Test build for #3626

Author: SUSE Update Bot

kubectl-oldstable-image/Dockerfile

@@ -68,5 +68,6 @@ LABEL io.artifacthub.package.readme-url="%SOURCEURL_WITH(README.md)%"
 LABEL io.artifacthub.package.logo-url="https://raw.githubusercontent.com/kubernetes/kubernetes/master/logo/logo.png"
 ENTRYPOINT ["kubectl"]
 
-RUN set -euo pipefail; echo "user:x:999:100:User for CLI:/home/user:/usr/sbin/nologin" >> /etc/passwd && install -d -o 999 -g 100 -m 0755 /home/user
+RUN set -euo pipefail; echo "user:x:999:100:User for CLI:/home/user:/usr/sbin/nologin" >> /etc/passwd && install -d -o 999 -g 100 -m 0755 /home/user && mkdir -p /home/user/.kube && chown -R 999:100 /home/user && chmod 755 /home/user /home/user/.kube
+
 WORKDIR /home/user

kubectl-oldstable-image/README.md

@@ -30,7 +30,18 @@ podman run --rm --name kubectl \
       -v /localpath/to/customize:/home/user:Z
       registry.suse.com/suse/kubectl:1.33 kustomize --enable-helm
 ```
+## Running as a non-root user
 
+By default, this container runs as the `root` user. However, it is prepared to run as a non-privileged user (UID `999`) for enhanced security.
+
+To run the container in rootless mode, you must explicitly set the user and the home environment variables:
+
+```ShellSession
+podman run --rm --name kubectl \
+      --user 999:100 \
+      -e HOME=/home/user \
+      -v /localpath/to/kubeconfig:/home/user/.kube/config:Z \
+      registry.suse.com/suse/kubectl:1.33 get nodes
 
 ## Licensing
 

kubectl-stable-image/Dockerfile

@@ -69,5 +69,6 @@ LABEL io.artifacthub.package.readme-url="%SOURCEURL_WITH(README.md)%"
 LABEL io.artifacthub.package.logo-url="https://raw.githubusercontent.com/kubernetes/kubernetes/master/logo/logo.png"
 ENTRYPOINT ["kubectl"]
 
-RUN set -euo pipefail; echo "user:x:999:100:User for CLI:/home/user:/usr/sbin/nologin" >> /etc/passwd && install -d -o 999 -g 100 -m 0755 /home/user
+RUN set -euo pipefail; echo "user:x:999:100:User for CLI:/home/user:/usr/sbin/nologin" >> /etc/passwd && install -d -o 999 -g 100 -m 0755 /home/user && mkdir -p /home/user/.kube && chown -R 999:100 /home/user && chmod 755 /home/user /home/user/.kube
+
 WORKDIR /home/user

kubectl-stable-image/README.md

@@ -30,7 +30,18 @@ podman run --rm --name kubectl \
       -v /localpath/to/customize:/home/user:Z
       registry.suse.com/suse/kubectl:1.35 kustomize --enable-helm
 ```
+## Running as a non-root user
 
+By default, this container runs as the `root` user. However, it is prepared to run as a non-privileged user (UID `999`) for enhanced security.
+
+To run the container in rootless mode, you must explicitly set the user and the home environment variables:
+
+```ShellSession
+podman run --rm --name kubectl \
+      --user 999:100 \
+      -e HOME=/home/user \
+      -v /localpath/to/kubeconfig:/home/user/.kube/config:Z \
+      registry.suse.com/suse/kubectl:1.35 get nodes
 
 ## Licensing
 

rust-oldstable-image/Dockerfile

@@ -18,14 +18,14 @@
 #!BuildTag: bci/rust:%%RUST_VERSION%%-2.%RELEASE%
 #!BuildTag: bci/rust:%%RUST_VERSION%%
 #!BuildTag: bci/rust:oldstable
-#!BuildTag: bci/rust:1.92
-#!BuildTag: bci/rust:1.92-sles15
+#!BuildTag: bci/rust:1.93
+#!BuildTag: bci/rust:1.93-sles15
 #!BuildName: bci-rust-oldstable
-#!BuildVersion: 15.7.1.92.2
+#!BuildVersion: 15.7.1.93.2
 FROM registry.suse.com/bci/bci-base:15.7
 
 RUN set -euo pipefail; \
-    zypper -n install --no-recommends rust1.92 cargo1.92 lifecycle-data-sle-module-development-tools
+    zypper -n install --no-recommends rust1.93 cargo1.93 lifecycle-data-sle-module-development-tools
 
