File jabberd.spec of Package jabberd

Overview Repositories Revisions Requests Users Attributes Meta

File jabberd.spec of Package jabberd

%global _hardened_build 1
%bcond_without pam
%bcond_without sqlite
%bcond_without db
%bcond_without ldap
%bcond_without mysql
%bcond_without postgresql
%if 0%{?rhel} && 0%{?rhel} == 6
%bcond_with systemd
%else
%bcond_without systemd
%endif

Summary:        OpenSource server implementation of the Jabber protocols
Name:           jabberd
Version:        2.6.1
Release:        1%{?dist}
License:        GPLv2+
Group:          System Environment/Daemons
Source0:        https://github.com/jabberd2/jabberd2/releases/download/jabberd-%{version}/jabberd-%{version}.tar.xz
Source1:        README.fedora
Source2:        jabberd.init
Source3:        jabberd.sysconfig
Patch0:         jabberd-fedora-crypto-policy.patch
Patch1:         jabberd-fix-paths.patch
Patch2:         unbreak-autoreconf.patch
Patch3:         0001-configure.ac-adapt-to-openssl-1.1.patch
Patch4:         0002-authreg_ldapfull-adapt-to-openssl-1.1.patch
Patch5:         0003-sx-ssl.c-adapt-to-openssl-1.1.patch
Patch6:         0004-sx-ssl.c-fix-undefined-behaviour-with-openssl-1.1.patch
Patch7:         0001-Fix-build-errors-with-MariaDB-10.2.patch
URL:            http://jabberd2.org/
BuildRequires:  openssl-devel libidn-devel expat-devel
BuildRequires:  perl-generators
BuildRequires:  cppunit-devel
%if %{with systemd}
BuildRequires:          systemd-units
Requires(post):         systemd-units systemd-sysv
Requires(preun):        systemd-units
Requires(postun):       systemd-units
%else
Requires(post):         openssl chkconfig /sbin/service
Requires(pre):          shadow-utils
Requires(preun):        chkconfig shadow-utils /sbin/service
Requires(postun):       chkconfig /sbin/service
%endif
%if %{with pam}
BuildRequires:  pam-devel
%endif
%if %{with sqlite}
BuildRequires:  sqlite-devel
%endif
%if %{with db}
%if 0%{?fedora} >= 26
BuildRequires:  libdb-devel
%else
BuildRequires:  db4-devel
%endif
%endif
%if %{with ldap}
BuildRequires:  openldap-devel
%endif
%if %{with mysql}
BuildRequires:  mysql-devel
%endif
%if %{with postgresql}
BuildRequires:  postgresql-devel
%endif
BuildRequires:          libgsasl-devel udns-devel
BuildRequires:          http-parser-devel
BuildRequires:          autoconf libtool
Requires(post):         openssl
Requires(pre):          shadow-utils
Requires(preun):        shadow-utils

%description
The jabberd project aims to provide an open-source server implementation of
the Jabber protocols for instant messaging and XML routing. The goal of this
project is to provide a scalable, reliable, efficient and extensible server
that provides a complete set of features and is up to date with the latest
protocol revisions.

jabberd2 is the next generation of the jabberd server. It has been
rewritten from the ground up to be scalable, architecturally sound, and to
support the latest protocol extensions coming out of the JSF.

This package defaults to use pam and sqlite.

%prep
%setup -q
# "Utilize system-wide crypto-policies" is only for F21+ (#1179229)
# therefore the patch is not applied on non Fedora builds
%if 0%{?fedora}
%patch0 -p1
%endif
%patch1 -p1
%if 0%{?fedora} >= 26
# With Fedora 26 openssl-1.1 was introduced. jabberd needs patches
# to work with openssl-1.1. These patches have been submitted upstream:
# https://github.com/jabberd2/jabberd2/pull/129
# The patches also work with older openssl versions.
# For now the patches are only applied for rawhide/f26 as long as upstream
# has not merged the patches.
%patch2 -p1
%patch3 -p1
%patch4 -p1
%patch5 -p1
%patch6 -p1
autoreconf --verbose --force --install
%endif
%patch7 -p1

