tor.spec.in 12 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272273274275276277278279280281282283284285286287288289290291292293294295296297298299300301302303304305306307308309310311312313314315316317318319320321322323324325326327328329330331332333334335336337338339340341342343344345346347348
  1. ## NOTE: tor.spec is autogenerated from tor.spec.in . Edit the latter,
  2. ## not the former.
  3. ## Things that need to be edited frequently
  4. #
  5. # This should be incremented whenever the spec file changes, but
  6. # can drop back to zero at a new Tor version
  7. %define specver 0
  8. ## Things users may want to change
  9. #
  10. # User (and group) name under which the Tor daemon runs.
  11. %define toruser @TORUSER@
  12. %define torgroup @TORGROUP@
  13. ## Target a specific arch and OS
  14. #
  15. # default is i386 linux
  16. %define target gnu
  17. %define target_cpu i386
  18. %define target_os linux
  19. ## Override any system rpm macros
  20. #
  21. %define _arch %{target_cpu}
  22. %define _build_arch %{target_cpu}
  23. %define _vendor %{target_os}
  24. %define _host %{target_cpu}-pc-%{target_os}-%{target}
  25. %define _host_cpu %{target_cpu}
  26. %define _host_vendor %{target_os}
  27. %define optflags -march=%{target_cpu} -mtune=%{target_cpu} -O2
  28. ## Version song and dance
  29. #
  30. # This should be the Tor version number, as it appears on the tarball,
  31. # including any "pre<x>" or "rc<y>" suffix. This gets massaged to
  32. # create the RPM version number, in a way that depends on the Tor
  33. # numbering scheme.
  34. %define native_version @VERSION@
  35. %define version %(echo %{native_version} | sed -e 's/-/./g')
  36. ## Define output filename
  37. #
  38. # This creates filenames based upon the value of target_cpu defined above
  39. %define _build_name_fmt %%{NAME}-%%{VERSION}-%%{RELEASE}.%{target_cpu}.rpm
  40. ## Release and OS identification song and dance
  41. #
  42. # This identifies the lineage of the spec file. This file is the
  43. # standard one that comes with Tor; various distributions may
  44. # have their own ideas about the right ways to do things.
  45. %define pkgspec tor
  46. # This spec is intended to build and install on multiple distributions
  47. # (someday). Detect the distribution we're building on.
  48. %define is_rh %(test -e /etc/redhat-release && echo 1 || echo 0)
  49. %define is_fc %(test -e /etc/fedora-release && echo 1 || echo 0)
  50. %define is_mdk %(test -e /etc/mandrake-release && echo 1 || echo 0)
  51. %define is_suse %(test -e /etc/SuSE-release && echo 1 || echo 0)
  52. %if %{is_fc}
  53. %define ostag %(sed -e 's/^.*release /fc/' -e 's/ .*$//' -e 's/\\./_/g' < /etc/fedora-release)
  54. %else
  55. %if %{is_rh}
  56. %define ostag %(sed -e 's/^.*release /rh/' -e 's/ .*$//' -e 's/\\./_/g' < /etc/redhat-release)
  57. %endif
  58. %endif
  59. # These are probably wrong... just placeholders should we actually
  60. # end up supporting these distributions
  61. %if %{is_mdk}
  62. %define ostag mdk
  63. %endif
  64. %if %{is_suse}
  65. %define ostag suse
  66. %endif
  67. # Using the build date ensures that every build really does get
  68. # a different release number. We use this trick for CVS versions.
  69. # For release versions, we don't want or need it.
  70. %define is_dev_version %(echo %{native_version} | grep 'dev' > /dev/null && echo 1 || echo 0)
  71. %if %{is_dev_version}
  72. %define blddate %(date -u +"%Y%m%d%H%M")
  73. %define release %{pkgspec}.%{specver}.%{ostag}.%{blddate}
  74. %else
  75. %define release %{pkgspec}.%{specver}.%{ostag}
  76. %endif
  77. ## General-purpose macros
  78. #
  79. # Some systems don't have some macros. If a macro doesn't seem
  80. # to exist on your system, add it here...
