]> git.proxmox.com Git - mirror_lxc.git/blob - lxc.spec.in
README: update security mails
[mirror_lxc.git] / lxc.spec.in
1 #
2 # lxc: linux Container library
3 #
4 # (C) Copyright IBM Corp. 2007, 2008
5 #
6 # Authors:
7 # Daniel Lezcano <daniel.lezcano at free.fr>
8 #
9 # This library is free software; you can redistribute it and/or
10 # modify it under the terms of the GNU Lesser General Public
11 # License as published by the Free Software Foundation; either
12 # version 2.1 of the License, or (at your option) any later version.
13 #
14 # This library is distributed in the hope that it will be useful,
15 # but WITHOUT ANY WARRANTY; without even the implied warranty of
16 # MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU
17 # Lesser General Public License for more details.
18 #
19 # You should have received a copy of the GNU Lesser General Public
20 # License along with this library; if not, write to the Free Software
21 # Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301 USA
22
23 # Set with_systemd on distros that use it, so we can install the service
24 # file, otherwise the sysvinit script will be installed
25 %if 0%{?fedora} >= 14 || 0%{?rhel} >= 7 || 0%{?suse_version} >= 1210
26 %global with_systemd 1
27 %define init_script systemd
28 #
29 # BuildRequires systemd-units on fedora and rhel
30 %if 0%{?fedora} >= 14 || 0%{?rhel} >= 7
31 BuildRequires: systemd-units
32 %endif
33 #
34 # BuildRequires systemd on openSUSE and SUSE
35 %if 0%{?suse_version} >= 1210
36 BuildRequires: systemd
37 %endif
38 %else
39 %global with_systemd 0
40 %define init_script sysvinit
41 %endif
42
43 # Must use /var/run for runtime_path on older releases or dnsmasq in the
44 # lxc-net script will not be able to write its pid in /run (selinux denial)
45 %if 0%{?fedora} < 15 || 0%{?rhel} < 7
46 %define _with_runtime_path --with-runtime-path=/var/run
47 %endif
48
49 # RPM needs alpha/beta/rc in Release: not Version: to ensure smooth
50 # package upgrades from alpha->beta->rc->release. For more info see:
51 # http://fedoraproject.org/wiki/Packaging%3aNamingGuidelines#NonNumericRelease
52 %if "x@LXC_VERSION_BETA@" != "x"
53 %global beta_rel @LXC_VERSION_BETA@
54 %global beta_dot .%{beta_rel}
55 %else
56 %global norm_rel 1
57 %endif
58
59 Name: @PACKAGE@
60 Version: @LXC_VERSION_BASE@
61 Release: %{?beta_rel:0.1.%{beta_rel}}%{?!beta_rel:%{norm_rel}}%{?dist}
62 URL: http://linuxcontainers.org
63 Source: http://linuxcontainers.org/downloads/%{name}-%{version}%{?beta_dot}.tar.gz
64 Summary: Linux Containers userspace tools
65 Group: Applications/System
66 License: LGPLv2+
67 BuildRoot: %{_tmppath}/%{name}-%{version}-build
68 Requires: openssl rsync dnsmasq bridge-utils
69 Requires: %{name}-libs = %{version}-%{release}
70 Requires(pre): /usr/sbin/useradd
71 Requires(postun): /usr/sbin/userdel
72 %if 0%{?fedora} < 15 || 0%{?rhel} < 7
73 Requires: libcgroup
74 %endif
75 # Note for Suse. The "docbook2X" BuildRequires does properly
76 # match docbook2x on Suse in a case insensitive manner
77 BuildRequires: libcap libcap-devel docbook2X graphviz libxslt pkgconfig
78
79 #
80 # Additional packages for openSUSE and SUSE
81 #
82 %if 0%{?suse_version} >= 1210
83 PreReq: permissions
84 BuildRequires: libapparmor-devel linux-glibc-devel lsb-release docbook-utils
85
86 #
87 # libseccomp-devel only needed on i386/i586/i686 and X86_64
88 #
89 %ifarch %ix86 x86_64
90 BuildRequires: libseccomp-devel
91 %endif
92 %endif
93
94 #
95 # Additional package for Tizen
96 #
97 %if %{defined tizen_version}
98 BuildRequires: pkgconfig(dlog)
99 %endif
100
101 %description
102 Containers are insulated areas inside a system, which have their own namespace
103 for filesystem, network, PID, IPC, CPU and memory allocation and which can be
104 created using the Control Group and Namespace features included in the Linux
105 kernel.
106
107 This package provides the lxc-* tools, which can be used to start a single
108 daemon in a container, or to boot an entire "containerized" system, and to
109 manage and debug your containers.
