Alice Wonder
9 years ago
6 changed files with 899 additions and 0 deletions
@ -0,0 +1,185 @@
@@ -0,0 +1,185 @@
|
||||
RPM Spec File Notes |
||||
------------------- |
||||
|
||||
The RPM spec file provided here is for Bitcoin-Core 0.12.0 and builds on CentOS |
||||
7 with either the CentOS provided OpenSSL library or with LibreSSL as packaged |
||||
at [LibreLAMP.com](https://librelamp.com/). It should hopefully not be too |
||||
difficult to port the RPM spec file to most RPM based Linux distributions. |
||||
|
||||
When porting the spec file to build for a particular distribution, there are |
||||
some important notes. |
||||
|
||||
## Sources |
||||
|
||||
It is considered good form for all sources to reference a URL where the source |
||||
can be downloaded. |
||||
|
||||
Sources 0-9 should be reserved for source code tarballs. `Source0` should |
||||
reference the release tarball available from https://bitcoin.org/bin/ and |
||||
`Source1` should reference the BerkeleyDB source. |
||||
|
||||
Sources 10-99 are for source files that are maintained in the |
||||
[Bitcoin git repository](https://github.com/bitcoin/bitcoin) but are not part of |
||||
the release tarball. Most of these will reside in the `contrib` sub-directory. |
||||
|
||||
Sources 10-19 should be reserved for miscellaneous configuration files. |
||||
Currently only `Source10` is used, for the example `bitcoin.conf` file. |
||||
|
||||
Sources 20-29 should be reserved for man pages. Currently only `Source20` |
||||
through `Source23` are used. |
||||
|
||||
Sources 30-39 should be reserved for SELinux related files. Currently only |
||||
`Source30` through `Source32` are used. Until those files are in a tagged |
||||
release, the full URL specified in the RPM spec file will not work. You can get |
||||
them from the git ropository where you retrieved this file. |
||||
|
||||
Sources 100+ are for files that are not source tarballs and are not maintained |
||||
in the bitcoin git repository. At present only an SVG version of the Bitcoin |
||||
icon is used. |
||||
|
||||
## Patches |
||||
|
||||
In general, patches should be avoided. When a packager feels a patch is |
||||
necessary, the packager should bring the problem to the attention of the bitcoin |
||||
developers so that an official fix to the issue can make it into the next |
||||
release. |
||||
|
||||
### Patch0 bitcoin-0.12.0-libressl.patch |
||||
|
||||
This patch is only needed if building against LibreSSL. LibreSSL is not the |
||||
standard TLS library on most Linux distributions. The patch will likely not be |
||||
needed when 0.12.1 is released, a proper fix is already in the Bitcoin git |
||||
master branch. |
||||
|
||||
## BuildRequires |
||||
|
||||
The packages specified in the `BuildRequires` are specified according to the |
||||
package naming convention currently used in CentOS 7 and EPEL for CentOS 7. You |
||||
may need to change some of the package names for other distributions. This is |
||||
most likely to be the case with the Qt packages. |
||||
|
||||
## BerkeleyDB |
||||
|
||||
The `build-unix.md` file recommends building against BerkeleyDB 4.8.30. Even if |
||||
that is the version your Linux distribution ships with, it probably is a good |
||||
idea to build Bitcoin Core against a static version of that library compiled |
||||
according to the instructions in the `build-unix.md` file so that any changes |
||||
the distribution may make in the future will not result in a problem for users. |
||||
|
||||
The problem that can exist, clients built against different versions of |
||||
BerkeleyDB may not be able read each other's `wallet.dat` file which can make it |
||||
difficult for a user to recover from backup in the event of a system failure. |
||||
|
||||
## Graphical User Interface and Qt Version |
||||
|
||||
The RPM spec file will by default build the GUI client linked against the Qt5 |
||||
libraries. If you wish instead to link against the Qt4 libraries you need to |
||||
pass the switch `-D '_use_qt4 1'` at build time to the `rpmbuild` or `mock` |
||||
command used to build the packages. |
||||
|
||||
If you would prefer not to build the GUI at all, you can pass the switch |
||||
`-D '_no_gui 1'` to the `rpmbuild` or `mock` build command. |
||||
|
||||
## Desktop and KDE Files |
||||
|
||||
The desktop and KDE meta files are created in the spec file itself with the |
||||
`cat` command. This is done to allow easy distribution specific changes without |
||||
needing to use any patches. A specific time stamp is given to the files so that |
||||
