tor.spec.in

   1 ## NOTE: tor.spec is autogenerated from tor.spec.in . Edit the latter,
   2 ## not the former.
   3
   4 ## Things that need to be edited frequently
   5 #
   6 # This should be incremented whenever the spec file changes, but
   7 # can drop back to zero at a new Tor version
   8
   9 %define specver 0
  10
  11 ## Things users may want to change
  12 #
  13 # User (and group) name under which the Tor daemon runs.
  14
  15 %define toruser @TORUSER@
  16 %define torgroup @TORGROUP@
  17
  18 ## Version song and dance
  19 #
  20 # This should be the Tor version number, as it appears on the tarball,
  21 # including any "pre<x>" or "rc<y>" suffix. This gets massaged to
  22 # create the RPM version number, in a way that depends on the Tor
  23 # numbering scheme.
  24 %define native_version       @VERSION@
  25
  26 %define version %(echo %{native_version} | sed -e 's/-/./g')
  27
  28 ## Define output filename
  29 #
  30 # This creates filenames based upon the value of target_cpu defined above
  31
  32 ## Release and OS identification song and dance
  33 #
  34 # This identifies the lineage of the spec file. This file is the
  35 # standard one that comes with Tor; various distributions may
  36 # have their own ideas about the right ways to do things.
  37 %define pkgspec tor
  38
  39 # This spec is intended to build and install on multiple distributions
  40 # (someday). Detect the distribution we're building on.
  41
  42 %define is_rh   %(test -e /etc/redhat-release && echo 1 || echo 0)
  43 %define is_fc   %(test -e /etc/fedora-release && echo 1 || echo 0)
  44 %define is_mdk  %(test -e /etc/mandrake-release && echo 1 || echo 0)
  45 %define is_suse %(test -e /etc/SuSE-release && echo 1 || echo 0)
  46 %define is_rfl  %(test -e /etc/redflag-release && echo 1 || echo 0)
  47
  48 %if %{is_fc}
  49 %define ostag %(sed -e 's/^.*release /fc/' -e 's/ .*$//' -e 's/\\./_/g' < /etc/fedora-release)
  50 %endif
  51
  52 %if %{is_rh}
  53 %define ostag %(sed -e 's/^.*release /rh/' -e 's/ .*$//' -e 's/\\./_/g' < /etc/redhat-release)
  54 %endif
  55
  56 %if %{is_mdk}
  57 %define ostag mdk
  58 %endif
  59
  60 %if %{is_suse}
  61 %define ostag suse%(grep openSUSE /etc/SuSE-release | awk '{print $2}' | sed -e 's/\\./_/')
  62 %endif
  63
  64 %if %{is_rfl}
  65 %define ostag %(sed -e 's/^.*Desktop /redflag/' -e 's/ .*$//' -e 's/\\./_/g' < /etc/redflag-release)
  66 %endif
  67
  68 # Using the build date ensures that every build really does get
  69 # a different release number.  We use this trick for CVS versions.
  70 # For release versions, we don't want or need it.
  71 %define is_dev_version %(echo %{native_version} | grep 'dev' > /dev/null && echo 1 || echo 0)
  72
  73 %if %{is_dev_version}
  74 %define blddate %(date -u +"%Y%m%d%H%M")
  75 %define release %{pkgspec}.%{specver}.%{ostag}.%{blddate}
  76 %else
  77 %define release %{pkgspec}.%{specver}.%{ostag}
  78 %endif
  79
  80 ## General-purpose macros
  81 #
  82 # Some systems don't have some macros. If a macro doesn't seem
  83 # to exist on your system, add it here...