110
111 %package libs
112 Summary: Shared library files for %{name}
113 Group: System Environment/Libraries
114 %description libs
115 The %{name}-libs package contains libraries for running %{name} applications.
116
117 %package devel
118 Summary: Development library for %{name}
119 Group: Development/Libraries
120 Requires: %{name} = %{version}-%{release}, pkgconfig
121 %description devel
122 The %{name}-devel package contains header files and library needed for
123 development of the Linux containers.
124
125 %prep
126 %setup -q -n %{name}-%{version}%{?beta_dot}
127 %build
128
129 #Dont use pkgconfig to get bash completion dir and use backwards compatible location.
130 export bashcompdir=%{_sysconfdir}/bash_completion.d
131
132 PATH=$PATH:/usr/sbin:/sbin %configure $args \
133 %if "x%{_unitdir}" != "x"
134 --with-systemdsystemunitdir=%{_unitdir} \
135 %endif
136 %{?_with_runtime_path} \
137 --disable-rpath \
138 --with-init-script=%{init_script}
139 make %{?_smp_mflags}
140
141 %install
142 rm -rf %{buildroot}
143 make install DESTDIR=%{buildroot}
144 find %{buildroot} -type f -name '*.la' -exec rm -f {} ';'
145
146 %clean
147 rm -rf %{buildroot}
148
149 %pre
150 # Ensure that lxc-dnsmasq uid & gid gets correctly allocated
151 if getent passwd lxc-dnsmasq >/dev/null 2>&1 ; then : ; else \
152 /usr/sbin/useradd -M -r -s /sbin/nologin \
153 -c "LXC Networking Service" -d %_localstatedir/%name lxc-dnsmasq 2> /dev/null \
154 || exit 1
155 fi
156
157 %post
158 # This test should trigger a network configure on a new install.
159 if [ ! -d @LXC_DISTRO_SYSCONF@ ]
160 then
161 mkdir -p @LXC_DISTRO_SYSCONF@
162 fi
163
164 if [ ! -f @LXC_DISTRO_SYSCONF@/lxc-net ] || ! grep -q 'USE_LXC_BRIDGE=' @LXC_DISTRO_SYSCONF@/lxc-net
165 then
166 # Grab a random 10net subnet. Need to add test logic...
167 while [ true ]
168 do
169 SUBNET=10.$(($RANDOM % 256)).$(($RANDOM % 256))
170 if ! ip -4 route ls | grep -q "^$SUBNET"
171 then
172 break
173 fi
174 done
175
176 cat > @LXC_DISTRO_SYSCONF@/lxc-net <<EOF
177 # Leave USE_LXC_BRIDGE as "true" if you want to use lxcbr0 for your
178 # containers. Set to "false" if you'll use virbr0 or another existing
179 # bridge, or macvlan to your host's NIC.
180 USE_LXC_BRIDGE="true"
181
182 # If you change the LXC_BRIDGE to something other than lxcbr0, then
183 # you will also need to update your /etc/lxc/default.conf as well as the
184 # configuration (/var/lib/lxc/<container>/config) for any containers
185 # already created using the default config to reflect the new bridge
186 # name.
187 # If you have the dnsmasq daemon installed, you'll also have to update
188 # /etc/dnsmasq.d/lxc and restart the system wide dnsmasq daemon.
189 LXC_BRIDGE="lxcbr0"
190 LXC_BRIDGE_MAC="00:16:3e:00:00:00"
191 LXC_ADDR="$SUBNET.1"
192 LXC_NETMASK="255.255.255.0"
193 LXC_NETWORK="$SUBNET.0/24"
194 LXC_DHCP_RANGE="$SUBNET.2,$SUBNET.254"
195 LXC_DHCP_MAX="253"
196 # Uncomment the next line if you'd like to use a conf-file for the lxcbr0
197 # dnsmasq. For instance, you can use 'dhcp-host=mail1,10.0.3.100' to have
198 # container 'mail1' always get ip address 10.0.3.100.
199 #LXC_DHCP_CONFILE=/etc/lxc/dnsmasq.conf
200
201 # Whether to use nftables (if available) to configure required network rules.
202 # Set to any value != "true" to force iptables backend instead.
203 LXC_USE_NFT="true"
204
205 # Uncomment the next line if you want lxcbr0's dnsmasq to resolve the .lxc
206 # domain. You can then add "server=/lxc/10.0.3.1' (or your actual $LXC_ADDR)
207 # to /etc/dnsmasq.conf, after which 'container1.lxc' will resolve on your
208 # host.
