# ==================

# Top-level metadata

# ==================

Name: python3

Summary: Interpreter of the Python programming language

URL: https://www.python.org/

%global pybasever 3.6

# pybasever without the dot:

%global pyshortver 36

#  WARNING  When rebasing to a new Python version,

#           remember to update the python3-docs package as well

Version: %{pybasever}.8

Release: 11%{?dist}

License: Python

# ==================================

# Conditionals controlling the build

# ==================================

# Note that the bcond macros are named for the CLI option they create.

# "%%bcond_without" means "ENABLE by default and create a --without option"

# Expensive optimizations (mainly, profile-guided optimizations)

%ifarch %{ix86} x86_64

%bcond_without optimizations

%else

# On some architectures, the optimized build takes tens of hours, possibly

# longer than Koji's 24-hour timeout. Disable optimizations here.

%bcond_with optimizations

%endif

# Run the test suite in %%check

%bcond_without tests

# Ability to reuse RPM-installed pip using rewheel

%bcond_without rewheel

# Extra build for debugging the interpreter or C-API extensions

# (the -debug subpackages)

%bcond_without debug_build

# Support for the GDB debugger

%bcond_without gdb_hooks

# The dbm.gnu module (key-value database)

%bcond_without gdbm

# Main interpreter loop optimization

%bcond_without computed_gotos

# Support for the Valgrind debugger/profiler

%ifarch %{valgrind_arches}

%bcond_without valgrind

%else

# Some arches don't have valgrind, disable support for it there.

%bcond_with valgrind

%endif

# ==================================

# Notes from bootstraping Python 3.6

# ==================================

#

# New Python major version (3.X) break ABI and bytecode compatibility,

# so all packages depending on it need to be rebuilt.

#

# Due to a dependency cycle between Python, gdb, rpm, pip, setuptools, wheel,

# and other packages, this isn't straightforward.

# Build in the following order:

#

# 1. At the same time:

#     - gdb without python support (add %%global _without_python 1 on top of

#       gdb's SPEC file)

#     - python-rpm-generators with bootstrapping_python set to 1

#       (this can be done also during step 2., but should be done before 3.)

# 2. python3 without rewheel (use %%bcond_with rewheel instead of

#     %%bcond_without)

# 3. At the same time:

#     - gdb with python support (remove %%global _without_python 1 on top of

#       gdb's SPEC file)

#     - python-rpm-generators with bootstrapping_python set to 0

#       (this can be done at any later step without negative effects)

# 4. rpm

# 5. python-setuptools with bootstrap set to 1

# 6. python-pip with build_wheel set to 0

# 7. python-wheel with %%bcond_without bootstrap

# 8. python-setuptools with bootstrap set to 0 and also with_check set to 0

# 9. python-pip with build_wheel set to 1

# 10. pyparsing

# 11. python3 with rewheel

#

# Then the most important packages have to be built, in dependency order.

# These were:

#   python-sphinx, pytest, python-requests, cloud-init, dnf, anaconda, abrt

#

# After these have been built, a targeted rebuild should be done for the rest.

# =====================

# General global macros

# =====================

%global pylibdir %{_libdir}/python%{pybasever}

%global dynload_dir %{pylibdir}/lib-dynload

# ABIFLAGS, LDVERSION and SOABI are in the upstream configure.ac

# See PEP 3149 for some background: http://www.python.org/dev/peps/pep-3149/

%global ABIFLAGS_optimized m

%global ABIFLAGS_debug     dm

%global LDVERSION_optimized %{pybasever}%{ABIFLAGS_optimized}

%global LDVERSION_debug     %{pybasever}%{ABIFLAGS_debug}

%global SOABI_optimized cpython-%{pyshortver}%{ABIFLAGS_optimized}-%{_arch}-linux%{_gnu}

%global SOABI_debug     cpython-%{pyshortver}%{ABIFLAGS_debug}-%{_arch}-linux%{_gnu}