  81. %if %{!?__make:1}%{?__make:0}
  82. %define __make make
  83. %endif
  84. %if %{!?make:1}%{?make:0}
  85. %define make %{__make}
  86. %endif
  87. %if %{!?_localstatedir:1}%{?_localstatedir:0}
  88. %define _localstatedir @LOCALSTATEDIR@
  89. %endif
  90. ## Package information
  91. #
  92. Name: tor
  93. Version: %{version}
  94. Release: %{release}
  95. Summary: Anonymizing overlay network for TCP (The onion router)
  96. URL: https://www.torproject.org/
  97. Group: System Environment/Daemons
  98. License: BSD-like
  99. Vendor: R. Dingledine <arma@seul.org>
  100. Packager: Andrew Lewman <phobos@rootme.org>
  101. %if %{is_suse}
  102. Requires: openssl >= 0.9.6
  103. BuildRequires: openssl-devel >= 0.9.6, rpm >= 4.0, zlib-devel
  104. %else
  105. Requires: openssl >= 0.9.6
  106. BuildRequires: openssl-devel >= 0.9.6, libevent-devel >= 1.1a
  107. %endif
  108. %if %{is_fc}
  109. BuildRequires: rpm-build >= 4.0
  110. %endif
  111. Requires(pre): /usr/bin/id, /bin/date, /bin/sh
  112. Requires(pre): %{_sbindir}/useradd, %{_sbindir}/groupadd
  113. Source0: https://www.torproject.org/dist/%{name}-%{native_version}.tar.gz
  114. BuildRoot: %{_tmppath}/%{name}-%{version}-%{release}-root
  115. %description
  116. Tor is a connection-based low-latency anonymous communication system.
  117. This package provides the "tor" program, which serves as both a client and
  118. a relay node. Scripts will automatically create a "%{toruser}" user and
  119. a "%{torgroup}" group, and set tor up to run as a daemon when the system
  120. is rebooted.
  121. Applications connect to the local Tor proxy using the SOCKS
  122. protocol. The local proxy chooses a path through a set of relays, in
  123. which each relay knows its predecessor and successor, but no
  124. others. Traffic flowing down the circuit is unwrapped by a symmetric
  125. key at each relay, which reveals the downstream relay.
  126. Warnings: Tor does no protocol cleaning. That means there is a danger
  127. that application protocols and associated programs can be induced to
  128. reveal information about the initiator. Tor depends on Privoxy and
  129. similar protocol cleaners to solve this problem. This is alpha code,
  130. and is even more likely than released code to have anonymity-spoiling
  131. bugs. The present network is very small -- this further reduces the
  132. strength of the anonymity provided. Tor is not presently suitable
  133. for high-stakes anonymity.
  134. %prep
  135. %setup -q -n %{name}-%{native_version}
  136. %build
  137. %if %{is_suse}
  138. %configure --with-tor-user=%{toruser} --with-tor-group=%{torgroup} \
  139. --build=%{_host} --host=%{_host} --target=%{_host}
  140. %else
  141. %configure --with-tor-user=%{toruser} --with-tor-group=%{torgroup} \
  142. --build=%{_host} --host=%{_host} --target=%{_host}
  143. %endif
  144. %make
  145. %install
  146. %makeinstall
  147. # Install init script and control script
  148. %__mkdir_p ${RPM_BUILD_ROOT}%{_initrddir}
  149. %if %{is_suse}
  150. %__install -p -m 755 contrib/suse/tor.sh ${RPM_BUILD_ROOT}%{_initrddir}/%{name}
  151. %else
  152. %__install -p -m 755 contrib/tor.sh ${RPM_BUILD_ROOT}%{_initrddir}/%{name}
  153. %endif
  154. %__install -p -m 755 contrib/torctl ${RPM_BUILD_ROOT}%{_bindir}
  155. # Set up config file; "sample" file implements a basic user node.
  156. %__install -p -m 644 src/config/torrc.sample ${RPM_BUILD_ROOT}%{_sysconfdir}/%{name}/torrc.sample
  157. # Install the logrotate control file.
