# Do not build with tests by default

# Pass --with tests to rpmbuild to override

%bcond_with tests

# When --with relax_requires is specified osbuild-composer-tests

# will require osbuild-composer only by name, excluding version/release

# This is used internally during nightly pipeline testing!

%bcond_with relax_requires

%global goipath         github.com/osbuild/osbuild-composer

Version:        90

%gometa

%global common_description %{expand:

A service for building customized OS artifacts, such as VM images and OSTree

commits, that uses osbuild under the hood. Besides building images for local

usage, it can also upload images directly to cloud.

It is compatible with composer-cli and cockpit-composer clients.

}

Name:           osbuild-composer

Release:        1%{?dist}

Summary:        An image building service based on osbuild

# osbuild-composer doesn't have support for building i686 and armv7hl images

ExcludeArch:    i686 armv7hl

# Upstream license specification: Apache-2.0

License:        Apache-2.0

URL:            %{gourl}

Source0:        %{gosource}

BuildRequires:  %{?go_compiler:compiler(go-compiler)}%{!?go_compiler:golang}

BuildRequires:  systemd

BuildRequires:  krb5-devel

BuildRequires:  python3-docutils

BuildRequires:  make

# Build requirements of 'theproglottis/gpgme' package

BuildRequires:  gpgme-devel

BuildRequires:  libassuan-devel

%if 0%{?fedora}

BuildRequires:  systemd-rpm-macros

BuildRequires:  git

# DO NOT REMOVE the BUNDLE_START and BUNDLE_END markers as they are used by 'tools/rpm_spec_add_provides_bundle.sh' to generate the Provides: bundled list

# BUNDLE_START

Provides: bundled(golang(cloud.google.com/go)) = 0.110.6

Provides: bundled(golang(cloud.google.com/go/compute)) = 1.23.0

Provides: bundled(golang(cloud.google.com/go/compute/metadata)) = 0.2.3

Provides: bundled(golang(cloud.google.com/go/iam)) = 1.1.1

Provides: bundled(golang(cloud.google.com/go/storage)) = 1.32.0

Provides: bundled(golang(github.com/Azure/azure-sdk-for-go)) = 68.0.0+incompatible

Provides: bundled(golang(github.com/Azure/azure-sdk-for-go/sdk/azcore)) = 1.6.0

Provides: bundled(golang(github.com/Azure/azure-sdk-for-go/sdk/internal)) = 1.3.0

Provides: bundled(golang(github.com/Azure/azure-sdk-for-go/sdk/storage/azblob)) = 1.1.0

Provides: bundled(golang(github.com/Azure/go-autorest)) = 14.2.0+incompatible

Provides: bundled(golang(github.com/Azure/go-autorest/autorest)) = 0.11.29

Provides: bundled(golang(github.com/Azure/go-autorest/autorest/adal)) = 0.9.22

Provides: bundled(golang(github.com/Azure/go-autorest/autorest/azure/auth)) = 0.5.12

Provides: bundled(golang(github.com/Azure/go-autorest/autorest/azure/cli)) = 0.4.6

Provides: bundled(golang(github.com/Azure/go-autorest/autorest/date)) = 0.3.0

Provides: bundled(golang(github.com/Azure/go-autorest/autorest/to)) = 0.4.0

Provides: bundled(golang(github.com/Azure/go-autorest/autorest/validation)) = 0.3.1