it does not they do not appear to have been updated every time the package is |
||||
built. If you do make changes to them, you probably should update time stamp |
||||
assigned to them in the `touch` command that specifies the time stamp. |
||||
|
||||
## SVG, PNG, and XPM Icons |
||||
|
||||
The `bitcoin.svg` file is from the source listed as `Source100`. It is used as |
||||
the source for the PNG and XPM files. The generated PNG and XPM files are given |
||||
the same time stamp as the source SVG file as a means of indicating they are |
||||
derived from it. |
||||
|
||||
## Systemd |
||||
|
||||
This spec file assumes the target distribution uses systemd. That really only |
||||
matters for the `bitcoin-server` package. At this point, most RPM based |
||||
distributions that still receive vendor updates do in fact use systemd. |
||||
|
||||
The files to control the service are created in the RPM spec file itself using |
||||
the `cat` command. This is done to make it easy to modify for other |
||||
distributions that may implement things differently without needing to patch |
||||
source. A specific time stamp is given to the files so that they do not appear |
||||
to have been updated every time the package is built. If you do make changes to |
||||
them, you probably should update the time stamp assigned to them in the `touch` |
||||
command that specifies the time stamp. |
||||
|
||||
## SELinux |
||||
|
||||
The `bitcoin-server` package should have SELinux support. How to properly do |
||||
that *may* vary by distribution and version of distribution. |
||||
|
||||
The SELinux stuff in this RPM spec file *should* be correct for CentOS, RHEL, |
||||
and Fedora but it would be a good idea to review it before building the package |
||||
on other distributions. |
||||
|
||||
## Tests |
||||
|
||||
The `%check` section takes a very long time to run. If your build system has a |
||||
time limit for package build, you may need to make an exception for this |
||||
package. On CentOS 7 the `%check` section completes successfully with both |
||||
OpenSSL and LibreSSL, a failure really does mean something is wrong. |
||||
|
||||
## LibreSSL Build Notes |
||||
|
||||
To build against LibreSSL you will need to pass the switch |
||||
`-D '_use_libressl 1'` to the `rpmbuild` or `mock` command or the spec file will |
||||
want the OpenSSL development files. |
||||
|
||||
### LibreSSL and Boost |
||||
|
||||
LibreSSL (and some newer builds of OpenSSL) do not have support for SSLv3. This |
||||
can cause issues with the Boost package if the Boost package has not been |
||||
patched accordingly. On those distributions, you will either need to build |
||||
Bitcoin-Core against OpenSSL or use a patched version of Boost in the build |
||||
system. |
||||
|
||||
As SSLv3 is no longer safe, distributions that have not patched Boost to work |
||||
with TLS libraries that do not support SSLv3 should have bug reports filed |
||||
against the Boost package. This bug report has already been filed for RHEL 7 but |
||||
it may need to be filed for other distributions. |
||||
|
||||
A patch for Boost: https://github.com/boostorg/asio/pull/23/files |
||||
|
||||
## ZeroMQ |
||||
|
||||
At this time, this RPM spec file does not support the ZeroMQ build options. A |
||||
suitable version of ZeroMQ is not available for the platform this spec file was |
||||
developed on (CentOS 7). |
||||
|
||||
## Legacy Credit |
||||
|
||||
This RPM spec file is largely based upon the work of Michael Hampton at |
||||
[Ringing Liberty](https://www.ringingliberty.com/bitcoin/). He has been |
||||
packaging Bitcoin for Fedora at least since 2012. |
||||
|
||||
Most of the differences between his packaging and this package are stylistic in |
||||
nature. The major differences: |
||||
|
||||
1. He builds from a github tagged release rather than a release tarball. This |
||||
should not result in different source code. |
||||
|
||||
2. He does not build BerkeleyDB but instead uses the BerkeleyDB provided by the |
||||
Linux distribution. For the distributions he packages for, they currently all |
||||
use the same version of BerkeleyDB so that difference is *probably* just |
||||
academic. |
||||
|
||||
3. As of his 10.11.2 package he did not allow for building against LibreSSL, |
||||
specifying a build without the Qt GUI, or specifying which version of the Qt |
||||
libraries to use. |
||||
|
||||
4. I renamed the `bitcoin` package that contains the Qt GUI to `bitcoin-core` as |
||||
that appears to be how the general population refers to it, in contrast to |
||||
