Skip to content
Merged
Show file tree
Hide file tree
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
5 changes: 5 additions & 0 deletions .github/renovate.json
Original file line number Diff line number Diff line change
@@ -0,0 +1,5 @@
{
"$schema": "https://docs.renovatebot.com/renovate-schema.json",
"extends": ["config:base"],
"enabledManagers": ["tekton"]
}
18 changes: 18 additions & 0 deletions .rpm-lockfiles/nettest/rpms.in.yaml
Original file line number Diff line number Diff line change
@@ -0,0 +1,18 @@
---
context:
containerfile: ../../package/Dockerfile.nettest.konflux

contentOrigin:
repofiles:
- submariner-rhel-9.repo
packages:
- bind-utils
- curl
- iperf3
- iproute
- iputils
- nmap-ncat
- tcpdump
arches:
- x86_64
- aarch64
250 changes: 250 additions & 0 deletions .rpm-lockfiles/nettest/rpms.lock.yaml
Original file line number Diff line number Diff line change
@@ -0,0 +1,250 @@
---
lockfileVersion: 1
lockfileVendor: redhat
arches:
- arch: aarch64
packages:
- url: https://cdn.redhat.com/content/dist/rhel9/9/aarch64/appstream/os/Packages/b/bind-libs-9.16.23-29.el9_6.aarch64.rpm
repoid: rhel-9-for-aarch64-appstream-rpms
size: 1252053
checksum: sha256:377f4365d2ef6f0f9b6aff76896b612f3c6bce97bdb4b867a1209cb9d13d7314
name: bind-libs
evr: 32:9.16.23-29.el9_6
sourcerpm: bind-9.16.23-29.el9_6.src.rpm
- url: https://cdn.redhat.com/content/dist/rhel9/9/aarch64/appstream/os/Packages/b/bind-license-9.16.23-29.el9_6.noarch.rpm
repoid: rhel-9-for-aarch64-appstream-rpms
size: 13505
checksum: sha256:56f8b7c42b6a16bbfabc69754fd8a1547e1c79bbca46b9e5717ed4ea218a7efc
name: bind-license
evr: 32:9.16.23-29.el9_6
sourcerpm: bind-9.16.23-29.el9_6.src.rpm
- url: https://cdn.redhat.com/content/dist/rhel9/9/aarch64/appstream/os/Packages/b/bind-utils-9.16.23-29.el9_6.aarch64.rpm
repoid: rhel-9-for-aarch64-appstream-rpms
size: 212079
checksum: sha256:ae91b67eb72afda804b528411b0c5a4c9fa1f529b721d6b8d3f3b51d8703362b
name: bind-utils
evr: 32:9.16.23-29.el9_6
sourcerpm: bind-9.16.23-29.el9_6.src.rpm
- url: https://cdn.redhat.com/content/dist/rhel9/9/aarch64/appstream/os/Packages/f/fstrm-0.6.1-3.el9.aarch64.rpm
repoid: rhel-9-for-aarch64-appstream-rpms
size: 29476
checksum: sha256:d71126c7f575cec5aec3a2ad639b4cd0a19fdbc30b249dd37249c9a72a4d0786
name: fstrm
evr: 0.6.1-3.el9
sourcerpm: fstrm-0.6.1-3.el9.src.rpm
- url: https://cdn.redhat.com/content/dist/rhel9/9/aarch64/appstream/os/Packages/i/iperf3-3.9-14.el9.aarch64.rpm
repoid: rhel-9-for-aarch64-appstream-rpms
size: 109627
checksum: sha256:d3e89d97e3aeb8832e0beff9d891b2230a6a44271b6e72004c97b9e5322f65d7
name: iperf3
evr: 3.9-14.el9
sourcerpm: iperf3-3.9-14.el9.src.rpm
- url: https://cdn.redhat.com/content/dist/rhel9/9/aarch64/appstream/os/Packages/l/libmaxminddb-1.5.2-4.el9.aarch64.rpm
repoid: rhel-9-for-aarch64-appstream-rpms
size: 40090
checksum: sha256:e592c42d8fd02113396c91860d3f44dfbd65ab39e2c36ebafaf47cdb7db7d56a
name: libmaxminddb
evr: 1.5.2-4.el9
sourcerpm: libmaxminddb-1.5.2-4.el9.src.rpm
- url: https://cdn.redhat.com/content/dist/rhel9/9/aarch64/appstream/os/Packages/l/libuv-1.42.0-2.el9_4.aarch64.rpm
repoid: rhel-9-for-aarch64-appstream-rpms
size: 150129