209 #LXC_DOMAIN="lxc"
210 EOF
211 fi
212
213 %postun
214 /usr/sbin/userdel lxc-dnsmasq > /dev/null 2>&1 || :
215
216 %post libs -p /sbin/ldconfig
217 %postun libs -p /sbin/ldconfig
218
219 %files
220 %defattr(-,root,root)
221 %{_bindir}/*
222 # openSUSE/SUSE
223 %if 0%{?suse_version} >= 1210
224 %dir %{_sysconfdir}/apparmor.d
225 %dir %{_sysconfdir}/apparmor.d/abstractions
226 %dir %{_sysconfdir}/apparmor.d/abstractions/%{name}
227 %config %{_sysconfdir}/apparmor.d/abstractions/%{name}/container-base
228 %config %{_sysconfdir}/apparmor.d/abstractions/%{name}/start-container
229 %config %{_sysconfdir}/apparmor.d/%{name}-containers
230 %dir %{_sysconfdir}/apparmor.d/%{name}
231 %config %{_sysconfdir}/apparmor.d/%{name}/%{name}-default
232 %config %{_sysconfdir}/apparmor.d/%{name}/%{name}-default-with-mounting
233 %config %{_sysconfdir}/apparmor.d/%{name}/%{name}-default-with-nesting
234 %config %{_sysconfdir}/apparmor.d/usr.bin.%{name}-start
235 %endif
236 %{_mandir}/man1/lxc*
237 %{_mandir}/man5/lxc*
238 %{_mandir}/man7/lxc*
239 # not openSUSE/SUSE
240 %if %{undefined suse_version}
241 %{_mandir}/ja/man1/lxc*
242 %{_mandir}/ja/man5/lxc*
243 %{_mandir}/ja/man7/lxc*
244 %{_mandir}/ko/man1/lxc*
245 %{_mandir}/ko/man5/lxc*
246 %{_mandir}/ko/man7/lxc*
247 %endif
248 %{_datadir}/doc/*
249 %{_datadir}/lxc/*
250 %{_sysconfdir}/bash_completion.d
251 %config(noreplace) %{_sysconfdir}/lxc/*
252 %config(noreplace) %{_sysconfdir}/sysconfig/*
253
254 %if %{with_systemd}
255 %{_unitdir}/lxc-net.service
256 %{_unitdir}/lxc.service
257 %{_unitdir}/lxc@.service
258 %{_unitdir}/lxc-monitord.service
259 %else
260 %{_sysconfdir}/rc.d/init.d/lxc
261 %{_sysconfdir}/rc.d/init.d/lxc-net
262 %endif
263
264 %files libs
265 %defattr(-,root,root)
266 %{_sbindir}/*
267 %{_libdir}/*.so.*
268 %{_libdir}/*.a
269 %{_libdir}/%{name}
270 %{_localstatedir}/*
271 %{_libexecdir}/%{name}/hooks/unmount-namespace
272 %{_libexecdir}/%{name}/lxc-apparmor-load
273 %{_libexecdir}/%{name}/lxc-monitord
274 %attr(4111,root,root) %{_libexecdir}/%{name}/lxc-user-nic
275 %if %{with_systemd}
276 %attr(555,root,root) %{_libexecdir}/%{name}/lxc-net
277 %attr(555,root,root) %{_libexecdir}/%{name}/lxc-containers
278 %endif
279
280 %files devel
281 %defattr(-,root,root)
282 %{_includedir}/%{name}/*
283 %{_libdir}/*.so
284 %{_libdir}/pkgconfig/*
285
286 %changelog
287 * Tue Oct 22 2013 Dwight Engen <dwight.engen@oracle.com> - 1.0.0-0.1.alpha2
288 - fix some rpmlint warnings/errors
289 - split lua bits into separate package
290
291 * Mon Sep 10 2012 Dwight Engen <dwight.engen@oracle.com> - 0.8.0
292 - fix lxc-init moved to libexec
293 - .pc moved to _libdir
294 - package template files /usr/share/lxc/templates
295
296 * Thu Sep 8 2011 Greg Kurz <gkurz@fr.ibm.com> - 0.7.5.1
297 - fix installed files for rpmbuild
298 - introduce lxc-libs package
299
300 * Fri Jul 23 2010 Daniel Lezcano <dlezcano@fr.ibm.com> - 0.7.2
301 - set attribute for installed files
302 - fix libraries installation
303
304 * Tue Mar 24 2009 Daniel Lezcano <daniel.lezcano@free.fr> - 0.6.1
305 - Removed capability setting, let the user to do that through "lxc-setcap"
306
307 * Mon Feb 16 2009 Daniel Lezcano <daniel.lezcano@free.fr> - 0.6.0
308 - Added more capabilities to the executables
309
310 * Sun Jan 25 2009 Daniel Lezcano <daniel.lezcano@free.fr> - 0.6.0
311 - Reduced spec file
312
313 * Sun Aug 3 2008 Daniel Lezcano <dlezcano@fr.ibm.com> - 0.1.0
314 - Initial RPM release.
315
316 # Local variables:
317 # mode: shell-script
318 # sh-shell: rpm
319 # end: