add dracut signify

upg ethtool opensmtpd nftables
This commit is contained in:
joborun linux 2023-10-26 01:49:12 +03:00
parent e652d5763a
commit 6da401934c
31 changed files with 753 additions and 46 deletions

View File

@ -0,0 +1,10 @@
[Trigger]
Type = Path
Operation = Remove
Target = usr/lib/modules/*/pkgbase
[Action]
Description = Removing linux initcpios...
When = PreTransaction
Exec = /usr/share/libalpm/scripts/dracut-remove
NeedsTargets

View File

@ -0,0 +1,11 @@
[Trigger]
Type = Path
Operation = Install
Operation = Upgrade
Target = usr/lib/modules/*/pkgbase
[Action]
Description = Updating linux initcpios with dracut...
When = PostTransaction
Exec = /usr/share/libalpm/scripts/dracut-install
NeedsTargets

12
dracut/Makefile.inc Normal file
View File

@ -0,0 +1,12 @@
prefix ?= /usr
libdir ?= /usr/lib
datadir ?= /usr/share
sysconfdir ?= /usr/etc
sbindir ?= /usr/bin
mandir ?= /usr/share/man
enable_documentation ?= yes
enable_dracut_cpio ?= no
bindir ?= /usr/bin
KMOD_CFLAGS ?=
KMOD_LIBS ?= -lkmod
FTS_LIBS ?= -lc

81
dracut/PKGBUILD Normal file
View File

@ -0,0 +1,81 @@
#!/usr/bin/bash
# JOBoRun : Jwm OpenBox Obarun RUNit
# Maintainer : Joe Bo Run <joborun@disroot.org>
# PkgSource : url="https://gittea.disroot.org/joborun-pkg/jobextra/$pkgname"
# Website : https://pozol.eu
#-----------------------------------------| DESCRIPTION |---------------------------------------
pkgname=dracut
pkgver=059
pkgrel=03
pkgdesc="An event driven initramfs infrastructure w/o systemd"
#url="https://dracut.wiki.kernel.org"
url="https://github.com/dracutdevs/dracut"
depends=('bash' 'coreutils' 'cpio' 'filesystem' 'findutils' 'grep' 'gzip'
'kmod' 'pkgconf' 'procps-ng' 'sed' 'util-linux' 'xz')
makedepends=('asciidoc' 'bash-completion' 'git')
optdepends=('binutils: --uefi option support'
'elfutils: strip binaries to reduce initramfs size'
'multipath-tools: dmraid dracut module support'
'pigz: faster gzip compression'
'sbsigntools: uefi_secureboot_cert/key configuration option support')
provides=('initramfs')
backup=('etc/dracut.conf')
#source=(https://mirrors.edge.kernel.org/pub/linux/utils/boot/dracut/dracut-${pkgver}.tar{.gz,.sign})
source=("${pkgname}::git+${url}#tag=${pkgver}?signed"
dracut-install
dracut-remove
90-dracut-install.hook
60-dracut-remove.hook)
prepare() {
cd "$srcdir/${pkgname}"
}
build() {
local prefix=/usr sysconfdir=/etc
cd "$srcdir/${pkgname}"
./configure \
--sysconfdir=${sysconfdir} \
--prefix=${prefix} \
--libdir=${prefix}/lib \
--systemdsystemunitdir=/delete \
--bashcompletiondir=$(pkg-config --variable=completionsdir bash-completion)
make
}
package() {
cd "$srcdir/${pkgname}"
DESTDIR="$pkgdir" make install
## systemd crap thrown away
rm -rf ${pkgdir}/usr/lib/dracut/modules.d/*systemd*
rm -f ${pkgdir}/usr/share/man/man8/*.service.*
rm -rf $pkgdir/delete ## give us a break Jóhann, make a decent option to build this without the crap smeared all over it
install -Dm644 "${srcdir}/90-dracut-install.hook" "${pkgdir}/usr/share/libalpm/hooks/90-dracut-install.hook"
install -Dm644 "${srcdir}/60-dracut-remove.hook" "${pkgdir}/usr/share/libalpm/hooks/60-dracut-remove.hook"
install -Dm755 "${srcdir}/dracut-install" "${pkgdir}/usr/share/libalpm/scripts/dracut-install"
install -Dm755 "${srcdir}/dracut-remove" "${pkgdir}/usr/share/libalpm/scripts/dracut-remove"
}
#---- arch license gpg-key & sha256sums ----
arch=(x86_64)
license=('GPL')
validpgpkeys=('F66745589DE755B02AD947D71F1139EBBED1ACA9') # "Jóhann B. Guðmundsson <johannbg@gmail.com>"
sha256sums=(SKIP
4c0ee4c9dc2941d34ebeecf4242c7577e3d193c2a00a9a465a39d42c8266ca6a # dracut-install
4d6ca5da247a19f290bd8e375c470ef6dc01476288cb8aba71c09c09d23331f5 # dracut-remove
7365ad289428c7f7dad522ea0a2c9381648912a626bd40237767051468d325ef # 90-dracut-install.hook
054dac9f1d55029a922ff05c3064e54d25790c7a18d2b598edc58ef3d295cba1) # 60-dracut-remove.hook
## 92b6daba2f0a0143445fae01fe9825fa2a4a7cca6c35616c44b2c18751c7e55c dracut-059-03-x86_64.pkg.tar.lz