  84
  85 %if %{!?__make:1}%{?__make:0}
  86 %define __make make
  87 %endif
  88
  89 %if %{!?make:1}%{?make:0}
  90 %define make %{__make}
  91 %endif
  92
  93 %if %{!?_localstatedir:1}%{?_localstatedir:0}
  94 %define _localstatedir @LOCALSTATEDIR@
  95 %endif
  96
  97 ## Package information
  98 #
  99 Name: tor
 100 Version: %{version}
 101 Release: %{release}
 102
 103 Summary: Anonymizing overlay network for TCP (The onion router)
 104 URL: https://www.torproject.org/
 105 Group: System Environment/Daemons
 106
 107 License: 3-clause BSD
 108 Vendor: The Tor Project (https://torproject.org)
 109 Packager: Andrew Lewman <andrew@torproject.org>
 110
 111 %if %{is_suse}
 112 Requires: openssl >= 0.9.7
 113 BuildRequires: openssl-devel >= 0.9.7, rpm >= 4.0, zlib-devel
 114 %else
 115 Requires: openssl >= 0.9.7
 116 BuildRequires: openssl-devel >= 0.9.7
 117 %endif
 118 %if %{is_fc}
 119 BuildRequires: rpm-build >= 4.0
 120 %endif
 121 Requires(pre): /usr/bin/id, /bin/date, /bin/sh
 122 Requires(pre): %{_sbindir}/useradd, %{_sbindir}/groupadd
 123
 124 Source0: https://www.torproject.org/dist/%{name}-%{native_version}.tar.gz
 125
 126 BuildRoot: %{_tmppath}/%{name}-%{version}-%{release}-root
 127
 128 %description
 129 Tor is a connection-based low-latency anonymous communication system.
 130
 131 This package provides the "tor" program, which serves as both a client and
 132 a relay node. Scripts will automatically create a "%{toruser}" user and
 133 a "%{torgroup}" group, and set tor up to run as a daemon when the system
 134 is rebooted.
 135
 136 Applications connect to the local Tor proxy using the SOCKS
 137 protocol. The tor client chooses a path through a set of relays, in
 138 which each relay knows its predecessor and successor, but no
 139 others. Traffic flowing down the circuit is unwrapped by a symmetric
 140 key at each relay, which reveals the downstream relay.
 141
 142 Warnings: Tor does no protocol cleaning.  That means there is a danger
 143 that application protocols and associated programs can be induced to
 144 reveal information about the initiator. Tor depends on Privoxy or
 145 similar protocol cleaners to solve this problem. This is alpha code,
 146 and is even more likely than released code to have anonymity-spoiling
 147 bugs. The present network is small -- this further reduces the
 148 strength of the anonymity provided. Tor is not presently suitable
 149 for high-stakes anonymity.
 150
 151 %prep
 152 %setup -q -n %{name}-%{native_version}
 153
 154 %build
 155 %if %{is_suse}
 156 %configure --with-tor-user=%{toruser} --with-tor-group=%{torgroup}
 157 %else
 158 %configure --with-tor-user=%{toruser} --with-tor-group=%{torgroup}
 159 %endif
 160 %make
 161
 162 %install
 163 %makeinstall
 164
 165 # Install init script and control script
 166 %__mkdir_p ${RPM_BUILD_ROOT}%{_initrddir}
 167 %if %{is_suse}
 168 %__install -p -m 755 contrib/suse/tor.sh ${RPM_BUILD_ROOT}%{_initrddir}/%{name}
 169 %else
 170 %__install -p -m 755 contrib/tor.sh ${RPM_BUILD_ROOT}%{_initrddir}/%{name}
 171 %endif
 172 %__install -p -m 755 contrib/torctl ${RPM_BUILD_ROOT}%{_bindir}
 173
 174 # Set up config file; "sample" file implements a basic user node.
 175 %__install -p -m 644 ${RPM_BUILD_ROOT}%{_sysconfdir}/%{name}/torrc.sample ${RPM_BUILD_ROOT}%{_sysconfdir}/%{name}/torrc
 176
 177 # Install the logrotate control file.
 178 %__mkdir_p -m 755 ${RPM_BUILD_ROOT}%{_sysconfdir}/logrotate.d
 179 %__install -p -m 644 contrib/tor.logrotate ${RPM_BUILD_ROOT}%{_sysconfdir}/logrotate.d/%{name}
 180
 181 # Directories that don't have any preinstalled files
 182 %__mkdir_p -m 700 ${RPM_BUILD_ROOT}%{_localstatedir}/lib/%{name}
 183 %__mkdir_p -m 755 ${RPM_BUILD_ROOT}%{_localstatedir}/run/%{name}
 184 %__mkdir_p -m 755 ${RPM_BUILD_ROOT}%{_localstatedir}/log/%{name}
 185 %__mkdir_p -m 700 ${RPM_BUILD_ROOT}%{_localstatedir}/tmp/%{name}
 186
 187 %clean
 188 [ "${RPM_BUILD_ROOT}" != "/" ] && rm -rf ${RPM_BUILD_ROOT}
 189
 190 # These scripts are probably wrong for Mandrake or SuSE. They're certainly
 191 # wrong for Debian, but what are you doing using RPM on Debian?
