tor.spec.in 12 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272273274275276277278279280281282283284285286287288289290291292293294295296297298299300301302303304305306307308309310311312313314315316317318319320321322323324325326327328329330331332333334335336337338339340341342
  1. ## NOTE: tor.spec is autogenerated from tor.spec.in . Edit the latter,
  2. ## not the former.
  3. ## Things that need to be edited frequently
  4. #
  5. # This should be incremented whenever the spec file changes, but
  6. # can drop back to zero at a new Tor version
  7. %define specver 0
  8. ## Things users may want to change
  9. #
  10. # User (and group) name under which the Tor daemon runs.
  11. %define toruser @TORUSER@
  12. %define torgroup @TORGROUP@
  13. ## Target a specific arch and OS
  14. #
  15. # default is i386 linux
  16. ## Override any system rpm macros
  17. #
  18. ## Version song and dance
  19. #
  20. # This should be the Tor version number, as it appears on the tarball,
  21. # including any "pre<x>" or "rc<y>" suffix. This gets massaged to
  22. # create the RPM version number, in a way that depends on the Tor
  23. # numbering scheme.
  24. %define native_version @VERSION@
  25. %define version %(echo %{native_version} | sed -e 's/-/./g')
  26. ## Define output filename
  27. #
  28. # This creates filenames based upon the value of target_cpu defined above
  29. ## Release and OS identification song and dance
  30. #
  31. # This identifies the lineage of the spec file. This file is the
  32. # standard one that comes with Tor; various distributions may
  33. # have their own ideas about the right ways to do things.
  34. %define pkgspec tor
  35. # This spec is intended to build and install on multiple distributions
  36. # (someday). Detect the distribution we're building on.
  37. %define is_rh %(test -e /etc/redhat-release && echo 1 || echo 0)
  38. %define is_fc %(test -e /etc/fedora-release && echo 1 || echo 0)
  39. %define is_mdk %(test -e /etc/mandrake-release && echo 1 || echo 0)
  40. %define is_suse %(test -e /etc/SuSE-release && echo 1 || echo 0)
  41. %if %{is_fc}
  42. %define ostag %(sed -e 's/^.*release /fc/' -e 's/ .*$//' -e 's/\\./_/g' < /etc/fedora-release)
  43. %else
  44. %if %{is_rh}
  45. %define ostag %(sed -e 's/^.*release /rh/' -e 's/ .*$//' -e 's/\\./_/g' < /etc/redhat-release)
  46. %endif
  47. %endif
  48. # These are probably wrong... just placeholders should we actually
  49. # end up supporting these distributions
  50. %if %{is_mdk}
  51. %define ostag mdk
  52. %endif
  53. %if %{is_suse}
  54. %define ostag suse
  55. %endif
  56. # Using the build date ensures that every build really does get
  57. # a different release number. We use this trick for CVS versions.
  58. # For release versions, we don't want or need it.
  59. %define is_dev_version %(echo %{native_version} | grep 'dev' > /dev/null && echo 1 || echo 0)
  60. %if %{is_dev_version}
  61. %define blddate %(date -u +"%Y%m%d%H%M")
  62. %define release %{pkgspec}.%{specver}.%{ostag}.%{blddate}
  63. %else
  64. %define release %{pkgspec}.%{specver}.%{ostag}
  65. %endif
  66. ## General-purpose macros
  67. #
  68. # Some systems don't have some macros. If a macro doesn't seem
  69. # to exist on your system, add it here...
