use local secret_file for compiling assets

[packages/gitlab-ce.git] / gitlab-ce.spec

# NOTE:
#  This package uses Bundler to download and install all gems in deployment
#  mode (i.e. into isolated directory inside application). That's not PLD Linux
#  way how it should be done, but GitLab has too many dependencies that it will
#  be too difficult to maintain them via distro packages.
#
# install notes: https://gitlab.com/gitlab-org/gitlab-ce/blob/v8.6.6/doc/install/installation.md
#
# TODO
# - [timfel-krb5-auth] doesn't build with heimdal (https://github.com/timfel/krb5-auth/issues/8)
#
#
# Conditional build:
%bcond_with	krb5		# build with kerberos support
%bcond_without	gem_cache	# use local to speedup gem installation

Summary:	A Web interface to create projects and repositories, manage access and do code reviews
Name:		gitlab-ce
Version:	8.7.5
Release:	0.22
License:	MIT
Group:		Applications/WWW
# md5 deliberately omitted until this package is useful
Source0:	https://github.com/gitlabhq/gitlabhq/archive/v%{version}/%{name}-%{version}.tar.gz
Patch0:		https://gitlab.com/gitlab-org/gitlab-ce/merge_requests/3774.patch
Patch1:		pld.patch
Source1:	gitlab.target
Source2:	gitlab-sidekiq.service
Source3:	gitlab-sidekiq.init
Source4:	gitlab-unicorn.service
Source5:	gitlab-unicorn.init
Source6:	gitlab.logrotate
Source7:	gitlab.tmpfiles.d
Source8:	gitlab-apache-conf
Source9:	gitlab-rake.sh
Source10:	gitconfig
URL:		https://www.gitlab.com/gitlab-ce/
BuildRequires:	cmake
BuildRequires:	gmp-devel
BuildRequires:	libgit2-devel
BuildRequires:	libicu-devel
BuildRequires:	libstdc++-devel
BuildRequires:	libxml2-devel
BuildRequires:	mysql-devel
BuildRequires:	postgresql-devel
BuildRequires:	rpm-rubyprov
BuildRequires:	ruby-bundler
BuildRequires:	ruby-devel >= 1:2.1.0
BuildRequires:	zlib-devel
Requires:	apache-base
Requires:	git-core >= 2.7.4
Requires:	gitlab-shell >= 2.7.2
Requires:	nodejs
Requires:	ruby-bundler
Suggests:	mysql
Suggests:	redis-server
Obsoletes:	gitlab <= 8.1.4
BuildRoot:	%{tmpdir}/%{name}-%{version}-root-%(id -u -n)

%define	_noautoreqfiles redcloth_scan.jar primitives.jar

%define	uname git
%define gname git
%define homedir %{_localstatedir}/lib/gitlab

%description
GitLab Community Edition (CE) is open source software to collaborate
on code. Create projects and repositories, manage access and do code
reviews. GitLab CE is on-premises software that you can install and
use on your server(s).

%prep
%setup -qn gitlabhq-%{version}
mv config/gitlab.yml.example config/gitlab.yml
mv config/unicorn.rb.example config/unicorn.rb
%patch0 -p1
%patch1 -p1

# use mysql for now
mv config/database.yml.mysql config/database.yml

rm .flayignore
rm .gitignore
rm .csscomb.json
rm .gitattributes
rm docker-compose.yml
find -name .gitkeep | xargs rm
rm -r lib/support/{deploy,init.d}

%build
%if %{with gem_cache}
cachedir="%{_specdir}/cache/%{version}.%{_arch}"
install -d vendor/bundle
test -d "$cachedir" && cp -aul "$cachedir"/* vendor/bundle
%endif

bundle install %{_smp_mflags} \
	--verbose \
	--deployment \
	--without development test aws %{!?with_krb5:kerberos}

cp -p config/gitlab.yml{,.production}
sed -i -e '/secret_file:/d' config/gitlab.yml
bundle exec rake RAILS_ENV=production assets:clean assets:precompile USE_DB=false
mv -f config/gitlab.yml{.production,}

# avoid bogus ruby dep
chmod a-x vendor/bundle/ruby/gems/unicorn-*/bin/unicorn*

# remove secrets, log and cache that assets compile initialized
rm .gitlab_shell_secret
rm .secret
rm config/secrets.yml
rm log/production.log
rm -r tmp/cache/*

%if %{with gem_cache}
install -d "$cachedir"
cp -aul vendor/bundle/* "$cachedir"
%endif

%install
rm -rf $RPM_BUILD_ROOT
install -d \
	$RPM_BUILD_ROOT%{homedir}/www \
	$RPM_BUILD_ROOT%{homedir}/public/{assets,uploads} \
	$RPM_BUILD_ROOT%{homedir}/satellites \
	$RPM_BUILD_ROOT%{homedir}/tmp/{cache/assets,sessions} \
	$RPM_BUILD_ROOT%{_sysconfdir}/gitlab \
	$RPM_BUILD_ROOT%{_docdir}/gitlab \

