From 229df998cc69e4a8635980a7da3d95ebeaa8a862 Mon Sep 17 00:00:00 2001 From: Steven Terhar Date: Wed, 14 Apr 2021 14:38:47 +0000 Subject: [PATCH 1/2] Update GitLab to the 13.10.3 Security Release --- Dockerfile | 13 +++++++++++-- build-scripts/build.sh | 2 +- hardening_manifest.yaml | 10 +++++----- 3 files changed, 17 insertions(+), 8 deletions(-) diff --git a/Dockerfile b/Dockerfile index 8e40206..e13e47a 100644 --- a/Dockerfile +++ b/Dockerfile @@ -1,8 +1,8 @@ -ARG GITLAB_VERSION=v13.10.0-ubi8 +ARG GITLAB_VERSION=v13.10.3-ubi8 ARG BASE_REGISTRY=nexus-docker-secure.levelup-nexus.svc.cluster.local:18082 ARG BASE_IMAGE=gitlab/gitlab/gitlab-ruby -ARG BASE_TAG=13.10.0 +ARG BASE_TAG=13.10.3 ARG RUBY_IMAGE=${BASE_REGISTRY}/${BASE_IMAGE}:${BASE_TAG} @@ -12,6 +12,15 @@ ARG MAILROOM_VERSION=0.0.9 ARG GITLAB_USER=git ARG DNF_OPTS +LABEL source="https://gitlab.com/gitlab-org/build/CNG/-/tree/master/gitlab-mailroom" \ + name="GitLab Mailroom" \ + maintainer="GitLab Distribution Team" \ + vendor="GitLab" \ + version=${MAILROOM_VERSION} \ + release=${MAILROOM_VERSION} \ + summary="A configuration based process that will idle on IMAP connections and execute a delivery method when a new message is received." \ + description="A configuration based process that will idle on IMAP connections and execute a delivery method when a new message is received." + ADD gitlab-mailroom.tar.gz / COPY scripts/ /scripts/ diff --git a/build-scripts/build.sh b/build-scripts/build.sh index 0399293..bc21aa8 100755 --- a/build-scripts/build.sh +++ b/build-scripts/build.sh @@ -4,7 +4,7 @@ set -euxo pipefail -TAG=${1:-13.10.0} +TAG=${1:-13.10.3} REPOSITORY=${2:-} DOCKER_OPTS=${DOCKER_OPTS:-""} diff --git a/hardening_manifest.yaml b/hardening_manifest.yaml index af225d6..6fb7cde 100644 --- a/hardening_manifest.yaml +++ b/hardening_manifest.yaml @@ -5,12 +5,12 @@ name: "gitlab/gitlab/gitlab-mailroom" # The most specific version should be the first tag and will be shown # on ironbank.dsop.io tags: - - "13.10.0" + - "13.10.3" - "latest" # Build args passed to Dockerfile ARGs args: BASE_IMAGE: "gitlab/gitlab/gitlab-ruby" - BASE_TAG: "13.10.0" + BASE_TAG: "13.10.3" # Docker image labels labels: org.opencontainers.image.title: "Gitlab Mailroom" @@ -22,7 +22,7 @@ labels: org.opencontainers.image.url: "https://about.gitlab.com/" ## Name of the distributing entity, organization or individual org.opencontainers.image.vendor: "Gitlab" - org.opencontainers.image.version: "13.10.0" + org.opencontainers.image.version: "13.10.3" ## Keywords to help with search (ex. "cicd,gitops,golang") mil.dso.ironbank.image.keywords: "gitlab, git, gitops" ## This value can be "opensource" or "commercial" @@ -43,8 +43,8 @@ maintainers: username: "alfontaine" email: "alan.fontaine@centauricorp.com" resources: - - url: "https://gitlab-ubi.s3.amazonaws.com/ubi8-build-dependencies-v13.10.0-ubi8/gitlab-mailroom.tar.gz" + - url: "https://gitlab-ubi.s3.amazonaws.com/ubi8-build-dependencies-v13.10.3-ubi8/gitlab-mailroom.tar.gz" filename: "gitlab-mailroom.tar.gz" validation: type: "sha256" - value: "2b3ae447055ced041077fdb17ee1c302cf5a523a046559d030468d6bcc15feb8" + value: "4be6f015520519a71131aa7bf23f341ccc7d8d361ccb6c66307d3e29bc50d06f" -- GitLab From 04aac1fc34a5137982d7da931320d7253a268db6 Mon Sep 17 00:00:00 2001 From: Steven Terhar Date: Wed, 14 Apr 2021 14:49:57 +0000 Subject: [PATCH 2/2] Update Dockerfile - remove label --- Dockerfile | 9 --------- 1 file changed, 9 deletions(-) diff --git a/Dockerfile b/Dockerfile index e13e47a..f3d38d2 100644 --- a/Dockerfile +++ b/Dockerfile @@ -12,15 +12,6 @@ ARG MAILROOM_VERSION=0.0.9 ARG GITLAB_USER=git ARG DNF_OPTS -LABEL source="https://gitlab.com/gitlab-org/build/CNG/-/tree/master/gitlab-mailroom" \ - name="GitLab Mailroom" \ - maintainer="GitLab Distribution Team" \ - vendor="GitLab" \ - version=${MAILROOM_VERSION} \ - release=${MAILROOM_VERSION} \ - summary="A configuration based process that will idle on IMAP connections and execute a delivery method when a new message is received." \ - description="A configuration based process that will idle on IMAP connections and execute a delivery method when a new message is received." - ADD gitlab-mailroom.tar.gz / COPY scripts/ /scripts/ -- GitLab