From e86f68df6304ea1f7335799ccdf655b36148c392 Mon Sep 17 00:00:00 2001
From: Mauro Morales <mauro.morales@spectrocloud.com>
Date: Mon, 24 Jun 2024 16:03:54 +0200
Subject: [PATCH] Bump kcrypt (#926)

* Re-build kcrypt-challenger 0.7.0

Uses golang 1.22.4 which fixes CVE-2024-24790

Signed-off-by: Mauro Morales <mauro.morales@spectrocloud.com>

* Add luet as a package

Signed-off-by: Mauro Morales <mauro.morales@spectrocloud.com>

---------

Signed-off-by: Mauro Morales <mauro.morales@spectrocloud.com>
---
 .../system/kcrypt-challenger/collection.yaml  | 22 +++++++++++++++++++
 packages/utils/luet/build.yaml                | 20 +++++++++++++++++
 packages/utils/luet/definition.yaml           | 10 +++++++++
 3 files changed, 52 insertions(+)
 create mode 100644 packages/utils/luet/build.yaml
 create mode 100644 packages/utils/luet/definition.yaml

diff --git a/packages/system/kcrypt-challenger/collection.yaml b/packages/system/kcrypt-challenger/collection.yaml
index 956beca..be8a8d1 100644
--- a/packages/system/kcrypt-challenger/collection.yaml
+++ b/packages/system/kcrypt-challenger/collection.yaml
@@ -21,3 +21,25 @@ packages:
       - https://github.com/kairos-io/kcrypt-challenger
     license: "Apache License v2"
     description: "Cloud native guardian for persistent data in the edge"
+  - name: kcrypt-challenger
+    binary_name: kcrypt-discovery-challenger
+    category: system
+    version: "0.7.0+1"
+    labels:
+      github.repo: "kcrypt-challenger"
+      github.owner: "kairos-io"
+    uri:
+      - https://github.com/kairos-io/kcrypt-challenger
+    license: "Apache License v2"
+    description: "Cloud native guardian for persistent data in the edge"
+  - name: kcrypt-challenger
+    binary_name: kcrypt-discovery-challenger
+    category: fips
+    version: "0.7.0+1"
+    labels:
+      github.repo: "kcrypt-challenger"
+      github.owner: "kairos-io"
+    uri:
+      - https://github.com/kairos-io/kcrypt-challenger
+    license: "Apache License v2"
+    description: "Cloud native guardian for persistent data in the edge"
diff --git a/packages/utils/luet/build.yaml b/packages/utils/luet/build.yaml
new file mode 100644
index 0000000..25b30ea
--- /dev/null
+++ b/packages/utils/luet/build.yaml
@@ -0,0 +1,20 @@
+requires:
+  - name: "toolchain-go-ubuntu"
+    category: "development"
+    version: ">=0"
+prelude:
+  - apt-get update && apt-get install -y gcc libssl-dev
+  - mkdir -p go/src/github.com/${GITHUB_ORG}/
+  - cd go/src/github.com/${GITHUB_ORG}/ && git clone https://github.com/${GITHUB_ORG}/{{ .Values.name }}.git
+env:
+  - CGO_ENABLED=0
+  - GITHUB_ORG={{ ( index .Values.labels "github.owner" ) }}
+  - LDFLAGS="-s -w {{with .Values.ldflags}}{{.}}{{end}}"
+steps:
+  - |
+    PACKAGE_VERSION=${PACKAGE_VERSION%\+*} && \
+    cd go/src/github.com/${GITHUB_ORG}/{{ .Values.name }}/ && \
+    go build -ldflags="${LDFLAGS}" -o {{ .Values.name }} && \
+    mv {{ .Values.name }} /usr/bin/
+includes:
+- /usr/bin/{{.Values.name}}
diff --git a/packages/utils/luet/definition.yaml b/packages/utils/luet/definition.yaml
new file mode 100644
index 0000000..5413f68
--- /dev/null
+++ b/packages/utils/luet/definition.yaml
@@ -0,0 +1,10 @@
+name: luet
+category: utils
+version: "0.35.2"
+labels:
+  github.repo: "luet"
+  github.owner: "mudler"
+uri:
+  - https://github.com/mudler/luet
+license: "GPL-3.0 License"
+description: "0-dependency Container-based Package Manager using SAT solver and QLearning"