Merge commit 'origin/maint-0.2.1'
[tor/rransom.git] / tor.spec.in
blob3d78e4d12c8f6b6dbaa4d3e6c7cf0c64ed3709c3
1 ## NOTE: tor.spec is autogenerated from tor.spec.in . Edit the latter,
2 ## not the former.
4 ## Things that need to be edited frequently
6 # This should be incremented whenever the spec file changes, but
7 # can drop back to zero at a new Tor version
9 %define specver 0
11 ## Things users may want to change
13 # User (and group) name under which the Tor daemon runs.
15 %define toruser @TORUSER@
16 %define torgroup @TORGROUP@
18 ## Version song and dance
20 # This should be the Tor version number, as it appears on the tarball,
21 # including any "pre<x>" or "rc<y>" suffix. This gets massaged to
22 # create the RPM version number, in a way that depends on the Tor
23 # numbering scheme.
24 %define native_version @VERSION@
26 %define version %(echo %{native_version} | sed -e 's/-/./g')
28 ## Define output filename
30 # This creates filenames based upon the value of target_cpu defined above
32 ## Release and OS identification song and dance
34 # This identifies the lineage of the spec file. This file is the
35 # standard one that comes with Tor; various distributions may
36 # have their own ideas about the right ways to do things.
37 %define pkgspec tor
39 # This spec is intended to build and install on multiple distributions
40 # (someday). Detect the distribution we're building on.
42 %define is_rh %(test -e /etc/redhat-release && echo 1 || echo 0)
43 %define is_fc %(test -e /etc/fedora-release && echo 1 || echo 0)
44 %define is_mdk %(test -e /etc/mandrake-release && echo 1 || echo 0)
45 %define is_suse %(test -e /etc/SuSE-release && echo 1 || echo 0)
46 %define is_rfl %(test -e /etc/redflag-release && echo 1 || echo 0)
48 %if %{is_fc}
49 %define ostag %(sed -e 's/^.*release /fc/' -e 's/ .*$//' -e 's/\\./_/g' < /etc/fedora-release)
50 %endif
52 %if %{is_rh}
53 %define ostag %(sed -e 's/^.*release /rh/' -e 's/ .*$//' -e 's/\\./_/g' < /etc/redhat-release)
54 %endif
56 %if %{is_mdk}
57 %define ostag mdk
58 %endif
60 %if %{is_suse}
61 %define ostag suse%(grep openSUSE /etc/SuSE-release | awk '{print $2}' | sed -e 's/\\./_/')
62 %endif
64 %if %{is_rfl}
65 %define ostag %(sed -e 's/^.*Desktop /redflag/' -e 's/ .*$//' -e 's/\\./_/g' < /etc/redflag-release)
66 %endif
68 # Using the build date ensures that every build really does get
69 # a different release number. We use this trick for CVS versions.
70 # For release versions, we don't want or need it.
71 %define is_dev_version %(echo %{native_version} | grep 'dev' > /dev/null && echo 1 || echo 0)
73 %if %{is_dev_version}
74 %define blddate %(date -u +"%Y%m%d%H%M")
75 %define release %{pkgspec}.%{specver}.%{ostag}.%{blddate}
76 %else
77 %define release %{pkgspec}.%{specver}.%{ostag}
78 %endif
80 ## General-purpose macros
82 # Some systems don't have some macros. If a macro doesn't seem
83 # to exist on your system, add it here...
