Skip to content

Pull from upstream - #3

Open
gmllt wants to merge 78 commits into
masterfrom
pull-from-upstream
Open

Pull from upstream#3
gmllt wants to merge 78 commits into
masterfrom
pull-from-upstream

Conversation

@gmllt

@gmllt gmllt commented Dec 16, 2024

Copy link
Copy Markdown
Member

No description provided.

Daniel Mikusa and others added 30 commits February 10, 2020 14:55
[#172542782]
co-authored-by: Marty Spiewak <mspiewak@pivotal.io>
co-authored-by: Anthony Emengo <aemengo@pivotal.io>
* This allows them to be used with different versions of ruby

[#172659466]
* Allow local_path to be configured per recipe. This fixes an issue
where two recipes with the same version might try to download a file to
the same location (ports/artifacts/v<version>.tar.gz).

[#175072782]
- Renamed PHP recipe so it's not version specific
- Removed LibMaxMindRecipe as Ubuntu bionic has a recent enough version
- MaxMindRecipe now based off PeclRecipe as that extension is now available in PECL
- Added PkgConfigLibRecipe base class which can be used as a by recipes installing libraries that support pkg-config. The benefit is that it won't recompile the library if it already exists.
- Removed GeoipRecipe as this is no longer used
- HiredisRecipe, LibSodiumRecipe, LibRdKafkaRecipe, CassandraCppDriverRecipe, and RabbitMQRecipe have all been switched to base off of PkgConfigLibRecipe
- Removed LibmemcachedRecipe as this takes a very long time to compile & the version in Ubuntu bionic is now the most recent one.
- Removed UnixOdbcRecipe as we can now use the version of UnixODBC that ships with Ubuntu bionic
- OdbcRecipe & PdoOdbcRecipe have been switched to use version of UnixODBC bundled with Ubuntu bionic
- PsrRecipe & PhalconRecipe have been removed as these extension are available on PECL now so they can be build with the standard PeclRecipe
- Added EnchantFakePecl recipe as we need a patch to make enchant extension compile under PHP8. It is not needed for PHP7.x.
- Don't delete PHP build files when packaging up the archive
- The new version line of Node.js is not compatible with python2

Signed-off-by: Sophie Wigmore <swigmore@vmware.com>
With the "--dereference" flag, tar follows symlinks, archives and dump
the files they point to, replacing the symlink.

For e.g. the following:
lrwxrwxrwx 1    39 libgpg-error.so -> /lib/x86_64-linux-gnu/libgpg-error.so.0

will now become:
-rw-r--r-- 1 84032 libgpg-error.so

due to the "--dereference" flag.

Pros:

* Avoids the possiblity of archive extraction vulnerabilities, where an
attacker may gain access to parts of the file system outside of the
target folder on extraction.
See e.g. https://snyk.io/blog/severe-security-vulnerability-in-bowers-zip-archive-extraction/

* The resultant dependency.tgz will pass all systems testing against the
above stated vuln.

Cons:

* Increases the compressed dependency archive size since symlinks have
to be replaced by their targets during compress-time. The compress-time
filesystem is expected to have the target available.

For e.g. the following:
lrwxrwxrwx 1     14 libuv.so -> libuv.so.1.0.0
lrwxrwxrwx 1     14 libuv.so.1 -> libuv.so.1.0.0
-rwxr-xr-x 1 747232 libuv.so.1.0.0

will now become:
-rwxr-xr-x 3 747232 libuv.so
-rwxr-xr-x 3 747232 libuv.so.1
-rwxr-xr-x 3 747232 libuv.so.1.0.0
This makes the changes done in cloudfoundry#56 to only affect php.
We noticed undesired consequences in node and .Net
and thus is only done in php until more details
come to light.
…ce-only-php

archive_recipe: compress tar with deference only for php
Old URL required a captcha verification.
URL found in comments of https://bugs.php.net/bug.php\?id\=81056
…efactor

Refactor binary-builder to support Ruby 3.x (cflinuxfs4)
Sophie Wigmore and others added 30 commits February 2, 2023 17:17
- upstream APR versions were updated and caused HTTPD compilation
failures
Update cflinuxfs4 PHP and HTTPD compilation
- Updates to a more modern version of go used to build go from source
- Makes cflinuxfs3 and cflinuxfs4 recipes more similar
Co-authored-by: Sophie Wigmore <swigmore@vmware.com>
…uxfs4-libraries

Update the required .so libs acording to cflinuxfs4 stack
Update go version for binary builder
Use github mirror to figure out their latest released version and use
them in the httpd dependency build process.

Mirrors that host apr* libraries remove older versions when newer
versions are released.

See similar issues addressed in the paketo project:
paketo-buildpacks/httpd#470
paketo-buildpacks/httpd#472
httpd: do not hardcode versions of apr
Install imagick packages for cflinuxfs4 php build
Eliminate print that generated noise in the build
Add libmagickwand-dev libmagickcore-dev to cflinuxfs4 php compilation
All pipeline jobs are moving away from direct AWS access to access
via a service-user that can assume a role with privileges.
See cloudfoundry/buildpacks-ci#318

The pipeline for the specs test is currently red. This change doesn't
attempt to fix that.
…on-cflinuxfs3

Pin Bundler version in cflinuxfs3 binary-builder logic
* Updates HWC recipe to use new build script

* Removes unnecessary recipe
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

8 participants