 192
 193 %pre
 194
 195 # If tor is already installed and running (whether installed by RPM
 196 # or not), then kill it, but remember that it was running.
 197 %__rm -f /%{_localstatedir}/tmp/${name}-was-running-%{version}-%{release}
 198 if [ -f %{_initrddir}/%{name} ] && /sbin/service %{name} status ; then
 199     /sbin/service %{name} stop
 200     touch /%{_localstatedir}/tmp/${name}-was-running-%{version}-%{release}
 201 fi
 202
 203 #
 204 # Create a user and group if need be
 205 #
 206 if [ ! -n "`/usr/bin/id -g %{torgroup} 2>/dev/null`" ]; then
 207     # One would like to default the GID, but doing that properly would
 208     # require thought.
 209     %{_sbindir}/groupadd %{torgroup} 2> /dev/null
 210 fi
 211 if [ ! -n "`/usr/bin/id -u %{toruser} 2>/dev/null`" ]; then
 212     # One would also like to default the UID, but doing that properly would
 213     # also require thought.
 214     if [ -x %{_sbindir}/nologin ]; then
 215         %{_sbindir}/useradd -r -g %{torgroup} -d% {_localstatedir}/lib/%{name} -s %{_sbindir}/nologin %{toruser} 2> /dev/null
 216     else
 217         %{_sbindir}/useradd -r -g %{torgroup} -d %{_localstatedir}/lib/%{name}  -s /bin/false %{toruser} 2> /dev/null
 218     fi
 219 fi
 220 exit 0
 221
 222 %post
 223
 224 # If this is a new installation, use chkconfig to put tor in the
 225 # default set of runlevels. If it's an upgrade, leave the existing
 226 # configuration alone.
 227 if [ $1 -eq 1 ]; then
 228     /sbin/chkconfig --add %{name}
 229     /sbin/chkconfig %{name} on
 230 fi
 231
 232 # Older tor RPMS used a different username for the tor daemon.
 233 # Make sure the runtime data have the right ownership.
 234 %__chown -R %{toruser}.%{torgroup} %{_localstatedir}/{lib,log,run}/%{name}
 235
 236 if [ -f /%{_localstatedir}/tmp/${name}-was-running-%{version}-%{release} ]; then
 237     /sbin/service %{name} start
 238     %__rm -f /%{_localstatedir}/tmp/${name}-was-running-%{version}-%{release}
 239 fi
 240 exit 0
 241
 242 %preun
 243
 244 # If no instances of tor will be installed when we're done, make
 245 # sure that it gets killed. We *don't* want to kill it or delete
 246 # any of its data on uninstall if it's being upgraded to a new
 247 # version, because the new version will actually already have
 248 # been installed and started before the uninstall script for
 249 # the old version is run, and we'd end up hosing it.
