# This is the PostgreSQL Global Development Group Official RPMset spec file,

# or a derivative thereof.

# Copyright 2003-2009 Lamar Owen <lowen@pari.edu> <lamar.owen@wgcr.org>

# and others listed.

# Major Contributors:

# ---------------

# Lamar Owen

# Trond Eivind Glomsrd <teg@redhat.com>

# Thomas Lockhart

# Reinhard Max

# Karl DeBisschop

# Peter Eisentraut

# Joe Conway

# Andrew Overholt

# David Jee

# Kaj J. Niemi

# Sander Steffann

# Tom Lane

# and others in the Changelog....

# This spec file and ancillary files are licensed in accordance with

# The PostgreSQL license.

# In this file you can find the default build package list macros.

# These can be overridden by defining on the rpm command line:

# rpm --define 'packagename 1' .... to force the package to build.

# rpm --define 'packagename 0' .... to force the package NOT to build.

# The base package, the libs package, the devel package, and the server package

# always get built.

%{!?beta:%global beta 0}

%{?beta:%global __os_install_post /usr/lib/rpm/brp-compress}

%{!?test:%global test 1}

%{!?upgrade:%global upgrade 1}

%{!?plpython:%global plpython 1}

%if 0%{?fedora} > 12

%{!?plpython3:%global plpython3 1}

%else

%{!?plpython3:%global plpython3 0}

%endif

%{!?pltcl:%global pltcl 1}

%{!?plperl:%global plperl 1}

%{!?ssl:%global ssl 1}

%{!?kerberos:%global kerberos 1}

%{!?ldap:%global ldap 1}

%{!?nls:%global nls 1}

%{!?uuid:%global uuid 1}

%{!?xml:%global xml 1}

%{!?pam:%global pam 1}

%{!?sdt:%global sdt 1}

%{!?selinux:%global selinux 1}

%{!?runselftest:%global runselftest 1}

# By default, patch(1) creates backup files when chunks apply with offsets.

# Turn that off to ensure such files don't get included in RPMs.

%global _default_patch_flags --no-backup-if-mismatch

%{!?_pkgdocdir: %global _pkgdocdir %{_docdir}/%{name}-%{version}}

Summary: PostgreSQL client programs

Name: postgresql

%global majorversion 9.2

Version: 9.2.24

Release: 6%{?dist}

# The PostgreSQL license is very similar to other MIT licenses, but the OSI

# recognizes it as an independent license, so we do as well.

License: PostgreSQL

Group: Applications/Databases

Url: http://www.postgresql.org/

# This number must be NVR-greater than any PG version shipped in F15:

%global first_systemd_version 0:9.0.99

# This SRPM includes a copy of the previous major release, which is needed for

# in-place upgrade of an old database.  In most cases it will not be critical

# that this be kept up with the latest minor release of the previous series;

# but update when bugs affecting pg_dump output are fixed.

%global prevversion 8.4.22

%global prevmajorversion 8.4

Source0: https://ftp.postgresql.org/pub/source/v%{version}/postgresql-%{version}.tar.bz2

# The PDF file is generated by generate-pdf.sh, which see for comments

Source1: postgresql-%{version}-US.pdf

# generate-pdf.sh is not used during RPM build, but include for documentation

Source2: generate-pdf.sh

Source3: ftp://ftp.postgresql.org/pub/source/v%{prevversion}/postgresql-%{prevversion}.tar.bz2

