#global commit c4b843473a75fb38ed5bf54e9d3cfb1cb3719efa

%{?commit:%global shortcommit %(c=%{commit}; echo ${c:0:7})}

#global stable 1

# We ship a .pc file but don't want to have a dep on pkg-config. We

# strip the automatically generated dep here and instead co-own the

# directory.

%global __requires_exclude pkg-config

%global pkgdir %{_prefix}/lib/systemd

%global system_unit_dir %{pkgdir}/system

%global user_unit_dir %{pkgdir}/user

%if 0%{?__isa_bits} == 64

%global elf_bits (64bit)

%global elf_suffix ()%{elf_bits}

%endif

# Bootstrap may be needed to break intercircular dependencies with

# cryptsetup, e.g. when re-building cryptsetup on a json-c SONAME-bump.

%bcond_with    bootstrap

%bcond_without tests

%bcond_without lto

# Support for quick builds with rpmbuild --build-in-place.

# See README.build-in-place.

%bcond_with    inplace

Name:           systemd

Url:            https://www.freedesktop.org/wiki/Software/systemd

%if %{without inplace}

Version:        250~rc3

Release:        1%{?dist}

%else

# determine the build information from local checkout

Version:        %(tools/meson-vcs-tag.sh . error | sed -r 's/-([0-9])/.^\1/; s/-g/_g/')

Release:        1

%endif

# For a breakdown of the licensing, see README

License:        LGPLv2+ and MIT and GPLv2+

Summary:        System and Service Manager

# download tarballs with "spectool -g systemd.spec"

%if %{defined commit}

Source0:        https://github.com/systemd/systemd%{?stable:-stable}/archive/%{commit}/%{name}-%{shortcommit}.tar.gz

%else

%if 0%{?stable}

Source0:        https://github.com/systemd/systemd-stable/archive/v%{version_no_tilde}/%{name}-%{version_no_tilde}.tar.gz

%else

Source0:        https://github.com/systemd/systemd/archive/v%{version_no_tilde}/%{name}-%{version_no_tilde}.tar.gz

%endif

%endif

# This file must be available before %%prep.

# It is generated during systemd build and can be found in build/src/core/.

Source1:        triggers.systemd

Source2:        split-files.py

Source3:        purge-nobody-user

# Prevent accidental removal of the systemd package

Source4:        yum-protect-systemd.conf

Source5:        inittab

Source6:        sysctl.conf.README

Source7:        systemd-journal-remote.xml

Source8:        systemd-journal-gatewayd.xml

Source9:        20-yama-ptrace.conf

Source10:       systemd-udev-trigger-no-reload.conf

Source11:       20-grubby.install

Source12:       systemd-user

Source13:       libsystemd-shared.abignore

Source14:       10-oomd-defaults.conf

Source15:       10-oomd-root-slice-defaults.conf

Source16:       10-oomd-user-service-defaults.conf

Source21:       macros.sysusers

Source22:       sysusers.attr

Source23:       sysusers.prov

Source24:       sysusers.generate-pre.sh

%if 0

GIT_DIR=../../src/systemd/.git git format-patch-ab --no-signature -M -N v235..v235-stable

i=1; for j in 00*patch; do printf "Patch%04d:      %s\n" $i $j; i=$((i+1));done|xclip

GIT_DIR=../../src/systemd/.git git diffab -M v233..master@{2017-06-15} -- hwdb/[67]* hwdb/parse_hwdb.py > hwdb.patch

%endif

# Backports of patches from upstream (0000–0499)

#

# Any patches which are "in preparation" upstream should be listed

# here, rather than in the next section. Packit CI will drop any

# patches in this range before applying upstream pull requests.

# Downstream-only patches (5000–9999)

# https://bugzilla.redhat.com/show_bug.cgi?id=1738828

Patch0500:      use-bfq-scheduler.patch

# https://github.com/systemd/systemd/pull/17050

Patch0501:      https://github.com/systemd/systemd/pull/17050/commits/f58b96d3e8d1cb0dd3666bc74fa673918b586612.patch

