search

EESSI / compatibility-layer

Compatibility layer of the EESSI project
https://eessi.github.io/docs/compatibility_layer
GNU General Public License v2.0
11 stars 21 forks source link

script for updating compat layer 2023.06 #193

Closed trz42 closed 9 months ago

trz42 commented 10 months ago

This is a bit WIP. So far, the emerge commands have been run for x86_64 only. The update will be repeated using this script. Then also run for aarch64 (after verifying that the GLSAs are the same for aarch64).

glsa-check output ``` Checking GLSA 202309-14 >>> The following updates will be performed for this GLSA: >>> Updates that will be performed: app-arch/libarchive-3.7.1 (vulnerable: app-arch/libarchive-3.6.2-r1) Checking GLSA 202310-03 >>> The following updates will be performed for this GLSA: >>> Updates that will be performed: sys-libs/glibc-2.37-r7 (vulnerable: sys-libs/glibc-2.37-r3) Checking GLSA 202310-12 >>> The following updates will be performed for this GLSA: >>> Updates that will be performed: net-misc/curl-8.3.0-r2 (vulnerable: net-misc/curl-8.1.2) ```
diff (pre/post-update) for qlist -IRv | sort for x86_64 ```diff --- upd_cl_x64/x86_64_installed-pkgs-pre-update.txt 2023-11-15 12:10:33.678387653 +0000 +++ upd_cl_x64/x86_64_installed-pkgs-post-update.txt 2023-11-15 12:08:40.414378323 +0000 @@ -32,7 +32,7 @@ app-alternatives/yacc-1-r2::gentoo app-arch/bzip2-1.0.8-r4::gentoo app-arch/gzip-1.12-r4::gentoo -app-arch/libarchive-3.6.2-r1::gentoo +app-arch/libarchive-3.7.1::gentoo app-arch/tar-1.34-r3::gentoo app-arch/unzip-6.0_p27-r1::gentoo app-arch/xz-utils-5.4.3::gentoo @@ -209,7 +209,7 @@ dev-python/trove-classifiers-2023.5.24::gentoo dev-python/typing-extensions-4.6.3::gentoo dev-python/uc-micro-py-1.0.2::gentoo -dev-python/uri_template-1.2.0-r1::eessi +dev-python/uri-template-1.2.0-r1::eessi dev-python/webcolors-1.13::gentoo dev-python/wheel-0.40.0::gentoo dev-python/zipp-3.15.0::gentoo @@ -234,7 +234,7 @@ net-libs/libnsl-2.0.0-r1::gentoo net-libs/libtirpc-1.3.3::gentoo net-libs/nghttp2-1.52.0::gentoo -net-misc/curl-8.1.2::gentoo +net-misc/curl-8.3.0-r2::gentoo net-misc/rsync-3.2.7-r2::gentoo net-misc/wget-1.21.4::gentoo perl-core/File-Temp-0.231.100::gentoo @@ -295,7 +295,7 @@ sys-kernel/installkernel-gentoo-7::gentoo sys-kernel/linux-headers-6.3::gentoo sys-libs/gdbm-1.23::gentoo -sys-libs/glibc-2.37-r3::gentoo +sys-libs/glibc-2.37-r7::gentoo sys-libs/libcap-2.69::gentoo sys-libs/libseccomp-2.5.4::gentoo sys-libs/libxcrypt-4.4.35::gentoo ```
diff (pre/post-update) for qlist -IRv | sort for aarch64 ```diff --- upd_cl_x64/aarch64_installed-pkgs-pre-update.txt 2023-11-15 12:10:16.494082798 +0000 +++ upd_cl_x64/aarch64_installed-pkgs-post-update.txt 2023-11-15 12:09:29.335246185 +0000 @@ -32,7 +32,7 @@ app-alternatives/yacc-1-r2::gentoo app-arch/bzip2-1.0.8-r4::gentoo app-arch/gzip-1.12-r4::gentoo -app-arch/libarchive-3.6.2-r1::gentoo +app-arch/libarchive-3.7.1::gentoo app-arch/tar-1.34-r3::gentoo app-arch/unzip-6.0_p27-r1::gentoo app-arch/xz-utils-5.4.3::gentoo @@ -209,7 +209,7 @@ dev-python/trove-classifiers-2023.5.24::gentoo dev-python/typing-extensions-4.6.3::gentoo dev-python/uc-micro-py-1.0.2::gentoo -dev-python/uri_template-1.2.0-r1::eessi +dev-python/uri-template-1.2.0-r1::eessi dev-python/webcolors-1.13::gentoo dev-python/wheel-0.40.0::gentoo dev-python/zipp-3.15.0::gentoo @@ -234,7 +234,7 @@ net-libs/libnsl-2.0.0-r1::gentoo net-libs/libtirpc-1.3.3::gentoo net-libs/nghttp2-1.52.0::gentoo -net-misc/curl-8.1.2::gentoo +net-misc/curl-8.3.0-r2::gentoo net-misc/rsync-3.2.7-r2::gentoo net-misc/wget-1.21.4::gentoo perl-core/File-Temp-0.231.100::gentoo @@ -294,7 +294,7 @@ sys-kernel/installkernel-gentoo-7::gentoo sys-kernel/linux-headers-6.3::gentoo sys-libs/gdbm-1.23::gentoo -sys-libs/glibc-2.37-r3::gentoo +sys-libs/glibc-2.37-r7::gentoo sys-libs/libcap-2.69::gentoo sys-libs/libseccomp-2.5.4::gentoo sys-libs/libxcrypt-4.4.35::gentoo
eessi-bot[bot] commented 10 months ago

Instance eessi-bot-mc-aws is configured to build:

boegel commented 10 months ago

@trz42 Can you include the output of glsa-check in the PR description, and maybe also a sorted list of installed packages (incl. version, via qlist -IRv | sort), for future reference?

You can use a "details" block like:


<details>
long
list
of
stuff
goes
here
</details>
trz42 commented 10 months ago

@trz42 Can you include the output of glsa-check in the PR description, and maybe also a sorted list of installed packages (incl. version, via qlist -IRv | sort), for future reference?

Done.

trz42 commented 10 months ago

Uploaded tarballs to S3 bucket for software.eessi.io.