flatpak/flatpak.spec

406 lines
14 KiB
RPMSpec
Raw Normal View History

#
# spec file for package flatpak
#
# Copyright (c) 2024 SUSE LLC
#
# All modifications and additions to the file contributed by third parties
# remain the property of their copyright owners, unless otherwise agreed
# upon. The license for this file, and modifications and additions to the
# file, is the same license as for the pristine package itself (unless the
# license for the pristine package is not an Open Source License, in which
# case the license is the MIT License). An "Open Source License" is a
# license that conforms to the Open Source Definition (Version 1.9)
# published by the Open Source Initiative.
# Please submit bugfixes or comments via https://bugs.opensuse.org/
#
%global selinuxtype targeted
%define libname libflatpak0
Accepting request 1126468 from GNOME:Next - Update to version 1.15.6: + In distributions that compile Flatpak to use a separate bubblewrap (bwrap) executable, version 0.8.0 is now required. + Enabling the optional Wayland security context feature requires libwayland-client, wayland-scanner >= 1.15 and wayland-protocols >= 1.32. + Add --device=input, for access to evdev devices in /dev/input + Update bundled copy of bubblewrap to version 0.8.0, and rely on its features: + Improve error message if seccomp is disabled in kernel config + Security hardening: set user namespace limit to 0, to prevent creation of nested user namespaces in a more robust way + For subsandboxes started by flatpak-portal, inherit environment variables from the flatpak run that started the original instance rather than from flatpak-portal, fixing behaviour of FLATPAK_GL_DRIVERS and similar features + Stop http transfers if a download in progress becomes very slow + Make it easier to configure extra languages, by picking them up from AccountsService if configured there + Add new flatpak_transaction_add_rebase_and_uninstall() API, allowing end-of-life apps to be replaced by their intended replacement more reliably + Create a private Wayland socket with the "security context" extension if available, allowing the compositor to identify connections from sandboxed apps as belonging to the sandbox + Update libglnx to 2023-08-29 + Use features of newer GLib versions if available + Turn off system-level crash reporting infrastructure during some unit tests that involve intentional assertion failures + Add anchors to link to sections of flatpak-metadata documentation + Bug fixes: - Avoid warnings processing symbolic links with GLib >= 2.77.0, and with GLib 2.76.0 (GLib 2.76.1 or later silences these warnings) - Bypass page cache for backend requests in revokefs, fixing installation errors with libostree 2023.4 - Show AppStream metadata in flatpak remote-info as intended - Don't let Flatpak apps inherit VK_DRIVER_FILES or VK_ICD_FILENAMES from the host system, which would be wrong for the sandbox - Fix build failure with prereleases of libappstream 0.17.x - Forward-compatibility with libappstream 1.0 - Fix installation with Meson if configured with -Dauto_sideloading=true - Fix a memory leak - Fix compiler warnings - Make the tests fail more comprehensibly if a required tool is missing - Clean up /var/tmp/flatpak-cache-* directories on boot - Don't force GIO_USE_VFS=local for programs launched via flatpak-spawn - Clarify documentation for D-Bus name ownership + Internal changes: - Split up large source files into smaller modules, reducing internal circular dependencies - Re-synchronize code backported from GLib with the version in GLib - Clarify documentation for D-Bus name ownership - Make the flags used to apply "extra data" clearer - Use glnx_opendirat() where possible + Updated translations. - Add pkgconfig(wayland-client), pkgconfig(wayland-scanner) and pkgconfig(wayland-protocols) BuildRequires and pass with-wayland-security-context=yes to configure: Enable the optional Wayland security context. OBS-URL: https://build.opensuse.org/request/show/1126468 OBS-URL: https://build.opensuse.org/package/show/GNOME:Factory/flatpak?expand=0&rev=187
2023-11-17 16:47:01 +01:00
%define bubblewrap_version 0.8.0
%define ostree_version 2020.8
%define xdg_dbus_proxy_version 0.1.0
# dbus only used config files in /etc until 1.9.18
%if %{pkg_vcmp dbus-1 < 1.9.18}
%define _dbusconfigdir %{_sysconfdir}/dbus-1/system.d
%else
%define _dbusconfigdir %{_datadir}/dbus-1/system.d
%endif
# systemd only supports environment generators since version 233
%if %{pkg_vcmp systemd < 233}
%define support_environment_generators 0
%else
%define support_environment_generators 1
%endif
Name: flatpak
Version: 1.15.8
Release: 0
Summary: OSTree based application bundles management
License: LGPL-2.1-or-later
Group: System/Packages
URL: https://flatpak.github.io/
Source0: https://github.com/flatpak/flatpak/releases/download/%{version}/%{name}-%{version}.tar.xz
Source1: update-system-flatpaks.service
Source2: update-system-flatpaks.timer
Source3: update-user-flatpaks.service
Source4: update-user-flatpaks.timer
Source5: https://flathub.org/repo/flathub.flatpakrepo
# PATCH-FEATURE-OPENSUSE polkit_rules_usability.patch -- Make the rules comply with openSUSE expectations
Patch0: polkit_rules_usability.patch
# PATCH-FIX-UPSTREAM libglnx.patch https://gitlab.gnome.org/GNOME/libglnx/-/merge_requests/57
Patch1: libglnx.patch