85 %if %{!?__make:1}%{?__make:0}
86 %define __make make
87 %endif
89 %if %{!?make:1}%{?make:0}
90 %define make %{__make}
91 %endif
93 %if %{!?_localstatedir:1}%{?_localstatedir:0}
94 %define _localstatedir @LOCALSTATEDIR@
95 %endif
97 ## Package information
99 Name: tor
100 Version: %{version}
101 Release: %{release}
103 Summary: Anonymizing overlay network for TCP (The onion router)
104 URL: https://www.torproject.org/
105 Group: System Environment/Daemons
107 License: 3-clause BSD
108 Vendor: The Tor Project (https://torproject.org)
109 Packager: Andrew Lewman <andrew@torproject.org>
111 %if %{is_suse}
112 Requires: openssl >= 0.9.7
113 BuildRequires: openssl-devel >= 0.9.7, rpm >= 4.0, zlib-devel
114 %else
115 Requires: openssl >= 0.9.7
116 BuildRequires: openssl-devel >= 0.9.7
117 %endif
118 %if %{is_fc}
119 BuildRequires: rpm-build >= 4.0
120 %endif
121 Requires(pre): /usr/bin/id, /bin/date, /bin/sh
122 Requires(pre): %{_sbindir}/useradd, %{_sbindir}/groupadd
124 Source0: https://www.torproject.org/dist/%{name}-%{native_version}.tar.gz
126 BuildRoot: %{_tmppath}/%{name}-%{version}-%{release}-root
128 %description
129 Tor is a connection-based low-latency anonymous communication system.
131 This package provides the "tor" program, which serves as both a client and
132 a relay node. Scripts will automatically create a "%{toruser}" user and
133 a "%{torgroup}" group, and set tor up to run as a daemon when the system
134 is rebooted.
136 Applications connect to the local Tor proxy using the SOCKS
137 protocol. The tor client chooses a path through a set of relays, in
138 which each relay knows its predecessor and successor, but no
139 others. Traffic flowing down the circuit is unwrapped by a symmetric
140 key at each relay, which reveals the downstream relay.
142 Warnings: Tor does no protocol cleaning. That means there is a danger
143 that application protocols and associated programs can be induced to
144 reveal information about the initiator. Tor depends on Privoxy or
145 similar protocol cleaners to solve this problem. This is alpha code,
146 and is even more likely than released code to have anonymity-spoiling
147 bugs. The present network is small -- this further reduces the
148 strength of the anonymity provided. Tor is not presently suitable
149 for high-stakes anonymity.
151 %prep
152 %setup -q -n %{name}-%{native_version}
154 %build
155 %if %{is_suse}
156 %configure --with-tor-user=%{toruser} --with-tor-group=%{torgroup}
157 %else
158 %configure --with-tor-user=%{toruser} --with-tor-group=%{torgroup}
159 %endif
160 %make
162 %install
163 %makeinstall
165 # Install init script and control script
166 %__mkdir_p ${RPM_BUILD_ROOT}%{_initrddir}
167 %if %{is_suse}
168 %__install -p -m 755 contrib/suse/tor.sh ${RPM_BUILD_ROOT}%{_initrddir}/%{name}
169 %else
170 %__install -p -m 755 contrib/tor.sh ${RPM_BUILD_ROOT}%{_initrddir}/%{name}
171 %endif
172 %__install -p -m 755 contrib/torctl ${RPM_BUILD_ROOT}%{_bindir}
174 # Set up config file; "sample" file implements a basic user node.
175 %__install -p -m 644 ${RPM_BUILD_ROOT}%{_sysconfdir}/%{name}/torrc.sample ${RPM_BUILD_ROOT}%{_sysconfdir}/%{name}/torrc
177 # Install the logrotate control file.
178 %__mkdir_p -m 755 ${RPM_BUILD_ROOT}%{_sysconfdir}/logrotate.d
179 %__install -p -m 644 contrib/tor.logrotate ${RPM_BUILD_ROOT}%{_sysconfdir}/logrotate.d/%{name}
181 # Directories that don't have any preinstalled files
182 %__mkdir_p -m 700 ${RPM_BUILD_ROOT}%{_localstatedir}/lib/%{name}
183 %__mkdir_p -m 755 ${RPM_BUILD_ROOT}%{_localstatedir}/run/%{name}
184 %__mkdir_p -m 755 ${RPM_BUILD_ROOT}%{_localstatedir}/log/%{name}
185 %__mkdir_p -m 700 ${RPM_BUILD_ROOT}%{_localstatedir}/tmp/%{name}
187 %clean
188 [ "${RPM_BUILD_ROOT}" != "/" ] && rm -rf ${RPM_BUILD_ROOT}
190 # These scripts are probably wrong for Mandrake or SuSE. They're certainly
191 # wrong for Debian, but what are you doing using RPM on Debian?
193 %pre
195 # If tor is already installed and running (whether installed by RPM
196 # or not), then kill it, but remember that it was running.
197 %__rm -f /%{_localstatedir}/tmp/${name}-was-running-%{version}-%{release}
198 if [ -f %{_initrddir}/%{name} ] && /sbin/service %{name} status ; then
199 /sbin/service %{name} stop
200 touch /%{_localstatedir}/tmp/${name}-was-running-%{version}-%{release}
204 # Create a user and group if need be
206 if [ ! -n "`/usr/bin/id -g %{torgroup} 2>/dev/null`" ]; then
207 # One would like to default the GID, but doing that properly would
208 # require thought.
209 %{_sbindir}/groupadd %{torgroup} 2> /dev/null
211 if [ ! -n "`/usr/bin/id -u %{toruser} 2>/dev/null`" ]; then
212 # One would also like to default the UID, but doing that properly would
213 # also require thought.
214 if [ -x %{_sbindir}/nologin ]; then
215 %{_sbindir}/useradd -r -g %{torgroup} -d% {_localstatedir}/lib/%{name} -s %{_sbindir}/nologin %{toruser} 2> /dev/null
216 else
217 %{_sbindir}/useradd -r -g %{torgroup} -d %{_localstatedir}/lib/%{name} -s /bin/false %{toruser} 2> /dev/null
220 exit 0
222 %post
224 # If this is a new installation, use chkconfig to put tor in the
225 # default set of runlevels. If it's an upgrade, leave the existing
226 # configuration alone.
227 if [ $1 -eq 1 ]; then
228 /sbin/chkconfig --add %{name}
229 /sbin/chkconfig %{name} on
232 # Older tor RPMS used a different username for the tor daemon.
233 # Make sure the runtime data have the right ownership.
234 %__chown -R %{toruser}.%{torgroup} %{_localstatedir}/{lib,log,run}/%{name}
236 if [ -f /%{_localstatedir}/tmp/${name}-was-running-%{version}-%{release} ]; then
237 /sbin/service %{name} start
238 %__rm -f /%{_localstatedir}/tmp/${name}-was-running-%{version}-%{release}
240 exit 0
242 %preun
244 # If no instances of tor will be installed when we're done, make
245 # sure that it gets killed. We *don't* want to kill it or delete
246 # any of its data on uninstall if it's being upgraded to a new
247 # version, because the new version will actually already have
248 # been installed and started before the uninstall script for
249 # the old version is run, and we'd end up hosing it.
