diff --git a/net-irc/unrealircd/Manifest b/net-irc/unrealircd/Manifest index ef3cc35..d0eb534 100644 --- a/net-irc/unrealircd/Manifest +++ b/net-irc/unrealircd/Manifest @@ -16,3 +16,5 @@ DIST unrealircd-6.1.3.tar.gz 10391890 BLAKE2B f9ee65939f218a52091871e2d9f7dd6000 DIST unrealircd-6.1.3.tar.gz.asc 866 BLAKE2B 69f85ecc576a8158ceaa201dfdaf866bb9d471e711e19b6eec6899be6f41f79dacf7d9b7d5678aed7facf3253741d72b83d7aa14bb50a68e7c0fbc72c79d44f7 SHA512 f2defd4e48b47db476d92d12804bc1b0869683e2bf0d2a33c2109b95c1029684b26971c5916aef5995161ebf7fac8456da07fadc086445bb2c0cb47e5dba6bcd DIST unrealircd-6.1.4.tar.gz 10391535 BLAKE2B a244b247edd88a59d6192f47d9ed5bc442002efbb5490dc0ebfdaa2d2db74a9a78134401c86e6d85425dfa7ce0bd795d7163de68974af31b2ddae2d8fc73b293 SHA512 4f2a6e91804579f36d0ef4a5f8db5b626e843ea86cfadce8128c4843bdb0f7785e50b9670a63ecd982c787dfb8c20dd7516d0f77f08300b9d4ec0572c30ce98d DIST unrealircd-6.1.4.tar.gz.asc 866 BLAKE2B 880b12442c818a43b930ed874855b6c073f99ab6203ac0b9ef0e4e26e5533648d9e9576767d9a3b2053a1ff7300b22590a884311799925303ad8ac99bde3fce5 SHA512 bbb89db5bec76d9a6ced45fee13b31c75881c847be6516ef9bb4445a29af5a8e80df88bf540da52762161b59678a3f4d414289afb39921c7c87549b415dd72c5 +DIST unrealircd-6.1.5.tar.gz 10400736 BLAKE2B 251e7404f455595331b67a9db96c37e49e81c9a1354c4e26cafe43fca13dfce6aff453972f605ba311f57b8c4365c3904217bd71e52e0e4d8978b6c526f6593a SHA512 942215005c614c154823ca4049243cbcc927072365bf3b7c8fba6cf4c5b86b255ea96cf97ec6361ddd63f96ea9d36e0eb5eb16a6c41b813c53a0d61a4fa21a6e +DIST unrealircd-6.1.5.tar.gz.asc 866 BLAKE2B 8d3c7f4ea60b3173548996c9a915d7228ab413b3eb14a6b0001ce073a4f34c482e57b74b86456dcc6098d3248f444eca8b4e2e42921072c48725b1b0ad4adfb8 SHA512 eb7b1e59be7cf2e57e4f352beb9cd5951012dfa5b0fc757e70245cf571db51cd68ada2e11e8c53396f192dc97312dcdee7247b4a04b9cc804c075f3e6edfe78d diff --git a/net-irc/unrealircd/unrealircd-6.1.5.ebuild b/net-irc/unrealircd/unrealircd-6.1.5.ebuild new file mode 100644 index 0000000..6b816a8 --- /dev/null +++ b/net-irc/unrealircd/unrealircd-6.1.5.ebuild @@ -0,0 +1,196 @@ +# Copyright 1999-2022 Gentoo Authors +# Distributed under the terms of the GNU General Public License v2 + +EAPI=8 + +MY_PV="${PV/_rc/-rc}" +S="${WORKDIR}/${PN}-${MY_PV}" + +SSL_CERT_MANDATORY=1 +VERIFY_SIG_OPENPGP_KEY_PATH="${BROOT}"/usr/share/openpgp-keys/unrealircd.asc +inherit autotools ssl-cert systemd tmpfiles verify-sig + +DESCRIPTION="An advanced Internet Relay Chat daemon" +HOMEPAGE="https://www.unrealircd.org/" +SRC_URI="https://www.unrealircd.org/downloads/${PN}-${MY_PV}.tar.gz" +SRC_URI+=" verify-sig? ( https://www.unrealircd.org/downloads/${PN}-${MY_PV}.tar.gz.asc )" + +LICENSE="GPL-2+" +SLOT="0" +KEYWORDS="~amd64 ~arm ~arm64 ~ppc ~ppc64 ~riscv ~x86 ~amd64-linux" +IUSE="class-nofakelag curl geoip geoip-classic +operoverride operoverride-verify" + +RDEPEND=" + acct-group/unrealircd + acct-user/unrealircd + >=app-crypt/argon2-20171227-r1:= + dev-libs/libpcre2 + dev-libs/libsodium:= + dev-libs/openssl:= + dev-libs/jansson:= + >=net-dns/c-ares-1.7:= + virtual/libcrypt:= + curl? ( net-misc/curl[adns] ) + geoip? ( dev-libs/libmaxminddb ) + geoip-classic? ( dev-libs/geoip ) +" +DEPEND="${RDEPEND}" +BDEPEND=" + virtual/pkgconfig + verify-sig? ( sec-keys/openpgp-keys-unrealircd ) +" + +DOCS=( doc/{Authors,Donation,RELEASE-NOTES.md,tao.of.irc,technical/,translations.txt} ) + +src_prepare() { + # QA check against bundled pkgs + rm -r extras || die + + # building third-party modules (which we don't do) cause a sandbox violation + # bug 704444 + echo "" > src/buildmod || die + + sed -e 's/$(MODULEFLAGS)/$(LDFLAGS) &/' -i src/modules/{,*/}Makefile.in || die + + if use class-nofakelag; then + sed -i -e 's:^//#undef\( FAKELAG_CONFIGURABLE\):#define\1:' include/config.h || die + fi + + # File is missing from the 5.0.9.1 tarball + sed -i -e '/unrealircd-upgrade-script/d' configure.ac || die + + default + eautoreconf +} + +src_configure() { + # Default value for privatelibdir adds a build path to -Wl,-rpath. + econf \ + --with-bindir="${EPREFIX}"/usr/bin \ + --with-cachedir="${EPREFIX}"/var/lib/${PN} \ + --with-confdir="${EPREFIX}"/etc/${PN} \ + --with-datadir="${EPREFIX}"/var/lib/${PN} \ + --with-docdir="${EPREFIX}"/usr/share/doc/${PF} \ + --with-logdir="${EPREFIX}"/var/log/${PN} \ + --with-modulesdir="${EPREFIX}/usr/$(get_libdir)"/${PN}/modules \ + --without-privatelibdir \ + --with-pidfile="${EPREFIX}"/run/${PN}.pid \ + --with-tmpdir="${EPREFIX}"/var/lib/${PN}/tmp \ + --with-maxconnections=1024 \ + --with-nick-history=2000 \ + --with-permissions=0640 \ + --with-system-argon2 \ + --with-system-cares \ + --with-system-pcre2 \ + --with-system-sodium \ + --with-system-jansson \ + --enable-dynamic-linking \ + --with-controlfile="${EPREFIX}"/run/${PN}/${PN}.ctl \ + --enable-ssl="${EPREFIX}"/usr \ + $(use_enable curl libcurl "${EPREFIX}"/usr) \ + $(use_with !operoverride no-operoverride) \ + $(use_with operoverride-verify) \ + $(use_enable geoip libmaxminddb) \ + $(use_enable geoip-classic geoip-classic) +} + +src_install() { + keepdir /var/log/${PN} + keepdir /var/lib/${PN}/tmp + + newbin src/ircd ${PN} + dobin src/unrealircdctl + + newtmpfiles "${FILESDIR}"/unrealircd.tmpfiles unrealircd.conf + + ( + cd src/modules || die + for subdir in $(find . -type d -print); do + if [[ -n $(shopt -s nullglob; echo ${subdir}/*.so) ]]; then + exeinto /usr/$(get_libdir)/${PN}/modules/"${subdir}" + doexe "${subdir}"/*.so + fi + done + ) + + insinto /etc/${PN} + # Purposefully omitting