Bug#990201: Update golang-github-appc-cni to 1.0 (was Re: singularity-container: CVE-2021-33622)
On Fri, Feb 18, 2022 at 11:42 PM Nilesh Patra <firstname.lastname@example.org> wrote:
> On 2/18/22 6:01 PM, Andreas Tille wrote:
> > Control: tags -1 help
> > Hi,
> > I updated singularity-container in Salsa to the latest available CE
> > release and added some new Build-Depends. Unfortunately it does not
> > build as you can see in salsa-ci. Any help to get the package build
> > is welcome. I personally have no idea about Go language nor singularity
> > and really need the help of previous Uploaders / Go team.
> You missed to apply the upstream commit properly; I have pushed to fix that properly.
> Now the build chokes with
> | -o cmd/starter/c/starter /home/nilesh/packages/singularity/singularity-container/_build/src/github.com/sylabs/singularity/cmd/starter/main_linux.go
> | ../pkg/network/network_linux.go:22:2: cannot find package "github.com/containernetworking/cni/pkg/types/100" in any of:
> | /BUILDDIR/singularity-container/_build/src/github.com/sylabs/singularity/vendor/github.com/containernetworking/cni/pkg/types/100 (vendor tree)
> Now this is because it needs version 1.0.1 of golang-github-appc-cni while we have 0.8.1-1 in unstable and the desired version
> is still in experimental.
> So you will need to transition it.
> Note that it has some important $rev-deps, however I do not see it doing anything much intrusive in psuedo-excuses,
> so it might be safe to dput.
The pseudo-excuses don't show regression, since I added a patch to
work around. But I'm not satisfied with my own patch. I guess it's
wrong.... I planned to update
golang-github-containernetworking-plugin, but it seems I forgot