Bug#990201: Update golang-github-appc-cni to 1.0 (was Re: singularity-container: CVE-2021-33622)

[Shengjing Zhu <zhsj@debian.org>]

On Fri, Feb 18, 2022 at 11:42 PM Nilesh Patra <nilesh@riseup.net> wrote:
>
> On 2/18/22 6:01 PM, Andreas Tille wrote:
> > Control: tags -1 help
> >
> > Hi,
> >
> > I updated singularity-container in Salsa to the latest available CE
> > release and added some new Build-Depends.  Unfortunately it does not
> > build as you can see in salsa-ci[1].  Any help to get the package build
> > is welcome.  I personally have no idea about Go language nor singularity
> > and really need the help of previous Uploaders / Go team.
>
> You missed to apply the upstream commit properly; I have pushed to fix that properly.
> Now the build chokes with
>
> |       -o cmd/starter/c/starter /home/nilesh/packages/singularity/singularity-container/_build/src/github.com/sylabs/singularity/cmd/starter/main_linux.go
> | ../pkg/network/network_linux.go:22:2: cannot find package "github.com/containernetworking/cni/pkg/types/100" in any of:
> |       /BUILDDIR/singularity-container/_build/src/github.com/sylabs/singularity/vendor/github.com/containernetworking/cni/pkg/types/100 (vendor tree)
>
> Now this is because it needs version 1.0.1 of golang-github-appc-cni while we have 0.8.1-1 in unstable and the desired version
> is still in experimental[1].
> So you will need to transition it.
>
> Note that it has some important $rev-deps, however I do not see it doing anything much intrusive in psuedo-excuses,
> so it might be safe to dput.

The pseudo-excuses don't show regression, since I added a patch to
work around. But I'm not satisfied with my own patch. I guess it's
wrong.... I planned to update
golang-github-containernetworking-plugin, but it seems I forgot
afterwards.

-- 
Shengjing Zhu