|
|
|
|
@@ -1,7 +1,7 @@
|
|
|
|
|
#
|
|
|
|
|
# spec file for package patterns-base
|
|
|
|
|
#
|
|
|
|
|
# Copyright (c) 2025 SUSE LLC
|
|
|
|
|
# Copyright (c) 2024 SUSE LLC
|
|
|
|
|
#
|
|
|
|
|
# All modifications and additions to the file contributed by third parties
|
|
|
|
|
# remain the property of their copyright owners, unless otherwise agreed
|
|
|
|
|
@@ -18,7 +18,7 @@
|
|
|
|
|
|
|
|
|
|
%bcond_with betatest
|
|
|
|
|
Name: patterns-base
|
|
|
|
|
Version: 20241218
|
|
|
|
|
Version: 20200505
|
|
|
|
|
Release: 0
|
|
|
|
|
Summary: Patterns for Installation (base patterns)
|
|
|
|
|
License: MIT
|
|
|
|
|
@@ -38,9 +38,7 @@ This particular package contains all the base / core patterns (and those that do
|
|
|
|
|
|
|
|
|
|
################################################################################
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
# bsc#1088669 - only provide 32bit pattern for 64bit intel
|
|
|
|
|
%if 0%{?is_opensuse}
|
|
|
|
|
%ifarch x86_64
|
|
|
|
|
%package 32bit
|
|
|
|
|
%pattern_basetechnologies
|
|
|
|
|
@@ -59,11 +57,9 @@ This will install the 32-bit variant of all selected patterns. This allows to ex
|
|
|
|
|
%dir %{_docdir}/patterns
|
|
|
|
|
%{_docdir}/patterns/32bit.txt
|
|
|
|
|
%endif
|
|
|
|
|
%endif
|
|
|
|
|
|
|
|
|
|
################################################################################
|
|
|
|
|
|
|
|
|
|
%if 0%{?is_opensuse}
|
|
|
|
|
%package apparmor
|
|
|
|
|
%pattern_basetechnologies
|
|
|
|
|
Summary: AppArmor
|
|
|
|
|
@@ -78,9 +74,7 @@ Requires: apparmor-profiles
|
|
|
|
|
Requires: pattern() = minimal_base
|
|
|
|
|
Recommends: apparmor-docs
|
|
|
|
|
Recommends: apparmor-utils
|
|
|
|
|
%if 0%{?suse_version} > 1600
|
|
|
|
|
Recommends: yast2-apparmor
|
|
|
|
|
%endif
|
|
|
|
|
Suggests: pam_apparmor
|
|
|
|
|
%{obsolete_legacy_pattern apparmor}
|
|
|
|
|
%if 0%{?is_opensuse}
|
|
|
|
|
@@ -95,7 +89,6 @@ AppArmor is an application security framework that provides mandatory access con
|
|
|
|
|
%files apparmor
|
|
|
|
|
%dir %{_docdir}/patterns
|
|
|
|
|
%{_docdir}/patterns/apparmor.txt
|
|
|
|
|
%endif
|
|
|
|
|
|
|
|
|
|
################################################################################
|
|
|
|
|
|
|
|
|
|
@@ -127,8 +120,6 @@ Provides: pattern-visible()
|
|
|
|
|
Requires: aaa_base
|
|
|
|
|
Requires: bash
|
|
|
|
|
Requires: ca-certificates-mozilla
|
|
|
|
|
Requires: ntp-daemon
|
|
|
|
|
Suggests: chrony
|
|
|
|
|
Requires: coreutils
|
|
|
|
|
Requires: coreutils-systemd
|
|
|
|
|
Requires: glibc
|
|
|
|
|
@@ -137,55 +128,37 @@ Requires: pam
|
|
|
|
|
Requires: pam-config
|
|
|
|
|
Requires: pattern() = minimal_base
|
|
|
|
|
# Support multiversion(kernel) (jsc#SLE-10162)
|
|
|
|
|
# FIXME remove if opensuse when package is in SLFO
|
|
|
|
|
%if 0%{?is_opensuse}
|
|
|
|
|
%{requires_on_traditional purge-kernels-service}
|
|
|
|
|
%endif
|
|
|
|
|
Requires: purge-kernels-service
|
|
|
|
|
Requires: rpm
|
|
|
|
|
Requires: system-user-nobody
|
|
|
|
|
Requires: systemd
|
|
|
|
|
Requires: util-linux
|
|
|
|
|
Requires: user(nobody)
|
|
|
|
|
# Add some static base tool in case system explodes; Recommend only on traditional systems, as users are free to uninstall it
|
|
|
|
|
%if 0%{?is_opensuse}
|
|
|
|
|
%{requires_on_transactional busybox}
|
|
|
|
|
%endif
|
|
|
|
|
%{recommends_on_traditional busybox-static}
|
|
|
|
|
%{recommends_on_traditional elfutils}
|
|
|
|
|
Requires: glibc-locale-base
|
|
|
|
|
%{recommends_on_traditional hostname}
|
|
|
|
|
%{requires_on_transactional /usr/bin/hostname}
|
|
|
|
|
%{requires_on_transactional_recommends_otherwise iproute2}
|
|
|
|
|
%{recommends_on_traditional issue-generator}
|
|
|
|
|
%{requires_on_transactional_recommends_otherwise lastlog2}
|
|
|
|
|
%if !0%{?is_opensuse}
|
|
|
|
|
%{requires_on_transactional pam_pwquality}
|
|
|
|
|
%else
|
|
|
|
|
%{recommends_on_traditional pam_pwquality}
|
|
|
|
|
%endif
|
|
|
|
|
Requires: shadow
|
|
|
|
|