%ifarch %{ix86} x86_64 aarch64

%global have_gnu_efi 1

%endif

BuildRequires:  gcc

BuildRequires:  gcc-c++

BuildRequires:  coreutils

BuildRequires:  libcap-devel

BuildRequires:  libmount-devel

BuildRequires:  libfdisk-devel

BuildRequires:  libpwquality-devel

BuildRequires:  pam-devel

BuildRequires:  libselinux-devel

BuildRequires:  audit-libs-devel

%if %{without bootstrap}

BuildRequires:  cryptsetup-devel

%endif

BuildRequires:  dbus-devel

BuildRequires:  /usr/sbin/sfdisk

# /usr/bin/getfacl is needed by test-acl-util

BuildRequires:  /usr/bin/getfacl

BuildRequires:  libacl-devel

BuildRequires:  gobject-introspection-devel

BuildRequires:  libblkid-devel

BuildRequires:  xz-devel

BuildRequires:  xz

BuildRequires:  lz4-devel

BuildRequires:  lz4

BuildRequires:  bzip2-devel

BuildRequires:  libzstd-devel

BuildRequires:  libidn2-devel

BuildRequires:  libcurl-devel

BuildRequires:  kmod-devel

BuildRequires:  elfutils-devel

BuildRequires:  openssl-devel

BuildRequires:  libgcrypt-devel

BuildRequires:  libgpg-error-devel

BuildRequires:  gnutls-devel

BuildRequires:  qrencode-devel

BuildRequires:  libmicrohttpd-devel

BuildRequires:  libxkbcommon-devel

BuildRequires:  iptables-devel

BuildRequires:  pkgconfig(libfido2)

BuildRequires:  pkgconfig(tss2-esys)

BuildRequires:  pkgconfig(tss2-rc)

BuildRequires:  pkgconfig(tss2-mu)

BuildRequires:  pkgconfig(libbpf)

BuildRequires:  systemtap-sdt-devel

BuildRequires:  libxslt

BuildRequires:  docbook-style-xsl

BuildRequires:  pkgconfig

BuildRequires:  gperf

BuildRequires:  gawk

BuildRequires:  tree

BuildRequires:  hostname

BuildRequires:  python3dist(lxml)

BuildRequires:  python3dist(jinja2)

BuildRequires:  firewalld-filesystem

%if 0%{?have_gnu_efi}

BuildRequires:  gnu-efi gnu-efi-devel

%endif

BuildRequires:  libseccomp-devel

BuildRequires:  meson >= 0.43

BuildRequires:  gettext

# We use RUNNING_ON_VALGRIND in tests, so the headers need to be available

BuildRequires:  valgrind-devel

BuildRequires:  pkgconfig(bash-completion)

BuildRequires:  perl

BuildRequires:  perl(IPC::SysV)

Requires(post): coreutils

Requires(post): sed

Requires(post): acl

Requires(post): grep

# systemd-machine-id-setup requires libssl

Requires(post): openssl-libs

Requires(pre):  coreutils

Requires:       dbus >= 1.9.18

Requires:       %{name}-pam = %{version}-%{release}

Requires:       (%{name}-rpm-macros = %{version}-%{release} if rpm-build)

Requires:       %{name}-libs = %{version}-%{release}

%{?fedora:Recommends:     %{name}-networkd = %{version}-%{release}}

%{?fedora:Recommends:     %{name}-resolved = %{version}-%{release}}

Recommends:     diffutils

Requires:       (util-linux-core or util-linux)