Source4: postgresql-check-db-dir

Source5: Makefile.regress

Source6: pg_config.h

Source7: ecpg_config.h

Source8: README.rpm-dist

Source9: postgresql-setup

Source10: postgresql.service

Source11: initdb.sh

Source12: upgrade.sh

Source13: postgresql.tmpfiles.d

Source14: postgresql.pam

Source15: postgresql-bashprofile

# Comments for these patches are in the patch files.

Patch1: rpm-pgsql.patch

Patch2: postgresql-logging.patch

Patch3: postgresql-perl-rpath.patch

Patch4: postgresql-config-comment.patch

Patch5: postgresql-multi-sockets.patch

Patch6: postgresql-var-run-socket.patch

# Comments for these patches are in the patch files.

Patch8: postgresql-man.patch

# Add support for atomic operations TAS/S_UNLOCK in |aarch64.

# ~> upstream (612ecf311b)

# ~> #970661

Patch11: postgresql-9.2.4-aarch64-atomic-upgrade.patch

# Force older postgres to create socket file in /var/run/postgresql

# ~> downstream

Patch12: postgresql-9.2.4-upgrade-from-8.4.13.patch

# When user complicates access of 'postgres' user to the database, the

# pg_upgrade can left the old server running - and re-run of pg_upgrade thus

# does not help.  This patch stops the server in described scenario properly.

# ~> not yet upstream, patch by Bruce Momjian:

# ~> http://www.postgresql.org/message-id/20130812193347.GD12510@momjian.us

# ~> #896161

Patch13: postgresql-9.2.4-upgrade-and-perm-problems.patch

# Backport fix for CVE-2018-10915

# Upstream commit: 210eb9b743c0645df05e5c8be4490ba4f09fc871

# Upstream commit: db6e8e1624a8f0357373450136c850f2b6e7fc8a

# Upstream commit: f2fa0c6514b6c5b7bccfe5050f6791dea1113c2e

# Upstream commit: 243de06be96d6001d01f2ec7c4573aad8b657195

Patch14: postgresql-CVE-2018-10915.patch

# Check if callback is already set

Patch15: postgresql-libpq-crypto-no-callback-stomping-v2.patch

# See BZ#1754816

Patch16: postgresql-9.2.24-handle-EAGAIN-on-socket-write.patch

# Backport fix for CVE-2020-25694

# Upstream commit: da129a04a6dea8c30eec2477c08d17736c92d431

# Upstream commit: 6997da09a41f613695575fbfcb213f14784c92bb

# Upstream commit: 56b46d3a1a620548b4728b48bd28cdf11d88e101

# Upstream commit: 65c3bf19fd3e1f6a591618e92eb4c54d0b217564

Patch17: postgresql-9.2.24-CVE-2020-25694.patch

# Backport fix for CVE-2020-25695

# Upstream commit: 0c3185e963d9f9dd0608214f7d732b84aa0888fe

Patch18: postgresql-9.2.24-CVE-2020-25695.patch

# Backport fix for CVE-2019-10208

# Upstream commit: ffa2d37e5fbd1243f918f622113d6e371667e5a0

# See BZ#1741488

Patch19: postgresql-9.2.24-CVE-2019-10208.patch

BuildRequires: perl(ExtUtils::MakeMaker) glibc-devel bison flex gawk help2man

BuildRequires: perl(ExtUtils::Embed), perl-devel

BuildRequires: readline-devel zlib-devel

BuildRequires: systemd-units

%if %plpython

BuildRequires: python-devel

%endif

%if %plpython3

BuildRequires: python3-devel

%endif

%if %pltcl

BuildRequires: tcl-devel

%endif

%if %ssl

BuildRequires: openssl-devel

%endif

%if %kerberos

BuildRequires: krb5-devel

%endif

%if %ldap

BuildRequires: openldap-devel

%endif

%if %nls

BuildRequires: gettext >= 0.10.35

%endif

%if %uuid

BuildRequires: uuid-devel

%endif

%if %xml

BuildRequires: libxml2-devel libxslt-devel

%endif

%if %pam

BuildRequires: pam-devel

%endif

%if %sdt

BuildRequires: systemtap-sdt-devel

%endif

%if %selinux

BuildRequires: libselinux-devel

%endif

# main package requires -libs subpackage

Requires: %{name}-libs%{?_isa} = %{version}-%{release}

%description

PostgreSQL is an advanced Object-Relational database management system (DBMS).

The base postgresql package contains the client programs that you'll need to

access a PostgreSQL DBMS server, as well as HTML documentation for the whole

system.  These client programs can be located on the same machine as the

PostgreSQL server, or on a remote machine that accesses a PostgreSQL server

over a network connection.  The PostgreSQL server can be found in the

postgresql-server sub-package.

