Re: [OpenCA-Devel] Testing OpenCA ten-ten (fwd)

[Massimiliano Pala]

Hello Russ,

thanks! This feedback is really useful! :) Of course I would like to have
some help for the .rpms. I did had a system in place for the older releases,
but it was working only on Fedora as I have never had time to work on some
other OS releases..

I would be really happy to include your patches so that the .rpm build
system will work again (and more properly!) :D

Let me know,
Max


R P Herrold wrote:

    ftp://ftp.owlriver.com/pub/local/ORC/openca/



Lines like:

/usr/bin/install -c -o root -g nobody



This .spec file construct is where the ownerships are set:

%defattr(-, -, -)

should be something like

%defattr(644,root,root,755)

... or if something like:



is REALLY needed,

%defattr(644,root,nobody,755)






    http://www.owlriver.com/tips/non-root/





-- Russ



---------- Forwarded message ----------
Date: Mon, 13 Oct 2008 13:11:13
From: R P Herrold <[EMAIL PROTECTED]>
To: Users' Help and Suggestions <[EMAIL PROTECTED]>
Cc: R P Herrold <[EMAIL PROTECTED]>
Subject: Testing OpenCA ten-ten

On Mon, 13 Oct 2008, Massimiliano Pala wrote:

I resend this as the SF mailing list has not returned me a copy of this pice yet. There are some problems in the embedded .spec files in both OpenCA, and openca-tools, as at the FTP site. I have completed patches, and a rebuild of openca-tools (it has an improper use of some options in 'install' and is 'finished; OpenCA needs a bit more with in the Makefile.in in the 'install' target. The patches, the ORIG and patched .spec files [which seem to be created through some sort of scripted release mechanism] and the 'proof' SRPMs after the patches are at: I would suggest editing the specfile.in files to add the 'CentOS' specific detection code. There is also a version problem in the .spec file in openca-tools-1.0.0. I will look at the specfile generation code in a bit. There are also problems in the Makefile.in with the use of the '-o' and '-g' options. are ** not ** permissible (in specifying -o and -g options). Such options cause errors which users find hard to understand when (properly) building as non-root, and should be addressed in the %files stanza rather than in 'install' /usr/bin/install -c -o root -g nobody -m 755 openssl-setopt /var/tmp/openca-base-1.0.1//opt/openca/bin/openssl-setopt I really doubt that the 'nobody' group is needed, when the perms are 755, but .... perhaps. Please advise if this is really so. As to the dangers of root building, and how to do better, see my piece about building as non-root: Many people do not 'solve' non-root building, but RPM was (and is) clearly able to do EVERYTHING that a root build can do, but in a fashion to be safe to the surrounding build environment. Getting this working properly is someting which a 'proper' project should be doing, and I can of course help. I was the long time editor of the RPM website, prior to its recent return to Red Hat editorship control, and a founder in the CentOS project. I am certainly willing to send along patches to help this project.

I think that the error is related to the fact you have no RPM system installed. If you install the rpm software on your system you will not get that error anymore.

I will try to replicate the error in a proper CentOS setup

-- Russ herrold
    herrold at centos dot org

no -- CentOS is the community rebuild of RHEL from Red Hat [I speak as one of the core team members], and clearly does have the RPM package amnagement system at its heart. Perhaps the 'rpm-build' package (which provides /usr/bin/rpmbuild) was not installed on Samuel Rios Carvalho's system.

--

Best Regards,

        Massimiliano Pala

--o------------------------------------------------------------------------
Massimiliano Pala [OpenCA Project Manager]  [EMAIL PROTECTED]
                                                 [EMAIL PROTECTED]

Dartmouth Computer Science Dept               Home Phone: +1 (603) 369-9332
PKI/Trust Laboratory                          Work Phone: +1 (603) 646-9179
--o------------------------------------------------------------------------

People who think they know everything are a great annoyance to those of us
who do.
                                                           -- Isaac Asimov

smime.p7s
Description: S/MIME Cryptographic Signature

-------------------------------------------------------------------------
This SF.Net email is sponsored by the Moblin Your Move Developer's challenge
Build the coolest Linux based applications with Moblin SDK & win great prizes
Grand prize is a trip for two to an Open Source event anywhere in the world
http://moblin-contest.org/redirect.php?banner_id=100&url=/
_______________________________________________
OpenCA-Devel mailing list
OpenCA-Devel@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/openca-devel