kpriv/freebsd-ports
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity
freebsd-ports/net/chrony/Makefile

72 lines
2.1 KiB
Makefile
Raw Normal View History

Add a port of system clock synchronization client and server (chrony). WWW: http://chrony.tuxfamily.org/ PR: ports/174263
2014-04-08 19:06:58 +02:00
# Created by: Masaki TAGAWA <masaki@club.kyutech.ac.jp>
# $FreeBSD$
PORTNAME= chrony
net/chrony: Update to 3.3 - Add explicit DOCS, EXAMPLES options - Replace %%PREFIX%% in sample files - Make sure chronyc is really linked with libedit from ports - Add support for security/nettle and use it by default since chrony crashes on startup when built with NSS. [1] PR: 227779, 223840 [1] Submitted by: takefu@airport.fm Approved by: maintainer
2018-05-09 05:01:58 +02:00
PORTVERSION= 3.3
Add a port of system clock synchronization client and server (chrony). WWW: http://chrony.tuxfamily.org/ PR: ports/174263
2014-04-08 19:06:58 +02:00
CATEGORIES= net
MASTER_SITES= http://download.tuxfamily.org/chrony/
net/chrony: 2.2 -> 2.3 - submitter becomes maintainer after repeated maintainer timeouts Enhancements - Add support for NTP and command response rate limiting - Add support for dropping root privileges on Mac OS X, FreeBSD, Solaris - Add require and trust options for source selection - Enable logchange by default (1 second threshold) - Set RTC on Mac OS X with rtcsync directive - Allow binding to NTP port after dropping root privileges on NetBSD - Drop CAP_NET_BIND_SERVICE capability on Linux when NTP port is disabled - Resolve names in separate process when seccomp filter is enabled - Replace old records in client log when memory limit is reached - Don't reveal local time and synchronisation state in client packets - Don't keep client sockets open for longer than necessary - Ignore poll in KoD RATE packets as ntpd doesn't always set it correctly - Warn when using keys shorter than 80 bits - Add keygen command to generate random keys easily - Add serverstats command to report NTP and command packet statistics Bug fixes - Fix clock correction after making step on Mac OS X - Fix building on Solaris PR: 209690 Submitted by: Yonas Yanfa <yonas@fizk.net) Approved by: masaki@club.kyutech.ac.jp (maintainer timeout)
2016-06-05 05:35:27 +02:00
MAINTAINER= yonas@fizk.net
Add a port of system clock synchronization client and server (chrony). WWW: http://chrony.tuxfamily.org/ PR: ports/174263
2014-04-08 19:06:58 +02:00
COMMENT= System clock synchronization client and server
LICENSE= GPLv2
- Update to 3.0 - While here, add LICENSE_FILE and remove unneeded @dir PR: 216184 Submitted by: yonas@fizk.net (maintainer)
2017-01-17 18:37:21 +01:00
LICENSE_FILE= ${WRKSRC}/COPYING
Add a port of system clock synchronization client and server (chrony). WWW: http://chrony.tuxfamily.org/ PR: ports/174263
2014-04-08 19:06:58 +02:00
Update net/chrony: enable privilege separation and other minor changes. - enables privilege separation - removes the build dependency on asciidoctor - removes the runtime dependency on makeinfo and readline - add a runtime dependency on libedit - do not install the HTML documentation (in favour of man pages) - update the post-install message (pkg-message) in light of privilege separation - set the permission of /var/db/chrony to the new "chronyd" user and group PR: 216737 Submitted by: maintainer Approved by: mat (mentor) Differential Revision: https://reviews.freebsd.org/D9570
2017-02-13 19:05:34 +01:00
USERS= chronyd
GROUPS= chronyd
net/chrony: 2.3 -> 2.4 Changes: http://chrony.tuxfamily.org/news.html PR: 210190 Submitted by: Yonas Yanfa <yonas@fizk.net> (maintainer)
2016-06-12 12:41:45 +02:00
Update net/chrony: enable privilege separation and other minor changes. - enables privilege separation - removes the build dependency on asciidoctor - removes the runtime dependency on makeinfo and readline - add a runtime dependency on libedit - do not install the HTML documentation (in favour of man pages) - update the post-install message (pkg-message) in light of privilege separation - set the permission of /var/db/chrony to the new "chronyd" user and group PR: 216737 Submitted by: maintainer Approved by: mat (mentor) Differential Revision: https://reviews.freebsd.org/D9570
2017-02-13 19:05:34 +01:00
USES= cpe gmake libedit
net/chrony: add CPE info PR: 199513 Submitted by: jbeich Approved by: portmgr blanket
2015-04-22 13:43:12 +02:00
CPE_VENDOR= tuxfamily
Add a port of system clock synchronization client and server (chrony). WWW: http://chrony.tuxfamily.org/ PR: ports/174263
2014-04-08 19:06:58 +02:00
HAS_CONFIGURE= yes
net/chrony: prefix fix, remove setuid-root mode PR: 204018 Submitted by: John Hein <z7dr6ut7gs@snkmail.com> Reviewed by: koobs Approved by: masaki@club.kyutech.ac.jp (maintainer timeout)
2015-11-23 21:04:20 +01:00
CONFIGURE_ARGS= --prefix=${PREFIX} \
Update to upstream version 2.2; general cleanup Detailed log by submitter: - Update net/chrony to latest upstream version - 2.2 - install info - point to /var/db instead of /var/lib (per hier(7)) - use doc/install-docs target; install more docs (PORTDOCS) - use @sample to a sample .conf file (not for .keys which will require manual intervention); others in examples dir (use PORTEXAMPLES) - rm old post-install target - fix example files for freebsd/prefix paths & ntp server names, add info regarding how to do log rotation if logging turned on. PR: 204817 Submitted by: z7dr6ut7gs@snkmail.com Approved by: maintainer timeout
2015-12-27 13:53:32 +01:00
--chronyvardir=/var/db/${PORTNAME} \
net/chrony: prefix fix, remove setuid-root mode PR: 204018 Submitted by: John Hein <z7dr6ut7gs@snkmail.com> Reviewed by: koobs Approved by: masaki@club.kyutech.ac.jp (maintainer timeout)
2015-11-23 21:04:20 +01:00
--sysconfdir=${PREFIX}/etc --mandir=${MANPREFIX}/man \
Update net/chrony: enable privilege separation and other minor changes. - enables privilege separation - removes the build dependency on asciidoctor - removes the runtime dependency on makeinfo and readline - add a runtime dependency on libedit - do not install the HTML documentation (in favour of man pages) - update the post-install message (pkg-message) in light of privilege separation - set the permission of /var/db/chrony to the new "chronyd" user and group PR: 216737 Submitted by: maintainer Approved by: mat (mentor) Differential Revision: https://reviews.freebsd.org/D9570
2017-02-13 19:05:34 +01:00
--datarootdir=${DATADIR} --docdir=${DOCSDIR} \
net/chrony: Update to 3.3 - Add explicit DOCS, EXAMPLES options - Replace %%PREFIX%% in sample files - Make sure chronyc is really linked with libedit from ports - Add support for security/nettle and use it by default since chrony crashes on startup when built with NSS. [1] PR: 227779, 223840 [1] Submitted by: takefu@airport.fm Approved by: maintainer
2018-05-09 05:01:58 +02:00
--with-readline-library=${LOCALBASE}/lib \
Makes the NSS dependency explicit, and perform cleanup Bump PORTREVISION Before this patch if nss is installed when crony is built, there's a silent lib dependency on nss, and if nss is subsequently uninstalled chrony breaks. NSS is now turned on by default adding support for a number of more modern hashing algorithms than md5. Cleanup: - --infodir is not a valid configure option (since 2.3 I think) - USES=localbase instead of LDFLAGS - add explicit --without-tomcrypt [1] - add support for passing chronyd_flags to chronyd in rc.d script - fix some hard-coded /usr/local in examples PR: 217691 Submitted by: John Hein <z7dr6ut7gs@snkmail.com> Approved by: Yonas Yanfa <yonas@fizk.net> (maintainer)
2017-11-18 23:41:34 +01:00
--with-user=chronyd --without-tomcrypt
Add a port of system clock synchronization client and server (chrony). WWW: http://chrony.tuxfamily.org/ PR: ports/174263
