kpriv/pkgsrc
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity
pkgsrc/www/py-uwsgi/options.mk

66 lines
1.6 KiB
Makefile
Raw Normal View History

Unbreak the option handling. Restore openssl and PCRE option.
2018-03-17 00:39:54 +01:00
# $NetBSD: options.mk,v 1.3 2018/03/16 23:39:54 joerg Exp $
Update to 2.0 (python-3.x compatible) based on the wip package by othyro. Changes: uWSGI 2.0 Changelog [20131230] Important changes Dynamic options have been definitely removed as well as the broken_plugins directory Bugfixes and improvements improved log rotation do not rely on unix signals to print request status during harakiri added magic vars for uid and gid various Lua fixes a tons of coverity-governed bugfixes made by Riccardo Magliocchetti New features --attach-daemon2 this is a keyval based option for configuring external daemons. Updated docs are: :doc:`AttachingDaemons` Linux setns() support One of the biggest improvements in uWSGI 1.9-2.0 has been the total support for Linux namespaces. This last patch adds support for the setns() syscall. This syscall allows a process to "attach" to a running namespace. uWSGI instances can exposes their namespaces file descriptors (basically they are the files in /proc/self/ns) via a unix socket. External instances connects to that unix socket and automatically enters the mapped namespace. to spawn an instance in "namespace server mode", you use the --setns-socket <addr> option uwsgi --setns-socket /var/run/ns.socket --unshare net,ipc,uts ... to attach you simply use --setns <addr> uwsgi --setns /var/run/ns.socket ... Updated docs: :doc:`Namespaces` "private" hooks When uWSGI runs your hooks, it verbosely print the whole hook action line. This could be a security problem in some scenario (for example when you run initial phases as root user but allows unprivileged access to logs). Prefixing your action with a '!' will suppress full logging: [uwsgi] hook-asap = !exec:my_secret_command Support for yajl library (JSON parser) Til now uWSGI only supported jansson as the json parser required for managing .js config files. You can now use the yajl library (available in centos) as alternative JSON parser (will be automatically detected) Perl spooler support The perl/PSGI plugin can now be used as a spooler server: uwsgi::spooler(sub { my $args = shift; print Dumper($args); return -2; }); The client part is still missing as we need to fix some internal api problem. Expect it in 2.0.1 ;) Gateways can drop privileges Gateways (like http router, sslrouter, rawrouter, forkptyrouter ...) can now drop privileges independently by the master. Currently only the http/https/spdy router exposes the new option (--http-uid/--http-gid) Subscriptions-governed SNI contexts The subscription subsystem now supports 3 additional keys (you can set them with the --subscribe2 option): sni_key sni_cert sni_ca all of the takes a path to the relevant ssl files.
2014-01-23 15:47:05 +01:00
PKG_OPTIONS_VAR= PKG_OPTIONS.py-uwsgi
Unbreak the option handling. Restore openssl and PCRE option.
2018-03-17 00:39:54 +01:00
PKG_SUPPORTED_OPTIONS= debug openssl pcre uuid yaml
PKG_SUGGESTED_OPTIONS+= libxml2 openssl
Update to 2.0 (python-3.x compatible) based on the wip package by othyro. Changes: uWSGI 2.0 Changelog [20131230] Important changes Dynamic options have been definitely removed as well as the broken_plugins directory Bugfixes and improvements improved log rotation do not rely on unix signals to print request status during harakiri added magic vars for uid and gid various Lua fixes a tons of coverity-governed bugfixes made by Riccardo Magliocchetti New features --attach-daemon2 this is a keyval based option for configuring external daemons. Updated docs are: :doc:`AttachingDaemons` Linux setns() support One of the biggest improvements in uWSGI 1.9-2.0 has been the total support for Linux namespaces. This last patch adds support for the setns() syscall. This syscall allows a process to "attach" to a running namespace. uWSGI instances can exposes their namespaces file descriptors (basically they are the files in /proc/self/ns) via a unix socket. External instances connects to that unix socket and automatically enters the mapped namespace. to spawn an instance in "namespace server mode", you use the --setns-socket <addr> option uwsgi --setns-socket /var/run/ns.socket --unshare net,ipc,uts ... to attach you simply use --setns <addr> uwsgi --setns /var/run/ns.socket ... Updated docs: :doc:`Namespaces` "private" hooks When uWSGI runs your hooks, it verbosely print the whole hook action line. This could be a security problem in some scenario (for example when you run initial phases as root user but allows unprivileged access to logs). Prefixing your action with a '!' will suppress full logging: [uwsgi] hook-asap = !exec:my_secret_command Support for yajl library (JSON parser) Til now uWSGI only supported jansson as the json parser required for managing .js config files. You can now use the yajl library (available in centos) as alternative JSON parser (will be automatically detected) Perl spooler support The perl/PSGI plugin can now be used as a spooler server: uwsgi::spooler(sub { my $args = shift; print Dumper($args); return -2; }); The client part is still missing as we need to fix some internal api problem. Expect it in 2.0.1 ;) Gateways can drop privileges Gateways (like http router, sslrouter, rawrouter, forkptyrouter ...) can now drop privileges independently by the master. Currently only the http/https/spdy router exposes the new option (--http-uid/--http-gid) Subscriptions-governed SNI contexts The subscription subsystem now supports 3 additional keys (you can set them with the --subscribe2 option): sni_key sni_cert sni_ca all of the takes a path to the relevant ssl files.
