%global gitcommit 3e14c4c1876b4dfeb8bf511185f70fef8d04a153

%{?gitcommit:%global gitcommitshort %(c=%{gitcommit}; echo ${c:0:7})}

# We ship a .pc file but don't want to have a dep on pkg-config. We

# strip the automatically generated dep here and instead co-own the

# directory.

%global __requires_exclude pkg-config

%global pkgdir %{_prefix}/lib/systemd

%global system_unit_dir %{pkgdir}/system

%global user_unit_dir %{pkgdir}/user

Name:           systemd

Url:            http://www.freedesktop.org/wiki/Software/systemd

Version:        236

Release:        3%{?gitcommit:.git%{gitcommitshort}}%{?dist}

# For a breakdown of the licensing, see README

License:        LGPLv2+ and MIT and GPLv2+

Summary:        System and Service Manager

# download tarballs with "spectool -g systemd.spec"

%if %{defined gitcommit}

Source0:        https://github.com/systemd/systemd-stable/archive/%{?gitcommit}.tar.gz#/%{name}-%{gitcommitshort}.tar.gz

%else

Source0:        https://github.com/systemd/systemd/archive/v%{version}.tar.gz#/%{name}-%{version}.tar.gz

%endif

# This file must be available before %%prep.

# It is generated during systemd build and can be found in src/core/.

Source1:        triggers.systemd

Source2:        split-files.py

# Prevent accidental removal of the systemd package

Source4:        yum-protect-systemd.conf

Source5:        inittab

Source6:        sysctl.conf.README

Source7:        systemd-journal-remote.xml

Source8:        systemd-journal-gatewayd.xml

Source9:        20-yama-ptrace.conf

Source10:       systemd-udev-trigger-no-reload.conf

Source11:       20-grubby.install

Source12:       https://raw.githubusercontent.com/systemd/systemd/1000522a60ceade446773c67031b47a566d4a70d/src/login/systemd-user.m4

%if 0

GIT_DIR=../../src/systemd/.git git format-patch-ab --no-signature -M -N v235..v235-stable

i=1; for j in 00*patch; do printf "Patch%04d:      %s\n" $i $j; i=$((i+1));done|xclip

GIT_DIR=../../src/systemd/.git git diffab -M v233..master@{2017-06-15} -- hwdb/[67]* hwdb/parse_hwdb.py > hwdb.patch

%endif

Patch0998:      0998-resolved-create-etc-resolv.conf-symlink-at-runtime.patch

%global num_patches %{lua: c=0; for i,p in ipairs(patches) do c=c+1; end; print(c);}

%ifarch %{ix86} x86_64 aarch64

%global have_gnu_efi 1

%endif

BuildRequires:  gcc

BuildRequires:  gcc-c++

BuildRequires:  libcap-devel

BuildRequires:  libmount-devel

BuildRequires:  pam-devel

BuildRequires:  libselinux-devel

BuildRequires:  audit-libs-devel

BuildRequires:  cryptsetup-devel

BuildRequires:  dbus-devel

BuildRequires:  libacl-devel

BuildRequires:  gobject-introspection-devel

BuildRequires:  libblkid-devel

BuildRequires:  xz-devel

BuildRequires:  xz

BuildRequires:  lz4-devel

BuildRequires:  lz4

BuildRequires:  bzip2-devel

BuildRequires:  libidn2-devel

BuildRequires:  libcurl-devel

BuildRequires:  kmod-devel

BuildRequires:  elfutils-devel

BuildRequires:  libgcrypt-devel

BuildRequires:  libgpg-error-devel

BuildRequires:  gnutls-devel

BuildRequires:  qrencode-devel

BuildRequires:  libmicrohttpd-devel

BuildRequires:  libxkbcommon-devel

BuildRequires:  iptables-devel

BuildRequires:  libxslt

BuildRequires:  docbook-style-xsl

BuildRequires:  pkgconfig

BuildRequires:  gperf

BuildRequires:  gawk

BuildRequires:  tree

BuildRequires:  python3-devel

BuildRequires:  python3-lxml

BuildRequires:  firewalld-filesystem

%if 0%{?have_gnu_efi}

BuildRequires:  gnu-efi gnu-efi-devel

%endif

BuildRequires:  libseccomp-devel

%if %{num_patches}

BuildRequires:  git

%endif

BuildRequires:  meson >= 0.43

BuildRequires:  gettext

Requires(post): coreutils

Requires(post): sed

Requires(post): acl

Requires(post): grep

Requires(pre):  coreutils

Requires(pre):  /usr/bin/getent

Requires(pre):  /usr/sbin/groupadd

Requires:       dbus >= 1.9.18

Requires:       %{name}-pam = %{version}-%{release}

Requires:       %{name}-libs = %{version}-%{release}

Recommends:     diffutils

Requires:       util-linux

Recommends:     libxkbcommon%{?_isa}

Provides:       /bin/systemctl

Provides:       /sbin/shutdown

Provides:       syslog

Provides:       systemd-units = %{version}-%{release}

Obsoletes:      system-setup-keyboard < 0.9

Provides:       system-setup-keyboard = 0.9

# systemd-sysv-convert was removed in f20: https://fedorahosted.org/fpc/ticket/308

Obsoletes:      systemd-sysv < 206

# self-obsoletes so that dnf will install new subpackages on upgrade (#1260394)

Obsoletes:      %{name} < 229-5

Provides:       systemd-sysv = 206

Conflicts:      initscripts < 9.56.1

%if 0%{?fedora}

Conflicts:      fedora-release < 23-0.12

%endif

%description

systemd is a system and service manager that runs as PID 1 and starts

the rest of the system. It provides aggressive parallelization

capabilities, uses socket and D-Bus activation for starting services,

offers on-demand starting of daemons, keeps track of processes using

Linux control groups, maintains mount and automount points, and

implements an elaborate transactional dependency-based service control

logic. systemd supports SysV and LSB init scripts and works as a

replacement for sysvinit. Other parts of this package are a logging daemon,

utilities to control basic system configuration like the hostname,

date, locale, maintain a list of logged-in users and running

containers and virtual machines, system accounts, runtime directories

and settings, and daemons to manage simple network configuration,

network time synchronization, log forwarding, and name resolution.

%package libs

Summary:        systemd libraries

License:        LGPLv2+ and MIT

Obsoletes:      libudev < 183

Obsoletes:      systemd < 185-4

Conflicts:      systemd < 185-4

Obsoletes:      systemd-compat-libs < 230

Obsoletes:      nss-myhostname < 0.4

Provides:       nss-myhostname = 0.4

Provides:       nss-myhostname%{_isa} = 0.4

Requires(post): sed

Requires(post): grep

%description libs

Libraries for systemd and udev.

%package pam

Summary:        systemd PAM module

Requires:       %{name} = %{version}-%{release}

%description pam

Systemd PAM module registers the session with systemd-logind.

%package devel

Summary:        Development headers for systemd

License:        LGPLv2+ and MIT

Requires:       %{name}-libs%{?_isa} = %{version}-%{release}

Provides:       libudev-devel = %{version}

Provides:       libudev-devel%{_isa} = %{version}

Obsoletes:      libudev-devel < 183

# Fake dependency to make sure systemd-pam is pulled into multilib (#1414153)

Requires:       %{name}-pam = %{version}-%{release}

%description devel

Development headers and auxiliary files for developing applications linking

to libudev or libsystemd.

%package udev

Summary: Rule-based device node and kernel event manager

Requires:       %{name}%{?_isa} = %{version}-%{release}

Requires(post):   systemd

Requires(preun):  systemd

Requires(postun): systemd

Requires(post): grep

Requires:       kmod >= 18-4

# obsolete parent package so that dnf will install new subpackage on upgrade (#1260394)

Obsoletes:      %{name} < 229-5

Provides:       udev = %{version}

Provides:       udev%{_isa} = %{version}

Obsoletes:      udev < 183

# https://bugzilla.redhat.com/show_bug.cgi?id=1377733#c9

Recommends:     systemd-bootchart

# https://bugzilla.redhat.com/show_bug.cgi?id=1408878

Recommends:     kbd

License:        LGPLv2+

%description udev

This package contains systemd-udev and the rules and hardware database

needed to manage device nodes. This package is necessary on physical

machines and in virtual machines, but not in containers.

%package container

# Name is the same as in Debian

Summary: Tools for containers and VMs

Requires:       %{name}%{?_isa} = %{version}-%{release}

Requires(post):   systemd

Requires(preun):  systemd

Requires(postun): systemd

# obsolete parent package so that dnf will install new subpackage on upgrade (#1260394)

Obsoletes:      %{name} < 229-5

License:        LGPLv2+

%description container

Systemd tools to spawn and manage containers and virtual machines.

This package contains systemd-nspawn, machinectl, systemd-machined,

and systemd-importd.

%package journal-remote

# Name is the same as in Debian

Summary:        Tools to send journal events over the network

Requires:       %{name}%{?_isa} = %{version}-%{release}

License:        LGPLv2+

Requires(pre):    /usr/bin/getent

Requires(post):   systemd

Requires(preun):  systemd

Requires(postun): systemd

Requires:       firewalld-filesystem

Provides:       %{name}-journal-gateway = %{version}-%{release}

Provides:       %{name}-journal-gateway%{_isa} = %{version}-%{release}

Obsoletes:      %{name}-journal-gateway < 227-7

%description journal-remote

Programs to forward journal entries over the network, using encrypted HTTP,

and to write journal files from serialized journal contents.

This package contains systemd-journal-gatewayd,

systemd-journal-remote, and systemd-journal-upload.

%package tests

Summary:       Internal unit tests for systemd

Requires:      %{name}%{?_isa} = %{version}-%{release}

License:       LGPLv2+

%description tests

"Installed tests" that are usually run as part of the build system.

They can be useful to test systemd internals.

%prep

%setup -q %{?gitcommit:-n %{name}-%{gitcommit}}

%if %{num_patches}

    git init

    git config user.email "systemd-maint@redhat.com"

    git config user.name "Fedora systemd team"

    git add .

    git commit -a -q -m "%{version} baseline."

    # Apply all the patches.

    git am %{patches}

%endif

# Restore systemd-user pam config from before "removal of Fedora-specific bits"

cp -p %{SOURCE12} src/login/

%build

%define ntpvendor %(source /etc/os-release; echo ${ID})

%{!?ntpvendor: echo 'NTP vendor zone is not set!'; exit 1}

CONFIGURE_OPTS=(

        -Dsysvinit-path=/etc/rc.d/init.d

        -Drc-local=/etc/rc.d/rc.local

        -Dntp-servers='0.%{ntpvendor}.pool.ntp.org 1.%{ntpvendor}.pool.ntp.org 2.%{ntpvendor}.pool.ntp.org 3.%{ntpvendor}.pool.ntp.org'

        -Ddev-kvm-mode=0666

        -Dkmod=true

        -Dxkbcommon=true

        -Dblkid=true

        -Dseccomp=true

        -Dima=true

        -Dselinux=true

        -Dapparmor=false

        -Dpolkit=true

        -Dxz=true

        -Dzlib=true

        -Dbzip2=true

        -Dlz4=true

        -Dpam=true

        -Dacl=true

        -Dsmack=true

        -Dgcrypt=true

        -Daudit=true

        -Delfutils=true

        -Dlibcryptsetup=true

        -Delfutils=true

        -Dqrencode=true

        -Dgnutls=true

        -Dmicrohttpd=true

        -Dlibidn2=true

        -Dlibiptc=true

        -Dlibcurl=true

        -Defi=true

        -Dgnu-efi=%{?have_gnu_efi:true}%{?!have_gnu_efi:false}

        -Dtpm=true

        -Dhwdb=true

        -Dsysusers=true

        -Ddefault-kill-user-processes=false

        -Dtests=unsafe

        -Dinstall-tests=true

        -Dtty-gid=5

        -Dusers-gid=100

        -Dnobody-user=nfsnobody

        -Dnobody-group=nfsnobody

        -Db_lto=true

)

%meson "${CONFIGURE_OPTS[@]}"

