freeipa (4.12.4-1) unstable; urgency=medium . * New upstream release. - CVE-2024-11029 (Closes: #1093383) - CVE-2025-4404 (Closes: #1108050) * control: Demote libnss-myhostname to Suggests. (ref. #1006829) * patches: Fix samba lock directory location. (Closes: #1012593) * patches: Map nobody group to nogroup on Debian. (Closes: #1012592) . freeipa (4.12.2-3) unstable; urgency=medium . * control: Add libnss-myhostname to client depends. (Closes: #1006829) * control: Add python3-ifaddr to ipalib depends. (Closes: #1089716) * control: Add python3-sphinx to build-depends. (Closes: #1003179, #1044642, #1049799) . freeipa (4.12.2-2) unstable; urgency=medium . * control: Migrate to bind9-dnsutils. (Closes: #1094939) . freeipa (4.12.2-1) unstable; urgency=medium . * New upstream release. - CVE-2024-2698 (Closes: #1077682) - CVE-2024-3183 (Closes: #1077683) * control: Drop conflicts on systemd-timesyncd as upstream recognizes it now. (Closes: #1072168) * use-raw-strings.diff: Dropped, upstream. * rules: Fix installing bash-completions. (Closes: #1089329) * control: Drop python3-nose from build-depends, unused. (Closes: #1018359) . freeipa (4.11.1-2.1) unstable; urgency=medium . * Non-maintainer upload. * Replace systemd Build-Depends with systemd-dev for systemd.pc. (Closes: #1060469) . freeipa (4.11.1-2) unstable; urgency=medium . * use-raw-strings.diff: Import patch from upstream to fix noise when installing. (LP: #2060298) * map-ssh-service.diff: Map sshd service to use ssh.service. (LP: #2061055) . freeipa (4.11.1-1) unstable; urgency=medium . * New upstream release. * control: Add sssd-passkey to freeipa-client Recommends. * control.server: Drop python3-paste from python3-ipatests depends, obsolete. * control, rules: Replace hardcoded librpm9 depends. (Closes: #1067570) . freeipa (4.10.2-2) unstable; urgency=medium . [ Timo Aaltonen ] * control: Bump certmonger dependency. . [ Helmut Grohne ] * Fix FTBFS when systemd.pc changes systemdsystemunitdir. (Closes: #1052641) . freeipa (4.10.2-1) unstable; urgency=medium . * New upstream release. * control: Bump sssd, bind9 depends. * source: Update extend-diff-ignore. * copyright, source: Fix some lintian issues/overrides. * server-trust-ad: Add a lintian override for the samba plugin rpath. * source: Add a lintian override for client-only build; empty-debian- tests-control. . freeipa (4.9.11-1) unstable; urgency=medium . * New upstream release. (Closes: #1029070) * control: Add systemd-timesyncd to freeipa-client Conflicts. (Closes: #1008195) * patches: Drop upstreamed patches. * source: Extend diff-ignore. * server.install: Updated. . freeipa (4.9.8-1) unstable; urgency=medium . * New upstream release. * patches: Drop upstreamed patch. * server.install: Updated. * Build only the client in order to be able to backport to bullseye. (Closes: #996946) * control: Depend on librpm9 instead of librpm8. * tests: Disabled for a client-only build. . freeipa (4.9.7-3) unstable; urgency=medium . * tests: Set KRB5_TRACE to use stderr. * patches: Fix apache group properly. * client: Move .tmpfile -> .tmpfiles. * control: Bump debhelper to 13, gain dh_installtmpfiles being run. * control, rules: Add --without-ipa-join-xml and drop libxmlrpc from depends. * server.postinst: Drop creating old ccaches for mod_auth_gssapi, obsolete. * server.postinst: Drop old upgrade rules. * patches: Fix named keytab name. . freeipa (4.9.7-2) unstable; urgency=medium . * lintian: Drop override on python-script-but-no-python-dep, which doesn't exist anymore. * rules: Add fortify flag to CFLAGS, as CPPFLAGS isn't used by the project. * ci: Drop allowed failure for blhc, it passes now. * control: Build-depend on libcurl4-openssl-dev. * fix-paths.diff: Fix some paths in ipaplatform/base. * fix-apache-group.diff: Fix apache group name in ipa.conf tmpfile. * control: Depend on gpg instead of gnupg. * control: Drop libwbclient-sssd from freeipa-client-samba Depends. * patches: Import a patch to fix ipa cert-find. (Closes: #997952) . freeipa (4.9.7-1) unstable; urgency=medium . * New upstream release. * control: Drop obsolete depends on python3-nss. * pkcs11-openssl-for-bind.diff, migrate-to-gpg.diff, use-bind9.16.diff, fix-chrony-service-name.diff: - Dropped, upstream. * watch: Fixed to find upstream rc's. * source: Update extend-diff-ignore. * control: Add libcurl-dev, libjansson-dev and libpwquality-dev to build-depends. * install: Added new files. * rules: Drop ipasphinx files for now. * control: Drop dependency on custodia, not needed. * control: Bump 389-ds-base depends. * control: Drop python3-coverage depends, it's not used. * control: Bump dogtag depends.