  158. %__mkdir_p -m 755 ${RPM_BUILD_ROOT}%{_sysconfdir}/logrotate.d
  159. %__install -p -m 644 contrib/tor.logrotate ${RPM_BUILD_ROOT}%{_sysconfdir}/logrotate.d/%{name}
  160. # Directories that don't have any preinstalled files
  161. %__mkdir_p -m 700 ${RPM_BUILD_ROOT}%{_localstatedir}/lib/%{name}
  162. %__mkdir_p -m 755 ${RPM_BUILD_ROOT}%{_localstatedir}/run/%{name}
  163. %__mkdir_p -m 755 ${RPM_BUILD_ROOT}%{_localstatedir}/log/%{name}
  164. %__mkdir_p -m 700 ${RPM_BUILD_ROOT}%{_localstatedir}/tmp/%{name}
  165. %clean
  166. [ "${RPM_BUILD_ROOT}" != "/" ] && rm -rf ${RPM_BUILD_ROOT}
  167. # These scripts are probably wrong for Mandrake or SuSE. They're certainly
  168. # wrong for Debian, but what are you doing using RPM on Debian?
  169. %pre
  170. # If tor is already installed and running (whether installed by RPM
  171. # or not), then kill it, but remember that it was running.
  172. %__rm -f /%{_localstatedir}/tmp/${name}-was-running-%{version}-%{release}
  173. if [ -f %{_initrddir}/%{name} ] && /sbin/service %{name} status ; then
  174. /sbin/service %{name} stop
  175. touch /%{_localstatedir}/tmp/${name}-was-running-%{version}-%{release}
  176. fi
  177. #
  178. # Create a user and group if need be
  179. #
  180. if [ ! -n "`/usr/bin/id -g %{torgroup} 2>/dev/null`" ]; then
  181. # One would like to default the GID, but doing that properly would
  182. # require thought.
  183. %{_sbindir}/groupadd %{torgroup} 2> /dev/null
  184. fi
  185. if [ ! -n "`/usr/bin/id -u %{toruser} 2>/dev/null`" ]; then
  186. # One would also like to default the UID, but doing that properly would
  187. # also require thought.
  188. if [ -x %{_sbindir}/nologin ]; then
  189. %{_sbindir}/useradd -r -g %{torgroup} -d% {_localstatedir}/lib/%{name} -s %{_sbindir}/nologin %{toruser} 2> /dev/null
  190. else
  191. %{_sbindir}/useradd -r -g %{torgroup} -d %{_localstatedir}/lib/%{name} -s /bin/false %{toruser} 2> /dev/null
  192. fi
  193. fi
  194. exit 0
  195. %post
  196. # If this is a new installation, use chkconfig to put tor in the
  197. # default set of runlevels. If it's an upgrade, leave the existing
  198. # configuration alone.
  199. if [ $1 -eq 1 ]; then
  200. /sbin/chkconfig --add %{name}
  201. /sbin/chkconfig %{name} on
  202. fi
  203. # Older tor RPMS used a different username for the tor daemon.
  204. # Make sure the runtime data have the right ownership.
  205. %__chown -R %{toruser}.%{torgroup} %{_localstatedir}/{lib,log,run}/%{name}
  206. if [ -f /%{_localstatedir}/tmp/${name}-was-running-%{version}-%{release} ]; then
  207. /sbin/service %{name} start
  208. %__rm -f /%{_localstatedir}/tmp/${name}-was-running-%{version}-%{release}
  209. fi
  210. exit 0
  211. %preun
  212. # If no instances of tor will be installed when we're done, make
  213. # sure that it gets killed. We *don't* want to kill it or delete
  214. # any of its data on uninstall if it's being upgraded to a new
  215. # version, because the new version will actually already have
  216. # been installed and started before the uninstall script for
  217. # the old version is run, and we'd end up hosing it.