%{recommends_on_traditional system-group-trusted}
|
|
|
|
|
%if !0%{?is_opensuse}
|
|
|
|
|
%{requires_on_transactional system-group-wheel}
|
|
|
|
|
%else
|
|
|
|
|
%{recommends_on_traditional system-group-wheel}
|
|
|
|
|
%endif
|
|
|
|
|
%{recommends_on_traditional system-user-bin}
|
|
|
|
|
%{recommends_on_traditional system-user-daemon}
|
|
|
|
|
Requires: terminfo-base
|
|
|
|
|
%{recommends_on_traditional terminfo}
|
|
|
|
|
%{recommends_on_traditional terminfo-iterm}
|
|
|
|
|
%{recommends_on_traditional terminfo-screen}
|
|
|
|
|
Requires: timezone
|
|
|
|
|
Requires: wtmpdb
|
|
|
|
|
%{recommends_on_traditional service(network)}
|
|
|
|
|
%{requires_on_transactional NetworkManager}
|
|
|
|
|
%if 0%{?is_opensuse}
|
|
|
|
|
%{requires_on_transactional NetworkManager-bluetooth}
|
|
|
|
|
%endif
|
|
|
|
|
# Add some static base tool in case system explodes; Recommend only, as users are free to uninstall it
|
|
|
|
|
Recommends: busybox-static
|
|
|
|
|
Recommends: elfutils
|
|
|
|
|
Recommends: glibc-locale-base
|
|
|
|
|
Recommends: hostname
|
|
|
|
|
Recommends: iproute2
|
|
|
|
|
Recommends: issue-generator
|
|
|
|
|
Recommends: lastlog2
|
|
|
|
|
Recommends: pam_pwquality
|
|
|
|
|
Recommends: shadow
|
|
|
|
|
Recommends: system-group-trusted
|
|
|
|
|
Recommends: system-group-wheel
|
|
|
|
|
Recommends: system-user-bin
|
|
|
|
|
Recommends: system-user-daemon
|
|
|
|
|
Recommends: terminfo
|
|
|
|
|
Recommends: terminfo-iterm
|
|
|
|
|
Recommends: terminfo-screen
|
|
|
|
|
Recommends: timezone
|
|
|
|
|
Recommends: wtmpdb
|
|
|
|
|
Recommends: service(network)
|
|
|
|
|
# We don't necessarily want zypper in specific minimal environments
|
|
|
|
|
# e.g. buildroots and locked down appliance environments
|
|
|
|
|
%{recommends_on_traditional zypper}
|
|
|
|
|
Requires: procps
|
|
|
|
|
Recommends: zypper
|
|
|
|
|
# We don't necessarily want procps but it's highly useful in default
|
|
|
|
|
# installations
|
|
|
|
|
Recommends: procps
|
|
|
|
|
# If anything requests "kernel", pick the full kernel package by default
|
|
|
|
|
Suggests: kernel-default
|
|
|
|
|
# we have two providers for 'pkgconfig(jack)' - prefer the real one to the one from pipewire
|
|
|
|
|
@@ -200,8 +173,6 @@ Suggests: openssl-1_1
|
|
|
|
|
Suggests: postfix
|
|
|
|
|
# We have two providers of psmisc, favour the regular one (not the busybox one)
|
|
|
|
|
Suggests: psmisc
|
|
|
|
|
# rather than busybox-tar
|
|
|
|
|
Suggests: tar
|
|
|
|
|
# we have two providers for 'pulseaudio' - prefer pipewire or pipewire depending on suse_version
|
|
|
|
|
# we have two providers for 'service(network)' - prefer NM or wicked depending on suse_version
|
|
|
|
|
%if 0%{?suse_version} > 1500
|
|
|
|
|
@@ -218,7 +189,7 @@ Suggests: xz
|
|
|
|
|
%if %{with betatest}
|
|
|
|
|
Requires: aaa_base-malloccheck
|
|
|
|
|
%endif
|
|
|
|
|
%if !0%{?is_opensuse}
|
|
|
|
|
%if 0%{?sle_version}
|
|
|
|
|
Recommends: SUSEConnect
|
|
|
|
|
Recommends: btrfsprogs
|
|
|
|
|
# SLES users expect all FS tools to be installed
|
|
|
|
|
@@ -243,7 +214,6 @@ This is the base runtime system. It contains only a basic multiuser booting sys
|
|
|
|
|
|
|
|
|
|
# This pattern contains everything the SLES x11 package used to have that
|
|
|
|
|
# doesn't need to be in the openSUSE x11 package
|
|
|
|
|
%if 0%{?is_opensuse}
|
|
|
|
|
%package basic_desktop
|
|
|
|
|
%pattern_graphicalenvironments
|
|
|
|
|
Summary: A basic desktop (based on IceWM)
|
|
|
|
|
@@ -268,7 +238,6 @@ This pattern installs a rather basic desktop (icewm)
|
|
|
|
|
%files basic_desktop
|
|
|
|
|
%dir %{_docdir}/patterns
|
|
|
|
|
%{_docdir}/patterns/basic_desktop.txt
|
|
|
|
|
%endif
|
|
|
|
|
|
|
|
|
|
################################################################################
|
|
|
|
|
|
|
|
|
|
@@ -345,7 +314,7 @@ Recommends: pam-manpages
|
|
|
|
|
%{obsolete_legacy_pattern documentation}
|
|
|
|
|
|
|
|
|
|
%description documentation
|
|
|
|
|
Man tool and Man pages for various tools and POSIX API.