Accepting request 610043 from home:stawidy:branches:GNOME:Factory - Update to version 0.11.7: * Fix regression in installing .flatpak bundles - Changes in version 0.11.6: * Further work on the export filename regression, now also fixes the same issue as in 0.11.5 but in flatpak build-finish. * Fix segfault when installing from .flatpakref in gnome-software * Build yacc parser from source. * Don't tab-complete Sources/Locale/Debug extension by default. * Fix tests on debian. - Changes in version 0.11.5: * Fix a regression which caused installation of epiphany and other apps that export multiple .service files to fail. * Fix appstream updates in p2p mode. * Don't distribute generated gdbus code with tarball. * Add documentation for the flatpak portal - Changes in version 0.11.4: * flatpak remove is now an alias for flatpak uninstall. * flatpak uninstall now picks system or user automatically if not specified * New appstream branch format which is more efficient to distribute, the old is still generated for backwards compat. * Appstream data now contains compatible arches (for applications that doesn't exist for the primary arch). For example, an i386-only app is now listed in the x86-64 appstream. * The flatpak version is included in the user agent when downloading. * The Flatpak-Ref http header is set to the currently installing ref when downloading. * New argument --timestamp in build-commit-from. * When updating many apps we now only prune the local repo when all updates are done, making multi-app updates faster. * flatpak build now always allows multiarch use. * flatpak build now mounts app extensions during build. * flatpak build-init now supports --extension to add extension points earlier than build-finish. Also build-finish now supports --remove-extension. * New flatpak portal allows applications to sandbox themselves and restart a newer version of themselves. * New flatpak run options: --no-a11y-bus, --no-documents-portal. * Initial support for end-of-life:ing applications. * New option X-Flatpak-RunOptions in exported desktop/files allow you to specify no-a11y-bus and no-documents-portal. * Support for tagged extension points, which is useful if you want to use the same extension id (but maybe different versions) multiple times in an app. * We now export .service files for names that the app is allowed to own on the session bus. * libflatpak got new methods for listing remotes by type. * libflatpak now has support in FlatpakRemoteRef for getting remote metadata such as end-of-life, download size, metadata etc. * There was some internal restructuring on how installs/updates are done which should improve performance and maintainability. - Changes in version 0.11.3: * Fix "open with" and flatpak run --file-forwarding crash * Fix build with glibc 2.27 - Changes in version 0.11.2: * Remove fuse dependency, since we don't ship document portal anymore * Fix various issues with /home being a symlink to /var/home (atomic) * Allow downgrades when using collection ids * Search on all supported architectures - Changes in version 0.11.1: * Remove document portal and permission store * Add --socket=fallback-x11 permission * Fix dbus proxy vulnerability in authentication phase * Allow personality syscall in devel mode * commit-from: Migrate static deltas with commit * Add "network" storage type for installations * Add flatpak info --show-permissions * Add flatpak info --file-access * search: Update appstream (if stale) before searching * Make libflatpak work when /var/lib/flatpak is empty * build-bundle: Add --from-commit option * Allow appstream ids that don't end in .desktop * Make permission handling ignore unknown permissions for forwards compatibility * Removed incorrect error message in update --appdata when there was no updates * Fix handling of abort in the duplicate remote prompt * Fix division by zero in progress calculation * Fix flatpak remote-info --show-metadata * Fixed crash when installing some flatpak bundle files * Fix installation of telegram * remote-ls -u only considers app from the origin remote * Fix assertion error in extra-data progress reporting * Report nicer errors when trying to downgrade as non-root * pulseaudio: Try to find pulseaudio socket better * Fixed some warnings reported by coverity * Cleaned up code by splitting up some large source files OBS-URL: https://build.opensuse.org/request/show/610043 OBS-URL: https://build.opensuse.org/package/show/GNOME:Factory/flatpak?expand=0&rev=49
2018-05-17 16:41:22 +02:00
BuildRequires: bison
BuildRequires: bubblewrap >= %{bubblewrap_version}
BuildRequires: cmake
BuildRequires: docbook-xsl-stylesheets
BuildRequires: gtk-doc
BuildRequires: intltool >= 0.35.0
BuildRequires: libcap-devel
BuildRequires: libgpg-error-devel
BuildRequires: libgpgme-devel >= 1.1.8
BuildRequires: libtool
BuildRequires: malcontent-devel
BuildRequires: meson
BuildRequires: pkgconfig
BuildRequires: python3-pyparsing
BuildRequires: selinux-policy-devel
BuildRequires: socat
BuildRequires: systemd-rpm-macros
BuildRequires: sysuser-tools
BuildRequires: xdg-dbus-proxy >= %{xdg_dbus_proxy_version}
BuildRequires: xmlto
BuildRequires: xsltproc
BuildRequires: pkgconfig(appstream) >= 0.12.0
BuildRequires: pkgconfig(dconf) >= 0.26
BuildRequires: pkgconfig(fuse3) >= 3.1.1
BuildRequires: pkgconfig(gdk-pixbuf-2.0)
BuildRequires: pkgconfig(gio-2.0)
BuildRequires: pkgconfig(gio-unix-2.0)
BuildRequires: pkgconfig(glib-2.0) >= 2.46
BuildRequires: pkgconfig(gobject-introspection-1.0) >= 1.40.0
BuildRequires: pkgconfig(gobject-introspection-no-export-1.0) >= 1.40.0
BuildRequires: pkgconfig(json-glib-1.0)
BuildRequires: pkgconfig(libarchive) >= 2.8.0
BuildRequires: pkgconfig(libcurl) >= 7.29.0
BuildRequires: pkgconfig(libelf) >= 0.8.12
BuildRequires: pkgconfig(libseccomp)
BuildRequires: pkgconfig(libsystemd)
BuildRequires: pkgconfig(libxml-2.0) >= 2.4
BuildRequires: pkgconfig(libzstd) >= 0.8.1
BuildRequires: pkgconfig(ostree-1) >= %{ostree_version}
BuildRequires: pkgconfig(polkit-gobject-1)
BuildRequires: pkgconfig(systemd)
Accepting request 1126468 from GNOME:Next - Update to version 1.15.6: + In distributions that compile Flatpak to use a separate bubblewrap (bwrap) executable, version 0.8.0 is now required. + Enabling the optional Wayland security context feature requires libwayland-client, wayland-scanner >= 1.15 and wayland-protocols >= 1.32. + Add --device=input, for access to evdev devices in /dev/input + Update bundled copy of bubblewrap to version 0.8.0, and rely on its features: + Improve error message if seccomp is disabled in kernel config + Security hardening: set user namespace limit to 0, to prevent creation of nested user namespaces in a more robust way + For subsandboxes started by flatpak-portal, inherit environment variables from the flatpak run that started the original instance rather than from flatpak-portal, fixing behaviour of FLATPAK_GL_DRIVERS and similar features + Stop http transfers if a download in progress becomes very slow + Make it easier to configure extra languages, by picking them up from AccountsService if configured there + Add new