# test if we can hardlink -- %{_builddir} and $RPM_BUILD_ROOT on same partition
if cp -al VERSION $RPM_BUILD_ROOT/VERSION 2>/dev/null; then
	l=l
	rm -f $RPM_BUILD_ROOT/VERSION
fi

cp -a$l . $RPM_BUILD_ROOT%{homedir}

# rpm cruft from repackaging
rm -f $RPM_BUILD_ROOT%{homedir}/debug*.list

# nuke tests
chmod -R u+w $RPM_BUILD_ROOT%{homedir}/vendor/bundle/ruby/gems/*/test
rm -r $RPM_BUILD_ROOT%{homedir}/vendor/bundle/ruby/gems/*/test

# Creating links
ln -fs /run/gitlab $RPM_BUILD_ROOT%{homedir}/pids
ln -fs /run/gitlab $RPM_BUILD_ROOT%{homedir}/sockets
rmdir $RPM_BUILD_ROOT%{homedir}/log
ln -fs %{_localstatedir}/log/gitlab $RPM_BUILD_ROOT%{homedir}/log
install -d $RPM_BUILD_ROOT%{_localstatedir}/log/gitlab

move_config() {
	local source=$1 target=$2
	mv $RPM_BUILD_ROOT$source $RPM_BUILD_ROOT$target
	ln -s $target $RPM_BUILD_ROOT$source
}

# Install config files
for f in gitlab.yml unicorn.rb database.yml; do
	move_config %{homedir}/config/$f %{_sysconfdir}/gitlab/$f
done

install -d $RPM_BUILD_ROOT{%{_sbindir},%{systemdunitdir},%{systemdtmpfilesdir}} \
	$RPM_BUILD_ROOT/etc/{logrotate.d,rc.d/init.d,httpd/webapps.d}

cp -p %{SOURCE2} $RPM_BUILD_ROOT%{systemdunitdir}/gitlab-sidekiq.service
install -p %{SOURCE3} $RPM_BUILD_ROOT/etc/rc.d/init.d/gitlab-sidekiq
cp -p %{SOURCE4} $RPM_BUILD_ROOT%{systemdunitdir}/gitlab-unicorn.service
install -p %{SOURCE5} $RPM_BUILD_ROOT/etc/rc.d/init.d/gitlab-unicorn

cp -p %{SOURCE1} $RPM_BUILD_ROOT%{systemdunitdir}/gitlab.target
cp -p %{SOURCE7} $RPM_BUILD_ROOT%{systemdtmpfilesdir}/gitlab.conf
cp -p %{SOURCE6} $RPM_BUILD_ROOT/etc/logrotate.d/gitlab.logrotate
cp -p %{SOURCE8} $RPM_BUILD_ROOT/etc/httpd/webapps.d/gitlab.conf
cp -p %{SOURCE10} $RPM_BUILD_ROOT%{homedir}/.gitconfig
install -p %{SOURCE9} $RPM_BUILD_ROOT%{_sbindir}/gitlab-rake

%clean
rm -rf "$RPM_BUILD_ROOT"

%post
if [ $1 -ge 1 ]; then
	systemctl -q daemon-reload
	systemd-tmpfiles --create %{systemdtmpfilesdir}/gitlab.conf
	[ -e %{_localstatedir}/lock/subsys/httpd ] && service httpd reload || :
fi
if [ $1 -eq 1 ]; then
	systemctl -q enable gitlab-unicorn
	systemctl -q enable gitlab-sidekiq
	systemctl -q enable gitlab.target
	systemctl -q start gitlab-unicorn
	systemctl -q start gitlab-sidekiq
	systemctl -q start gitlab.target
	echo "Create and configure database in /etc/gitlab/database.yml"
	echo "Then run 'sudo -u gitlab bundle exec rake gitlab:setup RAILS_ENV=production'"
	echo
else
	systemctl -q try-restart gitlab-unicorn || :
	systemctl -q try-start gitlab-sidekiq || :
fi

