#global commit c4b843473a75fb38ed5bf54e9d3cfb1cb3719efa

%{?commit:%global shortcommit %(c=%{commit}; echo ${c:0:7})}

# We ship a .pc file but don't want to have a dep on pkg-config. We

# strip the automatically generated dep here and instead co-own the

# directory.

%global __requires_exclude pkg-config

%global pkgdir %{_prefix}/lib/systemd

%global system_unit_dir %{pkgdir}/system

%global user_unit_dir %{pkgdir}/user

%if 0%{?__isa_bits} == 64

%global elf_bits (64bit)

%global elf_suffix ()%{elf_bits}

%endif

# Bootstrap may be needed to break circular dependencies with cryptsetup,

# e.g. when re-building cryptsetup on a json-c SONAME-bump.

%bcond_with    bootstrap

%bcond_without tests

%bcond_without lto

# Support for quick builds with rpmbuild --build-in-place.

# See README.build-in-place.

%bcond_with    inplace

Name:           systemd

Url:            https://systemd.io

%if %{without inplace}

Version:        254~rc1

%else

# determine the build information from local checkout

Version:        %(tools/meson-vcs-tag.sh . error | sed -r 's/-([0-9])/.^\1/; s/-g/_g/')

%endif

Release:        %autorelease

%global stable %(c="%version"; [ "$c" = "${c#*.*}" ]; echo $?)

# For a breakdown of the licensing, see README

License:        LGPL-2.1-or-later AND MIT AND GPL-2.0-or-later

Summary:        System and Service Manager

# download tarballs with "spectool -g systemd.spec"

%if %{defined commit}

Source0:        https://github.com/systemd/systemd%{?stable:-stable}/archive/%{commit}/%{name}-%{shortcommit}.tar.gz

%else

%if 0%{?stable}

Source0:        https://github.com/systemd/systemd-stable/archive/v%{version_no_tilde}/%{name}-%{version_no_tilde}.tar.gz

%else

Source0:        https://github.com/systemd/systemd/archive/v%{version_no_tilde}/%{name}-%{version_no_tilde}.tar.gz

%endif

%endif

# This file must be available before %%prep.

# It is generated during systemd build and can be found in build/src/core/.

Source1:        triggers.systemd

Source2:        split-files.py

Source3:        purge-nobody-user

# Prevent accidental removal of the systemd package

Source4:        yum-protect-systemd.conf

Source5:        inittab

Source6:        sysctl.conf.README

Source7:        systemd-journal-remote.xml

Source8:        systemd-journal-gatewayd.xml

Source9:        20-yama-ptrace.conf

Source10:       systemd-udev-trigger-no-reload.conf

Source13:       libsystemd-shared.abignore

Source14:       10-oomd-defaults.conf

Source15:       10-oomd-per-slice-defaults.conf

Source16:       10-timeout-abort.conf

Source17:       10-map-count.conf

Source21:       macros.sysusers

Source22:       sysusers.attr

Source23:       sysusers.prov

Source24:       sysusers.generate-pre.sh

Source25:       98-default-mac-none.link

%if 0

GIT_DIR=../../src/systemd/.git git format-patch-ab --no-signature -M -N v235..v235-stable

i=1; for j in 00*patch; do printf "Patch%04d:      %s\n" $i $j; i=$((i+1));done|xclip

GIT_DIR=../../src/systemd/.git git diffab -M v233..master@{2017-06-15} -- hwdb/[67]* hwdb/parse_hwdb.py >hwdb.patch