flatpak_transaction_add_rebase_and_uninstall() API, allowing end-of-life apps to be replaced by their intended replacement more reliably + Create a private Wayland socket with the "security context" extension if available, allowing the compositor to identify connections from sandboxed apps as belonging to the sandbox + Update libglnx to 2023-08-29 + Use features of newer GLib versions if available + Turn off system-level crash reporting infrastructure during some unit tests that involve intentional assertion failures + Add anchors to link to sections of flatpak-metadata documentation + Bug fixes: - Avoid warnings processing symbolic links with GLib >= 2.77.0, and with GLib 2.76.0 (GLib 2.76.1 or later silences these warnings) - Bypass page cache for backend requests in revokefs, fixing installation errors with libostree 2023.4 - Show AppStream metadata in flatpak remote-info as intended - Don't let Flatpak apps inherit VK_DRIVER_FILES or VK_ICD_FILENAMES from the host system, which would be wrong for the sandbox - Fix build failure with prereleases of libappstream 0.17.x - Forward-compatibility with libappstream 1.0 - Fix installation with Meson if configured with -Dauto_sideloading=true - Fix a memory leak - Fix compiler warnings - Make the tests fail more comprehensibly if a required tool is missing - Clean up /var/tmp/flatpak-cache-* directories on boot - Don't force GIO_USE_VFS=local for programs launched via flatpak-spawn - Clarify documentation for D-Bus name ownership + Internal changes: - Split up large source files into smaller modules, reducing internal circular dependencies - Re-synchronize code backported from GLib with the version in GLib - Clarify documentation for D-Bus name ownership - Make the flags used to apply "extra data" clearer - Use glnx_opendirat() where possible + Updated translations. - Add pkgconfig(wayland-client), pkgconfig(wayland-scanner) and pkgconfig(wayland-protocols) BuildRequires and pass with-wayland-security-context=yes to configure: Enable the optional Wayland security context. OBS-URL: https://build.opensuse.org/request/show/1126468 OBS-URL: https://build.opensuse.org/package/show/GNOME:Factory/flatpak?expand=0&rev=187
2023-11-17 16:47:01 +01:00
BuildRequires: pkgconfig(wayland-client) >= 1.15
BuildRequires: pkgconfig(wayland-protocols) >= 1.32
BuildRequires: pkgconfig(wayland-scanner) >= 1.15
BuildRequires: pkgconfig(xau)
Requires: %{libname} = %{version}
Requires: bubblewrap >= %{bubblewrap_version}
Requires: ostree >= %{ostree_version}
Requires: xdg-dbus-proxy >= %{xdg_dbus_proxy_version}
Requires: xdg-desktop-portal >= 0.10
Requires: (flatpak-selinux = %{version} if selinux-policy-%{selinuxtype})
Requires: user(flatpak)
# Remove after openSUSE Leap 42 is out of scope
Provides: xdg-app = %{version}
Obsoletes: xdg-app < %{version}
%description
flatpak is a system for building, distributing and running sandboxed desktop
applications on Linux. See https://wiki.gnome.org/Projects/SandboxedApps for
more information.
%package -n system-user-flatpak
Summary: System user for the flatpak system helper
Group: System/Base
BuildArch: noarch
%sysusers_requires
%description -n system-user-flatpak
System user for the flatpak system helper.
%package -n %{libname}
Summary: OSTree based application bundle management library
Group: System/Libraries
%description -n %{libname}
flatpak is a system for building, distributing and running sandboxed desktop
applications on Linux. See https://wiki.gnome.org/Projects/SandboxedApps for
more information.
%package -n typelib-1_0-Flatpak-1_0
Summary: Introspection bindings for the flatpak library
Group: System/Libraries
%description -n typelib-1_0-Flatpak-1_0
flatpak is a system for building, distributing and running sandboxed desktop
applications on Linux. See https://wiki.gnome.org/Projects/SandboxedApps for
more information.
%package zsh-completion
Summary: Zsh tab-completion for flatpak
Group: System/Shells
Supplements: (%{name} and zsh)
BuildArch: noarch
%description zsh-completion
flatpak is a system for building, distributing and running sandboxed desktop
applications on Linux. See https://wiki.gnome.org/Projects/SandboxedApps for
more information.
This package provides zsh tab-completion for flatpak.
%package devel
Summary: Development files for the flatpak library
Group: Development/Languages/C and C++
Requires: %{libname} = %{version}
Requires: %{name} = %{version}
Requires: typelib-1_0-Flatpak-1_0 = %{version}
%description devel
flatpak is a system for building, distributing and running sandboxed desktop
applications on Linux. See https://wiki.gnome.org/Projects/SandboxedApps for
more information.
%package remote-flathub
Summary: Add Flathub repository to system flatpak
Group: System/Packages
Requires: flatpak
Requires(postun):flatpak
Requires(postun):sed
%if 0%{?suse_version} > 1600
Supplements: flatpak
%endif
BuildArch: noarch
%description remote-flathub
Flathub is a widely used repository for Flatpak applications. This package
adds the Flathub repository to the list of system flatpak remotes.
%package selinux
Summary: SELinux policy module for flatpak
Group: System Environment/Base
Requires: flatpak
BuildArch: noarch
%{?selinux_requires}
%description selinux
flatpak is a system for building, distributing and running sandboxed desktop
applications on Linux. See https://wiki.gnome.org/Projects/SandboxedApps for
more information.
This package provides the SELinux policy module for flatpak.
%postun remote-flathub
# upon uninstall
if [ $1 == 0 ]; then
# unregister the remote
flatpak remote-delete --system flathub
# and make sure it gets re-applied upon next install
sed -i "/^xa\.applied-remotes=/s/flathub[;]*//" %{_localstatedir}/lib/flatpak/repo/config
fi
%lang_package
%prep
%autosetup -p1
sed -i -e '1s,#!%{_bindir}/env python3,#!%{_bindir}/python3,' scripts/flatpak-*
%build
%meson \
-Dsystem_bubblewrap=bwrap \
-Dhttp_backend=curl \
-Ddbus_config_dir=%{_dbusconfigdir} \
-Dsystem_dbus_proxy=%{_bindir}/xdg-dbus-proxy \
%if !%{support_environment_generators}
-Dgdm_env_file=enabled \
%endif
-Dgtkdoc=enabled \
-Dwayland_security_context=enabled \
-Dselinux_module=enabled \
%{nil}
%meson_build
%sysusers_generate_pre system-helper/flatpak.conf system-user-flatpak flatpak.conf
