forked from pool/haproxy
Marcus Rueckert
6348412bb9
- Update to version 2.6.1+git0.f6ca66d44: * [RELEASE] Released version 2.6.1 * REGTESTS: ssl: add the same cert for client/server * BUG/MEDIUM: mworker: use default maxconn in wait mode * BUG/MINOR: quic: Acknowledgement must be forced during handshake * BUG/MEDIUM: ssl/cli: crash when crt inserted into a crt-list * BUG/MINOR: quic: free rejected Rx packets * BUG/MINOR: quic: purge conn Rx packet list on release * BUG/MINOR: quic_stats: Duplicate "quic_streams_data_blocked_bidi" field name * BUG/MINOR: quic: Unexpected half open connection counter wrapping * BUG/MINOR: log: Properly test connection retries to fix dontlog-normal option * MINOR: stream: Rely on stconn flags to abort stream destructive upgrade * BUG/MEDIUM: stream: Properly handle destructive client connection upgrades * BUG/MINOR: task: fix thread assignment in tasklet_kill() * BUG/MINOR: quic: Wrong PTO calculation * BUG/MINOR: quic: Stop hardcoding Retry packet Version field * BUG/BUILD: h3: fix wrong label name * BUG/MINOR: h3/qpack: deal with too many headers * MINOR: qpack: add comments and remove a useless trace * BUG/MINOR: qpack: support header litteral name decoding * BUG/MEDIUM: mux-quic: fix segfault on flow-control frame cleanup * BUG/MEDIUM: cli: Notify cli applet won't consume data during request processing * BUG/MEDIUM: stconn: Don't wakeup applet for send if it won't consume data * BUG/MINOR: tcp-rules: Make action call final on read error and delay expiration * BUG/MINOR: mux-quic: fix memleak on frames rejected by transport * BUG/MEDIUM: mux-quic: fix flow control connection Tx level * BUG/MINOR: cli/stats: add missing trailing LF after "show info json" * BUG/MINOR: server: do not enable DNS resolution on disabled proxies * BUG/MINOR: cli/stats: add missing trailing LF after JSON outputs * BUG/MINOR: h3: fix frame type definition * REGTESTS: healthcheckmail: Relax health-check failure condition * REGTESTS: healthcheckmail: Update the test to be functionnal again * BUG/MINOR: checks: Properly handle email alerts in trace messages * BUG/MINOR: trace: Test server existence for health-checks to get proxy * BUG/MEDIUM: mailers: Set the object type for check attached to an email alert * BUILD: compiler: implement unreachable for older compilers too * REGTESTS: restrict_req_hdr_names: Extend supported versions * REGTESTS: http_abortonclose: Extend supported versions * BUG/MINOR: ssl_ckch: Fix possible uninitialized value in show_crlfile I/O handler * BUG/MINOR: ssl_ckch: Fix possible uninitialized value in show_cafile I/O handler * BUG/MINOR: ssl_ckch: Fix possible uninitialized value in show_cert I/O handler * BUG/MINOR: ssl_ckch: Init right field when parsing "commit ssl crl-file" cmd * BUG/MINOR: ssl_ckch: Dump cert transaction only once if show command yield * BUG/MINOR: ssl_ckch: Dump CA transaction only once if show command yield * BUG/MINOR: ssl_ckch: Dump CRL transaction only once if show command yield * BUG/MINOR: ssl_ckch: Use right type for old entry in show_crlfile_ctx * REGTESTS: http_request_buffer: Increase client timeout to wait "slow" clients * REGTESTS: abortonclose: Add a barrier to not mix up log messages * MEDIUM: httpclient: Don't close CLI applet at the end of a response * MEDIUM: http-ana: Always report rewrite failures as PRXCOND in logs * BUG/MEDIUM: httpclient: Rework CLI I/O handler to handle full buffer cases * BUG/MEDIUM: httpclient: Don't remove HTX header blocks before duplicating them * BUG/MEDIUM: ssl/crt-list: Rework 'add ssl crt-list' to handle full buffer cases * BUG/MEDIUM: ssl_ckch: Rework 'commit ssl ca-file' to handle full buffer cases * BUG/MEDIUM: ssl_ckch: Rework 'commit ssl cert' to handle full buffer cases * BUG/MINOR: ssl_ckch: Don't duplicate path when replacing a CA/CRL entry * BUG/MINOR: ssl_ckch: Don't duplicate path when replacing a cert entry * BUG/MEDIUM: ssl_ckch: Don't delete CA/CRL entry if it is being modified * BUG/MEDIUM: ssl_ckch: Don't delete a cert entry if it is being modified * BUG/MINOR: ssl_ckch: Free error msg if commit changes on a CA/CRL entry fails * BUG/MINOR: ssl_ckch: Free error msg if commit changes on a cert entry fails OBS-URL: https://build.opensuse.org/request/show/988057 OBS-URL: https://build.opensuse.org/package/show/server:http/haproxy?expand=0&rev=266
302 lines
8.1 KiB
RPMSpec
302 lines
8.1 KiB
RPMSpec
#
|
|
# spec file for package haproxy
|
|
#
|
|
# Copyright (c) 2019 SUSE LINUX Products GmbH, Nuernberg, Germany.
|
|
#
|
|
# All modifications and additions to the file contributed by third parties
|
|
# remain the property of their copyright owners, unless otherwise agreed
|
|
# upon. The license for this file, and modifications and additions to the
|
|
# file, is the same license as for the pristine package itself (unless the
|
|
# license for the pristine package is not an Open Source License, in which
|
|
# case the license is the MIT License). An "Open Source License" is a
|
|
# license that conforms to the Open Source Definition (Version 1.9)
|
|
# published by the Open Source Initiative.
|
|
|
|
# Please submit bugfixes or comments via http://bugs.opensuse.org/
|
|
|
|
%bcond_with quic
|
|
%if 0%{?suse_version} >= 1230
|
|
%bcond_without tcp_fast_open
|
|
%bcond_without network_namespace
|
|
%else
|
|
%bcond_with tcp_fast_open
|
|
%bcond_with network_namespace
|
|
%endif
|
|
|
|
%if 0%{?suse_version} > 1320
|
|
%bcond_without lua
|
|
%else
|
|
%bcond_with lua
|
|
%endif
|
|
|
|
%if 0%{?suse_version} >= 1310
|
|
%bcond_without systemd
|
|
%else
|
|
%bcond_with systemd
|
|
%endif
|
|
|
|
%if 0%{?suse_version} > 1140
|
|
%bcond_without pcre_jit
|
|
%else
|
|
%bcond_with pcre_jit
|
|
%endif
|
|
|
|
%bcond_without apparmor
|
|
%if 0%{?suse_version} > 1320
|
|
%bcond_without apparmor_reload
|
|
%else
|
|
%bcond_with apparmor_reload
|
|
%endif
|
|
|
|
%if 0%{?suse_version} >= 1500
|
|
%bcond_without sysusers
|
|
%else
|
|
%bcond_with sysusers
|
|
%endif
|
|
|
|
Name: haproxy
|
|
Version: 2.6.1+git0.f6ca66d44
|
|
Release: 0
|
|
#
|
|
#
|
|
BuildRoot: %{_tmppath}/%{name}-%{version}-build
|
|
%if %{with apparmor}
|
|
%if 0%{?suse_version} <= 1315
|
|
BuildRequires: apparmor-profiles
|
|
Recommends: apparmor-profiles
|
|
%else
|
|
BuildRequires: apparmor-abstractions
|
|
Recommends: apparmor-abstractions
|
|
%endif
|
|
%if %{with apparmor_reload}
|
|
BuildRequires: apparmor-rpm-macros
|
|
%endif
|
|
%endif
|
|
BuildRequires: libgcrypt-devel
|
|
%if %{with lua}
|
|
BuildRequires: lua-devel >= 5.3
|
|
%endif
|
|
BuildRequires: pcre-devel
|
|
BuildRequires: zlib-devel
|
|
BuildRequires: openssl-devel
|
|
BuildRequires: pkg-config
|
|
%if %{with systemd}
|
|
BuildRequires: pkgconfig(systemd)
|
|
BuildRequires: pkgconfig(libsystemd)
|
|
%if %{with sysusers}
|
|
BuildRequires: sysuser-shadow
|
|
BuildRequires: sysuser-tools
|
|
%endif
|
|
%endif
|
|
BuildRequires: vim
|
|
%define pkg_name haproxy
|
|
%define pkg_home /var/lib/%{pkg_name}
|
|
#
|
|
Url: http://www.haproxy.org/
|
|
# source URL in _service file
|
|
Source: haproxy-%{version}.tar.gz
|
|
Source1: %{pkg_name}.init
|
|
Source2: usr.sbin.haproxy.apparmor
|
|
Source3: local.usr.sbin.haproxy.apparmor
|
|
Source4: haproxy.cfg
|
|
Source5: haproxy-user.conf
|
|
Patch1: haproxy-1.6.0_config_haproxy_user.patch
|
|
Patch2: haproxy-1.6.0-makefile_lib.patch
|
|
Patch3: haproxy-1.6.0-sec-options.patch
|
|
Patch4: lua54.patch
|
|
#
|
|
Source98: series
|
|
Source99: haproxy-rpmlintrc
|
|
#
|
|
Summary: The Reliable, High Performance TCP/HTTP Load Balancer
|
|
License: GPL-3.0+ and LGPL-2.1+
|
|
Group: Productivity/Networking/Web/Proxy
|
|
Provides: %{name}-doc = %{version}
|
|
Obsoletes: %{name}-doc < %{version}
|
|
Provides: haproxy-1.5 = %{version}
|
|
Obsoletes: haproxy-1.5 < %{version}
|
|
%if %{with systemd}
|
|
%{?systemd_ordering}
|
|
%if %{with sysusers}
|
|
%sysusers_requires
|
|
%endif
|
|
%endif
|
|
%{!?vim_data_dir:%global vim_data_dir /usr/share/vim/%(readlink /usr/share/vim/current)}
|
|
|
|
%description
|
|
HAProxy implements an event-driven, mono-process model which enables support
|
|
for very high number of simultaneous connections at very high speeds.
|
|
Multi-process or multi-threaded models can rarely cope with thousands of
|
|
connections because of memory limits, system scheduler limits, and lock
|
|
contention everywhere. Event-driven models do not have these problems because
|
|
implementing all the tasks in user-space allows a finer resource and time
|
|
management. The down side is that those programs generally don't scale well on
|
|
multi-processor systems. That's the reason why they must be optimized to get
|
|
the most work done from every CPU cycle.
|
|
|
|
%prep
|
|
%setup -q
|
|
%patch1 -p1
|
|
%patch2 -p1
|
|
%patch3 -p1
|
|
%patch4 -p1
|
|
|
|
%build
|
|
make %{?_smp_mflags} \
|
|
TARGET=linux-glibc \
|
|
CPU="%{_target_cpu}" \
|
|
USE_PCRE=1 \
|
|
%if %{with pcre_jit}
|
|
USE_PCRE_JIT=1 \
|
|
%endif
|
|
%ifarch %ix86
|
|
USE_REGPARM=1 \
|
|
%endif
|
|
USE_GETADDRINFO=1 \
|
|
USE_OPENSSL=1 \
|
|
%if %{with lua}
|
|
USE_LUA=1 \
|
|
%endif
|
|
USE_ZLIB=1 \
|
|
%if %{with tcp_fast_open}
|
|
USE_TFO=1 \
|
|
%endif
|
|
%if %{with network_namespace}
|
|
USE_NS=1 \
|
|
%endif
|
|
%if %{with systemd}
|
|
USE_SYSTEMD=1 \
|
|
%endif
|
|
USE_PIE=1 \
|
|
USE_STACKPROTECTOR=1 \
|
|
USE_RELRO_NOW=1 \
|
|
LIB="%{_lib}" \
|
|
PREFIX="%{_prefix}" \
|
|
USE_PROMEX=1 \
|
|
%if %{with quic}
|
|
USE_QUIC=1 \
|
|
%endif
|
|
%if %{with opentracing}
|
|
USE_OT=1 \
|
|
%endif
|
|
%if %{with memory_profiling}
|
|
USE_MEMORY_PROFILING=1 \
|
|
%endif
|
|
DEBUG_CFLAGS="%{optflags}" V=1
|
|
%if %{with systemd}
|
|
make -C admin/systemd PREFIX="%{_prefix}"
|
|
%if %{with sysusers}
|
|
%sysusers_generate_pre %{SOURCE5} haproxy haproxy-user.conf
|
|
%endif
|
|
%endif
|
|
make admin/halog/halog DEBUG_CFLAGS="%{optflags}" V=1
|
|
|
|
%install
|
|
install -D -m 0755 %{pkg_name} %{buildroot}%{_sbindir}/%{pkg_name}
|
|
install -d -m 0750 %{buildroot}%{_sysconfdir}/%{pkg_name}/
|
|
install -m 0640 %{S:4} %{buildroot}%{_sysconfdir}/%{pkg_name}/%{pkg_name}.cfg
|
|
|
|
install -D -m 0755 admin/halog/halog %{buildroot}%{_sbindir}/haproxy-halog
|
|
|
|
%if %{with systemd}
|
|
install -D -m 0644 admin/systemd/%{pkg_name}.service %{buildroot}%{_unitdir}/%{pkg_name}.service
|
|
ln -sf /sbin/service %{buildroot}%{_sbindir}/rc%{pkg_name}
|
|
%if %{with sysusers}
|
|
install -D -m 644 %{SOURCE5} %{buildroot}%{_sysusersdir}/haproxy-user.conf
|
|
%endif
|
|
%else
|
|
install -D -m 0755 %{S:1} %{buildroot}%{_sysconfdir}/init.d/%{pkg_name}
|
|
ln -fs %{_sysconfdir}/init.d/%{pkg_name} %{buildroot}%{_sbindir}/rc%{pkg_name}
|
|
%endif
|
|
|
|
install -d -m 0750 %{buildroot}%{pkg_home}
|
|
