[packages/podman] add default signature verification policy file

atler atler at pld-linux.org
Mon Dec 7 00:23:56 CET 2020


commit 35a38226a7f0a41304e98ceb57bbc7d7583b3253
Author: Jan Palus <atler at pld-linux.org>
Date:   Mon Dec 7 00:21:57 2020 +0100

    add default signature verification policy file

 podman.spec | 7 +++++++
 policy.json | 3 +++
 2 files changed, 10 insertions(+)
---
diff --git a/podman.spec b/podman.spec
index 39fb4ce..d2b48e0 100644
--- a/podman.spec
+++ b/podman.spec
@@ -7,6 +7,7 @@ Group:		Applications/System
 #Source0Download: https://github.com/containers/podman/releases
 Source0:	https://github.com/containers/podman/archive/v%{version}/%{name}-%{version}.tar.gz
 # Source0-md5:	30e6ad5fe7c4abfef3e07e2fa8e904dd
+Source1:	policy.json
 URL:		https://github.com/containers/podman
 BuildRequires:	go-md2man
 BuildRequires:	golang
@@ -45,6 +46,8 @@ images, and volumes.
 %install
 rm -rf $RPM_BUILD_ROOT
 
+install -d $RPM_BUILD_ROOT%{_sysconfdir}/containers
+
 %{__make} install \
 	DESTDIR=$RPM_BUILD_ROOT \
 	PREFIX=%{_prefix} \
@@ -58,6 +61,8 @@ rm -rf $RPM_BUILD_ROOT
 	USERSYSTEMDDIR=%{systemduserunitdir} \
 	PYTHON=%{__python3}
 
+cp -p %{SOURCE1} $RPM_BUILD_ROOT%{_sysconfdir}/containers
+
 %clean
 rm -rf $RPM_BUILD_ROOT
 
@@ -65,6 +70,8 @@ rm -rf $RPM_BUILD_ROOT
 %defattr(644,root,root,755)
 %doc README.md changelog.txt
 %config(noreplace) %verify(not md5 mtime size) %{_sysconfdir}/cni/net.d/87-podman-bridge.conflist
+%dir %{_sysconfdir}/containers
+%config(noreplace) %verify(not md5 mtime size) %{_sysconfdir}/containers/policy.json
 %attr(755,root,root) %{_bindir}/podman
 %attr(755,root,root) %{_bindir}/podman-remote
 %{systemdunitdir}/podman.service
diff --git a/policy.json b/policy.json
new file mode 100644
index 0000000..e0b40fb
--- /dev/null
+++ b/policy.json
@@ -0,0 +1,3 @@
+{
+    "default": [{"type": "insecureAcceptAnything"}]
+}
================================================================

---- gitweb:

http://git.pld-linux.org/gitweb.cgi/packages/podman.git/commitdiff/35a38226a7f0a41304e98ceb57bbc7d7583b3253



More information about the pld-cvs-commit mailing list