Your message dated Sat, 23 May 2015 10:22:14 +0000 with message-id <[email protected]> and subject line Bug#761403: fixed in tor 0.2.6.8-1 has caused the Debian Bug report #761403, regarding tor: Please install Tor's systemd unit file to be marked as done.
This means that you claim that the problem has been dealt with. If this is not the case it is now your responsibility to reopen the Bug report if necessary, and/or fix the problem forthwith. (NB: If you are a system administrator and have no idea what this message is talking about, this may indicate a serious mail system misconfiguration somewhere. Please contact [email protected] immediately.) -- 761403: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=761403 Debian Bug Tracking System Contact [email protected] with problems
--- Begin Message ---Package: tor Version: 0.2.5.6-alpha-1 Severity: wishlist Hi, Tor 0.2.5.x ships a systemd unit file in the contrib/dist/ directory. I've been using it for months on my sid system, and have improved it upstream to make it easier to ship in Debian. The only changes I have locally against the upstream version are: --- contrib/dist/tor.service.in 2014-09-13 08:40:23.240138262 -0700 +++ /etc/systemd/system/tor.service 2014-08-26 20:00:22.702566794 -0700 @@ -4,10 +4,10 @@ [Service] Type = simple -ExecStartPre = @BINDIR@/tor -f @CONFDIR@/torrc --verify-config +ExecStartPre = /usr/bin/tor --defaults-torrc /usr/share/tor/tor-service-defaults-torrc --verify-config # A torrc that has "RunAsDaemon 1" won't work with the "simple" service type; # let's explicitly override it. -ExecStart = @BINDIR@/tor -f @CONFDIR@/torrc --RunAsDaemon 0 +ExecStart = /usr/bin/tor --defaults-torrc /usr/share/tor/tor-service-defaults-torrc --RunAsDaemon 0 ExecReload = /bin/kill -HUP ${MAINPID} KillSignal = SIGINT TimeoutSec = 30 ... but I guess that @BINDIR@ should be kept as-is, to be replaced by the build system at package build time. So, in short, we only need to replace the two occurrences of "-f @CONFDIR@/torrc" with "--defaults-torrc /usr/share/tor/tor-service-defaults-torrc". I'll try to come up with a patch by the end of the month. To avoid reinventing the wheel, I'll use dh-systemd. It's only available in wheezy-backports and later, so I guess I'll also have to modify Weasel's build scripts to patch out the systemd support when building for older distributions. Another change that we'll want to make is to use the AppArmorProfile= unit file directive, to avoid a regression for AppArmor users. This option only exists in systemd v210+ (and I had it added precisely to support this usecase, actually), but is currently disabled in the Debian package: #760526. The systemd maintainers seem to be open to enable it, so I think it's fine to first install the Tor unit file in experimental without this option, and add it once it is supported in Debian's systemd. To end with, I've added some hardening options to the unit file upstream. They have been merged in the branch targeted at 0.2.6.x, and are tagged "025-backport": * https://trac.torproject.org/projects/tor/ticket/12751 * https://trac.torproject.org/projects/tor/ticket/12939 I'm going to talk to Nick to clarify whether we'll have it backported into 0.2.5. I'd like to see it live in Jessie (assuming we have 0.2.5 in Jessie). Cheers, -- intrigeri
--- End Message ---
--- Begin Message ---Source: tor Source-Version: 0.2.6.8-1 We believe that the bug you reported is fixed in the latest version of tor, which is due to be installed in the Debian FTP archive. A summary of the changes between this version and the previous one is attached. Thank you for reporting the bug, which will now be closed. If you have further comments please address them to [email protected], and the maintainer will reopen the bug report if appropriate. Debian distribution maintenance software pp. Peter Palfrader <[email protected]> (supplier of updated tor package) (This message was generated automatically at their request; if you believe that there is a problem with it please contact the archive administrators by mailing [email protected]) -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Format: 1.8 Date: Sat, 23 May 2015 11:47:39 CEST Source: tor Binary: tor tor-dbg tor-geoipdb Architecture: source all Version: 0.2.6.8-1 Distribution: unstable Urgency: low Maintainer: Peter Palfrader <[email protected]> Changed-By: Peter Palfrader <[email protected]> Description: tor - anonymizing overlay network for TCP tor-dbg - debugging symbols for Tor tor-geoipdb - GeoIP database for Tor Closes: 761403 783729 Changes: tor (0.2.6.8-1) unstable; urgency=medium . * New upstream version, upload 0.2.6.x tree to unstable. * Ship a systemd .service file (closes: #761403). Thanks to intrigeri and Arto Jantunen. - Build depend on dh-systemd, libsystemd-dev, pkg-config. - Build with --enable-systemd. * Autoreconf on build (closes: #783729). - Build depend on dh-autoreconf. Checksums-Sha256: 969eee3cf81aee11018e8b92a5a314330500ba08f63ac2e97a250f7093359b38 1786 tor_0.2.6.8-1.dsc b88b363896454250c3f561b0b48479f18295c93596d2e81baa10c5a3ae609a76 3580783 tor_0.2.6.8.orig.tar.gz cfd83e17a2c8acc5d7523834600c433c0301a908fd027eeec68fffa2c51e2704 35459 tor_0.2.6.8-1.diff.gz 26cbde7868071681b1fe96cc0cb2c241e04c0fbb78b688a74014588dfd11a0d8 819190 tor-geoipdb_0.2.6.8-1_all.deb Checksums-Sha1: 35c64fb207b8c83263c6c0c0f6e4b1751d6ce91e 1786 tor_0.2.6.8-1.dsc d087dac687d17199feda3a32bbc988333afeb4ef 3580783 tor_0.2.6.8.orig.tar.gz ec997d0c0a20881870e43da06da50988d29a531a 35459 tor_0.2.6.8-1.diff.gz 884e4e9b7d9fa4400f67acca829ec5085f2ece99 819190 tor-geoipdb_0.2.6.8-1_all.deb Files: afc60ac4f57177c5a5e53e004e167be8 1786 net optional tor_0.2.6.8-1.dsc 20a8c1f8cd7e8c912c4f3f0b67740fa5 3580783 net optional tor_0.2.6.8.orig.tar.gz cb80e8a990019dee95835401c86bb5d4 35459 net optional tor_0.2.6.8-1.diff.gz 40247ff0adf7bf67a93b204b1d14c9ee 819190 net extra tor-geoipdb_0.2.6.8-1_all.deb -----BEGIN PGP SIGNATURE----- Version: GnuPG v1 iQEcBAEBCAAGBQJVYEzUAAoJEIYCyCA4cjMfPtMH/3q/gH88Sm2CimBckFxms3/7 8+I1gsdm4y3CYYRYmURdP7tdrhzmpIcm62oUtnWRy+AjTjXsb7sUzo8ia9Nyi2fS bNSP/z/1MI+Ho3IJlNKFmxyvoLrIOp2VaH4bGV8YFf77uGmbSghslSn7EDvIvcvP IJ5sqZvQQ2Bi5DB8ukmYawcDn71pdrZIMj2Zlz0qLKxW83rYeQy3GBMtSzOJ0WIh QPAVud+Wf9SzH3qpermCfKkpKwPRQpQCUmFYyAcxz5dMDUt8JBb/4xZ/XNNV0LzT CFclM+R0NYFLoZfvxmxD5os7vwKqWGtKJXUbIE3LHzDCCa3qsoyTFOe2HWjiQyU= =1hkw -----END PGP SIGNATURE-----
--- End Message ---