%postun
if [ $1 -eq 0 ]; then
	%userremove gitlab
	%groupremove gitlab
fi

%files
%defattr(644,root,root,755)
%doc LICENSE
%config(noreplace) %{_sysconfdir}/gitlab/database.yml
%config(noreplace) %{_sysconfdir}/gitlab/gitlab.yml
%config(noreplace) %{_sysconfdir}/gitlab/unicorn.rb
%config(noreplace) %{_sysconfdir}/httpd/webapps.d/gitlab.conf
/etc/logrotate.d/gitlab.logrotate
%attr(754,root,root) /etc/rc.d/init.d/gitlab-sidekiq
%attr(754,root,root) /etc/rc.d/init.d/gitlab-unicorn
%attr(755,root,root) %{_sbindir}/gitlab-rake
%{systemdunitdir}/gitlab-sidekiq.service
%{systemdunitdir}/gitlab-unicorn.service
%{systemdunitdir}/gitlab.target
%{systemdtmpfilesdir}/gitlab.conf
%dir %attr(755,%{uname},%{gname}) %{homedir}
%dir %attr(640,%{uname},%{gname}) %{homedir}/.gitconfig
%dir %attr(755,%{uname},%{gname}) %{homedir}/app
%attr(-,%{uname},%{gname}) %{homedir}/app/*
%dir %attr(755,%{uname},%{gname}) %{homedir}/bin
%attr(-,%{uname},%{gname}) %{homedir}/bin/*
%dir %attr(755,%{uname},%{gname}) %{homedir}/builds
%dir %attr(755,%{uname},%{gname}) %{homedir}/config
%attr(-,%{uname},%{gname}) %{homedir}/config/*
%dir %attr(755,%{uname},%{gname}) %{homedir}/db
%attr(-,%{uname},%{gname}) %{homedir}/db/*
%dir %attr(755,%{uname},%{gname}) %{homedir}/doc
%attr(-,%{uname},%{gname}) %{homedir}/doc/*
%dir %attr(755,%{uname},%{gname}) %{homedir}/docker
%attr(-,%{uname},%{gname}) %{homedir}/docker/*
%dir %attr(755,%{uname},%{gname}) %{homedir}/features
%attr(-,%{uname},%{gname}) %{homedir}/features/*
%dir %attr(755,%{uname},%{gname}) %{homedir}/lib
%attr(-,%{uname},%{gname}) %{homedir}/lib/*
%dir %attr(755,%{uname},%{gname}) %{homedir}/pids
%dir %{homedir}/public
%{homedir}/public/ci
%{homedir}/public/*.*
%attr(-,%{uname},%{gname}) %{homedir}/public/uploads
%attr(-,%{uname},%{gname}) %{homedir}/public/assets
%dir %attr(755,%{uname},%{gname}) %{homedir}/satellites
%dir %attr(755,%{uname},%{gname}) %{homedir}/scripts
%attr(-,%{uname},%{gname}) %{homedir}/scripts/*
%dir %attr(755,%{uname},%{gname}) %{homedir}/sockets
%dir %attr(755,%{uname},%{gname}) %{homedir}/spec
%attr(-,%{uname},%{gname}) %{homedir}/spec/*
%dir %attr(755,%{uname},%{gname}) %{homedir}/tmp
%attr(-,%{uname},%{gname}) %{homedir}/tmp/*
%dir %attr(755,%{uname},%{gname}) %{homedir}/www

%dir %attr(750,%{uname},%{gname}) %{homedir}/shared
%dir %attr(750,%{uname},%{gname}) %{homedir}/shared/artifacts
%dir %attr(750,%{uname},%{gname}) %{homedir}/shared/artifacts/tmp
%dir %attr(750,%{uname},%{gname}) %{homedir}/shared/artifacts/tmp/cache
%dir %attr(750,%{uname},%{gname}) %{homedir}/shared/artifacts/tmp/uploads
%dir %attr(750,%{uname},%{gname}) %{homedir}/shared/lfs-objects

%dir %attr(755,%{uname},%{gname}) %{homedir}/.bundle
%attr(-,%{uname},%{gname}) %{homedir}/.bundle/config
%attr(-,%{uname},%{gname}) %{homedir}/.foreman
%attr(-,%{uname},%{gname}) %{homedir}/.*.yml
%attr(-,%{uname},%{gname}) %{homedir}/.rspec
%attr(-,%{uname},%{gname}) %{homedir}/.ruby-version
%attr(-,%{uname},%{gname}) %{homedir}/.simplecov
%attr(-,%{uname},%{gname}) %{homedir}/CHANGELOG
%attr(-,%{uname},%{gname}) %{homedir}/GITLAB_WORKHORSE_VERSION
%attr(-,%{uname},%{gname}) %{homedir}/GITLAB_SHELL_VERSION
%attr(-,%{uname},%{gname}) %{homedir}/Gemfile*
%attr(-,%{uname},%{gname}) %{homedir}/LICENSE
%attr(-,%{uname},%{gname}) %{homedir}/*.md
%attr(-,%{uname},%{gname}) %{homedir}/Procfile
%attr(-,%{uname},%{gname}) %{homedir}/Rakefile
%attr(-,%{uname},%{gname}) %{homedir}/VERSION
%attr(-,%{uname},%{gname}) %{homedir}/config.ru
%attr(-,%{uname},%{gname}) %{homedir}/fixtures

%{homedir}/log
%dir %attr(771,root,%{gname}) /var/log/gitlab

%defattr(-,root,root,-)
%dir %{homedir}/vendor
%{homedir}/vendor/*