From 0e3b5d5b373ace111d91c4dead6c4c52db68791e Mon Sep 17 00:00:00 2001 From: Kir Kolyshkin Date: Tue, 11 Feb 2025 17:58:52 -0800 Subject: [PATCH] build: bump libseccomp to v2.5.6 A new libseccomp releases (v2.5.6 and v2.6.0) were cut last month. Theoretically, we could use v2.6.0 but let's stay conservative for now. Signed-off-by: Kir Kolyshkin --- Dockerfile | 2 +- script/release_build.sh | 2 +- script/seccomp.sh | 2 ++ 3 files changed, 4 insertions(+), 2 deletions(-) diff --git a/Dockerfile b/Dockerfile index f51f5956c..692001a95 100644 --- a/Dockerfile +++ b/Dockerfile @@ -1,6 +1,6 @@ ARG GO_VERSION=1.23 ARG BATS_VERSION=v1.9.0 -ARG LIBSECCOMP_VERSION=2.5.5 +ARG LIBSECCOMP_VERSION=2.5.6 FROM golang:${GO_VERSION}-bookworm ARG DEBIAN_FRONTEND=noninteractive diff --git a/script/release_build.sh b/script/release_build.sh index 476f08fa7..39ec3ab5d 100755 --- a/script/release_build.sh +++ b/script/release_build.sh @@ -19,7 +19,7 @@ set -e ## ---> # Project-specific options and functions. In *theory* you shouldn't need to # touch anything else in this script in order to use this elsewhere. -: "${LIBSECCOMP_VERSION:=2.5.5}" +: "${LIBSECCOMP_VERSION:=2.5.6}" project="runc" root="$(readlink -f "$(dirname "${BASH_SOURCE[0]}")/..")" diff --git a/script/seccomp.sh b/script/seccomp.sh index dcc0d7ca3..c4bbfac1f 100755 --- a/script/seccomp.sh +++ b/script/seccomp.sh @@ -8,6 +8,8 @@ source "$(dirname "${BASH_SOURCE[0]}")/lib.sh" # sha256 checksums for seccomp release tarballs. declare -A SECCOMP_SHA256=( ["2.5.5"]=248a2c8a4d9b9858aa6baf52712c34afefcf9c9e94b76dce02c1c9aa25fb3375 + ["2.5.6"]=04c37d72965dce218a0c94519b056e1775cf786b5260ee2b7992956c4ee38633 + ["2.6.0"]=83b6085232d1588c379dc9b9cae47bb37407cf262e6e74993c61ba72d2a784dc ) # Due to libseccomp being LGPL we must include its sources,