55
dracut/PKGBUILD-arch Normal file
View File

@ -0,0 +1,55 @@
# Maintainer: Giancarlo Razzolini <grazzolini@archlinux.org>
pkgname=dracut
pkgver=059
pkgrel=3
pkgdesc="An event driven initramfs infrastructure"
arch=('x86_64')
url="https://github.com/dracutdevs/dracut"
license=('GPL')
depends=('bash' 'coreutils' 'cpio' 'filesystem' 'findutils' 'grep' 'gzip'
'kmod' 'pkgconf' 'procps-ng' 'sed' 'systemd' 'util-linux' 'xz')
makedepends=('asciidoc' 'bash-completion' 'git')
optdepends=('binutils: --uefi option support'
'elfutils: strip binaries to reduce initramfs size'
'multipath-tools: dmraid dracut module support'
'pigz: faster gzip compression'
'sbsigntools: uefi_secureboot_cert/key configuration option support')
provides=('initramfs')
backup=('etc/dracut.conf')
source=("${pkgname}-${pkgver}::git+${url}#tag=${pkgver}?signed"
dracut-systemd-253.patch
dracut-systemd-254-uki.patch::https://github.com/dracutdevs/dracut/commit/f32e95bcadbc5158843530407adc1e7b700561b1.patch)
sha512sums=('SKIP'
'dfbef5ee06fd0f7b51bfd3571eb284272d7694754eaf232cf1a14f3b2f95a67c87098fabf6d88068ef7e235e717bec26024a3b342c5dba940b8600799cef0791'
'880fa583e02557ca24047960bdf36bd4d02fb01baac9e090cc462a02159dddd1725dc59ca4f09e8c9d9827a51bbd0676c0a60d96080b89c2778a445b36d46f33')
b2sums=('SKIP'
'6386d1caf4765974e6f9fffde43cacc20f55a1ed487f6dba9f6f15318dc6dc593ef01309679c8a7f1deffc5dd66138cde7c11d53a825396971d6be29a9388744'
'620aef8362c22f51558010a4fa043448065dc6b3a27f40ed22b8bbdd3623d31759e4eff77f37059f0d91288a95843ea6b3c64292bd548d1aa6147d293cb17b30')
validpgpkeys=('F66745589DE755B02AD947D71F1139EBBED1ACA9') # Jóhann B. Guðmundsson <johannbg@gmail.com>
prepare() {
cd "$srcdir/${pkgname}-${pkgver}"
patch -Np1 < ../dracut-systemd-253.patch
patch -Np1 < ../dracut-systemd-254-uki.patch
}
build() {
local prefix=/usr sysconfdir=/etc
cd "$srcdir/${pkgname}-${pkgver}"
./configure \
--sysconfdir=${sysconfdir} \
--prefix=${prefix} \
--libdir=${prefix}/lib \
--systemdsystemunitdir=${prefix}/lib/systemd/system \
--bashcompletiondir=$(pkg-config --variable=completionsdir bash-completion)
make
}
package() {
cd "$srcdir/${pkgname}-${pkgver}"
DESTDIR="$pkgdir" make install
}

121
dracut/PKGBUILD-oba Normal file
View File

@ -0,0 +1,121 @@
# Obarun : 66 init/supervisor
# Maintainer : Eric Vidal <eric@obarun.org>
# Maintainer : Jean-Michel T.Dydak <jean-michel@obarun.org>
# Maintainer : YianIris <yianiris At disroot Dot org>
# Obarun PkgSrc : https://git.obarun.org/pkg/obextra/dracut
#----------------
#--------------------------------------------------------------
# DESCRIPTION ]
pkgname=dracut
pkgver=056
pkgrel=2
pkgdesc='An event driven initramfs infrastructure'
url='https://dracut.wiki.kernel.org'
track=pub/linux/utils/boot/$pkgname
target=$pkgname-$pkgver
source=(
https://mirrors.edge.kernel.org/$track/$target.tar{.gz,.sign}
dracut-install
dracut-remove
90-dracut-install.hook
60-dracut-remove.hook
)
#----------------------
# BUILD CONFIGURATION ]
makedepends=(
'asciidoc'
'bash-completion'
)
#------------------------
# INSTALL CONFIGURATION ]
arch=(x86_64)
depends=(
'bash'
'coreutils'
'cpio'
'filesystem'
'findutils'
'grep'
'gzip'
'kmod'
'procps-ng'
'sed'
'util-linux'
'xz'
)
optdepends=(
'linux-firmware: in some hardware booting will fail without adequate firmware'
)
backup=(
'etc/dracut.conf'
)
provides=(
'initramfs'
)
conflicts=(
'dracut-git'
'mkinitcpio'
'mkinitcpio-busybox'
)
#----------------
# BUILD CONTROL ]
_path=(
--prefix=/usr
--sysconfdir=/etc
--libdir=/usr/lib
--bashcompletiondir=$(pkg-config --variable=completionsdir bash-completion)
)
#--------
# BUILD ]
build() {
cd $pkgname-$pkgver
./configure "${_path[@]}"
make
}
#----------
# PACKAGE ]
package() {
cd $pkgname-$pkgver
DESTDIR="$pkgdir" make install
## We don't need the systemd stuff.
rm -rf ${pkgdir}/usr/lib/dracut/modules.d/*systemd*
rm -f ${pkgdir}/usr/share/man/man8/*.service.*
rm -rf ${pkgdir}/usr/lib/kernel
install -Dm644 "${srcdir}/90-dracut-install.hook" "${pkgdir}/usr/share/libalpm/hooks/90-dracut-install.hook"
install -Dm644 "${srcdir}/60-dracut-remove.hook" "${pkgdir}/usr/share/libalpm/hooks/60-dracut-remove.hook"
install -Dm755 "${srcdir}/dracut-install" "${pkgdir}/usr/share/libalpm/scripts/dracut-install"
install -Dm755 "${srcdir}/dracut-remove" "${pkgdir}/usr/share/libalpm/scripts/dracut-remove"
}
#---------------------------
# LICENSE AND VERIFICATION ]
license=(GPL)
validpgpkeys=(
'7F3D64824AC0B6B8009E50504BC0896FB5693595' # Harald Hoyer <harald@redhat.com>
)
sha512sums=(' ')

