X-Git-Url: https://git.pld-linux.org/?p=packages%2Funbound.git;a=blobdiff_plain;f=unbound.spec;h=c0ee9b54de597aca79c00e92c36d42d15aa9a0a7;hp=f9e15f3f700129476a18eeba4b85d9f0f0f7f93a;hb=b20cbefd1f78388ea492e685ccfdb8401f93fc28;hpb=5ec5342986a4d5e4e3fc32bc03725c9de4e10506

diff --git a/unbound.spec b/unbound.spec
index f9e15f3..c0ee9b5 100644
--- a/unbound.spec
+++ b/unbound.spec
@@ -1,36 +1,100 @@
+# FIXME:
+# - stop using nobody group
 #
-Summary:	Recursive, validating DNS server
+# Conditional build:
+%bcond_without	python	# Python binding
+%bcond_with	dnstap	# dnstap replication support
+%bcond_with	systemd	# systemd support
+%bcond_without	tests
+#
+Summary:	Recursive, validating DNS resolver
+Summary(pl.UTF-8):	Rekurencyjny, weryfikujący resolver DNS
 Name:		unbound
-Version:	1.4.3
+Version:	1.8.1
 Release:	1
 License:	BSD
-Group:		Applications
+Group:		Applications/Network
 Source0:	http://www.unbound.net/downloads/%{name}-%{version}.tar.gz
-# Source0-md5:	2dffdd42f94b8238447a41835439d129
+# Source0-md5:	00ce66e357fd2f969acf69008aa82a40
 Source1:	%{name}.init
+Source2:	%{name}.service
+Source3:	https://data.iana.org/root-anchors/icannbundle.pem
+# Source3-md5:	24a426d59b61524623695f1b849f159b
+Source4:	ftp://ftp.internic.net/domain/named.cache
+# Source4-md5:	602f28581292bf5e50c8137c955173e6
+Patch0:		%{name}-default_trust_anchor.patch
+Patch1:		%{name}-sh.patch
+Patch2:		%{name}-pythondir.patch
+Patch3:		%{name}-flex.patch
 URL:		http://unbound.net/
-BuildRequires:	ldns-devel
+BuildRequires:	autoconf >= 2.56
+BuildRequires:	automake
+BuildRequires:	bison
+BuildRequires:	expat-devel
+BuildRequires:	flex
+%{?with_dnstap:BuildRequires:	fstrm-devel}
 BuildRequires:	libevent-devel
-BuildRequires:	rpmbuild(macros) >= 1.228
+BuildRequires:	libtool
+BuildRequires:	openssl-devel >= 1.0
+%{?with_dnstap:BuildRequires:	protobuf-c-devel}
+BuildRequires:	rpmbuild(macros) >= 1.671
+%{?with_systemd:BuildRequires:	systemd-devel}
+%if %{with python}
+BuildRequires:	python-devel >= 1:2.4.0
+BuildRequires:	swig-python
+%endif
+Provides:	user(unbound)
 Requires(post,preun):	/sbin/chkconfig
+Requires(postun):	/usr/sbin/userdel
+Requires(pre):	/bin/id
+Requires(pre):	/usr/sbin/useradd
+Requires:	systemd-units >= 38
+Requires:	%{name}-libs = %{version}-%{release}
 BuildRoot:	%{tmpdir}/%{name}-%{version}-root-%(id -u -n)
 
 %description
 Unbound is a validating, recursive, and caching DNS resolver.
 
 The C implementation of Unbound is developed and maintained by NLnet
-Labs. It is based on ideas and algorithms taken from a java prototype
+Labs. It is based on ideas and algorithms taken from a Java prototype
 developed by Verisign labs, Nominet, Kirei and ep.net.
 
 Unbound is designed as a set of modular components, so that also
 DNSSEC (secure DNS) validation and stub-resolvers (that do not run as
 a server, but are linked into an application) are easily possible.
 
