forked from oVirt/ovirt-vmconsole
-
Notifications
You must be signed in to change notification settings - Fork 0
/
Copy pathovirt-vmconsole.spec.in
267 lines (212 loc) · 7.88 KB
/
ovirt-vmconsole.spec.in
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
243
244
245
246
247
248
249
250
251
252
253
254
255
256
257
258
259
260
261
262
263
264
265
266
267
%global package_version @PACKAGE_VERSION@
%global selinuxtype targeted
%global moduletype contrib
%global modulename ovirt_vmconsole
%global __python %{__python3}
Summary: oVirt VM console
Name: @PACKAGE_NAME@
Version: @PACKAGE_RPM_VERSION@
Release: @PACKAGE_RPM_RELEASE@%{?release_suffix}%{?dist}
License: GPLv3
URL: https://www.ovirt.org
Source: https://resources.ovirt.org/pub/src/%{name}/%{name}-%{package_version}.tar.gz
BuildRoot: %{_tmppath}/%{name}-%{version}-%{release}-root-%(%{__id_u} -n)
BuildRequires: checkpolicy
BuildRequires: gcc
BuildRequires: gettext
BuildRequires: openssh-clients
BuildRequires: openssh-server
BuildRequires: selinux-policy-devel
BuildRequires: selinux-policy
BuildArch: noarch
%{?selinux_requires}
BuildRequires: python3-devel
Requires: python3
Requires(post): libselinux-utils
Requires(preun): libselinux-utils
Requires(postun): libselinux-utils
Requires(pre): shadow-utils
Requires(preun): policycoreutils
Requires(post): policycoreutils-python3
Requires(postun): policycoreutils-python3
%description
oVirt VM console proxy
%package host
Summary: oVirt VM console host components
Requires: %{name} = %{version}-%{release}
Requires: openssh-server
Requires(post): libselinux-utils
Requires(preun): libselinux-utils
Requires(post): policycoreutils-python3
Requires(postun): policycoreutils-python3
BuildRequires: systemd
Requires(post): systemd
Requires(preun): systemd
Requires(postun): systemd
%description host
oVirt VM console host components
%package proxy
Summary: oVirt VM console proxy components
Requires: %{name} = %{version}-%{release}
Requires: openssh-clients
Requires(post): libselinux-utils
Requires(preun): libselinux-utils
Requires(post): policycoreutils-python3
Requires(postun): policycoreutils-python3
BuildRequires: systemd
Requires(post): systemd
Requires(preun): systemd
Requires(postun): systemd
%description proxy
oVirt VM console proxy components
%pre
getent group %{name} >/dev/null || \
groupadd -r %{name}
getent passwd %{name} >/dev/null || \
useradd \
-r \
-g %{name} \
-c "oVirt VM Console" \
-s /bin/sh \
-d %{_datadir}/%{name}/empty \
%{name}
%selinux_relabel_pre -s %{selinuxtype}
# [policy-priority]
# keep priority (-P) consistent between install and uninstall to avoid silent failure for removal on %postun
# 400 is just the old default, no reason to change it.
%post
%selinux_modules_install -s %{selinuxtype} -p 400 %{_datadir}/selinux/packages/ovirt-vmconsole/%{modulename}.pp