Provides: bundled(golang(github.com/Azure/go-autorest/logger)) = 0.2.1

Provides: bundled(golang(github.com/Azure/go-autorest/tracing)) = 0.6.0

Provides: bundled(golang(github.com/BurntSushi/toml)) = 1.3.2

Provides: bundled(golang(github.com/VividCortex/ewma)) = 1.2.0

Provides: bundled(golang(github.com/acarl005/stripansi)) = 5a71ef0

Provides: bundled(golang(github.com/asaskevich/govalidator)) = a9d515a

Provides: bundled(golang(github.com/aws/aws-sdk-go)) = 1.44.332

Provides: bundled(golang(github.com/aymerick/douceur)) = 0.2.0

Provides: bundled(golang(github.com/beorn7/perks)) = 1.0.1

Provides: bundled(golang(github.com/cenkalti/backoff/v4)) = 4.2.1

Provides: bundled(golang(github.com/cespare/xxhash/v2)) = 2.2.0

Provides: bundled(golang(github.com/containers/common)) = 0.55.3

Provides: bundled(golang(github.com/containers/image/v5)) = 5.27.0

Provides: bundled(golang(github.com/containers/libtrust)) = c1716e8

Provides: bundled(golang(github.com/containers/ocicrypt)) = 1.1.7

Provides: bundled(golang(github.com/containers/storage)) = 1.48.0

Provides: bundled(golang(github.com/coreos/go-semver)) = 0.3.1

Provides: bundled(golang(github.com/coreos/go-systemd)) = fd7a80b

Provides: bundled(golang(github.com/cyberphone/json-canonicalization)) = 504adb8

Provides: bundled(golang(github.com/davecgh/go-spew)) = 1.1.1

Provides: bundled(golang(github.com/deepmap/oapi-codegen)) = 1.8.2

Provides: bundled(golang(github.com/dimchansky/utfbom)) = 1.1.1

Provides: bundled(golang(github.com/docker/distribution)) = 2.8.2+incompatible

Provides: bundled(golang(github.com/docker/docker)) = 24.0.2+incompatible

Provides: bundled(golang(github.com/docker/docker-credential-helpers)) = 0.7.0

Provides: bundled(golang(github.com/docker/go-connections)) = 0.4.0

Provides: bundled(golang(github.com/docker/go-units)) = 0.5.0

Provides: bundled(golang(github.com/dougm/pretty)) = 2ee9d74

Provides: bundled(golang(github.com/getkin/kin-openapi)) = 0.93.0

Provides: bundled(golang(github.com/ghodss/yaml)) = 1.0.0

Provides: bundled(golang(github.com/go-openapi/analysis)) = 0.21.4

Provides: bundled(golang(github.com/go-openapi/errors)) = 0.20.3

Provides: bundled(golang(github.com/go-openapi/jsonpointer)) = 0.19.5

Provides: bundled(golang(github.com/go-openapi/jsonreference)) = 0.20.0

Provides: bundled(golang(github.com/go-openapi/loads)) = 0.21.2

Provides: bundled(golang(github.com/go-openapi/runtime)) = 0.26.0

Provides: bundled(golang(github.com/go-openapi/spec)) = 0.20.9

Provides: bundled(golang(github.com/go-openapi/strfmt)) = 0.21.7

Provides: bundled(golang(github.com/go-openapi/swag)) = 0.22.4

Provides: bundled(golang(github.com/go-openapi/validate)) = 0.22.1

Provides: bundled(golang(github.com/gobwas/glob)) = 0.2.3

Provides: bundled(golang(github.com/golang-jwt/jwt)) = 3.2.2+incompatible

Provides: bundled(golang(github.com/golang-jwt/jwt/v4)) = 4.5.0

Provides: bundled(golang(github.com/golang/glog)) = 1.1.0

Provides: bundled(golang(github.com/golang/groupcache)) = 41bb18b

Provides: bundled(golang(github.com/golang/protobuf)) = 1.5.3

Provides: bundled(golang(github.com/google/go-cmp)) = 0.5.9

Provides: bundled(golang(github.com/google/go-containerregistry)) = 0.15.2

Provides: bundled(golang(github.com/google/s2a-go)) = 0.1.5

Provides: bundled(golang(github.com/google/uuid)) = 1.3.1

Provides: bundled(golang(github.com/googleapis/enterprise-certificate-proxy)) = 0.2.5

Provides: bundled(golang(github.com/googleapis/gax-go/v2)) = 2.12.0

Provides: bundled(golang(github.com/gophercloud/gophercloud)) = 1.5.0

Provides: bundled(golang(github.com/gorilla/css)) = 1.0.0

Provides: bundled(golang(github.com/gorilla/mux)) = 1.8.0

Provides: bundled(golang(github.com/hashicorp/errwrap)) = 1.1.0

Provides: bundled(golang(github.com/hashicorp/go-cleanhttp)) = 0.5.2

Provides: bundled(golang(github.com/hashicorp/go-multierror)) = 1.1.1

Provides: bundled(golang(github.com/hashicorp/go-retryablehttp)) = 0.7.4

Provides: bundled(golang(github.com/inconshreveable/mousetrap)) = 1.1.0

Provides: bundled(golang(github.com/jackc/chunkreader/v2)) = 2.0.1

Provides: bundled(golang(github.com/jackc/pgconn)) = 1.14.0

Provides: bundled(golang(github.com/jackc/pgio)) = 1.0.0

Provides: bundled(golang(github.com/jackc/pgpassfile)) = 1.0.0

Provides: bundled(golang(github.com/jackc/pgproto3/v2)) = 2.3.2

Provides: bundled(golang(github.com/jackc/pgservicefile)) = 091c0ba

Provides: bundled(golang(github.com/jackc/pgtype)) = 1.14.0

Provides: bundled(golang(github.com/jackc/pgx/v4)) = 4.18.1

Provides: bundled(golang(github.com/jackc/puddle)) = 1.3.0

Provides: bundled(golang(github.com/jmespath/go-jmespath)) = 0.4.0

Provides: bundled(golang(github.com/josharian/intern)) = 1.0.0

Provides: bundled(golang(github.com/json-iterator/go)) = 1.1.12

Provides: bundled(golang(github.com/julienschmidt/httprouter)) = 1.3.0

Provides: bundled(golang(github.com/klauspost/compress)) = 1.16.6

Provides: bundled(golang(github.com/klauspost/pgzip)) = 1.2.6

Provides: bundled(golang(github.com/kolo/xmlrpc)) = 38db28d

Provides: bundled(golang(github.com/kr/text)) = 0.2.0

Provides: bundled(golang(github.com/labstack/echo/v4)) = 4.11.1

Provides: bundled(golang(github.com/labstack/gommon)) = 0.4.0

Provides: bundled(golang(github.com/letsencrypt/boulder)) = fdfea0d

Provides: bundled(golang(github.com/mailru/easyjson)) = 0.7.7

Provides: bundled(golang(github.com/mattn/go-colorable)) = 0.1.13

Provides: bundled(golang(github.com/mattn/go-isatty)) = 0.0.19

Provides: bundled(golang(github.com/mattn/go-runewidth)) = 0.0.14

Provides: bundled(golang(github.com/matttproud/golang_protobuf_extensions)) = 1.0.4

