[arch-commits] Commit in prometheus/trunk (PKGBUILD prometheus.service)
Date: Friday, July 24, 2020 @ 11:04:53 Author: jelle Revision: 392486 upgpkg: prometheus 2.20.0-1 Modified: prometheus/trunk/PKGBUILD prometheus/trunk/prometheus.service + PKGBUILD |6 +++--- prometheus.service |1 + 2 files changed, 4 insertions(+), 3 deletions(-) Modified: PKGBUILD === --- PKGBUILD2020-07-24 10:05:59 UTC (rev 392485) +++ PKGBUILD2020-07-24 11:04:53 UTC (rev 392486) @@ -1,7 +1,7 @@ # Maintainer: Johannes Löthberg pkgname=prometheus -pkgver=2.19.2 +pkgver=2.20.0 pkgrel=1 pkgdesc='An open-source systems monitoring and alerting toolkit' @@ -18,8 +18,8 @@ prometheus.service prometheus.sysusers) -sha256sums=('d4e84cae2fed6761bb8a80fcc69b6e0e9f274d19dffc0f38fb5845f11da1bbc3' -'7f0e6829300032c83912da9d89001c6d03f7f0fe20c4277294129c4ac03c83f3' +sha256sums=('ca10ff2bb5db1c5a5c05032be155b5e91ee8e085ab001c41b2b8aec256d8a24a' +'463647e91c8401d06c65b67df0288fa9bf14e3b0398014c7cfe725efa8db8812' '2747fabb4e56b808361eb7dd7acf9729ab8973d1ebe2f857dd56f6c71f71e45f') build() { Modified: prometheus.service === --- prometheus.service 2020-07-24 10:05:59 UTC (rev 392485) +++ prometheus.service 2020-07-24 11:04:53 UTC (rev 392486) @@ -10,6 +10,7 @@ WorkingDirectory=/usr/share/prometheus ExecStart=/usr/bin/prometheus --config.file=/etc/prometheus/prometheus.yml --storage.tsdb.path=/var/lib/prometheus/data ExecReload=/bin/kill -HUP $MAINPID +LimitNOFILE=65535 NoNewPrivileges=true ProtectHome=true ProtectSystem=full
[arch-commits] Commit in prometheus/trunk (PKGBUILD prometheus.service)
Date: Sunday, December 15, 2019 @ 16:08:59 Author: demize Revision: 371515 Add missing WorkingDirectory to service Modified: prometheus/trunk/PKGBUILD prometheus/trunk/prometheus.service + PKGBUILD |4 ++-- prometheus.service |1 + 2 files changed, 3 insertions(+), 2 deletions(-) Modified: PKGBUILD === --- PKGBUILD2019-12-15 16:00:06 UTC (rev 371514) +++ PKGBUILD2019-12-15 16:08:59 UTC (rev 371515) @@ -2,7 +2,7 @@ pkgname=prometheus pkgver=2.14.0 -pkgrel=2 +pkgrel=3 pkgdesc='An open-source systems monitoring and alerting toolkit' url='https://prometheus.io' @@ -19,7 +19,7 @@ prometheus.sysusers) sha256sums=('5c40de1961997996ef5b59561a78116a9548235bc77305c05f214b6319a0284d' -'116a5444d7da1f96446a9801f0c9df9c45e7d6af497c9fabf36f0dd26c31c025' +'7f0e6829300032c83912da9d89001c6d03f7f0fe20c4277294129c4ac03c83f3' '2747fabb4e56b808361eb7dd7acf9729ab8973d1ebe2f857dd56f6c71f71e45f') build() { Modified: prometheus.service === --- prometheus.service 2019-12-15 16:00:06 UTC (rev 371514) +++ prometheus.service 2019-12-15 16:08:59 UTC (rev 371515) @@ -7,6 +7,7 @@ User=prometheus Group=prometheus Restart=on-failure +WorkingDirectory=/usr/share/prometheus ExecStart=/usr/bin/prometheus --config.file=/etc/prometheus/prometheus.yml --storage.tsdb.path=/var/lib/prometheus/data ExecReload=/bin/kill -HUP $MAINPID NoNewPrivileges=true
[arch-commits] Commit in prometheus/trunk (PKGBUILD prometheus.service)
Date: Sunday, September 15, 2019 @ 11:03:31 Author: jelle Revision: 362832 upgpkg: prometheus 2.12.0-1 Upstream update and apply more hardening. Modified: prometheus/trunk/PKGBUILD prometheus/trunk/prometheus.service + PKGBUILD |6 +++--- prometheus.service |5 + 2 files changed, 8 insertions(+), 3 deletions(-) Modified: PKGBUILD === --- PKGBUILD2019-09-15 10:34:33 UTC (rev 362831) +++ PKGBUILD2019-09-15 11:03:31 UTC (rev 362832) @@ -1,7 +1,7 @@ # Maintainer: Johannes Löthberg pkgname=prometheus -pkgver=2.11.2 +pkgver=2.12.0 pkgrel=1 pkgdesc='An open-source systems monitoring and alerting toolkit' @@ -18,8 +18,8 @@ prometheus.service