checksum: sha256:4dc8a40da74e0f9823356460ee11f183c70f382953700fffef0c448198a677cc
name: libuv
evr: 1:1.42.0-2.el9_4
sourcerpm: libuv-1.42.0-2.el9_4.src.rpm
- url: https://cdn.redhat.com/content/dist/rhel9/9/aarch64/appstream/os/Packages/n/nmap-ncat-7.92-3.el9.aarch64.rpm
repoid: rhel-9-for-aarch64-appstream-rpms
size: 228860
checksum: sha256:bd929a6e3161dfee43b377f888d3712ee70cfb591f50cab845e8551973b010f1
name: nmap-ncat
evr: 3:7.92-3.el9
sourcerpm: nmap-7.92-3.el9.src.rpm
- url: https://cdn.redhat.com/content/dist/rhel9/9/aarch64/appstream/os/Packages/t/tcpdump-4.99.0-9.el9.aarch64.rpm
repoid: rhel-9-for-aarch64-appstream-rpms
size: 548341
checksum: sha256:9cfbbb0b1ea4902364770d4082f5d121088709e3c89d8efa375da5e0be463077
name: tcpdump
evr: 14:4.99.0-9.el9
sourcerpm: tcpdump-4.99.0-9.el9.src.rpm
- url: https://cdn.redhat.com/content/dist/rhel9/9/aarch64/baseos/os/Packages/c/curl-7.76.1-31.el9.aarch64.rpm
repoid: rhel-9-for-aarch64-baseos-rpms
size: 301167
checksum: sha256:fc7fccc1530f3d0a5b0d7feb122bbe0410de9b5ed8de7bb2d0f5441828671daa
name: curl
evr: 7.76.1-31.el9
sourcerpm: curl-7.76.1-31.el9.src.rpm
- url: https://cdn.redhat.com/content/dist/rhel9/9/aarch64/baseos/os/Packages/i/iputils-20210202-11.el9_6.1.aarch64.rpm
repoid: rhel-9-for-aarch64-baseos-rpms
size: 178556
checksum: sha256:9a92187f9c43ae5e5be824466b1c79c4e1852b1ac9529e68eb681db709c4ea0b
name: iputils
evr: 20210202-11.el9_6.1
sourcerpm: iputils-20210202-11.el9_6.1.src.rpm
- url: https://cdn.redhat.com/content/dist/rhel9/9/aarch64/baseos/os/Packages/l/libibverbs-54.0-1.el9.aarch64.rpm
repoid: rhel-9-for-aarch64-baseos-rpms
size: 459278
checksum: sha256:e64d3c31cf547cee1ad95c144483f71082716f5ee659cdd7f06d0bcde590c3b2
name: libibverbs
evr: 54.0-1.el9
sourcerpm: rdma-core-54.0-1.el9.src.rpm
- url: https://cdn.redhat.com/content/dist/rhel9/9/aarch64/baseos/os/Packages/l/libnl3-3.11.0-1.el9.aarch64.rpm
repoid: rhel-9-for-aarch64-baseos-rpms
size: 363241
checksum: sha256:91c7bf60c756cd2a457652b95e96e725068898f4ce580b70784fc60a099621b5
name: libnl3
evr: 3.11.0-1.el9
sourcerpm: libnl3-3.11.0-1.el9.src.rpm
- url: https://cdn.redhat.com/content/dist/rhel9/9/aarch64/baseos/os/Packages/l/libpcap-1.10.0-4.el9.aarch64.rpm
repoid: rhel-9-for-aarch64-baseos-rpms
size: 176251
checksum: sha256:cd6462c66489eed11b8d9f1acf70a38a1a2629a969a31d0f511eca148783dcdd
name: libpcap
evr: 14:1.10.0-4.el9
sourcerpm: libpcap-1.10.0-4.el9.src.rpm
- url: https://cdn.redhat.com/content/dist/rhel9/9/aarch64/baseos/os/Packages/l/lksctp-tools-1.0.19-3.el9_4.aarch64.rpm
repoid: rhel-9-for-aarch64-baseos-rpms
size: 104765
checksum: sha256:cee3d1e0820c08a54280b91e30933393a9010f1ec12b34d4b5bb0ad9ef56ac34
name: lksctp-tools
evr: 1.0.19-3.el9_4
sourcerpm: lksctp-tools-1.0.19-3.el9_4.src.rpm
- url: https://cdn.redhat.com/content/dist/rhel9/9/aarch64/baseos/os/Packages/l/lmdb-libs-0.9.29-3.el9.aarch64.rpm
repoid: rhel-9-for-aarch64-baseos-rpms
size: 65370
checksum: sha256:81e64f24142a933be412847b892d49fad35d0eaf4b7eda54257af0fdaafaf87c
name: lmdb-libs
evr: 0.9.29-3.el9
sourcerpm: lmdb-0.9.29-3.el9.src.rpm
- url: https://cdn.redhat.com/content/dist/rhel9/9/aarch64/baseos/os/Packages/p/protobuf-c-1.3.3-13.el9.aarch64.rpm