Provides: bundled(golang(github.com/microcosm-cc/bluemonday)) = 1.0.18

Provides: bundled(golang(github.com/miekg/pkcs11)) = 1.1.1

Provides: bundled(golang(github.com/mitchellh/go-homedir)) = 1.1.0

Provides: bundled(golang(github.com/mitchellh/mapstructure)) = 1.5.0

Provides: bundled(golang(github.com/moby/sys/mountinfo)) = 0.6.2

Provides: bundled(golang(github.com/modern-go/concurrent)) = bacd9c7

Provides: bundled(golang(github.com/modern-go/reflect2)) = 1.0.2

Provides: bundled(golang(github.com/oklog/ulid)) = 1.3.1

Provides: bundled(golang(github.com/opencontainers/go-digest)) = 1.0.0

Provides: bundled(golang(github.com/opencontainers/image-spec)) = 1.1.0-rc4

Provides: bundled(golang(github.com/opencontainers/runc)) = 1.1.7

Provides: bundled(golang(github.com/opencontainers/runtime-spec)) = 1.1.0-rc.3

Provides: bundled(golang(github.com/openshift-online/ocm-sdk-go)) = 0.1.364

Provides: bundled(golang(github.com/oracle/oci-go-sdk/v54)) = 54.0.0

Provides: bundled(golang(github.com/osbuild/images)) = 0.3.0

Provides: bundled(golang(github.com/pkg/errors)) = 0.9.1

Provides: bundled(golang(github.com/pmezard/go-difflib)) = 1.0.0

Provides: bundled(golang(github.com/proglottis/gpgme)) = 0.1.3

Provides: bundled(golang(github.com/prometheus/client_golang)) = 1.16.0

Provides: bundled(golang(github.com/prometheus/client_model)) = 0.4.0

Provides: bundled(golang(github.com/prometheus/common)) = 0.42.0

Provides: bundled(golang(github.com/prometheus/procfs)) = 0.10.1

Provides: bundled(golang(github.com/rivo/uniseg)) = 0.4.4

Provides: bundled(golang(github.com/segmentio/ksuid)) = 1.0.4

Provides: bundled(golang(github.com/sigstore/fulcio)) = 1.3.1

Provides: bundled(golang(github.com/sigstore/rekor)) = 4c81ff2

Provides: bundled(golang(github.com/sigstore/sigstore)) = 1.7.1

Provides: bundled(golang(github.com/sirupsen/logrus)) = 1.9.3

Provides: bundled(golang(github.com/sony/gobreaker)) = dd874f9

Provides: bundled(golang(github.com/spf13/cobra)) = 1.7.0

Provides: bundled(golang(github.com/spf13/pflag)) = 1.0.5

Provides: bundled(golang(github.com/stefanberger/go-pkcs11uri)) = 78d3cae

Provides: bundled(golang(github.com/stretchr/testify)) = 1.8.4

Provides: bundled(golang(github.com/syndtr/gocapability)) = 42c35b4

Provides: bundled(golang(github.com/theupdateframework/go-tuf)) = 0.5.2

Provides: bundled(golang(github.com/titanous/rocacheck)) = afe7314

Provides: bundled(golang(github.com/ubccr/kerby)) = 201a958

Provides: bundled(golang(github.com/ulikunitz/xz)) = 0.5.11

Provides: bundled(golang(github.com/valyala/bytebufferpool)) = 1.0.0

Provides: bundled(golang(github.com/valyala/fasttemplate)) = 1.2.2

Provides: bundled(golang(github.com/vbatts/tar-split)) = 0.11.3

Provides: bundled(golang(github.com/vbauerster/mpb/v8)) = 8.4.0

Provides: bundled(golang(github.com/vmware/govmomi)) = 0.30.7

Provides: bundled(golang(go.etcd.io/bbolt)) = 1.3.7

Provides: bundled(golang(go.mongodb.org/mongo-driver)) = 1.11.3

Provides: bundled(golang(go.mozilla.org/pkcs7)) = 33d0574

Provides: bundled(golang(go.opencensus.io)) = 0.24.0

Provides: bundled(golang(golang.org/x/crypto)) = 0.12.0

Provides: bundled(golang(golang.org/x/exp)) = 2e198f4

Provides: bundled(golang(golang.org/x/mod)) = 0.10.0

Provides: bundled(golang(golang.org/x/net)) = 0.14.0

Provides: bundled(golang(golang.org/x/oauth2)) = 0.11.0

Provides: bundled(golang(golang.org/x/sync)) = 0.3.0

Provides: bundled(golang(golang.org/x/sys)) = 0.11.0

Provides: bundled(golang(golang.org/x/term)) = 0.11.0

Provides: bundled(golang(golang.org/x/text)) = 0.12.0

Provides: bundled(golang(golang.org/x/time)) = 0.3.0

Provides: bundled(golang(golang.org/x/tools)) = 0.9.3

Provides: bundled(golang(golang.org/x/xerrors)) = 04be3eb

Provides: bundled(golang(google.golang.org/api)) = 0.138.0

Provides: bundled(golang(google.golang.org/appengine)) = 1.6.7

Provides: bundled(golang(google.golang.org/genproto)) = f966b18

Provides: bundled(golang(google.golang.org/genproto/googleapis/api)) = f966b18

Provides: bundled(golang(google.golang.org/genproto/googleapis/rpc)) = 1744710

Provides: bundled(golang(google.golang.org/grpc)) = 1.57.0

Provides: bundled(golang(google.golang.org/protobuf)) = 1.31.0

Provides: bundled(golang(gopkg.in/go-jose/go-jose.v2)) = 2.6.1

Provides: bundled(golang(gopkg.in/ini.v1)) = 1.67.0

Provides: bundled(golang(gopkg.in/square/go-jose.v2)) = 2.6.0

Provides: bundled(golang(gopkg.in/yaml.v2)) = 2.4.0

Provides: bundled(golang(gopkg.in/yaml.v3)) = 3.0.1

# BUNDLE_END

%endif

Requires: %{name}-core = %{version}-%{release}

Requires: %{name}-worker = %{version}-%{release}

Requires: systemd

Provides: weldr

%description

%{common_description}

%prep

%if 0%{?rhel}

%forgeautosetup -p1

%else

%goprep -k

%endif

%build

export GOFLAGS="-buildmode=pie"

%if 0%{?rhel}

GO_BUILD_PATH=$PWD/_build

install -m 0755 -vd $(dirname $GO_BUILD_PATH/src/%{goipath})

ln -fs $PWD $GO_BUILD_PATH/src/%{goipath}

cd $GO_BUILD_PATH/src/%{goipath}

install -m 0755 -vd _bin

export PATH=$PWD/_bin${PATH:+:$PATH}

export GOPATH=$GO_BUILD_PATH:%{gopath}

export GOFLAGS+=" -mod=vendor"

%endif

# Set the commit hash so that composer can report what source version

# was used to build it. This has to be set explicitly when calling rpmbuild,

# this script will not attempt to automatically discover it.

%if %{?commit:1}0

export LDFLAGS="${LDFLAGS} -X 'github.com/osbuild/osbuild-composer/internal/common.GitRev=%{commit}'"

%endif

export LDFLAGS="${LDFLAGS} -X 'github.com/osbuild/osbuild-composer/internal/common.RpmVersion=%{name}-%{?epoch:%epoch:}%{version}-%{release}.%{_arch}'"