%install
%meson_install
find %{buildroot} -type f -name "*.la" -delete -print
mkdir -p %{buildroot}%{_sbindir}
ln -s service %{buildroot}%{_sbindir}/rcflatpak-system-helper
# add a 60- prefix to the rules file, otherwise it is not effective, because
# /etc/polkit-1/rules.d/90-default-privs.rules is executed first and if no
# polkit-default-privs rule grants access then an explicit reject is the
# result. This should fix bsc#984817, granting members of group wheel access
# w/o password entry.
mv %{buildroot}/%{_datadir}/polkit-1/rules.d/{,60-}org.freedesktop.Flatpak.rules
%if !%{support_environment_generators}
rm -Rf %{buildroot}%{_systemd_user_env_generator_dir}
rm -Rf %{buildroot}%{_systemd_system_env_generator_dir}
%endif
# System update Systemd service and timer units
install -D -m 644 -t %{buildroot}%{_unitdir} %{SOURCE1}
install -D -m 644 -t %{buildroot}%{_unitdir} %{SOURCE2}
# User update Systemd service and timer units
install -D -m 644 -t %{buildroot}%{_userunitdir} %{SOURCE3}
install -D -m 644 -t %{buildroot}%{_userunitdir} %{SOURCE4}
# Flathub remote repository
install -D -m 644 -t %{buildroot}%{_sysconfdir}/flatpak/remotes.d %{SOURCE5}
%find_lang %{name}
%pre -n system-user-flatpak -f system-user-flatpak.pre
%post -n %{libname} -p /sbin/ldconfig
%postun -n %{libname} -p /sbin/ldconfig
%pre
%service_add_pre flatpak-system-helper.service
%service_add_pre update-system-flatpaks.service
%service_add_pre update-system-flatpaks.timer
%preun
%service_del_preun flatpak-system-helper.service
%service_del_preun update-system-flatpaks.service
%service_del_preun update-system-flatpaks.timer
%post
%service_add_post flatpak-system-helper.service
%service_add_post update-system-flatpaks.service
%service_add_post update-system-flatpaks.timer
# Remove any empty repo directory, which is seen as invalid by flatpak. After that, create a skeleton repository using "flatpak remotes".
if [ -e "%{_localstatedir}/lib/flatpak/repo" ] && [ -z "$(ls -A %{_localstatedir}/lib/flatpak/repo)" ]; then
rm -r %{_localstatedir}/lib/flatpak/repo
fi
%{_bindir}/flatpak remotes 1> /dev/null
Accepting request 1126468 from GNOME:Next - Update to version 1.15.6: + In distributions that compile Flatpak to use a separate bubblewrap (bwrap) executable, version 0.8.0 is now required. + Enabling the optional Wayland security context feature requires libwayland-client, wayland-scanner >= 1.15 and wayland-protocols >= 1.32. + Add --device=input, for access to evdev devices in /dev/input + Update bundled copy of bubblewrap to version 0.8.0, and rely on its features: + Improve error message if seccomp is disabled in kernel config + Security hardening: set user namespace limit to 0, to prevent creation of nested user namespaces in a more robust way + For subsandboxes started by flatpak-portal, inherit environment variables from the flatpak run that started the original instance rather than from flatpak-portal, fixing behaviour of FLATPAK_GL_DRIVERS and similar features + Stop http transfers if a download in progress becomes very slow + Make it easier to configure extra languages, by picking them up from AccountsService if configured there + Add new flatpak_transaction_add_rebase_and_uninstall() API, allowing end-of-life apps to be replaced by their intended replacement more reliably + Create a private Wayland socket with the "security context" extension if available, allowing the compositor to identify connections from sandboxed apps as belonging to the sandbox + Update libglnx to 2023-08-29 + Use features of newer GLib versions if available + Turn off system-level crash reporting infrastructure during some unit tests that involve intentional assertion failures + Add anchors to link to sections of flatpak-metadata documentation + Bug fixes: - Avoid warnings processing symbolic links with GLib >= 2.77.0, and with GLib 2.76.0 (GLib 2.76.1 or later silences these warnings) - Bypass page cache for backend requests in revokefs, fixing installation errors with libostree 2023.4 - Show AppStream metadata in flatpak remote-info as intended - Don't let Flatpak apps inherit VK_DRIVER_FILES or VK_ICD_FILENAMES from the host system, which would be wrong for the sandbox - Fix build failure with prereleases of libappstream 0.17.x - Forward-compatibility with libappstream 1.0 - Fix installation with Meson if configured with -Dauto_sideloading=true - Fix a memory leak - Fix compiler warnings - Make the tests fail more comprehensibly if a required tool is missing - Clean up /var/tmp/flatpak-cache-* directories on boot - Don't force GIO_USE_VFS=local for programs launched via flatpak-spawn - Clarify documentation for D-Bus name ownership + Internal changes: - Split up large source files into smaller modules, reducing internal circular dependencies - Re-synchronize code backported from GLib with the version in GLib - Clarify documentation for D-Bus name ownership - Make the flags used to apply "extra data" clearer - Use glnx_opendirat() where possible + Updated translations. - Add pkgconfig(wayland-client), pkgconfig(wayland-scanner) and pkgconfig(wayland-protocols) BuildRequires and pass with-wayland-security-context=yes to configure: Enable the optional Wayland security context. OBS-URL: https://build.opensuse.org/request/show/1126468 OBS-URL: https://build.opensuse.org/package/show/GNOME:Factory/flatpak?expand=0&rev=187
2023-11-17 16:47:01 +01:00
%tmpfiles_create %{_tmpfilesdir}/flatpak.conf
%postun
%service_del_postun flatpak-system-helper.service
%service_del_postun update-system-flatpaks.service
%service_del_postun update-system-flatpaks.timer
%pre selinux
%selinux_relabel_pre -s %{selinuxtype}
%post selinux
%selinux_modules_install -s %{selinuxtype} %{_datadir}/selinux/packages/flatpak.pp.bz2
%preun selinux
%selinux_relabel_pre -s %{selinuxtype}
%postun selinux
if [ $1 -eq 0 ]; then
%selinux_modules_uninstall -s %{selinuxtype} flatpak
%selinux_relabel_post -s %{selinuxtype}
fi;
%posttrans selinux
%selinux_relabel_post -s %{selinuxtype}
%files -f %{name}.lang
%license COPYING
%{_bindir}/flatpak