+%description -l pl.UTF-8
+Unbound to weryfikujący, rekurencyjny i cache'ujący resolver (kod
+rozwiązujący nazwy) DNS.
+
+Implementacja Unbound w C jest tworzona i utrzymywana przez NLnet
+Labs. Jest oparta na pomysłach i algorytmach zaczerpniętych z
+prototypu w Javie stworzonego przez Verisign Labs, Nominet, Kirei oraz
+ep.net.
+
+Unbound został zaprojektowany jako zbiór modularnych komponentów, więc
+możliwe są także weryfikacja DNSSEC (bezpieczny DNS) oraz
+resolvery-zaślepki (nie działające jako serwer, ale wbudowane w
+aplikację).
+
+%package libs
+Summary:	Unbound shared library
+Summary(pl.UTF-8):	Biblioteka współdzielona Unbound
+Group:		Libraries
+Conflicts:	unbound < 1.4.18-1
+
+%description libs
+Unbound shared library.
+
+%description libs -l pl.UTF-8
+Biblioteka współdzielona Unbound.
+
 %package devel
 Summary:	Header files for unbound library
 Summary(pl.UTF-8):	Pliki nagłówkowe biblioteki unbound
 Group:		Development/Libraries
-Requires:	%{name} = %{version}-%{release}
+Requires:	%{name}-libs = %{version}-%{release}
+Requires:	openssl-devel
 
 %description devel
 Header files for unbound library.
@@ -50,49 +114,110 @@ Static unbound library.
 %description static -l pl.UTF-8
 Statyczna biblioteka unbound.
 
+%package -n python-unbound
+Summary:	Python interface to unbound library
+Summary(pl.UTF-8):	Pythonowy interfejs do biblioteki unbound
+Group:		Libraries/Python
+Requires:	%{name}-libs = %{version}-%{release}
+
+%description -n python-unbound
+Python interface to unbound library.
+
+%description -n python-unbound -l pl.UTF-8
+Pythonowy interfejs do biblioteki unbound.
+
 %prep
 %setup -q
+%patch0 -p1
+%patch1 -p1
+%patch2 -p1
+%patch3 -p1
 
 %build
-%configure
+%{__libtoolize}
+%{__aclocal}
+%{__autoconf}
+%{__autoheader}
+%configure \
+	%{?with_dnstap:--enable-dnstap} \
+	%{?with_systemd:--enable-systemd} \
+	%{__with_without python pyunbound} \
+	%{__with_without python pythonmodule} \
+	--with-libevent \
+	--with-pidfile=/run/%{name}.pid \
+	--with-chroot-dir="" \
+	--with-conf-file=%{_sysconfdir}/%{name}/%{name}.conf \
+	--with-rootkey-file=/var/lib/%{name}/root.key \
+	--with-rootcert-file=%{_sysconfdir}/%{name}/icannbundle.pem
+
 %{__make}
 
+%if %{with tests}
+%{__make} check
+%endif
+
 %install
 rm -rf $RPM_BUILD_ROOT
-install -d $RPM_BUILD_ROOT/etc/rc.d/init.d
-install %{SOURCE1} $RPM_BUILD_ROOT/etc/rc.d/init.d/%{name}
+install -d $RPM_BUILD_ROOT{/etc/rc.d/init.d,%{systemdunitdir},/var/lib/%{name}}
 
 %{__make} install \
 	DESTDIR=$RPM_BUILD_ROOT
 
+cp -p %{SOURCE1} $RPM_BUILD_ROOT/etc/rc.d/init.d/%{name}
+cp -p %{SOURCE2} $RPM_BUILD_ROOT%{systemdunitdir}/%{name}.service
+cp -p %{SOURCE3} $RPM_BUILD_ROOT%{_sysconfdir}/%{name}/icannbundle.pem
+cp -p %{SOURCE4} $RPM_BUILD_ROOT%{_sysconfdir}/%{name}/named.cache
+
+touch $RPM_BUILD_ROOT/var/lib/%{name}/root.key
+
+%if %{with python}
+%{__rm} $RPM_BUILD_ROOT%{py_sitedir}/_unbound.la
+%py_comp $RPM_BUILD_ROOT%{py_sitedir}
+%py_ocomp $RPM_BUILD_ROOT%{py_sitedir}
+%py_postclean
+%endif
+
 %clean
 rm -rf $RPM_BUILD_ROOT
 