the examples/ and ssl/ subdirectories. ssl + # is redundant with app-misc/ca-certificates and examples will all + # be in docs anyway. + doins -r doc/conf/{aliases,help} + doins doc/conf/*.conf + newins doc/conf/examples/example.conf ${PN}.conf + keepdir /etc/${PN}/tls + + einstalldocs + + newinitd "${FILESDIR}"/${PN}.initd-r4 ${PN} + newconfd "${FILESDIR}"/${PN}.confd-r5 ${PN} + + # config should be read-only + fperms -R 0640 /etc/${PN} + fperms 0750 /etc/${PN}{,/aliases,/help} + fperms 0750 /etc/${PN}/tls + # state is editable but not owned by unrealircd directly + fperms 0770 /var/log/${PN} + fperms 0770 /var/lib/${PN}{,/tmp} + fowners -R root:unrealircd /{etc,var/{lib,log}}/${PN} + + # By default looks in /etc/unrealircd/ssl/curl-ca-bundle.crt. Fix + # that to look for ca-certificates-provided file instead. %s is + # CONFDIR. #618066 + dosym ../../ssl/certs/ca-certificates.crt /etc/${PN}/tls/curl-ca-bundle.crt + + systemd_dounit "${FILESDIR}"/${PN}.service +} + +pkg_postinst() { + tmpfiles_process unrealircd.conf + + # Move docert call from src_install() to install_cert in pkg_postinst for + # bug #201682 + if [[ ! -f "${EROOT}"/etc/${PN}/tls/server.cert.key ]]; then + if [[ -f "${EROOT}"/etc/${PN}/ssl/server.cert.key ]]; then + ewarn "The location ${PN} looks for SSL certificates has changed" + ewarn "from ${EROOT}/etc/${PN}/ssl to ${EROOT}/etc/${PN}/tls." + ewarn "Please move your existing certificates." + else + ( + umask 0037 + install_cert /etc/${PN}/tls/server.cert + chown unrealircd "${EROOT}"/etc/${PN}/tls/server.cert.* + ln -snf server.cert.key "${EROOT}"/etc/${PN}/tls/server.key.pem + ) + fi + fi + + local unrealircd_conf="${EROOT}"/etc/${PN}/${PN}.conf + # Fix up the default cloak keys. + if grep -qe '"and another one";$' "${unrealircd_conf}" && grep -qe '"Oozahho1raezoh0iMee4ohvegaifahv5xaepeitaich9tahdiquaid0geecipahdauVaij3zieph4ahi";$' "${unrealircd_conf}"; then + ebegin "Generating cloak-keys" + local keys=( + $(su ${PN} -s "${EPREFIX}"/bin/sh -c "${PN} -k 2>&1 | tail -n 6 | head -n 3") + ) + [[ -n ${keys[0]} || -n ${keys[1]} || -n ${keys[2]} ]] + eend $? + + ebegin "Substituting cloak-keys into ${unrealircd_conf}" + sed -i \ + -e '/cloak-keys/ { +n +s/"Oozahho1raezoh0iMee4ohvegaifahv5xaepeitaich9tahdiquaid0geecipahdauVaij3zieph4ahi";/'${keys[0]}'/ +n +s/"and another one";/'${keys[1]}'/ +n +s/"and another one";/'${keys[2]}'/ +}' \ + "${unrealircd_conf}" + eend $? + fi + + elog "UnrealIRCd will not run until you've set up ${EROOT}/etc/unrealircd/unrealircd.conf" + elog + elog "You can also configure ${PN} start at boot with rc-update(1)." + elog "It is recommended to run unrealircd as an unprivileged user." + elog "The provided init.d script does this for you." +}