%endif

# Backports of patches from upstream (0000–0499)

#

# Any patches which are "in preparation" upstream should be listed here, rather

# than in the next section. Packit CI will drop any patches in this range before

# applying upstream pull requests.

# https://github.com/systemd/systemd/issues/26488

# https://bugzilla.redhat.com/show_bug.cgi?id=2164404

Patch0001:      https://github.com/systemd/systemd/pull/26494.patch

# Those are downstream-only patches, but we don't want them in packit builds:

# https://bugzilla.redhat.com/show_bug.cgi?id=1738828

Patch0490:      use-bfq-scheduler.patch

# Adjust upstream config to use our shared stack

Patch0491:      fedora-use-system-auth-in-pam-systemd-user.patch

%ifarch %{ix86} x86_64 aarch64

%global have_gnu_efi 1

%endif

BuildRequires:  gcc

BuildRequires:  gcc-c++

BuildRequires:  clang

BuildRequires:  coreutils

BuildRequires:  libcap-devel

BuildRequires:  libmount-devel

BuildRequires:  libfdisk-devel

BuildRequires:  libpwquality-devel

BuildRequires:  pam-devel

BuildRequires:  libselinux-devel

BuildRequires:  audit-libs-devel

%if %{without bootstrap}

BuildRequires:  cryptsetup-devel

%endif

BuildRequires:  dbus-devel

BuildRequires:  /usr/sbin/sfdisk

# /usr/bin/getfacl is needed by test-acl-util

BuildRequires:  /usr/bin/getfacl

BuildRequires:  libacl-devel

BuildRequires:  gobject-introspection-devel

BuildRequires:  libblkid-devel

BuildRequires:  xz-devel

BuildRequires:  xz

BuildRequires:  lz4-devel

BuildRequires:  lz4

BuildRequires:  bzip2-devel

BuildRequires:  libzstd-devel

BuildRequires:  libidn2-devel

BuildRequires:  libcurl-devel

BuildRequires:  kmod-devel

BuildRequires:  elfutils-devel

BuildRequires:  openssl-devel

BuildRequires:  gnutls-devel

%if %{undefined rhel}

BuildRequires:  qrencode-devel

%endif

BuildRequires:  libmicrohttpd-devel

BuildRequires:  libxkbcommon-devel

BuildRequires:  iptables-devel

BuildRequires:  pkgconfig(libfido2)

BuildRequires:  pkgconfig(tss2-esys)

BuildRequires:  pkgconfig(tss2-rc)

BuildRequires:  pkgconfig(tss2-mu)

BuildRequires:  pkgconfig(libbpf)

BuildRequires:  systemtap-sdt-devel

BuildRequires:  libxslt

BuildRequires:  docbook-style-xsl

BuildRequires:  pkgconfig

BuildRequires:  gperf

BuildRequires:  gawk

BuildRequires:  tree

BuildRequires:  hostname

BuildRequires:  python3

BuildRequires:  python3-devel

BuildRequires:  python3dist(jinja2)

BuildRequires:  python3dist(lxml)

BuildRequires:  python3dist(pefile)

%if %{undefined rhel}

BuildRequires:  python3dist(pillow)

BuildRequires:  python3dist(pytest-flakes)

%endif

BuildRequires:  python3dist(pytest)

BuildRequires:  python3dist(zstd)

# gzip and lzma are provided by the stdlib

BuildRequires:  firewalld-filesystem

BuildRequires:  libseccomp-devel

BuildRequires:  meson >= 0.43

BuildRequires:  gettext

# We use RUNNING_ON_VALGRIND in tests, so the headers need to be available

BuildRequires:  valgrind-devel

BuildRequires:  pkgconfig(bash-completion)

BuildRequires:  perl

BuildRequires:  perl(IPC::SysV)

%ifnarch %ix86

# bpftool is not built for i368

BuildRequires:  bpftool

%global have_bpf 1

%endif

%if 0%{?fedora}

%ifarch x86_64 aarch64

# That package is only built for those two architectures

BuildRequires:  xen-devel

%endif

%endif

Requires(post): coreutils

Requires(post): grep

# systemd-machine-id-setup requires libssl

Requires(post): openssl-libs

Requires:       dbus >= 1.9.18

Requires:       %{name}-pam = %{version}-%{release}

Requires(meta): (%{name}-rpm-macros = %{version}-%{release} if rpm-build)

