%bcond_without snmp

%bcond_without vrrp

%bcond_without sha1

%bcond_with profile

%bcond_with debug

%global _hardened_build 1

Name: keepalived

Summary: Load balancer and high availability service

Version: 1.3.5

Release: 19%{?dist}

License: GPLv2+

URL: http://www.keepalived.org/

Group: System Environment/Daemons

Source0: http://www.keepalived.org/software/keepalived-%{version}.tar.gz

Source1: keepalived.service

Patch0: bz1419049-fix-unused-variables.patch

Patch1: bz1477572-fix-man-page-vrrp_ipsets.patch

Patch2: bz1477563-fix-keepalived_script-user.patch

Patch3: bz1508435-load-ip-tables-handling.patch

Patch4: bz1508435-no-segfault-ip_vs-load.patch

Patch5: bz1508435-remove-ipset-handling.patch

Patch6: bz1477587-exclude-mismatch-vips.patch

Patch7: bz1652694-fix-buffer-overflow-http-status.patch

patch8: bz1654301-fix-improper-pathname-validation.patch

patch9: bz1667292-fix-vrrp_script-misc_script.patch

patch10: bz1678480-add-child_wait_time.patch

patch11: bz1678480-migrate-failed-checkers-reload.patch

patch12: bz1678480-implment-checker-comparison.patch

patch13: bz1678480-fix-wrong-migrate-checker-id.patch

patch14: bz1678480-set-active-if-failed-checkers-empty.patch

patch15: bz1678480-fix-checker-coding-style.patch

patch16: bz1678480-remove-unnecessary-parameter-compare.patch

patch17: bz1678480-resolve-compiler-warning.patch

patch18: bz1678480-include-check_api-in-ipwrapper.patch

patch19: bz1715308-make-checker-variables-non-global.patch

patch20: bz1715308-fix-checkers-comparison-on-reload.patch

patch21: bz1818891-build-with-latest-ipset.patch

patch22: bz1784879-fix-vip-removal-on-abort.patch

Requires: ipset-libs >= 7.1

Requires(post): systemd

Requires(preun): systemd

Requires(postun): systemd

BuildRoot: %{_tmppath}/%{name}-%{version}-%{release}-root-%(%{__id_u} -n)

%if %{with snmp}

BuildRequires: net-snmp

BuildRequires: net-snmp-devel

%endif

BuildRequires: systemd-units

BuildRequires: openssl-devel

BuildRequires: libnl3-devel

BuildRequires: ipset-devel >= 7.1

BuildRequires: iptables-devel

BuildRequires: libnfnetlink-devel

%description

Keepalived provides simple and robust facilities for load balancing

and high availability.  The load balancing framework relies on the

well-known and widely used Linux Virtual Server (IPVS) kernel module

providing layer-4 (transport layer) load balancing.  Keepalived

implements a set of checkers to dynamically and adaptively maintain

and manage a load balanced server pool according their health.

Keepalived also implements the Virtual Router Redundancy Protocol

(VRRPv2) to achieve high availability with director failover.

%prep

%setup -q

%patch0 -p1

%patch1 -p1

%patch2 -p1

%patch3 -p1

%patch4 -p1

%patch5 -p1

%patch6 -p1

%patch7 -p1

%patch8 -p1

%patch9 -p1

%patch10 -p1

%patch11 -p1

%patch12 -p1

%patch13 -p1

%patch14 -p1

%patch15 -p1

%patch16 -p1

%patch17 -p1

%patch18 -p1

%patch19 -p1

%patch20 -p1

%patch21 -p1

%patch22 -p1

%build

%configure \

    %{?with_debug:--enable-debug} \

    %{?with_profile:--enable-profile} \

    %{!?with_vrrp:--disable-vrrp} \

    %{?with_snmp:--enable-snmp --enable-snmp-rfc} \

    %{?with_sha1:--enable-sha1}

%{__make} %{?_smp_mflags} STRIP=/bin/true

%install

%{__rm} -rf %{buildroot}

%{__rm} -rf doc/samples/*.pem

%{__make} install DESTDIR=%{buildroot}

%{__rm} -rf %{buildroot}%{_initrddir}/

%{__rm} -rf %{buildroot}%{_sysconfdir}/keepalived/samples/

%{__install} -p -D -m 0644 %{SOURCE1} %{buildroot}%{_unitdir}/keepalived.service

%{__mkdir_p} %{buildroot}%{_libexecdir}/keepalived

%if %{with snmp}

%{__mkdir_p} %{buildroot}%{_datadir}/snmp/mibs/

%endif

%clean

%{__rm} -rf %{buildroot}

%post

%systemd_post keepalived.service

%preun

%systemd_preun keepalived.service

%postun

%systemd_postun_with_restart keepalived.service

%files

%defattr(-,root,root,-)

