extract non-Linux images on any platform (this will be fixed in a future release). * Initial fuzzer implementations for oss-fuzz. * umoci will now read all trailing data from image layers, to combat the existence of some image generators that appear to append NUL bytes to the end of the gzip stream (which would previously cause checksum failures because we didn't read nor checksum the trailing junk bytes). However, umoci will still not read past the descriptor length. * umoci now ignores all overlayfs xattrs during unpack and repack operations, to avoid causing issues when packing a raw overlayfs directory. * For details, see CHANGELOG.md in the package. - Backport patch to fix KIWI which depends on umoci having sane output from "umoci --version". <https://github.com/opencontainers/umoci/pull/369> + 0001-makefile-fix-bad-build-flags.patch - Remove upstreamed patches: - CVE-2021-29136.patch * Thu Apr 01 2021 Aleksa Sarai <asarai@suse.com> - Re-disable s390 builds. * Tue Mar 30 2021 Aleksa Sarai <asarai@suse.com> [This was only ever released in Leap and SLES.] - Add fix for CVE-2021-29136. bsc#1184147 + CVE-2021-29136.patch
/usr/bin/umoci /usr/share/doc/packages/umoci /usr/share/doc/packages/umoci/CHANGELOG.md /usr/share/doc/packages/umoci/README.md /usr/share/doc/packages/umoci/man /usr/share/doc/packages/umoci/man/.gitignore /usr/share/doc/packages/umoci/man/umoci-config.1 /usr/share/doc/packages/umoci/man/umoci-config.1.md /usr/share/doc/packages/umoci/man/umoci-gc.1 /usr/share/doc/packages/umoci/man/umoci-gc.1.md /usr/share/doc/packages/umoci/man/umoci-init.1 /usr/share/doc/packages/umoci/man/umoci-init.1.md /usr/share/doc/packages/umoci/man/umoci-insert.1 /usr/share/doc/packages/umoci/man/umoci-insert.1.md /usr/share/doc/packages/umoci/man/umoci-list.1 /usr/share/doc/packages/umoci/man/umoci-list.1.md /usr/share/doc/packages/umoci/man/umoci-ls.1 /usr/share/doc/packages/umoci/man/umoci-ls.1.md /usr/share/doc/packages/umoci/man/umoci-new.1 /usr/share/doc/packages/umoci/man/umoci-new.1.md /usr/share/doc/packages/umoci/man/umoci-raw-add-layer.1 /usr/share/doc/packages/umoci/man/umoci-raw-add-layer.1.md /usr/share/doc/packages/umoci/man/umoci-raw-config.1 /usr/share/doc/packages/umoci/man/umoci-raw-config.1.md /usr/share/doc/packages/umoci/man/umoci-raw-runtime-config.1 /usr/share/doc/packages/umoci/man/umoci-raw-runtime-config.1.md /usr/share/doc/packages/umoci/man/umoci-raw-unpack.1 /usr/share/doc/packages/umoci/man/umoci-raw-unpack.1.md /usr/share/doc/packages/umoci/man/umoci-raw.1 /usr/share/doc/packages/umoci/man/umoci-raw.1.md /usr/share/doc/packages/umoci/man/umoci-remove.1 /usr/share/doc/packages/umoci/man/umoci-remove.1.md /usr/share/doc/packages/umoci/man/umoci-repack.1 /usr/share/doc/packages/umoci/man/umoci-repack.1.md /usr/share/doc/packages/umoci/man/umoci-rm.1 /usr/share/doc/packages/umoci/man/umoci-rm.1.md /usr/share/doc/packages/umoci/man/umoci-stat.1 /usr/share/doc/packages/umoci/man/umoci-stat.1.md /usr/share/doc/packages/umoci/man/umoci-tag.1 /usr/share/doc/packages/umoci/man/umoci-tag.1.md /usr/share/doc/packages/umoci/man/umoci-unpack.1 /usr/share/doc/packages/umoci/man/umoci-unpack.1.md /usr/share/doc/packages/umoci/man/umoci.1 /usr/share/doc/packages/umoci/man/umoci.1.md /usr/share/doc/packages/umoci/site /usr/share/doc/packages/umoci/site/.gitignore /usr/share/doc/packages/umoci/site/_index.md /usr/share/doc/packages/umoci/site/advanced /usr/share/doc/packages/umoci/site/advanced/_index.md /usr/share/doc/packages/umoci/site/advanced/workflow-optimisation.md /usr/share/doc/packages/umoci/site/meta /usr/share/doc/packages/umoci/site/meta/_index.md /usr/share/doc/packages/umoci/site/meta/changelog.md /usr/share/doc/packages/umoci/site/meta/contributing.md /usr/share/doc/packages/umoci/site/meta/governance.md /usr/share/doc/packages/umoci/site/meta/releases.md /usr/share/doc/packages/umoci/site/quick-start /usr/share/doc/packages/umoci/site/quick-start/_index.md /usr/share/doc/packages/umoci/site/quick-start/creating-an-image.md /usr/share/doc/packages/umoci/site/quick-start/garbage-collection.md /usr/share/doc/packages/umoci/site/quick-start/getting-an-image.md /usr/share/doc/packages/umoci/site/quick-start/rootless.md /usr/share/doc/packages/umoci/site/quick-start/workflow.md /usr/share/doc/packages/umoci/site/reference /usr/share/doc/packages/umoci/site/reference/_index.md /usr/share/doc/packages/umoci/site/reference/architecture.md /usr/share/doc/packages/umoci/site/reference/roadmap.md /usr/share/doc/packages/umoci/site/reference/security.md /usr/share/licenses/umoci /usr/share/licenses/umoci/COPYING /usr/share/man/man1/umoci-config.1.gz /usr/share/man/man1/umoci-gc.1.gz /usr/share/man/man1/umoci-init.1.gz /usr/share/man/man1/umoci-insert.1.gz /usr/share/man/man1/umoci-list.1.gz /usr/share/man/man1/umoci-ls.1.gz /usr/share/man/man1/umoci-new.1.gz /usr/share/man/man1/umoci-raw-add-layer.1.gz /usr/share/man/man1/umoci-raw-config.1.gz /usr/share/man/man1/umoci-raw-runtime-config.1.gz /usr/share/man/man1/umoci-raw-unpack.1.gz /usr/share/man/man1/umoci-raw.1.gz /usr/share/man/man1/umoci-remove.1.gz /usr/share/man/man1/umoci-repack.1.gz /usr/share/man/man1/umoci-rm.1.gz /usr/share/man/man1/umoci-stat.1.gz /usr/share/man/man1/umoci-tag.1.gz /usr/share/man/man1/umoci-unpack.1.gz /usr/share/man/man1/umoci.1.gz
Generated by rpm2html 1.8.1
Fabrice Bellet, Tue Oct 21 22:38:54 2025