|
|
|
|
|
Help and Support Documentation
|
|
|
|
|
|
|
|
|
|
%files documentation
|
|
|
|
|
%dir %{_docdir}/patterns
|
|
|
|
|
@@ -353,27 +322,6 @@ Man tool and Man pages for various tools and POSIX API.
|
|
|
|
|
|
|
|
|
|
################################################################################
|
|
|
|
|
|
|
|
|
|
%package kdump
|
|
|
|
|
%pattern_basetechnologies
|
|
|
|
|
Summary: Kernel dump tooling
|
|
|
|
|
Group: Metapackages
|
|
|
|
|
Provides: pattern() = kdump
|
|
|
|
|
Provides: pattern-icon() = pattern-basis
|
|
|
|
|
Provides: pattern-order() = 1005
|
|
|
|
|
Provides: pattern-visible()
|
|
|
|
|
Requires: kdump
|
|
|
|
|
Recommends: (cockpit-kdump if cockpit)
|
|
|
|
|
Requires: pattern() = minimal_base
|
|
|
|
|
|
|
|
|
|
%description kdump
|
|
|
|
|
Tools used to trigger and handle kernel dump (kdump).
|
|
|
|
|
|
|
|
|
|
%files kdump
|
|
|
|
|
%dir %{_docdir}/patterns
|
|
|
|
|
%{_docdir}/patterns/kdump.txt
|
|
|
|
|
|
|
|
|
|
################################################################################
|
|
|
|
|
|
|
|
|
|
%package enhanced_base
|
|
|
|
|
%pattern_basetechnologies
|
|
|
|
|
Summary: Enhanced Base System
|
|
|
|
|
@@ -386,12 +334,8 @@ Requires: pattern() = base
|
|
|
|
|
%if 0%{?is_opensuse}
|
|
|
|
|
Recommends: pattern() = documentation
|
|
|
|
|
Recommends: pattern() = sw_management
|
|
|
|
|
%if 0%{?suse_version} > 1600
|
|
|
|
|
Recommends: pattern() = yast2_basis
|
|
|
|
|
%endif
|
|
|
|
|
%else
|
|
|
|
|
Recommends: pattern() = kdump
|
|
|
|
|
%endif
|
|
|
|
|
Requires: openssh
|
|
|
|
|
Recommends: aaa_base-extras
|
|
|
|
|
# getfacl and setfacl
|
|
|
|
|
@@ -446,8 +390,6 @@ Recommends: krb5
|
|
|
|
|
Recommends: less
|
|
|
|
|
Recommends: logrotate
|
|
|
|
|
Recommends: lsscsi
|
|
|
|
|
# lvm2 should be there by default (#1239784)
|
|
|
|
|
Recommends: lvm2
|
|
|
|
|
# man by default (#304687)
|
|
|
|
|
Recommends: man
|
|
|
|
|
# needed for detecting software raid - required by yast2-storage too
|
|
|
|
|
@@ -474,11 +416,7 @@ Recommends: pciutils-ids
|
|
|
|
|
Recommends: perl-Bootloader
|
|
|
|
|
Recommends: perl-base
|
|
|
|
|
Recommends: pinentry
|
|
|
|
|
%ifarch s390x
|
|
|
|
|
Recommends: blog-plymouth
|
|
|
|
|
%else
|
|
|
|
|
Recommends: plymouth
|
|
|
|
|
%endif
|
|
|
|
|
# fuser (psmisc) by default (#304694)
|
|
|
|
|
Recommends: psmisc
|
|
|
|
|
Recommends: rsync
|
|
|
|
|
@@ -487,9 +425,6 @@ Recommends: sed
|
|
|
|
|
Recommends: sg3_utils
|
|
|
|
|
Recommends: smartmontools
|
|
|
|
|
Recommends: sudo
|
|
|
|
|
%if !0%{?is_opensuse}
|
|
|
|
|
Recommends: supportutils
|
|
|
|
|
%endif
|
|
|
|
|
Recommends: systemd-coredump
|
|
|
|
|
Recommends: time
|
|
|
|
|
Recommends: timezone
|
|
|
|
|
@@ -510,7 +445,7 @@ Suggests: pam_ssh
|
|
|
|
|
Suggests: xfsprogs
|
|
|
|
|
Suggests: zip
|
|
|
|
|
%{obsolete_legacy_pattern enhanced_base}
|
|
|
|
|
%if !0%{?is_opensuse}
|
|
|
|
|
%if 0%{?sle_version}
|
|
|
|
|
# in SLE we still want /var/log/messages as all of the docu refers to it
|
|
|
|
|
# TODO: if we still want it everywhere it should move back to base
|
|
|
|
|
Recommends: rsyslog
|
|
|
|
|
@@ -546,6 +481,7 @@ Recommends: procmail
|
|
|
|
|
Recommends: providers
|
|
|
|
|
# fuser (psmisc) by default (#304694)
|
|
|
|
|
Recommends: psmisc
|
|
|
|
|
Recommends: setserial
|
|
|
|
|
Recommends: sharutils
|
|
|
|
|
Recommends: smp_utils
|
|
|
|
|
Recommends: spax
|
|
|
|
|
@@ -605,18 +541,29 @@ This is the enhanced base runtime system with lots of convenience packages.