1
dracut/clean Normal file
View File

@ -0,0 +1 @@
rm -rf {src,pkg,dracut}

6
dracut/deps Normal file
View File

@ -0,0 +1,6 @@
cpio
asciidoc
bash-completion
git

15
dracut/dracut-install Normal file
View File

@ -0,0 +1,15 @@
#!/bin/bash
args=('--no-hostonly-cmdline')
while read -r line; do
if [[ "$line" == 'usr/lib/modules/'+([^/])'/pkgbase' ]]; then
read -r pkgbase < "/${line}"
kver="${line#'usr/lib/modules/'}"
kver="${kver%'/pkgbase'}"
install -Dm0644 "/${line%'/pkgbase'}/vmlinuz" "/boot/vmlinuz-${pkgbase}"
dracut "${args[@]}" --force "/boot/initramfs-${pkgbase}.img" --kver "$kver"
dracut --no-hostonly --force "/boot/initramfs-${pkgbase}-fallback.img" --kver "$kver"
fi
done

8
dracut/dracut-remove Normal file
View File

@ -0,0 +1,8 @@
#!/bin/bash
while read -r line; do
if [[ "$line" == 'usr/lib/modules/'+([^/])'/pkgbase' ]]; then
read -r pkgbase < "/${line}"
rm -f "/boot/vmlinuz-${pkgbase}" "/boot/initramfs-${pkgbase}.img" "/boot/initramfs-${pkgbase}-fallback.img"
fi
done

