diff --git a/packages/o/oci-seccomp-bpf-hook/.files b/packages/o/oci-seccomp-bpf-hook/.files deleted file mode 100644 index e882f87c722..00000000000 Binary files a/packages/o/oci-seccomp-bpf-hook/.files and /dev/null differ diff --git a/packages/o/oci-seccomp-bpf-hook/.meta b/packages/o/oci-seccomp-bpf-hook/.meta deleted file mode 100644 index 4092c04d1a1..00000000000 --- a/packages/o/oci-seccomp-bpf-hook/.meta +++ /dev/null @@ -1,5 +0,0 @@ - - OCI seccomp BPF Hook - OCI hook to trace syscalls and generate a seccomp profile - - diff --git a/packages/o/oci-seccomp-bpf-hook/.rev b/packages/o/oci-seccomp-bpf-hook/.rev deleted file mode 100644 index 85c170442c3..00000000000 --- a/packages/o/oci-seccomp-bpf-hook/.rev +++ /dev/null @@ -1,21 +0,0 @@ - - - 6c5cefae210fb06d3d4f86ccb1e0aed5 - 1.2.0 - - dimstar_suse - kernel-devel as buildrequires - 825980 - - - 80da09e5c633f1af2f03a56925e387d4 - 1.2.1 - - RBrownSUSE - - Update to version 1.2.1: - * Defer event processing. - * Vendor gobpf (fix build on newer libbpf versions). - * Make annotation pattern match more strictly. - 882664 - - diff --git a/packages/o/oci-seccomp-bpf-hook/.servicemark b/packages/o/oci-seccomp-bpf-hook/.servicemark deleted file mode 100644 index 1427f306968..00000000000 --- a/packages/o/oci-seccomp-bpf-hook/.servicemark +++ /dev/null @@ -1 +0,0 @@ -1c1f90881a6a17a9dd0f7d88eda639cc diff --git a/packages/o/oci-seccomp-bpf-hook/_constraints b/packages/o/oci-seccomp-bpf-hook/_constraints deleted file mode 100644 index 32245cd3d95..00000000000 --- a/packages/o/oci-seccomp-bpf-hook/_constraints +++ /dev/null @@ -1,8 +0,0 @@ - - - - - 2500 - - - diff --git a/packages/o/oci-seccomp-bpf-hook/_service b/packages/o/oci-seccomp-bpf-hook/_service deleted file mode 100644 index 49da537ae51..00000000000 --- a/packages/o/oci-seccomp-bpf-hook/_service +++ /dev/null @@ -1,16 +0,0 @@ - - - https://github.com/containers/oci-seccomp-bpf-hook - git - 1.2.1 - v1.2.1 - enable - - - oci-seccomp-bpf-hook-*.tar - xz - - - oci-seccomp-bpf-hook - - diff --git a/packages/o/oci-seccomp-bpf-hook/_servicedata b/packages/o/oci-seccomp-bpf-hook/_servicedata deleted file mode 100644 index f1ce7bdb2d1..00000000000 --- a/packages/o/oci-seccomp-bpf-hook/_servicedata +++ /dev/null @@ -1,4 +0,0 @@ - - - https://github.com/containers/oci-seccomp-bpf-hook - febb2eb0f0080dd973a8d305cfa2b88f1ccc4c6a \ No newline at end of file diff --git a/packages/o/oci-seccomp-bpf-hook/oci-seccomp-bpf-hook-1.2.1.tar.xz b/packages/o/oci-seccomp-bpf-hook/oci-seccomp-bpf-hook-1.2.1.tar.xz deleted file mode 120000 index b11b7c72e76..00000000000 --- a/packages/o/oci-seccomp-bpf-hook/oci-seccomp-bpf-hook-1.2.1.tar.xz +++ /dev/null @@ -1 +0,0 @@ -/ipfs/bafybeidpfoe6leaqope625pquny4hgiyeef6gr3shtohqqmknyi5rq2xz4 \ No newline at end of file diff --git a/packages/o/oci-seccomp-bpf-hook/oci-seccomp-bpf-hook-rpmlintrc b/packages/o/oci-seccomp-bpf-hook/oci-seccomp-bpf-hook-rpmlintrc deleted file mode 100644 index 1ffc7e5e863..00000000000 --- a/packages/o/oci-seccomp-bpf-hook/oci-seccomp-bpf-hook-rpmlintrc +++ /dev/null @@ -1,2 +0,0 @@ -addFilter (".* W: devel-dependency kernel-devel") -addFilter (".* W: position-independent-executable-suggested /usr/lib/oci/hooks.d/oci-seccomp-bpf-hook") diff --git a/packages/o/oci-seccomp-bpf-hook/oci-seccomp-bpf-hook.changes b/packages/o/oci-seccomp-bpf-hook/oci-seccomp-bpf-hook.changes deleted file mode 100644 index 7fbd05ca880..00000000000 --- a/packages/o/oci-seccomp-bpf-hook/oci-seccomp-bpf-hook.changes +++ /dev/null @@ -1,22 +0,0 @@ -------------------------------------------------------------------- -Fri Apr 02 03:01:09 UTC 2021 - asarai@suse.com - -- Update to version 1.2.1: - * Defer event processing. - * Vendor gobpf (fix build on newer libbpf versions). - * Make annotation pattern match more strictly. - -------------------------------------------------------------------- -Wed Aug 12 10:01:45 UTC 2020 - Sascha Grunert - -- Update to version 1.2.0: - * README: link