Script 'mail_helper' called by obssrc
Hello community,
here is the log from the commit of package xrootd for openSUSE:Factory checked
in at 2023-07-25 11:50:42
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Comparing /work/SRC/openSUSE:Factory/xrootd (Old)
and /work/SRC/openSUSE:Factory/.xrootd.new.1467 (New)
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "xrootd"
Tue Jul 25 11:50:42 2023 rev:30 rq:1100431 version:5.6.1
Changes:
--------
--- /work/SRC/openSUSE:Factory/xrootd/xrootd.changes 2023-06-16
16:56:17.794221519 +0200
+++ /work/SRC/openSUSE:Factory/.xrootd.new.1467/xrootd.changes 2023-07-25
11:52:18.065873294 +0200
@@ -1,0 +2,93 @@
+Sat Jul 22 21:11:22 UTC 2023 - Stefan Brüns <stefan.bru...@rwth-aachen.de>
+
+- Only build python bindings without private copies of the client
+ library. This also removes the ambiguity for the client libraries
+ for the automatic dependency generation.
+- Only use build dependency on doxygen/graphviz for the main
+ package.
+- Remove unused swig build dependency.
+- Various spec file cleanups
+- Fix installation of API docs
+
+-------------------------------------------------------------------
+Thu Jul 20 12:37:56 UTC 2023 - pgaj...@suse.com
+
+- version update to 5.6.1
+ * Version 5.6.1
+ Minor bug fixes
+ [CMake] Fix Findlibuuid.cmake to use kernel provided uuid on macOS
+ [XrdCl] Avoid race in postmaster QueryTransport
+ [XrdCl] Add missing argument in call to debug log message.
+ This fixes sporadic crashes seen in FTS when debug logging is enabled.
+ [XrdCrypto] Avoid race in GetCryptoFactory
+ Miscellaneous
+ [CMake] Make sure Python is required in PyPI build
+ [CMake] Set RPATH that works for binaries and libraries on macOS
+ [CMake,Python] Handle RPATH for Python bindings on macOS
+ [Python] Use PEP517 by default when building Python bindings
+ * Version 5.6.0
+ New Features
+ [CMake] Modernization of build system, now requires CMake 3.16
+ [Client] Add xrdfs cache subcommand to allow for cache evictions
+ [Misc] Add support for building with musl libc (issue #1645)
+ [Python] Modernization of build system, better support for creating binary
wheels,
+ properly propagating CXXFLAGS (issues #1768, #1807, #1833,
#1844, #2001, #2002)
+ [Python] Better handling of unicode strings in the API (issue #2011)
+ [Server] Add gsi option to display DN when it differs from entity name
+ [Server] Allow generic prepare plug-in to handle large responses (issue
#2023)
+ [Server] Allow specfication of minimum and maximum creation mode (issue
#649)
+ [Server] Make maxfd be configurable (default is 256k) (issue #2010)
+ [Server] Include token information in the monitoring stream (phase 1).
+ [Xcache] Implement a file evict function
+ [Xcache,XrdCl] Increase default number of parallel event loops to 10
(#2047)
+ [XrdCl] xrdcp: number of parallel copy jobs increased from 4 to 128
+ [XrdHttp] Allow XRootD to return trailers indicating failure (#1912)
+ [XrdHttp] Denote Accept-Ranges in HEAD response (issue #1889)
+ [XrdHttp] Report cache object age for caching proxy mode (#1919)
+ [XrdPss] Allow origin to be a directory of a locally mounted file system
+ [XrdSciTokens] Implement ability to have the token username as a separate
claim (#1978)
+ [XrdSecgsi] Use SHA-256 for signatures, and message digest algorithm
(issues #1992, #2030)
+ [XrdSecztn] Allow option '-tokenlib none' to disable token validation
(issue #1895)
+ [XrdSecztn] Allow to point to a token file using CGI '?xrd.ztn=tokenfile'
(#1926)
+ Major bug fixes
+ [XrdHttp] Fix SEGV in case request has object for opaque data but no
content (#2007)
+ [XrdSecgsi] Fix memory leaks in GSI authentication (issue #2021)
+ Minor bug fixes
+ [Server] Use correct value for testing vector size
+ [XrdCl] Fix off by one error in failure recovery check in parallel
operation (issue #2040)
+ [XrdCl] Fix potential stream timeout when a new request is sent to an idle
stream (issue #2042)
+ [XrdCl] Do not enforce TLS when --notlsok option is used in combination
with root:// URL.