 # cleanup logs and temporary files
 RUN set -euo pipefail; zypper -n clean -a; \
@@ -43,8 +43,8 @@ RUN set -euo pipefail; sed -i 's/^\([^:]*:[^:]*:\)[^:]*\(:.*\)$/\1\2/' /etc/shad
 # Define labels according to https://en.opensuse.org/Building_derived_containers
 # labelprefix=com.suse.bci.rust
 LABEL org.opencontainers.image.authors="https://github.com/SUSE/bci/discussions"
-LABEL org.opencontainers.image.title="SLE BCI Rust 1.92"
-LABEL org.opencontainers.image.description="Rust 1.92 container based on the SUSE Linux Enterprise Base Container Image."
+LABEL org.opencontainers.image.title="SLE BCI Rust 1.93"
+LABEL org.opencontainers.image.description="Rust 1.93 container based on the SUSE Linux Enterprise Base Container Image."
 LABEL org.opencontainers.image.version="%%RUST_VERSION%%"
 LABEL org.opencontainers.image.url="https://www.suse.com/products/base-container-images/"
 LABEL org.opencontainers.image.created="%BUILDTIME%"
@@ -54,7 +54,7 @@ LABEL org.opencontainers.image.ref.name="%%RUST_VERSION%%-2.%RELEASE%"
 LABEL org.opensuse.reference="registry.suse.com/bci/rust:%%RUST_VERSION%%-2.%RELEASE%"
 LABEL org.openbuildservice.disturl="%DISTURL%"
 LABEL com.suse.supportlevel="l3"
-LABEL com.suse.supportlevel.until="2026-03-26"
+LABEL com.suse.supportlevel.until="2026-05-07"
 LABEL com.suse.eula="sle-bci"
 LABEL com.suse.lifecycle-url="https://www.suse.com/lifecycle#suse-linux-enterprise-server-15"
 LABEL com.suse.release-stage="released"

rust-oldstable-image/README.md

@@ -1,4 +1,4 @@
-# Rust 1.92 Container Image
+# Rust 1.93 Container Image
 
 ![Redistributable](https://img.shields.io/badge/Redistributable-Yes-green)[![SLSA](https://img.shields.io/badge/SLSA_(v1.0)-Build_L3-Green)](https://documentation.suse.com/sbp/security/html/SBP-SLSA4/)
 [![Provenance: Available](https://img.shields.io/badge/Provenance-Available-Green)](https://documentation.suse.com/container/all/html/Container-guide/index.html#container-verify)
@@ -12,8 +12,8 @@
 To compile and deploy an application, copy the sources, fetch dependencies, and build the binary:
 
 ```Dockerfile
-# Build the application using the Rust 1.92 container image
-FROM registry.suse.com/bci/rust:1.92 as build
+# Build the application using the Rust 1.93 container image
+FROM registry.suse.com/bci/rust:1.93 as build
 
 WORKDIR /app
 
@@ -41,7 +41,7 @@ There are situations, where you don't want to run an application inside a contai
 To compile the application, without running it inside a container instance, use the following command:
 