`bitcoin-xt` or `bitcoin-classic`. I wanted to make sure the general population |
||||
knows what they are getting when installing the GUI package. |
||||
|
||||
As far as minor differences, I generally prefer to assign the file permissions |
||||
in the `%files` portion of an RPM spec file rather than specifying the |
||||
permissions of a file during `%install` and other minor things like that that |
||||
are largely just cosmetic. |
||||
@ -0,0 +1,24 @@
@@ -0,0 +1,24 @@
|
||||
diff -ur bitcoin-0.12.0.orig/src/init.cpp bitcoin-0.12.0/src/init.cpp
|
||||
--- bitcoin-0.12.0.orig/src/init.cpp 2015-12-31 16:00:00.000000000 -0800
|
||||
+++ bitcoin-0.12.0/src/init.cpp 2016-02-23 06:03:47.133227757 -0800
|
||||
@@ -1075,7 +1075,7 @@
|
||||
if (fPrintToDebugLog) |
||||
OpenDebugLog(); |
||||
|
||||
-#if (OPENSSL_VERSION_NUMBER < 0x10100000L)
|
||||
+#if defined(LIBRESSL_VERSION_NUMBER) || (OPENSSL_VERSION_NUMBER < 0x10100000L)
|
||||
LogPrintf("Using OpenSSL version %s\n", SSLeay_version(SSLEAY_VERSION)); |
||||
#else |
||||
LogPrintf("Using OpenSSL version %s\n", OpenSSL_version(OPENSSL_VERSION)); |
||||
diff -ur bitcoin-0.12.0.orig/src/qt/rpcconsole.cpp bitcoin-0.12.0/src/qt/rpcconsole.cpp
|
||||
--- bitcoin-0.12.0.orig/src/qt/rpcconsole.cpp 2015-12-31 16:00:00.000000000 -0800
|
||||
+++ bitcoin-0.12.0/src/qt/rpcconsole.cpp 2016-02-23 15:09:42.881126841 -0800
|
||||
@@ -264,7 +264,7 @@
|
||||
|
||||
// set library version labels |
||||
|
||||
-#if (OPENSSL_VERSION_NUMBER < 0x10100000L)
|
||||
+#if defined(LIBRESSL_VERSION_NUMBER) || (OPENSSL_VERSION_NUMBER < 0x10100000L)
|
||||
ui->openSSLVersion->setText(SSLeay_version(SSLEAY_VERSION)); |
||||
#else |
||||
ui->openSSLVersion->setText(OpenSSL_version(OPENSSL_VERSION)); |
||||
@ -0,0 +1,8 @@
@@ -0,0 +1,8 @@
|
||||
/usr/bin/bitcoin-cli -- gen_context(system_u:object_r:bitcoin_exec_t,s0) |
||||
/usr/sbin/bitcoind -- gen_context(system_u:object_r:bitcoin_exec_t,s0) |
||||
/usr/lib(64)?/bitcoin/bitcoind -- gen_context(system_u:object_r:bitcoin_exec_t,s0) |
||||
|
||||
/etc/bitcoin(/.*)? gen_context(system_u:object_r:bitcoin_conf_t,s0) |
||||
/var/lib/bitcoin(/.*)? gen_context(system_u:object_r:bitcoin_var_lib_t,s0) |
||||
|
||||
(/var)?/run/bitcoind(/.*)? gen_context(system_u:object_r:bitcoin_var_run_t,s0) |
||||
@ -0,0 +1,157 @@
@@ -0,0 +1,157 @@
|
||||
|
||||
## <summary>policy for bitcoin</summary> |
||||
|
||||
|
||||
######################################## |
||||
## <summary> |
||||
## Transition to bitcoin. |
||||
## </summary> |
||||
## <param name="domain"> |
||||
## <summary> |
||||
## Domain allowed to transition. |
||||
## </summary> |
||||
## </param> |
||||
# |
||||
interface(`bitcoin_domtrans',` |
||||
gen_require(` |
||||
type bitcoin_t, bitcoin_exec_t; |
||||
') |
||||
|
||||
corecmd_search_bin($1) |
||||
domtrans_pattern($1, bitcoin_exec_t, bitcoin_t) |
||||
') |
||||
|
||||
|
||||
######################################## |
||||
## <summary> |
||||
## Execute bitcoin server in the bitcoin domain. |
||||
## </summary> |
||||
## <param name="domain"> |
||||
## <summary> |
||||
## Domain allowed access. |
||||
## </summary> |
||||
## </param> |
||||
# |
||||
interface(`bitcoin_initrc_domtrans',` |
||||
gen_require(` |
||||
type bitcoin_initrc_exec_t; |
||||
') |
||||
|
||||
init_labeled_script_domtrans($1, bitcoin_initrc_exec_t) |
||||
') |
||||
|
||||
|
||||
######################################## |
||||
## <summary> |
||||
## Search bitcoin lib directories. |
||||
## </summary> |
||||
## <param name="domain"> |
||||
## <summary> |
||||
## Domain allowed access. |
||||
## </summary> |
||||
## </param> |
||||
# |
||||
interface(`bitcoin_search_lib',` |
||||
gen_require(` |
||||
type bitcoin_var_lib_t; |
||||
') |
||||
|
||||
allow $1 bitcoin_var_lib_t:dir search_dir_perms; |
||||
files_search_var_lib($1) |
||||
') |
||||
|
||||
######################################## |
||||
## <summary> |
||||
## Read bitcoin lib files. |
||||
## </summary> |
||||
## <param name="domain"> |
||||
## <summary> |
||||
## Domain allowed access. |
||||
## </summary> |
||||
## </param> |
||||
# |
||||
interface(`bitcoin_read_lib_files',` |
||||
gen_require(` |
||||
type bitcoin_var_lib_t; |
||||
') |
||||
|
||||
files_search_var_lib($1) |
||||
read_files_pattern($1, bitcoin_var_lib_t, bitcoin_var_lib_t) |
||||
') |
||||
|
||||
######################################## |
||||
## <summary> |
||||
## Manage bitcoin lib files. |
||||
## </summary> |
||||
## <param name="domain"> |
||||
## <summary> |
||||
## Domain allowed access. |
||||
## </summary> |
||||
## </param> |
||||
# |
||||
interface(`bitcoin_manage_lib_files',` |