View File

@ -0,0 +1,225 @@
From 0000000000000000000000000000000000000000 Mon Sep 17 00:00:00 2001
From: Antonio Alvarez Feijoo <antonio.feijoo@suse.com>
Date: Mon, 9 Jan 2023 11:47:06 +0100
Subject: [PATCH 1/4] fix(dracut-systemd): remove unused argument
The `generator_wait_for_dev` function of the dracut rootfs systemd generator
only uses the first argument. Moreover, RDRETRY is unset at this point.
(cherry picked from commit eb75861c2a1c05eb142616da1891a7fa5a2a34e1)
---
modules.d/98dracut-systemd/rootfs-generator.sh | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
diff --git a/modules.d/98dracut-systemd/rootfs-generator.sh b/modules.d/98dracut-systemd/rootfs-generator.sh
index e1d365df..3238b495 100755
--- a/modules.d/98dracut-systemd/rootfs-generator.sh
+++ b/modules.d/98dracut-systemd/rootfs-generator.sh
@@ -104,7 +104,7 @@ esac
GENERATOR_DIR="$1"
if [ "$rootok" = "1" ]; then
- generator_wait_for_dev "${root#block:}" "$RDRETRY"
+ generator_wait_for_dev "${root#block:}"
generator_fsck_after_pre_mount "${root#block:}"
strstr "$(cat /proc/cmdline)" 'root=' || generator_mount_rootfs "${root#block:}" "$(getarg rootfstype=)" "$(getarg rootflags=)"
fi
From 0000000000000000000000000000000000000000 Mon Sep 17 00:00:00 2001
From: Antonio Alvarez Feijoo <antonio.feijoo@suse.com>
Date: Wed, 1 Mar 2023 11:21:16 +0100
Subject: [PATCH 2/4] fix(dracut-systemd): do not hardcode the systemd
generator directory
The normal directory is the first argument passed to the systemd generator,
so use it instead of hardcoding /run/systemd/generator.
(cherry picked from commit a2b32ed976898188bc98d9b6c7eec3dc45f4abf0)
---
modules.d/98dracut-systemd/rootfs-generator.sh | 8 ++++----
1 file changed, 4 insertions(+), 4 deletions(-)
diff --git a/modules.d/98dracut-systemd/rootfs-generator.sh b/modules.d/98dracut-systemd/rootfs-generator.sh
index 3238b495..5b85d8c5 100755
--- a/modules.d/98dracut-systemd/rootfs-generator.sh
+++ b/modules.d/98dracut-systemd/rootfs-generator.sh
@@ -17,7 +17,7 @@ generator_wait_for_dev() {
# after remote-fs-pre.target since the initqueue is ordered before it so
# it will never actually show up (think Tang-pinned rootfs).
cat > "$hookdir/initqueue/finished/devexists-${_name}.sh" << EOF
-if ! grep -q After=remote-fs-pre.target /run/systemd/generator/systemd-cryptsetup@*.service 2>/dev/null; then
+if ! grep -q After=remote-fs-pre.target "$GENERATOR_DIR"/systemd-cryptsetup@*.service 2>/dev/null; then
[ -e "$1" ]
fi
EOF
@@ -77,12 +77,12 @@ generator_fsck_after_pre_mount() {
[ -z "$1" ] && return 0
_name=$(dev_unit_name "$1")
- [ -d /run/systemd/generator/systemd-fsck@"${_name}".service.d ] || mkdir -p /run/systemd/generator/systemd-fsck@"${_name}".service.d
- if ! [ -f /run/systemd/generator/systemd-fsck@"${_name}".service.d/after-pre-mount.conf ]; then
+ [ -d "$GENERATOR_DIR"/systemd-fsck@"${_name}".service.d ] || mkdir -p "$GENERATOR_DIR"/systemd-fsck@"${_name}".service.d
+ if ! [ -f "$GENERATOR_DIR"/systemd-fsck@"${_name}".service.d/after-pre-mount.conf ]; then
{
echo "[Unit]"
echo "After=dracut-pre-mount.service"
- } > /run/systemd/generator/systemd-fsck@"${_name}".service.d/after-pre-mount.conf
+ } > "$GENERATOR_DIR"/systemd-fsck@"${_name}".service.d/after-pre-mount.conf
fi
}
From 0000000000000000000000000000000000000000 Mon Sep 17 00:00:00 2001
From: Antonio Alvarez Feijoo <antonio.feijoo@suse.com>
Date: Wed, 1 Mar 2023 12:07:29 +0100
Subject: [PATCH 3/4] fix(dracut-systemd): check and create generator dir
outside of inner function
(cherry picked from commit e21f8f7d5abaae37ada8c7a6dc91c2d878e0b501)
---
modules.d/98dracut-systemd/rootfs-generator.sh | 7 ++++---
1 file changed, 4 insertions(+), 3 deletions(-)
diff --git a/modules.d/98dracut-systemd/rootfs-generator.sh b/modules.d/98dracut-systemd/rootfs-generator.sh
index 5b85d8c5..c3f60ad4 100755
--- a/modules.d/98dracut-systemd/rootfs-generator.sh
+++ b/modules.d/98dracut-systemd/rootfs-generator.sh
@@ -51,7 +51,6 @@ generator_mount_rootfs() {
[ -z "$1" ] && return 0
_name=$(dev_unit_name "$1")
- [ -d "$GENERATOR_DIR" ] || mkdir -p "$GENERATOR_DIR"
if ! [ -f "$GENERATOR_DIR"/sysroot.mount ]; then
{
echo "[Unit]"
@@ -101,9 +100,11 @@ case "${root#block:}" in
;;
esac
-GENERATOR_DIR="$1"
-
if [ "$rootok" = "1" ]; then
+ GENERATOR_DIR="$1"
+ [ -z "$GENERATOR_DIR" ] && exit 1
+ [ -d "$GENERATOR_DIR" ] || mkdir -p "$GENERATOR_DIR"
+
generator_wait_for_dev "${root#block:}"
generator_fsck_after_pre_mount "${root#block:}"
strstr "$(cat /proc/cmdline)" 'root=' || generator_mount_rootfs "${root#block:}" "$(getarg rootfstype=)" "$(getarg rootflags=)"
From 0000000000000000000000000000000000000000 Mon Sep 17 00:00:00 2001
From: Antonio Alvarez Feijoo <antonio.feijoo@suse.com>
Date: Fri, 3 Mar 2023 16:06:30 +0100
Subject: [PATCH 4/4] fix(dracut-systemd): rootfs-generator cannot write
outside of generator dir
Altough it was already documented in systemd.generator(7) that generators must
not write to locations other than those passed as arguments, since
https://github.com/systemd/systemd/commit/ca6ce62d systemd executes generators
in a mount namespace "sandbox", so now the hooks created by the rootfs-generator
are lost.
These hooks are created using the root= cmdline argument, so this patch moves
the creation of these hooks to a cmdline hook.
Fixes issue #2211
Fixes issue #2225
(cherry picked from commit 4bde75fabe31a5c048fd75e533b94e91c3faa83b)
---
modules.d/98dracut-systemd/module-setup.sh | 2 +
.../98dracut-systemd/parse-root.sh (new +x) | 38 +++++++++++++++++++
.../98dracut-systemd/rootfs-generator.sh | 20 +---------
3 files changed, 41 insertions(+), 19 deletions(-)
diff --git a/modules.d/98dracut-systemd/module-setup.sh b/modules.d/98dracut-systemd/module-setup.sh
index b7da86db..e66fc956 100755
--- a/modules.d/98dracut-systemd/module-setup.sh
+++ b/modules.d/98dracut-systemd/module-setup.sh
@@ -37,6 +37,8 @@ install() {
inst_script "$moddir/rootfs-generator.sh" "$systemdutildir"/system-generators/dracut-rootfs-generator
+ inst_hook cmdline 10 "$moddir/parse-root.sh"
+
for i in \
dracut-cmdline.service \
dracut-cmdline-ask.service \
diff --git a/modules.d/98dracut-systemd/parse-root.sh b/modules.d/98dracut-systemd/parse-root.sh
new file mode 100755
index 00000000..deeeff3f
--- /dev/null
+++ b/modules.d/98dracut-systemd/parse-root.sh
@@ -0,0 +1,38 @@
+#!/bin/sh
+
+type getarg > /dev/null 2>&1 || . /lib/dracut-lib.sh
+
+root=$(getarg root=)
+case "${root#block:}" in
+ LABEL=* | UUID=* | PARTUUID=* | PARTLABEL=*)
+ root="block:$(label_uuid_to_dev "$root")"
+ rootok=1
+ ;;
+ /dev/nfs) # ignore legacy /dev/nfs
+ ;;
+ /dev/*)
+ root="block:${root}"
+ rootok=1
+ ;;
+esac
+
+if [ "$rootok" = "1" ]; then
+ root_dev="${root#block:}"
+ root_name="$(str_replace "$root_dev" '/' '\x2f')"
+ if ! [ -e "$hookdir/initqueue/finished/devexists-${root_name}.sh" ]; then
+
+ # If a LUKS device needs unlocking via systemd in the initrd, assume
+ # it's for the root device. In that case, don't block on it if it's
+ # after remote-fs-pre.target since the initqueue is ordered before it so
+ # it will never actually show up (think Tang-pinned rootfs).
+ cat > "$hookdir/initqueue/finished/devexists-${root_name}.sh" << EOF
+if ! grep -q After=remote-fs-pre.target /run/systemd/generator/systemd-cryptsetup@*.service 2>/dev/null; then
+ [ -e "$root_dev" ]
+fi
+EOF
+ {
+ printf '[ -e "%s" ] || ' "$root_dev"
+ printf 'warn "\"%s\" does not exist"\n' "$root_dev"
+ } >> "$hookdir/emergency/80-${root_name}.sh"
+ fi
+fi
diff --git a/modules.d/98dracut-systemd/rootfs-generator.sh b/modules.d/98dracut-systemd/rootfs-generator.sh
index c3f60ad4..bcfd2b89 100755
--- a/modules.d/98dracut-systemd/rootfs-generator.sh
+++ b/modules.d/98dracut-systemd/rootfs-generator.sh
@@ -6,28 +6,10 @@ generator_wait_for_dev() {
local _name
local _timeout
- _name="$(str_replace "$1" '/' '\x2f')"
+ _name=$(dev_unit_name "$1")
_timeout=$(getarg rd.timeout)
_timeout=${_timeout:-0}
- if ! [ -e "$hookdir/initqueue/finished/devexists-${_name}.sh" ]; then
-
- # If a LUKS device needs unlocking via systemd in the initrd, assume
- # it's for the root device. In that case, don't block on it if it's
- # after remote-fs-pre.target since the initqueue is ordered before it so
- # it will never actually show up (think Tang-pinned rootfs).
- cat > "$hookdir/initqueue/finished/devexists-${_name}.sh" << EOF
-if ! grep -q After=remote-fs-pre.target "$GENERATOR_DIR"/systemd-cryptsetup@*.service 2>/dev/null; then
- [ -e "$1" ]
-fi
-EOF
- {
- printf '[ -e "%s" ] || ' "$1"
- printf 'warn "\"%s\" does not exist"\n' "$1"
- } >> "$hookdir/emergency/80-${_name}.sh"
- fi
-
- _name=$(dev_unit_name "$1")
if ! [ -L "$GENERATOR_DIR"/initrd.target.wants/"${_name}".device ]; then
[ -d "$GENERATOR_DIR"/initrd.target.wants ] || mkdir -p "$GENERATOR_DIR"/initrd.target.wants
ln -s ../"${_name}".device "$GENERATOR_DIR"/initrd.target.wants/"${_name}".device

1
dracut/key Normal file
View File

@ -0,0 +1 @@
gpg --recv-key 1A845D0F6E0FD07D

6
dracut/time Normal file
View File

@ -0,0 +1,6 @@
real 0m14.089s
user 0m11.927s
sys 0m1.632s

View File

@ -6,7 +6,7 @@
#-----------------------------------------| DESCRIPTION |---------------------------------------
pkgname=ethtool
pkgver=6.4
pkgver=6.5
pkgrel=01
epoch=1
pkgdesc="Utility for controlling network drivers and hardware"
@ -39,14 +39,13 @@ license=('GPL')
validpgpkeys=(CE4A4D080F0D304F23B9EBDD972D5BF4DC613806 # John W. Linville <linville@kernel.org>
D2CB120AB45957B721CD9596F4554567B91DE934) # Michal Kubecek <mkubecek@suse.cz>
sha256sums=(5eaa083e8108e1dd3876b2c803a1942a2763942715b7f6eb916e189adbb44972 # ethtool-6.4.tar.xz
8bdc25918fb5e7668411ed383f02b09f2d07ff7400429cb938e9b3cca94dfde3) # ethtool-6.4.tar.sign
## a3ed426aee2a9bd387f812e410fdce22f227cfc56fd705e74802972c39f646b6 ethtool-1:6.4-01-x86_64.pkg.tar.lz
sha256sums=(814171ea4b8026b081c0741dbbf32e6968311483ecf64711232faec2ac70a14c # ethtool-6.5.tar.xz
55713c9414e87f0f878b0b47bcbf617bcbae114f16b5d08962790382725c2418) # ethtool-6.5.tar.sign
# Note to packager:
ls -l *pkg.tar.lz
echo "you must rename this package to meet SF naming before you move to the repo"
mv $(ls -l $pkgname*pkg.tar.lz) $pkgname-$epoch_$pkgver-$pkgrel-$arch.pkg.tar.lz >pkg-mv.log
#ls -l *pkg.tar.lz
#echo "you must rename this package to meet SF naming before you move to the repo"
#mv $(ls -l $pkgname*pkg.tar.lz) $pkgname-$epoch_$pkgver-$pkgrel-$arch.pkg.tar.lz >pkg-mv.log
## be5feb8c5b5ec108bce28c611fd71cc08a894c5bfea91e69c5f29bafcf0abc74 ethtool-1_6.5-01-x86_64.pkg.tar.lz

View File

@ -3,7 +3,7 @@
# Contributor: Martin Kemp <mdkemp@elys.com>
pkgname=ethtool
pkgver=6.4
pkgver=6.5
pkgrel=1
epoch=1
pkgdesc="Utility for controlling network drivers and hardware"
@ -12,7 +12,7 @@ url="https://www.kernel.org/pub/software/network/ethtool/"
license=('GPL')
depends=('glibc' 'libmnl')
source=(https://www.kernel.org/pub/software/network/$pkgname/$pkgname-$pkgver.tar.{xz,sign})
sha256sums=('5eaa083e8108e1dd3876b2c803a1942a2763942715b7f6eb916e189adbb44972'
sha256sums=('814171ea4b8026b081c0741dbbf32e6968311483ecf64711232faec2ac70a14c'
'SKIP')
validpgpkeys=(CE4A4D080F0D304F23B9EBDD972D5BF4DC613806 # John W. Linville <linville@kernel.org>
D2CB120AB45957B721CD9596F4554567B91DE934) # Michal Kubecek <mkubecek@suse.cz>

