mirror of
https://github.com/openwrt/packages.git
synced 2025-12-26 11:16:31 +04:00
ed5a9937d8
This is the fourteenth patch release in the 1.1.z release branch of
runc. It includes a fix for a low severity security issue
(CVE-2024-45310) as well as some minor build-related fixes (including Go
1.23 support).
Fix CVE-2024-45310, a low-severity attack that allowed
maliciously configured containers to create empty files and directories on
the host.
Add support for Go 1.23.
Revert "allow overriding VERSION value in Makefile" and add EXTRA_VERSION.
rootfs: consolidate mountpoint creation logic.
Signed-off-by: Milinda Brantini <C_A_T_T_E_R_Y@outlook.com>
(cherry picked from commit c1e6edfa86)
65 lines
1.6 KiB
Makefile
65 lines
1.6 KiB
Makefile
include $(TOPDIR)/rules.mk
|
|
|
|
PKG_NAME:=runc
|
|
PKG_VERSION:=1.1.14
|
|
PKG_RELEASE:=1
|
|
PKG_LICENSE:=Apache-2.0
|
|
PKG_LICENSE_FILES:=LICENSE
|
|
PKG_CPE_ID:=cpe:/a:linuxfoundation:runc
|
|
|
|
PKG_SOURCE:=$(PKG_NAME)-$(PKG_VERSION).tar.gz
|
|
PKG_SOURCE_URL:=https://codeload.github.com/opencontainers/runc/tar.gz/v${PKG_VERSION}?
|
|
PKG_HASH:=563cf57c38d2e7149234dbe6f63ca0751eb55ef8f586ed12a543dedc1aceba68
|
|
|
|
PKG_MAINTAINER:=Gerard Ryan <G.M0N3Y.2503@gmail.com>
|
|
|
|
PKG_BUILD_DEPENDS:=golang/host
|
|
PKG_BUILD_PARALLEL:=1
|
|
PKG_INSTALL:=1
|
|
PKG_BUILD_FLAGS:=no-mips16
|
|
|
|
GO_PKG:=github.com/opencontainers/runc
|
|
|
|
include $(INCLUDE_DIR)/package.mk
|
|
include ../../lang/golang/golang-package.mk
|
|
|
|
define Package/runc
|
|
SECTION:=utils
|
|
CATEGORY:=Utilities
|
|
TITLE:=runc container runtime
|
|
URL:=https://www.opencontainers.org/
|
|
DEPENDS:=$(GO_ARCH_DEPENDS) +KERNEL_SECCOMP_FILTER:libseccomp
|
|
endef
|
|
|
|
define Package/runc/description
|
|
runc is a CLI tool for spawning and running containers according to the OCI specification.
|
|
endef
|
|
|
|
GO_PKG_INSTALL_ALL:=1
|
|
MAKE_PATH:=$(GO_PKG_WORK_DIR_NAME)/build/src/$(GO_PKG)
|
|
MAKE_VARS += $(GO_PKG_VARS)
|
|
MAKE_FLAGS += COMMIT=$(PKG_SOURCE_VERSION)
|
|
|
|
ifeq ($(ARCH),mips)
|
|
MAKE_FLAGS += EXTRA_FLAGS='-buildmode=default'
|
|
endif
|
|
|
|
BUILDTAGS:=
|
|
ifeq ($(CONFIG_KERNEL_SECCOMP_FILTER),y)
|
|
BUILDTAGS += seccomp
|
|
endif
|
|
ifeq ($(CONFIG_SELINUX),y)
|
|
BUILDTAGS += selinux
|
|
endif
|
|
MAKE_FLAGS += BUILDTAGS='$(BUILDTAGS)'
|
|
|
|
# Reset golang-package.mk overrides so we can use the Makefile
|
|
Build/Compile=$(call Build/Compile/Default)
|
|
|
|
define Package/runc/install
|
|
$(INSTALL_DIR) $(1)/usr/sbin/
|
|
$(INSTALL_BIN) $(GO_PKG_BUILD_DIR)/src/$(GO_PKG)/runc $(1)/usr/sbin/
|
|
endef
|
|
|
|
$(eval $(call BuildPackage,runc))
|