Requires:       %{name}-libs = %{version}-%{release}

%{?fedora:Recommends:     %{name}-networkd = %{version}-%{release}}

%{?fedora:Recommends:     %{name}-resolved = %{version}-%{release}}

Recommends:     diffutils

Requires:       (util-linux-core or util-linux)

Recommends:     libxkbcommon%{_isa}

Provides:       /bin/systemctl

Provides:       /sbin/shutdown

Provides:       syslog

Provides:       systemd-units = %{version}-%{release}

Obsoletes:      system-setup-keyboard < 0.9

Provides:       system-setup-keyboard = 0.9

# systemd-sysv-convert was removed in f20: https://fedorahosted.org/fpc/ticket/308

Obsoletes:      systemd-sysv < 206

# self-obsoletes so that dnf will install new subpackages on upgrade (#1260394)

Obsoletes:      %{name} < 249~~

Provides:       systemd-sysv = 206

Conflicts:      initscripts < 9.56.1

%if 0%{?fedora}

Conflicts:      fedora-release < 23-0.12

%endif

Obsoletes:      timedatex < 0.6-3

Provides:       timedatex = 0.6-3

Conflicts:      %{name}-standalone-repart < %{version}-%{release}^

Provides:       %{name}-repart = %{version}-%{release}

Conflicts:      %{name}-standalone-tmpfiles < %{version}-%{release}^

Provides:       %{name}-tmpfiles = %{version}-%{release}

Conflicts:      %{name}-standalone-sysusers < %{version}-%{release}^

Provides:       %{name}-sysusers = %{version}-%{release}

Conflicts:      %{name}-standalone-shutdown < %{version}-%{release}^

Provides:       %{name}-shutdown = %{version}-%{release}

# Recommends to replace normal Requires deps for stuff that is dlopen()ed

Recommends:     libidn2.so.0%{?elf_suffix}

Recommends:     libidn2.so.0(IDN2_0.0.0)%{?elf_bits}

Recommends:     libpcre2-8.so.0%{?elf_suffix}

Recommends:     libpwquality.so.1%{?elf_suffix}

Recommends:     libpwquality.so.1(LIBPWQUALITY_1.0)%{?elf_bits}

%if %{undefined rhel}

Recommends:     libqrencode.so.4%{?elf_suffix}

%endif

Recommends:     libbpf.so.0%{?elf_suffix}

Recommends:     libbpf.so.0(LIBBPF_0.4.0)%{?elf_bits}

# used by systemd-coredump and systemd-analyze

Recommends:     libdw.so.1%{?elf_suffix}

Recommends:     libdw.so.1(ELFUTILS_0.186)%{?elf_bits}

Recommends:     libelf.so.1%{?elf_suffix}

Recommends:     libelf.so.1(ELFUTILS_1.7)%{?elf_bits}

# used by dissect, integritysetup, veritysetyp, growfs, repart, cryptenroll, home

Recommends:     libcryptsetup.so.12%{?elf_suffix}

Recommends:     libcryptsetup.so.12(CRYPTSETUP_2.4)%{?elf_bits}

%description

systemd is a system and service manager that runs as PID 1 and starts the rest

of the system. It provides aggressive parallelization capabilities, uses socket

and D-Bus activation for starting services, offers on-demand starting of

daemons, keeps track of processes using Linux control groups, maintains mount

and automount points, and implements an elaborate transactional dependency-based

service control logic. systemd supports SysV and LSB init scripts and works as a

replacement for sysvinit. Other parts of this package are a logging daemon,

utilities to control basic system configuration like the hostname, date, locale,

maintain a list of logged-in users, system accounts, runtime directories and

settings, and a logging daemons.

%if 0%{?stable}

This package was built from the %(c=%version; echo "v${c%.*}-stable") branch of systemd.