# per https://fedoraproject.org/wiki/Packaging:Scriptlets#Syntax
# this happens on uninstall - recommended by
# https://fedoraproject.org/wiki/PackagingDrafts/SELinux_Independent_Policy#The_.25post_Section
%postun
if [ $1 -eq 0 ]; then
# see [policy-priority]
%selinux_modules_uninstall -s %{selinuxtype} -p 400 %{modulename}
fi
# [ordering]
# see https://fedoraproject.org/wiki/Packaging:Scriptlets#Ordering
%posttrans
%selinux_relabel_post -s %{selinuxtype}
# [ignore-errors]
# see https://fedoraproject.org/wiki/PackagingDrafts/SELinux_Independent_Policy#Port_Labeling
#
# per https://fedoraproject.org/wiki/Packaging:Scriptlets#Syntax it seems that it is preferred
# to hide and swallow non-zero exit codes in the scriptlets. Let it be.
%post host
if %{_sbindir}/selinuxenabled ; then
semanage port -a -t ovirt_vmconsole_host_port_t -p tcp 2223 &> /dev/null || :
fi
%systemd_post ovirt-vmconsole-host-sshd.service
# see [ignore-errors]
%postun host
if %{_sbindir}/selinuxenabled ; then
semanage port -d -p tcp 2223 &> /dev/null || :
fi
%systemd_postun ovirt-vmconsole-host-sshd.service
# see [ordering]
%posttrans host
%selinux_relabel_post -s %{selinuxtype}
%preun host
%systemd_preun ovirt-vmconsole-host-sshd.service
# see [ignore-errors]
%post proxy
if %{_sbindir}/selinuxenabled ; then
semanage port -a -t ovirt_vmconsole_proxy_port_t -p tcp 2222 &> /dev/null || :
fi
%systemd_post ovirt-vmconsole-proxy-sshd.service
# see [ignore-errors]
%postun proxy
if %{_sbindir}/selinuxenabled ; then
semanage port -d -p tcp 2222 &> /dev/null || :
fi
%systemd_postun ovirt-vmconsole-proxy-sshd.service
# see [ordering]
%posttrans proxy
%selinux_relabel_post -s %{selinuxtype}
%preun proxy
%systemd_preun ovirt-vmconsole-proxy-sshd.service
%prep
%setup -q -n %{name}-%{package_version}
%build
%configure \
--with-local-version="%{name}-%{version}-%{release}" \
%{?conf}
make %{?_smp_mflags}
make -f /usr/share/selinux/devel/Makefile -C selinux-ovirt_vmconsole
%install
rm -rf "%{buildroot}"
make %{?_smp_mflags} install DESTDIR="%{buildroot}"
# install policy modules
install -d %{buildroot}%{_datadir}/selinux/packages/ovirt-vmconsole
install -m 0644 selinux-ovirt_vmconsole/%{modulename}.pp %{buildroot}%{_datadir}/selinux/packages/ovirt-vmconsole
#
# workaround rpmlint warnings
#
find "%{buildroot}" -name .keep -exec rm {} \;
#
# Register services
#
install -dm 755 "%{buildroot}%{_unitdir}"
install -m 644 "src/ovirt-vmconsole-host/ovirt-vmconsole-host-sshd/ovirt-vmconsole-host-sshd.systemd" "%{buildroot}%{_unitdir}/ovirt-vmconsole-host-sshd.service"
install -m 644 "src/ovirt-vmconsole-proxy/ovirt-vmconsole-proxy-sshd/ovirt-vmconsole-proxy-sshd.systemd" "%{buildroot}%{_unitdir}/ovirt-vmconsole-proxy-sshd.service"
%files
%dir %{_datadir}/%{name}
%dir %{_sysconfdir}/%{name}
%dir %{_datadir}/%{name}/empty
%dir %{python3_sitelib}/ovirt_vmconsole
%{python3_sitelib}/ovirt_vmconsole/__init__.py*
%{python3_sitelib}/ovirt_vmconsole/common/
%exclude %{python3_sitelib}/ovirt_vmconsole/__pycache__/*
%{_datadir}/selinux/packages/ovirt-vmconsole/%{modulename}.pp
%{_docdir}/%{name}/
%{_sysconfdir}/pki/%{name}/
%files host
%{_datadir}/%{name}/ovirt-vmconsole-host/
%{_libexecdir}/ovirt-vmconsole-host-*
%{_sysconfdir}/%{name}/ovirt-vmconsole-host/
%{python_sitelib}/ovirt_vmconsole/ovirt_vmconsole_host_*/
%{_unitdir}/ovirt-vmconsole-host-sshd.service
%files proxy
%{_datadir}/%{name}/ovirt-vmconsole-proxy/
%{_libexecdir}/ovirt-vmconsole-proxy-*
%{_sysconfdir}/%{name}/ovirt-vmconsole-proxy/
%{python_sitelib}/ovirt_vmconsole/ovirt_vmconsole_proxy_*/
%{_unitdir}/ovirt-vmconsole-proxy-sshd.service
%changelog
* Mon May 16 2022 Milan Zamazal <[email protected]> - 1.0.9-2
- rebuild for updated SELinux
* Thu Nov 26 2020 Milan Zamazal <[email protected]> - 1.0.9-1
- fix SELinux denials present in logs
* Thu Feb 27 2020 Milan Zamazal <[email protected]> - 1.0.8-1
- el8 related fixes
* Tue Sep 10 2019 Michal Skrivanek <[email protected]> - 1.0.7-3
- move automation to stdci v2 jobs
* Mon Oct 29 2018 Tomasz Baranski <[email protected]> - 1.0.6-2
- fix packaging for Python2/3
* Thu Oct 11 2018 Francesco Romani <[email protected]> - 1.0.6-1
- docs/proxy: guide users about how to disconnect
- deps: don't depend on python-argparse anymore
* Tue Apr 24 2018 Francesco Romani <[email protected]> - 1.0.5-4
- build: packaging: fix dependecies
* Tue Apr 24 2018 Francesco Romani <[email protected]> - 1.0.5-2
- build: update and fix build automation and infrastructure
* Thu Feb 15 2018 Francesco Romani <[email protected]> - 1.0.5-1
- packaging: ensure selinux-policy-targeted is installed
- packaging: remove python-argparse dependency on fc26
- licensing: bump copyright year
- licensing: add copyright boilerplate
* Fri Jul 29 2016 Francesco Romani <[email protected]> - 1.0.4-1
- packaging: make the package installable/upgradable even with
SELinux disabled.
- packaging: avoid scary but harmless ValueError on upgrade
- docs: document how to change the TCP ports used by this package
* Mon May 30 2016 Francesco Romani <[email protected]> - 1.0.3-1
- minor socketproxy improvements for easier troubleshooting
* Tue Apr 26 2016 Francesco Romani <[email protected]> - 1.0.2-1
- fix packaging dependencies on custom base images (oVirt Node)
* Tue Mar 08 2016 Francesco Romani <[email protected]> - 1.0.1-1
- ssh: ClientAlive/ServerAlive to expedite connection closure.
- fix python2/3 compatibility
* Thu Oct 15 2015 Alon Bar-Lev <[email protected]> - 1.0.0-1
- Initial add.