[packages/podman] add default signature verification policy file
atler
atler at pld-linux.org
Mon Dec 7 00:23:56 CET 2020
commit 35a38226a7f0a41304e98ceb57bbc7d7583b3253
Author: Jan Palus <atler at pld-linux.org>
Date: Mon Dec 7 00:21:57 2020 +0100
add default signature verification policy file
podman.spec | 7 +++++++
policy.json | 3 +++
2 files changed, 10 insertions(+)
---
diff --git a/podman.spec b/podman.spec
index 39fb4ce..d2b48e0 100644
--- a/podman.spec
+++ b/podman.spec
@@ -7,6 +7,7 @@ Group: Applications/System
#Source0Download: https://github.com/containers/podman/releases
Source0: https://github.com/containers/podman/archive/v%{version}/%{name}-%{version}.tar.gz
# Source0-md5: 30e6ad5fe7c4abfef3e07e2fa8e904dd
+Source1: policy.json
URL: https://github.com/containers/podman
BuildRequires: go-md2man
BuildRequires: golang
@@ -45,6 +46,8 @@ images, and volumes.
%install
rm -rf $RPM_BUILD_ROOT
+install -d $RPM_BUILD_ROOT%{_sysconfdir}/containers
+
%{__make} install \
DESTDIR=$RPM_BUILD_ROOT \
PREFIX=%{_prefix} \
@@ -58,6 +61,8 @@ rm -rf $RPM_BUILD_ROOT
USERSYSTEMDDIR=%{systemduserunitdir} \
PYTHON=%{__python3}
+cp -p %{SOURCE1} $RPM_BUILD_ROOT%{_sysconfdir}/containers
+
%clean
rm -rf $RPM_BUILD_ROOT
@@ -65,6 +70,8 @@ rm -rf $RPM_BUILD_ROOT
%defattr(644,root,root,755)
%doc README.md changelog.txt
%config(noreplace) %verify(not md5 mtime size) %{_sysconfdir}/cni/net.d/87-podman-bridge.conflist
+%dir %{_sysconfdir}/containers
+%config(noreplace) %verify(not md5 mtime size) %{_sysconfdir}/containers/policy.json
%attr(755,root,root) %{_bindir}/podman
%attr(755,root,root) %{_bindir}/podman-remote
%{systemdunitdir}/podman.service
diff --git a/policy.json b/policy.json
new file mode 100644
index 0000000..e0b40fb
--- /dev/null
+++ b/policy.json
@@ -0,0 +1,3 @@
+{
+ "default": [{"type": "insecureAcceptAnything"}]
+}
================================================================
---- gitweb:
http://git.pld-linux.org/gitweb.cgi/packages/podman.git/commitdiff/35a38226a7f0a41304e98ceb57bbc7d7583b3253
More information about the pld-cvs-commit
mailing list