unbound.spec

   1 # FIXME:
   2 # - stop using nobody group
   3 #
   4 # Conditional build:
   5 %bcond_without  python  # Python binding
   6 %bcond_with     dnstap  # dnstap replication support
   7 %bcond_with     systemd # systemd support
   8 %bcond_without  tests
   9 #
  10 Summary:        Recursive, validating DNS resolver
  11 Summary(pl.UTF-8):      Rekurencyjny, weryfikujący resolver DNS
  12 Name:           unbound
  13 Version:        1.8.0
  14 Release:        1
  15 License:        BSD
  16 Group:          Applications/Network
  17 Source0:        http://www.unbound.net/downloads/%{name}-%{version}.tar.gz
  18 # Source0-md5:  495ffdff55a53ff1735fb58e956c1945
  19 Source1:        %{name}.init
  20 Source2:        %{name}.service
  21 Source3:        https://data.iana.org/root-anchors/icannbundle.pem
  22 # Source3-md5:  24a426d59b61524623695f1b849f159b
  23 Source4:        ftp://ftp.internic.net/domain/named.cache
  24 # Source4-md5:  602f28581292bf5e50c8137c955173e6
  25 Patch0:         %{name}-default_trust_anchor.patch
  26 Patch1:         %{name}-sh.patch
  27 Patch2:         %{name}-pythondir.patch
  28 Patch3:         %{name}-flex.patch
  29 URL:            http://unbound.net/
  30 BuildRequires:  autoconf >= 2.56
  31 BuildRequires:  automake
  32 BuildRequires:  bison
  33 BuildRequires:  expat-devel
  34 BuildRequires:  flex
  35 %{?with_dnstap:BuildRequires:   fstrm-devel}
  36 BuildRequires:  libevent-devel
  37 BuildRequires:  libtool
  38 BuildRequires:  openssl-devel >= 1.0
  39 %{?with_dnstap:BuildRequires:   protobuf-c-devel}
  40 BuildRequires:  rpmbuild(macros) >= 1.671
  41 %{?with_systemd:BuildRequires:  systemd-devel}
  42 %if %{with python}
  43 BuildRequires:  python-devel >= 1:2.4.0
  44 BuildRequires:  swig-python
  45 %endif
  46 Provides:       user(unbound)
  47 Requires(post,preun):   /sbin/chkconfig
  48 Requires(postun):       /usr/sbin/userdel
  49 Requires(pre):  /bin/id
  50 Requires(pre):  /usr/sbin/useradd
  51 Requires:       systemd-units >= 38
  52 Requires:       %{name}-libs = %{version}-%{release}
  53 BuildRoot:      %{tmpdir}/%{name}-%{version}-root-%(id -u -n)
  54
  55 %description
  56 Unbound is a validating, recursive, and caching DNS resolver.
  57
  58 The C implementation of Unbound is developed and maintained by NLnet
  59 Labs. It is based on ideas and algorithms taken from a Java prototype
  60 developed by Verisign labs, Nominet, Kirei and ep.net.
  61
  62 Unbound is designed as a set of modular components, so that also
  63 DNSSEC (secure DNS) validation and stub-resolvers (that do not run as
  64 a server, but are linked into an application) are easily possible.
  65
  66 %description -l pl.UTF-8
  67 Unbound to weryfikujący, rekurencyjny i cache'ujący resolver (kod
  68 rozwiązujący nazwy) DNS.
  69
  70 Implementacja Unbound w C jest tworzona i utrzymywana przez NLnet
  71 Labs. Jest oparta na pomysłach i algorytmach zaczerpniętych z
  72 prototypu w Javie stworzonego przez Verisign Labs, Nominet, Kirei oraz
  73 ep.net.
  74
  75 Unbound został zaprojektowany jako zbiór modularnych komponentów, więc
  76 możliwe są także weryfikacja DNSSEC (bezpieczny DNS) oraz
  77 resolvery-zaślepki (nie działające jako serwer, ale wbudowane w
  78 aplikację).