%package libs

Summary: The shared libraries required for any PostgreSQL clients

Group: Applications/Databases

Provides: libpq.so = %{version}-%{release}

# for /sbin/ldconfig

Requires(post): glibc

Requires(postun): glibc

%description libs

The postgresql-libs package provides the essential shared libraries for any 

PostgreSQL client program or interface. You will need to install this package

to use any other PostgreSQL package or any clients that need to connect to a

PostgreSQL server.

%package server

Summary: The programs needed to create and run a PostgreSQL server

Group: Applications/Databases

Requires: %{name}%{?_isa} = %{version}-%{release}

Requires: %{name}-libs%{?_isa} = %{version}-%{release}

Requires(pre): /usr/sbin/useradd

# We require this to be present for %%{_prefix}/lib/tmpfiles.d

Requires: systemd-units

# Make sure it's there when scriptlets run, too

Requires(post): systemd-units

Requires(preun): systemd-units

Requires(postun): systemd-units

# This is actually needed for the %%triggerun script but Requires(triggerun)

# is not valid.  We can use post because this particular %%triggerun script

# should fire just after this package is installed.

Requires(post): systemd-sysv

Requires(post): chkconfig

%description server

PostgreSQL is an advanced Object-Relational database management system (DBMS).

The postgresql-server package contains the programs needed to create

and run a PostgreSQL server, which will in turn allow you to create

and maintain PostgreSQL databases.

%package docs

Summary: Extra documentation for PostgreSQL

Group: Applications/Databases

Requires: %{name}%{?_isa} = %{version}-%{release}

%description docs

The postgresql-docs package contains some additional documentation for

PostgreSQL.  Currently, this includes the main documentation in PDF format

and source files for the PostgreSQL tutorial.

%package contrib

Summary: Extension modules distributed with PostgreSQL

Group: Applications/Databases

Requires: %{name}%{?_isa} = %{version}-%{release}

Requires: %{name}-libs%{?_isa} = %{version}-%{release}

%description contrib

The postgresql-contrib package contains various extension modules that are

included in the PostgreSQL distribution.

%package devel

Summary: PostgreSQL development header files and libraries

Group: Development/Libraries

Requires: %{name}%{?_isa} = %{version}-%{release}

Requires: %{name}-libs%{?_isa} = %{version}-%{release}

%description devel

The postgresql-devel package contains the header files and libraries

needed to compile C or C++ applications which will directly interact

with a PostgreSQL database management server.  It also contains the ecpg

Embedded C Postgres preprocessor. You need to install this package if you want

to develop applications which will interact with a PostgreSQL server.

%package static

Summary: Statically linked PostgreSQL libraries

Requires: %{name}-devel%{?_isa} = %{version}-%{release}

%description static

Statically linked PostgreSQL libraries that do not have dynamically linked

counterparts.

%if %upgrade

%package upgrade

Summary: Support for upgrading from the previous major release of PostgreSQL

Group: Applications/Databases

Requires: %{name}-server%{?_isa} = %{version}-%{release}

Requires: %{name}-libs%{?_isa} = %{version}-%{release}

%description upgrade

The postgresql-upgrade package contains the pg_upgrade utility and supporting

files needed for upgrading a PostgreSQL database from the previous major

version of PostgreSQL.

%endif

%if %plperl

%package plperl

Summary: The Perl procedural language for PostgreSQL

Group: Applications/Databases

Requires: %{name}-server%{?_isa} = %{version}-%{release}

Requires: perl(:MODULE_COMPAT_%(eval "`%{__perl} -V:version`"; echo $version))

%description plperl

The postgresql-plperl package contains the PL/Perl procedural language,

which is an extension to the PostgreSQL database server.

Install this if you want to write database functions in Perl.

%endif

%if %plpython

%package plpython

Summary: The Python2 procedural language for PostgreSQL

Group: Applications/Databases

Requires: %{name}-server%{?_isa} = %{version}-%{release}

%description plpython

The postgresql-plpython package contains the PL/Python procedural language,

which is an extension to the PostgreSQL database server.

Install this if you want to write database functions in Python 2.

%endif

%if %plpython3

%package plpython3

Summary: The Python3 procedural language for PostgreSQL

Group: Applications/Databases

Requires: %{name}-server%{?_isa} = %{version}-%{release}

%description plpython3

The postgresql-plpython3 package contains the PL/Python3 procedural language,

which is an extension to the PostgreSQL database server.