+ This allows falling back to e.g. Kerberos authentication on a
server with ZTN plugin
+ enabled if the client has no certificates, hence not able to
use TLS (issue #2020)
+ [XrdEc] Fix compilation issues and underlinking on macOS
+ [XrdHttp] Fix error returned when a client provides too many range
requests (issue #2003)
+ [XrdHttp] Fix regression where performance markers were missing during an
HTTP TPC transfer (#2017)
+ [XrdHttp] Return 404 instead of 500 error code on GET request on
non-existent file (issue #2018)
+ [XrdHttp] Return 405 instead of 500 error code on deletion of non-empty
directory (issue #1896)
+ [XrdHttp] Update HTTP header handling for chunked encoding and status
trailer (#2009)
+ [XrdTls] Make sure TLS context is marked invalid if not properly
constructed (issue #2020)
+ [XrdTls] Fix build failure with latest glibc (#2012)
+ Miscellaneous
+ [Apps] Make xrdcrc32c consistent with xrdadler32 (issue #2045)
+ [CMake] Build option ENABLE_CRYPTO has been removed. OpenSSL is always
required with XRootD 5 (issue #1827)
+ [CMake] New test.cmake script added to automate configure/build/test cycle
+ [CMake] Fix build with link-time optimizations on 32bit systems (issue
#2032)
+ [docs] Update READMEs, contribution, installation, and testing
documentation
+ [Misc] Fix warnings from Clang compiler (#1997)
+ [Misc] Add sandboxing settings to systemd service files (initially
commented out) (issue #2033)
+ [Server] Also check for IPv6 ULA's to determine if an address is private
+ [Tests] New script xrd-docker added to automate running of dockerized
tests (#1974)
+ [XProtocol] Add fallthrough statement for ENOTEMPTY errno code mapping
+ [XRootD] Update code to no longer rely on using namespace std; (needed to
support C++17)
+ [XrdCeph] Submodule merged back into main repository (#2008)
+ [XrdCeph] Minor build system updates and integration with main repository
+ [XrdCrypto] Switch to a fixed set of DH parameters compatible with older
OpenSSL (issue #2014)
+- modified patches
+ % harden_cmsd@.service.patch (refreshed)
+ % harden_frm_purged@.service.patch (refreshed)
+ % harden_frm_xfrd@.service.patch (refreshed)
+ % harden_xrootd@.service.patch (refreshed)
+- removed patches
+ - xrootd-modernize-python-builds.patch (upstreamed)
+
+-------------------------------------------------------------------
Old:
----
xrootd-5.5.5.tar.gz
xrootd-modernize-python-builds.patch
New:
----
xrootd-5.6.1.tar.gz
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Other differences:
------------------
++++++ xrootd.spec ++++++
--- /var/tmp/diff_new_pack.cH3Reb/_old 2023-07-25 11:52:19.485881608 +0200
+++ /var/tmp/diff_new_pack.cH3Reb/_new 2023-07-25 11:52:19.489881632 +0200
@@ -32,10 +32,9 @@
%define skip_python2 1
%define plugver 5
%bcond_with ceph
-%bcond_without libc_semaphore
Name: %{pname}%{psuffix}
-Version: 5.5.5
+Version: 5.6.1
Release: 0
Summary: An eXtended Root Daemon
License: LGPL-3.0-or-later
@@ -44,27 +43,22 @@
Source0: http://xrootd.org/download/v%{version}/xrootd-%{version}.tar.gz
Source1: xrootd-user.conf
Source100: xrootd-rpmlintrc
-# PATCH0 [Python] Modernize build system
https://github.com/xrootd/xrootd/pull/2025; patch rebased for current version
