Accepting request 1199852 from network:vpn

OBS-URL: https://build.opensuse.org/request/show/1199852
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/nebula?expand=0&rev=6

_service

@@ -3,7 +3,7 @@
   <service name="tar_scm" mode="manual">
     <param name="url">https://github.com/slackhq/nebula.git</param>
     <param name="scm">git</param>
-    <param name="revision">refs/tags/v1.9.3</param>
+    <param name="revision">refs/tags/v1.9.4</param>
     <param name="versionformat">@PARENT_TAG@</param>
     <param name="versionrewrite-pattern">v(.*)</param>
     <param name="package-meta">yes</param>

enable-pie.patch

@@ -1,12 +0,0 @@
-diff -rub nebula/Makefile nebula-patched/Makefile
---- nebula/Makefile	2024-04-09 08:35:28.559936158 +0200
-+++ nebula-patched/Makefile	2024-04-09 08:59:08.363591927 +0200
-@@ -96,7 +96,7 @@
- 
- release-boringcrypto: build/nebula-linux-$(shell go env GOARCH)-boringcrypto.tar.gz
- 
--BUILD_ARGS = -trimpath
-+BUILD_ARGS = -trimpath -buildmode=pie
- 
- bin-windows: build/windows-amd64/nebula.exe build/windows-amd64/nebula-cert.exe
- 	mv $? .

nebula-1.9.3.tar.gz

@@ -1,3 +0,0 @@
-version https://git-lfs.github.com/spec/v1
-oid sha256:2fa15dcdc9f06787adf3c452b740c2836b1457ea3dd5a49872d96bf74f5b346a
-size 2300352

nebula-1.9.4.tar.gz

@@ -0,0 +1,3 @@
+version https://git-lfs.github.com/spec/v1
+oid sha256:8c21d82be965b86a2e0a7a033284e6a1424eb5b13f7986a7fbe87db178f06f7f
+size 2366912

nebula.changes

@@ -1,3 +1,18 @@
+-------------------------------------------------------------------
+Tue Sep 10 08:26:36 UTC 2024 - Richard Rahl <rrahl0@opensuse.org>
+
+- update to 1.9.4:
+  * Support UDP dialing with gVisor
+  * Make some Nebula state programmatically available via control object
+  * Switch internal representation of IPs to netip, to prepare for IPv6 support
+  * Various dependency updates
+  * Fix a bug on big endian hosts, like mips
+  * Fix a rare panic if a local index collision happens
+  * Fix integer wraparound in the calculation of handshake timeouts on 32-bit
+- build the binaries non statically
+- remove enable-pie.patch as it's not needed anymore, since we build the binaries
+  manually, not using the Makefile anymore
+
 -------------------------------------------------------------------
 Fri Jun  7 06:10:38 UTC 2024 - Richard Rahl <rrahl0@disroot.org>
 

nebula.spec

@@ -17,7 +17,7 @@
 
 
 Name:           nebula
-Version:        1.9.3
+Version:        1.9.4
 Release:        0
 Summary:        A scalable overlay networking tool
 License:        MIT
@@ -25,7 +25,6 @@ URL:            https://github.com/slackhq/nebula
 Source0:        %{name}-%{version}.tar.gz
 Source1:        vendor.tar.zst
 Source2:        %{name}.service
-Patch0:         enable-pie.patch
 BuildRequires:  git-core
 BuildRequires:  golang-packaging
 BuildRequires:  zstd
@@ -44,14 +43,15 @@ Summary:        Seperate %{name}-cert package
 This package only includes the %{name}-cert binary.
 
 %prep
-%autosetup -p1 -a1
+%autosetup -a1
 
 %build
-%make_build
+go build -buildmode=pie -mod=vendor -ldflags "-X main.Build=%{version}-dirty" -o %{name} ./cmd/%{name}
+go build -buildmode=pie -mod=vendor -ldflags "-X main.Build=%{version}-dirty" -o %{name}-cert ./cmd/%{name}-cert
 
 %install
-install -Dm0755 -t %{buildroot}%{_sbindir} nebula
-install -Dm0755 -t %{buildroot}%{_bindir} nebula-cert
+install -Dm0755 -t %{buildroot}%{_sbindir} %{name}
+install -Dm0755 -t %{buildroot}%{_bindir} %{name}-cert
 install -Dm0644 -t %{buildroot}%{_unitdir} %{SOURCE2}
 install -d %{buildroot}%{_sysconfdir}/%{name}
 

vendor.tar.zst

@@ -1,3 +1,3 @@
 version https://git-lfs.github.com/spec/v1
-oid sha256:48183543d4fe551aad68a350c7672f0f995ae22a6ac9714e8ce57e26e3ddb9ec
-size 2431455
+oid sha256:52641345356545ef4d9c04b4d50107bb2371790062d8e21b08c327af2462720e
+size 2536177