Install this if you want to write database functions in Python 3.

%endif

%if %pltcl

%package pltcl

Summary: The Tcl procedural language for PostgreSQL

Group: Applications/Databases

Requires: %{name}-server%{?_isa} = %{version}-%{release}

%description pltcl

The postgresql-pltcl package contains the PL/Tcl procedural language,

which is an extension to the PostgreSQL database server.

Install this if you want to write database functions in Tcl.

%endif

%if %test

%package test

Summary: The test suite distributed with PostgreSQL

Group: Applications/Databases

Requires: %{name}-server%{?_isa} = %{version}-%{release}

Requires: %{name}-devel%{?_isa} = %{version}-%{release}

%description test

The postgresql-test package contains files needed for various tests for the

PostgreSQL database management system, including regression tests and

benchmarks.

%endif

%prep

%setup -q

%patch1 -p1

%patch2 -p1

%patch3 -p1

%patch4 -p1

%patch5 -p1

%patch6 -p1

%patch8 -p1

%patch13 -p1

%patch14 -p1

%patch15 -p1

%patch16 -p1

%patch17 -p1

%patch18 -p1

%patch19 -p1

# We used to run autoconf here, but there's no longer any real need to,

# since Postgres ships with a reasonably modern configure script.

# add ppc64p7 support (https://fedoraproject.org/wiki/Features/Power7Subarch)

# hopefully need for this will go away next time upstream updates config.sub

sed -i -e "s/ppc64-\*/ppc64-\* \| ppc64p7-\*/" config/config.sub

cp -p %{SOURCE1} .

%if %upgrade

tar xfj %{SOURCE3}

# make sure older version is up-to-date on config.guess/config.sub;

# not always necessary, but PG 9.2 knows about aarch64 while 9.1 doesn't

# (and also see the ppc64p7 hack above)

cp -p config/config.guess postgresql-%{prevversion}/config/config.guess

cp -p config/config.sub postgresql-%{prevversion}/config/config.sub

pushd postgresql-%{prevversion}

%patch11 -p2

%patch12 -p2

popd

%endif

# remove .gitignore files to ensure none get into the RPMs (bug #642210)

find . -type f -name .gitignore | xargs rm

# prep the setup script, including insertion of some values it needs

sed -e 's|^PGVERSION=.*$|PGVERSION=%{version}|' \

        -e 's|^PGMAJORVERSION=.*$|PGMAJORVERSION=%{majorversion}|' \

        -e 's|^PGENGINE=.*$|PGENGINE=%{_bindir}|' \

        -e 's|^PREVMAJORVERSION=.*$|PREVMAJORVERSION=%{prevmajorversion}|' \

        -e 's|^PREVPGENGINE=.*$|PREVPGENGINE=%{_libdir}/pgsql/postgresql-%{prevmajorversion}/bin|' \

        -e 's|^README_RPM_DIST=.*$|README_RPM_DIST=%{_pkgdocdir}/%(basename %{SOURCE8})|' \

        <%{SOURCE9} >postgresql-setup

touch -r %{SOURCE9} postgresql-setup

chmod +x postgresql-setup

help2man -N -m "Postgresql RPM-dist manual" ./postgresql-setup -o postgresql-setup.1

# prep the startup check script, including insertion of some values it needs

sed -e 's|^PGVERSION=.*$|PGVERSION=%{version}|' \

        -e 's|^PREVMAJORVERSION=.*$|PREVMAJORVERSION=%{prevmajorversion}|' \

        -e 's|^PGDOCDIR=.*$|PGDOCDIR=%{_pkgdocdir}|' \

        <%{SOURCE4} >postgresql-check-db-dir

touch -r %{SOURCE4} postgresql-check-db-dir

%build

# fail quickly and obviously if user tries to build as root

%if %runselftest

	if [ x"`id -u`" = x0 ]; then

		echo "postgresql's regression tests fail if run as root."

		echo "If you really need to build the RPM as root, use"

		echo "--define='runselftest 0' to skip the regression tests."

		exit 1

	fi

%endif

# Fiddling with CFLAGS.

CFLAGS="${CFLAGS:-%optflags}"

%ifarch %{power64}

# See the bug #1051075, ppc64 should benefit from -O3

CFLAGS=`echo $CFLAGS | xargs -n 1 | sed 's|-O2|-O3|g' | xargs -n 100`

%endif

# Strip out -ffast-math from CFLAGS....

CFLAGS=`echo $CFLAGS|xargs -n 1|grep -v ffast-math|xargs -n 100`

# Add LINUX_OOM_SCORE_ADJ=0 to ensure child processes reset postmaster's oom_score_adj

CFLAGS="$CFLAGS -DLINUX_OOM_SCORE_ADJ=0"

export CFLAGS

# plpython requires separate configure/build runs to build against python 2

# versus python 3.  Our strategy is to do the python 3 run first, then make

# distclean and do it again for the "normal" build.  Note that the installed

# Makefile.global will reflect the python 2 build, which seems appropriate

# since that's still considered the default plpython version.

%if %plpython3

export PYTHON=/usr/bin/python3

# These configure options must match main build

%configure --disable-rpath \

%if %beta

	--enable-debug \

	--enable-cassert \

%endif

%if %plperl

	--with-perl \

%endif

%if %pltcl

	--with-tcl \

	--with-tclconfig=%{_libdir} \

%endif

%if %plpython3

	--with-python \

%endif

%if %ldap

	--with-ldap \

%endif

%if %ssl

	--with-openssl \

%endif

%if %pam

	--with-pam \

%endif

%if %kerberos

	--with-krb5 \

	--with-gssapi \

%endif

%if %uuid

	--with-ossp-uuid \

%endif

%if %xml

	--with-libxml \

	--with-libxslt \

%endif

%if %nls

	--enable-nls \

%endif

%if %sdt

	--enable-dtrace \

%endif

%if %selinux

	--with-selinux \

%endif

	--with-system-tzdata=%{_datadir}/zoneinfo \

	--datadir=%{_datadir}/pgsql

# Fortunately we don't need to build much except plpython itself

cd src/backend

make submake-errcodes

cd ../..

cd src/pl/plpython

make %{?_smp_mflags} all

cd ..

# save built form in a directory that "make distclean" won't touch

cp -a plpython plpython3

cd ../..

# must also save this version of Makefile.global for later

cp src/Makefile.global src/Makefile.global.python3

make distclean

%endif

unset PYTHON

# Normal (not python3) build begins here

%configure --disable-rpath \

%if %beta

	--enable-debug \

	--enable-cassert \

%endif

%if %plperl

	--with-perl \

%endif

%if %pltcl

	--with-tcl \

	--with-tclconfig=%{_libdir} \

%endif

%if %plpython

	--with-python \

%endif

%if %ldap

	--with-ldap \

%endif

%if %ssl

	--with-openssl \

%endif

%if %pam

	--with-pam \

%endif

%if %kerberos

	--with-krb5 \

	--with-gssapi \

%endif

%if %uuid

	--with-ossp-uuid \

%endif

%if %xml

	--with-libxml \

	--with-libxslt \

%endif

%if %nls

	--enable-nls \

%endif

%if %sdt

	--enable-dtrace \

%endif

%if %selinux

	--with-selinux \

%endif

	--with-system-tzdata=/usr/share/zoneinfo \

	--datadir=/usr/share/pgsql

make %{?_smp_mflags} world

# Have to hack makefile to put correct path into tutorial scripts

sed "s|C=\`pwd\`;|C=%{_libdir}/pgsql/tutorial;|" < src/tutorial/Makefile > src/tutorial/GNUmakefile

make %{?_smp_mflags} -C src/tutorial NO_PGXS=1 all

rm -f src/tutorial/GNUmakefile

%if %runselftest

	pushd src/test/regress

	make all

	make MAX_CONNECTIONS=5 check

	make clean

	popd

	pushd src/pl

	make MAX_CONNECTIONS=5 check

	popd

%if %plpython3

	# must install Makefile.global that selects python3

	mv src/Makefile.global src/Makefile.global.save

	cp src/Makefile.global.python3 src/Makefile.global

	touch -r src/Makefile.global.save src/Makefile.global

	# because "make check" does "make install" on the whole tree,

	# we must temporarily install plpython3 as src/pl/plpython,

	# since that is the subdirectory src/pl/Makefile knows about

	mv src/pl/plpython src/pl/plpython2

	mv src/pl/plpython3 src/pl/plpython

	pushd src/pl/plpython

	make MAX_CONNECTIONS=5 check

	popd

	# and clean up our mess

	mv src/pl/plpython src/pl/plpython3

	mv src/pl/plpython2 src/pl/plpython

	mv -f src/Makefile.global.save src/Makefile.global

%endif

	pushd contrib

	make MAX_CONNECTIONS=5 check

	popd

	pushd src/interfaces/ecpg

	make MAX_CONNECTIONS=5 check

	popd

%endif

# undo the "make clean" above

%if %test

	pushd src/test/regress

	make all

	popd

%endif

%if %upgrade

	pushd postgresql-%{prevversion}

	# The upgrade build can be pretty stripped-down, but make sure that

	# any options that affect on-disk file layout match the previous

	# major release!  Also, note we intentionally do not use %%configure

	# here, because we *don't* want its ideas about installation paths.

	# The -fno-aggressive-loop-optimizations is hack for #993532

	CFLAGS="$CFLAGS -fno-aggressive-loop-optimizations" ./configure \

		--build=%{_build} \

		--host=%{_host} \

		--prefix=%{_libdir}/pgsql/postgresql-%{prevmajorversion} \

		--disable-rpath \

%if %beta

		--enable-debug \

		--enable-cassert \

%endif

		--with-system-tzdata=/usr/share/zoneinfo

	make %{?_smp_mflags} all

	popd

%endif

%install

make DESTDIR=$RPM_BUILD_ROOT install-world

%if %plpython3

	mv src/Makefile.global src/Makefile.global.save

	cp src/Makefile.global.python3 src/Makefile.global

	touch -r src/Makefile.global.save src/Makefile.global

	pushd src/pl/plpython3

	make DESTDIR=$RPM_BUILD_ROOT install

	popd

	mv -f src/Makefile.global.save src/Makefile.global

%endif

# make sure these directories exist even if we suppressed all contrib modules

install -d -m 755 $RPM_BUILD_ROOT%{_datadir}/pgsql/contrib

install -d -m 755 $RPM_BUILD_ROOT%{_datadir}/pgsql/extension

# multilib header hack; note pg_config.h is installed in two places!

# we only apply this to known Red Hat multilib arches, per bug #177564

case `uname -i` in

  i386 | x86_64 | ppc | ppc64 | s390 | s390x | sparc | sparc64 )

    mv $RPM_BUILD_ROOT/usr/include/pg_config.h $RPM_BUILD_ROOT/usr/include/pg_config_`uname -i`.h

    install -m 644 %{SOURCE6} $RPM_BUILD_ROOT/usr/include/

    mv $RPM_BUILD_ROOT/usr/include/pgsql/server/pg_config.h $RPM_BUILD_ROOT/usr/include/pgsql/server/pg_config_`uname -i`.h

    install -m 644 %{SOURCE6} $RPM_BUILD_ROOT/usr/include/pgsql/server/

    mv $RPM_BUILD_ROOT/usr/include/ecpg_config.h $RPM_BUILD_ROOT/usr/include/ecpg_config_`uname -i`.h

    install -m 644 %{SOURCE7} $RPM_BUILD_ROOT/usr/include/

    ;;

  *)

    ;;

esac

install -d -m 755 $RPM_BUILD_ROOT%{_libdir}/pgsql/tutorial

cp -p src/tutorial/* $RPM_BUILD_ROOT%{_libdir}/pgsql/tutorial

install -m 755 postgresql-setup $RPM_BUILD_ROOT%{_bindir}/postgresql-setup

install -p -m 644 postgresql-setup.1 $RPM_BUILD_ROOT%{_mandir}/man1

install -m 755 postgresql-check-db-dir $RPM_BUILD_ROOT%{_bindir}/postgresql-check-db-dir

install -d $RPM_BUILD_ROOT%{_unitdir}

install -m 644 %{SOURCE10} $RPM_BUILD_ROOT%{_unitdir}/postgresql.service