%meson_build

%install

%meson_install

# udev links

mkdir -p %{buildroot}/%{_sbindir}

ln -sf ../bin/udevadm %{buildroot}%{_sbindir}/udevadm

# Create SysV compatibility symlinks. systemctl/systemd are smart

# enough to detect in which way they are called.

ln -s ../lib/systemd/systemd %{buildroot}%{_sbindir}/init

ln -s ../bin/systemctl %{buildroot}%{_sbindir}/reboot

ln -s ../bin/systemctl %{buildroot}%{_sbindir}/halt

ln -s ../bin/systemctl %{buildroot}%{_sbindir}/poweroff

ln -s ../bin/systemctl %{buildroot}%{_sbindir}/shutdown

ln -s ../bin/systemctl %{buildroot}%{_sbindir}/telinit

ln -s ../bin/systemctl %{buildroot}%{_sbindir}/runlevel

# Compatiblity and documentation files

touch %{buildroot}/etc/crypttab

chmod 600 %{buildroot}/etc/crypttab

# /etc/initab

install -Dm0644 -t %{buildroot}/etc/ %{SOURCE5}

# /etc/sysctl.conf compat

install -Dm0644 %{SOURCE6} %{buildroot}/etc/sysctl.conf

ln -s ../sysctl.conf %{buildroot}/etc/sysctl.d/99-sysctl.conf

# We create all wants links manually at installation time to make sure

# they are not owned and hence overriden by rpm after the user deleted

# them.

rm -r %{buildroot}%{_sysconfdir}/systemd/system/*.target.wants

# Make sure these directories are properly owned

mkdir -p %{buildroot}%{system_unit_dir}/basic.target.wants

mkdir -p %{buildroot}%{system_unit_dir}/default.target.wants

mkdir -p %{buildroot}%{system_unit_dir}/dbus.target.wants

mkdir -p %{buildroot}%{system_unit_dir}/syslog.target.wants

mkdir -p %{buildroot}%{_localstatedir}/run

mkdir -p %{buildroot}%{_localstatedir}/log

touch %{buildroot}%{_localstatedir}/run/utmp

touch %{buildroot}%{_localstatedir}/log/{w,b}tmp

# Make sure the user generators dir exists too

mkdir -p %{buildroot}%{pkgdir}/system-generators

mkdir -p %{buildroot}%{pkgdir}/user-generators

# Create new-style configuration files so that we can ghost-own them

touch %{buildroot}%{_sysconfdir}/hostname

touch %{buildroot}%{_sysconfdir}/vconsole.conf

touch %{buildroot}%{_sysconfdir}/locale.conf

touch %{buildroot}%{_sysconfdir}/machine-id

touch %{buildroot}%{_sysconfdir}/machine-info

touch %{buildroot}%{_sysconfdir}/localtime

mkdir -p %{buildroot}%{_sysconfdir}/X11/xorg.conf.d

touch %{buildroot}%{_sysconfdir}/X11/xorg.conf.d/00-keyboard.conf

# Make sure the shutdown/sleep drop-in dirs exist

mkdir -p %{buildroot}%{pkgdir}/system-shutdown/

mkdir -p %{buildroot}%{pkgdir}/system-sleep/

# Make sure directories in /var exist

mkdir -p %{buildroot}%{_localstatedir}/lib/systemd/coredump

mkdir -p %{buildroot}%{_localstatedir}/lib/systemd/catalog

mkdir -p %{buildroot}%{_localstatedir}/lib/systemd/backlight

mkdir -p %{buildroot}%{_localstatedir}/lib/systemd/rfkill

mkdir -p %{buildroot}%{_localstatedir}/lib/systemd/linger

mkdir -p %{buildroot}%{_localstatedir}/lib/private

mkdir -p %{buildroot}%{_localstatedir}/log/private

mkdir -p %{buildroot}%{_localstatedir}/cache/private

mkdir -p %{buildroot}%{_localstatedir}/lib/private/systemd/journal-upload

mkdir -p %{buildroot}%{_localstatedir}/lib/private/systemd/timesync

ln -s ../private/systemd/journal-upload %{buildroot}%{_localstatedir}/lib/systemd/journal-upload

ln -s ../private/systemd/timesync %{buildroot}%{_localstatedir}/lib/systemd/timesync

mkdir -p %{buildroot}%{_localstatedir}/log/journal

touch %{buildroot}%{_localstatedir}/lib/systemd/catalog/database

touch %{buildroot}%{_sysconfdir}/udev/hwdb.bin

touch %{buildroot}%{_localstatedir}/lib/systemd/random-seed

touch %{buildroot}%{_localstatedir}/lib/private/systemd/timesync/clock

touch %{buildroot}%{_localstatedir}/lib/private/systemd/journal-upload/state

# Install yum protection fragment

install -Dm0644 %{SOURCE4} %{buildroot}%{_sysconfdir}/yum/protected.d/systemd.conf

install -Dm0644 -t %{buildroot}/usr/lib/firewalld/services/ %{SOURCE7} %{SOURCE8}

# Install additional docs

# https://bugzilla.redhat.com/show_bug.cgi?id=1234951

install -Dm0644 -t %{buildroot}%{_pkgdocdir}/ %{SOURCE9}

# https://bugzilla.redhat.com/show_bug.cgi?id=1378974

install -Dm0644 -t %{buildroot}%{system_unit_dir}/systemd-udev-trigger.service.d/ %{SOURCE10}

install -Dm0755 -t %{buildroot}%{_prefix}/lib/kernel/install.d/ %{SOURCE11}

%find_lang %{name}

# Split files in build root into rpms. See split-files.py for the

# rules towards the end, anything which is an exception needs a line

# here.

python3 %{SOURCE2} %buildroot <

%ghost %config(noreplace) /etc/crypttab

%ghost /etc/udev/hwdb.bin

/etc/inittab

%ghost %config(noreplace) /etc/vconsole.conf

%ghost %config(noreplace) /etc/X11/xorg.conf.d/00-keyboard.conf

%ghost %attr(0664,root,utmp) /var/run/utmp

%ghost %attr(0664,root,utmp) /var/log/wtmp

%ghost %attr(0600,root,utmp) /var/log/btmp

%ghost %config(noreplace) /etc/hostname

%ghost %config(noreplace) /etc/localtime

%ghost %config(noreplace) /etc/locale.conf

%ghost %config(noreplace) /etc/machine-id

%ghost %config(noreplace) /etc/machine-info

%ghost %dir /var/cache/private

%ghost %dir /var/lib/private

%ghost %dir /var/lib/private/systemd

%ghost %dir /var/lib/private/systemd/journal-upload

%ghost /var/lib/private/systemd/journal-upload/state

%ghost %dir /var/lib/private/systemd/timesync

%ghost /var/lib/private/systemd/timesync/clock

%ghost %dir /var/lib/systemd/backlight

%ghost /var/lib/systemd/catalog/database

%ghost %dir /var/lib/systemd/coredump

%ghost /var/lib/systemd/journal-upload

%ghost %dir /var/lib/systemd/linger

%ghost /var/lib/systemd/random-seed

%ghost %dir /var/lib/systemd/rfkill

%ghost /var/lib/systemd/timesync

%ghost %dir /var/log/journal

%ghost %dir /var/log/journal/remote

%ghost %dir /var/log/private

EOF

%check

%meson_test

#############################################################################################