||||
gen_require(` |
||||
type bitcoin_var_lib_t; |
||||
') |
||||
|
||||
files_search_var_lib($1) |
||||
manage_files_pattern($1, bitcoin_var_lib_t, bitcoin_var_lib_t) |
||||
') |
||||
|
||||
######################################## |
||||
## <summary> |
||||
## Manage bitcoin lib directories. |
||||
## </summary> |
||||
## <param name="domain"> |
||||
## <summary> |
||||
## Domain allowed access. |
||||
## </summary> |
||||
## </param> |
||||
# |
||||
interface(`bitcoin_manage_lib_dirs',` |
||||
gen_require(` |
||||
type bitcoin_var_lib_t; |
||||
') |
||||
|
||||
files_search_var_lib($1) |
||||
manage_dirs_pattern($1, bitcoin_var_lib_t, bitcoin_var_lib_t) |
||||
') |
||||
|
||||
|
||||
######################################## |
||||
## <summary> |
||||
## All of the rules required to administrate |
||||
## an bitcoin environment |
||||
## </summary> |
||||
## <param name="domain"> |
||||
## <summary> |
||||
## Domain allowed access. |
||||
## </summary> |
||||
## </param> |
||||
## <param name="role"> |
||||
## <summary> |
||||
## Role allowed access. |
||||
## </summary> |
||||
## </param> |
||||
## <rolecap/> |
||||
# |
||||
interface(`bitcoin_admin',` |
||||
gen_require(` |
||||
type bitcoin_t; |
||||
type bitcoin_initrc_exec_t; |
||||
type bitcoin_var_lib_t; |
||||
') |
||||
|
||||
allow $1 bitcoin_t:process { ptrace signal_perms }; |
||||
ps_process_pattern($1, bitcoin_t) |
||||
|
||||
bitcoin_initrc_domtrans($1) |
||||
domain_system_change_exemption($1) |
||||
role_transition $2 bitcoin_initrc_exec_t system_r; |
||||
allow $2 system_r; |
||||
|
||||
files_search_var_lib($1) |
||||
admin_pattern($1, bitcoin_var_lib_t) |
||||
|
||||
') |
||||
|
||||
@ -0,0 +1,444 @@
@@ -0,0 +1,444 @@
|
||||
%define bdbv 4.8.30 |
||||
%global selinux_variants mls strict targeted |
||||
|
||||
%if 0%{?_no_gui:1} |
||||
%define _buildqt 0 |
||||
%define buildargs --with-gui=no |
||||
%else |
||||
%define _buildqt 1 |
||||
%if 0%{?_use_qt4} |
||||
%define buildargs --with-qrencode --with-gui=qt4 |
||||
%else |
||||
%define buildargs --with-qrencode --with-gui=qt5 |
||||
%endif |
||||
%endif |
||||
|
||||
Name: bitcoin |
||||
Version: 0.12.0 |
||||
Release: 2%{?dist} |
||||
Summary: Peer to Peer Cryptographic Currency |
||||
|
||||
Group: Applications/System |
||||
License: MIT |
||||
URL: https://bitcoin.org/ |
||||
Source0: https://bitcoin.org/bin/bitcoin-core-%{version}/bitcoin-%{version}.tar.gz |
||||
Source1: http://download.oracle.com/berkeley-db/db-%{bdbv}.NC.tar.gz |
||||
|
||||
Source10: https://raw.githubusercontent.com/bitcoin/bitcoin/v%{version}/contrib/debian/examples/bitcoin.conf |
||||
|
||||
#man pages |
||||
Source20: https://raw.githubusercontent.com/bitcoin/bitcoin/v%{version}/contrib/debian/manpages/bitcoind.1 |
||||
Source21: https://raw.githubusercontent.com/bitcoin/bitcoin/v%{version}/contrib/debian/manpages/bitcoin-cli.1 |
||||
Source22: https://raw.githubusercontent.com/bitcoin/bitcoin/v%{version}/contrib/debian/manpages/bitcoin-qt.1 |
||||
Source23: https://raw.githubusercontent.com/bitcoin/bitcoin/v%{version}/contrib/debian/manpages/bitcoin.conf.5 |
||||
|
||||
#selinux |
||||
Source30: https://raw.githubusercontent.com/bitcoin/bitcoin/v%{version}/contrib/rpm/bitcoin.te |
||||
# Source31 - what about bitcoin-tx and bench_bitcoin ??? |
||||
Source31: https://raw.githubusercontent.com/bitcoin/bitcoin/v%{version}/contrib/rpm/bitcoin.fc |
||||
Source32: https://raw.githubusercontent.com/bitcoin/bitcoin/v%{version}/contrib/rpm/bitcoin.if |
||||
|
||||
Source100: https://upload.wikimedia.org/wikipedia/commons/4/46/Bitcoin.svg |
||||
|
||||
%if 0%{?_use_libressl:1} |
||||
BuildRequires: libressl-devel |
||||
%else |
||||
BuildRequires: openssl-devel |
||||
%endif |
||||
BuildRequires: boost-devel |
||||
BuildRequires: miniupnpc-devel |
||||
BuildRequires: autoconf automake libtool |
||||
BuildRequires: libevent-devel |
||||
|
||||
|
||||
Patch0: bitcoin-0.12.0-libressl.patch |
||||
|
||||
|
||||
%description |
||||
Bitcoin is a digital cryptographic currency that uses peer-to-peer technology to |
||||
operate with no central authority or banks; managing transactions and the |
||||
issuing of bitcoins is carried out collectively by the network. |
||||
|
||||
%if %{_buildqt} |
||||
%package core |
||||
Summary: Peer to Peer Cryptographic Currency |
||||
Group: Applications/System |
||||
Obsoletes: %{name} < %{version}-%{release} |
||||
Provides: %{name} = %{version}-%{release} |
||||
%if 0%{?_use_qt4} |
||||
BuildRequires: qt-devel |
||||
%else |
||||
BuildRequires: qt5-qtbase-devel |
||||
# for /usr/bin/lrelease-qt5 |
||||
