Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

fix(postgresql-16): Use latest entrypoint scripts #17698

Merged
merged 1 commit into from
Apr 25, 2024
Merged

fix(postgresql-16): Use latest entrypoint scripts #17698

merged 1 commit into from
Apr 25, 2024

Conversation

EyeCantCU
Copy link
Member

Tracks the entrypoint scripts used by upstream in place of vendoring our own

@EyeCantCU
fix(postgresql-16): Use latest entrypoint scripts
f579041 
Signed-off-by: RJ Sampson <rj.sampson@chainguard.dev>
@github-actions GitHub Actions
Copy link
Contributor

Package libecpg-16: Click to expand/collapse

Package libecpg-16:
Unchanged

Package postgresql-16-oci-entrypoint: Click to expand/collapse

Package postgresql-16-oci-entrypoint:
Unchanged

Package postgresql-16-bitnami-compat: Click to expand/collapse

Package postgresql-16-bitnami-compat:
Modified: /opt/bitnami/.bitnami_components.json

Package postgresql-16: Click to expand/collapse

Package postgresql-16:
Unchanged

Package postgresql-16-contrib: Click to expand/collapse

Package postgresql-16-contrib:
Unchanged

Package libpq-16: Click to expand/collapse

Package libpq-16:
Unchanged

Package postgresql-16-oci-entrypoint-base: Click to expand/collapse

Package postgresql-16-oci-entrypoint-base:
Added: /usr/libexec/postgresql16/docker-ensure-initdb.sh
Added: /usr/libexec/postgresql16/docker-entrypoint.sh
Deleted: /usr/libexec/postgresql16/postgresql-entrypoint.sh

Package postgresql-16-base: Click to expand/collapse

Package postgresql-16-base:
Unchanged

Package postgresql-16-dev: Click to expand/collapse

Package postgresql-16-dev:
Unchanged

Package postgresql-16-client-base: Click to expand/collapse

Package postgresql-16-client-base:
Unchanged

Package postgresql-16-client: Click to expand/collapse

Package postgresql-16-client:
Unchanged

bincapz found differences: Click to expand/collapse

Deleted: postgresql-16-oci-entrypoint-base/usr/libexec/postgresql16/postgresql-entrypoint.sh

RISK KEY DESCRIPTION
-2/MEDIUM databases/postgresql accesses PostgreSQL databases
-2/MEDIUM fs/permission/modify modifies file permissions
-2/MEDIUM net/http/post able to submit content via HTTP POST
-1/LOW compression/zstd zstandard - fast real-time compression algorithm
-1/LOW fs/directory/create creates directories
-1/LOW fs/file/delete/forcibly forcibly deletes files using rm
-1/LOW fs/tempfile/create uses mktemp to create temporary files
-1/LOW net/socket/listen listen on a socket
-1/LOW ref/path/etc references paths within /etc: "/etc/passwd"
-1/LOW ref/path/usr/bin references paths within /usr/bin: "/usr/bin/env"
-1/LOW ref/path/var references paths within /var: "/var/lib/postgres/initdb/
/var/lib/postgresql/data/postgresql.conf
/var/run/postgresql"
-1/LOW ref/site/url contains embedded HTTPS URLs:
https://cwrap.org/nss_wrapper.html
https://github.com/docker-library/postgres/blob/74e51d1/11/alpine/docker-
docker-library/postgres#359
docker-library/postgres#450
docker-library/postgres#507
docker-library/postgres#253
docker-library/postgres#289
docker-library/postgres#452
https://salsa.debian.org/sssd-team/nss-wrapper/-/commit/b9925a653a54e24d0
https://unix.stackexchange.com/a/215279
https://www.postgresql.org/about/news/postgresql-14-released-2318/
https://www.postgresql.org/docs/12/auth-trust.html
https://www.postgresql.org/docs/current/auth-trust.html
https://www.postgresql.org/message-id/flat/E1Rqxp2-0004Qt-PL
-1/LOW ref/words/password references a password: "password"

Added: postgresql-16-oci-entrypoint-base/usr/libexec/postgresql16/docker-entrypoint.sh

Overall risk: ✅ 2/MEDIUM

RISK KEY DESCRIPTION
+2/MEDIUM databases/postgresql accesses PostgreSQL databases
+2/MEDIUM fs/permission/modify modifies file permissions
+2/MEDIUM net/http/post able to submit content via HTTP POST
+1/LOW compression/zstd zstandard - fast real-time compression algorithm
+1/LOW fs/directory/create creates directories
+1/LOW fs/file/delete/forcibly forcibly deletes files using rm
+1/LOW fs/tempfile/create uses mktemp to create temporary files
+1/LOW net/socket/listen listen on a socket
+1/LOW ref/path/etc references paths within /etc: "/etc/passwd"
+1/LOW ref/path/usr/bin references paths within /usr/bin: "/usr/bin/env"
+1/LOW ref/path/var references paths within /var: "/var/lib/postgres/initdb/
/var/lib/postgresql/data/postgresql.conf
/var/run/postgresql"
+1/LOW ref/site/url contains embedded HTTPS URLs:
https://cwrap.org/nss_wrapper.html
docker-library/postgres#1025
docker-library/postgres#359
docker-library/postgres#450
docker-library/postgres#507
docker-library/postgres#253
docker-library/postgres#289
docker-library/postgres#452
postgres/postgres@67a472d71c98c3d2fa322a1b40130
https://salsa.debian.org/sssd-team/nss-wrapper/-/commit/b9925a653a54e24d0
https://unix.stackexchange.com/a/215279
https://www.postgresql.org/about/news/postgresql-14-released-2318/
https://www.postgresql.org/docs/12/auth-trust.html
https://www.postgresql.org/docs/current/auth-trust.html
https://www.postgresql.org/message-id/flat/E1Rqxp2-0004Qt-PL
+1/LOW ref/words/password references a password: "password"

Added: postgresql-16-oci-entrypoint-base/usr/libexec/postgresql16/docker-ensure-initdb.sh

Overall risk: ✅ 2/MEDIUM

RISK KEY DESCRIPTION
+2/MEDIUM ref/path/usr/local references paths within /usr/local/bin: "/usr/local/bin/docker-entrypoint.sh"
+1/LOW ref/path/usr/bin references paths within /usr/bin: "/usr/bin/env"
+1/LOW ref/path/var references paths within /var: "/var/lib/postgres/initdb/"

@mamccorm mamccorm merged commit 67d20dd into main Apr 25, 2024
8 checks passed
@mamccorm mamccorm deleted the update-entrypoint branch April 25, 2024 19:10
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Reviewers

@mamccorm mamccorm mamccorm approved these changes

Assignees
No one assigned
Labels
None yet
Projects
None yet
Milestone
No milestone
Development

Successfully merging this pull request may close these issues.
2 participants
@EyeCantCU @mamccorm