135 lines
4.1 KiB
Makefile
Executable File
135 lines
4.1 KiB
Makefile
Executable File
#!/usr/bin/make -f
|
|
|
|
# Uncomment this to turn on verbose mode.
|
|
#export DH_VERBOSE=1
|
|
|
|
include /usr/share/dpkg/architecture.mk
|
|
include /usr/share/dpkg/pkg-info.mk
|
|
|
|
CFLAGS += -D_FORTIFY_SOURCE=2
|
|
|
|
# build server only where nodejs is available
|
|
#ifneq (,$(filter $(DEB_HOST_ARCH), amd64 arm64 armhf i386 mips mips64el mipsel ppc64 ppc64el s390x))
|
|
# ONLY_CLIENT=0
|
|
#else
|
|
ONLY_CLIENT=1
|
|
#endif
|
|
|
|
DESTDIR=$(CURDIR)/debian/tmp
|
|
|
|
export PYTHON=python3
|
|
export am_cv_python_pythondir=/usr/lib/python3/dist-packages
|
|
export am_cv_python_pyexecdir=/usr/lib/python3/dist-packages
|
|
export systemdsystemunitdir=$(shell pkgconf --variable=systemdsystemunitdir systemd | sed s,^/,,)
|
|
|
|
confflags = \
|
|
--libexecdir=/usr/lib/ \
|
|
--with-ipaplatform=debian \
|
|
--with-sysconfenvdir=/etc/default \
|
|
--disable-pylint \
|
|
--without-ipa-join-xml \
|
|
--without-jslint
|
|
|
|
ifeq ($(ONLY_CLIENT), 1)
|
|
confflags += --disable-server \
|
|
--without-ipatests
|
|
else
|
|
confflags += --enable-server \
|
|
--with-ipatests
|
|
endif
|
|
|
|
# For maintainer use only, generate a tarball:
|
|
gentarball:
|
|
tar --transform 's,^,$(DEB_SOURCE)-$(DEB_VERSION_UPSTREAM)/,' \
|
|
--exclude './debian' --exclude-vcs \
|
|
-cJf ../$(DEB_SOURCE)_$(DEB_VERSION_UPSTREAM).orig.tar.xz .