BuildRequires: qt5-linguist |
||||
%endif |
||||
BuildRequires: protobuf-devel |
||||
BuildRequires: qrencode-devel |
||||
BuildRequires: %{_bindir}/desktop-file-validate |
||||
# for icon generation from SVG |
||||
BuildRequires: %{_bindir}/inkscape |
||||
BuildRequires: %{_bindir}/convert |
||||
|
||||
%description core |
||||
Bitcoin is a digital cryptographic currency that uses peer-to-peer technology to |
||||
operate with no central authority or banks; managing transactions and the |
||||
issuing of bitcoins is carried out collectively by the network. |
||||
|
||||
This package contains the Qt based graphical client and node. If you are looking |
||||
to run a Bitcoin wallet, this is probably the package you want. |
||||
%endif |
||||
|
||||
|
||||
%package libs |
||||
Summary: Bitcoin shared libraries |
||||
Group: System Environment/Libraries |
||||
|
||||
%description libs |
||||
This package provides the bitcoinconsensus shared libraries. These libraries |
||||
may be used by third party software to provide consensus verification |
||||
functionality. |
||||
|
||||
Unless you know need this package, you probably do not. |
||||
|
||||
%package devel |
||||
Summary: Development files for bitcoin |
||||
Group: Development/Libraries |
||||
Requires: %{name}-libs = %{version}-%{release} |
||||
|
||||
%description devel |
||||
This package contains the header files and static library for the |
||||
bitcoinconsensus shared library. If you are developing or compiling software |
||||
that wants to link against that library, then you need this package installed. |
||||
|
||||
Most people do not need this package installed. |
||||
|
||||
%package server |
||||
Summary: The bitcoin daemon |
||||
Group: System Environment/Daemons |
||||
Requires: bitcoin-utils = %{version}-%{release} |
||||
Requires: selinux-policy policycoreutils-python |
||||
Requires(pre): shadow-utils |
||||
Requires(post): %{_sbindir}/semodule %{_sbindir}/restorecon %{_sbindir}/fixfiles %{_sbindir}/sestatus |
||||
Requires(postun): %{_sbindir}/semodule %{_sbindir}/restorecon %{_sbindir}/fixfiles %{_sbindir}/sestatus |
||||
BuildRequires: systemd |
||||
BuildRequires: checkpolicy |
||||
BuildRequires: %{_datadir}/selinux/devel/Makefile |
||||
|
||||
%description server |
||||
This package provides a stand-alone bitcoin-core daemon. For most users, this |
||||
package is only needed if they need a full-node without the graphical client. |
||||
|
||||
Some third party wallet software will want this package to provide the actual |
||||
bitcoin-core node they use to connect to the network. |
||||
|
||||
If you use the graphical bitcoin-core client then you almost certainly do not |
||||
need this package. |
||||
|
||||
%package utils |
||||
Summary: Bitcoin utilities |
||||
Group: Applications/System |
||||
|
||||
%description utils |
||||
This package provides several command line utilities for interacting with a |
||||
bitcoin-core daemon. |
||||
|
||||
The bitcoin-cli utility allows you to communicate and control a bitcoin daemon |
||||
over RPC, the bitcoin-tx utility allows you to create a custom transaction, and |
||||
the bench_bitcoin utility can be used to perform some benchmarks. |
||||
|
||||
This package contains utilities needed by the bitcoin-server package. |
||||
|
||||
|
||||
%prep |
||||
%setup -q |
||||
%patch0 -p1 -b .libressl |
||||
cp -p %{SOURCE10} ./bitcoin.conf.example |
||||
tar -zxf %{SOURCE1} |
||||
cp -p db-%{bdbv}.NC/LICENSE ./db-%{bdbv}.NC-LICENSE |
||||
mkdir db4 SELinux |
||||
cp -p %{SOURCE30} %{SOURCE31} %{SOURCE32} SELinux/ |
||||
|
||||
|
||||
%build |
||||
CWD=`pwd` |
||||
cd db-%{bdbv}.NC/build_unix/ |
||||
../dist/configure --enable-cxx --disable-shared --with-pic --prefix=${CWD}/db4 |
||||
make install |
||||
cd ../.. |
||||
|
||||
./autogen.sh |
||||
%configure LDFLAGS="-L${CWD}/db4/lib/" CPPFLAGS="-I${CWD}/db4/include/" --with-miniupnpc --enable-glibc-back-compat %{buildargs} |
||||
make %{?_smp_mflags} |
||||
|
||||
pushd SELinux |
||||
for selinuxvariant in %{selinux_variants}; do |
||||
make NAME=${selinuxvariant} -f %{_datadir}/selinux/devel/Makefile |
||||
mv bitcoin.pp bitcoin.pp.${selinuxvariant} |
||||
make NAME=${selinuxvariant} -f %{_datadir}/selinux/devel/Makefile clean |
||||
done |
||||
popd |
||||
|
||||
|
||||
%install |
||||
make install DESTDIR=%{buildroot} |
||||
|
||||
mkdir -p -m755 %{buildroot}%{_sbindir} |
||||
mv %{buildroot}%{_bindir}/bitcoind %{buildroot}%{_sbindir}/bitcoind |
||||
|
||||
# systemd stuff |
||||
mkdir -p %{buildroot}%{_tmpfilesdir} |
||||
cat <<EOF > %{buildroot}%{_tmpfilesdir}/bitcoin.conf |
||||
d /run/bitcoind 0750 bitcoin bitcoin - |
||||
EOF |
||||
touch -a -m -t 201504280000 %{buildroot}%{_tmpfilesdir}/bitcoin.conf |
||||
|
||||
mkdir -p %{buildroot}%{_sysconfdir}/sysconfig |
||||
cat <<EOF > %{buildroot}%{_sysconfdir}/sysconfig/bitcoin |
||||
# Provide options to the bitcoin daemon here, for example |
||||
# OPTIONS="-testnet -disable-wallet" |
||||
|
||||
OPTIONS="" |
||||
|
||||
# System service defaults. |
||||
# Don't change these unless you know what you're doing. |
||||
CONFIG_FILE="%{_sysconfdir}/bitcoin/bitcoin.conf" |
||||
DATA_DIR="%{_localstatedir}/lib/bitcoin" |
||||
PID_FILE="/run/bitcoind/bitcoind.pid" |
||||
EOF |
||||
touch -a -m -t 201504280000 %{buildroot}%{_sysconfdir}/sysconfig/bitcoin |
||||
|
||||
mkdir -p %{buildroot}%{_unitdir} |
||||
cat <<EOF > %{buildroot}%{_unitdir}/bitcoin.service |
||||
[Unit] |
||||
Description=Bitcoin daemon |
||||
After=syslog.target network.target |
||||
|
||||
[Service] |
||||
Type=forking |
||||
ExecStart=%{_sbindir}/bitcoind -daemon -conf=\${CONFIG_FILE} -datadir=\${DATA_DIR} -pid=\${PID_FILE} \$OPTIONS |
||||
EnvironmentFile=%{_sysconfdir}/sysconfig/bitcoin |
||||
User=bitcoin |
||||
Group=bitcoin |
||||
|
||||
Restart=on-failure |
||||
PrivateTmp=true |
||||
TimeoutStopSec=120 |
||||
TimeoutStartSec=60 |
||||
StartLimitInterval=240 |
||||
StartLimitBurst=5 |
||||
|
||||
[Install] |
||||
WantedBy=multi-user.target |
||||
EOF |
||||
touch -a -m -t 201504280000 %{buildroot}%{_unitdir}/bitcoin.service |
||||
#end systemd stuff |
||||
|
||||
mkdir %{buildroot}%{_sysconfdir}/bitcoin |
||||
mkdir -p %{buildroot}%{_localstatedir}/lib/bitcoin |
||||
|
||||
#SELinux |
||||
for selinuxvariant in %{selinux_variants}; do |
||||
install -d %{buildroot}%{_datadir}/selinux/${selinuxvariant} |
||||
install -p -m 644 SELinux/bitcoin.pp.${selinuxvariant} %{buildroot}%{_datadir}/selinux/${selinuxvariant}/bitcoin.pp |
||||
done |
||||
|
||||
%if %{_buildqt} |
||||
# qt icons |
||||
install -D -p share/pixmaps/bitcoin.ico %{buildroot}%{_datadir}/pixmaps/bitcoin.ico |
||||
install -p share/pixmaps/nsis-header.bmp %{buildroot}%{_datadir}/pixmaps/ |
||||
install -p share/pixmaps/nsis-wizard.bmp %{buildroot}%{_datadir}/pixmaps/ |
||||
install -p %{SOURCE100} %{buildroot}%{_datadir}/pixmaps/bitcoin.svg |
||||
%{_bindir}/inkscape %{SOURCE100} --export-png=%{buildroot}%{_datadir}/pixmaps/bitcoin16.png -w16 -h16 |
||||
%{_bindir}/inkscape %{SOURCE100} --export-png=%{buildroot}%{_datadir}/pixmaps/bitcoin32.png -w32 -h32 |
||||
%{_bindir}/inkscape %{SOURCE100} --export-png=%{buildroot}%{_datadir}/pixmaps/bitcoin64.png -w64 -h64 |
||||
%{_bindir}/inkscape %{SOURCE100} --export-png=%{buildroot}%{_datadir}/pixmaps/bitcoin128.png -w128 -h128 |
||||
%{_bindir}/inkscape %{SOURCE100} --export-png=%{buildroot}%{_datadir}/pixmaps/bitcoin256.png -w256 -h256 |
||||
%{_bindir}/convert -resize 16x16 %{buildroot}%{_datadir}/pixmaps/bitcoin256.png %{buildroot}%{_datadir}/pixmaps/bitcoin16.xpm |
||||
%{_bindir}/convert -resize 32x32 %{buildroot}%{_datadir}/pixmaps/bitcoin256.png %{buildroot}%{_datadir}/pixmaps/bitcoin32.xpm |
||||
%{_bindir}/convert -resize 64x64 %{buildroot}%{_datadir}/pixmaps/bitcoin256.png %{buildroot}%{_datadir}/pixmaps/bitcoin64.xpm |
||||
%{_bindir}/convert -resize 128x128 %{buildroot}%{_datadir}/pixmaps/bitcoin256.png %{buildroot}%{_datadir}/pixmaps/bitcoin128.xpm |
||||
%{_bindir}/convert %{buildroot}%{_datadir}/pixmaps/bitcoin256.png %{buildroot}%{_datadir}/pixmaps/bitcoin256.xpm |
||||
touch %{buildroot}%{_datadir}/pixmaps/*.png -r %{SOURCE100} |
||||
touch %{buildroot}%{_datadir}/pixmaps/*.xpm -r %{SOURCE100} |
||||
|
||||
# Desktop File - change the touch timestamp if modifying |
||||
mkdir -p %{buildroot}%{_datadir}/applications |
||||
cat <<EOF > %{buildroot}%{_datadir}/applications/bitcoin-core.desktop |
||||
[Desktop Entry] |
||||
Encoding=UTF-8 |
||||
Name=Bitcoin |
||||
Comment=Bitcoin P2P Cryptocurrency |
||||
Comment[fr]=Bitcoin, monnaie virtuelle cryptographique pair à pair |
||||
Comment[tr]=Bitcoin, eşten eşe kriptografik sanal para birimi |
||||
Exec=bitcoin-qt %u |
||||
Terminal=false |
||||
Type=Application |
||||
Icon=bitcoin128 |
||||
MimeType=x-scheme-handler/bitcoin; |
||||
Categories=Office;Finance; |
||||
EOF |
||||
# change touch date when modifying desktop |
||||
touch -a -m -t 201511100546 %{buildroot}%{_datadir}/applications/bitcoin-core.desktop |
||||
%{_bindir}/desktop-file-validate %{buildroot}%{_datadir}/applications/bitcoin-core.desktop |
||||
|
||||
# KDE protocol - change the touch timestamp if modifying |
||||
mkdir -p %{buildroot}%{_datadir}/kde4/services |
||||
cat <<EOF > %{buildroot}%{_datadir}/kde4/services/bitcoin-core.protocol |
||||
[Protocol] |
||||
exec=bitcoin-qt '%u' |
||||
protocol=bitcoin |
||||
input=none |
||||
output=none |
||||
helper=true |
||||
listing= |
||||
reading=false |
||||
writing=false |
||||
makedir=false |
||||
deleting=false |
||||
EOF |
||||
# change touch date when modifying protocol |
||||
touch -a -m -t 201511100546 %{buildroot}%{_datadir}/kde4/services/bitcoin-core.protocol |
||||
%endif |
||||
|
||||
# man pages |
||||
install -D -p %{SOURCE20} %{buildroot}%{_mandir}/man1/bitcoind.1 |
||||
install -p %{SOURCE21} %{buildroot}%{_mandir}/man1/bitcoin-cli.1 |
||||
%if %{_buildqt} |
||||
install -p %{SOURCE22} %{buildroot}%{_mandir}/man1/bitcoin-qt.1 |
||||
%endif |
||||
install -D -p %{SOURCE23} %{buildroot}%{_mandir}/man5/bitcoin.conf.5 |
||||
|
||||
# nuke these, we do extensive testing of binaries in %%check before packaging |
||||
rm -f %{buildroot}%{_bindir}/test_* |
||||
|
||||
%check |
||||
make check |
||||
pushd src |
||||
srcdir=. test/bitcoin-util-test.py |
||||
popd |
||||
qa/pull-tester/rpc-tests.py -extended |
||||
|
||||
%post libs -p /sbin/ldconfig |
||||
|
||||
%postun libs -p /sbin/ldconfig |
||||
|
||||
%pre server |
||||
getent group bitcoin >/dev/null || groupadd -r bitcoin |
||||
getent passwd bitcoin >/dev/null || |
||||
useradd -r -g bitcoin -d /var/lib/bitcoin -s /sbin/nologin \ |
||||
-c "Bitcoin wallet server" bitcoin |
||||
exit 0 |
||||
|
||||
%post server |
||||
%systemd_post bitcoin.service |
||||
# SELinux |
||||
if [ `%{_sbindir}/sestatus |grep -c "disabled"` -eq 0 ]; then |
||||
for selinuxvariant in %{selinux_variants}; do |
||||
%{_sbindir}/semodule -s ${selinuxvariant} -i %{_datadir}/selinux/${selinuxvariant}/bitcoin.pp &> /dev/null || : |
||||
done |
||||
%{_sbindir}/semanage port -a -t bitcoin_port_t -p tcp 8332 |
||||
%{_sbindir}/semanage port -a -t bitcoin_port_t -p tcp 8333 |
||||
%{_sbindir}/semanage port -a -t bitcoin_port_t -p tcp 18332 |
||||
%{_sbindir}/semanage port -a -t bitcoin_port_t -p tcp 18333 |
||||
%{_sbindir}/fixfiles -R bitcoin-server restore &> /dev/null || : |
||||
%{_sbindir}/restorecon -R %{_localstatedir}/lib/bitcoin || : |
||||
fi |
||||
|
||||
%posttrans server |
||||
%{_bindir}/systemd-tmpfiles --create |
||||
|
||||
%preun server |
||||
%systemd_preun bitcoin.service |
||||
|
||||
%postun server |
||||
%systemd_postun bitcoin.service |
||||
# SELinux |
||||
if [ $1 -eq 0 ]; then |
||||
if [ `%{_sbindir}/sestatus |grep -c "disabled"` -eq 0 ]; then |
||||
%{_sbindir}/semanage port -d -p tcp 8332 |
||||
%{_sbindir}/semanage port -d -p tcp 8333 |
||||
%{_sbindir}/semanage port -d -p tcp 18332 |
||||
%{_sbindir}/semanage port -d -p tcp 18333 |
||||
for selinuxvariant in %{selinux_variants}; do |
||||
%{_sbindir}/semodule -s ${selinuxvariant} -r bitcoin &> /dev/null || : |
||||
done |
||||
%{_sbindir}/fixfiles -R bitcoin-server restore &> /dev/null || : |
||||
[ -d %{_localstatedir}/lib/bitcoin ] && \ |
||||
%{_sbindir}/restorecon -R %{_localstatedir}/lib/bitcoin &> /dev/null || : |
||||
fi |
||||
fi |
||||
|
||||
%clean |
||||
rm -rf %{buildroot} |
||||
|
||||
%if %{_buildqt} |
||||
%files core |
||||
%defattr(-,root,root,-) |
||||
%license COPYING db-%{bdbv}.NC-LICENSE |
||||
%doc COPYING bitcoin.conf.example doc/README.md doc/bips.md doc/files.md doc/multiwallet-qt.md doc/reduce-traffic.md doc/release-notes.md doc/tor.md |
||||
%attr(0755,root,root) %{_bindir}/bitcoin-qt |
||||
%attr(0644,root,root) %{_datadir}/applications/bitcoin-core.desktop |
||||
%attr(0644,root,root) %{_datadir}/kde4/services/bitcoin-core.protocol |
||||
%attr(0644,root,root) %{_datadir}/pixmaps/*.ico |
||||
%attr(0644,root,root) %{_datadir}/pixmaps/*.bmp |
||||
%attr(0644,root,root) %{_datadir}/pixmaps/*.svg |
||||
%attr(0644,root,root) %{_datadir}/pixmaps/*.png |
||||
%attr(0644,root,root) %{_datadir}/pixmaps/*.xpm |
||||
%attr(0644,root,root) %{_mandir}/man1/bitcoin-qt.1* |
||||
%endif |
||||
|
||||
%files libs |
||||
%defattr(-,root,root,-) |
||||
%license COPYING |
||||
%doc COPYING doc/README.md doc/shared-libraries.md |
||||
%{_libdir}/lib*.so.* |
||||
|
||||
%files devel |
||||
%defattr(-,root,root,-) |
||||
%license COPYING |
||||
%doc COPYING doc/README.md doc/developer-notes.md doc/shared-libraries.md |
||||
%attr(0644,root,root) %{_includedir}/*.h |
||||
%{_libdir}/*.so |
||||
%{_libdir}/*.a |
||||
%{_libdir}/*.la |
||||
%attr(0644,root,root) %{_libdir}/pkgconfig/*.pc |
||||
|
||||
%files server |
||||
%defattr(-,root,root,-) |
||||