|
|
|
|
|
################################################################################
|
|
|
|
|
|
|
|
|
|
%package fips
|
|
|
|
|
%pattern_basetechnologies
|
|
|
|
|
Summary: FIPS 140-3 specific packages
|
|
|
|
|
%pattern_primaryfunctions
|
|
|
|
|
Summary: FIPS 140-2 specific packages
|
|
|
|
|
Group: Metapackages
|
|
|
|
|
Provides: pattern() = fips
|
|
|
|
|
Provides: pattern-icon() = pattern-basis-addon
|
|
|
|
|
Provides: pattern-order() = 3010
|
|
|
|
|
Provides: pattern-visible()
|
|
|
|
|
Requires: (crypto-policies-scripts if openssh-clients)
|
|
|
|
|
Requires: (crypto-policies-scripts if openssh-common)
|
|
|
|
|
Requires: (crypto-policies-scripts if openssh-server)
|
|
|
|
|
Requires: (dracut-fips if dracut)
|
|
|
|
|
Requires: (libcryptsetup12-hmac if libcryptsetup12)
|
|
|
|
|
Requires: (libcryptsetup12-hmac-32bit if libcryptsetup12-32bit)
|
|
|
|
|
Requires: (libfreebl3-hmac if libfreebl3)
|
|
|
|
|
Requires: (libfreebl3-hmac-32bit if libfreebl3-32bit)
|
|
|
|
|
Requires: (libgcrypt20-hmac if libgcrypt20)
|
|
|
|
|
Requires: (libgnutls30-hmac if libgnutls30)
|
|
|
|
|
Requires: (libgnutls30-hmac-32bit if libgnutls30-32bit)
|
|
|
|
|
Requires: (libopenssl-3-fips-provider if libopenssl3)
|
|
|
|
|
Requires: (libopenssl-fips-provider if libopenssl)
|
|
|
|
|
Requires: (libopenssl1_0_0-hmac if libopenssl1_0_0)
|
|
|
|
|
Requires: (libopenssl1_0_0-hmac-32bit if libopenssl1_0_0-32bit)
|
|
|
|
|
Requires: (libopenssl1_1-hmac if libopenssl1_1)
|
|
|
|
|
Requires: (libopenssl1_1-hmac-32bit if libopenssl1_1-32bit)
|
|
|
|
|
Requires: (libsoftokn3-hmac if libsoftokn3)
|
|
|
|
|
Requires: (libsoftokn3-hmac-32bit if libsoftokn3-32bit)
|
|
|
|
|
Requires: (openssh-fips if openssh-clients)
|
|
|
|
|
Requires: (openssh-fips if openssh-server)
|
|
|
|
|
Requires: (strongswan-hmac if strongswan)
|
|
|
|
|
@@ -628,13 +575,14 @@ Provides: patterns-server-enterprise-fips-32bit = %{version}
|
|
|
|
|
Obsoletes: patterns-server-enterprise-fips-32bit < %{version}
|
|
|
|
|
|
|
|
|
|
%description fips
|
|
|
|
|
This pattern installs the FIPS 140-3 specific packages that are required
|
|
|
|
|
if you want to run the machine with "fips=1".
|
|
|
|
|
This pattern installs the FIPS 140-2 specific packages that complete the various
|
|
|
|
|
cryptographic modules in use. It is required if you want to run the
|
|
|
|
|
machine with "fips=1".
|
|
|
|
|
|
|
|
|
|
Please note that this pattern only enables FIPS 140-3 compliant operation, it does
|
|
|
|
|
not directly make the system FIPS 140-3 certified nor validated.