%endif

%package libs

Summary:        systemd libraries

License:        LGPL-2.1-or-later AND MIT

Obsoletes:      libudev < 183

Obsoletes:      systemd < 185-4

Conflicts:      systemd < 185-4

Obsoletes:      systemd-compat-libs < 230

Obsoletes:      nss-myhostname < 0.4

Provides:       nss-myhostname = 0.4

Provides:       nss-myhostname%{_isa} = 0.4

%description libs

Libraries for systemd and udev.

%package pam

Summary:        systemd PAM module

Requires:       %{name} = %{version}-%{release}

%description pam

Systemd PAM module registers the session with systemd-logind.

%package rpm-macros

Summary:        Macros that define paths and scriptlets related to systemd

BuildArch:      noarch

%description rpm-macros

Just the definitions of rpm macros.

See

https://docs.fedoraproject.org/en-US/packaging-guidelines/Scriptlets/#_systemd

for information how to use those macros.

%package devel

Summary:        Development headers for systemd

License:        LGPL-2.1-or-later AND MIT

Requires:       %{name}-libs%{_isa} = %{version}-%{release}

Requires(meta): (%{name}-rpm-macros = %{version}-%{release} if rpm-build)

Provides:       libudev-devel = %{version}

Provides:       libudev-devel%{_isa} = %{version}

Obsoletes:      libudev-devel < 183

%description devel

Development headers and auxiliary files for developing applications linking

to libudev or libsystemd.

%package udev

Summary: Rule-based device node and kernel event manager

License:        LGPL-2.1-or-later

Requires:       systemd%{_isa} = %{version}-%{release}

Requires(post):   systemd

Requires(preun):  systemd

Requires(postun): systemd

Requires(post): grep

Requires:       kmod >= 18-4

# https://bodhi.fedoraproject.org/updates/FEDORA-2020-dd43dd05b1

Obsoletes:      systemd < 245.6-1

Provides:       udev = %{version}

Provides:       udev%{_isa} = %{version}

Obsoletes:      udev < 183

# Recommends to replace normal Requires deps for stuff that is dlopen()ed

# used by dissect, integritysetup, veritysetyp, growfs, repart, cryptenroll, home

Recommends:     libcryptsetup.so.12%{?elf_suffix}

Recommends:     libcryptsetup.so.12(CRYPTSETUP_2.4)%{?elf_bits}

# used by systemd-coredump and systemd-analyze

Recommends:     libdw.so.1%{?elf_suffix}

Recommends:     libdw.so.1(ELFUTILS_0.186)%{?elf_bits}

Recommends:     libelf.so.1%{?elf_suffix}

Recommends:     libelf.so.1(ELFUTILS_1.7)%{?elf_bits}

# used by home, cryptsetup, cryptenroll, logind

Recommends:     libfido2.so.1%{?elf_suffix}

Recommends:     libp11-kit.so.0%{?elf_suffix}

Recommends:     libtss2-esys.so.0%{?elf_suffix}

Recommends:     libtss2-mu.so.0%{?elf_suffix}

Recommends:     libtss2-rc.so.0%{?elf_suffix}

# https://bugzilla.redhat.com/show_bug.cgi?id=1377733#c9

Suggests:       systemd-bootchart

# https://bugzilla.redhat.com/show_bug.cgi?id=1408878

Requires:       kbd

# https://bugzilla.redhat.com/show_bug.cgi?id=1753381

Provides:       u2f-hidraw-policy = 1.0.2-40

Obsoletes:      u2f-hidraw-policy < 1.0.2-40

# self-obsoletes to install both packages after split of systemd-boot

Obsoletes:      systemd-udev < 252.2^

%description udev

This package contains systemd-udev and the rules and hardware database needed to

manage device nodes. This package is necessary on physical machines and in

virtual machines, but not in containers.

This package also provides systemd-timesyncd, a network time protocol daemon.

It also contains tools to manage encrypted home areas and secrets bound to the

machine, and to create or grow partitions and make file systems automatically.