 ```ShellSession
-$ podman run --rm -v "$PWD":/app:Z -w /app registry.suse.com/bci/rust:1.92 cargo build --release
+$ podman run --rm -v "$PWD":/app:Z -w /app registry.suse.com/bci/rust:1.93 cargo build --release
 ```
 
 **Note:** The Rust image is intended to be used as a build environment. For runtime, use smaller images such as `bci-base`, `bci-micro`, or `bci-minimal`.

rust-oldstable-image/_service

@@ -4,11 +4,11 @@
   <service mode="buildtime" name="replace_using_package_version">
     <param name="file">Dockerfile</param>
     <param name="regex">%%RUST_VERSION%%</param>
-    <param name="package">rust1.92</param>
+    <param name="package">rust1.93</param>
   </service>
   <service mode="buildtime" name="replace_using_package_version">
     <param name="file">Dockerfile</param>
     <param name="regex">%%CARGO_VERSION%%</param>
-    <param name="package">cargo1.92</param>
+    <param name="package">cargo1.93</param>
   </service>
 </services>

rust-oldstable-image/rust-and-cargo-pin.check

@@ -1,2 +1,2 @@
-requires:cargo1.92
-requires:rust1.92
+requires:cargo1.93
+requires:rust1.93

rust-stable-image/Dockerfile

@@ -18,15 +18,15 @@
 #!BuildTag: bci/rust:%%RUST_VERSION%%-1.%RELEASE%
 #!BuildTag: bci/rust:%%RUST_VERSION%%
 #!BuildTag: bci/rust:stable
-#!BuildTag: bci/rust:1.93
-#!BuildTag: bci/rust:1.93-sles15
+#!BuildTag: bci/rust:1.94
+#!BuildTag: bci/rust:1.94-sles15
 #!BuildTag: bci/rust:latest
 #!BuildName: bci-rust-stable
-#!BuildVersion: 15.7.1.93.1
+#!BuildVersion: 15.7.1.94.1
 FROM registry.suse.com/bci/bci-base:15.7
 
 RUN set -euo pipefail; \
-    zypper -n install --no-recommends rust1.93 cargo1.93 lifecycle-data-sle-module-development-tools
+    zypper -n install --no-recommends rust1.94 cargo1.94 lifecycle-data-sle-module-development-tools
 
 # cleanup logs and temporary files
 RUN set -euo pipefail; zypper -n clean -a; \
@@ -44,8 +44,8 @@ RUN set -euo pipefail; sed -i 's/^\([^:]*:[^:]*:\)[^:]*\(:.*\)$/\1\2/' /etc/shad
 # Define labels according to https://en.opensuse.org/Building_derived_containers
 # labelprefix=com.suse.bci.rust
 LABEL org.opencontainers.image.authors="https://github.com/SUSE/bci/discussions"
-LABEL org.opencontainers.image.title="SLE BCI Rust 1.93"
-LABEL org.opencontainers.image.description="Rust 1.93 container based on the SUSE Linux Enterprise Base Container Image."
+LABEL org.opencontainers.image.title="SLE BCI Rust 1.94"
+LABEL org.opencontainers.image.description="Rust 1.94 container based on the SUSE Linux Enterprise Base Container Image."
 LABEL org.opencontainers.image.version="%%RUST_VERSION%%"
 LABEL org.opencontainers.image.url="https://www.suse.com/products/base-container-images/"
 LABEL org.opencontainers.image.created="%BUILDTIME%"
@@ -55,7 +55,7 @@ LABEL org.opencontainers.image.ref.name="%%RUST_VERSION%%-1.%RELEASE%"
 LABEL org.opensuse.reference="registry.suse.com/bci/rust:%%RUST_VERSION%%-1.%RELEASE%"
 LABEL org.openbuildservice.disturl="%DISTURL%"
 LABEL com.suse.supportlevel="l3"
-LABEL com.suse.supportlevel.until="2026-05-07"
+LABEL com.suse.supportlevel.until="2026-06-18"
 LABEL com.suse.eula="sle-bci"
 LABEL com.suse.lifecycle-url="https://www.suse.com/lifecycle#suse-linux-enterprise-server-15"
 LABEL com.suse.release-stage="released"

rust-stable-image/README.md

@@ -1,4 +1,4 @@
-# Rust 1.93 Container Image
+# Rust 1.94 Container Image
 
 ![Redistributable](https://img.shields.io/badge/Redistributable-Yes-green)[![SLSA](https://img.shields.io/badge/SLSA_(v1.0)-Build_L3-Green)](https://documentation.suse.com/sbp/security/html/SBP-SLSA4/)
 [![Provenance: Available](https://img.shields.io/badge/Provenance-Available-Green)](https://documentation.suse.com/container/all/html/Container-guide/index.html#container-verify)
@@ -12,8 +12,8 @@
 To compile and deploy an application, copy the sources, fetch dependencies, and build the binary:
 
 ```Dockerfile
-# Build the application using the Rust 1.93 container image
-FROM registry.suse.com/bci/rust:1.93 as build
+# Build the application using the Rust 1.94 container image
+FROM registry.suse.com/bci/rust:1.94 as build
 
 WORKDIR /app
 
@@ -41,7 +41,7 @@ There are situations, where you don't want to run an application inside a contai
 To compile the application, without running it inside a container instance, use the following command:
 
 ```ShellSession
-$ podman run --rm -v "$PWD":/app:Z -w /app registry.suse.com/bci/rust:1.93 cargo build --release
+$ podman run --rm -v "$PWD":/app:Z -w /app registry.suse.com/bci/rust:1.94 cargo build --release
 ```
 
 **Note:** The Rust image is intended to be used as a build environment. For runtime, use smaller images such as `bci-base`, `bci-micro`, or `bci-minimal`.