 250 if [ $1 -le 0 ]; then
 251     if [ -f %{_initrddir}/%{name} ] && /sbin/service %{name} status ; then
 252         /sbin/service %{name} stop
 253     fi
 254     %/sbin/chkconfig --del %{name}
 255     %__rm -f ${_localstatedir}/lib/%{name}/cached-directory
 256     %__rm -f ${_localstatedir}/lib/%{name}/bw_accounting
 257     %__rm -f ${_localstatedir}/lib/%{name}/control_auth_cookie
 258     %__rm -f ${_localstatedir}/lib/%{name}/router.desc
 259     %__rm -f ${_localstatedir}/lib/%{name}/fingerprint
 260 fi
 261 exit 0
 262
 263 %files
 264 %defattr(-,root,root)
 265 %doc AUTHORS INSTALL LICENSE README ChangeLog doc/HACKING doc/TODO
 266 %{_mandir}/man*/*
 267 %{_bindir}/tor
 268 %{_bindir}/torctl
 269 %{_bindir}/torify
 270 %{_bindir}/tor-resolve
 271 %{_bindir}/tor-gencert
 272 %{_datadir}/tor/geoip
 273 %config %{_initrddir}/%{name}
 274 %config(noreplace) %attr(0644,root,root) %{_sysconfdir}/logrotate.d/%{name}
 275 %dir %attr(0755,root,%{torgroup}) %{_sysconfdir}/%{name}/
 276 %config(noreplace) %attr(0644,root,%{torgroup}) %{_sysconfdir}/%{name}/*
 277 %attr(0700,%{toruser},%{torgroup}) %dir %{_localstatedir}/lib/%{name}
 278 %attr(0750,%{toruser},%{torgroup}) %dir %{_localstatedir}/run/%{name}
 279 %attr(0750,%{toruser},%{torgroup}) %dir %{_localstatedir}/log/%{name}
 280
 281 %changelog
 282
 283 * Fri May 01 2009 Andrew Lewman <andrew@torproject.org>
 284 - clean up distro detection and remove dead comment blocks
 285
 286 * Sun Feb 22 2009 Andrew Lewman <andrew@torproject.org>
 287 - update the description, vendor, and packager
 288
 289 * Thu Sep 11 2008 Andrew Lewman <phobos@rootme.org>
 290 - See r16867
 291 - http://archives.seul.org/or/cvs/Sep-2008/msg00156.html
 292
 293 * Tue Feb 27 2007 Andrew Lewman <phobos@rootme.org>
 294 - Fix a potential race condition in how we determine the running state of tor.  Found by Stefan Nordhausen.
 295 - see OR-CVS for details
 296
 297 * Fri May 26 2006 Andrew Lewman <phobos@rootme.org>
 298 - Add in a few "SUSEisms" to make dist-rpm actually work on suse
 299 - Turn Tor "on" via chkconfig
 300 - Update -mcpu to -mtune to make GCC happy
 301 - see OR-CVS for details
 302
 303 * Tue Mar 28 2006 Andrew Lewman <phobos@rootme.org>
 304 - converted to build the specified target cpu and arch
 305 - override related rpm macros to build correctly
 306 - see OR-CVS for details
 307
 308 * Mon Jan 17 2005 John Bashinski <jbash@velvet.com>
 309 - Take runtime user and group names from configure system. Default
 310   user/group names are now "_tor"; blame Roger...
 311 - Make logrotate control file a separate file in the source distribution,
 312   rather than creating it from the spec file.
 313 - Properly handle the order in which RPM executes scriptlets on upgrade.
 314   The old code would kill the daemon on upgrade.
 315 - Start the tor daemon after installation if and only if it was
 316   running before installation. Preserve runlevel setup on upgrade.
 317 - Package the torctl script; the init script is now a wrapper around it.
 318
 319 * Tue Nov  5 2004 John Bashinski <jbash@velvet.com>
 320 - Add skeletal support for multiple distributions
 321 - Even more ridiculous level of macro-ization
 322 - Modify version numbers so RPM can determine when it has a newer version
 323 - Return to including distribution name in package release number
 324 - Sharply trim description
 325 - Change user/group name from "tor" to "tordmn"; "tor" is a common
 326   given name (reported by Marius Hjelle)
 327 - Change group to "System Environment/Daemons" (suggested by Marius Hjelle)
 328 - Create logrotate file (suggested by Marius Hjelle)
 329 - Make Tor run as a user proxy by default (suggested by Marius Hjelle)
 330 - Autogenerate spec file from GNU autotools data, substituting version
 331   and whatnot
 332 - Be perhaps excessively paranoid with config file and directory modes
 333 - Remove auto-start and auto-stop at installation time; there's some kind
 334   of weird race going on, and it's arguably a bad thing anyway.
 335
 336 * Mon Jun 06 2004 Nick Mathewson <nickm@freehaven.net> 0.0.7-0.std.0.1.rc2
 337 - Make spec file more happy with fc2 packaging
 338
 339 * Sat Jan 17 2004 John Bashinski <jbash@velvet.com>
 340 - Basic spec file; tested with Red Hat 9.