  70. %if %{!?__make:1}%{?__make:0}
  71. %define __make make
  72. %endif
  73. %if %{!?make:1}%{?make:0}
  74. %define make %{__make}
  75. %endif
  76. %if %{!?_localstatedir:1}%{?_localstatedir:0}
  77. %define _localstatedir @LOCALSTATEDIR@
  78. %endif
  79. ## Package information
  80. #
  81. Name: tor
  82. Version: %{version}
  83. Release: %{release}
  84. Summary: Anonymizing overlay network for TCP (The onion router)
  85. URL: https://www.torproject.org/
  86. Group: System Environment/Daemons
  87. License: 3-clause BSD
  88. Vendor: The Tor Project (https://torproject.org)
  89. Packager: Andrew Lewman <andrew@torproject.org>
  90. %if %{is_suse}
  91. Requires: openssl >= 0.9.6
  92. BuildRequires: openssl-devel >= 0.9.6, rpm >= 4.0, zlib-devel
  93. %else
  94. Requires: openssl >= 0.9.6, libevent >= 1.1
  95. BuildRequires: openssl-devel >= 0.9.6, libevent-devel >= 1.1
  96. %endif
  97. %if %{is_fc}
  98. BuildRequires: rpm-build >= 4.0
  99. %endif
  100. Requires(pre): /usr/bin/id, /bin/date, /bin/sh
  101. Requires(pre): %{_sbindir}/useradd, %{_sbindir}/groupadd
  102. Source0: https://www.torproject.org/dist/%{name}-%{native_version}.tar.gz
  103. BuildRoot: %{_tmppath}/%{name}-%{version}-%{release}-root
  104. %description
  105. Tor is a connection-based low-latency anonymous communication system.
  106. This package provides the "tor" program, which serves as both a client and
  107. a relay node. Scripts will automatically create a "%{toruser}" user and
  108. a "%{torgroup}" group, and set tor up to run as a daemon when the system
  109. is rebooted.
  110. Applications connect to the local Tor proxy using the SOCKS
  111. protocol. The tor client chooses a path through a set of relays, in
  112. which each relay knows its predecessor and successor, but no
  113. others. Traffic flowing down the circuit is unwrapped by a symmetric
  114. key at each relay, which reveals the downstream relay.
  115. Warnings: Tor does no protocol cleaning. That means there is a danger
  116. that application protocols and associated programs can be induced to
  117. reveal information about the initiator. Tor depends on Privoxy or
  118. similar protocol cleaners to solve this problem. This is alpha code,
  119. and is even more likely than released code to have anonymity-spoiling
  120. bugs. The present network is small -- this further reduces the
  121. strength of the anonymity provided. Tor is not presently suitable
  122. for high-stakes anonymity.
  123. %prep
  124. %setup -q -n %{name}-%{native_version}
  125. %build
  126. %if %{is_suse}
  127. %configure --with-tor-user=%{toruser} --with-tor-group=%{torgroup}
  128. %else
  129. %configure --with-tor-user=%{toruser} --with-tor-group=%{torgroup}
  130. %endif
  131. %make
  132. %install
  133. %makeinstall
  134. # Install init script and control script
  135. %__mkdir_p ${RPM_BUILD_ROOT}%{_initrddir}
  136. %if %{is_suse}
  137. %__install -p -m 755 contrib/suse/tor.sh ${RPM_BUILD_ROOT}%{_initrddir}/%{name}
  138. %else
  139. %__install -p -m 755 contrib/tor.sh ${RPM_BUILD_ROOT}%{_initrddir}/%{name}
  140. %endif
  141. %__install -p -m 755 contrib/torctl ${RPM_BUILD_ROOT}%{_bindir}
  142. # Set up config file; "sample" file implements a basic user node.
  143. %__install -p -m 644 ${RPM_BUILD_ROOT}%{_sysconfdir}/%{name}/torrc.sample ${RPM_BUILD_ROOT}%{_sysconfdir}/%{name}/torrc
  144. # Install the logrotate control file.
  145. %__mkdir_p -m 755 ${RPM_BUILD_ROOT}%{_sysconfdir}/logrotate.d
  146. %__install -p -m 644 contrib/tor.logrotate ${RPM_BUILD_ROOT}%{_sysconfdir}/logrotate.d/%{name}
  147. # Directories that don't have any preinstalled files
  148. %__mkdir_p -m 700 ${RPM_BUILD_ROOT}%{_localstatedir}/lib/%{name}
  149. %__mkdir_p -m 755 ${RPM_BUILD_ROOT}%{_localstatedir}/run/%{name}
  150. %__mkdir_p -m 755 ${RPM_BUILD_ROOT}%{_localstatedir}/log/%{name}
  151. %__mkdir_p -m 700 ${RPM_BUILD_ROOT}%{_localstatedir}/tmp/%{name}
  152. %clean
  153. [ "${RPM_BUILD_ROOT}" != "/" ] && rm -rf ${RPM_BUILD_ROOT}
  154. # These scripts are probably wrong for Mandrake or SuSE. They're certainly
  155. # wrong for Debian, but what are you doing using RPM on Debian?
  156. %pre
  157. # If tor is already installed and running (whether installed by RPM
  158. # or not), then kill it, but remember that it was running.
  159. %__rm -f /%{_localstatedir}/tmp/${name}-was-running-%{version}-%{release}
  160. if [ -f %{_initrddir}/%{name} ] && /sbin/service %{name} status ; then
  161. /sbin/service %{name} stop
  162. touch /%{_localstatedir}/tmp/${name}-was-running-%{version}-%{release}
  163. fi
  164. #
  165. # Create a user and group if need be
  166. #
  167. if [ ! -n "`/usr/bin/id -g %{torgroup} 2>/dev/null`" ]; then
  168. # One would like to default the GID, but doing that properly would
  169. # require thought.
  170. %{_sbindir}/groupadd %{torgroup} 2> /dev/null
  171. fi
  172. if [ ! -n "`/usr/bin/id -u %{toruser} 2>/dev/null`" ]; then
  173. # One would also like to default the UID, but doing that properly would
  174. # also require thought.
  175. if [ -x %{_sbindir}/nologin ]; then
  176. %{_sbindir}/useradd -r -g %{torgroup} -d% {_localstatedir}/lib/%{name} -s %{_sbindir}/nologin %{toruser} 2> /dev/null
  177. else
  178. %{_sbindir}/useradd -r -g %{torgroup} -d %{_localstatedir}/lib/%{name} -s /bin/false %{toruser} 2> /dev/null
  179. fi
  180. fi
  181. exit 0
  182. %post
  183. # If this is a new installation, use chkconfig to put tor in the
  184. # default set of runlevels. If it's an upgrade, leave the existing
  185. # configuration alone.
  186. if [ $1 -eq 1 ]; then
  187. /sbin/chkconfig --add %{name}
  188. /sbin/chkconfig %{name} on
  189. fi
  190. # Older tor RPMS used a different username for the tor daemon.
  191. # Make sure the runtime data have the right ownership.
  192. %__chown -R %{toruser}.%{torgroup} %{_localstatedir}/{lib,log,run}/%{name}
  193. if [ -f /%{_localstatedir}/tmp/${name}-was-running-%{version}-%{release} ]; then
  194. /sbin/service %{name} start
  195. %__rm -f /%{_localstatedir}/tmp/${name}-was-running-%{version}-%{release}
  196. fi
  197. exit 0
  198. %preun
  199. # If no instances of tor will be installed when we're done, make
  200. # sure that it gets killed. We *don't* want to kill it or delete
  201. # any of its data on uninstall if it's being upgraded to a new
  202. # version, because the new version will actually already have
  203. # been installed and started before the uninstall script for
  204. # the old version is run, and we'd end up hosing it.
