openSUSE Build Service

Overview Repositories Revisions Requests Users Attributes Meta

File munge.spec of Package munge

#
# spec file for package munge
#
# Copyright (c) 2024 SUSE LLC
#
# All modifications and additions to the file contributed by third parties
# remain the property of their copyright owners, unless otherwise agreed
# upon. The license for this file, and modifications and additions to the
# file, is the same license as for the pristine package itself (unless the
# license for the pristine package is not an Open Source License, in which
# case the license is the MIT License). An "Open Source License" is a
# license that conforms to the Open Source Definition (Version 1.9)
# published by the Open Source Initiative.

# Please submit bugfixes or comments via https://bugs.opensuse.org/
#

#Compat macro for new _fillupdir macro introduced in Nov 2017
%if ! %{defined _fillupdir}
  %define _fillupdir /var/adm/fillup-templates
%endif

%if 0%{?suse_version} >= 1210
%define have_systemd 1
 %if 0%{?sle_version} >= 150000 || 0%{?is_opensuse}
  %define have_sysuser 1
 %endif
%endif
%define lversion 2

%define munge_g %name
%if 0%{?have_systemd}
 %define munge_u %name
%else
 %define munge_u daemon
%endif
%define munge_descr "MUNGE authentication service"

Name:           munge
Version:        0.5.16
Release:        0
Summary:        An authentication service for creating and validating credentials
License:        GPL-3.0-or-later AND LGPL-3.0-or-later
Group:          Productivity/Security
URL:            https://dun.github.io/munge/
Source0:        https://github.com/dun/munge/archive/%{name}-%{version}.tar.gz
Source1:        baselibs.conf
Source2:        sysconfig.munge
Source3:        README.SUSE
Patch0:         Make-SUSE-specific-adjustments.patch
BuildRequires:  autoconf
BuildRequires:  automake
BuildRequires:  libbz2-devel
BuildRequires:  libtool
BuildRequires:  openssl-devel
BuildRequires:  pkgconfig
# For %%check
BuildRequires:  procps
BuildRequires:  zlib-devel
Requires:       logrotate
%if 0%{?suse_version} <= 1140
Requires(pre):  pwdutils
%else
Requires(pre):  shadow
%endif
Requires(post): coreutils
%if 0%{?have_systemd}
BuildRequires:  systemd-rpm-macros
BuildRequires:  pkgconfig(systemd)
%{?have_sysuser:BuildRequires:  sysuser-tools}
%{?systemd_requires}
%endif
Requires(post): coreutils
Requires(postun): coreutils

%description
MUNGE (MUNGE Uid 'N' Gid Emporium) is an authentication service for
creating and validating user credentials.  It is designed to be highly
scalable for use in an HPC cluster environment.  It provides a portable
API for encoding the user's identity into a tamper-proof credential
that can be obtained by an untrusted client and forwarded by untrusted
intermediaries within a security realm.  Clients within this realm can
create and validate credentials without the use of root privileges,
reserved ports, or platform-specific methods.

%package -n lib%{name}%{lversion}
Summary:        Libraries for applications using MUNGE
Group:          System/Libraries
Recommends:     munge
# For compatibility with the MUNGE upstream SPEC file.
Provides:       munge-libs = %version

%description -n lib%{name}%{lversion}
A shared library for applications using the MUNGE authentication service.

%package devel
Requires:       lib%{name}%{lversion} = %{version}
Summary:        Headers and Libraries for building applications using %{name}
Group:          Development/Libraries/C and C++

%description devel
A header file and libraries for building applications using the %{name}
authenication service.

%{!?_rundir:%define _rundir %_localstatedir/run}
%{!?_tmpfilesdir:%global _tmpfilesdir /usr/lib/tmpfiles.d}
%define munge_run %_rundir/munge

%prep
%setup -n %{name}-%{name}-%{version}
%autopatch -p1

cp %{SOURCE3} .