|
|
|
|
|
Please note that this pattern only enables FIPS 140-2 compliant operation, it does
|
|
|
|
|
not directly make the system FIPS 140-2 certified nor validated.
|
|
|
|
|
|
|
|
|
|
Please refer to SUSE official statements on the state of FIPS 140-3 certification.
|
|
|
|
|
Please refer to SUSE official statements on the state of FIPS 140-2 certification.
|
|
|
|
|
|
|
|
|
|
%files fips
|
|
|
|
|
%dir %{_docdir}/patterns
|
|
|
|
|
@@ -658,7 +606,6 @@ Requires: distribution-release
|
|
|
|
|
Requires: filesystem
|
|
|
|
|
# We have two providers for libz.so.1: libz1 and libz1-ng-compat1. Favor the legacy one for now
|
|
|
|
|
Suggests: libz1
|
|
|
|
|
Suggests: libz1-32bit
|
|
|
|
|
# Tell the solver to default to the main product
|
|
|
|
|
Suggests: openSUSE-release
|
|
|
|
|
%{obsolete_legacy_pattern minimal_base}
|
|
|
|
|
@@ -689,7 +636,7 @@ Requires: biosdevname
|
|
|
|
|
%if 0%{?is_opensuse}
|
|
|
|
|
Requires: (grub2-branding-openSUSE if branding-openSUSE)
|
|
|
|
|
%else
|
|
|
|
|
%if !0%{?is_opensuse}
|
|
|
|
|
%if 0%{?sle_version}
|
|
|
|
|
Requires: (grub2-branding-SLE if branding-SLE)
|
|
|
|
|
%endif
|
|
|
|
|
%endif
|
|
|
|
|
@@ -718,33 +665,10 @@ This pattern holds files required for booting the system
|
|
|
|
|
|
|
|
|
|
################################################################################
|
|
|
|
|
|
|
|
|
|
%if !0%{?is_opensuse} && 0%{?suse_version} >= 1600
|
|
|
|
|
%package kernel_livepatching
|
|
|
|
|
%pattern_basetechnologies
|
|
|
|
|
Summary: Kernel Livepatching
|
|
|
|
|
Group: Metapackages
|
|
|
|
|
Provides: pattern() = kernel_livepatching
|
|
|
|
|
%ifarch x86_64 ppc64le s390x
|
|
|
|
|
Requires: kernel-livepatch-tools
|
|
|
|
|
Requires: (kernel-default-livepatch if kernel-default)
|
|
|
|
|
%endif
|
|
|
|
|
%ifarch x86_64
|
|
|
|
|
Requires: (kernel-rt-livepatch if kernel-rt)
|
|
|
|
|
%endif
|
|
|
|
|
|
|
|
|
|
%description kernel_livepatching
|
|
|
|
|
This pattern holds files required for kernel livepatching
|
|
|
|
|
|
|
|
|
|
%files kernel_livepatching
|
|
|
|
|
%dir %{_docdir}/patterns
|
|
|
|
|
%{_docdir}/patterns/kernel_livepatching.txt
|
|
|
|
|
%endif
|
|
|
|
|
|
|
|
|
|
################################################################################
|
|
|
|
|
|
|
|
|
|
%if 0%{?is_opensuse}
|
|
|
|
|
%package selinux
|
|
|
|
|
%pattern_basetechnologies
|
|
|
|
|
Summary: SELinux Support
|
|
|
|
|
Summary: SELinux
|
|
|
|
|
Group: Metapackages
|
|
|
|
|
Provides: pattern() = selinux
|
|
|
|
|
Provides: pattern-icon() = pattern-selinux
|
|
|
|
|
@@ -753,19 +677,12 @@ Provides: pattern-visible()
|
|
|
|
|
Requires: policycoreutils
|
|
|
|
|
Requires: selinux-autorelabel
|
|
|
|
|
Requires: selinux-policy
|
|
|
|
|
%if 0%{?is_opensuse}
|
|
|
|
|
Requires: selinux-policy-base
|
|
|
|
|
# Use targeted as default policy if none was explicitly requested.
|
|
|
|
|
Suggests: selinux-policy-targeted
|
|
|
|
|
%else
|
|
|
|
|
Requires: selinux-policy-targeted
|
|
|
|
|
%endif
|
|
|
|
|
|
|
|
|
|
Requires: selinux-tools
|
|
|
|
|
Requires: pattern() = minimal_base
|
|
|
|
|
# Needed for podman et al.
|
|
|
|
|
Requires: (container-selinux if libcontainers-common)
|
|
|
|
|
Recommends: checkpolicy
|
|
|
|
|
Recommends: container-selinux
|
|
|
|
|
Recommends: restorecond
|
|
|
|
|
Recommends: selinux-policy-targeted
|
|
|
|
|
|
|
|
|
|
%description selinux
|
|
|
|
|
Security-Enhanced Linux (SELinux) provides a mechanism for supporting access control security policies, including mandatory access controls (MAC).