to the enable sysadmin article - * Improve README.md and replace black/whitelist references - * Automatically add seccomp architecture from runtime.GOARCH - * Switch to seccomp/containers-golang instead of docker types -- Make the kernel-devel a build-time only requirement - -------------------------------------------------------------------- -Wed Aug 12 07:48:55 UTC 2020 - Sascha Grunert - -- Add package at version v1.1.2 diff --git a/packages/o/oci-seccomp-bpf-hook/oci-seccomp-bpf-hook.spec b/packages/o/oci-seccomp-bpf-hook/oci-seccomp-bpf-hook.spec deleted file mode 100644 index f26662f6690..00000000000 --- a/packages/o/oci-seccomp-bpf-hook/oci-seccomp-bpf-hook.spec +++ /dev/null @@ -1,104 +0,0 @@ -# -# spec file for package oci-seccomp-bpf-hook -# -# Copyright (c) 2021 SUSE LLC -# -# All modifications and additions to the file contributed by third parties -# remain the property of their copyright owners, unless otherwise agreed -# upon. The license for this file, and modifications and additions to the -# file, is the same license as for the pristine package itself (unless the -# license for the pristine package is not an Open Source License, in which -# case the license is the MIT License). An "Open Source License" is a -# license that conforms to the Open Source Definition (Version 1.9) -# published by the Open Source Initiative. - -# Please submit bugfixes or comments via https://bugs.opensuse.org/ -# - - -%define project github.com/containers/oci-seccomp-bpf-hook - -# Define macros for further referenced sources -Name: oci-seccomp-bpf-hook -Version: 1.2.1 -Release: 0 -Summary: OCI hook to trace syscalls and generate a seccomp profile -License: Apache-2.0 -URL: https://github.com/containers/oci-seccomp-bpf-hook -Source0: %{name}-%{version}.tar.xz -Source1: %{name}-rpmlintrc -BuildRequires: bcc-devel -BuildRequires: glib2-devel-static -BuildRequires: glibc-devel-static -BuildRequires: go-go-md2man -BuildRequires: golang-packaging -BuildRequires: kernel-devel -BuildRequires: libgpgme-devel -BuildRequires: libseccomp-devel -BuildRequires: golang(API) = 1.15 - -# disable stripping of binaries -%{go_nostrip} - -%description -This project provides an OCI hook to generate seccomp profiles by tracing the -syscalls made by the container. The generated profile would allow all the -syscalls made and deny every other syscall. - -The syscalls are traced by launching a binary by using the prestart OCI hook. -The binary started spawns a child process which attaches function enter_trace -to the raw_syscalls:sys_enter tracepoint using eBPF. The function looks at all -the syscalls made on the system and writes the syscalls which have the same PID -namespace as the container to the perf buffer. The perf buffer is read by the -process in the userspace and generates a seccomp profile when the container -exits. - -%prep -%setup -q - -%build - -# We can't use symlinks here because go-list gets confused by symlinks, so we -# have to copy the source to $HOME/go and then use that as the GOPATH. -export GOPATH=$HOME/go -mkdir -pv $HOME/go/src/%{project} -rm -rf $HOME/go/src/%{project}/* -cp -avr * $HOME/go/src/%{project} -cd $HOME/go/src/%{project} - -%make_build - -%install - -# binary -cd $HOME/go/src/%{project} -install -D -m 0755 bin/%{name} %{buildroot}/%{_libexecdir}/oci/hooks.d/%{name} - -# config -sed -i 's|HOOK_BIN_DIR|%{_libexecdir}/oci/hooks.d|g' oci-seccomp-bpf-hook.json -install -D -m 0644 %{name}.json %{buildroot}/%{_datadir}/containers/oci/hooks.d/%{name}.json - -# docs -install -D -m 0644 docs/%{name}.1 %{buildroot}/%{_mandir}/man1/%{name}.1 - -%files - -# meta -%license LICENSE -%doc README.md - -# binary -%dir %{_libexecdir}/oci -%dir %{_libexecdir}/oci/hooks.d -%{_libexecdir}/oci/hooks.d/%{name} - -# config -%dir %{_datadir}/containers -%dir %{_datadir}/containers/oci -%dir %{_datadir}/containers/oci/hooks.d -%{_datadir}/containers/oci/hooks.d/%{name}.json - -# docs -%{_mandir}/man1/%{name}.1* - -%changelog