%if 0%{?have_gnu_efi}

%package ukify

Summary:        Tool to build Unified Kernel Images

Requires:       %{name} = %{version}-%{release}

# We prefer llvm-objcopy over objcopy.

Requires:       (llvm or binutils)

Recommends:     llvm

Requires:       python3dist(pefile)

Requires:       python3dist(zstd)

Recommends:     python3dist(pillow)

BuildArch:      noarch

%description ukify

This package provides ukify, a script that combines a kernel image, an initrd,

with a command line, and possibly PCR measurements and other metadata, into a

Unified Kernel Image (UKI).

%package boot-unsigned

Summary: UEFI boot manager (unsigned version)

Provides: systemd-boot-unsigned-%{efi_arch} = %version-%release

Provides: systemd-boot = %version-%release

Provides: systemd-boot%{_isa} = %version-%release

# A provides with just the version, no release or dist, used to build systemd-boot

Provides: version(systemd-boot-unsigned) = %version

Provides: version(systemd-boot-unsigned)%{_isa} = %version

# self-obsoletes to install both packages after split of systemd-boot

Obsoletes:      systemd-udev < 252.2^

%description boot-unsigned

systemd-boot (short: sd-boot) is a simple UEFI boot manager. It provides a

graphical menu to select the entry to boot and an editor for the kernel command

line. systemd-boot supports systems with UEFI firmware only.

This package contains the unsigned version. Install systemd-boot instead to get

the version that works with Secure Boot.

%endif

%package container

# Name is the same as in Debian

Summary: Tools for containers and VMs

Requires:       %{name}%{_isa} = %{version}-%{release}

Requires(post):   systemd

Requires(preun):  systemd

Requires(postun): systemd

# obsolete parent package so that dnf will install new subpackage on upgrade (#1260394)

Obsoletes:      %{name} < 229-5

# Bias the system towards libcurl-minimal if nothing pulls in full libcurl (#1997040)

Suggests:       libcurl-minimal

License:        LGPL-2.1-or-later

%description container

Systemd tools to spawn and manage containers and virtual machines.

This package contains systemd-nspawn, machinectl, systemd-machined, and

systemd-importd.

%package journal-remote

# Name is the same as in Debian

Summary:        Tools to send journal events over the network

Requires:       %{name}%{_isa} = %{version}-%{release}

License:        LGPL-2.1-or-later

Requires:       firewalld-filesystem

Provides:       %{name}-journal-gateway = %{version}-%{release}

Provides:       %{name}-journal-gateway%{_isa} = %{version}-%{release}

Obsoletes:      %{name}-journal-gateway < 227-7

# Bias the system towards libcurl-minimal if nothing pulls in full libcurl (#1997040)

Suggests:       libcurl-minimal

%description journal-remote

Programs to forward journal entries over the network, using encrypted HTTP, and

to write journal files from serialized journal contents.

This package contains systemd-journal-gatewayd, systemd-journal-remote, and

systemd-journal-upload.

%package networkd

Summary:        System daemon that manages network configurations

Requires:       %{name}%{_isa} = %{version}-%{release}

License:        LGPL-2.1-or-later

# https://src.fedoraproject.org/rpms/systemd/pull-request/34

Obsoletes:      systemd < 246.6-2

%description networkd

systemd-networkd is a system service that manages networks. It detects and

configures network devices as they appear, as well as creating virtual network

devices.

%package resolved

Summary:        Network Name Resolution manager

Requires:       %{name}%{_isa} = %{version}-%{release}

Obsoletes:      %{name} < 249~~

Requires:       libidn2.so.0%{?elf_suffix}

Requires:       libidn2.so.0(IDN2_0.0.0)%{?elf_bits}

Requires(posttrans): grep

%description resolved

systemd-resolved is a system service that provides network name resolution to

local applications. It implements a caching and validating DNS/DNSSEC stub

resolver, as well as an LLMNR and MulticastDNS resolver and responder.

%package oomd-defaults

Summary:        Configuration files for systemd-oomd

Requires:       %{name} = %{version}-%{release}

License:        LGPL-2.1-or-later

BuildArch:      noarch

%description oomd-defaults

A set of drop-in files for systemd units to enable action from systemd-oomd,

a userspace out-of-memory (OOM) killer.