|
|
|
|
|
@@ -774,6 +691,7 @@ Its architecture strives to separate enforcement of security decisions from the
|
|
|
|
|
%files selinux
|
|
|
|
|
%dir %{_docdir}/patterns
|
|
|
|
|
%{_docdir}/patterns/selinux.txt
|
|
|
|
|
%endif
|
|
|
|
|
|
|
|
|
|
################################################################################
|
|
|
|
|
|
|
|
|
|
@@ -786,14 +704,9 @@ Provides: pattern-icon() = pattern-software-management
|
|
|
|
|
Provides: pattern-order() = 1360
|
|
|
|
|
Provides: pattern-visible()
|
|
|
|
|
Recommends: pattern() = sw_management_x11
|
|
|
|
|
%if !0%{?is_opensuse}
|
|
|
|
|
Recommends: cockpit-packages
|
|
|
|
|
%if 0%{?sle_version}
|
|
|
|
|
Recommends: lifecycle-data
|
|
|
|
|
Recommends: suse-lifecycle
|
|
|
|
|
Recommends: zypper-lifecycle-plugin
|
|
|
|
|
Recommends: (suse-lifecycle-data-sle_ha if sle-ha-release)
|
|
|
|
|
Recommends: (suse-lifecycle-data-sles if SLES-release)
|
|
|
|
|
Recommends: (suse-lifecycle-data-sles_sap if SLES_SAP-release)
|
|
|
|
|
%endif
|
|
|
|
|
# Zypper is the basic sw_management stack for *SUSE
|
|
|
|
|
Requires: zypper
|
|
|
|
|
@@ -808,8 +721,6 @@ This pattern provides a graphical application and a command line tool for keepin
|
|
|
|
|
|
|
|
|
|
################################################################################
|
|
|
|
|
|
|
|
|
|
# Do not build it on Leap 16
|
|
|
|
|
%if !(0%{?is_opensuse} && 0%{?suse_version} == 1600) || 0%{?is_leapmicro}
|
|
|
|
|
%package transactional_base
|
|
|
|
|
%pattern_basetechnologies
|
|
|
|
|
Summary: Transactional Base System
|
|
|
|
|
@@ -817,76 +728,13 @@ Group: Metapackages
|
|
|
|
|
Provides: pattern() = transactional_base
|
|
|
|
|
Provides: pattern-icon() = pattern-kubic
|
|
|
|
|
Provides: pattern-order() = 1050
|
|
|
|
|
Requires: /usr/bin/gzip
|
|
|
|
|
Requires: btrfsmaintenance
|
|
|
|
|
Requires: less
|
|
|
|
|
Requires: openssh
|
|
|
|
|
Requires: read-only-root-fs
|
|
|
|
|
Requires: rebootmgr
|
|
|
|
|
Requires: sudo
|
|
|
|
|
Requires: yast2-logs
|
|
|
|
|
Requires: zypp-boot-plugin
|
|
|
|
|
Requires: (health-checker if grub2)
|
|
|
|
|
Requires: (health-checker-plugins-MicroOS if health-checker)
|
|
|
|
|
# FIXME
|
|
|
|
|
%if 0%{?is_opensuse}
|
|
|
|
|
Requires: MicroOS-release
|
|
|
|
|
Requires: systemd-presets-branding-MicroOS
|
|
|
|
|
Suggests: busybox-gzip
|
|
|
|
|
# tpm2 tools are required for FDE+TPM
|
|
|
|
|
Requires: tpm2-0-tss
|
|
|
|
|
Requires: libtss2-tcti-device0
|
|
|
|
|
Requires: tpm2.0-tools
|
|
|
|
|
# probably needed for fsck.fat on efi partitions
|
|
|
|
|
Requires: dosfstools
|
|
|
|
|
%else
|
|
|
|
|
Requires: iputils
|
|
|
|
|
Requires: supportutils
|
|
|
|
|
Requires: systemd-presets-branding-ALP-transactional
|
|
|
|
|
Requires: toolbox
|
|
|
|
|
Requires: toolbox-branding-SLE
|
|
|
|
|
Requires: group(wheel)
|
|
|
|
|
# zypper ps is useless in transactional mode. It also checks for
|
|
|
|
|
# /run/reboot-needed though which is created by transactional-update
|
|
|
|
|
Requires: zypper-needs-restarting
|
|
|
|
|
# jsc#PED-6478 (2 packages)
|
|
|
|
|
Requires: mailx
|
|
|
|
|
Requires: systemd-status-mail
|
|
|
|
|
|
|
|
|
|
# jsc#SMO-79
|
|
|
|
|
Requires: tpm2.0-tools
|
|
|
|
|
Requires: tpm2-0-tss
|
|
|
|
|
Requires: tpm2-tss-engine
|
|
|
|
|
Requires: tpm2.0-abrmd
|
|
|
|
|
# jsc#SMO-50
|
|
|
|
|
%ifarch x86_64 aarch64
|
|
|
|
|
Requires: libmbim
|
|
|
|
|
Requires: libmbim-glib4
|
|
|
|
|
Requires: libqmi-glib5
|
|
|
|
|
Requires: libqmi-tools
|
|
|
|
|
%endif
|
|
|
|
|
# jsc#CSD-121
|
|
|
|
|
Requires: udica
|
|
|
|
|
# jsc#SMO-120
|
|
|
|
|
Requires: pam_u2f
|
|
|
|
|
%ifarch s390x
|
|
|
|
|
Requires: libica
|
|
|
|
|
Requires: openCryptoki
|
|
|
|
|
Requires: openssl-ibmca
|
|
|
|
|
%endif
|
|
|
|
|
# bsc#1217991
|
|
|
|
|
#FIXME
|
|
|
|
|
Requires: crypto-policies-scripts
|
|
|
|
|
|
|
|
|
|
%endif
|
|
|
|
|
Requires: systemd-presets-branding-transactional-server
|
|
|
|
|
Requires: transactional-update
|
|
|
|
|
Requires: transactional-update-zypp-config
|
|
|
|
|
# Useful outside of MicroOS and needed for e.g. SELinux relabelling
|
|
|
|
|
Requires: microos-tools
|
|
|
|
|
%ifnarch %{arm}
|
|
|
|
|
Requires: kdump
|
|
|
|
|
%endif
|
|
|
|
|
Requires: vim-small
|
|
|
|
|
Requires: pattern() = base
|
|
|
|
|
Suggests: health-checker
|
|
|
|
|
|
|
|
|
|
@@ -896,7 +744,6 @@ This is the base system for a host updated by Transactional Updates. Includes To
|
|
|
|
|
%files transactional_base
|
|
|
|
|
%dir %{_docdir}/patterns
|
|
|
|
|
%{_docdir}/patterns/transactional_base.txt
|
|
|
|
|
%endif
|
|
|
|
|
|
|
|
|
|
################################################################################
|
|
|
|
|
|
|
|
|
|
@@ -927,7 +774,6 @@ Packages used for testing that the update stack works. These tiny packages do n
|
|
|
|
|
|
|
|
|
|
################################################################################
|
|
|
|
|
|
|
|
|
|
%if 0%{?is_opensuse}
|
|
|
|
|
%package x11
|
|
|
|
|
%pattern_graphicalenvironments
|
|
|
|
|
Summary: X Window System
|
|
|
|
|
@@ -989,17 +835,11 @@ Provides: pattern-order() = 1801
|
|
|
|
|
Recommends: pattern() = yast2_basis
|
|
|
|
|
Recommends: pattern() = yast2_server
|
|
|
|
|
%endif
|
|
|
|
|
# Myrlyn replaces YaST software management code-o-o#leap/features#173
|
|
|
|
|
%if 0%{?is_opensuse}
|
|
|
|
|
Recommends: myrlyn
|
|
|
|
|
%endif
|
|
|
|
|
Requires: pattern() = enhanced_base
|
|
|
|
|
Requires: pattern() = fonts
|
|
|
|
|
Requires: pattern() = x11
|
|
|
|
|
%if 0%{?suse_version} > 1600
|
|
|
|
|
Recommends: pattern() = x11_yast
|
|
|
|
|
Recommends: pattern() = yast2_desktop
|
|
|
|
|
%endif
|
|
|
|
|
# 1057377
|
|
|
|
|
Requires: glibc-locale
|
|
|
|
|
Requires: glibc-locale-base
|
|
|
|
|
@@ -1028,12 +868,10 @@ Recommends: xdmbgrd
|
|
|
|
|
Recommends: xkeyboard-config
|
|
|
|
|
Recommends: xorg-x11-fonts
|
|
|
|
|
Recommends: xorg-x11-fonts-core
|
|
|
|
|
%if 0%{?suse_version} > 1600
|
|
|
|
|
Recommends: yast2-control-center-gnome
|
|
|
|
|
# Recommend yast2-network until the Generic Desktop Role defaults to NetworkManager
|
|
|
|
|
# At worst people need a way to switch from Wicked to NetworkManager.
|
|
|
|
|
Recommends: yast2-network
|
|
|
|
|
%endif
|
|
|
|
|
# This will install Firefox if no other browser is selected
|
|
|
|
|
Suggests: MozillaFirefox
|
|
|
|
|
Suggests: MozillaFirefox-translations
|
|
|
|
|
@@ -1128,6 +966,7 @@ Requires: xeyes
|
|
|
|
|
# Drivers
|
|
|
|
|
Requires: xf86-input-evdev
|
|
|
|
|
Requires: xf86-input-libinput
|
|
|
|
|
Requires: xf86-video-fbdev
|
|
|
|
|
Requires: xfd
|
|
|
|
|
Requires: xfontsel
|
|
|
|
|
Requires: xgamma
|
|
|
|
|
@@ -1159,18 +998,18 @@ Requires: xscope
|
|
|
|
|
Requires: xscreensaver
|
|
|
|
|
Requires: xscreensaver-data
|
|
|
|
|
Requires: xset
|
|
|
|
|
Requires: xsetmode
|
|
|
|
|
Requires: xsetpointer
|
|
|
|
|
Requires: xsetroot
|
|
|
|
|
Requires: xterm
|
|
|
|
|
Requires: xtermset
|
|
|
|
|
Requires: xvinfo
|
|
|
|
|
Requires: xwd
|
|
|
|
|
Requires: xwininfo
|
|
|
|
|
%if 0%{?suse_version} > 1600
|
|
|
|
|
Requires: yast2-control-center-qt
|
|
|
|
|
Requires: yast2-packager
|
|
|
|
|
Requires: yast2-snapper
|
|
|
|
|
Requires: yast2-x11
|
|
|
|
|
%endif
|
|
|
|
|
# Branding
|
|
|
|
|
%if ! 0%{?is_opensuse}
|
|
|
|
|
Requires: MozillaFirefox-branding-SLE
|
|
|
|
|
@@ -1183,7 +1022,6 @@ The X Window System provides the only standard platform-independent networked gr
|
|
|
|
|
%dir %{_docdir}/patterns
|
|
|
|
|
%{_docdir}/patterns/x11_raspberrypi.txt
|
|
|
|
|
%endif
|
|
|
|
|
%endif
|
|
|
|
|
|
|
|
|
|
################################################################################
|
|
|
|
|
|
|
|
|
|
@@ -1193,53 +1031,38 @@ The X Window System provides the only standard platform-independent networked gr
|
|
|
|
|
|
|
|
|
|
%install
|
|
|
|
|
mkdir -p %{buildroot}%{_docdir}/patterns
|
|
|
|
|
for i in \
|
|
|
|
|
%if 0%{?is_opensuse}
|
|
|
|
|
apparmor x11 x11_enhanced \
|
|
|
|
|
%endif
|
|
|
|
|
base enhanced_base minimal_base sw_management; do
|
|
|
|
|
for i in apparmor base enhanced_base minimal_base sw_management x11 x11_enhanced; do
|
|
|
|
|
echo "This file marks the pattern $i to be installed." \
|
|
|
|
|
>"%{buildroot}%{_docdir}/patterns/$i.txt"
|
|
|
|
|
%if 0%{?is_opensuse}
|
|
|
|
|
echo "This file marks the pattern $i to be installed." \
|
|
|
|
|
>"%{buildroot}%{_docdir}/patterns/$i-32bit.txt"
|
|
|
|
|
%endif
|
|
|
|
|
done
|
|
|
|
|
|
|
|
|
|
# These packages don't generate a 32bit pattern
|
|
|
|
|
for i in basesystem bootloader documentation fips selinux kdump \
|
|
|
|
|
%if !(0%{?is_opensuse} && 0%{?suse_version} == 1600) || 0%{?is_leapmicro}
|
|
|
|
|
transactional_base \
|
|
|
|
|
%endif
|
|
|
|
|
%if !0%{?is_opensuse} && 0%{?suse_version} >= 1600
|
|
|
|
|
kernel_livepatching \
|
|
|
|
|
%endif
|
|
|
|
|
for i in basesystem bootloader basic_desktop documentation fips transactional_base \
|
|
|
|
|
%if 0%{?is_opensuse}
|
|
|
|
|
console update_test basic_desktop \
|
|
|
|
|
%ifarch armv6hl armv7hl aarch64
|
|
|
|
|
x11_raspberrypi \
|
|
|
|
|
%endif
|
|
|
|
|
%ifarch x86_64
|
|
|
|
|
console selinux update_test \
|
|
|
|
|
%else
|
|
|
|
|
%ifnarch s390 s390x
|
|
|
|
|
32bit \
|
|
|
|
|
%endif
|
|
|
|
|
%endif
|
|
|
|
|
%ifarch armv6hl armv7hl aarch64
|
|
|
|
|
x11_raspberrypi \
|
|
|
|
|
%endif
|
|
|
|
|
; do
|
|
|
|
|
echo "This file marks the pattern $i to be installed." \
|
|
|
|
|
>"%{buildroot}%{_docdir}/patterns/$i.txt"
|
|
|
|
|
done
|
|
|
|
|
|
|
|
|
|
%if 0%{?is_opensuse}
|
|
|
|
|
%ifarch x86_64
|
|
|
|
|
echo "This file marks the pattern 32bit to be installed." \
|
|
|
|
|
>"%{buildroot}%{_docdir}/patterns/32bit.txt"
|
|
|
|
|
%endif
|
|
|
|
|
%endif
|
|
|
|
|
|
|
|
|
|
#
|
|
|
|
|
# This file is created at check-in time. Sorry for the inconsistent workflow :(
|
|
|
|
|
#
|
|
|
|
|
%if 0%{?is_opensuse}
|
|
|
|
|
%include %{SOURCE1}
|
|
|
|
|
%endif
|
|
|
|
|
|
|
|
|
|
%changelog
|
|
|
|
|
|