Accepting request 610043 from home:stawidy:branches:GNOME:Factory - Update to version 0.11.7: * Fix regression in installing .flatpak bundles - Changes in version 0.11.6: * Further work on the export filename regression, now also fixes the same issue as in 0.11.5 but in flatpak build-finish. * Fix segfault when installing from .flatpakref in gnome-software * Build yacc parser from source. * Don't tab-complete Sources/Locale/Debug extension by default. * Fix tests on debian. - Changes in version 0.11.5: * Fix a regression which caused installation of epiphany and other apps that export multiple .service files to fail. * Fix appstream updates in p2p mode. * Don't distribute generated gdbus code with tarball. * Add documentation for the flatpak portal - Changes in version 0.11.4: * flatpak remove is now an alias for flatpak uninstall. * flatpak uninstall now picks system or user automatically if not specified * New appstream branch format which is more efficient to distribute, the old is still generated for backwards compat. * Appstream data now contains compatible arches (for applications that doesn't exist for the primary arch). For example, an i386-only app is now listed in the x86-64 appstream. * The flatpak version is included in the user agent when downloading. * The Flatpak-Ref http header is set to the currently installing ref when downloading. * New argument --timestamp in build-commit-from. * When updating many apps we now only prune the local repo when all updates are done, making multi-app updates faster. * flatpak build now always allows multiarch use. * flatpak build now mounts app extensions during build. * flatpak build-init now supports --extension to add extension points earlier than build-finish. Also build-finish now supports --remove-extension. * New flatpak portal allows applications to sandbox themselves and restart a newer version of themselves. * New flatpak run options: --no-a11y-bus, --no-documents-portal. * Initial support for end-of-life:ing applications. * New option X-Flatpak-RunOptions in exported desktop/files allow you to specify no-a11y-bus and no-documents-portal. * Support for tagged extension points, which is useful if you want to use the same extension id (but maybe different versions) multiple times in an app. * We now export .service files for names that the app is allowed to own on the session bus. * libflatpak got new methods for listing remotes by type. * libflatpak now has support in FlatpakRemoteRef for getting remote metadata such as end-of-life, download size, metadata etc. * There was some internal restructuring on how installs/updates are done which should improve performance and maintainability. - Changes in version 0.11.3: * Fix "open with" and flatpak run --file-forwarding crash * Fix build with glibc 2.27 - Changes in version 0.11.2: * Remove fuse dependency, since we don't ship document portal anymore * Fix various issues with /home being a symlink to /var/home (atomic) * Allow downgrades when using collection ids * Search on all supported architectures - Changes in version 0.11.1: * Remove document portal and permission store * Add --socket=fallback-x11 permission * Fix dbus proxy vulnerability in authentication phase * Allow personality syscall in devel mode * commit-from: Migrate static deltas with commit * Add "network" storage type for installations * Add flatpak info --show-permissions * Add flatpak info --file-access * search: Update appstream (if stale) before searching * Make libflatpak work when /var/lib/flatpak is empty * build-bundle: Add --from-commit option * Allow appstream ids that don't end in .desktop * Make permission handling ignore unknown permissions for forwards compatibility * Removed incorrect error message in update --appdata when there was no updates * Fix handling of abort in the duplicate remote prompt * Fix division by zero in progress calculation * Fix flatpak remote-info --show-metadata * Fixed crash when installing some flatpak bundle files * Fix installation of telegram * remote-ls -u only considers app from the origin remote * Fix assertion error in extra-data progress reporting * Report nicer errors when trying to downgrade as non-root * pulseaudio: Try to find pulseaudio socket better * Fixed some warnings reported by coverity * Cleaned up code by splitting up some large source files OBS-URL: https://build.opensuse.org/request/show/610043 OBS-URL: https://build.opensuse.org/package/show/GNOME:Factory/flatpak?expand=0&rev=49
2018-05-17 16:41:22 +02:00
%{_libexecdir}/flatpak-portal
%{_libexecdir}/flatpak-session-helper
%{_libexecdir}/flatpak-system-helper
Accepting request 672437 from GNOME:Next - Update to version 1.2.0: + Ensure DeployCollectionID works in flatpakrepo files in all cases. + Don't error out with empty installations in uninstall. + Add helper that validates icon files during export. + Don't allow root to modify the (non-root) per-user flatpak installation, as this risks causing problems later. + Remove some incorrect warnings from flatpak repair. + Allow multiple name segments after prefix when exporting files. + Allow specification of ellipsization in --colums options. + Handle dates as well as timestamps in appdata + Fixed a bug where flatpak remote-delete removed too many refs. + Now we use raw terminal mode during a transaction to a avoid problems with input during the operation causing problems with escape sequences. + Generate a fontconfig directory remapping snippet as will be needed for newer versions of fontconfig. + Support --extra-collection-id in build-commit-from to bind the commit to multiple collection ids. This is work in progress in ostree. - Add pkgconfig(dconf) BuildRequires: New dependency. + This release fixes an issue that lets system-wide installed + The permissions of the files created by the apply_extra script is canonicalized and the script itself is run without any capabilities. + Better matching of existing remotes when the local and remote configuration differs wrt collection ids. + New flatpakrepo DeployCollectionID replaces CollectionID, doing the same thing. It is recommended to use this instead because OBS-URL: https://build.opensuse.org/request/show/672437 OBS-URL: https://build.opensuse.org/package/show/GNOME:Factory/flatpak?expand=0&rev=67