%gobuild -o _bin/osbuild-composer %{goipath}/cmd/osbuild-composer

%gobuild -o _bin/osbuild-worker %{goipath}/cmd/osbuild-worker

make man

%if %{with tests} || 0%{?rhel}

# Build test binaries with `go test -c`, so that they can take advantage of

# golang's testing package. The golang rpm macros don't support building them

# directly. Thus, do it manually, taking care to also include a build id.

#

# On Fedora, also turn off go modules and set the path to the one into which

# the golang-* packages install source code.

%if 0%{?fedora}

export GO111MODULE=off

export GOPATH=%{gobuilddir}:%{gopath}

%endif

TEST_LDFLAGS="${LDFLAGS:-} -B 0x$(od -N 20 -An -tx1 -w100 /dev/urandom | tr -d ' ')"

go test -c -tags=integration -ldflags="${TEST_LDFLAGS}" -o _bin/osbuild-composer-cli-tests %{goipath}/cmd/osbuild-composer-cli-tests

go test -c -tags=integration -ldflags="${TEST_LDFLAGS}" -o _bin/osbuild-dnf-json-tests %{goipath}/cmd/osbuild-dnf-json-tests

go test -c -tags=integration -ldflags="${TEST_LDFLAGS}" -o _bin/osbuild-weldr-tests %{goipath}/internal/client/

go test -c -tags=integration -ldflags="${TEST_LDFLAGS}" -o _bin/osbuild-image-tests %{goipath}/cmd/osbuild-image-tests

go test -c -tags=integration -ldflags="${TEST_LDFLAGS}" -o _bin/osbuild-auth-tests %{goipath}/cmd/osbuild-auth-tests

go test -c -tags=integration -ldflags="${TEST_LDFLAGS}" -o _bin/osbuild-koji-tests %{goipath}/cmd/osbuild-koji-tests

go test -c -tags=integration -ldflags="${TEST_LDFLAGS}" -o _bin/osbuild-composer-dbjobqueue-tests %{goipath}/cmd/osbuild-composer-dbjobqueue-tests

go test -c -tags=integration -ldflags="${TEST_LDFLAGS}" -o _bin/osbuild-service-maintenance-tests %{goipath}/cmd/osbuild-service-maintenance

go build -tags=integration -ldflags="${TEST_LDFLAGS}" -o _bin/osbuild-mock-openid-provider %{goipath}/cmd/osbuild-mock-openid-provider

%endif

%install

install -m 0755 -vd                                                %{buildroot}%{_libexecdir}/osbuild-composer

install -m 0755 -vp _bin/osbuild-composer                          %{buildroot}%{_libexecdir}/osbuild-composer/

install -m 0755 -vp _bin/osbuild-worker                            %{buildroot}%{_libexecdir}/osbuild-composer/

install -m 0755 -vp dnf-json                                       %{buildroot}%{_libexecdir}/osbuild-composer/

# Only include repositories for the distribution and release

install -m 0755 -vd                                                %{buildroot}%{_datadir}/osbuild-composer/repositories

# CentOS also defines rhel so we check for centos first

%if 0%{?centos}

# CentOS 9 supports building for CentOS 8 and later

%if 0%{?centos} >= 9

install -m 0644 -vp repositories/centos-*                          %{buildroot}%{_datadir}/osbuild-composer/repositories/

%else

# CentOS 8 only supports building for CentOS 8

install -m 0644 -vp repositories/centos-%{centos}*                 %{buildroot}%{_datadir}/osbuild-composer/repositories/

install -m 0644 -vp repositories/centos-stream-%{centos}*          %{buildroot}%{_datadir}/osbuild-composer/repositories/

%endif

%else

%if 0%{?rhel}

# RHEL 9 supports building for RHEL 8 and later

%if 0%{?rhel} >= 9

install -m 0644 -vp repositories/rhel-*                            %{buildroot}%{_datadir}/osbuild-composer/repositories/

%else

# RHEL 8 only supports building for 8

install -m 0644 -vp repositories/rhel-%{rhel}*                     %{buildroot}%{_datadir}/osbuild-composer/repositories/

%endif

%endif

%endif

# Fedora can build for all included fedora releases

%if 0%{?fedora}

install -m 0644 -vp repositories/fedora-*                          %{buildroot}%{_datadir}/osbuild-composer/repositories/

%endif

install -m 0755 -vd                                                %{buildroot}%{_unitdir}

install -m 0644 -vp distribution/*.{service,socket}                %{buildroot}%{_unitdir}/

install -m 0755 -vd                                                %{buildroot}%{_sysusersdir}

install -m 0644 -vp distribution/osbuild-composer.conf             %{buildroot}%{_sysusersdir}/

install -m 0755 -vd                                                %{buildroot}%{_localstatedir}/cache/osbuild-composer/dnf-cache

install -m 0755 -vd                                                %{buildroot}%{_mandir}/man7

install -m 0644 -vp docs/*.7                                       %{buildroot}%{_mandir}/man7/

%if %{with tests} || 0%{?rhel}

install -m 0755 -vd                                                %{buildroot}%{_libexecdir}/osbuild-composer-test

install -m 0755 -vp _bin/osbuild-composer-cli-tests                %{buildroot}%{_libexecdir}/osbuild-composer-test/

install -m 0755 -vp _bin/osbuild-weldr-tests                       %{buildroot}%{_libexecdir}/osbuild-composer-test/

install -m 0755 -vp _bin/osbuild-dnf-json-tests                    %{buildroot}%{_libexecdir}/osbuild-composer-test/

install -m 0755 -vp _bin/osbuild-image-tests                       %{buildroot}%{_libexecdir}/osbuild-composer-test/

install -m 0755 -vp _bin/osbuild-auth-tests                        %{buildroot}%{_libexecdir}/osbuild-composer-test/

install -m 0755 -vp _bin/osbuild-koji-tests                        %{buildroot}%{_libexecdir}/osbuild-composer-test/

install -m 0755 -vp _bin/osbuild-composer-dbjobqueue-tests         %{buildroot}%{_libexecdir}/osbuild-composer-test/

install -m 0755 -vp _bin/osbuild-service-maintenance-tests         %{buildroot}%{_libexecdir}/osbuild-composer-test/

install -m 0755 -vp _bin/osbuild-mock-openid-provider              %{buildroot}%{_libexecdir}/osbuild-composer-test/

install -m 0755 -vp tools/define-compose-url.sh                    %{buildroot}%{_libexecdir}/osbuild-composer-test/

install -m 0755 -vp tools/provision.sh                             %{buildroot}%{_libexecdir}/osbuild-composer-test/

install -m 0755 -vp tools/gen-certs.sh                             %{buildroot}%{_libexecdir}/osbuild-composer-test/

install -m 0755 -vp tools/gen-ssh.sh                               %{buildroot}%{_libexecdir}/osbuild-composer-test/

install -m 0755 -vp tools/image-info                               %{buildroot}%{_libexecdir}/osbuild-composer-test/

install -m 0755 -vp tools/run-koji-container.sh                    %{buildroot}%{_libexecdir}/osbuild-composer-test/