# All bytecode files are in a __pycache__ subdirectory, with a name

# reflecting the version of the bytecode.

# See PEP 3147: http://www.python.org/dev/peps/pep-3147/

# For example,

#   foo/bar.py

# has bytecode at:

#   foo/__pycache__/bar.cpython-%%{pyshortver}.pyc

#   foo/__pycache__/bar.cpython-%%{pyshortver}.opt-1.pyc

#   foo/__pycache__/bar.cpython-%%{pyshortver}.opt-2.pyc

%global bytecode_suffixes .cpython-%{pyshortver}*.pyc

# Python's configure script defines SOVERSION, and this is used in the Makefile

# to determine INSTSONAME, the name of the libpython DSO:

#   LDLIBRARY='libpython$(VERSION).so'

#   INSTSONAME="$LDLIBRARY".$SOVERSION

# We mirror this here in order to make it easier to add the -gdb.py hooks.

# (if these get out of sync, the payload of the libs subpackage will fail

# and halt the build)

%global py_SOVERSION 1.0

%global py_INSTSONAME_optimized libpython%{LDVERSION_optimized}.so.%{py_SOVERSION}

%global py_INSTSONAME_debug     libpython%{LDVERSION_debug}.so.%{py_SOVERSION}

# Disable automatic bytecompilation. The python3 binary is not yet be

# available in /usr/bin when Python is built. Also, the bytecompilation fails

# on files that test invalid syntax.

%undefine py_auto_byte_compile

# For multilib support, files that are different between 32- and 64-bit arches

# need different filenames. Use "64" or "32" according to the word size.

# Currently, the best way to determine an architecture's word size happens to

# be checking %%{_lib}.

%if "%{_lib}" == "lib64"

