Bug 2380058

Summary: Review Request: rust-podman-sequoia - Polyfill to use Sequoia as a signing backend for containers
Product: [Fedora] Fedora Reporter: Daiki Ueno <dueno>
Component: Package ReviewAssignee: Lokesh Mandvekar <lsm5>
Status: CLOSED RAWHIDE QA Contact: Fedora Extras Quality Assurance <extras-qa>
Severity: medium Docs Contact:
Priority: unspecified    
Version: rawhideCC: lsm5, mitr, package-review
Target Milestone: ---Flags: lsm5: fedora-review+
Target Release: ---   
Hardware: Unspecified   
OS: Linux   
Whiteboard:
Fixed In Version: Doc Type: ---
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2025-07-29 01:18:10 UTC Type: ---
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:
Bug Depends On: 2380056    
Bug Blocks:    

Description Daiki Ueno 2025-07-15 01:20:25 UTC
Spec URL: https://ueno.fedorapeople.org/rust-podman-sequoia/rust-podman-sequoia.spec
SRPM URL: https://ueno.fedorapeople.org/rust-podman-sequoia/rust-podman-sequoia-0.1.0-1.fc43.src.rpm
Description:
A polyfill to use Sequoia as a signing backend for containers.

Reproducible: Always

Comment 1 Lokesh Mandvekar 2025-07-18 14:42:39 UTC
Hi Daiki, thank you for taking this up. Is podman-sequoia specific to only podman? I'm told it'll get linked in containers/image and thus will be potentially usable by consumers of c/image which could be buildah, skopeo, cri-o and perhaps other tools too.

Comment 2 Daiki Ueno 2025-07-18 23:52:49 UTC
(In reply to Lokesh Mandvekar from comment #1)
> Hi Daiki, thank you for taking this up. Is podman-sequoia specific to only
> podman? I'm told it'll get linked in containers/image and thus will be
> potentially usable by consumers of c/image which could be buildah, skopeo,
> cri-o and perhaps other tools too.

Yes, that's correct. I named it podman-sequoia because I couldn't come up with a better name, as it will be part of the shared library name in the system location (i.e., /usr/lib64/libpodman_sequoia.so*).

Comment 3 Lokesh Mandvekar 2025-07-25 15:44:11 UTC
Now that the deps are done, please post a koji scratch build link for podman-sequoia. Then we can take this forward.

Comment 4 Daiki Ueno 2025-07-25 20:36:34 UTC
Yes, here is a link to the koji scratch build:
https://koji.fedoraproject.org/koji/taskinfo?taskID=135276699

Comment 5 Lokesh Mandvekar 2025-07-28 13:47:35 UTC
Package was generated with rust2rpm + rust2rpm.toml.

- builds in koji
- latest version of the crate is packaged
- The C source files installed to /usr/share/containers/podman-sequoia are stub files and only meant for use by CGO 
- license is valid, matches upstream and included in %license
- package complies with Rust Packaging Guidelines

Package APPROVED.

Comment 6 Fedora Admin user for bugzilla script actions 2025-07-29 00:30:20 UTC
The Pagure repository was created at https://src.fedoraproject.org/rpms/rust-podman-sequoia

Comment 7 Daiki Ueno 2025-07-29 01:18:10 UTC
Thank you for the review, Lokesh. The package has been built in rawhide:
https://bodhi.fedoraproject.org/updates/FEDORA-2025-4d57aa75ce