%doc AUTHOR ChangeLog CONTRIBUTORS COPYING README TODO

%doc doc/keepalived.conf.SYNOPSIS doc/NOTE_vrrp_vmac.txt doc/samples/

%dir %{_sysconfdir}/keepalived/

%dir %{_libexecdir}/keepalived/

%attr(0644,root,root) %config(noreplace) %{_sysconfdir}/keepalived/keepalived.conf

%attr(0644,root,root) %config(noreplace) %{_sysconfdir}/sysconfig/keepalived

%{_unitdir}/keepalived.service

%if %{with snmp}

%{_datadir}/snmp/mibs/KEEPALIVED-MIB.txt

%{_datadir}/snmp/mibs/VRRP-MIB.txt

%{_datadir}/snmp/mibs/VRRPv3-MIB.txt

%endif

%attr(0755,root,root) %{_bindir}/genhash

%attr(0755,root,root) %{_sbindir}/keepalived

%{_mandir}/man1/genhash.1*

%{_mandir}/man5/keepalived.conf.5*

%{_mandir}/man8/keepalived.8*

%changelog

* Fri May 01 2020 Ryan O'Hara <rohara@redhat.com> - 1.3.5-19

- Fix VIP removal on abort (#1784879)

* Mon Mar 30 2020 Ryan O'Hara <rohara@redhat.com> - 1.3.5-18

- Set required version for ipset-libs/ipset-devel (#1818891)

* Mon Mar 30 2020 Ryan O'Hara <rohara@redhat.com> - 1.3.5-17

- Build with latest ipset (#1818891)

* Fri Jun 14 2019 Ryan O'Hara <rohara@redhat.com> - 1.3.5-16

- Rework previous misc_script/vrrp_script patch (#1667292)

* Mon Jun 03 2019 Ryan O'Hara <rohara@redhat.com> - 1.3.5-15

- Rework previous checker comparison patch (#1715308)

* Fri May 31 2019 Ryan O'Hara <rohara@redhat.com> - 1.3.5-14

- Make checker variables non global (#1715308)

* Fri May 31 2019 Ryan O'Hara <rohara@redhat.com> - 1.3.5-13

- Fix comparison of checkers on reload (#1715308)

* Wed Apr 03 2019 Ryan O'Hara <rohara@redhat.com> - 1.3.5-12

- Fix build errors (#1678480)

* Tue Apr 02 2019 Ryan O'Hara <rohara@redhat.com> - 1.3.5-11

- Fix problems with health checks & real servers after reload/restart (#1678480)

* Fri Jan 25 2019 Ryan O'Hara <rohara@redhat.com> - 1.3.5-10

- Fix vrrp_script and check_misc scripts of type "

* Thu Jan 24 2019 Ryan O'Hara <rohara@redhat.com> - 1.3.5-9

- Fix improper pathname validation (#1654301)

* Thu Dec 13 2018 Ryan O'Hara <rohara@redhat.com> - 1.3.5-8

- Fixed patch that was incorrectly removed (#1652694)

* Mon Dec 10 2018 Ryan O'Hara <rohara@redhat.com> - 1.3.5-7

- Fix buffer overflow when parsing HTTP status codes (#1652694)

* Wed Jan 31 2018 Ryan O'Hara <rohara@redhat.com> - 1.3.5-6

- Add net-snmp as BuildRequires (#1536252)

* Mon Dec 11 2017 Ryan O'Hara <rohara@redhat.com> - 1.3.5-5

- Exclude VIPs of non-matching address family (#1477587)

* Thu Nov 16 2017 Ryan O'Hara <rohara@redhat.com> - 1.3.5-4

- Fix bugs related to failures when load modules and/or segfaults (#1508435)

* Wed Aug 02 2017 Ryan O'Hara <rohara@redhat.com> - 1.3.5-3

- Don't complain about keepalived_script user if not needed (#1477563)

* Wed Aug 02 2017 Ryan O'Hara <rohara@redhat.com> - 1.3.5-2

- Fix ipset-libs dependency and vrrp_ipset in man page (#1477572)

* Wed Mar 22 2017 Ryan O'Hara <rohara@redhat.com> - 1.3.5-1

- Rebase to upstream version 1.3.5 (#1419049)

* Thu Mar 16 2017 Ryan O'Hara <rohara@redhat.com> - 1.3.4-2

- Start keepalived after network-online.target (#1425828)

* Wed Mar 15 2017 Ryan O'Hara <rohara@redhat.com> - 1.3.4-1

- Rebase to upstream version 1.3.4 (#1419049)

* Fri Jul 01 2016 Ryan O'Hara <rohara@redhat.com> - 1.2.13-8

- Add PIDFile to systemd unit file (#1336190)

* Thu Jun 25 2015 Ryan O'Hara <rohara@redhat.com> - 1.2.13-7

- Set global default values after parsing config file (#1181107)

* Tue Nov 18 2014 Ryan O'Hara <rohara@redhat.com> - 1.2.13-6

- Fix typo in changelog

* Mon Nov 10 2014 Ryan O'Hara <rohara@redhat.com> - 1.2.13-5

- Bump release number (#1158114)

* Thu Nov 06 2014 Ryan O'Hara <rohara@redhat.com> - 1.2.13-4

- Create /usr/libexec/keepalived directory (#1158114)

* Tue Sep 30 2014 Ryan O'Hara <rohara@redhat.com> - 1.2.13-3

- Minor spec file modifications (#1067693, #1067145)

* Tue Sep 30 2014 Ryan O'Hara <rohara@redhat.com> - 1.2.13-2

- Add SNMP subsystem option to man page (#1085535)

* Thu Aug 07 2014 Ryan O'Hara <rohara@redhat.com> - 1.2.13-1

- Rebase to upstream version 1.2.13 (#1111716)

* Fri Jan 24 2014 Daniel Mach <dmach@redhat.com> - 1.2.10-2

- Mass rebuild 2014-01-24

* Tue Jan 14 2014 Ryan O'Hara <rohara@redhat.com> - 1.2.10-1

- Rebase to upstream version 1.2.10 (#1052359)

* Fri Dec 27 2013 Daniel Mach <dmach@redhat.com> - 1.2.8-2

- Mass rebuild 2013-12-27

* Thu Sep 05 2013 Ryan O'Hara <rohara@redhat.com> - 1.2.8-1

- Update to 1.2.8.

* Mon Jul 22 2013 Ryan O'Hara <rohara@redhat.com> - 1.2.7-8

- Fix macro in keepalived.conf.5 man page.

* Mon Jul 22 2013 Ryan O'Hara <rohara@redhat.com> - 1.2.7-7

- Fix systemd requirements.

* Mon Jul 22 2013 Ryan O'Hara <rohara@redhat.com> - 1.2.7-6

- Install the systemd unit file, not the init script.

* Mon Apr 22 2013 Ryan O'Hara <rohara@redhat.com> - 1.2.7-5

- Build with PIE flags (#955150)

* Thu Feb 14 2013 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1.2.7-4

- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild

* Wed Jan 2 2013 Ryan O'Hara <rohara@redhat.com> - 1.2.7-3

- Update spec file.

- Add option to prevent respawn of child processes.

- Remove duplicate command-line option code.

- Use popt to generate usage message.

- Fix pointer arithmetic for VRRP packets.

- Fix comparison of primary IP address.

- Fix loading of SSL certificate.

- Fix typo in error message.

- Update FSF address in GPLv2 license.

- Remove debug message from if_get_by_ifname.

* Mon Sep 24 2012 Václav Pavlín <vpavlin@redhat.com> - 1.2.7-2

- Scriptlets replaced with new systemd macros (#850173).

* Tue Sep 04 2012 Ryan O'Hara <rohara@redhat.com> - 1.2.7-1

- Update to 1.2.7.