%package tests

Summary:       Internal unit tests for systemd

Requires:      %{name}%{_isa} = %{version}-%{release}

License:       LGPL-2.1-or-later

%description tests

"Installed tests" that are usually run as part of the build system. They can be

useful to test systemd internals.

%package standalone-repart

Summary:       Standalone systemd-repart binary for use on systems without systemd

Provides:      %{name}-repart = %{version}-%{release}

RemovePathPostfixes: .standalone

%description standalone-repart

Standalone systemd-repart binary with no dependencies on the systemd-shared library or

other libraries from systemd-libs. This package conflicts with the main systemd

package and is meant for use on systems without systemd.

%package standalone-tmpfiles

Summary:       Standalone systemd-tmpfiles binary for use on systems without systemd

Provides:      %{name}-tmpfiles = %{version}-%{release}

RemovePathPostfixes: .standalone

%description standalone-tmpfiles

Standalone systemd-tmpfiles binary with no dependencies on the systemd-shared library or

other libraries from systemd-libs. This package conflicts with the main systemd

package and is meant for use on systems without systemd.

%package standalone-sysusers

Summary:       Standalone systemd-sysusers binary for use on systems without systemd

Provides:      %{name}-sysusers = %{version}-%{release}

RemovePathPostfixes: .standalone

%description standalone-sysusers

Standalone systemd-sysusers binary with no dependencies on the systemd-shared library or

other libraries from systemd-libs. This package conflicts with the main systemd

package and is meant for use on systems without systemd.

%package standalone-shutdown

Summary:       Standalone systemd-shutdown binary for use on systems without systemd

Provides:      %{name}-shutdown = %{version}-%{release}

RemovePathPostfixes: .standalone

%description standalone-shutdown

Standalone systemd-shutdown binary with no dependencies on the systemd-shared library or

other libraries from systemd-libs. This package conflicts with the main systemd

package and is meant for use in exitrds.

%prep

%autosetup -n %{?commit:%{name}%[%stable?"-stable":""]-%{commit}}%{!?commit:%{name}%[%stable?"-stable":""]-%{version_no_tilde}} -p1

# We want to update sd-boot from packaging scriptlets after package update.

# Let's disable the service.

sed -r -i '/^enable systemd-boot-update.service/d' presets/90-systemd.preset

sed -r 's|/system/|/user/|g' %{SOURCE16} >10-timeout-abort.conf.user

%generate_buildrequires

%if 0%{?have_gnu_efi}

if grep -q gnu-efi meson_options.txt; then

  echo 'gnu-efi'

  echo 'gnu-efi-devel'

else

  echo 'python3dist(pyelftools)'

fi

%endif

%build

%global ntpvendor %(source /etc/os-release; echo ${ID})

%{!?ntpvendor: echo 'NTP vendor zone is not set!'; exit 1}

CONFIGURE_OPTS=(

        -Dmode=release

        -Dsysvinit-path=/etc/rc.d/init.d

        -Drc-local=/etc/rc.d/rc.local

        -Dntp-servers='0.%{ntpvendor}.pool.ntp.org 1.%{ntpvendor}.pool.ntp.org 2.%{ntpvendor}.pool.ntp.org 3.%{ntpvendor}.pool.ntp.org'

        -Ddns-servers=

        -Duser-path=/usr/local/bin:/usr/local/sbin:/usr/bin:/usr/sbin

        -Dservice-watchdog=

        -Ddev-kvm-mode=0666

        -Dkmod=true

        -Dxkbcommon=true

        -Dblkid=true

        -Dfdisk=true

        -Dseccomp=true

        -Dima=true

        -Dselinux=true

        -Dbpf-framework=%[0%{?have_bpf}?"true":"false"]