-Patch0: xrootd-modernize-python-builds.patch
# PATCH-FEATURE-OPENSUSE Hardening patches
Patch100: harden_cmsd@.service.patch
+# PATCH-FEATURE-OPENSUSE Hardening patches
Patch101: harden_frm_purged@.service.patch
+# PATCH-FEATURE-OPENSUSE Hardening patches
Patch102: harden_frm_xfrd@.service.patch
+# PATCH-FEATURE-OPENSUSE Hardening patches
Patch103: harden_xrootd@.service.patch
BuildRequires: ca-certificates
BuildRequires: cmake >= 3.0
-BuildRequires: doxygen
BuildRequires: fdupes
BuildRequires: gcc-c++
-BuildRequires: graphviz
-BuildRequires: graphviz-gd
-BuildRequires: graphviz-gnome
-BuildRequires: ncurses-devel
+BuildRequires: glibc-devel >= 2.21
BuildRequires: ninja
BuildRequires: pkgconfig
-BuildRequires: python-rpm-macros
BuildRequires: readline-devel
-BuildRequires: swig
BuildRequires: systemd-rpm-macros
BuildRequires: sysuser-tools
BuildRequires: pkgconfig(fuse)
@@ -73,17 +67,13 @@
BuildRequires: pkgconfig(openssl)
BuildRequires: pkgconfig(uuid)
BuildRequires: pkgconfig(zlib)
-%if %{with libc_semaphore}
-BuildRequires: glibc-devel >= 2.21
-%else
-BuildRequires: glibc-devel
-%endif
%if %{with ceph}
BuildRequires: librados-devel
BuildRequires: libradosstriper-devel
%endif
BuildRequires: pkgconfig(libtirpc)
%if %{with python3}
+BuildRequires: python-rpm-macros
BuildRequires: %{python_module devel}
BuildRequires: %{python_module pip}
BuildRequires: %{python_module setuptools}
@@ -94,6 +84,9 @@
BuildRequires: xrootd-server-devel = %{version}
%define python_subpackage_only 1
%python_subpackages
+%else
+BuildRequires: doxygen
+BuildRequires: graphviz-gnome
%endif
%description
@@ -208,9 +201,6 @@
%package libs
Summary: XRootD core libraries
Group: System/Libraries
-%if %{with libc_semaphore}
-Requires: glibc >= 2.21
-%endif
%description libs
The XROOTD project gives access to data repositories.
@@ -302,21 +292,21 @@
%prep
%autosetup -p1 -n %{pname}-%{version}
+# Unfortunately, python packaging changes faster than most projects
+# can keep up with, so we have to mangle their scripts
+# https://github.com/xrootd/xrootd/issues/2062
+sed -i -e '/CMAKE_INSTALL_RPATH/ s/cmake_args += .*/cmake_args += [""]/'
bindings/python/setup.py
%build
%if %{with python3}
-# Create a version file so that python packages get the right version info;
-# this should not be needed when tagged version 5.6 is packaged
-echo %{version} > VERSION
-
-# cmake cannot inherit the right includedirs when running python builds;
specify manually
-export CFLAGS="%{optflags} -I%{_includedir}/%{pname}
-I%{_includedir}/%{pname}/private"
-export CXXFLAGS=${CFLAGS}
# https://github.com/xrootd/xrootd/issues/2032
%ifarch %ix86
export LDFLAGS+=" -Wno-error=odr"
%endif
+# Only build the bindings. This is done when 'pip wheel' is called from the
bindings directory
+pushd bindings/python
%pyproject_wheel
+popd
%else
@@ -324,7 +314,7 @@
%cmake \
-DBUILD_PYTHON:BOOL=OFF \
-DENABLE_CEPH:BOOL=%{with ceph} \
- -DUSE_LIBC_SEMAPHORE:BOOL=%{with libc_semaphore}
+ -DUSE_LIBC_SEMAPHORE:BOOL=ON
%cmake_build
doxygen ../Doxyfile
@@ -332,15 +322,13 @@
%install
%if %{with python3}
-
+pushd bindings/python
%pyproject_install
%python_expand %fdupes %{buildroot}%{$python_sitearch}/
%else
%cmake_install