  79
  80 %package libs
  81 Summary:        Unbound shared library
  82 Summary(pl.UTF-8):      Biblioteka współdzielona Unbound
  83 Group:          Libraries
  84 Conflicts:      unbound < 1.4.18-1
  85
  86 %description libs
  87 Unbound shared library.
  88
  89 %description libs -l pl.UTF-8
  90 Biblioteka współdzielona Unbound.
  91
  92 %package devel
  93 Summary:        Header files for unbound library
  94 Summary(pl.UTF-8):      Pliki nagłówkowe biblioteki unbound
  95 Group:          Development/Libraries
  96 Requires:       %{name}-libs = %{version}-%{release}
  97 Requires:       openssl-devel
  98
  99 %description devel
 100 Header files for unbound library.
 101
 102 %description devel -l pl.UTF-8
 103 Pliki nagłówkowe biblioteki unbound.
 104
 105 %package static
 106 Summary:        Static unbound library
 107 Summary(pl.UTF-8):      Statyczna biblioteka unbound
 108 Group:          Development/Libraries
 109 Requires:       %{name}-devel = %{version}-%{release}
 110
 111 %description static
 112 Static unbound library.
 113
 114 %description static -l pl.UTF-8
 115 Statyczna biblioteka unbound.
 116
 117 %package -n python-unbound
 118 Summary:        Python interface to unbound library
 119 Summary(pl.UTF-8):      Pythonowy interfejs do biblioteki unbound
 120 Group:          Libraries/Python
 121 Requires:       %{name}-libs = %{version}-%{release}
 122
 123 %description -n python-unbound
 124 Python interface to unbound library.
 125
 126 %description -n python-unbound -l pl.UTF-8
 127 Pythonowy interfejs do biblioteki unbound.
 128
 129 %prep
 130 %setup -q
 131 %patch0 -p1
 132 %patch1 -p1
 133 %patch2 -p1
 134 %patch3 -p1
 135
 136 %build
 137 %{__libtoolize}
 138 %{__aclocal}
 139 %{__autoconf}
 140 %{__autoheader}
 141 %configure \
 142         %{?with_dnstap:--enable-dnstap} \
 143         %{?with_systemd:--enable-systemd} \
 144         %{__with_without python pyunbound} \
 145         %{__with_without python pythonmodule} \
 146         --with-libevent \
 147         --with-pidfile=/run/%{name}.pid \
 148         --with-chroot-dir="" \
 149         --with-conf-file=%{_sysconfdir}/%{name}/%{name}.conf \
 150         --with-rootkey-file=/var/lib/%{name}/root.key \
 151         --with-rootcert-file=%{_sysconfdir}/%{name}/icannbundle.pem
 152
 153 %{__make}
 154
 155 %if %{with tests}
 156 %{__make} check
 157 %endif
 158
 159 %install
 160 rm -rf $RPM_BUILD_ROOT
 161 install -d $RPM_BUILD_ROOT{/etc/rc.d/init.d,%{systemdunitdir},/var/lib/%{name}}
 162
 163 %{__make} install \
 164         DESTDIR=$RPM_BUILD_ROOT
 165
 166 cp -p %{SOURCE1} $RPM_BUILD_ROOT/etc/rc.d/init.d/%{name}
 167 cp -p %{SOURCE2} $RPM_BUILD_ROOT%{systemdunitdir}/%{name}.service
 168 cp -p %{SOURCE3} $RPM_BUILD_ROOT%{_sysconfdir}/%{name}/icannbundle.pem
 169 cp -p %{SOURCE4} $RPM_BUILD_ROOT%{_sysconfdir}/%{name}/named.cache