repoid: rhel-9-for-aarch64-baseos-rpms
size: 38582
checksum: sha256:d68a518f80e00df5e63ba24d4be5058998d857e24b1af316f37001dfc91d3149
name: protobuf-c
evr: 1.3.3-13.el9
sourcerpm: protobuf-c-1.3.3-13.el9.src.rpm
source: []
module_metadata: []
- arch: x86_64
packages:
- url: https://cdn.redhat.com/content/dist/rhel9/9/x86_64/appstream/os/Packages/b/bind-libs-9.16.23-29.el9_6.x86_64.rpm
repoid: rhel-9-for-x86_64-appstream-rpms
size: 1301327
checksum: sha256:739fd2ba2892bfe139101ccd6ba7d90ed91cb9a0980a9c466b9e1082daa0e62a
name: bind-libs
evr: 32:9.16.23-29.el9_6
sourcerpm: bind-9.16.23-29.el9_6.src.rpm
- url: https://cdn.redhat.com/content/dist/rhel9/9/x86_64/appstream/os/Packages/b/bind-license-9.16.23-29.el9_6.noarch.rpm
repoid: rhel-9-for-x86_64-appstream-rpms
size: 13505
checksum: sha256:56f8b7c42b6a16bbfabc69754fd8a1547e1c79bbca46b9e5717ed4ea218a7efc
name: bind-license
evr: 32:9.16.23-29.el9_6
sourcerpm: bind-9.16.23-29.el9_6.src.rpm
- url: https://cdn.redhat.com/content/dist/rhel9/9/x86_64/appstream/os/Packages/b/bind-utils-9.16.23-29.el9_6.x86_64.rpm
repoid: rhel-9-for-x86_64-appstream-rpms
size: 211260
checksum: sha256:12ea325a2d760ed9711b4f48acc98172e391070a353cde6cba363801f0b7249f
name: bind-utils
evr: 32:9.16.23-29.el9_6
sourcerpm: bind-9.16.23-29.el9_6.src.rpm
- url: https://cdn.redhat.com/content/dist/rhel9/9/x86_64/appstream/os/Packages/f/fstrm-0.6.1-3.el9.x86_64.rpm
repoid: rhel-9-for-x86_64-appstream-rpms
size: 30777
checksum: sha256:7290d5c6c200a2c98be30c3f0d9cf58462d0bc1ddb7940a8c7c35ca4f7e090ce
name: fstrm
evr: 0.6.1-3.el9
sourcerpm: fstrm-0.6.1-3.el9.src.rpm
- url: https://cdn.redhat.com/content/dist/rhel9/9/x86_64/appstream/os/Packages/i/iperf3-3.9-14.el9.x86_64.rpm
repoid: rhel-9-for-x86_64-appstream-rpms
size: 113494
checksum: sha256:aa178fcd0927549c9cb5f3df052831405ae31387e05a83c4fb10ca3db2c772d0
name: iperf3
evr: 3.9-14.el9
sourcerpm: iperf3-3.9-14.el9.src.rpm
- url: https://cdn.redhat.com/content/dist/rhel9/9/x86_64/appstream/os/Packages/l/libmaxminddb-1.5.2-4.el9.x86_64.rpm
repoid: rhel-9-for-x86_64-appstream-rpms
size: 36179
checksum: sha256:70a1e33b55a32d85ea4508e9ebeefb3e0ce2f57619ee84c97c63af5dc1456342
name: libmaxminddb
evr: 1.5.2-4.el9
sourcerpm: libmaxminddb-1.5.2-4.el9.src.rpm
- url: https://cdn.redhat.com/content/dist/rhel9/9/x86_64/appstream/os/Packages/l/libuv-1.42.0-2.el9_4.x86_64.rpm
repoid: rhel-9-for-x86_64-appstream-rpms
size: 154427
checksum: sha256:e1fab39251239ccaad2fb4dbe6c55ec1ae60f76d4ae81582b06e6a58e30879b2
name: libuv
evr: 1:1.42.0-2.el9_4
sourcerpm: libuv-1.42.0-2.el9_4.src.rpm
- url: https://cdn.redhat.com/content/dist/rhel9/9/x86_64/appstream/os/Packages/n/nmap-ncat-7.92-3.el9.x86_64.rpm
repoid: rhel-9-for-x86_64-appstream-rpms
size: 234565
checksum: sha256:4107c9b2ac6fe1a6be44088f79fcafd012e22c7867dad98741c88590cadeb5a2
name: nmap-ncat
evr: 3:7.92-3.el9
sourcerpm: nmap-7.92-3.el9.src.rpm
- url: https://cdn.redhat.com/content/dist/rhel9/9/x86_64/appstream/os/Packages/t/tcpdump-4.99.0-9.el9.x86_64.rpm
repoid: rhel-9-for-x86_64-appstream-rpms
size: 559754
checksum: sha256:b558071af95cce3f67455ab1625f36b1172ed240c0391d554b8d54c6b7f965ae
name: tcpdump
evr: 14:4.99.0-9.el9
sourcerpm: tcpdump-4.99.0-9.el9.src.rpm