  218. if [ $1 -le 0 ]; then
  219. if [ -f %{_initrddir}/%{name} ] && /sbin/service %{name} status ; then
  220. /sbin/service %{name} stop
  221. fi
  222. %/sbin/chkconfig --del %{name}
  223. %__rm -f ${_localstatedir}/lib/%{name}/cached-directory
  224. %__rm -f ${_localstatedir}/lib/%{name}/bw_accounting
  225. %__rm -f ${_localstatedir}/lib/%{name}/control_auth_cookie
  226. %__rm -f ${_localstatedir}/lib/%{name}/router.desc
  227. %__rm -f ${_localstatedir}/lib/%{name}/fingerprint
  228. fi
  229. exit 0
  230. %files
  231. %defattr(-,root,root)
  232. %doc AUTHORS INSTALL LICENSE README ChangeLog doc/HACKING doc/TODO
  233. %{_mandir}/man*/*
  234. %{_bindir}/tor
  235. %{_bindir}/torctl
  236. %{_bindir}/torify
  237. %{_bindir}/tor-resolve
  238. %{_bindir}/tor-gencert
  239. %{_datadir}/tor/geoip
  240. %config %{_initrddir}/%{name}
  241. %config(noreplace) %attr(0644,root,root) %{_sysconfdir}/logrotate.d/%{name}
  242. %dir %attr(0755,root,%{torgroup}) %{_sysconfdir}/%{name}/
  243. %config(noreplace) %attr(0644,root,%{torgroup}) %{_sysconfdir}/%{name}/*
  244. %attr(0700,%{toruser},%{torgroup}) %dir %{_localstatedir}/lib/%{name}
  245. %attr(0750,%{toruser},%{torgroup}) %dir %{_localstatedir}/run/%{name}
  246. %attr(0750,%{toruser},%{torgroup}) %dir %{_localstatedir}/log/%{name}
  247. %changelog
  248. * Tue Feb 27 2007 Andrew Lewman <phobos@rootme.org>
  249. - Fix a potential race condition in how we determine the running state of tor. Found by Stefan Nordhausen.
  250. - see OR-CVS for details
  251. * Fri May 26 2006 Andrew Lewman <phobos@rootme.org>
  252. - Add in a few "SUSEisms" to make dist-rpm actually work on suse
  253. - Turn Tor "on" via chkconfig
  254. - Update -mcpu to -mtune to make GCC happy
  255. - see OR-CVS for details
  256. * Tue Mar 28 2006 Andrew Lewman <phobos@rootme.org>
  257. - converted to build the specified target cpu and arch
  258. - override related rpm macros to build correctly
  259. - see OR-CVS for details
  260. * Mon Jan 17 2005 John Bashinski <jbash@velvet.com>
  261. - Take runtime user and group names from configure system. Default
  262. user/group names are now "_tor"; blame Roger...
  263. - Make logrotate control file a separate file in the source distribution,
  264. rather than creating it from the spec file.
  265. - Properly handle the order in which RPM executes scriptlets on upgrade.
  266. The old code would kill the daemon on upgrade.
  267. - Start the tor daemon after installation if and only if it was
  268. running before installation. Preserve runlevel setup on upgrade.
  269. - Package the torctl script; the init script is now a wrapper around it.
  270. * Tue Nov 5 2004 John Bashinski <jbash@velvet.com>
  271. - Add skeletal support for multiple distributions
  272. - Even more ridiculous level of macro-ization
  273. - Modify version numbers so RPM can determine when it has a newer version
  274. - Return to including distribution name in package release number
  275. - Sharply trim description
  276. - Change user/group name from "tor" to "tordmn"; "tor" is a common
  277. given name (reported by Marius Hjelle)
  278. - Change group to "System Environment/Daemons" (suggested by Marius Hjelle)
  279. - Create logrotate file (suggested by Marius Hjelle)
  280. - Make Tor run as a user proxy by default (suggested by Marius Hjelle)
  281. - Autogenerate spec file from GNU autotools data, substituting version
  282. and whatnot
  283. - Be perhaps excessively paranoid with config file and directory modes
  284. - Remove auto-start and auto-stop at installation time; there's some kind
  285. of weird race going on, and it's arguably a bad thing anyway.
  286. * Mon Jun 06 2004 Nick Mathewson <nickm@freehaven.net> 0.0.7-0.std.0.1.rc2
  287. - Make spec file more happy with fc2 packaging
  288. * Sat Jan 17 2004 John Bashinski <jbash@velvet.com>
  289. - Basic spec file; tested with Red Hat 9.