install -m 0755 -vp tools/koji-compose.py                          %{buildroot}%{_libexecdir}/osbuild-composer-test/

install -m 0755 -vp tools/libvirt_test.sh                          %{buildroot}%{_libexecdir}/osbuild-composer-test/

install -m 0755 -vp tools/s3_test.sh                               %{buildroot}%{_libexecdir}/osbuild-composer-test/

install -m 0755 -vp tools/generic_s3_test.sh                       %{buildroot}%{_libexecdir}/osbuild-composer-test/

install -m 0755 -vp tools/generic_s3_https_test.sh                 %{buildroot}%{_libexecdir}/osbuild-composer-test/

install -m 0755 -vp tools/run-mock-auth-servers.sh                 %{buildroot}%{_libexecdir}/osbuild-composer-test/

install -m 0755 -vp tools/set-env-variables.sh                     %{buildroot}%{_libexecdir}/osbuild-composer-test/

install -m 0755 -vp tools/test-case-generators/generate-test-cases %{buildroot}%{_libexecdir}/osbuild-composer-test/

install -m 0755 -vd                                                %{buildroot}%{_libexecdir}/tests/osbuild-composer

install -m 0755 -vp test/cases/*.sh                                %{buildroot}%{_libexecdir}/tests/osbuild-composer/

install -m 0755 -vd                                                %{buildroot}%{_libexecdir}/tests/osbuild-composer/api

install -m 0755 -vp test/cases/api/*.sh                            %{buildroot}%{_libexecdir}/tests/osbuild-composer/api/

install -m 0755 -vd                                                %{buildroot}%{_libexecdir}/tests/osbuild-composer/api/common

install -m 0755 -vp test/cases/api/common/*.sh                     %{buildroot}%{_libexecdir}/tests/osbuild-composer/api/common/

install -m 0755 -vd                                                %{buildroot}%{_datadir}/tests/osbuild-composer/ansible

install -m 0644 -vp test/data/ansible/*                            %{buildroot}%{_datadir}/tests/osbuild-composer/ansible/

install -m 0755 -vd                                                %{buildroot}%{_datadir}/tests/osbuild-composer/azure

install -m 0644 -vp test/data/azure/*                              %{buildroot}%{_datadir}/tests/osbuild-composer/azure/

install -m 0755 -vd                                                %{buildroot}%{_datadir}/tests/osbuild-composer/manifests

install -m 0644 -vp test/data/manifests/*                          %{buildroot}%{_datadir}/tests/osbuild-composer/manifests/

install -m 0755 -vd                                                %{buildroot}%{_datadir}/tests/osbuild-composer/cloud-init

install -m 0644 -vp test/data/cloud-init/*                         %{buildroot}%{_datadir}/tests/osbuild-composer/cloud-init/

install -m 0755 -vd                                                %{buildroot}%{_datadir}/tests/osbuild-composer/composer

install -m 0644 -vp test/data/composer/*                           %{buildroot}%{_datadir}/tests/osbuild-composer/composer/

install -m 0755 -vd                                                %{buildroot}%{_datadir}/tests/osbuild-composer/worker

install -m 0644 -vp test/data/worker/*                             %{buildroot}%{_datadir}/tests/osbuild-composer/worker/

install -m 0755 -vd                                                %{buildroot}%{_datadir}/tests/osbuild-composer/repositories

install -m 0644 -vp test/data/repositories/*                       %{buildroot}%{_datadir}/tests/osbuild-composer/repositories/

install -m 0755 -vd                                                %{buildroot}%{_datadir}/tests/osbuild-composer/kerberos

install -m 0644 -vp test/data/kerberos/*                           %{buildroot}%{_datadir}/tests/osbuild-composer/kerberos/

install -m 0755 -vd                                                %{buildroot}%{_datadir}/tests/osbuild-composer/keyring

install -m 0644 -vp test/data/keyring/id_rsa.pub                   %{buildroot}%{_datadir}/tests/osbuild-composer/keyring/

install -m 0600 -vp test/data/keyring/id_rsa                       %{buildroot}%{_datadir}/tests/osbuild-composer/keyring/

install -m 0755 -vd                                                %{buildroot}%{_datadir}/tests/osbuild-composer/koji

install -m 0644 -vp test/data/koji/*                               %{buildroot}%{_datadir}/tests/osbuild-composer/koji/

install -m 0755 -vd                                                %{buildroot}%{_datadir}/tests/osbuild-composer/x509

install -m 0644 -vp test/data/x509/*                               %{buildroot}%{_datadir}/tests/osbuild-composer/x509/

install -m 0755 -vd                                                %{buildroot}%{_datadir}/tests/osbuild-composer/schemas

install -m 0644 -vp pkg/jobqueue/dbjobqueue/schemas/*              %{buildroot}%{_datadir}/tests/osbuild-composer/schemas/

install -m 0755 -vd                                               %{buildroot}%{_datadir}/tests/osbuild-composer/upgrade8to9

install -m 0644 -vp test/data/upgrade8to9/*                       %{buildroot}%{_datadir}/tests/osbuild-composer/upgrade8to9/

%endif

%check

export GOFLAGS="-buildmode=pie"

%if 0%{?rhel}

export GOFLAGS+=" -mod=vendor"

export GOPATH=$PWD/_build:%{gopath}

# cd inside GOPATH, otherwise go with GO111MODULE=off ignores vendor directory

cd $PWD/_build/src/%{goipath}

%gotest ./...

%else

%gocheck

%endif

%post

%systemd_post osbuild-composer.service osbuild-composer.socket osbuild-composer-api.socket osbuild-composer-prometheus.socket osbuild-remote-worker.socket

%preun

%systemd_preun osbuild-composer.service osbuild-composer.socket osbuild-composer-api.socket osbuild-composer-prometheus.socket osbuild-remote-worker.socket

%postun

%systemd_postun_with_restart osbuild-composer.service osbuild-composer.socket osbuild-composer-api.socket osbuild-composer-prometheus.socket osbuild-remote-worker.socket

%files

%license LICENSE

%doc README.md

%{_mandir}/man7/%{name}.7*

%{_unitdir}/osbuild-composer.service

%{_unitdir}/osbuild-composer.socket

%{_unitdir}/osbuild-composer-api.socket

%{_unitdir}/osbuild-composer-prometheus.socket

%{_unitdir}/osbuild-local-worker.socket

%{_unitdir}/osbuild-remote-worker.socket

%{_sysusersdir}/osbuild-composer.conf

%package core

Summary:    The core osbuild-composer binary

Requires:   %{name}-dnf-json = %{version}-%{release}

%description core

The core osbuild-composer binary. This is suitable both for spawning in containers and by systemd.

