mirror of
https://github.com/ben-grande/qusal.git
synced 2024-10-01 02:35:49 -04:00
c84dfea48e
It doesn't checkout the current directory when querying the spec, so we provide the already modified version of the spec.
134 lines
3.6 KiB
RPMSpec
134 lines
3.6 KiB
RPMSpec
# SPDX-FileCopyrightText: 2023 - 2024 Benjamin Grande M. S. <ben.grande.b@gmail.com>
|
|
#
|
|
# SPDX-License-Identifier: AGPL-3.0-or-later
|
|
|
|
## Reproducibility.
|
|
%define source_date_epoch_from_changelog 1
|
|
%define use_source_date_epoch_as_buildtime 1
|
|
%define clamp_mtime_to_source_date_epoch 1
|
|
# Changelog is trimmed according to current date, not last date from changelog.
|
|
%define _changelog_trimtime 0
|
|
%define _changelog_trimage 0
|
|
%global _buildhost %{name}
|
|
# Python bytecode interferes when updates occur and restart is not done.
|
|
%undefine __brp_python_bytecompile
|
|
|
|
Name: qusal-sys-firewall
|
|
Version: 0.0.1
|
|
Release: 1%{?dist}
|
|
Summary: Firewall in Qubes OS
|
|
|
|
Group: qusal
|
|
Packager: Ben Grande
|
|
Vendor: Ben Grande
|
|
License: AGPL-3.0-or-later
|
|
URL: https://github.com/ben-grande/qusal
|
|
BugURL: https://github.com/ben-grande/qusal/issues
|
|
Source0: %{name}-%{version}.tar.gz
|
|
BuildArch: noarch
|
|
|
|
Requires: qubes-mgmt-salt
|
|
Requires: qubes-mgmt-salt-dom0
|
|
Requires: qusal-sys-net
|
|
Requires: qusal-utils
|
|
|
|
|
|
%description
|
|
Creates firewall qube, an App qube "sys-firewall" and a Disposable qube
|
|
"disp-sys-firewall". By default, "disp-sys-firewall" will be the "updatevm",
|
|
the "clockvm" and the "default_netvm".
|
|
|
|
If you want an easy to configure firewall with ad blocking, checkout
|
|
sys-pihole instead.
|
|
|
|
%prep
|
|
%setup -q
|
|
|
|
%build
|
|
|
|
%install
|
|
rm -rf %{buildroot}
|
|
install -m 755 -d \
|
|
%{buildroot}/srv/salt/qusal \
|
|
%{buildroot}%{_docdir}/%{name} \
|
|
%{buildroot}%{_defaultlicensedir}/%{name}
|
|
install -m 644 %{name}/LICENSES/* %{buildroot}%{_defaultlicensedir}/%{name}/
|
|
install -m 644 %{name}/README.md %{buildroot}%{_docdir}/%{name}/
|
|
rm -rv %{name}/LICENSES %{name}/README.md
|
|
cp -rv %{name} %{buildroot}/srv/salt/qusal/%{name}
|
|
|
|
%check
|
|
|
|
%dnl %pre
|
|
|
|
%post
|
|
if test "$1" = "1"; then
|
|
## Install
|
|
qubesctl state.apply sys-firewall.create
|
|
qubesctl --skip-dom0 --targets=tpl-sys-firewall state.apply sys-firewall.install
|
|
qubesctl state.apply sys-firewall.prefs-disp
|
|
elif test "$1" = "2"; then
|
|
## Upgrade
|
|
true
|
|
fi
|
|
|
|
%preun
|
|
if test "$1" = "0"; then
|
|
## Uninstall
|
|
true
|
|
elif test "$1" = "1"; then
|
|
## Upgrade
|
|
true
|
|
fi
|
|
|
|
%postun
|
|
if test "$1" = "0"; then
|
|
## Uninstall
|
|
true
|
|
elif test "$1" = "1"; then
|
|
## Upgrade
|
|
true
|
|
fi
|
|
|
|
%files
|
|
%defattr(-,root,root,-)
|
|
%license %{_defaultlicensedir}/%{name}/*
|
|
%doc %{_docdir}/%{name}/README.md
|
|
%dir /srv/salt/qusal/%{name}
|
|
/srv/salt/qusal/%{name}/*
|
|
%dnl TODO: missing '%ghost', files generated during %post, such as Qrexec policies.
|
|
|
|
%changelog
|
|
* Thu Jun 13 2024 Ben Grande <ben.grande.b@gmail.com> - a564b3a
|
|
- feat: add TCP proxy for remote hosts
|
|
|
|
* Tue May 28 2024 Ben Grande <ben.grande.b@gmail.com> - 44ea4c5
|
|
- feat: add manual page reader
|
|
|
|
* Sat May 11 2024 Ben Grande <ben.grande.b@gmail.com> - 72f61bb
|
|
- fix: install fwupd qubes plugin to updatevm
|
|
|
|
* Mon Mar 18 2024 Ben Grande <ben.grande.b@gmail.com> - f9ead06
|
|
- fix: remove extraneous package repository updates
|
|
|
|
* Fri Feb 23 2024 Ben Grande <ben.grande.b@gmail.com> - 5605ec7
|
|
- doc: prefix qubesctl with sudo
|
|
|
|
* Mon Jan 29 2024 Ben Grande <ben.grande.b@gmail.com> - 6efcc1d
|
|
- chore: copyright update
|
|
|
|
* Sat Jan 20 2024 Ben Grande <ben.grande.b@gmail.com> - 422b01e
|
|
- feat: remove audiovm setting when unnecessary
|
|
|
|
* Thu Jan 04 2024 Ben Grande <ben.grande.b@gmail.com> - 0216297
|
|
- feat: default to disposable netvm
|
|
|
|
* Thu Jan 04 2024 Ben Grande <ben.grande.b@gmail.com> - e0b11b3
|
|
- fix: do not install net debug tools by default
|
|
|
|
* Thu Dec 21 2023 Ben Grande <ben.grande.b@gmail.com> - ad6f5e2
|
|
- feat: move clockvm out of sys-net to sys-firewall
|
|
|
|
* Mon Nov 13 2023 Ben Grande <ben.grande.b@gmail.com> - 5eebd78
|
|
- refactor: initial commit
|