prometheus.sysusers) -sha256sums=('2d6019c1b58fdd509feb52eea3a01edd0eda3342a32ba0c3af76d30a571d16c5' -'6bb81e0e9c982c36605ba0ac8fd60f3bca369bc0cb20017f160a1ab337a4ec19' +sha256sums=('9bd9ae6df02777a9ba3f6f544338865861decabd02054aa64975449bd6009e5a' +'116a5444d7da1f96446a9801f0c9df9c45e7d6af497c9fabf36f0dd26c31c025' '2747fabb4e56b808361eb7dd7acf9729ab8973d1ebe2f857dd56f6c71f71e45f') build() { Modified: prometheus.service === --- prometheus.service 2019-09-15 10:34:33 UTC (rev 362831) +++ prometheus.service 2019-09-15 11:03:31 UTC (rev 362832) @@ -17,6 +17,11 @@ ProtectKernelModules=true ProtectKernelTunables=true LockPersonality=true +RestrictRealtime=yes +RestrictNamespaces=yes +MemoryDenyWriteExecute=yes +PrivateDevices=yes +CapabilityBoundingSet= [Install] WantedBy=multi-user.target
[arch-commits] Commit in prometheus/trunk (PKGBUILD prometheus.service)
Date: Sunday, September 8, 2019 @ 15:40:18 Author: jelle Revision: 362055 Apply more systemd hardening Modified: prometheus/trunk/PKGBUILD prometheus/trunk/prometheus.service + PKGBUILD |2 +- prometheus.service |5 + 2 files changed, 6 insertions(+), 1 deletion(-) Modified: PKGBUILD === --- PKGBUILD2019-09-08 15:28:06 UTC (rev 362054) +++ PKGBUILD2019-09-08 15:40:18 UTC (rev 362055) @@ -19,7 +19,7 @@ prometheus.sysusers) sha256sums=('2d6019c1b58fdd509feb52eea3a01edd0eda3342a32ba0c3af76d30a571d16c5' -'e3f742c3e6eca7d4e0e6d190d88cf71692ca8810a77ef66831e450cb8e0a84a7' +'6bb81e0e9c982c36605ba0ac8fd60f3bca369bc0cb20017f160a1ab337a4ec19' '2747fabb4e56b808361eb7dd7acf9729ab8973d1ebe2f857dd56f6c71f71e45f') build() { Modified: prometheus.service === --- prometheus.service 2019-09-08 15:28:06 UTC (rev 362054) +++ prometheus.service 2019-09-08 15:40:18 UTC (rev 362055) @@ -12,6 +12,11 @@ NoNewPrivileges=true ProtectHome=true ProtectSystem=full +ProtectHostname=true +ProtectControlGroups=true +ProtectKernelModules=true +ProtectKernelTunables=true +LockPersonality=true [Install] WantedBy=multi-user.target
[arch-commits] Commit in prometheus/trunk (PKGBUILD prometheus.service)
Date: Thursday, January 3, 2019 @ 21:06:56 Author: demize Revision: 342918 upgpkg: prometheus 2.6.0-2 Modified: prometheus/trunk/PKGBUILD prometheus/trunk/prometheus.service + PKGBUILD |9 +++-- prometheus.service |4 ++-- 2 files changed, 9 insertions(+), 4 deletions(-) Modified: PKGBUILD === --- PKGBUILD2019-01-03 21:04:53 UTC (rev 342917) +++ PKGBUILD2019-01-03 21:06:56 UTC (rev 342918) @@ -19,7 +19,7 @@ prometheus.sysusers) sha256sums=('e0d3e77e45466fd055726268354a02834968a3275791be6cbd17513ec7860c1d' -'a1484a9c97e51c02e61ba8dfbd21aed34a8315fd111391ac0d13196cde7503a9' +'e3f742c3e6eca7d4e0e6d190d88cf71692ca8810a77ef66831e450cb8e0a84a7' '2747fabb4e56b808361eb7dd7acf9729ab8973d1ebe2f857dd56f6c71f71e45f') build() { @@ -37,6 +37,12 @@ ./cmd/promtool } +check() { + cd prometheus-$pkgver + + go test ./... +} + package() { install -Dm644 prometheus.service "$pkgdir"/usr/lib/systemd/system/prometheus.service install -Dm644 prometheus.sysusers "$pkgdir"/usr/lib/sysusers.d/prometheus.conf @@ -45,7 +51,6 @@ install -Dm755 -t "$pkgdir"/usr/bin prometheus promtool install -Dm755 -t "$pkgdir"/etc/prometheus documentation/examples/prometheus.yml - install -dm755 "$pkgdir"/etc/prometheus/{consoles,console_libraries} install -dm755 -o210 -g210 "$pkgdir"/var/lib/prometheus # Web Modified: prometheus.service === --- prometheus.service 2019-01-03 21:04:53 UTC (rev 342917) +++ prometheus.service 2019-01-03 21:06:56 UTC (rev 342918) @@ -10,8 +10,8 @@ ExecStart=/usr/bin/prometheus --config.file=/etc/prometheus/prometheus.yml --storage.tsdb.path=/var/lib/prometheus/data ExecReload=/bin/kill -HUP $MAINPID NoNewPrivileges=true -ProtectHome=yes -ProtectSystem=yes +ProtectHome=true +ProtectSystem=full [Install] WantedBy=multi-user.target