# ==================

# Top-level metadata

# ==================

%global pybasever 3.8

# pybasever without the dot:

%global pyshortver 38

Name: python38

Summary: Interpreter of the Python programming language

URL: https://www.python.org/

#  WARNING  When rebasing to a new Python version,

#           remember to update the python3-docs package as well

%global general_version %{pybasever}.0

#global prerel ...

%global upstream_version %{general_version}%{?prerel}

Version: %{general_version}%{?prerel:~%{prerel}}

Release: 10%{?dist}

License: Python

# Exclude i686 arch. Due to a modularity issue it's being added to the

# x86_64 compose of CRB, but we don't want to ship it at all.

# See: https://projects.engineering.redhat.com/browse/RCM-72605

ExcludeArch: i686

# ==================================

# Conditionals controlling the build

# ==================================

# Note that the bcond macros are named for the CLI option they create.

# "%%bcond_without" means "ENABLE by default and create a --without option"

# Flat package, i.e. python36, python37, python38 for tox etc.

# WARNING: This also influences the main_python bcond below.

# in Fedora, never turn this on for the python3 package

# and always keep it on for python37 etc.

# WARNING: This does not change the package name and summary above.

%bcond_with flatpackage

# Main Python, i.e. whether this is the main Python version in the distribution

# that owns /usr/bin/python3 and other unique paths

%bcond_with main_python

# When bootstrapping python3, we need to build setuptools.

# but setuptools BR python3-devel and that brings in python3-rpm-generators;

# python3-rpm-generators needs python3-setuptools, so we cannot have it yet.

#

# Procedure: https://fedoraproject.org/wiki/SIGs/Python/UpgradingPython

#

#   IMPORTANT: When bootstrapping, it's very likely the wheels for pip and

#   setuptools are not available. Turn off the rpmwheels bcond until

#   the two packages are built with wheels to get around the issue.

%bcond_with bootstrap

# Whether to use RPM build wheels from the python-{pip,setuptools}-wheel package

# Uses upstream bundled prebuilt wheels otherwise

%bcond_without rpmwheels

# Expensive optimizations (mainly, profile-guided optimizations)

%bcond_without optimizations

# Run the test suite in %%check

%bcond_without tests

# Extra build for debugging the interpreter or C-API extensions

# (the -debug subpackages)

%if %{with flatpackage}

%bcond_with debug_build

%else

%bcond_without debug_build

%endif

# Support for the GDB debugger

%bcond_without gdb_hooks

# The dbm.gnu module (key-value database)

%bcond_without gdbm

# Main interpreter loop optimization

%bcond_without computed_gotos

# Support for the Valgrind debugger/profiler

%ifarch %{valgrind_arches}

%bcond_without valgrind

%else

%bcond_with valgrind

%endif

# =====================

# General global macros

# =====================

# Set python3_pkgversion so that python_provide macro works for python38-

# prefixes in this spec file

# This is also set in the python38-rpm-macros package so that it works in other

# packages of this module.

%global python3_pkgversion 38

%global pylibdir %{_libdir}/python%{pybasever}

%global dynload_dir %{pylibdir}/lib-dynload

# ABIFLAGS, LDVERSION and SOABI are in the upstream configure.ac

# See PEP 3149 for some background: http://www.python.org/dev/peps/pep-3149/

%global ABIFLAGS_optimized %{nil}

%global ABIFLAGS_debug     d

%global LDVERSION_optimized %{pybasever}%{ABIFLAGS_optimized}

%global LDVERSION_debug     %{pybasever}%{ABIFLAGS_debug}

%global SOABI_optimized cpython-%{pyshortver}%{ABIFLAGS_optimized}-%{_arch}-linux%{_gnu}

%global SOABI_debug     cpython-%{pyshortver}%{ABIFLAGS_debug}-%{_arch}-linux%{_gnu}