%files core

%{_libexecdir}/osbuild-composer/osbuild-composer

%{_datadir}/osbuild-composer/

%package worker

Summary:    The worker for osbuild-composer

Requires:   systemd

Requires:   qemu-img

Requires:   osbuild >= 93

Requires:   osbuild-ostree >= 93

Requires:   osbuild-lvm2 >= 93

Requires:   osbuild-luks2 >= 93

Requires:   %{name}-dnf-json = %{version}-%{release}

%description worker

The worker for osbuild-composer

%files worker

%{_libexecdir}/osbuild-composer/osbuild-worker

%{_unitdir}/osbuild-worker@.service

%{_unitdir}/osbuild-remote-worker@.service

%post worker

%systemd_post osbuild-worker@.service osbuild-remote-worker@.service

%preun worker

# systemd_preun uses systemctl disable --now which doesn't work well with template services.

# See https://github.com/systemd/systemd/issues/15620

# The following lines mimicks its behaviour by running two commands.

# The scriptlet is supposed to run only when the package is being removed.

if [ $1 -eq 0 ] && [ -d /run/systemd/system ]; then

    # disable and stop all the worker services

    systemctl --no-reload disable osbuild-worker@.service osbuild-remote-worker@.service

    systemctl stop "osbuild-worker@*.service" "osbuild-remote-worker@*.service"

fi

%postun worker

# restart all the worker services

%systemd_postun_with_restart "osbuild-worker@*.service" "osbuild-remote-worker@*.service"

%package dnf-json

Summary: The dnf-json binary used by osbuild-composer and the workers

# Conflicts with older versions of composer that provide the same files

# this can be removed when RHEL 8 reaches EOL

Conflicts: osbuild-composer <= 35

%description dnf-json

The dnf-json binary used by osbuild-composer and the workers.

%files dnf-json

%{_libexecdir}/osbuild-composer/dnf-json

%post dnf-json

# Fix ownership of the rpmmd cache files from previous versions where it was owned by root:root

if [ -e /var/cache/osbuild-composer/rpmmd ]; then

    chown -f -R --from root:root _osbuild-composer:_osbuild-composer /var/cache/osbuild-composer/rpmmd

fi

%if %{with tests} || 0%{?rhel}

%package tests

Summary:    Integration tests

%if %{with relax_requires}

Requires:   %{name}

%else

Requires:   %{name} = %{version}-%{release}

%endif

Requires:   composer-cli

Requires:   createrepo_c

Requires:   xorriso

Requires:   qemu-kvm-core

Requires:   systemd-container

Requires:   jq

Requires:   unzip

Requires:   container-selinux

Requires:   dnsmasq

Requires:   krb5-workstation

Requires:   podman

Requires:   python3

Requires:   sssd-krb5

Requires:   libvirt-client libvirt-daemon

Requires:   libvirt-daemon-config-network

Requires:   libvirt-daemon-config-nwfilter

Requires:   libvirt-daemon-driver-interface

Requires:   libvirt-daemon-driver-network

Requires:   libvirt-daemon-driver-nodedev

Requires:   libvirt-daemon-driver-nwfilter

Requires:   libvirt-daemon-driver-qemu

Requires:   libvirt-daemon-driver-secret

Requires:   libvirt-daemon-driver-storage

Requires:   libvirt-daemon-driver-storage-disk

Requires:   libvirt-daemon-kvm

Requires:   qemu-img

Requires:   qemu-kvm

Requires:   rpmdevtools

Requires:   virt-install

Requires:   expect

Requires:   python3-lxml

Requires:   httpd

Requires:   mod_ssl

Requires:   openssl

Requires:   firewalld

Requires:   podman-plugins

Requires:   dnf-plugins-core

Requires:   skopeo

Requires:   make

Requires:   python3-pip

%if 0%{?fedora}

# koji and ansible are not in RHEL repositories. Depending on them breaks RHEL

# gating (see OSCI-1541). The test script must enable EPEL and install those

# packages manually.

Requires:   koji

Requires:   ansible

%endif

%ifarch %{arm}

Requires:   edk2-aarch64

%endif

%description tests

Integration tests to be run on a pristine-dedicated system to test the osbuild-composer package.

%files tests

%{_libexecdir}/osbuild-composer-test/

%{_libexecdir}/tests/osbuild-composer/

%{_datadir}/tests/osbuild-composer/

%endif

%changelog

* Wed Sep 20 2023 Packit <hello@packit.dev> - 90-1

Changes with 90

----------------

  * Actions: add workflow for marking and closing stale issues and PRs (#3676)

    * Author: Tomáš Hozza, Reviewers: Achilleas Koutsou

  * Add test case for iot-qcow2-image (#3668)

    * Author: He Yi, Reviewers: Xiaofeng Wang

  * OpenSCAP cloudapi tailoring (#3617)

    * Author: Gianluca Zuccarelli, Reviewers: Tomáš Hozza

  * oci object storage target (#3675)

    * Author: Sanne Raymaekers, Reviewers: Gianluca Zuccarelli

  * test/cases/ubi-wsl: set --os-type when creating vm (#3686)

    * Author: Sanne Raymaekers, Reviewers: Tomáš Hozza

  * test: remove workaround for bug BZ#2234390 (#3684)

    * Author: Xiaofeng Wang, Reviewers: Achilleas Koutsou, Brian C. Lane

  * test: workaround fdo package issue (#3690)

    * Author: Xiaofeng Wang, Reviewers: Achilleas Koutsou

— Somewhere on the Internet, 2023-09-20

* Wed Sep 06 2023 Packit <hello@packit.dev> - 89-1

Changes with 89

----------------

  * Handle panics in the osbuild job & fix panic when OCI authentication fails (#3666)

  * Oci test (#3629)

  * Tests: Add softlockup_all_cpu_backtrace=1 boot argument (#3656)

  * Tests: Remove deprecated --os-type cli argument (#3643)