%build
./bootstrap
%configure --disable-static \
    --with-crypto-lib=openssl \
    --with-logrotateddir=%{_sysconfdir}/logrotate.d \
    --with-pkgconfigdir=%{_libdir}/pkgconfig \
%{?have_systemd:--with-systemdunitdir=%{_unitdir}} \
    --with-runstatedir=%{_rundir}
%if 0%{!?make_build:1}
%define make_build make %{?_smp_mflags}
%endif
%make_build

%install
%makeinstall
rm -f %{buildroot}%{_libdir}/*.la
rm -f %{buildroot}%{_libdir}/*.a

mkdir -p %{buildroot}%{_datarootdir}/licenses

install -m 0755 -d %{buildroot}%{_fillupdir}
# We don't want systemd file on SLE 11
%if 0%{!?have_systemd:1}
   test -d %{buildroot}%{_prefix}/lib/systemd && \
      rm -rf %{buildroot}%{_prefix}/lib/systemd
   test -f %{buildroot}/lib/systemd/system/munge.service && \
      rm -f %{buildroot}/lib/systemd/system/munge.service
   sed -i 's/USER="munge"/USER="%munge_u"/g' %{buildroot}/%{_initrddir}/%{name}
   ln -s -f %{_initrddir}/%{name} %{buildroot}%{_sbindir}/rc%{name}
   rm -f %{buildroot}%{_sysconfdir}/sysconfig/munge
   cp -p %{S:2} %{buildroot}%{_fillupdir}/sysconfig.munge
%else
  sed -i 's/User=munge/User=%munge_u/g' %{buildroot}%{_unitdir}/munge.service
  sed -i 's/Group=munge/Group=%munge_g/g' %{buildroot}%{_unitdir}/munge.service
  rm -f %{buildroot}%{_initddir}/munge
  rm -Rf %{buildroot}/%{munge_run}
  rm -Rf %{buildroot}/%{_rundir}
  mkdir -p %{buildroot}%{_tmpfilesdir}
  cp src/etc/munge.tmpfiles.conf %{buildroot}%{_tmpfilesdir}/munge.conf
  sed -i 's/munge \+munge/%munge_u %munge_g/g' %{buildroot}%{_tmpfilesdir}/munge.conf
  ln -s %{_sbindir}/service %{buildroot}%{_sbindir}/rc%{name}
  mv %{buildroot}%{_sysconfdir}/sysconfig/munge \
     %{buildroot}%{_fillupdir}/sysconfig.munge
  %if 0%{?have_sysuser}
  echo -e "u %munge_u - \"%munge_descr\" %{munge_run}\n" > system-user-%{name}.conf
  %sysusers_generate_pre system-user-%{name}.conf %{name} system-user-%{name}.conf
  install -D -m 644 system-user-%{name}.conf %{buildroot}%{_sysusersdir}/system-user-%{name}.conf
  %endif
%endif

%check
# To debug add verbose=t to T_LOG_DRIVER variable in t/Makefile.am
make check

%post -n lib%{name}%{lversion} -p /sbin/ldconfig

%postun -n lib%{name}%{lversion} -p /sbin/ldconfig

%pre %{?have_sysuser:-f %{name}.pre}
%if 0%{?have_systemd}
%service_add_pre munge.service
%endif
%if 0%{!?have_sysuser:1}
getent group %munge_g >/dev/null || groupadd -r %munge_g
[ "%munge_u" = "daemon" ] || \
{ getent passwd %munge_u >/dev/null \
    || useradd -r -g %munge_g -d %munge_run -s /bin/false -c %munge_descr %munge_u; }
exit 0
%endif

%preun
%if 0%{?have_systemd}
%service_del_preun munge.service
%else
%stop_on_removal munge
%endif