2014-04-08 19:06:58 +02:00
USE_RC_SUBR= chronyd
Update net/chrony: enable privilege separation and other minor changes. - enables privilege separation - removes the build dependency on asciidoctor - removes the runtime dependency on makeinfo and readline - add a runtime dependency on libedit - do not install the HTML documentation (in favour of man pages) - update the post-install message (pkg-message) in light of privilege separation - set the permission of /var/db/chrony to the new "chronyd" user and group PR: 216737 Submitted by: maintainer Approved by: mat (mentor) Differential Revision: https://reviews.freebsd.org/D9570
2017-02-13 19:05:34 +01:00
ALL_TARGET= all
INSTALL_TARGET= install
PORTDOCS= FAQ NEWS README
Update to upstream version 2.2; general cleanup Detailed log by submitter: - Update net/chrony to latest upstream version - 2.2 - install info - point to /var/db instead of /var/lib (per hier(7)) - use doc/install-docs target; install more docs (PORTDOCS) - use @sample to a sample .conf file (not for .keys which will require manual intervention); others in examples dir (use PORTEXAMPLES) - rm old post-install target - fix example files for freebsd/prefix paths & ntp server names, add info regarding how to do log rotation if logging turned on. PR: 204817 Submitted by: z7dr6ut7gs@snkmail.com Approved by: maintainer timeout
2015-12-27 13:53:32 +01:00
PORTEXAMPLES= chrony.conf.example1 chrony.conf.example2 \
net/chrony: 2.3 -> 2.4 Changes: http://chrony.tuxfamily.org/news.html PR: 210190 Submitted by: Yonas Yanfa <yonas@fizk.net> (maintainer)
2016-06-12 12:41:45 +02:00
chrony.conf.example3 chrony.keys.example
Add a port of system clock synchronization client and server (chrony). WWW: http://chrony.tuxfamily.org/ PR: ports/174263
2014-04-08 19:06:58 +02:00
# XXX: there are also other potentially useful options worth looking into:
# --disable-pps Disable PPS API support
net/chrony: Update to 3.3 - Add explicit DOCS, EXAMPLES options - Replace %%PREFIX%% in sample files - Make sure chronyc is really linked with libedit from ports - Add support for security/nettle and use it by default since chrony crashes on startup when built with NSS. [1] PR: 227779, 223840 [1] Submitted by: takefu@airport.fm Approved by: maintainer
2018-05-09 05:01:58 +02:00
OPTIONS_DEFINE= DOCS EXAMPLES IPV6 NETTLE NSS
OPTIONS_DEFAULT= IPV6 NETTLE
NETTLE_DESC= Nettle crypto library support
NSS_DESC= Add support for more hashing algorithms
Add a port of system clock synchronization client and server (chrony). WWW: http://chrony.tuxfamily.org/ PR: ports/174263
2014-04-08 19:06:58 +02:00
IPV6_CATEGORIES= ipv6
IPV6_CONFIGURE_OFF= --disable-ipv6
net/chrony: Update to 3.3 - Add explicit DOCS, EXAMPLES options - Replace %%PREFIX%% in sample files - Make sure chronyc is really linked with libedit from ports - Add support for security/nettle and use it by default since chrony crashes on startup when built with NSS. [1] PR: 227779, 223840 [1] Submitted by: takefu@airport.fm Approved by: maintainer
2018-05-09 05:01:58 +02:00
NETTLE_CONFIGURE_OFF= --without-nettle
NETTLE_LIB_DEPENDS= libnettle.so:security/nettle
NSS_BROKEN= Crashes on startup with NSS. See https://bugs.freebsd.org/223840
Makes the NSS dependency explicit, and perform cleanup Bump PORTREVISION Before this patch if nss is installed when crony is built, there's a silent lib dependency on nss, and if nss is subsequently uninstalled chrony breaks. NSS is now turned on by default adding support for a number of more modern hashing algorithms than md5. Cleanup: - --infodir is not a valid configure option (since 2.3 I think) - USES=localbase instead of LDFLAGS - add explicit --without-tomcrypt [1] - add support for passing chronyd_flags to chronyd in rc.d script - fix some hard-coded /usr/local in examples PR: 217691 Submitted by: John Hein <z7dr6ut7gs@snkmail.com> Approved by: Yonas Yanfa <yonas@fizk.net> (maintainer)
2017-11-18 23:41:34 +01:00
NSS_CONFIGURE_OFF= --without-nss
Add missing lib dependency in the original patch Bump PORTREVISION PR: 217691 Submitted by: John Hein <z7dr6ut7gs@snkmail.com> Approved by: Yonas Yanfa <yonas@fizk.net>
2017-11-20 14:49:59 +01:00
NSS_LIB_DEPENDS= libfreebl3.so:security/nss
Makes the NSS dependency explicit, and perform cleanup Bump PORTREVISION Before this patch if nss is installed when crony is built, there's a silent lib dependency on nss, and if nss is subsequently uninstalled chrony breaks. NSS is now turned on by default adding support for a number of more modern hashing algorithms than md5. Cleanup: - --infodir is not a valid configure option (since 2.3 I think) - USES=localbase instead of LDFLAGS - add explicit --without-tomcrypt [1] - add support for passing chronyd_flags to chronyd in rc.d script - fix some hard-coded /usr/local in examples PR: 217691 Submitted by: John Hein <z7dr6ut7gs@snkmail.com> Approved by: Yonas Yanfa <yonas@fizk.net> (maintainer)
2017-11-18 23:41:34 +01:00
NSS_USES= pkgconfig
net/chrony: Update to 3.3 - Add explicit DOCS, EXAMPLES options - Replace %%PREFIX%% in sample files - Make sure chronyc is really linked with libedit from ports - Add support for security/nettle and use it by default since chrony crashes on startup when built with NSS. [1] PR: 227779, 223840 [1] Submitted by: takefu@airport.fm Approved by: maintainer
2018-05-09 05:01:58 +02:00
post-patch:
@cd ${WRKSRC}/examples && \
${REINPLACE_CMD} -e 's!%%PREFIX%%!${PREFIX}!g' ${PORTEXAMPLES}
Do not use post-stage. Use post-install instead. The only reason to use post-stage is because the port needs to do "things" at a later time, like some plist manipulation. While there, fold post-install in do-install targets when they are defined. PR: 214780 Submitted by: mat Exp-run by: antoine Sponsored by: Absolight
2016-12-02 12:58:21 +01:00
post-install:
net/chrony: 1.31 -> 1.31.1 - Update to 1.31.1 to resolve CVE-2015-1799, CVE-2015-1821, and CVE-2015-1822 - Regenerate patches with `make makepatch` to quiet portlint - Strip binaries PR: 199508 Submitted by: Jason Unovitch <jason.unovitch@gmail.com> Approved by: masaki@club.kyutech.ac.jp (maintainer timeout)
2015-05-23 20:59:11 +02:00
${STRIP_CMD} ${STAGEDIR}${PREFIX}/bin/chronyc
${STRIP_CMD} ${STAGEDIR}${PREFIX}/sbin/chronyd
- Remove ONLY_FOR_ARCHS restriction as chronyd(8) runs fine on PowerPC now - Remove no-op OPTIONS_DEFAULT=IPV6, which was bogusly re-added in r416385 by pi@ after it was previously removed by amdmi3@ in r416447 - Sanitize `post-stage' target recipe (still needs more work to decouple extra docs and examples properly and add them to OPTIONS_DEFINE) Tested on: Mac mini G4 (powerpc)
2016-06-06 18:50:14 +02:00
${INSTALL_DATA} ${WRKSRC}/examples/chrony.conf.example3 \
${STAGEDIR}${PREFIX}/etc/chrony.conf.sample
Add a port of system clock synchronization client and server (chrony). WWW: http://chrony.tuxfamily.org/ PR: ports/174263
2014-04-08 19:06:58 +02:00
net/chrony: Update to 3.3 - Add explicit DOCS, EXAMPLES options - Replace %%PREFIX%% in sample files - Make sure chronyc is really linked with libedit from ports - Add support for security/nettle and use it by default since chrony crashes on startup when built with NSS. [1] PR: 227779, 223840 [1] Submitted by: takefu@airport.fm Approved by: maintainer
2018-05-09 05:01:58 +02:00
post-install-DOCS-on:
@${MKDIR} ${STAGEDIR}${DOCSDIR}
cd ${WRKSRC} && ${INSTALL_DATA} ${PORTDOCS} ${STAGEDIR}${DOCSDIR}
post-install-EXAMPLES-on:
@${MKDIR} ${STAGEDIR}${EXAMPLESDIR}
cd ${WRKSRC}/examples && \
${INSTALL_DATA} ${PORTEXAMPLES} ${STAGEDIR}${EXAMPLESDIR}
Add a port of system clock synchronization client and server (chrony). WWW: http://chrony.tuxfamily.org/ PR: ports/174263
2014-04-08 19:06:58 +02:00
.include <bsd.port.mk>
Reference in a new issue Copy permalink