shadowsocks-rust/shadowsocks-rust.spec
Hillwood Yang 84e509704a Accepting request 1169685 from home:hillwood:branches:server:proxy
- Update version to 1.18.3
  * Support outbound_fwmark in server side to split outbound tunnel
  * Default build for *-windows-* targets includes sswinservice
  * local-fakedns: Add a basic implementation of Fake-DNS, which will
    allocate IPs from pool for DNS queries. This experimental feature
    could be useful when using local-tun, local-redir or other features
    that could only receive IP destinations, the domain name that is
    resolved by the Fake-DNS will be translated from IP back to domain
    name when connecting to the remote
  * Add launchd_udp_socket_name, launchd_tcp_socket_name to basic config format
  * local-tun: Support tun_interface_destination configuration key
  * Default logging framework changed to tracing-subscriber
  * local: socks local server will support SOCKS5, SOCKS4a, HTTP proxy
    protocols when local-http, local-socks4 features are enabled
  * local: Support setting udp_mtu in configuration file to actively reject
    packet.size > MTU
  * Fix bugs
- Add fix-boo-1223239.patch, fix CVE-2024-32650 boo#1223239

OBS-URL: https://build.opensuse.org/request/show/1169685
OBS-URL: https://build.opensuse.org/package/show/server:proxy/shadowsocks-rust?expand=0&rev=22
2024-04-22 14:32:00 +00:00

116 lines
3.8 KiB
RPMSpec

#
# spec file for package shadowsocks-rust
#
# Copyright (c) 2024 SUSE LLC
#
# All modifications and additions to the file contributed by third parties
# remain the property of their copyright owners, unless otherwise agreed
# upon. The license for this file, and modifications and additions to the
# file, is the same license as for the pristine package itself (unless the
# license for the pristine package is not an Open Source License, in which
# case the license is the MIT License). An "Open Source License" is a
# license that conforms to the Open Source Definition (Version 1.9)
# published by the Open Source Initiative.
# Please submit bugfixes or comments via https://bugs.opensuse.org/
#
Name: shadowsocks-rust
Version: 1.18.3
Release: 0
Summary: Rust port of Shadowsocks
License: MIT
Group: Productivity/Networking/Web/Proxy
URL: https://github.com/shadowsocks/shadowsocks-rust
Source0: https://github.com/shadowsocks/shadowsocks-rust/archive/v%{version}/%{name}-%{version}.tar.gz
# PATCH-FIX-UPSTREAM fix-boo-1223239.patch hillwood@opensuse.org - Fix CVE-2024-32650 boo#1223239
# https://github.com/shadowsocks/shadowsocks-rust/pull/1513
Patch0: fix-boo-1223239.patch
Source1: vendor.tar.gz
Source2: %{name}.json
Source3: %{name}-client.service
Source4: %{name}-server.service
Source5: %{name}-manager.service
BuildRequires: cargo
BuildRequires: cargo-packaging
BuildRequires: systemd-rpm-macros
BuildRequires: pkgconfig(openssl)
Requires(pre): shadow
Recommends: shadowsocks-v2ray-plugin
# ExcludeArch: ppc ppc64 ppc64le s390 s390x
%{?systemd_ordering}
%description
shadowsocks-rust is a rust port of shadowsocks.
shadowsocks is a lightweight secured SOCKS5 proxy for embedded devices and
low-end boxes.
%prep
%autosetup -p1 -a1 -n %{name}-%{version}
mkdir .cargo
cat >>.cargo/config.toml <<EOF
[source.crates-io]
registry = 'https://github.com/rust-lang/crates.io-index'
replace-with = 'vendored-sources'
[source.vendored-sources]
directory = './vendor'
EOF
%build
%cargo_build
%install
%cargo_install
install -d %{buildroot}%{_sysconfdir}/shadowsocks/
install -m 0644 %{SOURCE2} %{buildroot}%{_sysconfdir}/shadowsocks/
install -d %{buildroot}%{_unitdir}
install -m 0644 %{SOURCE3} %{buildroot}%{_unitdir}
install -m 0644 %{SOURCE4} %{buildroot}%{_unitdir}
install -m 0644 %{SOURCE5} %{buildroot}%{_unitdir}
install -d %{buildroot}%{_sbindir}
ln -sf %{_sbindir}/service %{buildroot}%{_sbindir}/rc%{name}-client
ln -sf %{_sbindir}/service %{buildroot}%{_sbindir}/rc%{name}-server
ln -sf %{_sbindir}/service %{buildroot}%{_sbindir}/rc%{name}-manager
%pre
%service_add_pre %{name}-client.service
%service_add_pre %{name}-server.service
%service_add_pre %{name}-manager.service
getent group shadowsocks >/dev/null || %{_sbindir}/groupadd --system shadowsocks
getent passwd shadowsocks >/dev/null || %{_sbindir}/useradd --system -c "shadowsocks User" \
-d %{_localstatedir}/shadowsocks -m -g shadowsocks -s %{_sbindir}/nologin \
shadowsocks
%post
%service_add_post %{name}-client.service
%service_add_post %{name}-server.service
%service_add_post %{name}-manager.service
chown root:shadowsocks %{_sysconfdir}/shadowsocks -R
chmod 640 %{_sysconfdir}/shadowsocks -R
%preun
%service_del_preun %{name}-client.service
%service_del_preun %{name}-server.service
%service_del_preun %{name}-manager.service
%postun
%service_del_postun %{name}-client.service
%service_del_postun %{name}-server.service
%service_del_postun %{name}-manager.service
%files
%doc README.md
%license LICENSE
%{_bindir}/ss*
%{_sbindir}/rc%{name}-*
%{_unitdir}/%{name}-*.service
%dir %{_sysconfdir}/shadowsocks
# %config(noreplace) %attr(660,%{name},root) %{_sysconfdir}/shadowsocks
%config %{_sysconfdir}/shadowsocks/%{name}.json
%changelog