|
|
|
|
gencontrol:
|
|
ifeq ($(ONLY_CLIENT), 1)
|
|
cat debian/control.stub \
|
|
debian/control.common \
|
|
> debian/control
|
|
else
|
|
cat debian/control.stub \
|
|
debian/control.server-bdeps \
|
|
debian/control.common \
|
|
debian/control.server \
|
|
> debian/control
|
|
endif
|
|
|
|
override_dh_clean: gencontrol
|
|
dh_clean
|
|
rm -f po/*.gmo po/Makefile.hack po/POTFILES.in po/stamp-po
|
|
rm -rf contrib/completion/ipa.bash_completion daemons/ipa-version.h \
|
|
install/ui/src/libs/loader.js m4
|
|
rm -f ipaplatform/override.py ipapython/version.py ipasetup.py
|
|
|
|
override_dh_auto_configure: gencontrol
|
|
dh_auto_configure -- $(confflags)
|
|
|
|
# tests would just fail, they need a proper environment with 389 running et al
|
|
override_dh_auto_test:
|
|
|
|
override_dh_auto_install:
|
|
dh_auto_install --max-parallel=1
|
|
|
|
ifneq ($(ONLY_CLIENT), 1)
|
|
chmod 755 $(DESTDIR)/usr/lib/ipa/certmonger/*
|
|
|
|
touch $(DESTDIR)/usr/share/ipa/html/ca.crt
|
|
touch $(DESTDIR)/usr/share/ipa/html/kerberosauth.xpi
|
|
touch $(DESTDIR)/usr/share/ipa/html/krb.con
|
|
touch $(DESTDIR)/usr/share/ipa/html/krb.js
|
|
touch $(DESTDIR)/usr/share/ipa/html/krb5.ini
|
|
touch $(DESTDIR)/usr/share/ipa/html/krbrealm.con
|
|
endif
|
|
|
|
mkdir -p $(DESTDIR)/usr/share/bash-completion/completions
|
|
mv $(DESTDIR)/etc/bash_completion.d/ipa $(DESTDIR)/usr/share/bash-completion/completions
|
|
|
|
# purge .la files
|
|
find $(CURDIR)/debian/tmp -name "*.la" -type f -exec rm -f "{}" \;
|
|
# purge precompiled .pyc/.pyo files
|
|
find $(CURDIR)/debian/tmp -name '*.py[c,o]' -exec rm '{}' ';'
|
|
# fix permissions
|
|
find $(CURDIR)/debian/tmp -name "*.mo" -type f -exec chmod -x "{}" \;
|
|
# remove files which are useful only for make uninstall
|
|
find $(CURDIR)/debian/tmp -wholename '*/dist-packages/*/install_files.txt' -exec rm '{}' \;
|
|
# fix the interpreter
|
|
find debian/tmp ! -name '*.pyc' -a ! -name '*.pyo' -a \
|
|
-type f -exec grep -qsm1 '^#!.*\bpython' {} \; \
|
|
-exec sed -i -e '1 s|^#!.*\bpython[^ ]*|#!/usr/bin/python3|' {} \;
|
|
ifeq ($(ONLY_CLIENT), 0)
|
|
# remove ipasphinx for now
|
|
rm -r $(CURDIR)/debian/tmp/usr/lib/python3/dist-packages/ipasphinx*
|
|
endif
|
|
|
|
override_dh_missing:
|
|
dh_missing --fail-missing
|
|
|
|
ifneq ($(ONLY_CLIENT), 1)
|
|
override_dh_installsystemd:
|
|
dh_installsystemd -pfreeipa-server --no-enable ipa.service
|
|
dh_installsystemd -pfreeipa-server --no-enable ipa-dnskeysyncd.service
|
|
dh_installsystemd -pfreeipa-server --no-enable ipa-custodia.service
|
|
dh_installsystemd -pfreeipa-server --no-enable ipa-ods-exporter.service
|
|
endif
|
|
|
|
override_dh_fixperms:
|
|
dh_fixperms
|
|
|
|
# check needed to not fail arch-indep build which doesn't run dh_installdirs
|
|
if [ -d $(CURDIR)/debian/freeipa-server/etc/ipa/custodia ]; then \
|
|
chmod 0700 $(CURDIR)/debian/freeipa-server/etc/ipa/custodia; \
|
|
chmod 0700 $(CURDIR)/debian/freeipa-server/var/lib/ipa/backup; \
|
|
fi
|
|
|
|
override_dh_gencontrol:
|
|
dh_gencontrol -- \
|
|
-Vlib:Depends=$(shell dpkg-query -W -f '$${Depends}' librpm-dev \
|
|
| sed -E 's/.*(librpm[[:alnum:].-]+).*/\1/')
|
|
|
|
%:
|
|
dh $@ --with python3
|
|
# --builddirectory=build
|