%global wordsize 64

%else

%global wordsize 32

%endif

# =======================

# Build-time requirements

# =======================

# (keep this list alphabetized)

BuildRequires: autoconf

BuildRequires: bluez-libs-devel

BuildRequires: bzip2

BuildRequires: bzip2-devel

BuildRequires: desktop-file-utils

BuildRequires: expat-devel

BuildRequires: findutils

BuildRequires: gcc-c++

%if %{with gdbm}

BuildRequires: gdbm-devel >= 1:1.13

%endif

BuildRequires: glibc-devel

BuildRequires: gmp-devel

BuildRequires: libappstream-glib

BuildRequires: libffi-devel

BuildRequires: libnsl2-devel

BuildRequires: libtirpc-devel

BuildRequires: libGL-devel

BuildRequires: libX11-devel

BuildRequires: ncurses-devel

BuildRequires: openssl-devel

BuildRequires: pkgconfig

BuildRequires: readline-devel

BuildRequires: redhat-rpm-config >= 118

BuildRequires: sqlite-devel

BuildRequires: gdb

BuildRequires: tar

BuildRequires: tcl-devel

BuildRequires: tix-devel

BuildRequires: tk-devel

%if %{with valgrind}

BuildRequires: valgrind-devel

%endif

BuildRequires: xz-devel

BuildRequires: zlib-devel

BuildRequires: /usr/bin/dtrace

# workaround http://bugs.python.org/issue19804 (test_uuid requires ifconfig)

BuildRequires: /usr/sbin/ifconfig

%if %{with rewheel}

BuildRequires: python3-setuptools

BuildRequires: python3-pip

# Verify that the BuildRoot includes python36.

# Not actually needed for build.

BuildRequires: python36-devel

%endif

# =======================

# Source code and patches

# =======================

# The upstream tarball includes questionable executable files for Windows,

# which we should not ship even in the SRPM.

# Run the "get-source.sh" with the version as argument to download the upstream

# tarball and generate a version with the .exe files removed. For example:

# $ ./get-source.sh 3.7.0

Source: Python-%{version}-noexe.tar.xz

# A script to remove .exe files from the source distribution

Source1: get-source.sh

# A simple script to check timestamps of bytecode files

# Run in check section with Python that is currently being built

# Written by bkabrda

Source8: check-pyc-and-pyo-timestamps.py

# Desktop menu entry for idle3

Source10: idle3.desktop

# AppData file for idle3

Source11: idle3.appdata.xml

# unversioned-python script

Source12: no-python

# unversioned-python man page

Source13: unversioned-python.1

# 00001 #

# Fixup distutils/unixccompiler.py to remove standard library path from rpath:

# Was Patch0 in ivazquez' python3000 specfile:

Patch1:         00001-rpath.patch

# 00102 #

# Change the various install paths to use /usr/lib64/ instead or /usr/lib

# Only used when "%%{_lib}" == "lib64"

# Not yet sent upstream.

Patch102: 00102-lib64.patch

# 00111 #

# Patch the Makefile.pre.in so that the generated Makefile doesn't try to build

# a libpythonMAJOR.MINOR.a

# See https://bugzilla.redhat.com/show_bug.cgi?id=556092

# Downstream only: not appropriate for upstream

Patch111: 00111-no-static-lib.patch

# 00132 #

# Add non-standard hooks to unittest for use in the "check" phase below, when

# running selftests within the build:

#   @unittest._skipInRpmBuild(reason)

# for tests that hang or fail intermittently within the build environment, and:

#   @unittest._expectedFailureInRpmBuild

# for tests that always fail within the build environment

#

# The hooks only take effect if WITHIN_PYTHON_RPM_BUILD is set in the

# environment, which we set manually in the appropriate portion of the "check"

# phase below (and which potentially other python-* rpms could set, to reuse

# these unittest hooks in their own "check" phases)

Patch132: 00132-add-rpmbuild-hooks-to-unittest.patch

# 00155 #

# Avoid allocating thunks in ctypes unless absolutely necessary, to avoid

# generating SELinux denials on "import ctypes" and "import uuid" when

# embedding Python within httpd

# See https://bugzilla.redhat.com/show_bug.cgi?id=814391

Patch155: 00155-avoid-ctypes-thunks.patch

# 00160 #

# Python 3.3 added os.SEEK_DATA and os.SEEK_HOLE, which may be present in the

# header files in the build chroot, but may not be supported in the running

# kernel, hence we disable this test in an rpm build.

# Adding these was upstream issue http://bugs.python.org/issue10142

# Not yet sent upstream

Patch160: 00160-disable-test_fs_holes-in-rpm-build.patch

# 00163 #

# Some tests within test_socket fail intermittently when run inside Koji;

# disable them using unittest._skipInRpmBuild

# Not yet sent upstream

Patch163: 00163-disable-parts-of-test_socket-in-rpm-build.patch

# 00170 #

# In debug builds, try to print repr() when a C-level assert fails in the

# garbage collector (typically indicating a reference-counting error

# somewhere else e.g in an extension module)

# The new macros/functions within gcmodule.c are hidden to avoid exposing

# them within the extension API.

# Sent upstream: http://bugs.python.org/issue9263

# See https://bugzilla.redhat.com/show_bug.cgi?id=614680

Patch170: 00170-gc-assertions.patch

# 00178 #

# Don't duplicate various FLAGS in sysconfig values

# http://bugs.python.org/issue17679

# Does not affect python2 AFAICS (different sysconfig values initialization)

Patch178: 00178-dont-duplicate-flags-in-sysconfig.patch

# 00189 #

# Add the rewheel module, allowing to recreate wheels from already installed

# ones

# https://github.com/bkabrda/rewheel

Patch189: 00189-add-rewheel-module.patch

# 00205 #

# LIBPL variable in makefile takes LIBPL from configure.ac

# but the LIBPL variable defined there doesn't respect libdir macro

Patch205: 00205-make-libpl-respect-lib64.patch

# 00251

# Set values of prefix and exec_prefix in distutils install command

# to /usr/local if executable is /usr/bin/python* and RPM build

# is not detected to make pip and distutils install into separate location

# Fedora Change: https://fedoraproject.org/wiki/Changes/Making_sudo_pip_safe

Patch251: 00251-change-user-install-location.patch

# 00262 #

# Backport of PEP 538: Coercing the legacy C locale to a UTF-8 based locale

# https://www.python.org/dev/peps/pep-0538/

# Fedora Change: https://fedoraproject.org/wiki/Changes/python3_c.utf-8_locale

# Original proposal: https://bugzilla.redhat.com/show_bug.cgi?id=1404918

Patch262: 00262-pep538_coerce_legacy_c_locale.patch

# 00274 #

# Upstream uses Debian-style architecture naming. Change to match Fedora.

Patch274: 00274-fix-arch-names.patch

# 00294 #

# Define TLS cipher suite on build time depending

# on the OpenSSL default cipher suite selection.

# Fixed upstream on CPython's 3.7 branch:

# https://bugs.python.org/issue31429

# See also: https://bugzilla.redhat.com/show_bug.cgi?id=1489816

Patch294: 00294-define-TLS-cipher-suite-on-build-time.patch

# 00317 #

# Security fix for CVE-2019-5010: Fix segfault in ssl's cert parser

# https://bugzilla.redhat.com/show_bug.cgi?id=1666789

# Fixed upstream: https://bugs.python.org/issue35746

Patch317: 00317-CVE-2019-5010.patch

# 00318 #

# test_ssl fixes for TLS 1.3 and OpenSSL 1.1.1

# https://bugzilla.redhat.com/show_bug.cgi?id=1639531

# https://bugs.python.org/issue32947#msg333990

# https://github.com/python/cpython/pull/11612

Patch318: 00318-test-ssl-fix-for-tls-13.patch

# 00319 #

# Fix test_tarfile on ppc64

# https://bugzilla.redhat.com/show_bug.cgi?id=1639490

# https://bugs.python.org/issue35772

Patch319: 00319-test_tarfile_ppc64.patch

# 00320 #

# Security fix for CVE-2019-9636: Information Disclosure due to urlsplit improper NFKC normalization

# Fixed upstream: https://bugs.python.org/issue36216 and https://bugs.python.org/issue36742

# Resolves: https://bugzilla.redhat.com/show_bug.cgi?id=1689318

Patch320: 00320-CVE-2019-9636.patch

# 00324 #

# Disallow control chars in http URLs

# Security fix for CVE-2019-9740 and CVE-2019-9947

# Fixed upstream: https://bugs.python.org/issue30458

# Resolves: https://bugzilla.redhat.com/show_bug.cgi?id=1704365

# and https://bugzilla.redhat.com/show_bug.cgi?id=1703531

Patch324: 00324-disallow-control-chars-in-http-urls.patch

# 00325 #

# Unnecessary URL scheme exists to allow local_file:// reading file  in urllib

# Security fix for CVE-2019-9948

# Fixed upstream: https://bugs.python.org/issue35907

# Resolves: https://bugzilla.redhat.com/show_bug.cgi?id=1714643

Patch325: 00325-CVE-2019-9948.patch

# (New patches go here ^^^)

#

# When adding new patches to "python" and "python3" in Fedora, EL, etc.,

# please try to keep the patch numbers in-sync between all specfiles.

#

# More information, and a patch number catalog, is at:

#

#     https://fedoraproject.org/wiki/SIGs/Python/PythonPatches

# ==========================================

# Descriptions, and metadata for subpackages

# ==========================================

%package -n platform-python

Summary: Internal interpreter of the Python programming language

Conflicts: python3 < 3.6.6-13

# Packages with Python modules in standard locations automatically

# depend on python(abi). Provide that here.

Provides: python(abi) = %{pybasever}

Requires: %{name}-libs%{?_isa} = %{version}-%{release}

%if %{with rewheel}

Requires: platform-python-setuptools

Requires: platform-python-pip

%endif

# Runtime require alternatives

Requires:         %{_sbindir}/alternatives

Requires(post):   %{_sbindir}/alternatives

Requires(postun): %{_sbindir}/alternatives

# This prevents ALL subpackages built from this spec to require

# /usr/bin/python3*. Granularity per subpackage is impossible.

# It's intended for the libs package not to drag in the interpreter, see

# https://bugzilla.redhat.com/show_bug.cgi?id=1547131

# All others require %%{name} anyway.

%global __requires_exclude ^/usr/bin/python3

# The description is the same for the SRPM and the main `platform-python` subpackage:

%description

This is the internal interpreter of the Python language for the system.

To use Python yourself, please install one of the available Python 3 packages,

for example python36.

# The description is the same for the SRPM and the main `platform-python` subpackage:

%description -n platform-python

This is the internal interpreter of the Python language for the system.

To use Python yourself, please install one of the available Python 3 packages,

for example python36.

%package libs

Summary:        Python runtime libraries

# The "enum" module is included in the standard library.

# Provide an upgrade path from the external library.

Provides: python3-enum34 = 1.0.4-5%{?dist}

Obsoletes: python3-enum34 < 1.0.4-5%{?dist}

# Python 3 built with glibc >= 2.24.90-26 needs to require it

# See https://bugzilla.redhat.com/show_bug.cgi?id=1410644

Requires: glibc%{?_isa} >= 2.24.90-26

Requires: chkconfig

%if %{with gdbm}

# When built with this (as guarded by the BuildRequires above), require it

Requires: gdbm%{?_isa} >= 1:1.13

%endif

# There are files in the standard library that have python shebang.

# We've filtered the automatic requirement out so libs are installable without

# the main package. This however makes it pulled in by default.

# See https://bugzilla.redhat.com/show_bug.cgi?id=1547131

Recommends: platform-python%{?_isa} = %{version}-%{release}

%description libs

This package contains runtime libraries for use by Python:

- the majority of the Python standard library

- a dynamically linked library for use by applications that embed Python as

  a scripting language, and by the main "python3" executable

# The contents of this package were moved into the `platform-python-devel` subpackage.

# See a comment above the definition of that subpackage for details.

%package devel

Summary: Libraries and header files needed for Python development

Requires: platform-python-devel%{?_isa} = %{version}-%{release}

Requires: platform-python = %{version}-%{release}

Requires: python36-devel

%description devel

This package contains the header files and configuration needed to compile

Python extension modules (typically written in C or C++), to embed Python

into other programs, and to make binary distributions for Python libraries.

It also contains the necessary macros to build RPM packages with Python modules

and 2to3 tool, an automatic source converter from Python 2.X.

It also makes the "python3" and "python3-config" commands available

for compatibility with some build systems.

When building packages, prefer requiring platform-python-devel and using

the %%{__python3} macro instead, if possible.

# The `platform-python-devel` (previously python3-libs-devel)

# subpackage was created because the `python3-devel` subpackage needs

# to pull into the buildroot the /usr/bin/python3{,-config} symlinks (for old

# buildsystems that are hard to switch to platform-python). But these symlinks

# cannot be shipped in RHEL8 to customers. Therefore we'll ship only

# `platform-python-devel` and have the `python3-devel` package require it in

# the buildroot, as well as pull in the symlinks.

%package -n platform-python-devel

Summary: Libraries and header files needed for Python development

Provides: %{name}-libs-devel = %{version}-%{release}

Provides: %{name}-libs-devel%{?_isa} = %{version}-%{release}

Obsoletes: %{name}-libs-devel < 3.6.6-12

Requires: platform-python = %{version}-%{release}

Requires: %{name}-libs%{?_isa} = %{version}-%{release}

BuildRequires: python-rpm-macros

Requires: python-rpm-macros

Requires: python3-rpm-macros

Requires: python3-rpm-generators

Provides: %{name}-2to3 = %{version}-%{release}

Provides: 2to3 = %{version}-%{release}

Conflicts: platform-python < %{version}-%{release}

Conflicts: python3 < 3.6.6-9

%description -n platform-python-devel

This package contains the header files and configuration needed to compile

Python extension modules (typically written in C or C++), to embed Python

into other programs, and to make binary distributions for Python libraries.

It also contains the necessary macros to build RPM packages with Python modules

and 2to3 tool, an automatic source converter from Python 2.X.

%package idle

Summary: A basic graphical development environment for Python

Requires: platform-python = %{version}-%{release}

Requires: %{name}-tkinter = %{version}-%{release}

Provides: idle3 = %{version}-%{release}

Provides: %{name}-tools = %{version}-%{release}

Provides: %{name}-tools%{?_isa} = %{version}-%{release}

Obsoletes: %{name}-tools < %{version}-%{release}

# python36 installs the alternatives master symlink to which we attach a slave

Requires: python36

Requires(post): python36

Requires(postun): python36

%description idle

IDLE is Python’s Integrated Development and Learning Environment.

IDLE has the following features: Python shell window (interactive

interpreter) with colorizing of code input, output, and error messages;

multi-window text editor with multiple undo, Python colorizing,

smart indent, call tips, auto completion, and other features;

search within any window, replace within editor windows, and

search through multiple files (grep); debugger with persistent

breakpoints, stepping, and viewing of global and local namespaces;

configuration, browsers, and other dialogs.

%package tkinter

Summary: A GUI toolkit for Python

Requires: platform-python = %{version}-%{release}

%description tkinter

The Tkinter (Tk interface) library is a graphical user interface toolkit for

the Python programming language.

%package test

Summary: The self-test suite for the main python3 package

Requires: platform-python = %{version}-%{release}

Requires: %{name}-libs%{?_isa} = %{version}-%{release}

%description test

The self-test suite for the Python interpreter.

This is only useful to test Python itself. For testing general Python code,

you should use the unittest module from %{name}-libs, or a library such as

%{name}-pytest or %{name}-nose.

%if %{with debug_build}

%package -n platform-python-debug

Conflicts: python3-debug < 3.6.6-13

Summary: Debug version of the Python runtime

# The debug build is an all-in-one package version of the regular build, and

# shares the same .py/.pyc files and directories as the regular build. Hence

# we depend on all of the subpackages of the regular build:

Requires: platform-python%{?_isa} = %{version}-%{release}

Requires: %{name}-libs%{?_isa} = %{version}-%{release}

Requires: platform-python-devel%{?_isa} = %{version}-%{release}

Requires: %{name}-test%{?_isa} = %{version}-%{release}

Requires: %{name}-tkinter%{?_isa} = %{version}-%{release}

Requires: %{name}-idle%{?_isa} = %{version}-%{release}

%description -n platform-python-debug

python3-debug provides a version of the Python runtime with numerous debugging

features enabled, aimed at advanced Python users such as developers of Python

extension modules.

This version uses more memory and will be slower than the regular Python build,

but is useful for tracking down reference-counting issues and other bugs.

The bytecode format is unchanged, so that .pyc files are compatible between

this and the standard version of Python, but the debugging features mean that

C/C++ extension modules are ABI-incompatible and must be built for each version

separately.

The debug build shares installation directories with the standard Python

runtime, so that .py and .pyc files can be shared.

Compiled extension modules use a special ABI flag ("d") in the filename,

so extensions for both versions can co-exist in the same directory.

%endif # with debug_build

# ======================================================

# The prep phase of the build:

# ======================================================

%prep

%setup -q -n Python-%{version}%{?prerel}

# Remove bundled libraries to ensure that we're using the system copy.

rm -r Modules/expat

rm -r Modules/zlib

%if %{with rewheel}

%global pip_version %(pip%{pybasever} --version | cut -d' ' -f2)

sed -r -i s/'_PIP_VERSION = "[0-9.]+"'/'_PIP_VERSION = "%{pip_version}"'/ Lib/ensurepip/__init__.py

%endif

#

# Apply patches:

#

%patch1 -p1

%if "%{_lib}" == "lib64"

%patch102 -p1

%endif

%patch111 -p1

%patch132 -p1

%patch155 -p1

%patch160 -p1

%patch163 -p1

%patch170 -p1

%patch178 -p1

%if %{with rewheel}

%patch189 -p1

%endif

%patch205 -p1

%patch251 -p1

%patch262 -p1

%patch274 -p1

%patch294 -p1

%patch317 -p1

%patch318 -p1

%patch319 -p1

%patch320 -p1

%patch324 -p1

%patch325 -p1

# Remove files that should be generated by the build

# (This is after patching, so that we can use patches directly from upstream)

rm configure pyconfig.h.in

# ======================================================

# Configuring and building the code:

# ======================================================

%build

# Regenerate the configure script and pyconfig.h.in

autoconf

autoheader

# Remember the current directory (which has sources and the configure script),

# so we can refer to it after we "cd" elsewhere.

topdir=$(pwd)

# Get proper option names from bconds

%if %{with computed_gotos}

%global computed_gotos_flag yes

%else

%global computed_gotos_flag no

%endif

%if %{with optimizations}

%global optimizations_flag "--enable-optimizations"

%else

%global optimizations_flag "--disable-optimizations"

%endif

# Set common compiler/linker flags

# We utilize the %%extension_...flags macros here so users building C/C++

# extensions with our python won't get all the compiler/linker flags used

# in RHEL RPMs.

# Standard library built here will still use the %%build_...flags,

# RHEL packages utilizing %%py3_build will use them as well

# https://fedoraproject.org/wiki/Changes/Python_Extension_Flags

export CFLAGS="%{extension_cflags} -D_GNU_SOURCE -fPIC -fwrapv"