install -D -m 0644 admin/syntax-highlight/haproxy.vim %{buildroot}%{vim_data_dir}/syntax/%{pkg_name}.vim
|
|
install -D -m 0644 doc/%{pkg_name}.1 %{buildroot}%{_mandir}/man1/%{pkg_name}.1
|
|
%if %{with apparmor}
|
|
install -D -m 0644 %{S:2} %{buildroot}/etc/apparmor.d/usr.sbin.haproxy
|
|
install -D -m 0644 %{S:3} %{buildroot}/etc/apparmor.d/local/haproxy
|
|
install -D -m 0644 %{S:3} %{buildroot}/etc/apparmor.d/local/usr.sbin.haproxy
|
|
%endif
|
|
|
|
rm examples/*init*
|
|
|
|
|
|
%if %{with systemd}
|
|
%if %{with sysusers}
|
|
%pre -f haproxy.pre
|
|
%else
|
|
%pre
|
|
%endif
|
|
%service_add_pre %{pkg_name}.service
|
|
|
|
%post
|
|
%if %{with apparmor} && %{with apparmor_reload}
|
|
%apparmor_reload /etc/apparmor.d/usr.sbin.haproxy
|
|
%endif
|
|
%service_add_post %{pkg_name}.service
|
|
|
|
%preun
|
|
%service_del_preun %{pkg_name}.service
|
|
|
|
%postun
|
|
%service_del_postun %{pkg_name}.service
|
|
|
|
%else
|
|
|
|
%pre
|
|
getent group %{pkg_name} >/dev/null || /usr/sbin/groupadd -r %{pkg_name}
|
|
getent passwd %{pkg_name} >/dev/null || \
|
|
/usr/sbin/useradd -g %{pkg_name} -s /bin/false -r \
|
|
-c "user for %{pkg_name}" -d %{pkg_home} %{pkg_name}
|
|
|
|
%post
|
|
%fillup_and_insserv %{pkg_name}
|
|
%if %{with apparmor} && %{with apparmor_reload}
|
|
%apparmor_reload /etc/apparmor.d/usr.sbin.haproxy
|
|
%endif
|
|
|
|
%preun
|
|
%stop_on_removal %{pkg_name}
|
|
|
|
%postun
|
|
%restart_on_update %{pkg_name}
|
|
%{insserv_cleanup}
|
|
|
|
%endif
|
|
|
|
%files
|
|
%defattr(-,root,root,-)
|
|
%license LICENSE
|
|
%doc CHANGELOG README
|
|
%doc doc/* examples/
|
|
%doc admin/netsnmp-perl/ admin/selinux/
|
|
%dir %attr(-,root,haproxy) %{_sysconfdir}/%{pkg_name}
|
|
%config(noreplace) %attr(-,root,haproxy) %{_sysconfdir}/%{pkg_name}/*
|
|
%if %{with systemd}
|
|
%{_unitdir}/%{pkg_name}.service
|
|
%if %{with sysusers}
|
|
%{_sysusersdir}/haproxy-user.conf
|
|
%endif
|
|
%else
|
|
%config(noreplace) %{_sysconfdir}/init.d/%{pkg_name}
|
|
%endif
|
|
%{_sbindir}/haproxy
|
|
%{_sbindir}/haproxy-halog
|
|
%{_sbindir}/rchaproxy
|
|
%dir %attr(-,root,haproxy) %{pkg_home}
|
|
%{_mandir}/man1/%{pkg_name}.1.gz
|
|
%dir %{_datadir}/vim
|
|
%dir %{vim_data_dir}
|
|
%dir %{vim_data_dir}/syntax
|
|
%{vim_data_dir}/syntax/%{pkg_name}.vim
|
|
%if %{with apparmor}
|
|
%if 0%{?suse_version} == 1110
|
|
%dir /etc/apparmor.d/local/
|
|
%endif
|
|
%config(noreplace) /etc/apparmor.d/usr.sbin.haproxy
|
|
%config(noreplace) %ghost /etc/apparmor.d/local/haproxy
|
|
%config(noreplace) %ghost /etc/apparmor.d/local/usr.sbin.haproxy
|
|
%endif
|
|
|
|
%changelog
|