2019-02-07 15:06:26 +01:00
%{_libexecdir}/flatpak-validate-icon
%{_libexecdir}/revokefs-fuse
%{_datadir}/bash-completion/completions/flatpak
%dir %{_datadir}/fish
%dir %{_datadir}/fish/vendor_conf.d
%{_datadir}/fish/vendor_conf.d/flatpak.fish
%dir %{_datadir}/fish/vendor_completions.d
%{_datadir}/fish/vendor_completions.d/flatpak.fish
# # Own dirs so we don't have to depend on dbus for building.
%dir %{_datadir}/dbus-1
%dir %{_datadir}/dbus-1/interfaces
%dir %{_datadir}/dbus-1/services
%{_datadir}/dbus-1/interfaces/org.freedesktop.Flatpak.xml
Accepting request 610043 from home:stawidy:branches:GNOME:Factory - Update to version 0.11.7: * Fix regression in installing .flatpak bundles - Changes in version 0.11.6: * Further work on the export filename regression, now also fixes the same issue as in 0.11.5 but in flatpak build-finish. * Fix segfault when installing from .flatpakref in gnome-software * Build yacc parser from source. * Don't tab-complete Sources/Locale/Debug extension by default. * Fix tests on debian. - Changes in version 0.11.5: * Fix a regression which caused installation of epiphany and other apps that export multiple .service files to fail. * Fix appstream updates in p2p mode. * Don't distribute generated gdbus code with tarball. * Add documentation for the flatpak portal - Changes in version 0.11.4: * flatpak remove is now an alias for flatpak uninstall. * flatpak uninstall now picks system or user automatically if not specified * New appstream branch format which is more efficient to distribute, the old is still generated for backwards compat. * Appstream data now contains compatible arches (for applications that doesn't exist for the primary arch). For example, an i386-only app is now listed in the x86-64 appstream. * The flatpak version is included in the user agent when downloading. * The Flatpak-Ref http header is set to the currently installing ref when downloading. * New argument --timestamp in build-commit-from. * When updating many apps we now only prune the local repo when all updates are done, making multi-app updates faster. * flatpak build now always allows multiarch use. * flatpak build now mounts app extensions during build. * flatpak build-init now supports --extension to add extension points earlier than build-finish. Also build-finish now supports --remove-extension. * New flatpak portal allows applications to sandbox themselves and restart a newer version of themselves. * New flatpak run options: --no-a11y-bus, --no-documents-portal. * Initial support for end-of-life:ing applications. * New option X-Flatpak-RunOptions in exported desktop/files allow you to specify no-a11y-bus and no-documents-portal. * Support for tagged extension points, which is useful if you want to use the same extension id (but maybe different versions) multiple times in an app. * We now export .service files for names that the app is allowed to own on the session bus. * libflatpak got new methods for listing remotes by type. * libflatpak now has support in FlatpakRemoteRef for getting remote metadata such as end-of-life, download size, metadata etc. * There was some internal restructuring on how installs/updates are done which should improve performance and maintainability. - Changes in version 0.11.3: * Fix "open with" and flatpak run --file-forwarding crash * Fix build with glibc 2.27 - Changes in version 0.11.2: * Remove fuse dependency, since we don't ship document portal anymore * Fix various issues with /home being a symlink to /var/home (atomic) * Allow downgrades when using collection ids * Search on all supported architectures - Changes in version 0.11.1: * Remove document portal and permission store * Add --socket=fallback-x11 permission * Fix dbus proxy vulnerability in authentication phase * Allow personality syscall in devel mode * commit-from: Migrate static deltas with commit * Add "network" storage type for installations * Add flatpak info --show-permissions * Add flatpak info --file-access * search: Update appstream (if stale) before searching * Make libflatpak work when /var/lib/flatpak is empty * build-bundle: Add --from-commit option * Allow appstream ids that don't end in .desktop * Make permission handling ignore unknown permissions for forwards compatibility * Removed incorrect error message in update --appdata when there was no updates * Fix handling of abort in the duplicate remote prompt * Fix division by zero in progress calculation * Fix flatpak remote-info --show-metadata * Fixed crash when installing some flatpak bundle files * Fix installation of telegram * remote-ls -u only considers app from the origin remote * Fix assertion error in extra-data progress reporting * Report nicer errors when trying to downgrade as non-root * pulseaudio: Try to find pulseaudio socket better * Fixed some warnings reported by coverity * Cleaned up code by splitting up some large source files OBS-URL: https://build.opensuse.org/request/show/610043 OBS-URL: https://build.opensuse.org/package/show/GNOME:Factory/flatpak?expand=0&rev=49
2018-05-17 16:41:22 +02:00
%{_datadir}/dbus-1/interfaces/org.freedesktop.portal.Flatpak.xml
%{_datadir}/dbus-1/services/org.freedesktop.Flatpak.service
Accepting request 610043 from home:stawidy:branches:GNOME:Factory - Update to version 0.11.7: * Fix regression in installing .flatpak bundles - Changes in version 0.11.6: * Further work on the export filename regression, now also fixes the same issue as in 0.11.5 but in flatpak build-finish. * Fix segfault when installing from .flatpakref in gnome-software * Build yacc parser from source. * Don't tab-complete Sources/Locale/Debug extension by default. * Fix tests on debian. - Changes in version 0.11.5: * Fix a regression which caused installation of epiphany and other apps that export multiple .service files to fail. * Fix appstream updates in p2p mode. * Don't distribute generated gdbus code with tarball. * Add documentation for the flatpak portal - Changes in version 0.11.4: * flatpak remove is now an alias for flatpak uninstall. * flatpak uninstall now picks system or user automatically if not specified * New appstream branch format which is more efficient to distribute, the old is still generated for backwards compat. * Appstream data now contains compatible arches (for applications that doesn't exist for the primary arch). For example, an i386-only app is now listed in the x86-64 appstream. * The flatpak version is included in the user agent when downloading. * The Flatpak-Ref http header is set to the currently installing ref when downloading. * New argument --timestamp in build-commit-from. * When updating many apps we now only prune the local repo when all updates are done, making multi-app updates faster. * flatpak build now always allows multiarch use. * flatpak build now mounts app extensions during build. * flatpak build-init now supports --extension to add extension points earlier than build-finish. Also build-finish now supports --remove-extension. * New flatpak portal allows applications to sandbox themselves and restart a newer version of themselves. * New flatpak run options: --no-a11y-bus, --no-documents-portal. * Initial support for end-of-life:ing applications. * New option X-Flatpak-RunOptions in exported desktop/files allow you to specify no-a11y-bus and no-documents-portal. * Support for tagged extension points, which is useful if you want to use the same extension id (but maybe different versions) multiple times in an app. * We now export .service files for names that the app is allowed to own on the session bus. * libflatpak got new methods for listing remotes by type. * libflatpak