View File

@ -1,2 +1,3 @@

View File

@ -7,8 +7,8 @@
pkgname=nftables
epoch=1
pkgver=1.0.8
pkgrel=02
pkgver=1.0.9
pkgrel=01
pkgdesc='Netfilter tables userspace tools w/o systemd'
url='https://netfilter.org/projects/nftables/'
depends=('libmnl' 'libnftnl' 'gmp' 'readline' 'ncurses' 'jansson')
@ -16,12 +16,9 @@ optdepends=('python: Python bindings')
makedepends=('asciidoc' 'python' 'python-setuptools' 'python-build'
'python-installer' 'python-wheel')
backup=('etc/nftables.conf')
validpgpkeys=('37D964ACC04981C75500FB9BD55D978A8A1420E4') # Netfilter Core Team
source=("https://netfilter.org/projects/nftables/files/nftables-$pkgver.tar.xz"{,.sig}
'meta-stash-context-statement-length.patch'
'nftables.conf')
# 'nftables.service')
'nftables.conf'
'nftables.service')
install=nftables.install
prepare() {
@ -64,8 +61,8 @@ package() {
popd
# basic safe firewall config
install -Dm644 nftables.conf "$pkgdir/etc/nftables.conf"
# # systemd
# install -Dm644 nftables.service "$pkgdir/usr/lib/systemd/system/nftables.service"
# systemd service file saved in docs for reference in making a runit or 66 service file
install -Dm644 nftables.service "$pkgdir/usr/share/doc/$pkgname/nftables.service"
}
#---- arch license gpg-key & sha256sums ----
@ -74,16 +71,17 @@ arch=(x86_64)
license=('GPL2')
sha256sums=(9373740de41a82dbc98818e0a46a073faeb8a8d0689fa4fa1a74399c32bf3d50 # nftables-1.0.8.tar.xz
eadbbad3eb70bc08a7a8c5598807f81b81860b571243f2e308dae01a97c656ae # nftables-1.0.8.tar.xz.sig
3c428a2e5037ff5ea54be060c46a48bf659cd783c8ce5f5ee943fec6ddc61da6 # meta-stash-context-statement-length.patch
2aff88019097d21dbfa4713f5b54c184751c86376e458b683f8d90f3abd232a8) # nftables.conf
validpgpkeys=('37D964ACC04981C75500FB9BD55D978A8A1420E4') # Netfilter Core Team
## ad2c0fbfa0ff9956a6a898cead950b8a3b3205dc3d350fbc06f01eae18c6adec nftables-1:1.0.8-02-x86_64.pkg.tar.lz
sha256sums=(a3c304cd9ba061239ee0474f9afb938a9bb99d89b960246f66f0c3a0a85e14cd # nftables-1.0.9.tar.xz
d07c88a9b5e8510c4af787caabb108b69dd53885939c135ef8cfe12bab79fe2f # nftables-1.0.9.tar.xz.sig
2aff88019097d21dbfa4713f5b54c184751c86376e458b683f8d90f3abd232a8 # nftables.conf
deffeef36fe658867dd9203ec13dec85047a6d224ea63334dcf60db97e1809ea) # nftables.service
## 57625d8b25798688d38b06e6142b190a2d9a918a8895addfb6970c53c606b70b nftables-1_1.0.9-01-x86_64.pkg.tar.lz
# Note to packager:
ls -l *pkg.tar.lz
echo "you must rename this package to meet SF naming before you move to the repo"
mv $(ls -l $pkgname*pkg.tar.lz) $pkgname-$epoch_$pkgver-$pkgrel-$arch.pkg.tar.lz >pkg-mv.log
#ls -l *pkg.tar.lz
#echo "you must rename this package to meet SF naming before you move to the repo"
#mv $(ls -l $pkgname*pkg.tar.lz) $pkgname-$epoch_$pkgver-$pkgrel-$arch.pkg.tar.lz >pkg-mv.log

View File

@ -2,8 +2,8 @@
pkgname=nftables
epoch=1
pkgver=1.0.8
pkgrel=2
pkgver=1.0.9
pkgrel=1
pkgdesc='Netfilter tables userspace tools'
arch=('x86_64')
url='https://netfilter.org/projects/nftables/'
@ -15,13 +15,11 @@ makedepends=('asciidoc' 'python' 'python-setuptools' 'python-build'
backup=('etc/nftables.conf')
validpgpkeys=('37D964ACC04981C75500FB9BD55D978A8A1420E4') # Netfilter Core Team
source=("https://netfilter.org/projects/nftables/files/nftables-$pkgver.tar.xz"{,.sig}
'meta-stash-context-statement-length.patch'
'nftables.conf'
'nftables.service')
install=nftables.install
sha256sums=('9373740de41a82dbc98818e0a46a073faeb8a8d0689fa4fa1a74399c32bf3d50'
sha256sums=('a3c304cd9ba061239ee0474f9afb938a9bb99d89b960246f66f0c3a0a85e14cd'
'SKIP'
'3c428a2e5037ff5ea54be060c46a48bf659cd783c8ce5f5ee943fec6ddc61da6'
'2aff88019097d21dbfa4713f5b54c184751c86376e458b683f8d90f3abd232a8'
'deffeef36fe658867dd9203ec13dec85047a6d224ea63334dcf60db97e1809ea')

1
nftables/key Normal file
View File

@ -0,0 +1 @@
gpg --recv-key D55D978A8A1420E4

View File

@ -1,4 +1,4 @@
#!/usr/bin/bash
#!usr/bin/bash
# JOBoRun : Jwm OpenBox Obarun RUNit
# Maintainer : Joe Bo Run <joborun@disroot.org>
# PkgSource : url="https://gittea.disroot.org/joborun-pkg/jobextra/$pkgname"
@ -6,18 +6,20 @@
#-----------------------------------------| DESCRIPTION |---------------------------------------
pkgname=opensmtpd
pkgver=7.3.0p2
pkgrel=01
pkgver=7.4.0p0
pkgrel=02
pkgdesc="Free implementation of the server-side SMTP protocol on libressl w/o systemd "
url="https://www.opensmtpd.org/"
depends=(libevent openssl pam libxcrypt zlib)
makedepends=(bison)
makedepends=(bison signify)
optdepends=('opensmtpd-filter-rspamd: rspamd integration')
provides=(smtp-server smtp-forwarder)
conflicts=(smtp-server smtp-forwarder)
backup=(etc/smtpd/smtpd.conf etc/smtpd/aliases)
options=(emptydirs)
source=("https://www.opensmtpd.org/archives/${pkgname}-${pkgver}.tar.gz"
${pkgname}-${pkgver}.signify::"${url}/archives/${pkgname}-${pkgver}.sum.sig"
opensmtpd-20181026.pub
$pkgname.sysusers
$pkgname.install)
@ -26,6 +28,10 @@ source=("https://www.opensmtpd.org/archives/${pkgname}-${pkgver}.tar.gz"
install=${pkgname}.install
prepare() {
signify -Cp ${pkgname}-20181026.pub \
-x ${pkgname}-${pkgver}.signify \
${pkgname}-${pkgver}.tar.gz
sed -ri 's,/etc/mail,/etc/smtpd,g' ${pkgname}-${pkgver}/usr.sbin/smtpd/smtpd.conf
}
@ -37,7 +43,7 @@ build() {
--sysconfdir=/etc/smtpd \
--sbindir=/usr/bin \
--libexecdir=/usr/lib/smtpd \
--with-bundled-libtls \
--without-libbsd \
--with-path-mbox=/var/spool/mail \
--with-path-empty=/var/empty \
--with-path-socket=/run \
@ -75,8 +81,11 @@ arch=(x86_64)
license=(custom)
sha256sums=(fccdfbc5b98d150012bf9ccdef51752c18a862ed10888b56289826b83a2b5a4e # opensmtpd-7.3.0p2.tar.gz
sha256sums=(c181ccc3434a11e583619e00028520d457fe062e34dc03beea358078220ce374 # opensmtpd-7.4.0p0.tar.gz
bbdccb72eac8c713c1d24d6d48f3cfd8eb8ff7bf0f36e8b72bf389405c11dab7 # opensmtpd-7.4.0p0.signify
b74dca53567cd5070905a0a1acd77041805b6c0c4a0e1285830ea13654e1dcd5 # opensmtpd-20181026.pub
699c5f5596d9db725d4d302c24f10dbc6f31749836be690b3f056f817de82d83 # opensmtpd.sysusers
d49f106bd55701e75ca820db262e427dcdb50837b0a06a7043e051dc2608b676) # opensmtpd.install
## 15bf6b8755fd22916841bce824653171bcbecff9308a5192ab6cc1c0b93a7434 opensmtpd-7.3.0p2-01-x86_64.pkg.tar.lz
## 506e91ce22bb047d15266db6221c66a23ed20a5168cd69ac47959789564fdfdf opensmtpd-7.4.0p0-02-x86_64.pkg.tar.lz