  * build(deps): bump the go-deps group with 2 updates (#3661)

  * cloudapi/v2: expose wsl image type (#3660)

  * test/cases/ubi-wsl: fix waiting for a valid ipv4 (#3670)

  * test/cases/ubi-wsl: public ip fixes (#3653)

  * test: add workaround for bug BZ#2234390 (#3663)

  * test: fix "Waiter SnapshotImported failed: Max attempts exceeded" (#3662)

Contributions from: Alexander Todorov, Ondřej Budai, Sanne Raymaekers, Xiaofeng Wang, dependabot[bot]

— Somewhere on the Internet, 2023-09-06

* Thu Aug 24 2023 Packit <hello@packit.dev> - 88-1

Changes with 88

----------------

  * COMPOSER-2016: blueprint: make Convert respect nils (#3612)

  * Update rhel ga runners (#3596)

  * Use newer RHEL 8.9 & 9.3 images for testing (#3603)

  * build(deps): bump github.com/aws/aws-sdk-go from 1.44.318 to 1.44.322 (#3620)

  * build(deps): bump github.com/openshift-online/ocm-sdk-go from 0.1.315 to 0.1.362 (#3627)

  * cloudapi: Add ability to skip uploading and save image locally (#3585)

  * dashboards/worker: default to showing the past 6 hours (#3651)

  * dependabot: group go package updates (#3642)

  * deps: update osbuild/images to 9548bf0d0140 (#3606)

  * deps: update osbuild/images to v0.3.0 (#3634)

  * go.mod: bump osbuild/images to c2aa82cc9a86 (#3640)

  * internal/cloud/gcp/compute: Add SEV_SNP_CAPABLE Guest OS Feature (#3579)

  * schutzbot: unregister test hosts (#3630)

  * test/cases/ubi-wsl: double ssh timeout (#3624)

  * test: add workaround for bug 2230537 and 2229722 (#3615)

  * test: run greenboot rollback test on ostree.sh, ostree-ami-image.sh and ostree-vsphere.sh (#3618)

  * test: update edge-ami test to support aarch64 (#3613)

  * test: wait for ami image avaiable to use before tag creation (#3619)

Contributions from: Achilleas Koutsou, Alexander Todorov, Brian C. Lane, Ondřej Budai, Sanne Raymaekers, Timothée Ravier, Tomáš Hozza, Xiaofeng Wang, dependabot[bot]

— Somewhere on the Internet, 2023-08-24

* Wed Aug 09 2023 Packit <hello@packit.dev> - 87-1

Changes with 87

----------------

  * Koji: expose image metadata in build extra metadata, including boot mode (#3599)

  * Main cloud size (#3597)

  * Update snapshots to 20230801 (#3592)

  * deps: update osbuild/images to 157e798fdf8d (#3593)

  * test/cases/api: add check for subscription-manager facts (#3257)

  * test: Fix Fedora 39 snapshot urls in test repo (#3574)

  * tests: Add a check for valid snapshot urls (#3572)

Contributions from: Achilleas Koutsou, Brian C. Lane, Jakub Rusz, Sanne Raymaekers, Tomáš Hozza, Xiaofeng Wang, schutzbot, yih

— Somewhere on the Internet, 2023-08-09

* Wed Jul 26 2023 Packit <hello@packit.dev> - 86-1

Changes with 86

----------------

  * Openapi revision (#3286)

  * Start collecting logs from virt-install (#3557)

  * Ubi wsl (#3473)

  * Update osbuild/images (#3565)

  * ci: fix the gitlab trigger (#3568)

  * packer: Move to Fedora 38 and use cheaper GP3 volumes (#3554)

  * spec: require osbuild >= 89 (#3524)

  * test/README: describe vendoring modified images repo (#3564)

  * tools: Set a+x on rpm_spec_vendor2provides (#3562)

  * tools: replace spec Provides generator (#3560)

Contributions from: Achilleas Koutsou, Alexander Todorov, Brian C. Lane, Diaa Sami, Mario Cattamo, Ondřej Budai, Sanne Raymaekers, Simon de Vlieger, Xiaofeng Wang

— Somewhere on the Internet, 2023-07-26

* Thu Jul 20 2023 Fedora Release Engineering <releng@fedoraproject.org> - 85-2

- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild

* Wed Jul 12 2023 Packit <hello@packit.dev> - 85-1

Changes with 85

----------------

  * Allow any hashing algorithm in osbuild stage inputs (#3514)

  * COMPOSER-1959: Test on 8.9 and 9.3 nightly (#3422)

  * Deprecated mas sso (#3531)

  * Enable CI for Fedora 38 & a few cleanups (#3481)

  * Fix ISO building on F39 (#3523)

  * Fix for possibly undefined variable in CI script (#3549)

  * Introduce test conditions for AWS & Azure (#3493)

  * Packit/copr: Remove EPEL builds in favor of RHEL ones (#3507)

  * Remove Juan from the list of QE associates (#3550)

  * Remove redundant script in upgrade8to9 test (#3508)

  * Set the tenant in the request context, reuse it for the status and request duration metrics (#3510)

  * Update Cloud API with new manifest generation process (#3482)

  * Update manifests (#3494)

  * Update snapshots to 20230701 (#3540)

  * Upgrade 8to9 upgrade test for 9.3 (#3505)

  * cloudapi/v2: cleanup rebase leftovers (#3552)

  * cloudapi: openscap integration (#3522)

  * containers/osbuild-composer: add prometheus port parameter (#3497)

  * distro/rhel8: fix Azure EAP7 RHUI image definition (#3502)

  * jsondb: improve performance of list operation (#3504)

  * reorder middlewares in worker and cloud apis (#3534)

  * templates/dasbhoards: rework composer dashboard (#3538)

  * test/repos: use EUS CDN repos for RHEL 8.4 / 8.6 / 9.0 (#3467)

  * test: Four fixes for RHEL for Edge tests (#3532)

  * test: Remove rebase test shell script (#3530)

  * test: Some enhancements to make test stable (#3495)

Contributions from: Achilleas Koutsou, Alexander Todorov, Diaa Sami, Eng Zer Jun, Gianluca Zuccarelli, Ondřej Budai, Sanne Raymaekers, Simon de Vlieger, Tomáš Hozza, Xiaofeng Wang, dependabot[bot], schutzbot