now has support in FlatpakRemoteRef for getting remote metadata such as end-of-life, download size, metadata etc. * There was some internal restructuring on how installs/updates are done which should improve performance and maintainability. - Changes in version 0.11.3: * Fix "open with" and flatpak run --file-forwarding crash * Fix build with glibc 2.27 - Changes in version 0.11.2: * Remove fuse dependency, since we don't ship document portal anymore * Fix various issues with /home being a symlink to /var/home (atomic) * Allow downgrades when using collection ids * Search on all supported architectures - Changes in version 0.11.1: * Remove document portal and permission store * Add --socket=fallback-x11 permission * Fix dbus proxy vulnerability in authentication phase * Allow personality syscall in devel mode * commit-from: Migrate static deltas with commit * Add "network" storage type for installations * Add flatpak info --show-permissions * Add flatpak info --file-access * search: Update appstream (if stale) before searching * Make libflatpak work when /var/lib/flatpak is empty * build-bundle: Add --from-commit option * Allow appstream ids that don't end in .desktop * Make permission handling ignore unknown permissions for forwards compatibility * Removed incorrect error message in update --appdata when there was no updates * Fix handling of abort in the duplicate remote prompt * Fix division by zero in progress calculation * Fix flatpak remote-info --show-metadata * Fixed crash when installing some flatpak bundle files * Fix installation of telegram * remote-ls -u only considers app from the origin remote * Fix assertion error in extra-data progress reporting * Report nicer errors when trying to downgrade as non-root * pulseaudio: Try to find pulseaudio socket better * Fixed some warnings reported by coverity * Cleaned up code by splitting up some large source files OBS-URL: https://build.opensuse.org/request/show/610043 OBS-URL: https://build.opensuse.org/package/show/GNOME:Factory/flatpak?expand=0&rev=49
2018-05-17 16:41:22 +02:00
%{_datadir}/dbus-1/services/org.freedesktop.portal.Flatpak.service
%{_datadir}/dbus-1/system-services/org.freedesktop.Flatpak.SystemHelper.service
%{_dbusconfigdir}/org.freedesktop.Flatpak.SystemHelper.conf
# policykit rules
%{_datadir}/polkit-1/actions/org.freedesktop.Flatpak.policy
%{_datadir}/polkit-1/rules.d/60-org.freedesktop.Flatpak.rules
%{_mandir}/man1/%{name}*.1%{?ext_man}
%{_mandir}/man5/flatpak-metadata.5%{?ext_man}
%{_mandir}/man5/flatpak-flatpakref.5%{?ext_man}
%{_mandir}/man5/flatpakref.5%{?ext_man}
%{_mandir}/man5/flatpak-flatpakrepo.5%{?ext_man}
%{_mandir}/man5/flatpakrepo.5%{?ext_man}
%{_mandir}/man5/flatpak-installation.5%{?ext_man}
%{_mandir}/man5/flatpak-remote.5%{?ext_man}
%{_datadir}/%{name}/
%config %{_sysconfdir}/profile.d/flatpak.sh
%dir %{_sysconfdir}/flatpak
%dir %{_sysconfdir}/flatpak/remotes.d
%{_unitdir}/flatpak-system-helper.service
%{_unitdir}/update-system-flatpaks.{service,timer}
%{_userunitdir}/update-user-flatpaks.{service,timer}
%{_sbindir}/rcflatpak-system-helper
%{_userunitdir}/flatpak-session-helper.service
Accepting request 610043 from home:stawidy:branches:GNOME:Factory - Update to version 0.11.7: * Fix regression in installing .flatpak bundles - Changes in version 0.11.6: * Further work on the export filename regression, now also fixes the same issue as in 0.11.5 but in flatpak build-finish. * Fix segfault when installing from .flatpakref in gnome-software * Build yacc parser from source. * Don't tab-complete Sources/Locale/Debug extension by default. * Fix tests on debian. - Changes in version 0.11.5: * Fix a regression which caused installation of epiphany and other apps that export multiple .service files to fail. * Fix appstream updates in p2p mode. * Don't distribute generated gdbus code with tarball. * Add documentation for the flatpak portal - Changes in version 0.11.4: * flatpak remove is now an alias for flatpak uninstall. * flatpak uninstall now picks system or user automatically if not specified * New appstream branch format which is more efficient to distribute, the old is still generated for backwards compat. * Appstream data now contains compatible arches (for applications that doesn't exist for the primary arch). For example, an i386-only app is now listed in the x86-64 appstream. * The flatpak version is included in the user agent when downloading. * The Flatpak-Ref http header is set to the currently installing ref when downloading. * New argument --timestamp in build-commit-from. * When updating many apps we now only prune the local repo when all updates are done, making multi-app updates faster. * flatpak build now always allows multiarch use. * flatpak build now mounts app extensions during build. * flatpak build-init now supports --extension to add extension points earlier than build-finish. Also build-finish now supports --remove-extension. * New flatpak portal allows applications to sandbox themselves and restart a newer version of themselves. * New flatpak run options: --no-a11y-bus, --no-documents-portal. * Initial support for end-of-life:ing applications. * New option X-Flatpak-RunOptions in exported desktop/files allow you to specify no-a11y-bus and no-documents-portal. * Support for tagged extension points, which is useful if you want to use the same extension id (but maybe different versions) multiple times in an app. * We now export .service files for names that the app is allowed to own on the session bus. * libflatpak got new methods for listing remotes by type. * libflatpak now has support in FlatpakRemoteRef for getting remote metadata such as end-of-life, download size, metadata etc. * There was some internal restructuring on how installs/updates are done which should improve performance and maintainability. - Changes in version 0.11.3: * Fix "open with" and flatpak run --file-forwarding crash * Fix build with glibc 2.27 - Changes in version 0.11.2: * Remove fuse dependency, since we don't ship document portal anymore * Fix various issues with /home being a symlink to /var/home (atomic) * Allow downgrades when using collection ids * Search on all supported architectures - Changes in version 0.11.1: * Remove document portal and permission store * Add --socket=fallback-x11 permission * Fix dbus proxy vulnerability in authentication phase * Allow personality syscall in devel mode * commit-from: Migrate static deltas with commit * Add "network" storage type for installations * Add flatpak info --show-permissions * Add flatpak info --file-access * search: Update appstream (if stale) before searching * Make libflatpak work when /var/lib/flatpak is empty * build-bundle: Add --from-commit option * Allow appstream ids that don't end in .desktop * Make permission handling ignore unknown permissions for forwards compatibility * Removed incorrect error message in update --appdata when there was no updates * Fix handling of abort in the duplicate remote prompt * Fix division by zero in progress calculation * Fix flatpak remote-info --show-metadata * Fixed crash when installing some flatpak bundle files * Fix installation of telegram * remote-ls -u only considers app from the origin remote * Fix assertion error in extra-data progress reporting * Report nicer errors when trying to downgrade as non-root * pulseaudio: Try to find pulseaudio socket better * Fixed some warnings reported by coverity * Cleaned up code by splitting up some large source files OBS-URL: https://build.opensuse.org/request/show/610043 OBS-URL: https://build.opensuse.org/package/show/GNOME:Factory/flatpak?expand=0&rev=49