 170
 171 touch $RPM_BUILD_ROOT/var/lib/%{name}/root.key
 172
 173 %if %{with python}
 174 %{__rm} $RPM_BUILD_ROOT%{py_sitedir}/_unbound.la
 175 %py_comp $RPM_BUILD_ROOT%{py_sitedir}
 176 %py_ocomp $RPM_BUILD_ROOT%{py_sitedir}
 177 %py_postclean
 178 %endif
 179
 180 %clean
 181 rm -rf $RPM_BUILD_ROOT
 182
 183 %post
 184 /sbin/chkconfig --add %{name}
 185 %systemd_post %{name}.service
 186 %service %{name} restart
 187
 188 %pre
 189 %useradd -u 196 -g 99 -d /tmp -s /bin/false -c "unbound user" unbound
 190
 191 %preun
 192 if [ "$1" = "0" ]; then
 193         %service -q %{name} stop
 194         /sbin/chkconfig --del %{name}
 195 fi
 196 %systemd_preun %{name}.service
 197
 198 %postun
 199 if [ "$1" = "0" ]; then
 200         %userremove unbound
 201 fi
 202 %systemd_reload
 203
 204 %triggerpostun -- %{name} < 1.4.22-1
 205 %systemd_trigger %{name}.service
 206
 207 %post   libs -p /sbin/ldconfig
 208 %postun libs -p /sbin/ldconfig
 209
 210 %files
 211 %defattr(644,root,root,755)
 212 %doc doc/{CREDITS,Changelog,FEATURES,LICENSE,README,TODO,control_proto_spec.txt,example.conf,ietf67-design-02.pdf,requirements.txt}
 213 %attr(754,root,root) /etc/rc.d/init.d/unbound
 214 %{systemdunitdir}/%{name}.service
 215 %dir %{_sysconfdir}/%{name}
 216 %config(noreplace) %verify(not md5 mtime size) %{_sysconfdir}/%{name}/unbound.conf
 217 %config(noreplace) %verify(not md5 mtime size) %{_sysconfdir}/%{name}/named.cache
 218 %config(noreplace) %verify(not md5 mtime size) %{_sysconfdir}/%{name}/icannbundle.pem
 219 %attr(755,root,root) %{_sbindir}/unbound
 220 %attr(755,root,root) %{_sbindir}/unbound-anchor
 221 %attr(755,root,root) %{_sbindir}/unbound-checkconf
 222 %attr(755,root,root) %{_sbindir}/unbound-control*
 223 %attr(755,root,root) %{_sbindir}/unbound-host
 224 %{_mandir}/man1/unbound-host.1*
 225 %{_mandir}/man5/unbound.conf.5*
 226 %{_mandir}/man8/unbound-checkconf.8*
 227 %{_mandir}/man8/unbound.8*
 228 %{_mandir}/man8/unbound-anchor.8*
 229 %{_mandir}/man8/unbound-control*.8*
 230 %dir %attr(755,unbound,nobody) /var/lib/%{name}
 231 %ghost /var/lib/%{name}/root.key
 232
 233 %files libs
 234 %defattr(644,root,root,755)
 235 %attr(755,root,root) %{_libdir}/libunbound.so.*.*.*
 236 %attr(755,root,root) %ghost %{_libdir}/libunbound.so.8
 237
 238 %files devel
 239 %defattr(644,root,root,755)
 240 %attr(755,root,root) %{_libdir}/libunbound.so
 241 %{_libdir}/libunbound.la
 242 %{_pkgconfigdir}/libunbound.pc
 243 %{_includedir}/unbound.h
 244 %{_mandir}/man3/libunbound.3*
 245 %{_mandir}/man3/ub_*.3*
 246
 247 %files static
 248 %defattr(644,root,root,755)
 249 %{_libdir}/libunbound.a
 250
 251 %if %{with python}
 252 %files -n python-unbound
 253 %defattr(644,root,root,755)
 254 %attr(755,root,root) %{py_sitedir}/_unbound.so*
 255 %{py_sitedir}/unbound.py[co]
 256 %{py_sitedir}/unboundmodule.py[co]
 257 %endif