source: trunk/server/fedora/Makefile @ 1332

Last change on this file since 1332 was 1329, checked in by mitchb, 15 years ago
Scriptsify activesupport and actionpack ruby gems, patch for CVE-2009-3009
File size: 7.7 KB
Line 
1# Makefile for building scripts.mit.edu Fedora packages
2# Copyright (C) 2006  Jeff Arnold <jbarnold@mit.edu>
3#                and  Joe Presbrey <presbrey@mit.edu>
4#
5# This program is free software; you can redistribute it and/or
6# modify it under the terms of the GNU General Public License
7# as published by the Free Software Foundation; either version 2
8# of the License, or (at your option) any later version.
9#
10# This program is distributed in the hope that it will be useful,
11# but WITHOUT ANY WARRANTY; without even the implied warranty of
12# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
13# GNU General Public License for more details.
14#
15# You should have received a copy of the GNU General Public License
16# along with this program; if not, write to the Free Software
17# Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA  02110-1301, USA
18#
19# See /COPYRIGHT in this repository for more information.
20
21upstream_yum    = krb5 httpd openssh php rubygem-activesupport-2.3.2-1.fc11 rubygem-actionpack-2.3.2-1.fc11
22upstream        = openafs $(upstream_yum)
23oursrc          = execsys tokensys accountadm httpdmods logview sql-signup nss_nonlocal nss_nonlocal.i586 whoisd mit-zephyr athrun php_scripts scripts-base
24allsrc          = $(upstream) $(oursrc)
25oursrcdir       = ${PWD}/../common/oursrc
26patches         = ${PWD}/../common/patches
27specs           = ${PWD}/specs
28
29topdir          = ${HOME}/rpmbuild
30tmp_build       = $(topdir)/BUILD
31tmp_specs       = $(topdir)/SPECS
32tmp_src         = $(topdir)/SOURCES
33out_rpms        = $(topdir)/RPMS
34out_srpms       = $(topdir)/SRPMS
35out_sbin        = $(topdir)/sbin
36
37dload           = ${PWD}/.dload
38server_url      = "http://web.mit.edu/scripts/src"
39server_arch     = "fedora.stable"
40openafs_url     = "http://dl.openafs.org/dl/openafs/1.4.11/openafs-1.4.11-1.1.1.src.rpm"
41
42.PHONY: minimal-clean
43
44info:
45        @echo "The following packages are available:"; \
46        echo "$(allsrc)"; \
47        echo "Run 'make all' to build all packages."
48
49minimal-clean:
50        rm -rf $(topdir) $(dload)
51
52clean: minimal-clean
53        rm -rf $(out_rpms) $(out_srpms) $(out_sbin)
54
55mkdir-tree:
56        @rpmdev-setuptree
57        mkdir -p $(out_sbin)
58        ln -sTf $(topdir) rpmbuild
59
60download: download_stamp
61download_stamp: | SRPMS/mit-zephyr-2.1-6.src.rpm
62        @mkdir -p $(dload); \
63        #wget -qO- -nv $(server_url)/$(server_arch) | xargs make
64        cd $(dload) && yumdownloader --source $(upstream_yum)
65        wget -P $(dload) $(openafs_url)
66        touch download_stamp
67
68%.src.rpm:
69        wget -q -nv -N -B $(server_url) -nd -nH -P $(dload) $(server_url)/$*.src.rpm
70
71copy-patches: mkdir-tree
72        @cp $(patches)/*.patch $(tmp_src); \
73        cd $(tmp_src);
74
75install-srpms: mkdir-tree download
76        rpm $(rpm_args) -i $(dload)/*.src.rpm 2>/dev/null;
77
78copy-specs: mkdir-tree
79        cp ${specs}/*.spec $(tmp_specs)
80
81patch-specs: install-srpms
82        @cd ${tmp_specs}; \
83        list=`ls ${specs}/*.spec.patch`; \
84        for i in $$list; do \
85                patch < $$i; \
86        done; \
87        list2=`svn ls ${oursrcdir}`; \
88        for i in $$list2; do \
89                base=`basename $$i`; \
90                version=`svnversion ${oursrcdir}/$$i`; \
91                version=$${version//:/_}; \
92                echo "$$i version $$version"; \
93                sed --in-place \
94                        -e "s/SVNVERSION_TO_UPDATE/$${version}/" \
95                ${tmp_specs}/$$base.spec; \
96        done;
97
98# 1. use the package's Makefile to delete leftover files and run autoconf
99# 2. create a tarball (we want it to contain the autoconf output)
100tarballs: mkdir-tree
101        @cd ${oursrcdir}; \
102        list=`find -mindepth 1 -maxdepth 1 -type d | grep -v ".svn"`; \
103        for i in $$list; do \
104                pushd $$i; \
105                if [ -x ./mrproper ]; then \
106                        ./mrproper; \
107                        autoconf; \
108                fi; \
109                popd; \
110                tar -czf $(tmp_src)/$$i.tar.gz $$i; \
111        done;
112
113#setup: install-srpms copy-patches copy-specs patch-specs tarballs
114setup: copy-patches copy-specs patch-specs tarballs
115
116oursrc:
117        make $(oursrc)
118
119upstream: mkdir-tree download
120        make $(upstream)
121
122all:
123        make $(allsrc)