%define fixperm() [ -e %1 ] && /bin/chown -h %munge_u:%munge_g %1

%postun
if [ $1 -eq 1 ]
then
    %{fixperm %{_localstatedir}/log/munge}
    %{fixperm %{_localstatedir}/log/munge/munged.log}
    %{fixperm %munge_run}
else
    rm -f %{_sysconfdir}/munge/munge.key
fi
%if 0%{?have_systemd}
%service_del_postun munge.service
%else
%restart_on_update munge
%insserv_cleanup
%endif

%post
if [ $1 -eq 1 ]
then
    %{fixperm %{_localstatedir}/log/munge}
    %{fixperm %{_localstatedir}/log/munge/munged.log}
    %{fixperm %munge_run}
fi
unset tmpfile
tmpdir=$(mktemp -d /tmp/tmpdir-XXXXXXXXX)
if [ -e %{_sysconfdir}/munge/munge.key ]; then
    # Preserve symlink so we can check for it
    cp -pP %{_sysconfdir}/munge/munge.key ${tmpdir}
fi
# Make sure this is no symlinks - this may have been created by an attacker!
if [ -e ${tmpdir}/munge.key -a ! -h ${tmpdir}/munge.key ]; then
    if [ $(/usr/bin/stat -c %U:%G:%a ${tmpdir}/munge.key) != \
    %munge_u:%munge_g:600 ]; then
	tmpfile=${tmpdir}/munge.key
    fi
else
    /usr/bin/rm -f ${tmpdir}/munge.key
    tmpfile=${tmpdir}/munge.key
    /usr/sbin/mungekey -c -b 8192 -k $tmpfile
fi
if [ -n "$tmpfile" ]; then
    /bin/chmod 0600 $tmpfile
    /bin/chown -h %munge_u:%munge_g $tmpfile
    /bin/mv -f $tmpfile %{_sysconfdir}/munge/munge.key
fi
/usr/bin/rm -rf ${tmpdir}
%if 0%{?have_systemd}
%service_add_post munge.service
%{fillup_only}
%else
%{fillup_and_insserv -i munge}
%endif

%files
%doc AUTHORS
%if 0%{?suse_version} < 1500
%dir %{_datarootdir}/licenses
%endif
%license COPYING
%doc DISCLAIMER*
%doc HISTORY
%doc JARGON
%doc NEWS
%doc PLATFORMS
%doc QUICKSTART
%doc README
%doc README.SUSE
%doc doc/*
%dir %attr(0700,%munge_u,%munge_g) %{_sysconfdir}/munge
%attr(0600,%munge_u,%munge_g) %config(noreplace) %ghost %{_sysconfdir}/munge/munge.key
%config(noreplace) %{_sysconfdir}/logrotate.d/munge
# bsc#1173167
#%%config(noreplace) %%ghost %%{_sysconfdir}/sysconfig/munge
%{_fillupdir}/sysconfig.munge
%dir %attr(0711,%munge_u,%munge_g) %{_localstatedir}/lib/munge
%attr(0600,%munge_u,%munge_g) %ghost %{_localstatedir}/lib/munge/munged.seed
%dir %attr(0700,%munge_u,%munge_g) %{_localstatedir}/log/munge
%attr(0640,%munge_u,%munge_g) %ghost %{_localstatedir}/log/munge/munged.log
%{_bindir}/*
%{_sbindir}/*
%{_mandir}/*[^3]/*
%if 0%{?have_systemd}
%dir %attr(0755,%munge_u,%munge_g) %ghost %{munge_run}
%{_unitdir}/munge.service
%{_tmpfilesdir}/munge.conf
%else
%dir %attr(0755,%munge_u,%munge_g) %{munge_run}
%{_initddir}/munge
%endif
%dir %attr(0755,munge,munge) %ghost %{munge_run}/munged.pid
%{?have_sysuser:%{_sysusersdir}/system-user-%{name}.conf}

%files devel
%{_includedir}/*
%{_mandir}/*3/*
%{_libdir}/*.so
%{_libdir}/pkgconfig/*.pc

%files -n lib%{name}%{lversion}
%{_libdir}/*.so.*

%changelog

Places

File munge.spec of Package munge

Places