Pull from upstream - #3
Open
gmllt wants to merge 78 commits into
Open
Conversation
Php extension ssh2
[#172009985]
[#172542782] co-authored-by: Marty Spiewak <mspiewak@pivotal.io> co-authored-by: Anthony Emengo <aemengo@pivotal.io>
* This allows them to be used with different versions of ruby [#172659466]
* Allow local_path to be configured per recipe. This fixes an issue where two recipes with the same version might try to download a file to the same location (ports/artifacts/v<version>.tar.gz). [#175072782]
[#173847421]
…n 24h, which makes debug faster.
- Renamed PHP recipe so it's not version specific - Removed LibMaxMindRecipe as Ubuntu bionic has a recent enough version - MaxMindRecipe now based off PeclRecipe as that extension is now available in PECL - Added PkgConfigLibRecipe base class which can be used as a by recipes installing libraries that support pkg-config. The benefit is that it won't recompile the library if it already exists. - Removed GeoipRecipe as this is no longer used - HiredisRecipe, LibSodiumRecipe, LibRdKafkaRecipe, CassandraCppDriverRecipe, and RabbitMQRecipe have all been switched to base off of PkgConfigLibRecipe - Removed LibmemcachedRecipe as this takes a very long time to compile & the version in Ubuntu bionic is now the most recent one. - Removed UnixOdbcRecipe as we can now use the version of UnixODBC that ships with Ubuntu bionic - OdbcRecipe & PdoOdbcRecipe have been switched to use version of UnixODBC bundled with Ubuntu bionic - PsrRecipe & PhalconRecipe have been removed as these extension are available on PECL now so they can be build with the standard PeclRecipe - Added EnchantFakePecl recipe as we need a patch to make enchant extension compile under PHP8. It is not needed for PHP7.x. - Don't delete PHP build files when packaging up the archive
- The new version line of Node.js is not compatible with python2 Signed-off-by: Sophie Wigmore <swigmore@vmware.com>
With the "--dereference" flag, tar follows symlinks, archives and dump the files they point to, replacing the symlink. For e.g. the following: lrwxrwxrwx 1 39 libgpg-error.so -> /lib/x86_64-linux-gnu/libgpg-error.so.0 will now become: -rw-r--r-- 1 84032 libgpg-error.so due to the "--dereference" flag. Pros: * Avoids the possiblity of archive extraction vulnerabilities, where an attacker may gain access to parts of the file system outside of the target folder on extraction. See e.g. https://snyk.io/blog/severe-security-vulnerability-in-bowers-zip-archive-extraction/ * The resultant dependency.tgz will pass all systems testing against the above stated vuln. Cons: * Increases the compressed dependency archive size since symlinks have to be replaced by their targets during compress-time. The compress-time filesystem is expected to have the target available. For e.g. the following: lrwxrwxrwx 1 14 libuv.so -> libuv.so.1.0.0 lrwxrwxrwx 1 14 libuv.so.1 -> libuv.so.1.0.0 -rwxr-xr-x 1 747232 libuv.so.1.0.0 will now become: -rwxr-xr-x 3 747232 libuv.so -rwxr-xr-x 3 747232 libuv.so.1 -rwxr-xr-x 3 747232 libuv.so.1.0.0
This makes the changes done in cloudfoundry#56 to only affect php. We noticed undesired consequences in node and .Net and thus is only done in php until more details come to light.
…ce-only-php archive_recipe: compress tar with deference only for php
This reverts commit b5a9e41.
Old URL required a captcha verification. URL found in comments of https://bugs.php.net/bug.php\?id\=81056
…efactor Refactor binary-builder to support Ruby 3.x (cflinuxfs4)
- upstream APR versions were updated and caused HTTPD compilation failures
Update cflinuxfs4 PHP and HTTPD compilation
- Updates to a more modern version of go used to build go from source - Makes cflinuxfs3 and cflinuxfs4 recipes more similar
Updates go recipe
Update go recipe
Co-authored-by: Sophie Wigmore <swigmore@vmware.com>
…uxfs4-libraries Update the required .so libs acording to cflinuxfs4 stack
Update go version for binary builder
Use github mirror to figure out their latest released version and use them in the httpd dependency build process. Mirrors that host apr* libraries remove older versions when newer versions are released. See similar issues addressed in the paketo project: paketo-buildpacks/httpd#470 paketo-buildpacks/httpd#472
httpd: do not hardcode versions of apr
Install imagick packages for cflinuxfs4 php build
Eliminate print that generated noise in the build
Add libmagickwand-dev libmagickcore-dev to cflinuxfs4 php compilation
All pipeline jobs are moving away from direct AWS access to access via a service-user that can assume a role with privileges. See cloudfoundry/buildpacks-ci#318 The pipeline for the specs test is currently red. This change doesn't attempt to fix that.
…on-cflinuxfs3 Pin Bundler version in cflinuxfs3 binary-builder logic
* Updates HWC recipe to use new build script * Removes unnecessary recipe
Updates the go installer
HWCRecipe was deleted in https://github.com/cloudfoundry/binary-builder/pull/81/files and possibly causing the `uninitialized constant HwcRecipe (NameError)` error in https://buildpacks.ci.cf-app.com/teams/main/pipelines/dependency-builds/jobs/build-node-22.x.x/builds/21#L669776a0:542
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
No description provided.