# All bytecode files are in a __pycache__ subdirectory, with a name

# reflecting the version of the bytecode.

# See PEP 3147: http://www.python.org/dev/peps/pep-3147/

# For example,

#   foo/bar.py

# has bytecode at:

#   foo/__pycache__/bar.cpython-%%{pyshortver}.pyc

#   foo/__pycache__/bar.cpython-%%{pyshortver}.opt-1.pyc

#   foo/__pycache__/bar.cpython-%%{pyshortver}.opt-2.pyc

%global bytecode_suffixes .cpython-%{pyshortver}*.pyc

# Python's configure script defines SOVERSION, and this is used in the Makefile

# to determine INSTSONAME, the name of the libpython DSO:

#   LDLIBRARY='libpython$(VERSION).so'

#   INSTSONAME="$LDLIBRARY".$SOVERSION

# We mirror this here in order to make it easier to add the -gdb.py hooks.

# (if these get out of sync, the payload of the libs subpackage will fail

# and halt the build)

%global py_SOVERSION 1.0

%global py_INSTSONAME_optimized libpython%{LDVERSION_optimized}.so.%{py_SOVERSION}

%global py_INSTSONAME_debug     libpython%{LDVERSION_debug}.so.%{py_SOVERSION}

# Disable automatic bytecompilation. The python3 binary is not yet be

# available in /usr/bin when Python is built. Also, the bytecompilation fails

# on files that test invalid syntax.

%undefine py_auto_byte_compile

# For multilib support, files that are different between 32- and 64-bit arches

# need different filenames. Use "64" or "32" according to the word size.

# Currently, the best way to determine an architecture's word size happens to

# be checking %%{_lib}.

%if "%{_lib}" == "lib64"

%global wordsize 64

%else

%global wordsize 32

%endif

# =======================

# Build-time requirements

# =======================

# (keep this list alphabetized)

BuildRequires: autoconf

BuildRequires: bluez-libs-devel

BuildRequires: bzip2

BuildRequires: bzip2-devel

BuildRequires: desktop-file-utils

BuildRequires: expat-devel

BuildRequires: findutils

BuildRequires: gcc-c++

%if %{with gdbm}

BuildRequires: gdbm-devel

%endif

BuildRequires: glibc-all-langpacks

BuildRequires: glibc-devel

BuildRequires: gmp-devel

BuildRequires: libappstream-glib

BuildRequires: libffi-devel

BuildRequires: libnsl2-devel

BuildRequires: libtirpc-devel

BuildRequires: libGL-devel

BuildRequires: libuuid-devel

BuildRequires: libX11-devel

BuildRequires: ncurses-devel

BuildRequires: openssl-devel

BuildRequires: pkgconfig

BuildRequires: readline-devel

BuildRequires: redhat-rpm-config

BuildRequires: sqlite-devel

BuildRequires: gdb

BuildRequires: tar

BuildRequires: tcl-devel

BuildRequires: tix-devel

BuildRequires: tk-devel

%if %{with valgrind}

BuildRequires: valgrind-devel

%endif

BuildRequires: xz-devel

BuildRequires: zlib-devel

BuildRequires: /usr/bin/dtrace

# workaround http://bugs.python.org/issue19804 (test_uuid requires ifconfig)

BuildRequires: /usr/sbin/ifconfig

# For %%python_provide

BuildRequires: python-rpm-macros

%if %{with rpmwheels}

BuildRequires: python38-setuptools-wheel

BuildRequires: python38-pip-wheel

%endif

%if %{without bootstrap}

# for make regen-all and distutils.tests.test_bdist_rpm

BuildRequires: python%{pyshortver}

%endif

# =======================

# Source code and patches

# =======================

Source0: %{url}ftp/python/%{general_version}/Python-%{upstream_version}.tar.xz

Source1: %{url}ftp/python/%{general_version}/Python-%{upstream_version}.tar.xz.asc

Source2: %{url}static/files/pubkeys.txt

Source3: macros.python38

# A simple script to check timestamps of bytecode files

# Run in check section with Python that is currently being built

# Originally written by bkabrda

Source8: check-pyc-timestamps.py

# Desktop menu entry for idle3

Source10: idle3.desktop

# AppData file for idle3

Source11: idle3.appdata.xml

# 00001 #

# Fixup distutils/unixccompiler.py to remove standard library path from rpath:

# Was Patch0 in ivazquez' python3000 specfile:

Patch1:         00001-rpath.patch

# 00102 #

# Change the various install paths to use /usr/lib64/ instead or /usr/lib

# Only used when "%%{_lib}" == "lib64"

# Not yet sent upstream.

Patch102: 00102-lib64.patch

# 00111 #

# Patch the Makefile.pre.in so that the generated Makefile doesn't try to build

# a libpythonMAJOR.MINOR.a

# See https://bugzilla.redhat.com/show_bug.cgi?id=556092

# Downstream only: not appropriate for upstream

Patch111: 00111-no-static-lib.patch

# 00189 #

# Instead of bundled wheels, use our RPM packaged wheels from

# /usr/share/python38-wheels

Patch189: 00189-use-rpm-wheels.patch

# 00251

# Set values of prefix and exec_prefix in distutils install command

# to /usr/local if executable is /usr/bin/python* and RPM build

# is not detected to make pip and distutils install into separate location

# Fedora Change: https://fedoraproject.org/wiki/Changes/Making_sudo_pip_safe

Patch251: 00251-change-user-install-location.patch

# 00274 #

# Upstream uses Debian-style architecture naming. Change to match Fedora.

Patch274: 00274-fix-arch-names.patch

# 00328 #

# Restore pyc to TIMESTAMP invalidation mode as default in rpmbubild

# See https://src.fedoraproject.org/rpms/redhat-rpm-config/pull-request/57#comment-27426

Patch328: 00328-pyc-timestamp-invalidation-mode.patch

# 00329 #

# Support OpenSSL FIPS mode

# - Fallback implementations md5, sha1, sha256, sha512 are removed in favor of OpenSSL wrappers

# - In FIPS mode, OpenSSL wrappers are always used in hashlib

# - add a new "usedforsecurity" keyword argument to the various digest

#   algorithms in hashlib so that you can whitelist a callsite with

#   "usedforsecurity=False"

#   The change has been implemented upstream since Python 3.9:

#   https://bugs.python.org/issue9216

# - OpenSSL wrappers for the hashes blake2{b512,s256},

#     sha3_{224,256,384,512}, shake_{128,256} are now exported from _hashlib

# - In FIPS mode, the blake2, sha3 and shake hashes use OpenSSL wrappers

#   and do not offer extended functionality (keys, tree hashing, custom digest size)

# - In FIPS mode, hmac.HMAC can only be instantiated with an OpenSSL wrapper

#   or an string with OpenSSL hash name as the "digestmod" argument.

#   The argument must be specified (instead of defaulting to ‘md5’).

#

# - Also while in FIPS mode, we utilize OpenSSL's DRBG and disable the

#   os.getrandom() function.

#

# Resolves: rhbz#1731424

Patch329: 00329-fips.patch

# 00337 #

# Adjust the test_min_max_version in test_ssl to accept the new settings in

# RHEL 8.2 where maximum_version is set to TLS 1.3

Patch337: 00337-test_ssl-test_min_max_version-add-range.patch

# 00345 #

# Skip from test_site the test_startup_imports case if a path of sys.path

# contains a .pth file

# Fixed upstream: https://bugs.python.org/issue27807

# Resolves: https://bugzilla.redhat.com/show_bug.cgi?id=1815643

Patch345: 00345-fix-test_site-with-extra-pth-files.patch

# 00346 #

# Fix CVE-2020-8492: wrong backtracking in urllib.request.AbstractBasicAuthHandler allows for a ReDoS

# Fixed upstream: https://bugs.python.org/issue39503

# Resolves: https://bugzilla.redhat.com/show_bug.cgi?id=1810622

Patch346: 00346-CVE-2020-8492.patch

# 00347 #

# The ensurepip module now invokes pip via the runpy module.

# Hence it is no longer tightly coupled with the internal API of the bundled

# pip version, allowing easier updates to a newer pip version both

# internally and for distributors.

# Backported from upstream during an update of pip from 19.2.3 to 19.3.1

# https://github.com/python/cpython/commit/88f82b2b9ea3514359cb6e3218121f75334063ac

Patch347: 00347-ensurepip-invokes-pip-via-runpy.patch

# (New patches go here ^^^)

#

# When adding new patches to "python" and "python3" in Fedora, EL, etc.,

# please try to keep the patch numbers in-sync between all specfiles.

#

# More information, and a patch number catalog, is at:

#

#     https://fedoraproject.org/wiki/SIGs/Python/PythonPatches

#

# The patches are stored and rebased at:

#

#     https://github.com/fedora-python/cpython

# ==========================================

# Descriptions, and metadata for subpackages

# ==========================================

# People might want to dnf install pythonX.Y instead of pythonXY;

# we enable this in both flat and nonflat package.

Provides: python%{pybasever} = %{version}-%{release}

# When the user tries to `yum install python`, yum will list this package among

# the possible alternatives

Provides: alternative-for(python)

# Runtime require alternatives

Requires:         %{_sbindir}/alternatives

Requires(post):   %{_sbindir}/alternatives

Requires(postun): %{_sbindir}/alternatives

%if %{without flatpackage}

# Packages with Python modules in standard locations automatically

# depend on python(abi). Provide that here.

Provides: python(abi) = %{pybasever}

Requires: %{name}-libs%{?_isa} = %{version}-%{release}

# In order to support multiple Python interpreters for development purposes,

# packages with the naming scheme flatpackage (e.g. python35) exist for

# non-default versions of Python 3.

# For consistency, and to keep the upgrade path clean, we Provide/Obsolete

# these names here.

Provides: python%{pyshortver} = %{version}-%{release}

%if %{with main_python}

# https://fedoraproject.org/wiki/Changes/Move_usr_bin_python_into_separate_package

# https://fedoraproject.org/wiki/Changes/Python_means_Python3

# We recommend /usr/bin/python so users get it by default

# Versioned recommends are problematic, and we know that the package requires

# python3 back with fixed version, so we just use the path here:

Recommends: %{_bindir}/python

%endif

# In Fedora 31, /usr/bin/pydoc was moved here from Python 2.

# Ideally we'd have an explicit conflict with "/usr/bin/pydoc < 3",

# but file provides aren't versioned and the file moved across packages.

# Instead, we rely on the conflict in python3-libs.

# Previously, this was required for our rewheel patch to work.

# This is technically no longer needed, but we keep it recommended

# for the developer experience.

Recommends: python38-setuptools

Recommends: python38-pip

# This prevents ALL subpackages built from this spec to require

# /usr/bin/python3*. Granularity per subpackage is impossible.

# It's intended for the libs package not to drag in the interpreter, see

# https://bugzilla.redhat.com/show_bug.cgi?id=1547131

# All others require %%{name} anyway.

%global __requires_exclude ^/usr/bin/python3

# The description used both for the SRPM and the main `python3` subpackage:

%description

Python is an accessible, high-level, dynamically typed, interpreted programming

language, designed with an emphasis on code readability.

It includes an extensive standard library, and has a vast ecosystem of

third-party libraries.

The %{name} package provides the "python3" executable: the reference

interpreter for the Python language, version 3.

The majority of its standard library is provided in the %{name}-libs package,

which should be installed automatically along with %{name}.

The remaining parts of the Python standard library are broken out into the

%{name}-tkinter and %{name}-test packages, which may need to be installed

separately.

Documentation for Python is provided in the %{name}-docs package.

Packages containing additional libraries for Python are generally named with

the "%{name}-" prefix.

For the unversioned "python" executable, see manual page "unversioned-python".

%if %{with main_python}

# https://fedoraproject.org/wiki/Changes/Move_usr_bin_python_into_separate_package

# https://fedoraproject.org/wiki/Changes/Python_means_Python3

%package -n python-unversioned-command

Summary: The "python" command that runs Python 3

BuildArch: noarch

# In theory this could require any python3 version

Requires: python3 == %{version}-%{release}

# But since we want to provide versioned python, we require exact version

Provides: python = %{version}-%{release}

# This also save us an explicit conflict for older python3 builds

%description -n python-unversioned-command

This package contains /usr/bin/python - the "python" command that runs Python 3.

%endif # with main_python

%package libs

Summary:        Python runtime libraries

%if %{with rpmwheels}

Requires: python38-setuptools-wheel

Requires: python38-pip-wheel

%else

Provides: bundled(python38-pip) = 19.2.3

Provides: bundled(python38-setuptools) = 41.2.0

%endif

%{?python_provide:%python_provide python38-libs}

# There are files in the standard library that have python shebang.

# We've filtered the automatic requirement out so libs are installable without

# the main package. This however makes it pulled in by default.

# See https://bugzilla.redhat.com/show_bug.cgi?id=1547131

Recommends: %{name}%{?_isa} = %{version}-%{release}

%description libs

This package contains runtime libraries for use by Python:

- the majority of the Python standard library

- a dynamically linked library for use by applications that embed Python as

  a scripting language, and by the main "python3" executable

%package devel

Summary: Libraries and header files needed for Python development

Requires: %{name} = %{version}-%{release}

Requires: %{name}-libs%{?_isa} = %{version}-%{release}

BuildRequires: python-rpm-macros

# The RPM related dependencies bring nothing to a non-RPM Python developer

# But we want them when packages BuildRequire python3-devel

Requires: (python-rpm-macros if rpm-build)

Requires: (python3-rpm-macros if rpm-build)

# python38 installs the alternatives master symlink to which we attach a slave

Requires(post): python38

Requires(postun): python38

%if %{without bootstrap}

# This is not "API" (packages that need setuptools should still BuildRequire it)

# However some packages apparently can build both with and without setuptools

# producing egg-info as file or directory (depending on setuptools presence).

# Directory-to-file updates are problematic in RPM, so we ensure setuptools is

# installed when -devel is required.

# See https://bugzilla.redhat.com/show_bug.cgi?id=1623914

# See https://fedoraproject.org/wiki/Packaging:Directory_Replacement

Requires: (python38-setuptools if rpm-build)

%endif

Requires: (python3-rpm-generators if rpm-build)

%{?python_provide:%python_provide python38-devel}

%description devel

This package contains the header files and configuration needed to compile

Python extension modules (typically written in C or C++), to embed Python

into other programs, and to make binary distributions for Python libraries.

It also contains the necessary macros to build RPM packages with Python modules

and 2to3 tool, an automatic source converter from Python 2.X.

If you want to build an RPM against the python38 module, you also need to

install the python38-rpm-macros package.

%package idle

Summary: A basic graphical development environment for Python

Requires: %{name} = %{version}-%{release}

Requires: %{name}-tkinter = %{version}-%{release}

%{?python_provide:%python_provide python38-idle}

# python38 installs the alternatives master symlink to which we attach a slave

Requires(post): python38

Requires(postun): python38

%description idle

IDLE is Python’s Integrated Development and Learning Environment.

IDLE has the following features: Python shell window (interactive

interpreter) with colorizing of code input, output, and error messages;

multi-window text editor with multiple undo, Python colorizing,

smart indent, call tips, auto completion, and other features;

search within any window, replace within editor windows, and

search through multiple files (grep); debugger with persistent

breakpoints, stepping, and viewing of global and local namespaces;

configuration, browsers, and other dialogs.

%package tkinter

Summary: A GUI toolkit for Python

Requires: %{name} = %{version}-%{release}

%{?python_provide:%python_provide python38-tkinter}

%description tkinter

The Tkinter (Tk interface) library is a graphical user interface toolkit for

the Python programming language.

%package test

Summary: The self-test suite for the main python3 package

Requires: %{name} = %{version}-%{release}

Requires: %{name}-libs%{?_isa} = %{version}-%{release}

%{?python_provide:%python_provide python38-test}

%description test

The self-test suite for the Python interpreter.

This is only useful to test Python itself. For testing general Python code,

you should use the unittest module from %{name}-libs, or a library such as

%{name}-pytest or %{name}-nose.

%if %{with debug_build}

%package debug

Summary: Debug version of the Python runtime

# The debug build is an all-in-one package version of the regular build, and

# shares the same .py/.pyc files and directories as the regular build. Hence

# we depend on all of the subpackages of the regular build:

Requires: %{name}%{?_isa} = %{version}-%{release}

Requires: %{name}-libs%{?_isa} = %{version}-%{release}

Requires: %{name}-devel%{?_isa} = %{version}-%{release}

Requires: %{name}-test%{?_isa} = %{version}-%{release}

Requires: %{name}-tkinter%{?_isa} = %{version}-%{release}

Requires: %{name}-idle%{?_isa} = %{version}-%{release}

# python38 installs the alternatives master symlink to which we attach a slave

Requires(post): python38

Requires(postun): python38

%{?python_provide:%python_provide python38-debug}

%description debug

python38-debug provides a version of the Python runtime with numerous debugging

features enabled, aimed at advanced Python users such as developers of Python

extension modules.

This version uses more memory and will be slower than the regular Python build,

but is useful for tracking down reference-counting issues and other bugs.

The debug build shares installation directories with the standard Python

runtime. Python modules -- source (.py), bytecode (.pyc), and C-API extensions

(.cpython*.so) -- are compatible between this and the standard version

of Python.

The debug runtime additionally supports debug builds of C-API extensions

(with the "d" ABI flag) for debugging issues in those extensions.

%endif # with debug_build

%else  # with flatpackage

# We'll not provide this, on purpose

# No package in Fedora shall ever depend on flatpackage via this

%global __requires_exclude ^python\\(abi\\) = 3\\..$

%global __provides_exclude ^python\\(abi\\) = 3\\..$

%if %{with rpmwheels}

Requires: python38-setuptools-wheel

Requires: python38-pip-wheel

%else

Provides: bundled(python38-pip) = 19.2.3

Provides: bundled(python38-setuptools) = 41.2.0

%endif

# The description for the flat package

%description

Python %{pybasever} package for developers.

This package exists to allow developers to test their code against a newer

version of Python. This is not a full Python stack and if you wish to run

your applications with Python %{pybasever}, update your Fedora to a newer

version once Python %{pybasever} is stable.

%endif # with flatpackage

%package -n python38-rpm-macros

Summary:    RPM macros for building RPMs with Python 3.8

Provides:   python38-modular-devel = %{version}-%{release}

Provides:   python-modular-rpm-macros == 3.8

Conflicts:  python-modular-rpm-macros > 3.8

Requires:   python3-rpm-macros

BuildArch:  noarch

%description -n python38-rpm-macros

RPM macros for building RPMs with Python 3.8 from the python38 module.

If you want to build an RPM against the python38 module, you need to

BuildRequire: python38-rpm-macros.

# ======================================================

# The prep phase of the build:

# ======================================================

%prep

%setup -q -n Python-%{upstream_version}

# Remove all exe files to ensure we are not shipping prebuilt binaries

# note that those are only used to create Microsoft Windows installers

# and that functionality is broken on Linux anyway

find -name '*.exe' -print -delete

# Remove bundled libraries to ensure that we're using the system copy.

rm -r Modules/expat

#

# Apply patches:

#

%patch1 -p1

%if "%{_lib}" == "lib64"

%patch102 -p1

%endif

%patch111 -p1

%if %{with rpmwheels}

%patch189 -p1

rm Lib/ensurepip/_bundled/*.whl

%endif

%patch251 -p1

%patch274 -p1

%patch328 -p1

%patch329 -p1

%patch337 -p1

%patch345 -p1

%patch346 -p1

%patch347 -p1

# Remove files that should be generated by the build

# (This is after patching, so that we can use patches directly from upstream)

rm configure pyconfig.h.in

# ======================================================

# Configuring and building the code:

# ======================================================

%build

# Regenerate the configure script and pyconfig.h.in

autoconf

autoheader

# Remember the current directory (which has sources and the configure script),

# so we can refer to it after we "cd" elsewhere.

topdir=$(pwd)

# Get proper option names from bconds

%if %{with computed_gotos}

%global computed_gotos_flag yes

%else

%global computed_gotos_flag no

%endif

%if %{with optimizations}

%global optimizations_flag "--enable-optimizations"

%else

%global optimizations_flag "--disable-optimizations"

%endif

# Set common compiler/linker flags

# We utilize the %%extension_...flags macros here so users building C/C++

# extensions with our python won't get all the compiler/linker flags used

# in Fedora RPMs.

# Standard library built here will still use the %%build_...flags,

# Fedora packages utilizing %%py3_build will use them as well

# https://fedoraproject.org/wiki/Changes/Python_Extension_Flags

export CFLAGS="%{extension_cflags} -D_GNU_SOURCE -fPIC -fwrapv"

export CFLAGS_NODIST="%{build_cflags} -D_GNU_SOURCE -fPIC -fwrapv -fno-semantic-interposition"