-test -e doxydoc/html && cp -pr doxydoc/html %{buildroot}%{_docdir}/%{pname}/
-
rm -rf %{buildroot}%{_sysconfdir}/%{pname}/*
mkdir -p %{buildroot}%{_var}/log/%{pname}
@@ -354,7 +342,8 @@
install -p -Dm 0644 packaging/common/xrootd.logrotate
%{buildroot}%{_sysconfdir}/logrotate.d/xrootd-server
install -Dm 0644 packaging/common/client-plugin.conf.example
%{buildroot}%{_sysconfdir}/xrootd/client.plugins.d/client-plugin.conf.example
-install -Dm 644 README %{buildroot}%{_docdir}/%{pname}/README
+install -Dm 644 README.md %{buildroot}%{_docdir}/%{pname}/README.md
+cp -pr build/doxydoc/html %{buildroot}%{_docdir}/%{pname}/
chmod -x %{buildroot}%{_datadir}/%{pname}/utils/XrdCmsNotify.pm
++++++ harden_cmsd@.service.patch ++++++
--- /var/tmp/diff_new_pack.cH3Reb/_old 2023-07-25 11:52:19.533881890 +0200
+++ /var/tmp/diff_new_pack.cH3Reb/_new 2023-07-25 11:52:19.537881913 +0200
@@ -1,13 +1,19 @@
-Index: xrootd-5.5.0/packaging/common/cmsd@.service
+Index: xrootd-5.6.1/packaging/common/cmsd@.service
===================================================================
---- xrootd-5.5.0.orig/packaging/common/cmsd@.service
-+++ xrootd-5.5.0/packaging/common/cmsd@.service
-@@ -6,6 +6,17 @@ Requires=network-online.target
+--- xrootd-5.6.1.orig/packaging/common/cmsd@.service
++++ xrootd-5.6.1/packaging/common/cmsd@.service
+@@ -6,14 +6,14 @@ Requires=network-online.target
After=network-online.target
[Service]
-+# added automatically, for details please see
-+# https://en.opensuse.org/openSUSE:Security_Features#Systemd_hardening_effort
+-#PrivateDevices=true
+-#ProtectHostname=true
+-#ProtectClock=true
+-#ProtectKernelTunables=true
+-#ProtectKernelModules=true
+-#ProtectKernelLogs=true
+-#ProtectControlGroups=true
+-#RestrictRealtime=true
+PrivateDevices=true
+ProtectHostname=true
+ProtectClock=true
@@ -16,7 +22,6 @@
+ProtectKernelLogs=true
+ProtectControlGroups=true
+RestrictRealtime=true
-+# end of automatic additions
ExecStart=/usr/bin/cmsd -l /var/log/xrootd/cmsd.log -c
/etc/xrootd/xrootd-%i.cfg -k fifo -s /run/xrootd/cmsd-%i.pid -n %i
User=xrootd
Group=xrootd
++++++ harden_frm_purged@.service.patch ++++++
--- /var/tmp/diff_new_pack.cH3Reb/_old 2023-07-25 11:52:19.553882006 +0200
+++ /var/tmp/diff_new_pack.cH3Reb/_new 2023-07-25 11:52:19.557882030 +0200
@@ -1,13 +1,19 @@
-Index: xrootd-5.5.0/packaging/common/frm_purged@.service
+Index: xrootd-5.6.1/packaging/common/frm_purged@.service
===================================================================
---- xrootd-5.5.0.orig/packaging/common/frm_purged@.service
-+++ xrootd-5.5.0/packaging/common/frm_purged@.service
-@@ -6,6 +6,17 @@ Requires=network-online.target
+--- xrootd-5.6.1.orig/packaging/common/frm_purged@.service
++++ xrootd-5.6.1/packaging/common/frm_purged@.service
+@@ -6,14 +6,14 @@ Requires=network-online.target
After=network-online.target
[Service]
-+# added automatically, for details please see
-+# https://en.opensuse.org/openSUSE:Security_Features#Systemd_hardening_effort
+-#PrivateDevices=true
+-#ProtectHostname=true
+-#ProtectClock=true
+-#ProtectKernelTunables=true
+-#ProtectKernelModules=true
+-#ProtectKernelLogs=true
+-#ProtectControlGroups=true
+-#RestrictRealtime=true
+PrivateDevices=true
+ProtectHostname=true
+ProtectClock=true