View File

@ -5,29 +5,38 @@
# Contributor: parchd <parchd@archlinux.info>
pkgname=opensmtpd
pkgver=7.3.0p2
pkgrel=1
pkgver=7.4.0p0
pkgrel=2
pkgdesc="Free implementation of the server-side SMTP protocol"
arch=(x86_64)
url="https://www.opensmtpd.org/"
license=(custom)
depends=(libevent openssl pam libxcrypt zlib)
optdepends=('opensmtpd-filter-rspamd: rspamd integration')
makedepends=(signify)
provides=(smtp-server smtp-forwarder)
conflicts=(smtp-server smtp-forwarder)
backup=(etc/smtpd/smtpd.conf etc/smtpd/aliases)
options=(emptydirs)
source=("https://www.opensmtpd.org/archives/${pkgname}-${pkgver}.tar.gz"
${pkgname}-${pkgver}.signify::"${url}/archives/${pkgname}-${pkgver}.sum.sig"
opensmtpd-20181026.pub
opensmtpd.sysusers
smtpd.service
smtpd.socket)
sha256sums=('fccdfbc5b98d150012bf9ccdef51752c18a862ed10888b56289826b83a2b5a4e'
sha256sums=('c181ccc3434a11e583619e00028520d457fe062e34dc03beea358078220ce374'
'bbdccb72eac8c713c1d24d6d48f3cfd8eb8ff7bf0f36e8b72bf389405c11dab7'
'b74dca53567cd5070905a0a1acd77041805b6c0c4a0e1285830ea13654e1dcd5'
'b38b64f1457b7227d55585edc711cce525e089516d16b093e6c44387380e6b13'
'abf5baeb2a87c60d668ad18ea41cc08cab7a4f76339dd6df05de15cdaadaf922'
'32d46de5562d01de445d04c93bcc9f94bf103539b676e449c32e3603a3866cf8')
install=${pkgname}.install
prepare() {
signify -Cp ${pkgname}-20181026.pub \
-x ${pkgname}-${pkgver}.signify \
${pkgname}-${pkgver}.tar.gz
sed -ri 's,/etc/mail,/etc/smtpd,g' ${pkgname}-${pkgver}/usr.sbin/smtpd/smtpd.conf
}
@ -39,7 +48,7 @@ build() {
--sysconfdir=/etc/smtpd \
--sbindir=/usr/bin \
--libexecdir=/usr/lib/smtpd \
--with-bundled-libtls \
--without-libbsd \
--with-path-mbox=/var/spool/mail \
--with-path-empty=/var/empty \
--with-path-socket=/run \

View File

@ -1 +1 @@
rm -rf {src,pkg,opensmtpd*tar.gz}
rm -rf {src,pkg,opensmtpd*tar.gz,opensmtp*.signify}

View File

@ -1,3 +1,4 @@
bison
signify

View File

@ -0,0 +1,2 @@
untrusted comment: signify public key
RWSy+pcnS2OE5wgr6gFOqONFrrvnmmVnWuwsUVGre0m7+2oRGvEZD1Hl