 %post
-/sbin/ldconfig
-
-%postun
-/sbin/ldconfig
 /sbin/chkconfig --add %{name}
+%systemd_post %{name}.service
 %service %{name} restart
 
+%pre
+%useradd -u 196 -g 99 -d /tmp -s /bin/false -c "unbound user" unbound
+
 %preun
 if [ "$1" = "0" ]; then
 	%service -q %{name} stop
 	/sbin/chkconfig --del %{name}
 fi
+%systemd_preun %{name}.service
+
+%postun
+if [ "$1" = "0" ]; then
+	%userremove unbound
+fi
+%systemd_reload
+
+%triggerpostun -- %{name} < 1.4.22-1
+%systemd_trigger %{name}.service
+
+%post	libs -p /sbin/ldconfig
+%postun	libs -p /sbin/ldconfig
 
 %files
 %defattr(644,root,root,755)
-%doc doc/Changelog doc/CREDITS doc/control_proto_spec.txt
-%doc doc/example.conf doc/README doc/FEATURES doc/ietf67-design-02.odp
-%doc doc/ietf67-design-02.pdf doc/requirements.txt doc/TODO 
+%doc doc/{CREDITS,Changelog,FEATURES,LICENSE,README,TODO,control_proto_spec.txt,example.conf,ietf67-design-02.pdf,requirements.txt}
 %attr(754,root,root) /etc/rc.d/init.d/unbound
+%{systemdunitdir}/%{name}.service
 %dir %{_sysconfdir}/%{name}
 %config(noreplace) %verify(not md5 mtime size) %{_sysconfdir}/%{name}/unbound.conf
-%attr(755,root,root) %{_libdir}/libunbound.so.*.*.*
-%attr(755,root,root) %ghost %{_libdir}/libunbound.so.2
+%config(noreplace) %verify(not md5 mtime size) %{_sysconfdir}/%{name}/named.cache
+%config(noreplace) %verify(not md5 mtime size) %{_sysconfdir}/%{name}/icannbundle.pem
 %attr(755,root,root) %{_sbindir}/unbound
+%attr(755,root,root) %{_sbindir}/unbound-anchor
 %attr(755,root,root) %{_sbindir}/unbound-checkconf
 %attr(755,root,root) %{_sbindir}/unbound-control*
 %attr(755,root,root) %{_sbindir}/unbound-host
@@ -100,15 +225,33 @@ fi
 %{_mandir}/man5/unbound.conf.5*
 %{_mandir}/man8/unbound-checkconf.8*
 %{_mandir}/man8/unbound.8*
-%{_mandir}/man8/unbound-control.8*
+%{_mandir}/man8/unbound-anchor.8*
+%{_mandir}/man8/unbound-control*.8*
+%dir %attr(755,unbound,nobody) /var/lib/%{name}
+%ghost /var/lib/%{name}/root.key
+
+%files libs
+%defattr(644,root,root,755)
+%attr(755,root,root) %{_libdir}/libunbound.so.*.*.*
+%attr(755,root,root) %ghost %{_libdir}/libunbound.so.8
 
 %files devel
 %defattr(644,root,root,755)
-%{_includedir}/unbound.h
+%attr(755,root,root) %{_libdir}/libunbound.so
 %{_libdir}/libunbound.la
-%{_libdir}/libunbound.so
+%{_pkgconfigdir}/libunbound.pc
+%{_includedir}/unbound.h
 %{_mandir}/man3/libunbound.3*
+%{_mandir}/man3/ub_*.3*
 
 %files static
 %defattr(644,root,root,755)
 %{_libdir}/libunbound.a
+
+%if %{with python}
+%files -n python-unbound
+%defattr(644,root,root,755)
+%attr(755,root,root) %{py_sitedir}/_unbound.so*
+%{py_sitedir}/unbound.py[co]
+%{py_sitedir}/unboundmodule.py[co]
+%endif