%include %{SOURCE1}

%pre

getent group cdrom &>/dev/null || groupadd -r -g 11 cdrom &>/dev/null || :

getent group utmp &>/dev/null || groupadd -r -g 22 utmp &>/dev/null || :

getent group tape &>/dev/null || groupadd -r -g 33 tape &>/dev/null || :

getent group dialout &>/dev/null || groupadd -r -g 18 dialout &>/dev/null || :

getent group input &>/dev/null || groupadd -r input &>/dev/null || :

getent group kvm &>/dev/null || groupadd -r -g 36 kvm &>/dev/null || :

getent group render &>/dev/null || groupadd -r render &>/dev/null || :

getent group systemd-journal &>/dev/null || groupadd -r -g 190 systemd-journal 2>&1 || :

getent group systemd-coredump &>/dev/null || groupadd -r systemd-coredump 2>&1 || :

getent passwd systemd-coredump &>/dev/null || useradd -r -l -g systemd-coredump -d / -s /sbin/nologin -c "systemd Core Dumper" systemd-coredump &>/dev/null || :

getent group systemd-network &>/dev/null || groupadd -r -g 192 systemd-network 2>&1 || :

getent passwd systemd-network &>/dev/null || useradd -r -u 192 -l -g systemd-network -d / -s /sbin/nologin -c "systemd Network Management" systemd-network &>/dev/null || :

getent group systemd-resolve &>/dev/null || groupadd -r -g 193 systemd-resolve 2>&1 || :

getent passwd systemd-resolve &>/dev/null || useradd -r -u 193 -l -g systemd-resolve -d / -s /sbin/nologin -c "systemd Resolver" systemd-resolve &>/dev/null || :

%post

systemd-machine-id-setup &>/dev/null || :

systemctl daemon-reexec &>/dev/null || :

journalctl --update-catalog &>/dev/null || :

systemd-tmpfiles --create &>/dev/null || :

if [ $1 -eq 1 ] ; then

     # create /var/log/journal only on initial installation

     mkdir -p %{_localstatedir}/log/journal

fi

# Make sure new journal files will be owned by the "systemd-journal" group

chgrp systemd-journal /run/log/journal/ /run/log/journal/`cat /etc/machine-id 2>/dev/null` /var/log/journal/ /var/log/journal/`cat /etc/machine-id 2>/dev/null` &>/dev/null || :

chmod g+s /run/log/journal/ /run/log/journal/`cat /etc/machine-id 2>/dev/null` /var/log/journal/ /var/log/journal/`cat /etc/machine-id 2>/dev/null` &>/dev/null || :

# Apply ACL to the journal directory

setfacl -Rnm g:wheel:rx,d:g:wheel:rx,g:adm:rx,d:g:adm:rx /var/log/journal/ &>/dev/null || :

# Stop-gap until rsyslog.rpm does this on its own. (This is supposed

# to fail when the link already exists)

ln -s /usr/lib/systemd/system/rsyslog.service /etc/systemd/system/syslog.service &>/dev/null || :

# Remove spurious /etc/fstab entries from very old installations

# https://bugzilla.redhat.com/show_bug.cgi?id=1009023

if [ -e /etc/fstab ]; then

   grep -v -E -q '^(devpts|tmpfs|sysfs|proc)' /etc/fstab || \

         sed -i.rpm.bak -r '/^devpts\s+\/dev\/pts\s+devpts\s+defaults\s+/d; /^tmpfs\s+\/dev\/shm\s+tmpfs\s+defaults\s+/d; /^sysfs\s+\/sys\s+sysfs\s+defaults\s+/d; /^proc\s+\/proc\s+proc\s+defaults\s+/d' /etc/fstab || :

fi

# Services we install by default, and which are controlled by presets.

if [ $1 -eq 1 ] ; then

        systemctl preset --quiet \

                remote-fs.target \

                getty@.service \

                serial-getty@.service \

                console-getty.service \

                debug-shell.service \

                systemd-networkd.service \

                systemd-networkd-wait-online.service \

                systemd-resolved.service \

                >/dev/null || :

fi

# remove obsolete systemd-readahead file

rm -f /.readahead &>/dev/null || :

%preun

if [ $1 -eq 0 ] ; then

        systemctl disable --quiet \

                remote-fs.target \

                getty@.service \

                serial-getty@.service \

                console-getty.service \

                debug-shell.service \

                systemd-readahead-replay.service \

                systemd-readahead-collect.service \

                systemd-networkd.service \

                systemd-networkd-wait-online.service \

                systemd-resolved.service \

                >/dev/null || :

        rm -f /etc/systemd/system/default.target &>/dev/null || :

fi

%post libs

/sbin/ldconfig

if [ -f /etc/nsswitch.conf ] ; then

        # sed-fu to add myhostanme to hosts line

        grep -v -E -q '^hosts:.* myhostname' /etc/nsswitch.conf &&

        sed -i.bak -e '

                /^hosts:/ !b

                /\<myhostname\>/ b

                s/[[:blank:]]*$/ myhostname/

                ' /etc/nsswitch.conf &>/dev/null || :

        # remove mymachines from passwd and group lines of /etc/nsswitch.conf

        # https://bugzilla.redhat.com/show_bug.cgi?id=1284325

        # https://meetbot.fedoraproject.org/fedora-meeting/2015-11-25/fesco.2015-11-25-18.00.html

        # To avoid the removal, e.g. add a space at the end of the line.

        grep -E -q '^(passwd|group):.* mymachines$' /etc/nsswitch.conf &&

        sed -i.bak -r -e '

                s/^(passwd:.*) mymachines$/\1/;

                s/^(group:.*) mymachines$/\1/;

                ' /etc/nsswitch.conf &>/dev/null || :

        # Add [!UNAVAIL=return] after resolve

        grep -E -q '^hosts:.*resolve[[:space:]]*($|[[:alpha:]])' /etc/nsswitch.conf &&

        sed -i.bak -e '

                /^hosts:/ { s/resolve/& [!UNAVAIL=return]/}

                ' /etc/nsswitch.conf &>/dev/null || :

        # Add nss-systemd to passwd and group

        grep -E -q '^(passwd|group):.* systemd' /etc/nsswitch.conf ||

        sed -i.bak -r -e '

                s/^(passwd|group):(.*)/\1: \2 systemd/

                ' /etc/nsswitch.conf &>/dev/null || :

fi

%postun libs -p /sbin/ldconfig

%global udev_services systemd-udev{d,-settle,-trigger}.service systemd-udevd-{control,kernel}.socket systemd-timesyncd.service

%post udev

# Move old stuff around in /var/lib

mv %{_localstatedir}/lib/random-seed %{_localstatedir}/lib/systemd/random-seed &>/dev/null

mv %{_localstatedir}/lib/backlight %{_localstatedir}/lib/systemd/backlight &>/dev/null

udevadm hwdb --update &>/dev/null

%systemd_post %udev_services

/usr/lib/systemd/systemd-random-seed save 2>&1

# Replace obsolete keymaps

# https://bugzilla.redhat.com/show_bug.cgi?id=1151958

grep -q -E '^KEYMAP="?fi-latin[19]"?' /etc/vconsole.conf 2>/dev/null &&

    sed -i.rpm.bak -r 's/^KEYMAP="?fi-latin[19]"?/KEYMAP="fi"/' /etc/vconsole.conf

exit 0

%preun udev

%systemd_preun %udev_services

if [ $1 -eq 1 ] ; then

    if [ -f %{_localstatedir}/lib/systemd/clock ] ; then

        mkdir -p %{_localstatedir}/lib/private/systemd/timesync

        mv %{_localstatedir}/lib/systemd/clock %{_localstatedir}/lib/private/systemd/timesync/.

    fi

fi

%postun udev

# Only restart systemd-udev, to run the upgraded dameon.

# Others are either oneshot services, or sockets, and restarting them causes issues (#1378974)

%systemd_postun_with_restart systemd-udevd.service

%pre journal-remote

getent group systemd-journal-remote &>/dev/null || groupadd -r systemd-journal-remote 2>&1 || :

getent passwd systemd-journal-remote &>/dev/null || useradd -r -l -g systemd-journal-remote -d %{_localstatedir}/log/journal/remote -s /sbin/nologin -c "Journal Remote" systemd-journal-remote &>/dev/null || :

%post journal-remote

%systemd_post systemd-journal-gatewayd.socket systemd-journal-gatewayd.service

%systemd_post systemd-journal-remote.socket systemd-journal-remote.service

%systemd_post systemd-journal-upload.service

%firewalld_reload

%preun journal-remote

%systemd_preun systemd-journal-gatewayd.socket systemd-journal-gatewayd.service

%systemd_preun systemd-journal-remote.socket systemd-journal-remote.service

%systemd_preun systemd-journal-upload.service

if [ $1 -eq 1 ] ; then

    if [ -f %{_localstatedir}/lib/systemd/journal-upload/state -a ! -L %{_localstatedir}/lib/systemd/journal-upload ] ; then

        mkdir -p %{_localstatedir}/lib/private/systemd/journal-upload

        mv %{_localstatedir}/lib/systemd/journal-upload/state %{_localstatedir}/lib/private/systemd/journal-upload/.

        rmdir %{_localstatedir}/lib/systemd/journal-upload || :

    fi

fi

%postun journal-remote

%systemd_postun_with_restart systemd-journal-gatewayd.service

%systemd_postun_with_restart systemd-journal-remote.service

%systemd_postun_with_restart systemd-journal-upload.service

%firewalld_reload

%global _docdir_fmt %{name}

%files -f %{name}.lang -f .file-list-rest

%doc %{_pkgdocdir}

%exclude %{_pkgdocdir}/LICENSE.*

%license LICENSE.GPL2 LICENSE.LGPL2.1

%ghost %dir /etc/systemd/system/basic.target.wants

%ghost %dir /etc/systemd/system/bluetooth.target.wants

%ghost %dir /etc/systemd/system/default.target.wants

%ghost %dir /etc/systemd/system/getty.target.wants

%ghost %dir /etc/systemd/system/graphical.target.wants

%ghost %dir /etc/systemd/system/local-fs.target.wants

%ghost %dir /etc/systemd/system/machines.target.wants

%ghost %dir /etc/systemd/system/multi-user.target.wants

%ghost %dir /etc/systemd/system/network-online.target.wants

%ghost %dir /etc/systemd/system/printer.target.wants

%ghost %dir /etc/systemd/system/remote-fs.target.wants

%ghost %dir /etc/systemd/system/sockets.target.wants

%ghost %dir /etc/systemd/system/sysinit.target.wants

%ghost %dir /etc/systemd/system/system-update.target.wants

%ghost %dir /etc/systemd/system/timers.target.wants

%ghost %dir /var/lib/rpm-state/systemd

%files libs -f .file-list-libs

%license LICENSE.LGPL2.1

%files pam -f .file-list-pam

%files devel -f .file-list-devel

%files udev -f .file-list-udev

%files container -f .file-list-container

%files journal-remote -f .file-list-remote

%files tests -f .file-list-tests

%changelog

* Sat Jan 20 2018 Björn Esser <besser82@fedoraproject.org> - 236-3.git3e14c4c

- Rebuilt for switch to libxcrypt

* Thu Jan 11 2018 Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 236-2.git23e14c4

- Backport a bunch of bugfixes from upstream (#1531502, #1531381, #1526621

  various memory corruptions in systemd-networkd)

- /dev/kvm is marked as a static node which fixes permissions on s390x

  and ppc64 (#1532382)

* Fri Dec 15 2017 Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 236-1

- Update to latest version

* Mon Dec 11 2017 Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 235-5.git4a0e928

- Update to latest git snapshot, do not build for realz

- Switch to libidn2 again (#1449145)

* Tue Nov 07 2017 Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 235-4

- Rebuild for cryptsetup-2.0.0-0.2.fc28

* Wed Oct 25 2017 Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 235-3

- Backport a bunch of patches, including LP#172535

* Wed Oct 18 2017 Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 235-2

- Patches for cryptsetup _netdev

* Fri Oct  6 2017 Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 235-1

- Update to latest version

* Tue Sep 26 2017 Nathaniel McCallum <npmccallum@redhat.com> - 234-8

- Backport /etc/crypttab _netdev feature from upstream

* Thu Sep 21 2017 Michal Sekletar <msekleta@redhat.com> - 234-7

- Make sure to remove all device units sharing the same sysfs path (#1475570)

* Mon Sep 18 2017 Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 234-6

- Bump xslt recursion limit for libxslt-1.30

* Mon Jul 31 2017 Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 234-5

- Backport more patches (#1476005, hopefully #1462378)

* Thu Jul 27 2017 Fedora Release Engineering <releng@fedoraproject.org>

- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild

* Mon Jul 17 2017 Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 234-3

- Fix x-systemd.timeout=0 in /etc/fstab (#1462378)

- Minor patches (memleaks, --help fixes, seccomp on arm64)

* Thu Jul 13 2017 Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 234-2

- Create kvm group (#1431876)

* Thu Jul 13 2017 Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 234-1

- Latest release

* Sat Jul  1 2017 Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 233-7.git74d8f1c

- Update to snapshot

- Build with meson again

* Tue Jun 27 2017 Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 233-6

- Fix an out-of-bounds write in systemd-resolved (CVE-2017-9445)

* Fri Jun 16 2017 Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 233-5.gitec36d05

- Update to snapshot version, build with meson

* Thu Jun 15 2017 Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 233-4

- Backport a bunch of small fixes (memleaks, wrong format strings,

  man page clarifications, shell completion)

- Fix systemd-resolved crash on crafted DNS packet (CVE-2017-9217, #1455493)

- Fix systemd-vconsole-setup.service error on systems with no VGA console (#1272686)

- Drop soft-static uid for systemd-journal-gateway

- Use ID from /etc/os-release as ntpvendor

* Thu Mar 16 2017 Michal Sekletar <msekleta@redhat.com> - 233-3

- Backport bugfixes from upstream

- Don't return error when machinectl couldn't figure out container IP addresses (#1419501)

* Thu Mar  2 2017 Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 233-2

- Fix installation conflict with polkit

* Thu Mar  2 2017 Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 233-1

- New upstream release (#1416201, #1405439, #1420753, many others)

- New systemd-tests subpackage with "installed tests"

* Thu Feb 16 2017 Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 232-15

- Add %%ghost %%dir entries for .wants dirs of our targets (#1422894)

* Tue Feb 14 2017 Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 232-14

- Ignore the hwdb parser test

* Tue Feb 14 2017 Jan Synáček <jsynacek@redhat.com> - 232-14

- machinectl fails when virtual machine is running (#1419501)

* Sat Feb 11 2017 Fedora Release Engineering <releng@fedoraproject.org> - 232-13

- Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild

* Tue Jan 31 2017 Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 232-12

- Backport patch for initrd-switch-root.service getting killed (#1414904)

- Fix sd-journal-gatewayd -D, --trust, and COREDUMP_CONTAINER_CMDLINE

  extraction by sd-coredump.

* Sun Jan 29 2017 zbyszek <zbyszek@in.waw.pl> - 232-11

- Backport a number of patches (#1411299, #1413075, #1415745,

                                ##1415358, #1416588, #1408884)

- Fix various memleaks and unitialized variable access

- Shell completion enhancements

- Enable TPM logging by default (#1411156)

- Update hwdb (#1270124)

* Thu Jan 19 2017 Adam Williamson <awilliam@redhat.com> - 232-10

- Backport fix for boot failure in initrd-switch-root (#1414904)

* Wed Jan 18 2017 Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 232-9

- Add fake dependency on systemd-pam to systemd-devel to ensure systemd-pam

  is available as multilib (#1414153)

* Tue Jan 17 2017 Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 232-8

- Fix buildsystem to check for lz4 correctly (#1404406)

* Wed Jan 11 2017 Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 232-7

- Various small tweaks to scriplets

* Sat Jan 07 2017 Kevin Fenzi <kevin@scrye.com> - 232-6

- Fix scriptlets to never fail in libs post

* Fri Jan 06 2017 Kevin Fenzi <kevin@scrye.com> - 232-5

- Add patch from Michal Schmidt to avoid process substitution (#1392236)

* Sun Nov  6 2016 Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 232-4

- Rebuild (#1392236)

* Fri Nov  4 2016 Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 232-3

- Make /etc/dbus-1/system.d directory non-%%ghost

* Fri Nov  4 2016 Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 232-2

- Fix kernel-install (#1391829)

- Restore previous systemd-user PAM config (#1391836)

- Move journal-upload.conf.5 from systemd main to journal-remote subpackage (#1391833)

- Fix permissions on /var/lib/systemd/journal-upload (#1262665)

* Thu Nov  3 2016 Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 232-1

- Update to latest version (#998615, #1181922, #1374371, #1390704, #1384150, #1287161)

- Add %%{_isa} to Provides on arch-full packages (#1387912)

- Create systemd-coredump user in %%pre (#1309574)

- Replace grubby patch with a short-circuiting install.d "plugin"

- Enable nss-systemd in the passwd, group lines in nsswith.conf

- Add [!UNAVAIL=return] fallback after nss-resolve in hosts line in nsswith.conf

- Move systemd-nspawn man pages to the right subpackage (#1391703)

* Tue Oct 18 2016 Jan Synáček <jsynacek@redhat.com> - 231-11

- SPC - Cannot restart host operating from container (#1384523)

* Sun Oct  9 2016 Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 231-10

- Do not recreate /var/log/journal on upgrades (#1383066)

- Move nss-myhostname provides to systemd-libs (#1383271)

* Fri Oct  7 2016 Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 231-9

- Fix systemctl set-default (#1374371)

- Prevent systemd-udev-trigger.service from restarting (follow-up for #1378974)

* Tue Oct  4 2016 Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 231-8

- Apply fix for #1378974

* Mon Oct  3 2016 Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 231-7

- Apply patches properly

* Thu Sep 29 2016 Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 231-6

- Better fix for (#1380286)

* Thu Sep 29 2016 Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 231-5

- Denial-of-service bug against pid1 (#1380286)

* Thu Aug 25 2016 Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 231-4

- Fix preset-all (#1363858)

- Fix issue with daemon-reload messing up graphics (#1367766)

- A few other bugfixes

* Wed Aug 03 2016 Adam Williamson <awilliam@redhat.com> - 231-3

- Revert preset-all change, it broke stuff (#1363858)

* Wed Jul 27 2016 Zbigniew Jędrzejewski-Szmek <zbyszek@bupkis> - 231-2

- Call preset-all on initial installation (#1118740)

- Fix botched Recommends for libxkbcommon

* Tue Jul 26 2016 Zbigniew Jędrzejewski-Szmek <zbyszek@bupkis> - 231-1

- Update to latest version

* Wed Jun  8 2016 Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 230-3

- Update to latest git snapshot (fixes for systemctl set-default,

  polkit lingering policy, reversal of the framebuffer rules,

  unaligned access fixes, fix for StartupBlockIOWeight-over-dbus).

  Those changes are interspersed with other changes and new features

  (mostly in lldp, networkd, and nspawn). Some of those new features

  might not work, but I think that existing functionality should not