%build
export CFLAGS="%{optflags}"
%configure \
        --sysconfdir=%{_sysconfdir}/%{name} \
        --localstatedir=%{_var}/lib \
%if %{with pam}
        --enable-pam \
%else
        --disable-pam \
%endif
%if %{with db}
        --enable-db \
%if 0%{?fedora} < 26
        --with-extra-include-path=%{_includedir}/libdb4 \
%endif
%else
        --disable-db \
%endif
%if %{with mysql}
        --enable-mysql \
        --with-extra-library-path=%{_libdir}/mysql \
%else
        --disable-mysql \
%endif
%if %{with ldap}
        --enable-ldap \
%else
        --disable-ldap \
%endif
%if %{with postgresql}
        --enable-pgsql \
%else
        --disable-pgsql \
%endif
%if %{with sqlite}
        --enable-sqlite \
%else
        --disable-sqlite \
%endif
        --enable-fs --enable-anon --enable-pipe --enable-ssl \
        --enable-websocket \
        --enable-debug

make %{?_smp_mflags}

%install
rm -rf $RPM_BUILD_ROOT

make install DESTDIR=$RPM_BUILD_ROOT

# correct the script interpreter for perl scripts
sed -i "s|/usr/pkg/bin/perl|/usr/bin/env perl|" tools/*.pl

install -dpm 700 $RPM_BUILD_ROOT/%{_var}/lib/%{name}/{log,pid,db}
install -dpm 755 $RPM_BUILD_ROOT%{_sysconfdir}/pam.d/
install -Dpm 644 tools/pam_jabberd $RPM_BUILD_ROOT%{_sysconfdir}/pam.d/%{name}

install -dpm 755 $RPM_BUILD_ROOT%{_datadir}/%{name}/
# install any tool in tools/ to /usr/share/jabberd/, but skip Makefile-stuff
# and unneccessary scripts
install -dpm 755 $RPM_BUILD_ROOT%{_datadir}/%{name}/
for i in `ls tools`; do
    if [ $i == "Makefile" -o $i == "Makefile.am" -o $i == "Makefile.in" \
        -o $i == "jabberd.in" -o $i == "jabberd.rc" -o $i == "pam_jabberd" ]; then
        continue;
    fi

sed -i "s|\r||g" tools/$i
    install -pm 755 tools/$i $RPM_BUILD_ROOT%{_datadir}/%{name}/
done

install -dpm 755 $RPM_BUILD_ROOT%{_sysconfdir}/%{name}/

%if ! %{with systemd}
rm -frv $RPM_BUILD_ROOT%{_prefix}/lib/systemd

install -Dpm 755 %{SOURCE2} $RPM_BUILD_ROOT%{_initrddir}/%{name}
install -Dpm 644 %{SOURCE3} $RPM_BUILD_ROOT%{_sysconfdir}/sysconfig/%{name}

sed -i -e "s,__BINDIR__,%{_bindir},g" \
       -e "s,__ETCDIR__,%{_sysconfdir}/%{name}/,g" \
       -e "s,__PIDDIR__,%{_var}/lib/%{name}/pid,g" \
       -e "s,__SYSCONF__,%{_sysconfdir}/sysconfig,g" \
          $RPM_BUILD_ROOT%{_initrddir}/%{name} \
          $RPM_BUILD_ROOT%{_sysconfdir}/sysconfig/%{name}
%endif

# remove static libraries
find $RPM_BUILD_ROOT -name "*.la" -delete

# Remove Upstart configuration files, they are not needed for Fedora
rm -f $RPM_BUILD_ROOT/etc/jabberd/*.conf
rm -f $RPM_BUILD_ROOT/usr/etc/init/*.conf

#default authentication backend
#enable SSL certificate
#clients must do STARTTLS
#disable account registrations by default, because the default installation uses PAM
#set the realm to '' for a working authentication against PAM
sed -i -e ':a;N;$!ba' \
            -e 's,<module>mysql</module>,<module>pam</module>,g' \
            -e "s,register-enable='true'>,realm='' require-starttls='true' pemfile='/etc/%{name}/server.pem'>,g" \
                $RPM_BUILD_ROOT%{_sysconfdir}/%{name}/c2s.xml

touch $RPM_BUILD_ROOT%{_sysconfdir}/jabberd/server.pem

# we have our own start script
rm -f $RPM_BUILD_ROOT%{_bindir}/jabberd

# we have our own start script
rm -f $RPM_BUILD_ROOT%{_sysconfdir}/%{name}/jabberd.cfg*

# README.fedora
cp %{SOURCE1} .

%clean
rm -rf $RPM_BUILD_ROOT

%pre
#creating jabber user
getent group jabber >/dev/null || groupadd -r jabber
getent passwd jabber >/dev/null || \
useradd -r -g jabber -d %{_var}/lib/%{name} -s /sbin/nologin \
        -c "Jabber Server" jabber
exit 0

