Bug 2172238

Summary: Review Request: golang-oras - Work with OCI registries, but for secure supply chain
Product: [Fedora] Fedora Reporter: Davide Cavalca <davide>
Component: Package ReviewAssignee: Michel Lind <michel>
Status: CLOSED ERRATA QA Contact: Fedora Extras Quality Assurance <extras-qa>
Severity: unspecified Docs Contact:
Priority: unspecified    
Version: rawhideCC: davide, eclipseo, extras-qa, matt.hickford, michel, package-review
Target Milestone: ---Flags: michel: fedora-review+
Target Release: ---   
Hardware: Unspecified   
OS: Unspecified   
Whiteboard:
Fixed In Version: Doc Type: If docs needed, set a value
Doc Text:
Story Points: ---
Clone Of: golang-oras Environment:
Last Closed: 2023-02-21 18:28:28 UTC Type: ---
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:
Bug Depends On: 2140707, 2140708, 2140709, 2172236, 2172237    
Bug Blocks: 2138839, 2138841    

Description Davide Cavalca 2023-02-21 16:55:00 UTC
+++ This bug was initially created as a clone of Bug #2140708 +++

Spec URL: https://eclipseo.fedorapeople.org/for-review/golang-oras.spec
SRPM URL: https://eclipseo.fedorapeople.org/for-review/golang-oras-0.15.1-1.20221105git690716b.fc37.src.rpm

Description:
Work with OCI registries, but for secure supply chain - managing content like artifacts, images, SBOM.

Fedora Account System Username: dcavalca

--- Additional comment from M Hickford on 2022-11-13 17:16:24 UTC ---

"not yet a packager and the review is thus unofficial"

Is it necessary to include both BuildRequires and go_generate_buildrequires?

BuildRequires:  golang(oras.land/oras-go/v2)

%generate_buildrequires
%go_generate_buildrequires

--- Additional comment from Davide Cavalca on 2023-01-17 05:39:46 UTC ---

Taking this review

--- Additional comment from Davide Cavalca on 2023-01-17 05:55:15 UTC ---

This fails to build with

No matching package to install: 'golang(github.com/need-being/go-tree)'

--- Additional comment from Davide Cavalca on 2023-01-17 06:07:19 UTC ---

I can confirm this does need the explicit BR on golang(oras.land/oras-go/v2) or it'll fail to build.

--- Additional comment from Davide Cavalca on 2023-01-17 06:11:00 UTC ---

Package was generated with go2rpm, simplifying the review.

- package builds and installs without errors on rawhide
- test suite is run and all unit tests pass
- latest version of the package is packaged
- license matches upstream specification and is acceptable for Fedora
- license file is included
- package complies with Golang Packaging Guidelines

Package APPROVED.

Comment 1 Michel Lind 2023-02-21 17:03:18 UTC
Original review was already approved, all OK

Comment 2 Fedora Admin user for bugzilla script actions 2023-02-21 17:05:02 UTC
The Pagure repository was created at https://src.fedoraproject.org/rpms/golang-oras

Comment 3 Davide Cavalca 2023-02-21 17:11:08 UTC
*** Bug 2140708 has been marked as a duplicate of this bug. ***

Comment 4 Fedora Update System 2023-02-21 18:26:36 UTC
FEDORA-2023-d09ea9c1fe has been submitted as an update to Fedora 39. https://bodhi.fedoraproject.org/updates/FEDORA-2023-d09ea9c1fe

Comment 5 Fedora Update System 2023-02-21 18:28:28 UTC
FEDORA-2023-d09ea9c1fe has been pushed to the Fedora 39 stable repository.
If problem still persists, please make note of it in this bug report.