- Fix systemd service file (#769726).

* Mon Aug 20 2012 Ryan O'Hara <rohara@redhat.com> - 1.2.6-1

- Update to 1.2.6.

* Tue Aug 14 2012 Ryan O'Hara <rohara@redhat.com> - 1.2.5-2

- Install KEEPALIVED-MIB as KEEPALIVED-MIB.txt.

* Mon Aug 13 2012 Ryan O'Hara <rohara@redhat.com> - 1.2.5-1

- Update to 1.2.5.

* Wed Aug 01 2012 Ryan O'Hara <rohara@redhat.com> - 1.2.4-1

- Update to 1.2.4.

* Mon Jul 23 2012 Ryan O'Hara <rohara@redhat.com> - 1.2.3-1

- Update to 1.2.3.

* Thu Jul 19 2012 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1.2.2-6

- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild

* Tue May 08 2012 Ryan O'Hara <rohara@redhat.com> - 1.2.2-5

- Fix IPv4 address comparison (#768119).

* Fri Jan 13 2012 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1.2.2-4

- Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild

* Mon Sep 19 2011 Tom Callaway <spot@fedoraproject.org> - 1.2.2-3

- convert to systemd

- fix ip_vs.h path searching in configure

* Sat Jul 23 2011 Matthias Saou <http://freshrpms.net/> 1.2.2-2

- Build against libnl for Fedora. RHEL's libnl is too old.

* Sat May 21 2011 Matthias Saou <http://freshrpms.net/> 1.2.2-1

- Update to 1.2.2.

* Mon Feb 07 2011 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1.1.20-3

- Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuild

* Sun Jan 16 2011 Dan Horák <dan[at]danny.cz> 1.1.20-2

- exclude arches where we don't provide 32-bit kernel

* Tue Jan 11 2011 Matthias Saou <http://freshrpms.net/> 1.2.1-1

- Update to 1.2.1, now with IPv6 support.

* Sun May 23 2010 Matthias Saou <http://freshrpms.net/> 1.1.20-1

- Update to 1.1.20 (#589923).

- Update BR conditional for RHEL6.

- No longer include goodies/arpreset.pl, it's gone from the sources.

* Tue Dec  8 2009 Matthias Saou <http://freshrpms.net/> 1.1.19-3

- Update init script to have keepalived start after the local MTA (#526512).

- Simplify the kernel source detection, to avoid running rpm from rpmbuild.

* Tue Nov 24 2009 Matthias Saou <http://freshrpms.net/> 1.1.19-2

- Include patch to remove obsolete -k option to modprobe (#528465).

* Wed Oct 21 2009 Matthias Saou <http://freshrpms.net/> 1.1.19-1

- Update to 1.1.19.

* Fri Aug 21 2009 Tomas Mraz <tmraz@redhat.com> - 1.1.17-3

- rebuilt with new openssl

* Fri Jul 24 2009 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1.1.17-2

- Rebuilt for https://fedoraproject.org/wiki/Fedora_12_Mass_Rebuild

* Sun Apr 12 2009 Matthias Saou <http://freshrpms.net/> 1.1.17-1

- Update to 1.1.17.

- Update init script all the way.

* Wed Feb 25 2009 Fedora Release Engineering <rel-eng@lists.fedoraproject.org>

- Rebuilt for https://fedoraproject.org/wiki/Fedora_11_Mass_Rebuild

* Sat Jan 17 2009 Tomas Mraz <tmraz@redhat.com> 1.1.15-7

- rebuild with new openssl

* Mon Dec 22 2008 Matthias Saou <http://freshrpms.net/> 1.1.15-6

- Fork the init script to be (mostly for now) LSB compliant (#246966).

* Thu Apr 24 2008 Matthias Saou <http://freshrpms.net/> 1.1.15-5

- Add glob to the kerneldir location, since it contains the arch for F9+.

* Tue Feb 19 2008 Fedora Release Engineering <rel-eng@fedoraproject.org>

- Autorebuild for GCC 4.3

* Wed Dec 05 2007 Release Engineering <rel-eng at fedoraproject dot org>

- Rebuild for deps

* Mon Oct 22 2007 Matthias Saou <http://freshrpms.net/> 1.1.15-2

- Update to latest upstream sources, identical except for the included spec.

* Mon Sep 17 2007 Matthias Saou <http://freshrpms.net/> 1.1.15-1

- Update to 1.1.15.

- Remove merged genhashman and include patches.

* Fri Sep 14 2007 Matthias Saou <http://freshrpms.net/> 1.1.14-2

- Include patch from Shinji Tanaka to fix conf include from inside some

  directives like vrrp_instance.

* Thu Sep 13 2007 Matthias Saou <http://freshrpms.net/> 1.1.14-1

- Update to 1.1.14.

- Remove all upstreamed patches.

- Remove our init script and sysconfig files, use the same now provided by the

  upstream package (will need to patch for LSB stuff soonish).

- Include new goodies/arpreset.pl in %%doc.

- Add missing scriplet requirements.

* Wed Aug 22 2007 Matthias Saou <http://freshrpms.net/> 1.1.13-8

- Rebuild for new BuildID feature.

* Sun Aug  5 2007 Matthias Saou <http://freshrpms.net/> 1.1.13-7

- Update License field.

* Mon Mar 26 2007 Matthias Saou <http://freshrpms.net/> 1.1.13-6

- Fix doc/samples/sample.misccheck.smbcheck.sh mode (600 -> 644).

* Thu Mar 22 2007 Matthias Saou <http://freshrpms.net/> 1.1.13-5

- Include types patch to fix compile on F7 (David Woodhouse).

- Fix up file modes (main binary 700 -> 755 and config 600 -> 640).

* Tue Feb 13 2007 Matthias Saou <http://freshrpms.net/> 1.1.13-4

- Add missing \n to the kernel define, for when multiple kernels are installed.

- Pass STRIP=/bin/true to "make" in order to get a useful debuginfo package.

* Tue Feb 13 2007 Matthias Saou <http://freshrpms.net/> 1.1.13-3

- Add %%check section to make sure any build without LVS support will fail.

* Mon Feb  5 2007 Matthias Saou <http://freshrpms.net/> 1.1.13-2

- Use our own init script, include a sysconfig entry used by it for options.

* Thu Jan 25 2007 Matthias Saou <http://freshrpms.net/> 1.1.13-1

- Update to 1.1.13.

- Change mode of configuration file to 0600.

- Don't include all of "doc" since it meant re-including all man pages.

- Don't include samples in the main configuration path, they're in %%doc.

- Include patch to add an optional label to interfaces.

* Sat Apr 08 2006 Dries Verachtert <dries@ulyssis.org> - 1.1.12-1.2

- Rebuild for Fedora Core 5.

* Sun Mar 12 2006 Dag Wieers <dag@wieers.com> - 1.1.12-1

- Updated to release 1.1.12.

* Fri Mar 04 2005 Dag Wieers <dag@wieers.com> - 1.1.11-1

- Updated to release 1.1.11.

* Wed Feb 23 2005 Dag Wieers <dag@wieers.com> - 1.1.10-2

- Fixed IPVS/LVS support. (Joe Sauer)

* Tue Feb 15 2005 Dag Wieers <dag@wieers.com> - 1.1.10-1

- Updated to release 1.1.10.

* Mon Feb 07 2005 Dag Wieers <dag@wieers.com> - 1.1.9-1

- Updated to release 1.1.9.

* Sun Oct 17 2004 Dag Wieers <dag@wieers.com> - 1.1.7-2

- Fixes to build with kernel IPVS support. (Tim Verhoeven)

* Fri Sep 24 2004 Dag Wieers <dag@wieers.com> - 1.1.7-1

- Updated to release 1.1.7. (Mathieu Lubrano)

* Mon Feb 23 2004 Dag Wieers <dag@wieers.com> - 1.1.6-0

- Updated to release 1.1.6.

* Mon Jan 26 2004 Dag Wieers <dag@wieers.com> - 1.1.5-0

- Updated to release 1.1.5.

* Mon Dec 29 2003 Dag Wieers <dag@wieers.com> - 1.1.4-0

- Updated to release 1.1.4.

* Fri Jun 06 2003 Dag Wieers <dag@wieers.com> - 1.0.3-0

- Initial package. (using DAR)