  205. if [ $1 -le 0 ]; then
  206. if [ -f %{_initrddir}/%{name} ] && /sbin/service %{name} status ; then
  207. /sbin/service %{name} stop
  208. fi
  209. %/sbin/chkconfig --del %{name}
  210. %__rm -f ${_localstatedir}/lib/%{name}/cached-directory
  211. %__rm -f ${_localstatedir}/lib/%{name}/bw_accounting
  212. %__rm -f ${_localstatedir}/lib/%{name}/control_auth_cookie
  213. %__rm -f ${_localstatedir}/lib/%{name}/router.desc
  214. %__rm -f ${_localstatedir}/lib/%{name}/fingerprint
  215. fi
  216. exit 0
  217. %files
  218. %defattr(-,root,root)
  219. %doc AUTHORS INSTALL LICENSE README ChangeLog doc/HACKING doc/TODO
  220. %{_mandir}/man*/*
  221. %{_bindir}/tor
  222. %{_bindir}/torctl
  223. %{_bindir}/torify
  224. %{_bindir}/tor-resolve
  225. %{_bindir}/tor-gencert
  226. %{_datadir}/tor/geoip
  227. %config %{_initrddir}/%{name}
  228. %config(noreplace) %attr(0644,root,root) %{_sysconfdir}/logrotate.d/%{name}
  229. %dir %attr(0755,root,%{torgroup}) %{_sysconfdir}/%{name}/
  230. %config(noreplace) %attr(0644,root,%{torgroup}) %{_sysconfdir}/%{name}/*
  231. %attr(0700,%{toruser},%{torgroup}) %dir %{_localstatedir}/lib/%{name}
  232. %attr(0750,%{toruser},%{torgroup}) %dir %{_localstatedir}/run/%{name}
  233. %attr(0750,%{toruser},%{torgroup}) %dir %{_localstatedir}/log/%{name}
  234. %changelog
  235. * Sun Feb 22 2009 Andrew Lewman <andrew@torproject.org>
  236. - update the description, vendor, and packager
  237. * Thu Sep 11 2008 Andrew Lewman <phobos@rootme.org>
  238. - See r16867
  239. - http://archives.seul.org/or/cvs/Sep-2008/msg00156.html
  240. * Tue Feb 27 2007 Andrew Lewman <phobos@rootme.org>
  241. - Fix a potential race condition in how we determine the running state of tor. Found by Stefan Nordhausen.
  242. - see OR-CVS for details
  243. * Fri May 26 2006 Andrew Lewman <phobos@rootme.org>
  244. - Add in a few "SUSEisms" to make dist-rpm actually work on suse
  245. - Turn Tor "on" via chkconfig
  246. - Update -mcpu to -mtune to make GCC happy
  247. - see OR-CVS for details
  248. * Tue Mar 28 2006 Andrew Lewman <phobos@rootme.org>
  249. - converted to build the specified target cpu and arch
  250. - override related rpm macros to build correctly
  251. - see OR-CVS for details
  252. * Mon Jan 17 2005 John Bashinski <jbash@velvet.com>
  253. - Take runtime user and group names from configure system. Default
  254. user/group names are now "_tor"; blame Roger...
  255. - Make logrotate control file a separate file in the source distribution,
  256. rather than creating it from the spec file.
  257. - Properly handle the order in which RPM executes scriptlets on upgrade.
  258. The old code would kill the daemon on upgrade.
  259. - Start the tor daemon after installation if and only if it was
  260. running before installation. Preserve runlevel setup on upgrade.
  261. - Package the torctl script; the init script is now a wrapper around it.
  262. * Tue Nov 5 2004 John Bashinski <jbash@velvet.com>
  263. - Add skeletal support for multiple distributions
  264. - Even more ridiculous level of macro-ization
  265. - Modify version numbers so RPM can determine when it has a newer version
  266. - Return to including distribution name in package release number
  267. - Sharply trim description
  268. - Change user/group name from "tor" to "tordmn"; "tor" is a common
  269. given name (reported by Marius Hjelle)
  270. - Change group to "System Environment/Daemons" (suggested by Marius Hjelle)
  271. - Create logrotate file (suggested by Marius Hjelle)
  272. - Make Tor run as a user proxy by default (suggested by Marius Hjelle)
  273. - Autogenerate spec file from GNU autotools data, substituting version
  274. and whatnot
  275. - Be perhaps excessively paranoid with config file and directory modes
  276. - Remove auto-start and auto-stop at installation time; there's some kind
  277. of weird race going on, and it's arguably a bad thing anyway.
  278. * Mon Jun 06 2004 Nick Mathewson <nickm@freehaven.net> 0.0.7-0.std.0.1.rc2
  279. - Make spec file more happy with fc2 packaging
  280. * Sat Jan 17 2004 John Bashinski <jbash@velvet.com>
  281. - Basic spec file; tested with Red Hat 9.