250 if [ $1 -le 0 ]; then
251 if [ -f %{_initrddir}/%{name} ] && /sbin/service %{name} status ; then
252 /sbin/service %{name} stop
254 %/sbin/chkconfig --del %{name}
255 %__rm -f ${_localstatedir}/lib/%{name}/cached-directory
256 %__rm -f ${_localstatedir}/lib/%{name}/bw_accounting
257 %__rm -f ${_localstatedir}/lib/%{name}/control_auth_cookie
258 %__rm -f ${_localstatedir}/lib/%{name}/router.desc
259 %__rm -f ${_localstatedir}/lib/%{name}/fingerprint
261 exit 0
263 %files
264 %defattr(-,root,root)
265 %doc AUTHORS INSTALL LICENSE README ChangeLog doc/HACKING doc/TODO
266 %{_mandir}/man*/*
267 %{_bindir}/tor
268 %{_bindir}/torctl
269 %{_bindir}/torify
270 %{_bindir}/tor-resolve
271 %{_bindir}/tor-gencert
272 %{_datadir}/tor/geoip
273 %config %{_initrddir}/%{name}
274 %config(noreplace) %attr(0644,root,root) %{_sysconfdir}/logrotate.d/%{name}
275 %dir %attr(0755,root,%{torgroup}) %{_sysconfdir}/%{name}/
276 %config(noreplace) %attr(0644,root,%{torgroup}) %{_sysconfdir}/%{name}/*
277 %attr(0700,%{toruser},%{torgroup}) %dir %{_localstatedir}/lib/%{name}
278 %attr(0750,%{toruser},%{torgroup}) %dir %{_localstatedir}/run/%{name}
279 %attr(0750,%{toruser},%{torgroup}) %dir %{_localstatedir}/log/%{name}
281 %changelog
283 * Fri May 01 2009 Andrew Lewman <andrew@torproject.org>
284 - clean up distro detection and remove dead comment blocks
286 * Sun Feb 22 2009 Andrew Lewman <andrew@torproject.org>
287 - update the description, vendor, and packager
289 * Thu Sep 11 2008 Andrew Lewman <phobos@rootme.org>
290 - See r16867
291 - http://archives.seul.org/or/cvs/Sep-2008/msg00156.html
293 * Tue Feb 27 2007 Andrew Lewman <phobos@rootme.org>
294 - Fix a potential race condition in how we determine the running state of tor. Found by Stefan Nordhausen.
295 - see OR-CVS for details
297 * Fri May 26 2006 Andrew Lewman <phobos@rootme.org>
298 - Add in a few "SUSEisms" to make dist-rpm actually work on suse
299 - Turn Tor "on" via chkconfig
300 - Update -mcpu to -mtune to make GCC happy
301 - see OR-CVS for details
303 * Tue Mar 28 2006 Andrew Lewman <phobos@rootme.org>
304 - converted to build the specified target cpu and arch
305 - override related rpm macros to build correctly
306 - see OR-CVS for details
308 * Mon Jan 17 2005 John Bashinski <jbash@velvet.com>
309 - Take runtime user and group names from configure system. Default
310 user/group names are now "_tor"; blame Roger...
311 - Make logrotate control file a separate file in the source distribution,
312 rather than creating it from the spec file.
313 - Properly handle the order in which RPM executes scriptlets on upgrade.
314 The old code would kill the daemon on upgrade.
315 - Start the tor daemon after installation if and only if it was
316 running before installation. Preserve runlevel setup on upgrade.
317 - Package the torctl script; the init script is now a wrapper around it.
319 * Tue Nov 5 2004 John Bashinski <jbash@velvet.com>
320 - Add skeletal support for multiple distributions
321 - Even more ridiculous level of macro-ization
322 - Modify version numbers so RPM can determine when it has a newer version
323 - Return to including distribution name in package release number
324 - Sharply trim description
325 - Change user/group name from "tor" to "tordmn"; "tor" is a common
326 given name (reported by Marius Hjelle)
327 - Change group to "System Environment/Daemons" (suggested by Marius Hjelle)
328 - Create logrotate file (suggested by Marius Hjelle)
329 - Make Tor run as a user proxy by default (suggested by Marius Hjelle)
330 - Autogenerate spec file from GNU autotools data, substituting version
331 and whatnot
332 - Be perhaps excessively paranoid with config file and directory modes
333 - Remove auto-start and auto-stop at installation time; there's some kind
334 of weird race going on, and it's arguably a bad thing anyway.
336 * Mon Jun 06 2004 Nick Mathewson <nickm@freehaven.net> 0.0.7-0.std.0.1.rc2
337 - Make spec file more happy with fc2 packaging
339 * Sat Jan 17 2004 John Bashinski <jbash@velvet.com>
340 - Basic spec file; tested with Red Hat 9.