add security manifest (#12)

canonical · Dec 8, 2023 · 69c7f2f · 69c7f2f
1 parent 955c911
commit 69c7f2f
Show file tree

Hide file tree

Showing 3 changed files with 33 additions and 6 deletions.
diff --git a/1.6.0/rockcraft.yaml b/1.6.0/rockcraft.yaml
@@ -3,8 +3,8 @@ title: Prometheus Pushgateway
 summary: Prometheus PushGateway in a ROCK.
 description: "The Prometheus Pushgateway exists to allow ephemeral and batch jobs to expose their metrics to Prometheus."
 version: "1.6.0"
-base: ubuntu:22.04
-build-base: ubuntu:22.04
+base: ubuntu@22.04
+build-base: ubuntu@22.04
 license: Apache-2.0
 services:
   prometheus-pushgateway:
@@ -32,3 +32,12 @@ parts:
   ca-certs:
     plugin: nil
     stage-packages: [ca-certificates]
+  deb-security-manifest:
+    plugin: nil
+    after:
+      - prometheus-pushgateway
+      - ca-certs
+    override-prime: |
+      set -x
+      mkdir -p $CRAFT_PRIME/usr/share/rocks/
+      (echo "# os-release" && cat /etc/os-release && echo "# dpkg-query" && dpkg-query --admindir=$CRAFT_PRIME/var/lib/dpkg/ -f '${db:Status-Abbrev},${binary:Package},${Version},${source:Package},${Source:Version}\n' -W) > $CRAFT_PRIME/usr/share/rocks/dpkg.query
diff --git a/1.6.1/rockcraft.yaml b/1.6.1/rockcraft.yaml
@@ -3,8 +3,8 @@ title: Prometheus Pushgateway
 summary: Prometheus PushGateway in a ROCK.
 description: "The Prometheus Pushgateway exists to allow ephemeral and batch jobs to expose their metrics to Prometheus."
 version: "1.6.1"
-base: ubuntu:22.04
-build-base: ubuntu:22.04
+base: ubuntu@22.04
+build-base: ubuntu@22.04
 license: Apache-2.0
 services:
   prometheus-pushgateway:
@@ -32,3 +32,12 @@ parts:
   ca-certs:
     plugin: nil
     stage-packages: [ca-certificates]
+  deb-security-manifest:
+    plugin: nil
+    after:
+      - prometheus-pushgateway
+      - ca-certs
+    override-prime: |
+      set -x
+      mkdir -p $CRAFT_PRIME/usr/share/rocks/
+      (echo "# os-release" && cat /etc/os-release && echo "# dpkg-query" && dpkg-query --admindir=$CRAFT_PRIME/var/lib/dpkg/ -f '${db:Status-Abbrev},${binary:Package},${Version},${source:Package},${Source:Version}\n' -W) > $CRAFT_PRIME/usr/share/rocks/dpkg.query
diff --git a/1.6.2/rockcraft.yaml b/1.6.2/rockcraft.yaml
@@ -3,8 +3,8 @@ title: Prometheus Pushgateway
 summary: Prometheus PushGateway in a ROCK.
 description: "The Prometheus Pushgateway exists to allow ephemeral and batch jobs to expose their metrics to Prometheus."
 version: "1.6.2"
-base: ubuntu:22.04
-build-base: ubuntu:22.04
+base: ubuntu@22.04
+build-base: ubuntu@22.04
 license: Apache-2.0
 services:
   prometheus-pushgateway:
@@ -32,3 +32,12 @@ parts:
   ca-certs:
     plugin: nil
     stage-packages: [ca-certificates]
+  deb-security-manifest:
+    plugin: nil
+    after:
+      - prometheus-pushgateway
+      - ca-certs
+    override-prime: |
+      set -x
+      mkdir -p $CRAFT_PRIME/usr/share/rocks/
+      (echo "# os-release" && cat /etc/os-release && echo "# dpkg-query" && dpkg-query --admindir=$CRAFT_PRIME/var/lib/dpkg/ -f '${db:Status-Abbrev},${binary:Package},${Version},${source:Package},${Source:Version}\n' -W) > $CRAFT_PRIME/usr/share/rocks/dpkg.query