2014-01-23 15:47:05 +01:00
PKG_OPTIONS_OPTIONAL_GROUPS+= json xml
PKG_OPTIONS_GROUP.json= jansson yajl
PKG_OPTIONS_GROUP.xml= expat libxml2
.include "../../mk/bsd.options.mk"
py-uwsgi: updated to 2.0.16 uWSGI 2.0.16 Security [CVE-2018-6758] Stack-based buffer overflow in core/utils.c:uwsgi_expand_path() Changes Backported early_post_jail plugin hook (Bjørnar Ness) Fixed ipv6 suupport for http-socket (James Brown) Enable execinfo on DragonFly BSD (Aaron LI) Fix inet_ntop buffer size (Orivej Desh) Add worker running time metrics (Serge/yasek) Backported safe-pidfile, safe-pidfile2 (Nate Coraor) Stop using libxml2 by default on osx Fixed uwsgi_kvlist_parse signature Backport http range fixes from master (Curtis Maloney, Sokolov Yura) relicensed mod_proxy_uwsgi to Apache 2.0 logging: Add ${millis} support to json encode plugins/router_xmldir: fixup invalid locale check (Riccardo Magliocchetti) Add ssl-verify-depth flag to set the max Client CA chain length (Paul Tagliamonte) Allow to override build date (Bernhard M. Wiedemann) Python 3 plugin: improved thread names handling (Jyrki Muukkonen, Mark Meyer) Added uwsgi_resolve_ip for redis host (ahmbas) plugins/gevent: Fix signal handlers (Maslov Alexander) Write x509 DER to the uwsgi buffer (Paul Tagliamonte) plugin/http: Fix compilation (Melvyn Sopacua) Fixed emperor throttling system (Jeremy Hiatt) Fix application loading without Plack after excluding “.” from @INC in new Perl versions (Anton Petrusevich) Fix MULE MSG QUEUE IS FULL message hint (Eugene Tataurov) Build System: support k_minor has a _xxx suffix (TOGO Li) Fixed drop-after-* options (Robert DeRose) Add mule_send_msg success indicator (Josh Tiras) Properly check item size in uwsgi_queue_push (Josh Tiras) FastRouter / HTTP Router can now have a ‘fallback’ key configured HTTP Router now supports post-buffer, just like FastRouter Fix handling of env in embedded dict in Python plugin (could cause segfaults in single thread mode) Add support for Brotli (.br) with –static-gzip Back-ported HTTP/1.1 support (–http11-socket) from 2.1
2018-02-13 09:34:03 +01:00
UWSGI_DEBUG= debug=false
Update to 2.0 (python-3.x compatible) based on the wip package by othyro. Changes: uWSGI 2.0 Changelog [20131230] Important changes Dynamic options have been definitely removed as well as the broken_plugins directory Bugfixes and improvements improved log rotation do not rely on unix signals to print request status during harakiri added magic vars for uid and gid various Lua fixes a tons of coverity-governed bugfixes made by Riccardo Magliocchetti New features --attach-daemon2 this is a keyval based option for configuring external daemons. Updated docs are: :doc:`AttachingDaemons` Linux setns() support One of the biggest improvements in uWSGI 1.9-2.0 has been the total support for Linux namespaces. This last patch adds support for the setns() syscall. This syscall allows a process to "attach" to a running namespace. uWSGI instances can exposes their namespaces file descriptors (basically they are the files in /proc/self/ns) via a unix socket. External instances connects to that unix socket and automatically enters the mapped namespace. to spawn an instance in "namespace server mode", you use the --setns-socket <addr> option uwsgi --setns-socket /var/run/ns.socket --unshare net,ipc,uts ... to attach you simply use --setns <addr> uwsgi --setns /var/run/ns.socket ... Updated docs: :doc:`Namespaces` "private" hooks When uWSGI runs your hooks, it verbosely print the whole hook action line. This could be a security problem in some scenario (for example when you run initial phases as root user but allows unprivileged access to logs). Prefixing your action with a '!' will suppress full logging: [uwsgi] hook-asap = !exec:my_secret_command Support for yajl library (JSON parser) Til now uWSGI only supported jansson as the json parser required for managing .js config files. You can now use the yajl library (available in centos) as alternative JSON parser (will be automatically detected) Perl spooler support The perl/PSGI plugin can now be used as a spooler server: uwsgi::spooler(sub { my $args = shift; print Dumper($args); return -2; }); The client part is still missing as we need to fix some internal api problem. Expect it in 2.0.1 ;) Gateways can drop privileges Gateways (like http router, sslrouter, rawrouter, forkptyrouter ...) can now drop privileges independently by the master. Currently only the http/https/spdy router exposes the new option (--http-uid/--http-gid) Subscriptions-governed SNI contexts The subscription subsystem now supports 3 additional keys (you can set them with the --subscribe2 option): sni_key sni_cert sni_ca all of the takes a path to the relevant ssl files.
2014-01-23 15:47:05 +01:00
.if !empty(PKG_OPTIONS:Mdebug)
py-uwsgi: updated to 2.0.16 uWSGI 2.0.16 Security [CVE-2018-6758] Stack-based buffer overflow in core/utils.c:uwsgi_expand_path() Changes Backported early_post_jail plugin hook (Bjørnar Ness) Fixed ipv6 suupport for http-socket (James Brown) Enable execinfo on DragonFly BSD (Aaron LI) Fix inet_ntop buffer size (Orivej Desh) Add worker running time metrics (Serge/yasek) Backported safe-pidfile, safe-pidfile2 (Nate Coraor) Stop using libxml2 by default on osx Fixed uwsgi_kvlist_parse signature Backport http range fixes from master (Curtis Maloney, Sokolov Yura) relicensed mod_proxy_uwsgi to Apache 2.0 logging: Add ${millis} support to json encode plugins/router_xmldir: fixup invalid locale check (Riccardo Magliocchetti) Add ssl-verify-depth flag to set the max Client CA chain length (Paul Tagliamonte) Allow to override build date (Bernhard M. Wiedemann) Python 3 plugin: improved thread names handling (Jyrki Muukkonen, Mark Meyer) Added uwsgi_resolve_ip for redis host (ahmbas) plugins/gevent: Fix signal handlers (Maslov Alexander) Write x509 DER to the uwsgi buffer (Paul Tagliamonte) plugin/http: Fix compilation (Melvyn Sopacua) Fixed emperor throttling system (Jeremy Hiatt) Fix application loading without Plack after excluding “.” from @INC in new Perl versions (Anton Petrusevich) Fix MULE MSG QUEUE IS FULL message hint (Eugene Tataurov) Build System: support k_minor has a _xxx suffix (TOGO Li) Fixed drop-after-* options (Robert DeRose) Add mule_send_msg success indicator (Josh Tiras) Properly check item size in uwsgi_queue_push (Josh Tiras) FastRouter / HTTP Router can now have a ‘fallback’ key configured HTTP Router now supports post-buffer, just like FastRouter Fix handling of env in embedded dict in Python plugin (could cause segfaults in single thread mode) Add support for Brotli (.br) with –static-gzip Back-ported HTTP/1.1 support (–http11-socket) from 2.1
2018-02-13 09:34:03 +01:00
UWSGI_DEBUG= debug=true
Update to 2.0 (python-3.x compatible) based on the wip package by othyro. Changes: uWSGI 2.0 Changelog [20131230] Important changes Dynamic options have been definitely removed as well as the broken_plugins directory Bugfixes and improvements improved log rotation do not rely on unix signals to print request status during harakiri added magic vars for uid and gid various Lua fixes a tons of coverity-governed bugfixes made by Riccardo Magliocchetti New features --attach-daemon2 this is a keyval based option for configuring external daemons. Updated docs are: :doc:`AttachingDaemons` Linux setns() support One of the biggest improvements in uWSGI 1.9-2.0 has been the total support for Linux namespaces. This last patch adds support for the setns() syscall. This syscall allows a process to "attach" to a running namespace. uWSGI instances can exposes their namespaces file descriptors (basically they are the files in /proc/self/ns) via a unix socket. External instances connects to that unix socket and automatically enters the mapped namespace. to spawn an instance in "namespace server mode", you use the --setns-socket <addr> option uwsgi --setns-socket /var/run/ns.socket --unshare net,ipc,uts ... to attach you simply use --setns <addr> uwsgi --setns /var/run/ns.socket ... Updated docs: :doc:`Namespaces` "private" hooks When uWSGI runs your hooks, it verbosely print the whole hook action line. This could be a security problem in some scenario (for example when you run initial phases as root user but allows unprivileged access to logs). Prefixing your action with a '!' will suppress full logging: [uwsgi] hook-asap = !exec:my_secret_command Support for yajl library (JSON parser) Til now uWSGI only supported jansson as the json parser required for managing .js config files. You can now use the yajl library (available in centos) as alternative JSON parser (will be automatically detected) Perl spooler support The perl/PSGI plugin can now be used as a spooler server: uwsgi::spooler(sub { my $args = shift; print Dumper($args); return -2; }); The client part is still missing as we need to fix some internal api problem. Expect it in 2.0.1 ;) Gateways can drop privileges Gateways (like http router, sslrouter, rawrouter, forkptyrouter ...) can now drop privileges independently by the master. Currently only the http/https/spdy router exposes the new option (--http-uid/--http-gid) Subscriptions-governed SNI contexts The subscription subsystem now supports 3 additional keys (you can set them with the --subscribe2 option): sni_key sni_cert sni_ca all of the takes a path to the relevant ssl files.