62
signify/PKGBUILD Normal file
View File

@ -0,0 +1,62 @@
#!/usr/bin/bash
# JOBoRun : Jwm OpenBox Obarun RUNit
# Maintainer : Joe Bo Run <joborun@disroot.org>
# PkgSource : url="https://gittea.disroot.org/joborun-pkg/jobextra/$pkgname"
# Website : https://pozol.eu
#-----------------------------------------| DESCRIPTION |---------------------------------------
pkgname=signify
pkgver=31
pkgrel=03
pkgdesc='OpenBSD tool to cryptographically sign and verify files'
url='https://github.com/aperezdc/signify'
depends=('glibc' 'libbsd>=0.8')
source=(${url}/releases/download/v${pkgver}/${pkgname}-${pkgver}.tar.xz{,.asc}
${pkgname}-LICENSE-${pkgver}::https://raw.githubusercontent.com/aperezdc/signify/v${pkgver}/COPYING)
prepare() {
cd ${pkgname}-${pkgver}
# using O_NOFOLLOW doesn't lock anything down here, swapping files
# without symlinks is still equally open to TOCTOU and it doesn't even
# matter here. let's prefer supporting symlinked target files.
sed -E 's/\| ?O_NOFOLLOW//g' -i ./*.c
}
build () {
cd ${pkgname}-${pkgver}
make PREFIX=/usr \
LTO=1 \
EXTRA_CFLAGS="${CFLAGS} ${CPPFLAGS}" \
EXTRA_LDFLAGS="${LDFLAGS}" \
GIT_TAG=''
}
package () {
cd ${pkgname}-${pkgver}
make PREFIX=/usr \
DESTDIR="${pkgdir}" \
GIT_TAG='' install
install -Dm644 README.md CHANGELOG.md -t "${pkgdir}/usr/share/doc/${pkgname}"
install -Dm644 ../${pkgname}-LICENSE-${pkgver} "${pkgdir}/usr/share/licenses/${pkgname}/LICENSE"
}
#---- arch license gpg-key & sha256sums ----
arch=(x86_64)
license=('BSD')
validpgpkeys=(5AA3BC334FD7E3369E7C77B291C559DBE4C9123B) # Adrián Pérez de Castro <aperez@igalia.com>
sha512sums=('f39597ea278a7eb10b786909752fde59e16405f0bc76c9906f8014e9e7f6801b4733479eec765fb960b6062359954caf54a3460ff67258a9cff93fa978951962'
'SKIP'
'5de1345ef929058040975f1106318ac9443fc107d19a12bfbc919a152ddd4dde11c76201722bc5847bad579e5dc4ba467f0947b6f0fce5cc3eccc68d5f4e9dfe')
##
sha256sums=(1155fd9eeed4a8aa20476b2333d251953ec5d52338d943a770db5b78dd8d2b74 # signify-31.tar.xz
4eb39324dfaf9888c54193c17ae579eb288d13ce81fa81271b201498a192f086 # signify-31.tar.xz.asc
39a0576350c89b404a0c152e626a3925d40aba505dc376d59d6eed12b2f48110) # signify-LICENSE-31
## bdfe27cdd16fc746736e05c313abb1031da6d531da7fd77e852c81b72a7f0db9 signify-31-03-x86_64.pkg.tar.lz

48
signify/PKGBUILD-arch Normal file
View File

@ -0,0 +1,48 @@
# Maintainer: Levente Polyak <anthraxx[at]archlinux[dot]org>
# Maintainer: T.J. Townsend <blakkheim@archlinux.org>
# Contributor: Adrian Perez de Castro <aperez@igalia.com>
pkgname=signify
pkgver=31
pkgrel=3
pkgdesc='OpenBSD tool to cryptographically sign and verify files'
url='https://github.com/aperezdc/signify'
arch=('x86_64')
license=('BSD')
depends=('glibc' 'libbsd>=0.8')
source=(${url}/releases/download/v${pkgver}/${pkgname}-${pkgver}.tar.xz{,.asc}
${pkgname}-LICENSE-${pkgver}::https://raw.githubusercontent.com/aperezdc/signify/v${pkgver}/COPYING)
sha512sums=('f39597ea278a7eb10b786909752fde59e16405f0bc76c9906f8014e9e7f6801b4733479eec765fb960b6062359954caf54a3460ff67258a9cff93fa978951962'
'SKIP'
'5de1345ef929058040975f1106318ac9443fc107d19a12bfbc919a152ddd4dde11c76201722bc5847bad579e5dc4ba467f0947b6f0fce5cc3eccc68d5f4e9dfe')
validpgpkeys=(
'5AA3BC334FD7E3369E7C77B291C559DBE4C9123B' # Adrián Pérez de Castro <aperez@igalia.com>
)
prepare() {
cd ${pkgname}-${pkgver}
# using O_NOFOLLOW doesn't lock anything down here, swapping files
# without symlinks is still equally open to TOCTOU and it doesn't even
# matter here. let's prefer supporting symlinked target files.
sed -E 's/\| ?O_NOFOLLOW//g' -i ./*.c
}
build () {
cd ${pkgname}-${pkgver}
make PREFIX=/usr \
LTO=1 \
EXTRA_CFLAGS="${CFLAGS} ${CPPFLAGS}" \
EXTRA_LDFLAGS="${LDFLAGS}" \
GIT_TAG=''
}
package () {
cd ${pkgname}-${pkgver}
make PREFIX=/usr \
DESTDIR="${pkgdir}" \
GIT_TAG='' install
install -Dm644 README.md CHANGELOG.md -t "${pkgdir}/usr/share/doc/${pkgname}"
install -Dm644 ../${pkgname}-LICENSE-${pkgver} "${pkgdir}/usr/share/licenses/${pkgname}/LICENSE"
}
# vim: ts=2 sw=2 et:

1
signify/clean Normal file
View File

@ -0,0 +1 @@
rm -rf {src,pkg,signify-*.tar.xz*}

3
signify/deps Normal file
View File

@ -0,0 +1,3 @@
libbsd

1
signify/key Normal file
View File

@ -0,0 +1 @@
gpg --recv-key 91C559DBE4C9123B

View File

@ -0,0 +1,16 @@
Copyright (c) 2013 Ted Unangst <tedu@openbsd.org>
Copyright (c) 2016 Marc Espie <espie@openbsd.org>
Copyright (c) 2019 Adrian Perez de Castro <aperez@igalia.com>
Copyright (c) 2019 Scott Bennett and other contributors
Permission to use, copy, modify, and distribute this software for any
purpose with or without fee is hereby granted, provided that the above
copyright notice and this permission notice appear in all copies.
THE SOFTWARE IS PROVIDED "AS IS" AND THE AUTHOR DISCLAIMS ALL WARRANTIES
WITH REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF
MERCHANTABILITY AND FITNESS. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR
ANY SPECIAL, DIRECT, INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES
WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS, WHETHER IN AN
ACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF
OR IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE.

6
signify/time Normal file
View File

@ -0,0 +1,6 @@
real 0m4.301s
user 0m3.456s
sys 0m0.514s