2018-05-17 16:41:22 +02:00
%{_userunitdir}/flatpak-portal.service
%ghost %dir %{_localstatedir}/lib/flatpak
%if %{support_environment_generators}
%dir %{_systemd_user_env_generator_dir}
%{_systemd_user_env_generator_dir}/60-flatpak
%{_systemd_system_env_generator_dir}/60-flatpak-system-only
%else
# Own dirs so we don't have to depend on gdm for building.
%dir %{_datadir}/gdm/
%dir %{_datadir}/gdm/env.d/
%{_datadir}/gdm/env.d/flatpak.env
%endif
%{_libexecdir}/flatpak-oci-authenticator
%{_userunitdir}/flatpak-oci-authenticator.service
%{_datadir}/dbus-1/interfaces/org.freedesktop.Flatpak.Authenticator.xml
%{_datadir}/dbus-1/services/org.flatpak.Authenticator.Oci.service
Accepting request 1126468 from GNOME:Next - Update to version 1.15.6: + In distributions that compile Flatpak to use a separate bubblewrap (bwrap) executable, version 0.8.0 is now required. + Enabling the optional Wayland security context feature requires libwayland-client, wayland-scanner >= 1.15 and wayland-protocols >= 1.32. + Add --device=input, for access to evdev devices in /dev/input + Update bundled copy of bubblewrap to version 0.8.0, and rely on its features: + Improve error message if seccomp is disabled in kernel config + Security hardening: set user namespace limit to 0, to prevent creation of nested user namespaces in a more robust way + For subsandboxes started by flatpak-portal, inherit environment variables from the flatpak run that started the original instance rather than from flatpak-portal, fixing behaviour of FLATPAK_GL_DRIVERS and similar features + Stop http transfers if a download in progress becomes very slow + Make it easier to configure extra languages, by picking them up from AccountsService if configured there + Add new flatpak_transaction_add_rebase_and_uninstall() API, allowing end-of-life apps to be replaced by their intended replacement more reliably + Create a private Wayland socket with the "security context" extension if available, allowing the compositor to identify connections from sandboxed apps as belonging to the sandbox + Update libglnx to 2023-08-29 + Use features of newer GLib versions if available + Turn off system-level crash reporting infrastructure during some unit tests that involve intentional assertion failures + Add anchors to link to sections of flatpak-metadata documentation + Bug fixes: - Avoid warnings processing symbolic links with GLib >= 2.77.0, and with GLib 2.76.0 (GLib 2.76.1 or later silences these warnings) - Bypass page cache for backend requests in revokefs, fixing installation errors with libostree 2023.4 - Show AppStream metadata in flatpak remote-info as intended - Don't let Flatpak apps inherit VK_DRIVER_FILES or VK_ICD_FILENAMES from the host system, which would be wrong for the sandbox - Fix build failure with prereleases of libappstream 0.17.x - Forward-compatibility with libappstream 1.0 - Fix installation with Meson if configured with -Dauto_sideloading=true - Fix a memory leak - Fix compiler warnings - Make the tests fail more comprehensibly if a required tool is missing - Clean up /var/tmp/flatpak-cache-* directories on boot - Don't force GIO_USE_VFS=local for programs launched via flatpak-spawn - Clarify documentation for D-Bus name ownership + Internal changes: - Split up large source files into smaller modules, reducing internal circular dependencies - Re-synchronize code backported from GLib with the version in GLib - Clarify documentation for D-Bus name ownership - Make the flags used to apply "extra data" clearer - Use glnx_opendirat() where possible + Updated translations. - Add pkgconfig(wayland-client), pkgconfig(wayland-scanner) and pkgconfig(wayland-protocols) BuildRequires and pass with-wayland-security-context=yes to configure: Enable the optional Wayland security context. OBS-URL: https://build.opensuse.org/request/show/1126468 OBS-URL: https://build.opensuse.org/package/show/GNOME:Factory/flatpak?expand=0&rev=187
2023-11-17 16:47:01 +01:00
%{_tmpfilesdir}/flatpak.conf
%files -n system-user-flatpak
%license COPYING
%{_sysusersdir}/flatpak.conf
%files -n %{libname}
%license COPYING
%{_libdir}/libflatpak.so.*
%files -n typelib-1_0-Flatpak-1_0
%license COPYING
%{_libdir}/girepository-1.0/Flatpak-1.0.typelib
%files zsh-completion
%license COPYING
%dir %{_datadir}/zsh/site-functions
%{_datadir}/zsh/site-functions/_flatpak
%files devel
%license COPYING
%doc %{_datadir}/gtk-doc/html/flatpak
%dir %{_datadir}/doc/flatpak
%doc %{_datadir}/doc/flatpak/docbook.css
%doc %{_datadir}/doc/flatpak/flatpak-docs.html
%{_bindir}/flatpak-bisect
%{_bindir}/flatpak-coredumpctl
%{_libdir}/pkgconfig/flatpak.pc
%{_includedir}/%{name}/
%{_libdir}/libflatpak.so
%{_datadir}/gir-1.0/Flatpak-1.0.gir
%files remote-flathub
%config %{_sysconfdir}/flatpak/remotes.d/flathub.flatpakrepo
%files selinux
%{_datadir}/selinux/devel/include/contrib/flatpak.if
%{_datadir}/selinux/packages/flatpak.pp.bz2
%changelog