Recommends:     libxkbcommon%{?_isa}

Provides:       /bin/systemctl

Provides:       /sbin/shutdown

Provides:       syslog

Provides:       systemd-units = %{version}-%{release}

Obsoletes:      system-setup-keyboard < 0.9

Provides:       system-setup-keyboard = 0.9

# systemd-sysv-convert was removed in f20: https://fedorahosted.org/fpc/ticket/308

Obsoletes:      systemd-sysv < 206

# self-obsoletes so that dnf will install new subpackages on upgrade (#1260394)

Obsoletes:      %{name} < 249~~

Provides:       systemd-sysv = 206

Conflicts:      initscripts < 9.56.1

%if 0%{?fedora}

Conflicts:      fedora-release < 23-0.12

%endif

Obsoletes:      timedatex < 0.6-3

Provides:       timedatex = 0.6-3

Conflicts:      %{name}-standalone-tmpfiles < %{version}-%{release}^

Obsoletes:      %{name}-standalone-tmpfiles < %{version}-%{release}^

Conflicts:      %{name}-standalone-sysusers < %{version}-%{release}^

Obsoletes:      %{name}-standalone-sysusers < %{version}-%{release}^

# Recommends to replace normal Requires deps for stuff that is dlopen()ed

Recommends:     libidn2.so.0%{?elf_suffix}

Recommends:     libidn2.so.0(IDN2_0.0.0)%{?elf_bits}

Recommends:     libpcre2-8.so.0%{?elf_suffix}

Recommends:     libpwquality.so.1%{?elf_suffix}

Recommends:     libpwquality.so.1(LIBPWQUALITY_1.0)%{?elf_bits}

Recommends:     libqrencode.so.4%{?elf_suffix}

Recommends:     libbpf.so.0%{?elf_suffix}

Recommends:     libbpf.so.0(LIBBPF_0.4.0)%{?elf_bits}

# used by systemd-coredump and systemd-analyze

Recommends:     libdw.so.1%{?elf_suffix}

Recommends:     libdw.so.1(ELFUTILS_0.186)%{?elf_bits}

Recommends:     libelf.so.1%{?elf_suffix}

Recommends:     libelf.so.1(ELFUTILS_1.7)%{?elf_bits}

# used by dissect, integritysetup, veritysetyp, growfs, repart, cryptenroll, home

Recommends:     libcryptsetup.so.12%{?elf_suffix}

Recommends:     libcryptsetup.so.12(CRYPTSETUP_2.4)%{?elf_bits}

%description

systemd is a system and service manager that runs as PID 1 and starts the rest

of the system. It provides aggressive parallelization capabilities, uses socket

and D-Bus activation for starting services, offers on-demand starting of

daemons, keeps track of processes using Linux control groups, maintains mount

and automount points, and implements an elaborate transactional dependency-based

service control logic. systemd supports SysV and LSB init scripts and works as a

replacement for sysvinit. Other parts of this package are a logging daemon,

utilities to control basic system configuration like the hostname, date, locale,

maintain a list of logged-in users, system accounts, runtime directories and

settings, and daemons to manage simple network configuration, network time

synchronization, log forwarding, and name resolution.

%if 0%{?stable}

This package was built from the %{version}-stable branch of systemd.

%endif

%package libs

Summary:        systemd libraries

License:        LGPLv2+ and MIT

Obsoletes:      libudev < 183

Obsoletes:      systemd < 185-4

Conflicts:      systemd < 185-4

Obsoletes:      systemd-compat-libs < 230

Obsoletes:      nss-myhostname < 0.4

Provides:       nss-myhostname = 0.4

Provides:       nss-myhostname%{_isa} = 0.4

Requires(post): coreutils

Requires(post): sed

Requires(post): grep

Requires(post): /usr/bin/getent

%description libs

Libraries for systemd and udev.

%package pam

Summary:        systemd PAM module

Requires:       %{name} = %{version}-%{release}

%description pam

Systemd PAM module registers the session with systemd-logind.

%package rpm-macros

Summary:        Macros that define paths and scriptlets related to systemd

BuildArch:      noarch

%description rpm-macros

Just the definitions of rpm macros.

See

https://docs.fedoraproject.org/en-US/packaging-guidelines/Scriptlets/#_systemd

for information how to use those macros.

%package devel

Summary:        Development headers for systemd

License:        LGPLv2+ and MIT

Requires:       %{name}-libs%{?_isa} = %{version}-%{release}

Provides:       libudev-devel = %{version}

Provides:       libudev-devel%{_isa} = %{version}

Obsoletes:      libudev-devel < 183

# Fake dependency to make sure systemd-pam is pulled into multilib (#1414153)

Requires:       %{name}-pam = %{version}-%{release}

%description devel

Development headers and auxiliary files for developing applications linking

to libudev or libsystemd.

%package udev

Summary: Rule-based device node and kernel event manager

License:        LGPLv2+

Requires:       systemd%{?_isa} = %{version}-%{release}

Requires(post):   systemd

Requires(preun):  systemd

Requires(postun): systemd

Requires(post): grep

Requires:       kmod >= 18-4

# https://bodhi.fedoraproject.org/updates/FEDORA-2020-dd43dd05b1

Obsoletes:      systemd < 245.6-1

Provides:       udev = %{version}

Provides:       udev%{_isa} = %{version}

Obsoletes:      udev < 183

# Recommends to replace normal Requires deps for stuff that is dlopen()ed

# used by dissect, integritysetup, veritysetyp, growfs, repart, cryptenroll, home

Recommends:     libcryptsetup.so.12%{?elf_suffix}

Recommends:     libcryptsetup.so.12(CRYPTSETUP_2.4)%{?elf_bits}

# used by systemd-coredump and systemd-analyze

Recommends:     libdw.so.1%{?elf_suffix}

Recommends:     libdw.so.1(ELFUTILS_0.186)%{?elf_bits}

Recommends:     libelf.so.1%{?elf_suffix}

Recommends:     libelf.so.1(ELFUTILS_1.7)%{?elf_bits}

# used by home, cryptsetup, cryptenroll

Recommends:     libfido2.so.1%{?elf_suffix}

Recommends:     libtss2-esys.so.0%{?elf_suffix}

Recommends:     libtss2-mu.so.0%{?elf_suffix}

Recommends:     libtss2-rc.so.0%{?elf_suffix}

# https://bugzilla.redhat.com/show_bug.cgi?id=1377733#c9

Suggests:       systemd-bootchart

# https://bugzilla.redhat.com/show_bug.cgi?id=1408878

Requires:       kbd

# https://bugzilla.redhat.com/show_bug.cgi?id=1753381

Provides:       u2f-hidraw-policy = 1.0.2-40

Obsoletes:      u2f-hidraw-policy < 1.0.2-40

%description udev

This package contains systemd-udev and the rules and hardware database needed to

manage device nodes. This package is necessary on physical machines and in

virtual machines, but not in containers.