%post
%if %{with systemd}
%systemd_post %{name}.service
if [ $1 -eq 1 ] ; then
        #replace default passwords, yet another hack
        export NEWPASS=$( dd if=/dev/urandom bs=20 count=1 2>/dev/null \
                                | sha1sum | awk '{print $1}' )
        cd %{_sysconfdir}/%{name}
        %{__sed} -i -f- router-users.xml router.xml <<END
s,<secret>secret</secret>,<secret>$NEWPASS</secret>,g
END
        %{__sed} -i -f- *.xml <<END
s,<pass>secret</pass>,<pass>$NEWPASS</pass>,g
END

#create ssl certificate
cd %{_sysconfdir}/%{name}
if [ ! -s server.pem ]; then
 if [ -e %{_bindir}/make-dummy-cert ]; then
  # openssl-1.1 places the script in /usr
  %{___build_shell} %{_bindir}/make-dummy-cert
 else
  %{___build_shell} %{_sysconfdir}/pki/tls/certs/make-dummy-cert server.pem
 fi
 chown root.jabber server.pem
 chmod 640 server.pem
fi
%else
if [ "$1" -eq "1" ]; then
        /sbin/chkconfig --add %{name}
        #replace default passwords, yet another hack
        export NEWPASS=$( dd if=/dev/urandom bs=20 count=1 2>/dev/null \
                                | sha1sum | awk '{print $1}' )
        cd %{_sysconfdir}/%{name}
        %{__sed} -i -f- router-users.xml router.xml <<END
s,<secret>secret</secret>,<secret>$NEWPASS</secret>,g
END
        %{__sed} -i -f- *.xml <<END
s,<pass>secret</pass>,<pass>$NEWPASS</pass>,g
END

#create ssl certificate
cd %{_sysconfdir}/%{name}
if [ ! -s server.pem ]; then
 %{___build_shell} %{_sysconfdir}/pki/tls/certs/make-dummy-cert server.pem
 chown root.jabber server.pem
 chmod 640 server.pem
fi
%endif

%preun
%if %{with systemd}
%systemd_preun %{name}.service
%else
if [ "$1" -eq "0" ]; then
        /sbin/service %{name} stop > /dev/null 2>&1
        /sbin/chkconfig --del %{name}
fi
%endif

%postun
%if %{with systemd}
%systemd_postun_with_restart %{name}.service

%triggerun -- jabberd < 2.2.14-3
# Save the current service runlevel info
# User must manually run systemd-sysv-convert --apply jabberd
# to migrate them to systemd targets
/usr/bin/systemd-sysv-convert --save %{name} >/dev/null 2>&1 ||:

# If the package is allowed to autostart:
/bin/systemctl --no-reload enable %{name}.service >/dev/null 2>&1 ||:

# Run these because the SysV package being removed won't do them
/sbin/chkconfig --del %{name} >/dev/null 2>&1 || :
/bin/systemctl try-restart %{name}.service >/dev/null 2>&1 || :
%else
if [ "$1" -eq "1" ]; then
        /sbin/service %{name} condrestart > /dev/null 2>&1
fi
%endif

%files
%defattr(-,root,root,-)
%doc AUTHORS COPYING ChangeLog NEWS README TODO README.fedora
%{_mandir}/man8/*
%{_bindir}/*
%if %{with systemd}
%{_unitdir}/*
%else
%{_initrddir}/%{name}
%config(noreplace) %{_sysconfdir}/sysconfig/%{name}
%endif
%{_libdir}/%{name}/
%attr(750, jabber, jabber) %dir %{_sysconfdir}/%{name}
%attr(750, jabber, jabber) %dir %{_sysconfdir}/%{name}/templates
%config(noreplace) %{_sysconfdir}/%{name}/server.pem
%attr(640, jabber, jabber) %config(noreplace) %{_sysconfdir}/%{name}/*xml*
%attr(640, jabber, jabber) %config(noreplace) %{_sysconfdir}/%{name}/templates/*xml*
%dir %{_datadir}/%{name}/
%attr(644,root,root) %{_datadir}/%{name}/*
%config(noreplace) %{_sysconfdir}/pam.d/%{name}
%attr(700, jabber, jabber) %{_var}/lib/%{name}

Places

File jabberd.spec of Package jabberd

Places