- url: https://cdn.redhat.com/content/dist/rhel9/9/x86_64/baseos/os/Packages/c/curl-7.76.1-31.el9.x86_64.rpm
repoid: rhel-9-for-x86_64-baseos-rpms
size: 304406
checksum: sha256:a5a9185a6295ef7880a50d58fcc8fb83392fbc52dc1406175091e87cf193097c
name: curl
evr: 7.76.1-31.el9
sourcerpm: curl-7.76.1-31.el9.src.rpm
- url: https://cdn.redhat.com/content/dist/rhel9/9/x86_64/baseos/os/Packages/i/iputils-20210202-11.el9_6.1.x86_64.rpm
repoid: rhel-9-for-x86_64-baseos-rpms
size: 178195
checksum: sha256:2760d3b457614fd29d24f6ceff4cd5354fb099193237ba9914dbeee5e69e67d3
name: iputils
evr: 20210202-11.el9_6.1
sourcerpm: iputils-20210202-11.el9_6.1.src.rpm
- url: https://cdn.redhat.com/content/dist/rhel9/9/x86_64/baseos/os/Packages/l/libibverbs-54.0-1.el9.x86_64.rpm
repoid: rhel-9-for-x86_64-baseos-rpms
size: 466434
checksum: sha256:fc593dc18f73c296df4fa808341cb2dbee7e5082fb872b79e7984c3b24279d3b
name: libibverbs
evr: 54.0-1.el9
sourcerpm: rdma-core-54.0-1.el9.src.rpm
- url: https://cdn.redhat.com/content/dist/rhel9/9/x86_64/baseos/os/Packages/l/libnl3-3.11.0-1.el9.x86_64.rpm
repoid: rhel-9-for-x86_64-baseos-rpms
size: 376137
checksum: sha256:89728a253a5bf1c8e01c40573f1283d40188e003bdbd4ac565f8b0f05bced55c
name: libnl3
evr: 3.11.0-1.el9
sourcerpm: libnl3-3.11.0-1.el9.src.rpm
- url: https://cdn.redhat.com/content/dist/rhel9/9/x86_64/baseos/os/Packages/l/libpcap-1.10.0-4.el9.x86_64.rpm
repoid: rhel-9-for-x86_64-baseos-rpms
size: 180846
checksum: sha256:3c0c51cc6b947970812238914713f1f96aa5e9bdaaceb6ee50249540ad89f05b
name: libpcap
evr: 14:1.10.0-4.el9
sourcerpm: libpcap-1.10.0-4.el9.src.rpm
- url: https://cdn.redhat.com/content/dist/rhel9/9/x86_64/baseos/os/Packages/l/lksctp-tools-1.0.19-3.el9_4.x86_64.rpm
repoid: rhel-9-for-x86_64-baseos-rpms
size: 106024
checksum: sha256:ac2fc5dcba641ec68b03db44c0b644ef10661bc89a060be2aa1eaa9c6a4215db
name: lksctp-tools
evr: 1.0.19-3.el9_4
sourcerpm: lksctp-tools-1.0.19-3.el9_4.src.rpm
- url: https://cdn.redhat.com/content/dist/rhel9/9/x86_64/baseos/os/Packages/l/lmdb-libs-0.9.29-3.el9.x86_64.rpm
repoid: rhel-9-for-x86_64-baseos-rpms
size: 64208
checksum: sha256:9ae27044c8cd2ceef9bc72319c30f7e24442b5c239f6cf4cc92670b75259f2f9
name: lmdb-libs
evr: 0.9.29-3.el9
sourcerpm: lmdb-0.9.29-3.el9.src.rpm
- url: https://cdn.redhat.com/content/dist/rhel9/9/x86_64/baseos/os/Packages/p/protobuf-c-1.3.3-13.el9.x86_64.rpm
repoid: rhel-9-for-x86_64-baseos-rpms
size: 38224
checksum: sha256:9669f5bed1c9532ede399cd1ea6f8937ae7d18cfb56d59f2939a4b456390035f
name: protobuf-c
evr: 1.3.3-13.el9
sourcerpm: protobuf-c-1.3.3-13.el9.src.rpm
source: []
module_metadata: []
19 changes: 19 additions & 0 deletions .rpm-lockfiles/nettest/submariner-rhel-9.repo
Original file line number Diff line number Diff line change
@@ -0,0 +1,19 @@
[rhel-9-for-$basearch-baseos-rpms]
name = Red Hat Enterprise Linux 9 for $basearch - BaseOS (RPMs)
baseurl = https://cdn.redhat.com/content/dist/rhel9/9/$basearch/baseos/os
enabled = 1
gpgkey = file:///etc/pki/rpm-gpg/RPM-GPG-KEY-redhat-release
gpgcheck = 1
sslverify = 0
sslclientcert = /etc/pki/entitlement/8042786796365856351.pem
sslclientkey = /etc/pki/entitlement/8042786796365856351-key.pem

