Git-Mirrors/qusal
1
0
Fork 0
mirror of https://github.com/ben-grande/qusal.git synced 2024-12-16 03:14:26 -05:00
Code Issues Packages Projects Releases Wiki Activity
f5528fec2e
qusal/rpm_spec/template/template.spec

94 lines
2.0 KiB
RPMSpec
Raw Normal View History

build: spec scriptlet fails when it is empty Echoing the word true was getting evaluated instead of being assigned as a string.
2024-06-14 13:22:43 -04:00
# SPDX-FileCopyrightText: 2023 - 2024 Benjamin Grande M. S. <ben.grande.b@gmail.com>
refactor: initial commit
2023-11-13 09:33:28 -05:00
#
# SPDX-License-Identifier: AGPL-3.0-or-later
build: set values for reproducibility
2024-06-13 08:04:18 -04:00
## Reproducibility.
%define source_date_epoch_from_changelog 1
%define use_source_date_epoch_as_buildtime 1
%define clamp_mtime_to_source_date_epoch 1
# Changelog is trimmed according to current date, not last date from changelog.
%define _changelog_trimtime 0
%define _changelog_trimage 0
%global _buildhost %{name}
# Python bytecode interferes when updates occur and restart is not done.
%undefine __brp_python_bytecompile
fix: generate RPM Specs for Qubes Builder V2 It doesn't checkout the current directory when querying the spec, so we provide the already modified version of the spec.
2024-06-21 11:00:06 -04:00
Name: @PROJECT@
refactor: initial commit
2023-11-13 09:33:28 -05:00
Version: @VERSION@
feat: build and sign RPM packages Passing files to Dom0 is always dangerous: - Passing a git repository is dangerous as it can have ignored modified files and signature verification will pass. - Passing an archive is troublesome for updates. - Passing an RPM package depends on the RPM verification to be correct, some times it is not. - Passing a RPM repository definition is less troublesome for the user, as it is a small file to verify the contents and update mechanism is via the package manager. Trust in RPM verification is still required. Many improvements were made to the build scripts: - requires-program: Single function to check if program is installed; - spec-get: Sort project names for the usage message; - spec-get: Only running commands that are necessary; - spec-get: Fix empty summary when readme has copyright header; - spec-gen: Fix grep warning of escaped symbol; - spec-build: Sign RPM and verify signature; - spec-build: Only lint the first SPEC for faster runtime; - yumrepo-gen: Generate a local yum repository with signed metadata; - qubesbuilder-gen: Generate a .qubesbuilder based on tracked projects; - release: Build, sign and push all RPMs to repository. Goal is to be able to build with qubes-builderv2 Qubes Executor. For: https://github.com/ben-grande/qusal/issues/37
2024-06-12 08:44:04 -04:00
Release: 1%{?dist}
fix: generate RPM Specs for Qubes Builder V2 It doesn't checkout the current directory when querying the spec, so we provide the already modified version of the spec.
2024-06-21 11:00:06 -04:00
Summary: @SUMMARY@
Group: @GROUP@
Packager: @PACKAGER@
Vendor: @VENDOR@
License: @LICENSE@
URL: @URL@
BugURL: @BUG_URL@
Source0: %{name}-%{version}.tar.gz
feat: build and sign RPM packages Passing files to Dom0 is always dangerous: - Passing a git repository is dangerous as it can have ignored modified files and signature verification will pass. - Passing an archive is troublesome for updates. - Passing an RPM package depends on the RPM verification to be correct, some times it is not. - Passing a RPM repository definition is less troublesome for the user, as it is a small file to verify the contents and update mechanism is via the package manager. Trust in RPM verification is still required. Many improvements were made to the build scripts: - requires-program: Single function to check if program is installed; - spec-get: Sort project names for the usage message; - spec-get: Only running commands that are necessary; - spec-get: Fix empty summary when readme has copyright header; - spec-gen: Fix grep warning of escaped symbol; - spec-build: Sign RPM and verify signature; - spec-build: Only lint the first SPEC for faster runtime; - yumrepo-gen: Generate a local yum repository with signed metadata; - qubesbuilder-gen: Generate a .qubesbuilder based on tracked projects; - release: Build, sign and push all RPMs to repository. Goal is to be able to build with qubes-builderv2 Qubes Executor. For: https://github.com/ben-grande/qusal/issues/37
2024-06-12 08:44:04 -04:00
BuildArch: noarch
refactor: initial commit
2023-11-13 09:33:28 -05:00
feat: build and sign RPM packages Passing files to Dom0 is always dangerous: - Passing a git repository is dangerous as it can have ignored modified files and signature verification will pass. - Passing an archive is troublesome for updates. - Passing an RPM package depends on the RPM verification to be correct, some times it is not. - Passing a RPM repository definition is less troublesome for the user, as it is a small file to verify the contents and update mechanism is via the package manager. Trust in RPM verification is still required. Many improvements were made to the build scripts: - requires-program: Single function to check if program is installed; - spec-get: Sort project names for the usage message; - spec-get: Only running commands that are necessary; - spec-get: Fix empty summary when readme has copyright header; - spec-gen: Fix grep warning of escaped symbol; - spec-build: Sign RPM and verify signature; - spec-build: Only lint the first SPEC for faster runtime; - yumrepo-gen: Generate a local yum repository with signed metadata; - qubesbuilder-gen: Generate a .qubesbuilder based on tracked projects; - release: Build, sign and push all RPMs to repository. Goal is to be able to build with qubes-builderv2 Qubes Executor. For: https://github.com/ben-grande/qusal/issues/37
2024-06-12 08:44:04 -04:00
Requires: qubes-mgmt-salt
Requires: qubes-mgmt-salt-dom0
refactor: initial commit
2023-11-13 09:33:28 -05:00
@REQUIRES@
%description
fix: generate RPM Specs for Qubes Builder V2 It doesn't checkout the current directory when querying the spec, so we provide the already modified version of the spec.