It also contains tools to manage encrypted home areas and secrets bound to the

machine.

%package container

# Name is the same as in Debian

Summary: Tools for containers and VMs

Requires:       %{name}%{?_isa} = %{version}-%{release}

Requires(post):   systemd

Requires(preun):  systemd

Requires(postun): systemd

# obsolete parent package so that dnf will install new subpackage on upgrade (#1260394)

Obsoletes:      %{name} < 229-5

License:        LGPLv2+

%description container

Systemd tools to spawn and manage containers and virtual machines.

This package contains systemd-nspawn, machinectl, systemd-machined, and

systemd-importd.

%package journal-remote

# Name is the same as in Debian

Summary:        Tools to send journal events over the network

Requires:       %{name}%{?_isa} = %{version}-%{release}

License:        LGPLv2+

Requires(pre):    /usr/bin/getent

Requires(post):   systemd

Requires(preun):  systemd

Requires(postun): systemd

Requires:       firewalld-filesystem

Provides:       %{name}-journal-gateway = %{version}-%{release}

Provides:       %{name}-journal-gateway%{_isa} = %{version}-%{release}

Obsoletes:      %{name}-journal-gateway < 227-7

%description journal-remote

Programs to forward journal entries over the network, using encrypted HTTP, and

to write journal files from serialized journal contents.

This package contains systemd-journal-gatewayd, systemd-journal-remote, and

systemd-journal-upload.

%package networkd

Summary:        System daemon that manages network configurations

Requires:       %{name}%{?_isa} = %{version}-%{release}

License:        LGPLv2+

# https://src.fedoraproject.org/rpms/systemd/pull-request/34

Obsoletes:      systemd < 246.6-2

%description networkd

systemd-networkd is a system service that manages networks. It detects and

configures network devices as they appear, as well as creating virtual network

devices.

%package resolved

Summary:        Network Name Resolution manager

Requires(post): %{name}

Requires(post): grep

Requires:       %{name}%{?_isa} = %{version}-%{release}

Obsoletes:      %{name} < 249~~

Requires:       libidn2.so.0%{?elf_suffix}

Requires:       libidn2.so.0(IDN2_0.0.0)%{?elf_bits}

%description resolved

systemd-resolved is a system service that provides network name resolution to

local applications. It implements a caching and validating DNS/DNSSEC stub

resolver, as well as an LLMNR and MulticastDNS resolver and responder.

%package oomd-defaults

Summary:        Configuration files for systemd-oomd

Requires:       %{name} = %{version}-%{release}

License:        LGPLv2+

BuildArch:      noarch

%description oomd-defaults

A set of drop-in files for systemd units to enable action from systemd-oomd,

a userspace out-of-memory (OOM) killer.

%package tests

Summary:       Internal unit tests for systemd

Requires:      %{name}%{?_isa} = %{version}-%{release}

License:       LGPLv2+

%description tests

"Installed tests" that are usually run as part of the build system. They can be

useful to test systemd internals.

%package standalone-tmpfiles

Summary:       Standalone tmpfiles binary for use in non-systemd systems

RemovePathPostfixes: .standalone

%description standalone-tmpfiles

Standalone tmpfiles binary with no dependencies on the systemd-shared library or

other libraries from systemd-libs. This package conflicts with the main systemd

package and is meant for use in non-systemd systems.

%package standalone-sysusers

Summary:       Standalone sysusers binary for use in non-systemd systems

RemovePathPostfixes: .standalone

%description standalone-sysusers

Standalone sysusers binary with no dependencies on the systemd-shared library or

other libraries from systemd-libs. This package conflicts with the main systemd

package and is meant for use in non-systemd systems.

%prep

%autosetup -n %{?commit:%{name}%{?stable:-stable}-%{commit}}%{!?commit:%{name}%{?stable:-stable}-%{version_no_tilde}} -p1

%build

%define ntpvendor %(source /etc/os-release; echo ${ID})

%{!?ntpvendor: echo 'NTP vendor zone is not set!'; exit 1}

CONFIGURE_OPTS=(

        -Dmode=release

        -Dsysvinit-path=/etc/rc.d/init.d

        -Drc-local=/etc/rc.d/rc.local

        -Dntp-servers='0.%{ntpvendor}.pool.ntp.org 1.%{ntpvendor}.pool.ntp.org 2.%{ntpvendor}.pool.ntp.org 3.%{ntpvendor}.pool.ntp.org'

        -Ddns-servers=

        -Duser-path=/usr/local/bin:/usr/local/sbin:/usr/bin:/usr/sbin

        -Dservice-watchdog=

        -Ddev-kvm-mode=0666

        -Dkmod=true

        -Dxkbcommon=true

        -Dblkid=true

        -Dfdisk=true

        -Dseccomp=true

        -Dima=true

        -Dselinux=true

        -Dapparmor=false

        -Dpolkit=true

        -Dxz=true

        -Dzlib=true

        -Dbzip2=true

        -Dlz4=true

        -Dzstd=true

        -Dpam=true

        -Dacl=true

        -Dsmack=true

        -Dopenssl=true

        -Dcryptolib=openssl

        -Dp11kit=true

        -Dgcrypt=true

        -Daudit=true

        -Delfutils=true

        -Dlibcryptsetup=%[%{with bootstrap}?"false":"true"]

        -Delfutils=true

        -Dpwquality=true

        -Dqrencode=true

        -Dgnutls=true

        -Dmicrohttpd=true

        -Dlibidn2=true

        -Dlibiptc=false

        -Dlibcurl=true

        -Dlibfido2=true

        -Defi=true

        -Dgnu-efi=%[%{?have_gnu_efi}?"true":"false"]

        -Dtpm=true

        -Dtpm2=true

        -Dhwdb=true

        -Dsysusers=true

        -Dstandalone-binaries=true

        -Ddefault-kill-user-processes=false

        -Dtests=unsafe

        -Dinstall-tests=true

        -Dtty-gid=5

        -Dusers-gid=100

        -Dnobody-user=nobody

        -Dnobody-group=nobody

        -Dcompat-mutable-uid-boundaries=true

        -Dsplit-usr=false

        -Dsplit-bin=true

        -Db_lto=%[%{with lto}?"true":"false"]

        -Db_ndebug=false

        -Dman=true

        -Dversion-tag=v%{version}-%{release}

        -Dfallback-hostname=%[0%{?fedora}?"fedora":"localhost"]

        -Ddefault-dnssec=no

        -Ddefault-dns-over-tls=opportunistic

        # https://bugzilla.redhat.com/show_bug.cgi?id=1867830

        -Ddefault-mdns=no

        -Ddefault-llmnr=resolve

        # https://bugzilla.redhat.com/show_bug.cgi?id=2028169

        -Dstatus-unit-format-default=combined

        -Doomd=true

        -Dadm-gid=4

        -Daudio-gid=63

        -Dcdrom-gid=11

        -Ddialout-gid=18

        -Ddisk-gid=6

        -Dinput-gid=104

        -Dkmem-gid=9

        -Dkvm-gid=36

        -Dlp-gid=7

        -Drender-gid=105

        -Dsgx-gid=106

        -Dtape-gid=33

        -Dtty-gid=5

        -Dusers-gid=100

        -Dutmp-gid=22

        -Dvideo-gid=39

        -Dwheel-gid=10

        -Dsystemd-journal-gid=190

        -Dsystemd-network-uid=192

        -Dsystemd-resolve-uid=193

        # -Dsystemd-timesync-uid=, not set yet

)

%if %{without lto}

%global _lto_cflags %nil

%endif

# Do configuration. If doing an inplace build, try to do

# reconfiguration to pick up new options.

%if %{with inplace}

  command -v ccache 2>/dev/null && { CC="${CC:-ccache %__cc}"; CXX="${CXX:-ccache %__cxx}"; }

  [ -e %{_vpath_builddir}/build.ninja ] &&

  %__meson configure %{_vpath_builddir} "${CONFIGURE_OPTS[@]}" ||

%endif

{ %meson "${CONFIGURE_OPTS[@]}"; }

%meson_build

new_triggers=%{_vpath_builddir}/src/rpm/triggers.systemd.sh

if ! diff -u %{SOURCE1} ${new_triggers}; then

   echo -e "\n\n\nWARNING: triggers.systemd in Source1 is different!"

   echo -e "      cp $PWD/${new_triggers} %{SOURCE1}\n\n\n"

   sleep 5

fi

%install

%meson_install

# udev links

mkdir -p %{buildroot}/%{_sbindir}

ln -sf ../bin/udevadm %{buildroot}%{_sbindir}/udevadm

# Compatiblity and documentation files

touch %{buildroot}/etc/crypttab

chmod 600 %{buildroot}/etc/crypttab

# /etc/initab

install -Dm0644 -t %{buildroot}/etc/ %{SOURCE5}

# /etc/sysctl.conf compat

install -Dm0644 %{SOURCE6} %{buildroot}/etc/sysctl.conf

ln -s ../sysctl.conf %{buildroot}/etc/sysctl.d/99-sysctl.conf

# Make sure these directories are properly owned

mkdir -p %{buildroot}%{system_unit_dir}/basic.target.wants

mkdir -p %{buildroot}%{system_unit_dir}/default.target.wants

mkdir -p %{buildroot}%{system_unit_dir}/dbus.target.wants

mkdir -p %{buildroot}%{system_unit_dir}/syslog.target.wants

mkdir -p %{buildroot}/run

mkdir -p %{buildroot}%{_localstatedir}/log

touch %{buildroot}/run/utmp

touch %{buildroot}%{_localstatedir}/log/{w,b}tmp

# Make sure the user generators dir exists too

mkdir -p %{buildroot}%{pkgdir}/system-generators

mkdir -p %{buildroot}%{pkgdir}/user-generators

# Create new-style configuration files so that we can ghost-own them

touch %{buildroot}%{_sysconfdir}/hostname

touch %{buildroot}%{_sysconfdir}/vconsole.conf

touch %{buildroot}%{_sysconfdir}/locale.conf

touch %{buildroot}%{_sysconfdir}/machine-id

touch %{buildroot}%{_sysconfdir}/machine-info

touch %{buildroot}%{_sysconfdir}/localtime

mkdir -p %{buildroot}%{_sysconfdir}/X11/xorg.conf.d

touch %{buildroot}%{_sysconfdir}/X11/xorg.conf.d/00-keyboard.conf

# Make sure the shutdown/sleep drop-in dirs exist

mkdir -p %{buildroot}%{pkgdir}/system-shutdown/

mkdir -p %{buildroot}%{pkgdir}/system-sleep/

# Make sure directories in /var exist

mkdir -p %{buildroot}%{_localstatedir}/lib/systemd/coredump

mkdir -p %{buildroot}%{_localstatedir}/lib/systemd/catalog

mkdir -p %{buildroot}%{_localstatedir}/lib/systemd/backlight

mkdir -p %{buildroot}%{_localstatedir}/lib/systemd/rfkill

mkdir -p %{buildroot}%{_localstatedir}/lib/systemd/linger

mkdir -p %{buildroot}%{_localstatedir}/lib/private

mkdir -p %{buildroot}%{_localstatedir}/log/private

mkdir -p %{buildroot}%{_localstatedir}/cache/private

mkdir -p %{buildroot}%{_localstatedir}/lib/private/systemd/journal-upload

mkdir -p %{buildroot}%{_localstatedir}/lib/systemd/timesync

ln -s ../private/systemd/journal-upload %{buildroot}%{_localstatedir}/lib/systemd/journal-upload

mkdir -p %{buildroot}%{_localstatedir}/log/journal

touch %{buildroot}%{_localstatedir}/lib/systemd/catalog/database

touch %{buildroot}%{_sysconfdir}/udev/hwdb.bin

touch %{buildroot}%{_localstatedir}/lib/systemd/random-seed

touch %{buildroot}%{_localstatedir}/lib/systemd/timesync/clock

touch %{buildroot}%{_localstatedir}/lib/private/systemd/journal-upload/state

# Install yum protection fragment

install -Dm0644 %{SOURCE4} %{buildroot}/etc/dnf/protected.d/systemd.conf

install -Dm0644 -t %{buildroot}/usr/lib/firewalld/services/ %{SOURCE7} %{SOURCE8}

# Restore systemd-user pam config from before "removal of Fedora-specific bits"

install -Dm0644 -t %{buildroot}/etc/pam.d/ %{SOURCE12}

# Install additional docs

# https://bugzilla.redhat.com/show_bug.cgi?id=1234951

install -Dm0644 -t %{buildroot}%{_pkgdocdir}/ %{SOURCE9}

# https://bugzilla.redhat.com/show_bug.cgi?id=1378974

install -Dm0644 -t %{buildroot}%{system_unit_dir}/systemd-udev-trigger.service.d/ %{SOURCE10}

# A temporary work-around for https://bugzilla.redhat.com/show_bug.cgi?id=1663040

mkdir -p %{buildroot}%{system_unit_dir}/systemd-hostnamed.service.d/

cat >%{buildroot}%{system_unit_dir}/systemd-hostnamed.service.d/disable-privatedevices.conf <

[Service]

PrivateDevices=no

EOF

install -Dm0755 -t %{buildroot}%{_prefix}/lib/kernel/install.d/ %{SOURCE11}

install -Dm0644 -t %{buildroot}%{_prefix}/lib/systemd/ %{SOURCE13}

install -D -t %{buildroot}/usr/lib/systemd/ %{SOURCE3}

# systemd-oomd default configuration

install -Dm0644 -t %{buildroot}%{_prefix}/lib/systemd/oomd.conf.d/ %{SOURCE14}

install -Dm0644 -t %{buildroot}%{system_unit_dir}/-.slice.d/ %{SOURCE15}

install -Dm0644 -t %{buildroot}%{system_unit_dir}/user@.service.d/ %{SOURCE16}

sed -i 's|#!/usr/bin/env python3|#!%{__python3}|' %{buildroot}/usr/lib/systemd/tests/run-unit-tests.py

install -m 0644 -D -t %{buildroot}%{_rpmconfigdir}/macros.d/ %{SOURCE21}

install -m 0644 -D -t %{buildroot}%{_rpmconfigdir}/fileattrs/ %{SOURCE22}

install -m 0755 -D -t %{buildroot}%{_rpmconfigdir}/ %{SOURCE23}

install -m 0755 -D -t %{buildroot}%{_rpmconfigdir}/ %{SOURCE24}

%find_lang %{name}

# Split files in build root into rpms. See split-files.py for the

# rules towards the end, anything which is an exception needs a line

# here.

python3 %{SOURCE2} %buildroot <

%ghost %config(noreplace) /etc/crypttab

%ghost /etc/udev/hwdb.bin

/etc/inittab

/usr/lib/systemd/purge-nobody-user

%ghost %config(noreplace) /etc/vconsole.conf

%ghost %config(noreplace) /etc/X11/xorg.conf.d/00-keyboard.conf

%ghost %attr(0664,root,utmp) /run/utmp

%ghost %attr(0664,root,utmp) /var/log/wtmp

%ghost %attr(0660,root,utmp) /var/log/btmp

%ghost %config(noreplace) /etc/hostname

%ghost %config(noreplace) /etc/localtime

%ghost %config(noreplace) /etc/locale.conf

%ghost %attr(0444,root,root) %config(noreplace) /etc/machine-id

%ghost %config(noreplace) /etc/machine-info

%ghost %attr(0700,root,root) %dir /var/cache/private

%ghost %attr(0700,root,root) %dir /var/lib/private

%ghost %dir /var/lib/private/systemd

%ghost %dir /var/lib/private/systemd/journal-upload

%ghost /var/lib/private/systemd/journal-upload/state

%ghost %dir /var/lib/systemd/timesync

%ghost /var/lib/systemd/timesync/clock

%ghost %dir /var/lib/systemd/backlight

%ghost /var/lib/systemd/catalog/database

%ghost %dir /var/lib/systemd/coredump

%ghost /var/lib/systemd/journal-upload

%ghost %dir /var/lib/systemd/linger

%ghost /var/lib/systemd/random-seed

%ghost %dir /var/lib/systemd/rfkill

%ghost %dir %attr(2755, root, systemd-journal) %verify(not mode) /var/log/journal

%ghost %dir /var/log/journal/remote

%ghost %attr(0700,root,root) %dir /var/log/private

EOF

%check

%if %{with tests}

meson test -C %{_vpath_builddir} -t 6 --print-errorlogs

%endif

#############################################################################################

%include %{SOURCE1}

%post

systemd-machine-id-setup &>/dev/null || :

# FIXME: move to %postun. We want to restart systemd *after* removing

# files from the old rpm. Right now we may still have bits the old

# setup if the files are not present in the new version. But before

# implement restarting of *other* services after the transaction, moving

# this would make things worse, increasing the number of warnings we get

# about needed daemon-reload.

oomd_state=$(systemctl is-active systemd-oomd 2>/dev/null || :)

# Work-around for #1931034. Remove after F34 is released.

if [ "$oomd_state" == "active" ]; then

   systemctl stop -q systemd-oomd 2>/dev/null || :

fi

systemctl daemon-reexec &>/dev/null || {

  # systemd v239 had bug #9553 in D-Bus authentication of the private socket,

  # which was later fixed in v240 by #9625.

  #

  # The end result is that a `systemctl daemon-reexec` call as root will fail

  # when upgrading from systemd v239, which means the system will not start

  # running the new version of systemd after this post install script runs.

  #

  # To work around this issue, let's fall back to using a `kill -TERM 1` to

  # re-execute the daemon when the `systemctl daemon-reexec` call fails.

  #

  # In order to prevent issues when the reason why the daemon-reexec failed is

  # not the aforementioned bug, let's only use this fallback when:

  #   - we're upgrading this RPM package; and

  #   - we confirm that systemd is running as PID1 on this system.

  if [ $1 -gt 1 ] && [ -d /run/systemd/system ] ; then

    kill -TERM 1 &>/dev/null || :

  fi

}

if [ "$oomd_state" == "active" ]; then

   systemctl start -q systemd-oomd 2>/dev/null || :

fi

[ $1 -eq 1 ] || exit 0

# create /var/log/journal only on initial installation,

# and only if it's writable (it won't be in rpm-ostree).

[ -w %{_localstatedir} ] && mkdir -p %{_localstatedir}/log/journal

[ -w %{_localstatedir} ] && journalctl --update-catalog || :

systemd-sysusers || :

systemd-tmpfiles --create &>/dev/null || :

# We reset the enablement of all services upon initial installation

# https://bugzilla.redhat.com/show_bug.cgi?id=1118740#c23

# This will fix up enablement of any preset services that got installed

# before systemd due to rpm ordering problems:

# https://bugzilla.redhat.com/show_bug.cgi?id=1647172.

# We also do this for user units, see

# https://fedoraproject.org/wiki/Changes/Systemd_presets_for_user_units.

systemctl preset-all &>/dev/null || :

systemctl --global preset-all &>/dev/null || :

%postun

if [ $1 -eq 1 ]; then

   [ -w %{_localstatedir} ] && journalctl --update-catalog || :

   systemd-tmpfiles --create &>/dev/null || :

fi

%systemd_postun_with_restart systemd-timedated.service systemd-portabled.service systemd-homed.service systemd-hostnamed.service systemd-journald.service systemd-localed.service systemd-userdbd.service systemd-oomd.service

# FIXME: systemd-logind.service is excluded (https://github.com/systemd/systemd/pull/17558)

# FIXME: user@*.service needs to be restarted, but using systemctl --user daemon-reexec

%triggerun resolved -- systemd < 246.1-1

# This is for upgrades from previous versions before systemd-resolved became the default.

systemctl --no-reload preset systemd-resolved.service &>/dev/null || :

if systemctl -q is-enabled systemd-resolved.service &>/dev/null; then

  systemctl -q is-enabled NetworkManager.service 2>/dev/null && \

  ! test -L /etc/resolv.conf 2>/dev/null && \

  ! mountpoint /etc/resolv.conf &>/dev/null && \

  grep -q 'Generated by NetworkManager' /etc/resolv.conf 2>/dev/null && \

  echo -e '/etc/resolv.conf was generated by NetworkManager.\nRemoving it to let systemd-resolved manage this file.' && \

  mv -v /etc/resolv.conf /etc/resolv.conf.orig-with-nm && \

  ln -sv ../run/systemd/resolve/stub-resolv.conf /etc/resolv.conf 2>/dev/null || :

  systemctl start systemd-resolved.service &>/dev/null || :

fi

%triggerpostun -- systemd < 247.3-2

# This is for upgrades from previous versions before oomd-defaults is available.

# We use %%triggerpostun here because rpm doesn't allow a second %%triggerun with

# a different package version.

systemctl --no-reload preset systemd-oomd.service &>/dev/null || :

%post libs

%{?ldconfig}

# check if nobody or nfsnobody is defined

export SYSTEMD_NSS_BYPASS_SYNTHETIC=1

if getent passwd nfsnobody &>/dev/null; then

   test -f /etc/systemd/dont-synthesize-nobody || {

       echo 'Detected system with nfsnobody defined, creating /etc/systemd/dont-synthesize-nobody'

       mkdir -p /etc/systemd || :

       : >/etc/systemd/dont-synthesize-nobody || :

   }

elif getent passwd nobody 2>/dev/null | grep -v 'nobody:[x*]:65534:65534:.*:/:/sbin/nologin' &>/dev/null; then

   test -f /etc/systemd/dont-synthesize-nobody || {

       echo 'Detected system with incompatible nobody defined, creating /etc/systemd/dont-synthesize-nobody'

       mkdir -p /etc/systemd || :

       : >/etc/systemd/dont-synthesize-nobody || :

   }

fi

%{?ldconfig:%postun libs -p %ldconfig}

%global udev_services systemd-udev{d,-settle,-trigger}.service systemd-udevd-{control,kernel}.socket systemd-timesyncd.service systemd-boot-update.service

%post udev

# Move old stuff around in /var/lib

mv %{_localstatedir}/lib/random-seed %{_localstatedir}/lib/systemd/random-seed &>/dev/null

mv %{_localstatedir}/lib/backlight %{_localstatedir}/lib/systemd/backlight &>/dev/null

if [ -L %{_localstatedir}/lib/systemd/timesync ]; then

    rm %{_localstatedir}/lib/systemd/timesync

    mv %{_localstatedir}/lib/private/systemd/timesync %{_localstatedir}/lib/systemd/timesync

fi

if [ -f %{_localstatedir}/lib/systemd/clock ] ; then

    mkdir -p %{_localstatedir}/lib/systemd/timesync

    mv %{_localstatedir}/lib/systemd/clock %{_localstatedir}/lib/systemd/timesync/.

fi

udevadm hwdb --update &>/dev/null

%systemd_post %udev_services

# Try to save the random seed, but don't complain if /dev/urandom is unavailable

/usr/lib/systemd/systemd-random-seed save 2>&1 | \

    grep -v 'Failed to open /dev/urandom' || :