124
125$(oursrc): rpmbuild_args += --define 'scriptsversion $(shell svnversion ${oursrcdir}/$** | tr ':' '_')'
126
127$(filter %.i586,$(oursrc)): %.i586: setup
128        PATH="/usr/kerberos/sbin:/usr/kerberos/bin:/sbin:/bin:/usr/sbin:/usr/bin:/usr/local/sbin:/usr/local/bin" \
129        setarch i586 rpmbuild $(rpmbuild_args) --target=i586 --define="_lib lib" -bb ${tmp_specs}/$**.spec
130
131$(filter-out %.i586,$(oursrc)): %: setup
132        PATH="/usr/kerberos/sbin:/usr/kerberos/bin:/sbin:/bin:/usr/sbin:/usr/bin:/usr/local/sbin:/usr/local/bin" \
133        rpmbuild $(rpmbuild_args) -bb ${tmp_specs}/$**.spec
134
135$(upstream) rubygem-activesupport rubygem-actionpack openafs-kernel: rpmbuild_args += --define 'scriptsversion $(shell svnversion ${patches} | tr ':' '_')'
136
137$(upstream) rubygem-activesupport rubygem-actionpack: setup patch-specs
138        rpmbuild $(rpmbuild_args) -ba ${tmp_specs}/$@.spec
139
140openafs-kernel: setup
141        PATH="/usr/kerberos/sbin:/usr/kerberos/bin:/sbin:/bin:/usr/sbin:/usr/bin:/usr/local/sbin:/usr/local/bin" \
142        rpmbuild $(rpmbuild_args) -bb ${tmp_specs}/openafs*.spec
143
144#sort -n sorts "2.6.25-1" later than "2.6.25.1-1", so it's Wrong
145#kernvers = $(shell rpm -q --qf "%{Version}-%{Release}\n" --whatprovides kernel | sort -n | tail -n1)
146kernvers = $(shell uname -r | sed "s/\(.*\)[.].*/\1/")
147kvariants = ''
148openafs_rpmbuild_args = --define "fedorakmod 1" --define "kvariants $(kvariants)" --define "kernvers $(kernvers)" --nodeps
149openafs: rpmbuild_args += $(openafs_rpmbuild_args)
150openafs-kernel: rpmbuild_args += $(openafs_rpmbuild_args) --define "build_userspace 0" --define "build_modules 1"
151
152suexec: #install-srpms
153        @rm -rf ${tmp_src}/httpd-2*/; \
154        tar zxvf ${tmp_src}/httpd-2*.tar.gz; \
155        cd httpd-2*; \
156        patch -p1 < ${patches}/httpd-suexec-scripts.patch; \
157        autoreconf; \
158        ./configure --prefix=/etc/httpd --with-suexec-userdir=web_scripts --with-suexec-caller=apache --with-suexec-uidmin=50 --with-suexec-gidmin=50 --with-suexec-docroot=/ --with-suexec-trusteddir=/usr/libexec/scripts-trusted; \
159        pushd support; \
160        mkdir -p ${out_sbin}; make suexec && cp suexec ${out_sbin}; \
161        popd; \
162        rm -rf httpd-2*; \
163        echo; \
164        echo "suexec binary written to ${out_sbin}."; \
165        echo "Run 'make install-suexec' as root to install it.";
166
167install-suexec:
168        install -m 4510 -o 0 -g apache ${out_sbin}/suexec /usr/sbin/;
169
170frob-openafs:
171        @if [ ! -d "/etc/openafs/" ]; then \
172        echo "/etc/openafs does not exist"; \
173        exit 1; \
174        else \
175        ln -nfs /etc/openafs/* /usr/vice/etc/; \
176        fi
177
178# The following packages are needed for our packages
179basic-deps      = kernel-devel rpm-build rpmdevtools gcc autoconf patch krb5-workstation glibc-devel.i586 glibc-devel libtool libgcc.i586
180oursrc-deps     = hesinfo openldap-clients openldap-devel.i586 php-devel
181httpdmods-deps  = httpd-devel
182httpd-deps      = xmlto db4-devel expat-devel zlib-devel libselinux-devel apr-devel apr-util-devel pcre-devel openssl-devel distcache-devel
183krb5-deps       = bison ncurses-devel texinfo keyutils-libs-devel texinfo-tex texlive-latex
184openafs-deps    = pam-devel automake
185mit-zephyr-deps = readline-devel hesiod-devel hesiod-devel.i586 hesiod.i586 libXt.i586 #compat-readline43
186openssh-deps    = gtk2-devel libX11-devel autoconf automake openssl-devel perl zlib-devel audit-libs-devel util-linux groff man pam-devel tcp_wrappers-devel krb5-devel libselinux-devel audit-libs xauth pango-devel cairo-devel libedit-devel nss-devel fipscheck-devel
187php-deps        = bzip2-devel curl-devel gmp-devel libstdc++-devel sqlite-devel gcc-c++ libc-client-devel mysql-devel postgresql-devel unixODBC-devel libxml2-devel net-snmp-devel libxslt-devel libxml2-devel libXpm-devel libjpeg-devel t1lib-devel libmcrypt-devel mhash-devel libtidy-devel freetds-devel aspell-devel recode-devel
188install-deps:
189        yum -y install $(basic-deps) $(oursrc-deps) $(httpdmods-deps) $(httpd-deps) $(krb5-deps) $(openafs-deps) $(mit-zephyr-deps) $(openssh-deps) $(php-deps)
190        rpm -ivh ftp://ftp.muug.mb.ca/mirror/fedora/linux/core/6/i386/os/Fedora/RPMS/compat-readline43-4.3-3.i386.rpm
191#       rpm -ivh http://download.fedora.redhat.com/pub/fedora/linux/core/6/i386/os/Fedora/RPMS/compat-readline43-4.3-3.i386.rpm
192
193fedora:
194        make install-deps
195        make upstream
196        rpm -ivh $(out_rpms)/`uname -m`/openafs-devel*.rpm
197        make oursrc
Note: See TracBrowser for help on using the repository browser.