@@ -16,7 +22,6 @@
+ProtectKernelLogs=true
+ProtectControlGroups=true
+RestrictRealtime=true
-+# end of automatic additions
ExecStart=/usr/bin/frm_purged -l /var/log/xrootd/frm_purged.log -c
/etc/xrootd/xrootd-%i.cfg -k fifo -s /run/xrootd/frm_purged-%i.pid -n %i
User=xrootd
Group=xrootd
++++++ harden_frm_xfrd@.service.patch ++++++
--- /var/tmp/diff_new_pack.cH3Reb/_old 2023-07-25 11:52:19.573882124 +0200
+++ /var/tmp/diff_new_pack.cH3Reb/_new 2023-07-25 11:52:19.577882147 +0200
@@ -1,13 +1,19 @@
-Index: xrootd-5.5.0/packaging/common/frm_xfrd@.service
+Index: xrootd-5.6.1/packaging/common/frm_xfrd@.service
===================================================================
---- xrootd-5.5.0.orig/packaging/common/frm_xfrd@.service
-+++ xrootd-5.5.0/packaging/common/frm_xfrd@.service
-@@ -6,6 +6,17 @@ Requires=network-online.target
+--- xrootd-5.6.1.orig/packaging/common/frm_xfrd@.service
++++ xrootd-5.6.1/packaging/common/frm_xfrd@.service
+@@ -6,14 +6,14 @@ Requires=network-online.target
After=network-online.target
[Service]
-+# added automatically, for details please see
-+# https://en.opensuse.org/openSUSE:Security_Features#Systemd_hardening_effort
+-#PrivateDevices=true
+-#ProtectHostname=true
+-#ProtectClock=true
+-#ProtectKernelTunables=true
+-#ProtectKernelModules=true
+-#ProtectKernelLogs=true
+-#ProtectControlGroups=true
+-#RestrictRealtime=true
+PrivateDevices=true
+ProtectHostname=true
+ProtectClock=true
@@ -16,7 +22,6 @@
+ProtectKernelLogs=true
+ProtectControlGroups=true
+RestrictRealtime=true
-+# end of automatic additions
ExecStart=/usr/bin/frm_xfrd -l /var/log/xrootd/frm_xfrd.log -c
/etc/xrootd/xrootd-%i.cfg -k fifo -s /run/xrootd/frm_xfrd-%i.pid -n %i
User=xrootd
Group=xrootd
++++++ harden_xrootd@.service.patch ++++++
--- /var/tmp/diff_new_pack.cH3Reb/_old 2023-07-25 11:52:19.593882241 +0200
+++ /var/tmp/diff_new_pack.cH3Reb/_new 2023-07-25 11:52:19.597882264 +0200
@@ -1,13 +1,19 @@
-Index: xrootd-5.5.0/packaging/common/xrootd@.service
+Index: xrootd-5.6.1/packaging/common/xrootd@.service
===================================================================
---- xrootd-5.5.0.orig/packaging/common/xrootd@.service
-+++ xrootd-5.5.0/packaging/common/xrootd@.service
-@@ -6,6 +6,17 @@ Requires=network-online.target
+--- xrootd-5.6.1.orig/packaging/common/xrootd@.service
++++ xrootd-5.6.1/packaging/common/xrootd@.service
+@@ -6,14 +6,14 @@ Requires=network-online.target
After=network-online.target
[Service]
-+# added automatically, for details please see
-+# https://en.opensuse.org/openSUSE:Security_Features#Systemd_hardening_effort
+-#PrivateDevices=true
+-#ProtectHostname=true
+-#ProtectClock=true
+-#ProtectKernelTunables=true
+-#ProtectKernelModules=true
+-#ProtectKernelLogs=true
+-#ProtectControlGroups=true
+-#RestrictRealtime=true
+PrivateDevices=true
+ProtectHostname=true
+ProtectClock=true
@@ -16,7 +22,6 @@
+ProtectKernelLogs=true
+ProtectControlGroups=true
+RestrictRealtime=true
-+# end of automatic additions
ExecStart=/usr/bin/xrootd -l /var/log/xrootd/xrootd.log -c
/etc/xrootd/xrootd-%i.cfg -k fifo -s /run/xrootd/xrootd-%i.pid -n %i
User=xrootd
Group=xrootd
++++++ xrootd-5.5.5.tar.gz -> xrootd-5.6.1.tar.gz ++++++
++++ 17568 lines of diff (skipped)