2014-01-23 15:47:05 +01:00
.endif
.if !empty(PKG_OPTIONS:Mexpat)
.include "../../textproc/expat/buildlink3.mk"
py-uwsgi: updated to 2.0.16 uWSGI 2.0.16 Security [CVE-2018-6758] Stack-based buffer overflow in core/utils.c:uwsgi_expand_path() Changes Backported early_post_jail plugin hook (Bjørnar Ness) Fixed ipv6 suupport for http-socket (James Brown) Enable execinfo on DragonFly BSD (Aaron LI) Fix inet_ntop buffer size (Orivej Desh) Add worker running time metrics (Serge/yasek) Backported safe-pidfile, safe-pidfile2 (Nate Coraor) Stop using libxml2 by default on osx Fixed uwsgi_kvlist_parse signature Backport http range fixes from master (Curtis Maloney, Sokolov Yura) relicensed mod_proxy_uwsgi to Apache 2.0 logging: Add ${millis} support to json encode plugins/router_xmldir: fixup invalid locale check (Riccardo Magliocchetti) Add ssl-verify-depth flag to set the max Client CA chain length (Paul Tagliamonte) Allow to override build date (Bernhard M. Wiedemann) Python 3 plugin: improved thread names handling (Jyrki Muukkonen, Mark Meyer) Added uwsgi_resolve_ip for redis host (ahmbas) plugins/gevent: Fix signal handlers (Maslov Alexander) Write x509 DER to the uwsgi buffer (Paul Tagliamonte) plugin/http: Fix compilation (Melvyn Sopacua) Fixed emperor throttling system (Jeremy Hiatt) Fix application loading without Plack after excluding “.” from @INC in new Perl versions (Anton Petrusevich) Fix MULE MSG QUEUE IS FULL message hint (Eugene Tataurov) Build System: support k_minor has a _xxx suffix (TOGO Li) Fixed drop-after-* options (Robert DeRose) Add mule_send_msg success indicator (Josh Tiras) Properly check item size in uwsgi_queue_push (Josh Tiras) FastRouter / HTTP Router can now have a ‘fallback’ key configured HTTP Router now supports post-buffer, just like FastRouter Fix handling of env in embedded dict in Python plugin (could cause segfaults in single thread mode) Add support for Brotli (.br) with –static-gzip Back-ported HTTP/1.1 support (–http11-socket) from 2.1
2018-02-13 09:34:03 +01:00
UWSGI_XML= xml=expat
Update to 2.0 (python-3.x compatible) based on the wip package by othyro. Changes: uWSGI 2.0 Changelog [20131230] Important changes Dynamic options have been definitely removed as well as the broken_plugins directory Bugfixes and improvements improved log rotation do not rely on unix signals to print request status during harakiri added magic vars for uid and gid various Lua fixes a tons of coverity-governed bugfixes made by Riccardo Magliocchetti New features --attach-daemon2 this is a keyval based option for configuring external daemons. Updated docs are: :doc:`AttachingDaemons` Linux setns() support One of the biggest improvements in uWSGI 1.9-2.0 has been the total support for Linux namespaces. This last patch adds support for the setns() syscall. This syscall allows a process to "attach" to a running namespace. uWSGI instances can exposes their namespaces file descriptors (basically they are the files in /proc/self/ns) via a unix socket. External instances connects to that unix socket and automatically enters the mapped namespace. to spawn an instance in "namespace server mode", you use the --setns-socket <addr> option uwsgi --setns-socket /var/run/ns.socket --unshare net,ipc,uts ... to attach you simply use --setns <addr> uwsgi --setns /var/run/ns.socket ... Updated docs: :doc:`Namespaces` "private" hooks When uWSGI runs your hooks, it verbosely print the whole hook action line. This could be a security problem in some scenario (for example when you run initial phases as root user but allows unprivileged access to logs). Prefixing your action with a '!' will suppress full logging: [uwsgi] hook-asap = !exec:my_secret_command Support for yajl library (JSON parser) Til now uWSGI only supported jansson as the json parser required for managing .js config files. You can now use the yajl library (available in centos) as alternative JSON parser (will be automatically detected) Perl spooler support The perl/PSGI plugin can now be used as a spooler server: uwsgi::spooler(sub { my $args = shift; print Dumper($args); return -2; }); The client part is still missing as we need to fix some internal api problem. Expect it in 2.0.1 ;) Gateways can drop privileges Gateways (like http router, sslrouter, rawrouter, forkptyrouter ...) can now drop privileges independently by the master. Currently only the http/https/spdy router exposes the new option (--http-uid/--http-gid) Subscriptions-governed SNI contexts The subscription subsystem now supports 3 additional keys (you can set them with the --subscribe2 option): sni_key sni_cert sni_ca all of the takes a path to the relevant ssl files.
2014-01-23 15:47:05 +01:00
.elif !empty(PKG_OPTIONS:Mlibxml2)
.include "../../textproc/libxml2/buildlink3.mk"
py-uwsgi: updated to 2.0.16 uWSGI 2.0.16 Security [CVE-2018-6758] Stack-based buffer overflow in core/utils.c:uwsgi_expand_path() Changes Backported early_post_jail plugin hook (Bjørnar Ness) Fixed ipv6 suupport for http-socket (James Brown) Enable execinfo on DragonFly BSD (Aaron LI) Fix inet_ntop buffer size (Orivej Desh) Add worker running time metrics (Serge/yasek) Backported safe-pidfile, safe-pidfile2 (Nate Coraor) Stop using libxml2 by default on osx Fixed uwsgi_kvlist_parse signature Backport http range fixes from master (Curtis Maloney, Sokolov Yura) relicensed mod_proxy_uwsgi to Apache 2.0 logging: Add ${millis} support to json encode plugins/router_xmldir: fixup invalid locale check (Riccardo Magliocchetti) Add ssl-verify-depth flag to set the max Client CA chain length (Paul Tagliamonte) Allow to override build date (Bernhard M. Wiedemann) Python 3 plugin: improved thread names handling (Jyrki Muukkonen, Mark Meyer) Added uwsgi_resolve_ip for redis host (ahmbas) plugins/gevent: Fix signal handlers (Maslov Alexander) Write x509 DER to the uwsgi buffer (Paul Tagliamonte) plugin/http: Fix compilation (Melvyn Sopacua) Fixed emperor throttling system (Jeremy Hiatt) Fix application loading without Plack after excluding “.” from @INC in new Perl versions (Anton Petrusevich) Fix MULE MSG QUEUE IS FULL message hint (Eugene Tataurov) Build System: support k_minor has a _xxx suffix (TOGO Li) Fixed drop-after-* options (Robert DeRose) Add mule_send_msg success indicator (Josh Tiras) Properly check item size in uwsgi_queue_push (Josh Tiras) FastRouter / HTTP Router can now have a ‘fallback’ key configured HTTP Router now supports post-buffer, just like FastRouter Fix handling of env in embedded dict in Python plugin (could cause segfaults in single thread mode) Add support for Brotli (.br) with –static-gzip Back-ported HTTP/1.1 support (–http11-socket) from 2.1
2018-02-13 09:34:03 +01:00
UWSGI_XML= xml=libxml2
Update to 2.0 (python-3.x compatible) based on the wip package by othyro. Changes: uWSGI 2.0 Changelog [20131230] Important changes Dynamic options have been definitely removed as well as the broken_plugins directory Bugfixes and improvements improved log rotation do not rely on unix signals to print request status during harakiri added magic vars for uid and gid various Lua fixes a tons of coverity-governed bugfixes made by Riccardo Magliocchetti New features --attach-daemon2 this is a keyval based option for configuring external daemons. Updated docs are: :doc:`AttachingDaemons` Linux setns() support One of the biggest improvements in uWSGI 1.9-2.0 has been the total support for Linux namespaces. This last patch adds support for the setns() syscall. This syscall allows a process to "attach" to a running namespace. uWSGI instances can exposes their namespaces file descriptors (basically they are the files in /proc/self/ns) via a unix socket. External instances connects to that unix socket and automatically enters the mapped namespace. to spawn an instance in "namespace server mode", you use the --setns-socket <addr> option uwsgi --setns-socket /var/run/ns.socket --unshare net,ipc,uts ... to attach you simply use --setns <addr> uwsgi --setns /var/run/ns.socket ... Updated docs: :doc:`Namespaces` "private" hooks When uWSGI runs your hooks, it verbosely print the whole hook action line. This could be a security problem in some scenario (for example when you run initial phases as root user but allows unprivileged access to logs). Prefixing your action with a '!' will suppress full logging: [uwsgi] hook-asap = !exec:my_secret_command Support for yajl library (JSON parser) Til now uWSGI only supported jansson as the json parser required for managing .js config files. You can now use the yajl library (available in centos) as alternative JSON parser (will be automatically detected) Perl spooler support The perl/PSGI plugin can now be used as a spooler server: uwsgi::spooler(sub { my $args = shift; print Dumper($args); return -2; }); The client part is still missing as we need to fix some internal api problem. Expect it in 2.0.1 ;) Gateways can drop privileges Gateways (like http router, sslrouter, rawrouter, forkptyrouter ...) can now drop privileges independently by the master. Currently only the http/https/spdy router exposes the new option (--http-uid/--http-gid) Subscriptions-governed SNI contexts The subscription subsystem now supports 3 additional keys (you can set them with the --subscribe2 option): sni_key sni_cert sni_ca all of the takes a path to the relevant ssl files.
2014-01-23 15:47:05 +01:00
.else
py-uwsgi: updated to 2.0.16 uWSGI 2.0.16 Security [CVE-2018-6758] Stack-based buffer overflow in core/utils.c:uwsgi_expand_path() Changes Backported early_post_jail plugin hook (Bjørnar Ness) Fixed ipv6 suupport for http-socket (James Brown) Enable execinfo on DragonFly BSD (Aaron LI) Fix inet_ntop buffer size (Orivej Desh) Add worker running time metrics (Serge/yasek) Backported safe-pidfile, safe-pidfile2 (Nate Coraor) Stop using libxml2 by default on osx Fixed uwsgi_kvlist_parse signature Backport http range fixes from master (Curtis Maloney, Sokolov Yura) relicensed mod_proxy_uwsgi to Apache 2.0 logging: Add ${millis} support to json encode plugins/router_xmldir: fixup invalid locale check (Riccardo Magliocchetti) Add ssl-verify-depth flag to set the max Client CA chain length (Paul Tagliamonte) Allow to override build date (Bernhard M. Wiedemann) Python 3 plugin: improved thread names handling (Jyrki Muukkonen, Mark Meyer) Added uwsgi_resolve_ip for redis host (ahmbas) plugins/gevent: Fix signal handlers (Maslov Alexander) Write x509 DER to the uwsgi buffer (Paul Tagliamonte) plugin/http: Fix compilation (Melvyn Sopacua) Fixed emperor throttling system (Jeremy Hiatt) Fix application loading without Plack after excluding “.” from @INC in new Perl versions (Anton Petrusevich) Fix MULE MSG QUEUE IS FULL message hint (Eugene Tataurov) Build System: support k_minor has a _xxx suffix (TOGO Li) Fixed drop-after-* options (Robert DeRose) Add mule_send_msg success indicator (Josh Tiras) Properly check item size in uwsgi_queue_push (Josh Tiras) FastRouter / HTTP Router can now have a ‘fallback’ key configured HTTP Router now supports post-buffer, just like FastRouter Fix handling of env in embedded dict in Python plugin (could cause segfaults in single thread mode) Add support for Brotli (.br) with –static-gzip Back-ported HTTP/1.1 support (–http11-socket) from 2.1
2018-02-13 09:34:03 +01:00
UWSGI_XML= xml=false
Update to 2.0 (python-3.x compatible) based on the wip package by othyro. Changes: uWSGI 2.0 Changelog [20131230] Important changes Dynamic options have been definitely removed as well as the broken_plugins directory Bugfixes and improvements improved log rotation do not rely on unix signals to print request status during harakiri added magic vars for uid and gid various Lua fixes a tons of coverity-governed bugfixes made by Riccardo Magliocchetti New features --attach-daemon2 this is a keyval based option for configuring external daemons. Updated docs are: :doc:`AttachingDaemons` Linux setns() support One of the biggest improvements in uWSGI 1.9-2.0 has been the total support for Linux namespaces. This last patch adds support for the setns() syscall. This syscall allows a process to "attach" to a running namespace. uWSGI instances can exposes their namespaces file descriptors (basically they are the files in /proc/self/ns) via a unix socket. External instances connects to that unix socket and automatically enters the mapped namespace. to spawn an instance in "namespace server mode", you use the --setns-socket <addr> option uwsgi --setns-socket /var/run/ns.socket --unshare net,ipc,uts ... to attach you simply use --setns <addr> uwsgi --setns /var/run/ns.socket ... Updated docs: :doc:`Namespaces` "private" hooks When uWSGI runs your hooks, it verbosely print the whole hook action line. This could be a security problem in some scenario (for example when you run initial phases as root user but allows unprivileged access to logs). Prefixing your action with a '!' will suppress full logging: [uwsgi] hook-asap = !exec:my_secret_command Support for yajl library (JSON parser) Til now uWSGI only supported jansson as the json parser required for managing .js config files. You can now use the yajl library (available in centos) as alternative JSON parser (will be automatically detected) Perl spooler support The perl/PSGI plugin can now be used as a spooler server: uwsgi::spooler(sub { my $args = shift; print Dumper($args); return -2; }); The client part is still missing as we need to fix some internal api problem. Expect it in 2.0.1 ;) Gateways can drop privileges Gateways (like http router, sslrouter, rawrouter, forkptyrouter ...) can now drop privileges independently by the master. Currently only the http/https/spdy router exposes the new option (--http-uid/--http-gid) Subscriptions-governed SNI contexts The subscription subsystem now supports 3 additional keys (you can set them with the --subscribe2 option): sni_key sni_cert sni_ca all of the takes a path to the relevant ssl files.
2014-01-23 15:47:05 +01:00
.endif
.if !empty(PKG_OPTIONS:Mjansson)
.include "../../textproc/jansson/buildlink3.mk"
py-uwsgi: updated to 2.0.16 uWSGI 2.0.16 Security [CVE-2018-6758] Stack-based buffer overflow in core/utils.c:uwsgi_expand_path() Changes Backported early_post_jail plugin hook (Bjørnar Ness) Fixed ipv6 suupport for http-socket (James Brown) Enable execinfo on DragonFly BSD (Aaron LI) Fix inet_ntop buffer size (Orivej Desh) Add worker running time metrics (Serge/yasek) Backported safe-pidfile, safe-pidfile2 (Nate Coraor) Stop using libxml2 by default on osx Fixed uwsgi_kvlist_parse signature Backport http range fixes from master (Curtis Maloney, Sokolov Yura) relicensed mod_proxy_uwsgi to Apache 2.0 logging: Add ${millis} support to json encode plugins/router_xmldir: fixup invalid locale check (Riccardo Magliocchetti) Add ssl-verify-depth flag to set the max Client CA chain length (Paul Tagliamonte) Allow to override build date (Bernhard M. Wiedemann) Python 3 plugin: improved thread names handling (Jyrki Muukkonen, Mark Meyer) Added uwsgi_resolve_ip for redis host (ahmbas) plugins/gevent: Fix signal handlers (Maslov Alexander) Write x509 DER to the uwsgi buffer (Paul Tagliamonte) plugin/http: Fix compilation (Melvyn Sopacua) Fixed emperor throttling system (Jeremy Hiatt) Fix application loading without Plack after excluding “.” from @INC in new Perl versions (Anton Petrusevich) Fix MULE MSG QUEUE IS FULL message hint (Eugene Tataurov) Build System: support k_minor has a _xxx suffix (TOGO Li) Fixed drop-after-* options (Robert DeRose) Add mule_send_msg success indicator (Josh Tiras) Properly check item size in uwsgi_queue_push (Josh Tiras) FastRouter / HTTP Router can now have a ‘fallback’ key configured HTTP Router now supports post-buffer, just like FastRouter Fix handling of env in embedded dict in Python plugin (could cause segfaults in single thread mode) Add support for Brotli (.br) with –static-gzip Back-ported HTTP/1.1 support (–http11-socket) from 2.1
2018-02-13 09:34:03 +01:00
UWSGI_JSON= json=jansson
Update to 2.0 (python-3.x compatible) based on the wip package by othyro. Changes: uWSGI 2.0 Changelog [20131230] Important changes Dynamic options have been definitely removed as well as the broken_plugins directory Bugfixes and improvements improved log rotation do not rely on unix signals to print request status during harakiri added magic vars for uid and gid various Lua fixes a tons of coverity-governed bugfixes made by Riccardo Magliocchetti New features --attach-daemon2 this is a keyval based option for configuring external daemons. Updated docs are: :doc:`AttachingDaemons` Linux setns() support One of the biggest improvements in uWSGI 1.9-2.0 has been the total support for Linux namespaces. This last patch adds support for the setns() syscall. This syscall allows a process to "attach" to a running namespace. uWSGI instances can exposes their namespaces file descriptors (basically they are the files in /proc/self/ns) via a unix socket. External instances connects to that unix socket and automatically enters the mapped namespace. to spawn an instance in "namespace server mode", you use the --setns-socket <addr> option uwsgi --setns-socket /var/run/ns.socket --unshare net,ipc,uts ... to attach you simply use --setns <addr> uwsgi --setns /var/run/ns.socket ... Updated docs: :doc:`Namespaces` "private" hooks When uWSGI runs your hooks, it verbosely print the whole hook action line. This could be a security problem in some scenario (for example when you run initial phases as root user but allows unprivileged access to logs). Prefixing your action with a '!' will suppress full logging: [uwsgi] hook-asap = !exec:my_secret_command Support for yajl library (JSON parser) Til now uWSGI only supported jansson as the json parser required for managing .js config files. You can now use the yajl library (available in centos) as alternative JSON parser (will be automatically detected) Perl spooler support The perl/PSGI plugin can now be used as a spooler server: uwsgi::spooler(sub { my $args = shift; print Dumper($args); return -2; }); The client part is still missing as we need to fix some internal api problem. Expect it in 2.0.1 ;) Gateways can drop privileges Gateways (like http router, sslrouter, rawrouter, forkptyrouter ...) can now drop privileges independently by the master. Currently only the http/https/spdy router exposes the new option (--http-uid/--http-gid) Subscriptions-governed SNI contexts The subscription subsystem now supports 3 additional keys (you can set them with the --subscribe2 option): sni_key sni_cert sni_ca all of the takes a path to the relevant ssl files.
2014-01-23 15:47:05 +01:00
.elif !empty(PKG_OPTIONS:Myajl)
.include "../../devel/yajl/buildlink3.mk"
py-uwsgi: updated to 2.0.16 uWSGI 2.0.16 Security [CVE-2018-6758] Stack-based buffer overflow in core/utils.c:uwsgi_expand_path() Changes Backported early_post_jail plugin hook (Bjørnar Ness) Fixed ipv6 suupport for http-socket (James Brown) Enable execinfo on DragonFly BSD (Aaron LI) Fix inet_ntop buffer size (Orivej Desh) Add worker running time metrics (Serge/yasek) Backported safe-pidfile, safe-pidfile2 (Nate Coraor) Stop using libxml2 by default on osx Fixed uwsgi_kvlist_parse signature Backport http range fixes from master (Curtis Maloney, Sokolov Yura) relicensed mod_proxy_uwsgi to Apache 2.0 logging: Add ${millis} support to json encode plugins/router_xmldir: fixup invalid locale check (Riccardo Magliocchetti) Add ssl-verify-depth flag to set the max Client CA chain length (Paul Tagliamonte) Allow to override build date (Bernhard M. Wiedemann) Python 3 plugin: improved thread names handling (Jyrki Muukkonen, Mark Meyer) Added uwsgi_resolve_ip for redis host (ahmbas) plugins/gevent: Fix signal handlers (Maslov Alexander) Write x509 DER to the uwsgi buffer (Paul Tagliamonte) plugin/http: Fix compilation (Melvyn Sopacua) Fixed emperor throttling system (Jeremy Hiatt) Fix application loading without Plack after excluding “.” from @INC in new Perl versions (Anton Petrusevich) Fix MULE MSG QUEUE IS FULL message hint (Eugene Tataurov) Build System: support k_minor has a _xxx suffix (TOGO Li) Fixed drop-after-* options (Robert DeRose) Add mule_send_msg success indicator (Josh Tiras) Properly check item size in uwsgi_queue_push (Josh Tiras) FastRouter / HTTP Router can now have a ‘fallback’ key configured HTTP Router now supports post-buffer, just like FastRouter Fix handling of env in embedded dict in Python plugin (could cause segfaults in single thread mode) Add support for Brotli (.br) with –static-gzip Back-ported HTTP/1.1 support (–http11-socket) from 2.1
2018-02-13 09:34:03 +01:00
UWSGI_JSON= json=yajl
Update to 2.0 (python-3.x compatible) based on the wip package by othyro. Changes: uWSGI 2.0 Changelog [20131230] Important changes Dynamic options have been definitely removed as well as the broken_plugins directory Bugfixes and improvements improved log rotation do not rely on unix signals to print request status during harakiri added magic vars for uid and gid various Lua fixes a tons of coverity-governed bugfixes made by Riccardo Magliocchetti New features --attach-daemon2 this is a keyval based option for configuring external daemons. Updated docs are: :doc:`AttachingDaemons` Linux setns() support One of the biggest improvements in uWSGI 1.9-2.0 has been the total support for Linux namespaces. This last patch adds support for the setns() syscall. This syscall allows a process to "attach" to a running namespace. uWSGI instances can exposes their namespaces file descriptors (basically they are the files in /proc/self/ns) via a unix socket. External instances connects to that unix socket and automatically enters the mapped namespace. to spawn an instance in "namespace server mode", you use the --setns-socket <addr> option uwsgi --setns-socket /var/run/ns.socket --unshare net,ipc,uts ... to attach you simply use --setns <addr> uwsgi --setns /var/run/ns.socket ... Updated docs: :doc:`Namespaces` "private" hooks When uWSGI runs your hooks, it verbosely print the whole hook action line. This could be a security problem in some scenario (for example when you run initial phases as root user but allows unprivileged access to logs). Prefixing your action with a '!' will suppress full logging: [uwsgi] hook-asap = !exec:my_secret_command Support for yajl library (JSON parser) Til now uWSGI only supported jansson as the json parser required for managing .js config files. You can now use the yajl library (available in centos) as alternative JSON parser (will be automatically detected) Perl spooler support The perl/PSGI plugin can now be used as a spooler server: uwsgi::spooler(sub { my $args = shift; print Dumper($args); return -2; }); The client part is still missing as we need to fix some internal api problem. Expect it in 2.0.1 ;) Gateways can drop privileges Gateways (like http router, sslrouter, rawrouter, forkptyrouter ...) can now drop privileges independently by the master. Currently only the http/https/spdy router exposes the new option (--http-uid/--http-gid) Subscriptions-governed SNI contexts The subscription subsystem now supports 3 additional keys (you can set them with the --subscribe2 option): sni_key sni_cert sni_ca all of the takes a path to the relevant ssl files.
2014-01-23 15:47:05 +01:00
BROKEN= The yajl option requires a yajl.pc file which that package doesn't have.
.else
py-uwsgi: updated to 2.0.16 uWSGI 2.0.16 Security [CVE-2018-6758] Stack-based buffer overflow in core/utils.c:uwsgi_expand_path() Changes Backported early_post_jail plugin hook (Bjørnar Ness) Fixed ipv6 suupport for http-socket (James Brown) Enable execinfo on DragonFly BSD (Aaron LI) Fix inet_ntop buffer size (Orivej Desh) Add worker running time metrics (Serge/yasek) Backported safe-pidfile, safe-pidfile2 (Nate Coraor) Stop using libxml2 by default on osx Fixed uwsgi_kvlist_parse signature Backport http range fixes from master (Curtis Maloney, Sokolov Yura) relicensed mod_proxy_uwsgi to Apache 2.0 logging: Add ${millis} support to json encode plugins/router_xmldir: fixup invalid locale check (Riccardo Magliocchetti) Add ssl-verify-depth flag to set the max Client CA chain length (Paul Tagliamonte) Allow to override build date (Bernhard M. Wiedemann) Python 3 plugin: improved thread names handling (Jyrki Muukkonen, Mark Meyer) Added uwsgi_resolve_ip for redis host (ahmbas) plugins/gevent: Fix signal handlers (Maslov Alexander) Write x509 DER to the uwsgi buffer (Paul Tagliamonte) plugin/http: Fix compilation (Melvyn Sopacua) Fixed emperor throttling system (Jeremy Hiatt) Fix application loading without Plack after excluding “.” from @INC in new Perl versions (Anton Petrusevich) Fix MULE MSG QUEUE IS FULL message hint (Eugene Tataurov) Build System: support k_minor has a _xxx suffix (TOGO Li) Fixed drop-after-* options (Robert DeRose) Add mule_send_msg success indicator (Josh Tiras) Properly check item size in uwsgi_queue_push (Josh Tiras) FastRouter / HTTP Router can now have a ‘fallback’ key configured HTTP Router now supports post-buffer, just like FastRouter Fix handling of env in embedded dict in Python plugin (could cause segfaults in single thread mode) Add support for Brotli (.br) with –static-gzip Back-ported HTTP/1.1 support (–http11-socket) from 2.1
2018-02-13 09:34:03 +01:00
UWSGI_JSON= json=false
Update to 2.0 (python-3.x compatible) based on the wip package by othyro. Changes: uWSGI 2.0 Changelog [20131230] Important changes Dynamic options have been definitely removed as well as the broken_plugins directory Bugfixes and improvements improved log rotation do not rely on unix signals to print request status during harakiri added magic vars for uid and gid various Lua fixes a tons of coverity-governed bugfixes made by Riccardo Magliocchetti New features --attach-daemon2 this is a keyval based option for configuring external daemons. Updated docs are: :doc:`AttachingDaemons` Linux setns() support One of the biggest improvements in uWSGI 1.9-2.0 has been the total support for Linux namespaces. This last patch adds support for the setns() syscall. This syscall allows a process to "attach" to a running namespace. uWSGI instances can exposes their namespaces file descriptors (basically they are the files in /proc/self/ns) via a unix socket. External instances connects to that unix socket and automatically enters the mapped namespace. to spawn an instance in "namespace server mode", you use the --setns-socket <addr> option uwsgi --setns-socket /var/run/ns.socket --unshare net,ipc,uts ... to attach you simply use --setns <addr> uwsgi --setns /var/run/ns.socket ... Updated docs: :doc:`Namespaces` "private" hooks When uWSGI runs your hooks, it verbosely print the whole hook action line. This could be a security problem in some scenario (for example when you run initial phases as root user but allows unprivileged access to logs). Prefixing your action with a '!' will suppress full logging: [uwsgi] hook-asap = !exec:my_secret_command Support for yajl library (JSON parser) Til now uWSGI only supported jansson as the json parser required for managing .js config files. You can now use the yajl library (available in centos) as alternative JSON parser (will be automatically detected) Perl spooler support The perl/PSGI plugin can now be used as a spooler server: uwsgi::spooler(sub { my $args = shift; print Dumper($args); return -2; }); The client part is still missing as we need to fix some internal api problem. Expect it in 2.0.1 ;) Gateways can drop privileges Gateways (like http router, sslrouter, rawrouter, forkptyrouter ...) can now drop privileges independently by the master. Currently only the http/https/spdy router exposes the new option (--http-uid/--http-gid) Subscriptions-governed SNI contexts The subscription subsystem now supports 3 additional keys (you can set them with the --subscribe2 option): sni_key sni_cert sni_ca all of the takes a path to the relevant ssl files.
2014-01-23 15:47:05 +01:00
.endif
Unbreak the option handling. Restore openssl and PCRE option.
2018-03-17 00:39:54 +01:00
.if !empty(PKG_OPTIONS:Mopenssl)
.include "../../security/openssl/buildlink3.mk"
UWSGI_SSL= ssl=true
.else
UWSGI_SSL= ssl=false
.endif
.if !empty(PKG_OPTIONS:Mpcre)
.include "../../devel/pcre/buildlink3.mk"
UWSGI_PCRE= pcre=true
.else
UWSGI_PCRE= pcre=false
.endif
Update to 2.0 (python-3.x compatible) based on the wip package by othyro. Changes: uWSGI 2.0 Changelog [20131230] Important changes Dynamic options have been definitely removed as well as the broken_plugins directory Bugfixes and improvements improved log rotation do not rely on unix signals to print request status during harakiri added magic vars for uid and gid various Lua fixes a tons of coverity-governed bugfixes made by Riccardo Magliocchetti New features --attach-daemon2 this is a keyval based option for configuring external daemons. Updated docs are: :doc:`AttachingDaemons` Linux setns() support One of the biggest improvements in uWSGI 1.9-2.0 has been the total support for Linux namespaces. This last patch adds support for the setns() syscall. This syscall allows a process to "attach" to a running namespace. uWSGI instances can exposes their namespaces file descriptors (basically they are the files in /proc/self/ns) via a unix socket. External instances connects to that unix socket and automatically enters the mapped namespace. to spawn an instance in "namespace server mode", you use the --setns-socket <addr> option uwsgi --setns-socket /var/run/ns.socket --unshare net,ipc,uts ... to attach you simply use --setns <addr> uwsgi --setns /var/run/ns.socket ... Updated docs: :doc:`Namespaces` "private" hooks When uWSGI runs your hooks, it verbosely print the whole hook action line. This could be a security problem in some scenario (for example when you run initial phases as root user but allows unprivileged access to logs). Prefixing your action with a '!' will suppress full logging: [uwsgi] hook-asap = !exec:my_secret_command Support for yajl library (JSON parser) Til now uWSGI only supported jansson as the json parser required for managing .js config files. You can now use the yajl library (available in centos) as alternative JSON parser (will be automatically detected) Perl spooler support The perl/PSGI plugin can now be used as a spooler server: uwsgi::spooler(sub { my $args = shift; print Dumper($args); return -2; }); The client part is still missing as we need to fix some internal api problem. Expect it in 2.0.1 ;) Gateways can drop privileges Gateways (like http router, sslrouter, rawrouter, forkptyrouter ...) can now drop privileges independently by the master. Currently only the http/https/spdy router exposes the new option (--http-uid/--http-gid) Subscriptions-governed SNI contexts The subscription subsystem now supports 3 additional keys (you can set them with the --subscribe2 option): sni_key sni_cert sni_ca all of the takes a path to the relevant ssl files.
2014-01-23 15:47:05 +01:00
.if !empty(PKG_OPTIONS:Muuid)
.include "../../devel/libuuid/buildlink3.mk"
py-uwsgi: updated to 2.0.16 uWSGI 2.0.16 Security [CVE-2018-6758] Stack-based buffer overflow in core/utils.c:uwsgi_expand_path() Changes Backported early_post_jail plugin hook (Bjørnar Ness) Fixed ipv6 suupport for http-socket (James Brown) Enable execinfo on DragonFly BSD (Aaron LI) Fix inet_ntop buffer size (Orivej Desh) Add worker running time metrics (Serge/yasek) Backported safe-pidfile, safe-pidfile2 (Nate Coraor) Stop using libxml2 by default on osx Fixed uwsgi_kvlist_parse signature Backport http range fixes from master (Curtis Maloney, Sokolov Yura) relicensed mod_proxy_uwsgi to Apache 2.0 logging: Add ${millis} support to json encode plugins/router_xmldir: fixup invalid locale check (Riccardo Magliocchetti) Add ssl-verify-depth flag to set the max Client CA chain length (Paul Tagliamonte) Allow to override build date (Bernhard M. Wiedemann) Python 3 plugin: improved thread names handling (Jyrki Muukkonen, Mark Meyer) Added uwsgi_resolve_ip for redis host (ahmbas) plugins/gevent: Fix signal handlers (Maslov Alexander) Write x509 DER to the uwsgi buffer (Paul Tagliamonte) plugin/http: Fix compilation (Melvyn Sopacua) Fixed emperor throttling system (Jeremy Hiatt) Fix application loading without Plack after excluding “.” from @INC in new Perl versions (Anton Petrusevich) Fix MULE MSG QUEUE IS FULL message hint (Eugene Tataurov) Build System: support k_minor has a _xxx suffix (TOGO Li) Fixed drop-after-* options (Robert DeRose) Add mule_send_msg success indicator (Josh Tiras) Properly check item size in uwsgi_queue_push (Josh Tiras) FastRouter / HTTP Router can now have a ‘fallback’ key configured HTTP Router now supports post-buffer, just like FastRouter Fix handling of env in embedded dict in Python plugin (could cause segfaults in single thread mode) Add support for Brotli (.br) with –static-gzip Back-ported HTTP/1.1 support (–http11-socket) from 2.1
2018-02-13 09:34:03 +01:00
UWSGI_UUID= uuid=true
Update to 2.0 (python-3.x compatible) based on the wip package by othyro. Changes: uWSGI 2.0 Changelog [20131230] Important changes Dynamic options have been definitely removed as well as the broken_plugins directory Bugfixes and improvements improved log rotation do not rely on unix signals to print request status during harakiri added magic vars for uid and gid various Lua fixes a tons of coverity-governed bugfixes made by Riccardo Magliocchetti New features --attach-daemon2 this is a keyval based option for configuring external daemons. Updated docs are: :doc:`AttachingDaemons` Linux setns() support One of the biggest improvements in uWSGI 1.9-2.0 has been the total support for Linux namespaces. This last patch adds support for the setns() syscall. This syscall allows a process to "attach" to a running namespace. uWSGI instances can exposes their namespaces file descriptors (basically they are the files in /proc/self/ns) via a unix socket. External instances connects to that unix socket and automatically enters the mapped namespace. to spawn an instance in "namespace server mode", you use the --setns-socket <addr> option uwsgi --setns-socket /var/run/ns.socket --unshare net,ipc,uts ... to attach you simply use --setns <addr> uwsgi --setns /var/run/ns.socket ... Updated docs: :doc:`Namespaces` "private" hooks When uWSGI runs your hooks, it verbosely print the whole hook action line. This could be a security problem in some scenario (for example when you run initial phases as root user but allows unprivileged access to logs). Prefixing your action with a '!' will suppress full logging: [uwsgi] hook-asap = !exec:my_secret_command Support for yajl library (JSON parser) Til now uWSGI only supported jansson as the json parser required for managing .js config files. You can now use the yajl library (available in centos) as alternative JSON parser (will be automatically detected) Perl spooler support The perl/PSGI plugin can now be used as a spooler server: uwsgi::spooler(sub { my $args = shift; print Dumper($args); return -2; }); The client part is still missing as we need to fix some internal api problem. Expect it in 2.0.1 ;) Gateways can drop privileges Gateways (like http router, sslrouter, rawrouter, forkptyrouter ...) can now drop privileges independently by the master. Currently only the http/https/spdy router exposes the new option (--http-uid/--http-gid) Subscriptions-governed SNI contexts The subscription subsystem now supports 3 additional keys (you can set them with the --subscribe2 option): sni_key sni_cert sni_ca all of the takes a path to the relevant ssl files.
2014-01-23 15:47:05 +01:00
.else
py-uwsgi: updated to 2.0.16 uWSGI 2.0.16 Security [CVE-2018-6758] Stack-based buffer overflow in core/utils.c:uwsgi_expand_path() Changes Backported early_post_jail plugin hook (Bjørnar Ness) Fixed ipv6 suupport for http-socket (James Brown) Enable execinfo on DragonFly BSD (Aaron LI) Fix inet_ntop buffer size (Orivej Desh) Add worker running time metrics (Serge/yasek) Backported safe-pidfile, safe-pidfile2 (Nate Coraor) Stop using libxml2 by default on osx Fixed uwsgi_kvlist_parse signature Backport http range fixes from master (Curtis Maloney, Sokolov Yura) relicensed mod_proxy_uwsgi to Apache 2.0 logging: Add ${millis} support to json encode plugins/router_xmldir: fixup invalid locale check (Riccardo Magliocchetti) Add ssl-verify-depth flag to set the max Client CA chain length (Paul Tagliamonte) Allow to override build date (Bernhard M. Wiedemann) Python 3 plugin: improved thread names handling (Jyrki Muukkonen, Mark Meyer) Added uwsgi_resolve_ip for redis host (ahmbas) plugins/gevent: Fix signal handlers (Maslov Alexander) Write x509 DER to the uwsgi buffer (Paul Tagliamonte) plugin/http: Fix compilation (Melvyn Sopacua) Fixed emperor throttling system (Jeremy Hiatt) Fix application loading without Plack after excluding “.” from @INC in new Perl versions (Anton Petrusevich) Fix MULE MSG QUEUE IS FULL message hint (Eugene Tataurov) Build System: support k_minor has a _xxx suffix (TOGO Li) Fixed drop-after-* options (Robert DeRose) Add mule_send_msg success indicator (Josh Tiras) Properly check item size in uwsgi_queue_push (Josh Tiras) FastRouter / HTTP Router can now have a ‘fallback’ key configured HTTP Router now supports post-buffer, just like FastRouter Fix handling of env in embedded dict in Python plugin (could cause segfaults in single thread mode) Add support for Brotli (.br) with –static-gzip Back-ported HTTP/1.1 support (–http11-socket) from 2.1
2018-02-13 09:34:03 +01:00
UWSGI_UUID= uuid=false
Update to 2.0 (python-3.x compatible) based on the wip package by othyro. Changes: uWSGI 2.0 Changelog [20131230] Important changes Dynamic options have been definitely removed as well as the broken_plugins directory Bugfixes and improvements improved log rotation do not rely on unix signals to print request status during harakiri added magic vars for uid and gid various Lua fixes a tons of coverity-governed bugfixes made by Riccardo Magliocchetti New features --attach-daemon2 this is a keyval based option for configuring external daemons. Updated docs are: :doc:`AttachingDaemons` Linux setns() support One of the biggest improvements in uWSGI 1.9-2.0 has been the total support for Linux namespaces. This last patch adds support for the setns() syscall. This syscall allows a process to "attach" to a running namespace. uWSGI instances can exposes their namespaces file descriptors (basically they are the files in /proc/self/ns) via a unix socket. External instances connects to that unix socket and automatically enters the mapped namespace. to spawn an instance in "namespace server mode", you use the --setns-socket <addr> option uwsgi --setns-socket /var/run/ns.socket --unshare net,ipc,uts ... to attach you simply use --setns <addr> uwsgi --setns /var/run/ns.socket ... Updated docs: :doc:`Namespaces` "private" hooks When uWSGI runs your hooks, it verbosely print the whole hook action line. This could be a security problem in some scenario (for example when you run initial phases as root user but allows unprivileged access to logs). Prefixing your action with a '!' will suppress full logging: [uwsgi] hook-asap = !exec:my_secret_command Support for yajl library (JSON parser) Til now uWSGI only supported jansson as the json parser required for managing .js config files. You can now use the yajl library (available in centos) as alternative JSON parser (will be automatically detected) Perl spooler support The perl/PSGI plugin can now be used as a spooler server: uwsgi::spooler(sub { my $args = shift; print Dumper($args); return -2; }); The client part is still missing as we need to fix some internal api problem. Expect it in 2.0.1 ;) Gateways can drop privileges Gateways (like http router, sslrouter, rawrouter, forkptyrouter ...) can now drop privileges independently by the master. Currently only the http/https/spdy router exposes the new option (--http-uid/--http-gid) Subscriptions-governed SNI contexts The subscription subsystem now supports 3 additional keys (you can set them with the --subscribe2 option): sni_key sni_cert sni_ca all of the takes a path to the relevant ssl files.
2014-01-23 15:47:05 +01:00
.endif
.if !empty(PKG_OPTIONS:Myaml)
.include "../../textproc/libyaml/buildlink3.mk"
UWSGI_YAML= yaml=true
.else
UWSGI_YAML= yaml=false
.endif
Reference in a new issue Copy permalink