go recently received a security upgrade to 1.12.8 (f4894bf9) this
upgrade fixes various CVEs in go standard libraries, for instance in
HTTP/2 functionality. Since go is statically linked packages using this
functionality need to be rebuild.
Also:
- caddy's sources moved into the caddyserver namespace
- add options passthrough to the x86 override
- disable tests in general (TestVisibleErrorWithPanic fails regardless
for whatever reason)
x86 override is not removed for whenever tests can be re-enabled.
fails on builders due to containerization edge-cases.
ok github.com/mholt/caddy/caddy 0.034s
--- FAIL: TestSetCPU (0.01s)
run_test.go:56: Test 3: GOMAXPROCS was 24 but expected 1456292745
run_test.go:56: Test 9: GOMAXPROCS was 24 but expected 1456292745
FAIL
FAIL github.com/mholt/caddy/caddy/caddymain 0.075s
https://build.alpinelinux.org/buildlogs/build-edge-x86/community/caddy/caddy-1.0.0-r0.log
Superseeds PR7880 (there was too much to change for a review).
1. Caddy now uses the Go Modules system:
-> builds and tests require a new environment variable
-> it now requires a custom cleanup step
2. Tests now pass (on my builder)
3. Adopt
Closes: GH-7907
This commit updates $license variable in all APKBUILDs to comply with
short names specified by SPDX version 3.0 [1] where possible. It was
done using find-and-replace method on substrings inside $license
variables.
Only license names were updated, not "expressions" specifying relation
between the licenses (e.g. "X and Y", "X or Y", "X and (Y or Z)") or
exceptions (e.g. "X with exceptions").
Many licenses have a version or multiple variants, e.g. MPL-2.0,
BSD-2-Clause, BSD-3-Clause. However, $license in many aports do not
contain license version or variant. Since there's no way how to infer
this information just from abuild, it were left without the variant
suffix or version, i.e. non SPDX compliant.
GNU licenses (AGPL, GFDL, GPL, LGPL) are especially complicated. They
exist in two variants: -only (formerly e.g. GPL-2.0) and -or-later
(formerly e.g. GPL-2.0+). We did not systematically noted distinguish
between these variants, so GPL-2.0, GPL2, GPLv2 etc. may mean
GPL-2.0-only or GPL-2.0-or-later. Thus GNU licenses without "+" (e.g.
GPL2+) were left without the variant suffix, i.e. non SPDX compliant.
Note: This commit just fixes format of the license names, no
verification has been done if the specified license information is
actually correct!
[1]: https://spdx.org/licenses/
py-opencl, R: missing dependencies community/{OpenBLAS,py-numpy}
openspecfun: missing dependency community/openlibm
llvm-libunwind: no support yet
drawterm: no support yet
caddy:
e040f51c04/buildenv.go (L239)
docker: disable for now.
Currently we still cannot boot Alpine s390x natively yet, most usage are
running inside containers. Thus it is not likely we need Docker on s390x
for now.
Currently ppc64le does not have go, thus, disabling the build of
the packages that depends on golang.
This patch should be reverted once we have go enabled on ppc64le.
* community/[various]: Add group and use it as primary in .pre-* scripts.
community/caddy/caddy.pre-install
community/domoticz/domoticz.pre-install
community/oscam/oscam.pre-install
community/syncthing/syncthing.pre-install
Fixes the problem I unintentionally brought in commit ccc056dbf9:
system user creation doesn't add same named group and uses nogroup as
primary group unless explicitly specified via -G.
Brings status quo regarding primary groups of users created in packages:
- community/caddy
- community/domoticz
- community/oscam
- community/syncthing
Following rules have been applied:
- script starts with shebang !#/bin/sh followed by blank line,
- script ends with exit 0 prepended by blank line,
- only stderr of adduser, addgroup or passwd is redirected to /dev/null,
- getent passwd/group instances has been removed,
- manual checking of file and group existence has been removed,
- `|| true` instances has been removed.
Comments and line wrapping have been preserved.