%license COPYING db-%{bdbv}.NC-LICENSE |
||||
%doc COPYING bitcoin.conf.example doc/README.md doc/REST-interface.md doc/bips.md doc/dnsseed-policy.md doc/files.md doc/reduce-traffic.md doc/release-notes.md doc/tor.md |
||||
%attr(0755,root,root) %{_sbindir}/bitcoind |
||||
%attr(0644,root,root) %{_tmpfilesdir}/bitcoin.conf |
||||
%attr(0644,root,root) %{_unitdir}/bitcoin.service |
||||
%dir %attr(0750,bitcoin,bitcoin) %{_sysconfdir}/bitcoin |
||||
%dir %attr(0750,bitcoin,bitcoin) %{_localstatedir}/lib/bitcoin |
||||
%config(noreplace) %attr(0600,root,root) %{_sysconfdir}/sysconfig/bitcoin |
||||
%attr(0644,root,root) %{_datadir}/selinux/*/*.pp |
||||
%attr(0644,root,root) %{_mandir}/man1/bitcoind.1* |
||||
%attr(0644,root,root) %{_mandir}/man5/bitcoin.conf.5* |
||||
|
||||
%files utils |
||||
%defattr(-,root,root,-) |
||||
%license COPYING |
||||
%doc COPYING bitcoin.conf.example doc/README.md |
||||
%attr(0755,root,root) %{_bindir}/bitcoin-cli |
||||
%attr(0755,root,root) %{_bindir}/bitcoin-tx |
||||
%attr(0755,root,root) %{_bindir}/bench_bitcoin |
||||
%attr(0644,root,root) %{_mandir}/man1/bitcoin-cli.1* |
||||
%attr(0644,root,root) %{_mandir}/man5/bitcoin.conf.5* |
||||
|
||||
|
||||
|
||||
%changelog |
||||
* Fri Feb 26 2016 Alice Wonder <buildmaster@librelamp.com> - 0.12.0-2 |
||||
- Rename Qt package from bitcoin to bitcoin-core |
||||
- Make building of the Qt package optional |
||||
- When building the Qt package, default to Qt5 but allow building |
||||
- against Qt4 |
||||
- Only run SELinux stuff in post scripts if it is not set to disabled |
||||
|
||||
* Wed Feb 24 2016 Alice Wonder <buildmaster@librelamp.com> - 0.12.0-1 |
||||
- Initial spec file for 0.12.0 release |
||||
|
||||
# This spec file is written from scratch but a lot of the packaging decisions are directly |
||||
# based upon the 0.11.2 package spec file from https://www.ringingliberty.com/bitcoin/ |
||||
@ -0,0 +1,81 @@
@@ -0,0 +1,81 @@
|
||||
policy_module(bitcoin, 1.100.1) |
||||
|
||||
######################################## |
||||
# |
||||
# Declarations |
||||
# |
||||
|
||||
type bitcoin_t; |
||||
type bitcoin_exec_t; |
||||
init_daemon_domain(bitcoin_t, bitcoin_exec_t) |
||||
|
||||
permissive bitcoin_t; |
||||
|
||||
type bitcoin_initrc_exec_t; |
||||
init_script_file(bitcoin_initrc_exec_t) |
||||
|
||||
type bitcoin_conf_t; |
||||
files_type(bitcoin_conf_t) |
||||
|
||||
type bitcoin_var_lib_t; |
||||
files_type(bitcoin_var_lib_t) |
||||
|
||||
type bitcoin_var_run_t; |
||||
files_type(bitcoin_var_run_t) |
||||
|
||||
type bitcoin_port_t; |
||||
corenet_port(bitcoin_port_t) |
||||
|
||||
######################################## |
||||
# |
||||
# bitcoin local policy |
||||
# |
||||
allow bitcoin_t self:process { fork }; |
||||
|
||||
allow bitcoin_t self:fifo_file rw_fifo_file_perms; |
||||
allow bitcoin_t self:unix_stream_socket create_stream_socket_perms; |
||||
|
||||
manage_dirs_pattern(bitcoin_t, bitcoin_conf_t, bitcoin_conf_t) |
||||
manage_files_pattern(bitcoin_t, bitcoin_conf_t, bitcoin_conf_t) |
||||
|
||||
manage_dirs_pattern(bitcoin_t, bitcoin_var_lib_t, bitcoin_var_lib_t) |
||||
manage_files_pattern(bitcoin_t, bitcoin_var_lib_t, bitcoin_var_lib_t) |
||||
files_var_lib_filetrans(bitcoin_t, bitcoin_var_lib_t, { dir file }) |
||||
|
||||
manage_dirs_pattern(bitcoin_t, bitcoin_var_run_t, bitcoin_var_run_t) |
||||
manage_files_pattern(bitcoin_t, bitcoin_var_run_t, bitcoin_var_run_t) |
||||
|
||||
sysnet_dns_name_resolve(bitcoin_t) |
||||
corenet_all_recvfrom_unlabeled(bitcoin_t) |
||||
|
||||
allow bitcoin_t self:tcp_socket create_stream_socket_perms; |
||||
corenet_tcp_sendrecv_generic_if(bitcoin_t) |
||||
corenet_tcp_sendrecv_generic_node(bitcoin_t) |
||||
corenet_tcp_sendrecv_all_ports(bitcoin_t) |
||||
corenet_tcp_bind_generic_node(bitcoin_t) |
||||
|
||||
gen_require(` |
||||
type bitcoin_port_t; |
||||
') |
||||
allow bitcoin_t bitcoin_port_t:tcp_socket name_bind; |
||||
|
||||
gen_require(` |
||||
type bitcoin_port_t; |
||||
') |
||||
allow bitcoin_t bitcoin_port_t:tcp_socket name_connect; |
||||
|
||||
domain_use_interactive_fds(bitcoin_t) |
||||
|
||||
files_read_etc_files(bitcoin_t) |
||||
|
||||
miscfiles_read_localization(bitcoin_t) |
||||
|
||||
sysnet_dns_name_resolve(bitcoin_t) |
||||
|
||||
allow bitcoin_t bitcoin_exec_t:file execute_no_trans; |
||||
allow bitcoin_t self:process setsched; |
||||
corecmd_exec_ls(bitcoin_t) |
||||
corenet_tcp_connect_http_port(bitcoin_t) |
||||
dev_read_urand(bitcoin_t) |
||||
fs_getattr_xattr_fs(bitcoin_t) |
||||
kernel_read_system_state(bitcoin_t) |
||||
Loading…
Reference in new issue