Skip to content

fix(postgresql-16): Create base package for entrypoint#17673

Merged
EyeCantCU merged 1 commit intomainfrom
fix-postgres-entrypoint
Apr 25, 2024
Merged

fix(postgresql-16): Create base package for entrypoint#17673
EyeCantCU merged 1 commit intomainfrom
fix-postgres-entrypoint

Conversation

@EyeCantCU
Copy link
Member

Previously, the entrypoint wasn't installed because the installation directory for the entrypoint script was changed. Resolve this by introducing a base package

Signed-off-by: RJ Sampson <rj.sampson@chainguard.dev>
@EyeCantCU EyeCantCU enabled auto-merge April 25, 2024 13:10
@github-actions
Copy link
Contributor

Package libecpg-16: Click to expand/collapse

Package libecpg-16:
Unchanged

Package postgresql-16-oci-entrypoint-base: Click to expand/collapse

Package postgresql-16-oci-entrypoint-base:
Added: /.PKGINFO
Added: /usr/libexec/postgresql16/postgresql-entrypoint.sh

Package postgresql-16-oci-entrypoint: Click to expand/collapse

Package postgresql-16-oci-entrypoint:
Deleted: /usr/libexec/postgresql16/postgresql-entrypoint.sh

Package postgresql-16: Click to expand/collapse

Package postgresql-16:
Unchanged

Package postgresql-16-dev: Click to expand/collapse

Package postgresql-16-dev:
Unchanged

Package postgresql-16-client-base: Click to expand/collapse

Package postgresql-16-client-base:
Unchanged

Package postgresql-16-contrib: Click to expand/collapse

Package postgresql-16-contrib:
Unchanged

Package postgresql-16-client: Click to expand/collapse

Package postgresql-16-client:
Unchanged

Package libpq-16: Click to expand/collapse

Package libpq-16:
Unchanged

Package postgresql-16-bitnami-compat: Click to expand/collapse

Package postgresql-16-bitnami-compat:
Unchanged

Package postgresql-16-base: Click to expand/collapse

Package postgresql-16-base:
Unchanged

bincapz found differences: Click to expand/collapse

Deleted: postgresql-16-oci-entrypoint/usr/libexec/postgresql16/postgresql-entrypoint.sh

RISK KEY DESCRIPTION
-2/MEDIUM databases/postgresql accesses PostgreSQL databases
-2/MEDIUM fs/permission/modify modifies file permissions
-2/MEDIUM net/http/post able to submit content via HTTP POST
-1/LOW compression/zstd zstandard - fast real-time compression algorithm
-1/LOW fs/directory/create creates directories
-1/LOW fs/file/delete/forcibly forcibly deletes files using rm
-1/LOW fs/tempfile/create uses mktemp to create temporary files
-1/LOW net/socket/listen listen on a socket
-1/LOW ref/path/etc references paths within /etc: "/etc/passwd"
-1/LOW ref/path/usr/bin references paths within /usr/bin: "/usr/bin/env"
-1/LOW ref/path/var references paths within /var: "/var/lib/postgres/initdb/
/var/lib/postgresql/data/postgresql.conf
/var/run/postgresql"
-1/LOW ref/site/url contains embedded HTTPS URLs:
https://cwrap.org/nss_wrapper.html
https://github.com/docker-library/postgres/blob/74e51d1/11/alpine/docker-
docker-library/postgres#359
docker-library/postgres#450
docker-library/postgres#507
docker-library/postgres#253
docker-library/postgres#289
docker-library/postgres#452
https://salsa.debian.org/sssd-team/nss-wrapper/-/commit/b9925a653a54e24d0
https://unix.stackexchange.com/a/215279
https://www.postgresql.org/about/news/postgresql-14-released-2318/
https://www.postgresql.org/docs/12/auth-trust.html
https://www.postgresql.org/docs/current/auth-trust.html
https://www.postgresql.org/message-id/flat/E1Rqxp2-0004Qt-PL
-1/LOW ref/words/password references a password: "password"

Added: postgresql-16-oci-entrypoint-base/usr/libexec/postgresql16/postgresql-entrypoint.sh

Overall risk: ✅ 2/MEDIUM

RISK KEY DESCRIPTION
+2/MEDIUM databases/postgresql accesses PostgreSQL databases
+2/MEDIUM fs/permission/modify modifies file permissions
+2/MEDIUM net/http/post able to submit content via HTTP POST
+1/LOW compression/zstd zstandard - fast real-time compression algorithm
+1/LOW fs/directory/create creates directories
+1/LOW fs/file/delete/forcibly forcibly deletes files using rm
+1/LOW fs/tempfile/create uses mktemp to create temporary files
+1/LOW net/socket/listen listen on a socket
+1/LOW ref/path/etc references paths within /etc: "/etc/passwd"
+1/LOW ref/path/usr/bin references paths within /usr/bin: "/usr/bin/env"
+1/LOW ref/path/var references paths within /var: "/var/lib/postgres/initdb/
/var/lib/postgresql/data/postgresql.conf
/var/run/postgresql"
+1/LOW ref/site/url contains embedded HTTPS URLs:
https://cwrap.org/nss_wrapper.html
https://github.com/docker-library/postgres/blob/74e51d1/11/alpine/docker-
docker-library/postgres#359
docker-library/postgres#450
docker-library/postgres#507
docker-library/postgres#253
docker-library/postgres#289
docker-library/postgres#452
https://salsa.debian.org/sssd-team/nss-wrapper/-/commit/b9925a653a54e24d0
https://unix.stackexchange.com/a/215279
https://www.postgresql.org/about/news/postgresql-14-released-2318/
https://www.postgresql.org/docs/12/auth-trust.html
https://www.postgresql.org/docs/current/auth-trust.html
https://www.postgresql.org/message-id/flat/E1Rqxp2-0004Qt-PL
+1/LOW ref/words/password references a password: "password"

@EyeCantCU EyeCantCU merged commit 9a126e1 into main Apr 25, 2024
@EyeCantCU EyeCantCU deleted the fix-postgres-entrypoint branch April 25, 2024 13:20
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants