add security manifest (#19)

canonical · Dec 7, 2023 · 55604b2 · 55604b2
1 parent ef7801b
commit 55604b2
Show file tree

Hide file tree

Showing 2 changed files with 20 additions and 3 deletions.
diff --git a/0.25.0/rockcraft.yaml b/0.25.0/rockcraft.yaml
@@ -6,15 +6,13 @@ base: ubuntu:22.04
 license: Apache-2.0
 # Replicate the tree structure of the original image
 # https://github.com/prometheus/alertmanager/blob/main/Dockerfile
-
 # /
 # ├── bin
 # │   ├── alertmanager
 # │   └── amtool
 # └── etc
 #     └── alertmanager
 #         └── alertmanager.yml
-
 services:
   alertmanager:
     command: /bin/alertmanager --config.file=/etc/alertmanager/alertmanager.yml --storage.path=/alertmanager
@@ -61,3 +59,13 @@ parts:
   ca-certs:
     plugin: nil
     stage-packages: [ca-certificates]
+  # The security manifest is required when .deb packages are added to the ROCK
+  deb-security-manifest:
+    plugin: nil
+    after:
+      - alertmanager
+      - ca-certs
+    override-prime: |
+      set -x
+      mkdir -p $CRAFT_PRIME/usr/share/rocks/
+      (echo "# os-release" && cat /etc/os-release && echo "# dpkg-query" && dpkg-query --admindir=$CRAFT_PRIME/var/lib/dpkg/ -f '${db:Status-Abbrev},${binary:Package},${Version},${source:Package},${Source:Version}\n' -W) > $CRAFT_PRIME/usr/share/rocks/dpkg.query
diff --git a/0.26.0/rockcraft.yaml b/0.26.0/rockcraft.yaml
@@ -6,7 +6,6 @@ base: ubuntu:22.04
 license: Apache-2.0
 # Replicate the tree structure of the original image
 # https://github.com/prometheus/alertmanager/blob/main/Dockerfile
-
 # /
 # ├── bin
 # │   ├── alertmanager
@@ -60,3 +59,13 @@ parts:
   ca-certs:
     plugin: nil
     stage-packages: [ca-certificates]
+  # The security manifest is required when .deb packages are added to the ROCK
+  deb-security-manifest:
+    plugin: nil
+    after:
+      - alertmanager
+      - ca-certs
+    override-prime: |
+      set -x
+      mkdir -p $CRAFT_PRIME/usr/share/rocks/
+      (echo "# os-release" && cat /etc/os-release && echo "# dpkg-query" && dpkg-query --admindir=$CRAFT_PRIME/var/lib/dpkg/ -f '${db:Status-Abbrev},${binary:Package},${Version},${source:Package},${Source:Version}\n' -W) > $CRAFT_PRIME/usr/share/rocks/dpkg.query