— Somewhere on the Internet, 2023-07-12

* Wed Jun 14 2023 Packit <hello@packit.dev> - 84-1

Changes with 84

----------------

  * Add the 'edge-ami' image type based on edge-raw-image (#3429)

  * CI: Move RHEL for Edge CI into osbuild/rhel-edge-ci repo (#3460)

  * Cleanup of Fedora cloud images (#3480)

  * Finalise interface between composer and image definitions (#3444)

  * Update snapshots to 20230522 (#3451)

  * build(deps): bump google.golang.org/api from 0.123.0 to 0.126.0 (#3485)

  * cloudapi: add vsphere-ova type (#3474)

  * fedora: f36 went EOL (#3445)

  * internal/cloudapi: new prometheus listener (#3430)

  * internal/osbuild: yum repos ssl verify (#3419)

  * osbuild: Add validation error logging (#3483)

  * templates/composer:  parametrise replicas and tweak cpu requests/limits (#3472)

Contributions from: Achilleas Koutsou, Brian C. Lane, Diaa Sami, Gianluca Zuccarelli, Irene Diez, Ondřej Budai, Sanne Raymaekers, Simon de Vlieger, Tomáš Hozza, Xiaofeng Wang, dependabot[bot], jabia99, schutzbot

— Somewhere on the Internet, 2023-06-14

* Wed May 31 2023 Packit <hello@packit.dev> - 83-1

Changes with 83

----------------

  * Add support for VMware ovf image type (#3371)

  * Add tests for blueprint package name globs and fix blueprint freeze with globs (#3425)

  * CI: update centos-stream-8 images and snapshots (#3466)

  * Dockerfile*: update to ubi9 and chown the files when copying (#3443)

  * Fedora/iot-raw-image: support custom files and directories in `/etc` (+ services customization) (#3303)

  * Fixes for the koji integration (#3399)

  * Revert the hybrid boot mode changes on RHEL (RHUI) EC2 images prior to 8.9 / 9.3 (#3455)

  * Support hybrid boot mode on x86_64 AMI images and set the AMI boot mode on image registration (#3446)

  * build(deps): bump cloud.google.com/go/compute from 1.10.0 to 1.19.3 (#3442)

  * build(deps): bump cloud.google.com/go/storage from 1.27.0 to 1.30.1 (#3428)

  * build(deps): bump github.com/docker/distribution from 2.8.1+incompatible to 2.8.2+incompatible (#3437)

  * build(deps): bump github.com/labstack/echo/v4 from 4.10.0 to 4.10.2 (#3454)

  * build(deps): bump github.com/stretchr/testify from 1.8.2 to 1.8.3 (#3457)

  * build(deps): bump google.golang.org/api from 0.122.0 to 0.123.0 (#3453)

  * internal/GCP: remove all remaining uses of `cloudbuild` (#3450)

  * iot: add fedora-release-iot to iot-installer (#3441)

Contributions from: Alexander Todorov, Brian C. Lane, Jakub Rusz, Ondřej Budai, Paul Whalen, Sanne Raymaekers, Tomáš Hozza, dependabot[bot]

— Somewhere on the Internet, 2023-05-31

* Wed May 17 2023 Packit <hello@packit.dev> - 82-1

Changes with 82

----------------

  * Adjust packer build to work with the amazon plugin 1.2.3 (#3402)

  * Disable firewalld for RHEL 8 Azure EAP (#3421)

  * Update terraform SHA (#3420)

  * cloudapi: custom repos add missing fields (#3418)

  * internal/manifest: install rhc-worker-playbook when using rhc (#3432)

Contributions from: Achilleas Koutsou, Gianluca Zuccarelli, Jakub Rusz, Ondřej Budai, Sanne Raymaekers, dependabot[bot], jabia99

— Somewhere on the Internet, 2023-05-17

* Wed Apr 19 2023 Packit <hello@packit.dev> - 80-1

Changes with 80

----------------

  * COMPOSER-1936: Enable regression-insecure-repo test for nightly CI pipeline (#3380)

  * COMPOSER-1943: Fix failure in cross-distro.sh (#3379)

  * Save manifest lists when pulling containers (#3336)

  * Simplify packit config (#3339)

  * Test/fix cs9 edge-simplified-installer test failure (#3382)

  * build(deps): bump github.com/docker/docker from 20.10.17+incompatible to 20.10.24+incompatible (#3376)

  * cloudapi/v2: expose repo metadata verification (#3387)

  * dbjobqueue: Make dequeuing atomic (#3389)

  * internal/worker: log dequeue failures (#3369)

  * rpi firmware copy (#3391)

Contributions from: Achilleas Koutsou, Alexander Todorov, Gianluca Zuccarelli, Jiri Popelka, Ondřej Budai, Sanne Raymaekers, Simon de Vlieger, dependabot[bot], yih

— Somewhere on the Internet, 2023-04-19

* Wed Apr 05 2023 Packit <hello@packit.dev> - 79-1

Changes with 79

----------------

  * Add Butane test and Ignition logs (#3223)

  * Add tags to CIV instances (#3343)

  * COMPOSER-1936: Use check_gpg=True during testing (#3353)

  * New image type: Azure EAP for RHEL 8.6+ (no RHEL 9). (#3288)

  * build(deps): bump github.com/opencontainers/runc from 1.1.3 to 1.1.5 (#3365)

  * containers/osbuild-composer: wait for fluentd in entrypoint (#3357)

  * distro/rhel: add payload repos to os package set (#3329)

  * internal/boot: boot VMWare VMs with EFI and SCSI (#3351)

  * packit: build RPMs also for EPEL 9 and RHEL (#3359)

  * per-distro rpmmd cache directory (#3317)

  * upload/azure: modernize & do not upload zeroed pages (#3367)

  * weldr+distro: allow to send Manifest warnings on ComposeReply (#3319)

Contributions from: Achilleas Koutsou, Alexander Todorov, Brian C. Lane, Diaa Sami, Irene Diez, Jakub Rusz, Juan Abia, Mario Cattamo, Ondřej Budai, Sanne Raymaekers, Tomáš Hozza, dependabot[bot]

— Somewhere on the Internet, 2023-04-05

* Wed Mar 22 2023 Packit <hello@packit.dev> - 78-1

Changes with 78

----------------