# SPDX-FileCopyrightText: 2023 - 2024 Benjamin Grande M. S. # # SPDX-License-Identifier: AGPL-3.0-or-later %define project sys-cacher %define license_csv AGPL-3.0-or-later,GPL-2.0-only ## Reproducibility. %define source_date_epoch_from_changelog 1 %define use_source_date_epoch_as_buildtime 1 %define clamp_mtime_to_source_date_epoch 1 ## Changelog is trimmed according to current date, not last date from changelog. %define _changelog_trimtime 0 %define _changelog_trimage 0 %global _buildhost %{name} ## Python bytecode interferes when updates occur and restart is not done. %undefine __brp_python_bytecompile Name: qusal-sys-cacher Version: 0.0.1 Release: 1%{?dist} Summary: Caching proxy server for software repositories in Qubes OS Group: qusal Packager: %{?_packager}%{!?_packager:Ben Grande } Vendor: Ben Grande License: AGPL-3.0-or-later AND GPL-2.0-only URL: https://github.com/ben-grande/qusal BugURL: https://github.com/ben-grande/qusal/issues Source0: %{name}-%{version}.tar.gz BuildArch: noarch Requires: qubes-mgmt-salt Requires: qubes-mgmt-salt-dom0 Requires: qusal-browser Requires: qusal-dotfiles Requires: qusal-utils %description The caching proxy is "sys-cacher" based on apt-cacher-ng, it stores downloaded packages, so that you need only download a package once and fetch locally the next time you want to upgrade your system packages. When you install this package, qubes will be tagged with "updatevm-sys-cacher" and they will be altered to use the proxy by default. When there is in your repository definitions, the entries will be changed in the templates from to . This is so that the request to the proxy is plain text, and the proxy will then make the request via https. This change will be done automatically for every template that exists and is not Whonix based. No changes are made to Whonix templates, and updates to those templates will not be cached. The caching proxy supports: * Debian and derivatives (but not Whonix) * Fedora and derivatives * Arch Linux and derivatives %prep %setup -q %build %check %pre %install rm -rf %{buildroot} install -m 755 -d \ %{buildroot}/srv/salt/qusal \ %{buildroot}%{_docdir}/%{name} \ %{buildroot}%{_defaultlicensedir}/%{name} for license in $(echo "%{license_csv}" | tr "," " "); do license_dir="LICENSES" if test -d "salt/%{project}/LICENSES"; then license_dir="salt/%{project}/LICENSES" fi install -m 644 "${license_dir}/${license}.txt" %{buildroot}%{_defaultlicensedir}/%{name}/ done install -m 644 salt/%{project}/README.md %{buildroot}%{_docdir}/%{name}/ rm -rf \ salt/%{project}/LICENSES \ salt/%{project}/README.md \ salt/%{project}/.* cp -rv salt/%{project} %{buildroot}/srv/salt/qusal/%{name} %post if test "$1" = "1"; then ## Install qubesctl state.apply sys-cacher.create qubesctl --skip-dom0 --targets=tpl-browser state.apply browser.install qubesctl --skip-dom0 --targets=tpl-sys-cacher state.apply sys-cacher.install qubesctl --skip-dom0 --targets=sys-cacher state.apply sys-cacher.configure qubesctl --skip-dom0 --targets=sys-cacher-browser state.apply sys-cacher.configure-browser qubesctl state.apply sys-cacher.appmenus,sys-cacher.tag qubesctl --skip-dom0 --targets="$(qvm-ls --no-spinner --raw-list --tags updatevm-sys-cacher | tr " " ",")" state.apply sys-cacher.install-client elif test "$1" = "2"; then ## Upgrade true fi %preun if test "$1" = "0"; then ## Uninstall true elif test "$1" = "1"; then ## Upgrade true fi %postun if test "$1" = "0"; then ## Uninstall true elif test "$1" = "1"; then ## Upgrade true fi %files %defattr(-,root,root,-) %license %{_defaultlicensedir}/%{name}/* %doc %{_docdir}/%{name}/README.md %dir /srv/salt/qusal/%{name} /srv/salt/qusal/%{name}/* %dnl TODO: missing '%ghost', files generated during %post, such as Qrexec policies. %changelog * Sat Jul 06 2024 Ben Grande - 8604887 - feat: unify cacher tag list to a single script * Fri Jul 05 2024 Ben Grande - 1425cda - fix: cache Mullvad packages * Fri Jul 05 2024 Ben Grande - d457302 - feat: lint python files * Thu Jul 04 2024 Ben Grande - 383c840 - doc: lint markdown files * Tue Jun 25 2024 Ben Grande - d316999 - doc: add browser isolation feature to design guide * Tue Jun 25 2024 Ben Grande - 9c28068 - refactor: prefer systemd sockets over socat * Mon Jun 24 2024 Ben Grande - ab1438f - fix: change Launchpad repository to HTTPS domain * Sat Jun 22 2024 Ben Grande - a6194e0 - fix: remove cacher tag from Kicksecure template * Fri Jun 21 2024 Ben Grande - c84dfea - fix: generate RPM Specs for Qubes Builder V2 * Mon Jun 17 2024 Ben Grande - 59e8fc3 - fix: GUI Global Config precedes packaged policies * Thu Jun 13 2024 Ben Grande - 75d992b - fix: use Admin API for fast queries * Thu Jun 13 2024 Ben Grande - 13c5793 - fix: uninstall cacher client with tag in pillar * Mon Jun 10 2024 Ben Grande - c456af2 - fix: remove duplicated Fedora mirrors * Mon Jun 10 2024 Ben Grande - 8ae815d - fix: run repo rewriter after upstream proxy update * Mon Jun 10 2024 Ben Grande - b4de619 - fix: update Debian and Fedora mirrors * Mon Jun 10 2024 Ben Grande - 2b181f8 - fix: merge Qubes OS repositories * Sun Jun 09 2024 Ben Grande - d2771d5 - fix: guarantee states order dependent on browser * Fri Jun 07 2024 Ben Grande - bb38440 - feat: revive caching of Fedora qubes * Wed May 29 2024 Ben Grande - bb4dcbb - fix: cacher: restrict install to supported clients * Wed May 29 2024 Ben Grande - 9cb7d72 - fix: cacher: use systemd service drop-in directory * Wed May 29 2024 Ben Grande - a2e1972 - fix: cache Mozilla and Element repository * Thu May 16 2024 Ben Grande - b2c9479 - fix: enforce https on repository installation * Tue Apr 30 2024 Ben Grande - e84959b - fix: update fedora mirror list with upstream * Tue Apr 30 2024 Ben Grande - 760fdd9 - doc: cacher documentation duplicates sections * Mon Apr 29 2024 Ben Grande - bfd7b22 - fix: incorrect path to repo rewriter service * Fri Apr 26 2024 Ben Grande - 234afc3 - doc: update cacher table of contents * Fri Apr 26 2024 Ben Grande - 1ede2e1 - fix: allow update check to work on cacher clients * Thu Apr 25 2024 Ben Grande - a6f7d23 - doc: wrong cacher header position * Thu Apr 25 2024 Ben Grande - 648bdad - fix: remove updatevm tag after DomU uninstallation * Sat Apr 13 2024 Ben Grande - 63e93be - fix: GUI policy precedes sys-cacher policy * Mon Mar 25 2024 Ben Grande - 084d08f - doc: uninstall cacher client based on tag * Thu Mar 21 2024 Ben Grande - 4ac0ec9 - fix: cacher jinja fails to split words * Thu Mar 21 2024 Ben Grande - 7faf944 - feat: apply URI changes in qube * Thu Mar 21 2024 Ben Grande - 9e96d80 - fix: add missing archlinux mirror * Mon Mar 18 2024 Ben Grande - f9ead06 - fix: remove extraneous package repository updates * Fri Feb 23 2024 Ben Grande - 5605ec7 - doc: prefix qubesctl with sudo * Thu Feb 22 2024 Ben Grande - 0cd3e66 - fix: remove hardcoded fedora versions from cacher * Thu Feb 22 2024 Ben Grande - 908a077 - fix: allow apt-cacher-ng cronjob to run * Thu Feb 22 2024 Ben Grande - 23dbc72 - fix: update apt-cacher-ng mirror list * Mon Feb 19 2024 Ben Grande - 89bd760 - feat: add OpenTofu * Wed Jan 31 2024 Ben Grande - b5d7371 - fix: thunar requires xfce helpers to find terminal * Mon Jan 29 2024 Ben Grande - 6efcc1d - chore: copyright update * Sat Jan 20 2024 Ben Grande - 422b01e - feat: remove audiovm setting when unnecessary * Thu Jan 18 2024 Ben Grande - 0887c24 - fix: remove unicode from used files * Fri Jan 12 2024 Ben Grande - 8d7c0a2 - fix: sys-cacher policy with the new tag name * Fri Jan 12 2024 Ben Grande - 233ac76 - fix: sys-cacher tag compliance with default tags * Fri Jan 12 2024 Ben Grande - a97e3c0 - feat: kicksecure minimal template * Wed Jan 10 2024 Ben Grande - 2b6daac - fix: shellcheck * Wed Dec 20 2023 Ben Grande - 38d98ec - fix: nft shebang and table names * Wed Dec 20 2023 Ben Grande - d3ae662 - fix: cacher client installation indentation