[rhel-9-for-$basearch-appstream-rpms]
name = Red Hat Enterprise Linux 9 for $basearch - AppStream (RPMs)
baseurl = https://cdn.redhat.com/content/dist/rhel9/9/$basearch/appstream/os
enabled = 1
gpgkey = file:///etc/pki/rpm-gpg/RPM-GPG-KEY-redhat-release
gpgcheck = 1
sslverify = 0
sslclientcert = /etc/pki/entitlement/8042786796365856351.pem
sslclientkey = /etc/pki/entitlement/8042786796365856351-key.pem
68 changes: 68 additions & 0 deletions .rpm-lockfiles/update-lockfile.sh
Original file line number Diff line number Diff line change
@@ -0,0 +1,68 @@
#!/bin/bash
#
# Regenerates RPM lockfiles for Konflux hermetic builds.
#
# Usage:
# # Update all components
# ./.rpm-lockfile/update-lockfile.sh
#
# # Update a single component
# ./.rpm-lockfile/update-lockfile.sh nettest
#

set -euo pipefail

SCRIPT_PATH=$(realpath "$0")
SCRIPT_DIR=$(dirname "${SCRIPT_PATH}")
REPO_ROOT=$(realpath "${SCRIPT_DIR}/..")

# Create a temporary directory for entitlement certificates to avoid SELinux issues.
# The trap command ensures the temporary directory is cleaned up on script exit.
entitlements_dir=$(mktemp -d)
trap 'rm -rf -- "$entitlements_dir"' EXIT

update_component_lockfile() {
local component=$1
local lockfile_dir=".rpm-lockfiles/${component}"

if [ ! -d "${REPO_ROOT}/${lockfile_dir}" ]; then
echo "Warning: Directory for component '${component}' not found, skipping."
return
fi

echo "--- Updating RPM lockfile for component: ${component} ---"

# Clear and re-copy certificates for each component to ensure a clean state.
rm -rf "${entitlements_dir:?}"/*
cp -r /etc/pki/entitlement/* "${entitlements_dir}"

podman run --rm -v "${REPO_ROOT}:/workspace:z" \
-v "${entitlements_dir}:/etc/pki/entitlement:ro,Z" \
-v "${XDG_RUNTIME_DIR}/containers/auth.json:/run/containers/0/auth.json:ro" \
registry.access.redhat.com/ubi9/ubi:latest \
/bin/bash -c "
set -x
cd /workspace/${lockfile_dir}
dnf install -y python3-pip git skopeo
pip3 install git+https://github.com/konflux-ci/rpm-lockfile-prototype.git
rpm-lockfile-prototype --allowerasing rpms.in.yaml
"

echo "--- Lockfile for ${component} updated successfully. ---"
}

if [ "$#" -eq 0 ]; then
echo "--- No component specified, updating all found components. ---"
for component_path in "${REPO_ROOT}/.rpm-lockfiles"/*/; do
if [ -f "${component_path}/rpms.in.yaml" ]; then
component_name=$(basename "${component_path}")
update_component_lockfile "${component_name}"
fi
done
echo "--- All components updated. ---"
elif [ "$#" -eq 1 ]; then
update_component_lockfile "$1"
else
echo "Usage: $0 [component-name]" >&2
exit 1
fi
Loading
Loading