2024-06-21 11:00:06 -04:00
@DESCRIPTION@
refactor: initial commit
2023-11-13 09:33:28 -05:00
%prep
fix: generate RPM Specs for Qubes Builder V2 It doesn't checkout the current directory when querying the spec, so we provide the already modified version of the spec.
2024-06-21 11:00:06 -04:00
%setup -q
refactor: initial commit
2023-11-13 09:33:28 -05:00
%build
%install
rm -rf %{buildroot}
build: spec scriptlet fails when it is empty Echoing the word true was getting evaluated instead of being assigned as a string.
2024-06-14 13:22:43 -04:00
install -m 755 -d \
fix: generate RPM Specs for Qubes Builder V2 It doesn't checkout the current directory when querying the spec, so we provide the already modified version of the spec.
2024-06-21 11:00:06 -04:00
%{buildroot}@FILE_ROOTS@ \
%{buildroot}%{_docdir}/%{name} \
%{buildroot}%{_defaultlicensedir}/%{name}
install -m 644 %{name}/LICENSES/* %{buildroot}%{_defaultlicensedir}/%{name}/
install -m 644 %{name}/README.md %{buildroot}%{_docdir}/%{name}/
rm -rv %{name}/LICENSES %{name}/README.md
cp -rv %{name} %{buildroot}@FILE_ROOTS@/%{name}
refactor: initial commit
2023-11-13 09:33:28 -05:00
%check
build: spec scriptlet fails when it is empty Echoing the word true was getting evaluated instead of being assigned as a string.
2024-06-14 13:22:43 -04:00
%dnl %pre
refactor: initial commit
2023-11-13 09:33:28 -05:00
%post
if test "$1" = "1"; then
## Install
@POST_INSTALL@
elif test "$1" = "2"; then
## Upgrade
@POST_UPGRADE@
fi
%preun
if test "$1" = "0"; then
## Uninstall
@PREUN_UNINSTALL@
elif test "$1" = "1"; then
## Upgrade
@PREUN_UPGRADE@
fi
%postun
if test "$1" = "0"; then
## Uninstall
@POSTUN_UNINSTALL@
elif test "$1" = "1"; then
## Upgrade
@POSTUN_UPGRADE@
fi
%files
%defattr(-,root,root,-)
fix: generate RPM Specs for Qubes Builder V2 It doesn't checkout the current directory when querying the spec, so we provide the already modified version of the spec.
2024-06-21 11:00:06 -04:00
%license %{_defaultlicensedir}/%{name}/*
%doc %{_docdir}/%{name}/README.md
%dir @FILE_ROOTS@/%{name}
@FILE_ROOTS@/%{name}/*
build: spec scriptlet fails when it is empty Echoing the word true was getting evaluated instead of being assigned as a string.
2024-06-14 13:22:43 -04:00
%dnl TODO: missing '%ghost', files generated during %post, such as Qrexec policies.
refactor: initial commit
2023-11-13 09:33:28 -05:00
%changelog
feat: build and sign RPM packages Passing files to Dom0 is always dangerous: - Passing a git repository is dangerous as it can have ignored modified files and signature verification will pass. - Passing an archive is troublesome for updates. - Passing an RPM package depends on the RPM verification to be correct, some times it is not. - Passing a RPM repository definition is less troublesome for the user, as it is a small file to verify the contents and update mechanism is via the package manager. Trust in RPM verification is still required. Many improvements were made to the build scripts: - requires-program: Single function to check if program is installed; - spec-get: Sort project names for the usage message; - spec-get: Only running commands that are necessary; - spec-get: Fix empty summary when readme has copyright header; - spec-gen: Fix grep warning of escaped symbol; - spec-build: Sign RPM and verify signature; - spec-build: Only lint the first SPEC for faster runtime; - yumrepo-gen: Generate a local yum repository with signed metadata; - qubesbuilder-gen: Generate a .qubesbuilder based on tracked projects; - release: Build, sign and push all RPMs to repository. Goal is to be able to build with qubes-builderv2 Qubes Executor. For: https://github.com/ben-grande/qusal/issues/37
2024-06-12 08:44:04 -04:00
@CHANGELOG@
Reference in New Issue Copy Permalink