        -Dapparmor=false

        -Dpolkit=true

        -Dxz=true

        -Dzlib=true

        -Dbzip2=true

        -Dlz4=true

        -Dzstd=true

        -Dpam=true

        -Dacl=true

        -Dsmack=true

        -Dopenssl=true

        -Dcryptolib=openssl

        -Dp11kit=true

        -Dgcrypt=false

        -Daudit=true

        -Delfutils=true

        -Dlibcryptsetup=%[%{with bootstrap}?"false":"true"]

        -Delfutils=true

        -Dpwquality=true

        -Dqrencode=%[%{defined rhel}?"false":"true"]

        -Dgnutls=true

        -Dmicrohttpd=true

        -Dlibidn2=true

        -Dlibiptc=false

        -Dlibcurl=true

        -Dlibfido2=true

        -Defi=true

        -Dtpm=true

        -Dtpm2=true

        -Dhwdb=true

        -Dsysusers=true

        -Dstandalone-binaries=true

        -Ddefault-kill-user-processes=false

        -Dfirst-boot-full-preset=true

        -Dtests=unsafe

        -Dinstall-tests=true

        -Dtty-gid=5

        -Dusers-gid=100

        -Dnobody-user=nobody

        -Dnobody-group=nobody

        -Dcompat-mutable-uid-boundaries=true

        -Dsplit-usr=false

        -Dsplit-bin=true

        -Db_lto=%[%{with lto}?"true":"false"]

        -Db_ndebug=false

        -Dman=true

        -Dversion-tag=%{version}-%{release}

        # https://bugzilla.redhat.com/show_bug.cgi?id=1906010

        -Dshared-lib-tag=%{version_no_tilde}-%{release}

        -Dfallback-hostname="localhost"

        -Ddefault-dnssec=no

        -Ddefault-dns-over-tls=no

        # https://bugzilla.redhat.com/show_bug.cgi?id=1867830

        -Ddefault-mdns=no

        -Ddefault-llmnr=resolve

        # https://bugzilla.redhat.com/show_bug.cgi?id=2028169

        -Dstatus-unit-format-default=combined

        # https://fedoraproject.org/wiki/Changes/Shorter_Shutdown_Timer

        -Ddefault-timeout-sec=45

        -Ddefault-user-timeout-sec=45

        -Doomd=true

        -Dadm-gid=4

        -Daudio-gid=63

        -Dcdrom-gid=11

        -Ddialout-gid=18

        -Ddisk-gid=6

        -Dinput-gid=104

        -Dkmem-gid=9

        -Dkvm-gid=36

        -Dlp-gid=7

        -Drender-gid=105

        -Dsgx-gid=106

        -Dtape-gid=33

        -Dtty-gid=5

        -Dusers-gid=100

        -Dutmp-gid=22

        -Dvideo-gid=39

        -Dwheel-gid=10

        -Dsystemd-journal-gid=190

        -Dsystemd-network-uid=192

        -Dsystemd-resolve-uid=193

        # -Dsystemd-timesync-uid=, not set yet

)

if grep gnu-efi meson_options.txt; then

  CONFIGURE_OPTS+=( -Dgnu-efi=%[%{?have_gnu_efi}?"true":"false"] )

else

  # For now, let's build the bootloader in the same places where we

  # built with gnu-efi. Later on, we might want to extend coverage, but

  # considering that that support is untested, let's not do this now.

  CONFIGURE_OPTS+=( -Dbootloader=%[%{?have_gnu_efi}?"true":"false"] )

fi

%if %{without lto}

%global _lto_cflags %nil

%endif

# Do configuration. If doing an inplace build, try to do

# reconfiguration to pick up new options.

%if %{with inplace}

  command -v ccache 2>/dev/null && { CC="${CC:-ccache %__cc}"; CXX="${CXX:-ccache %__cxx}"; }

  [ -e %{_vpath_builddir}/build.ninja ] &&

  %__meson configure %{_vpath_builddir} "${CONFIGURE_OPTS[@]}" ||

%endif

{ %meson "${CONFIGURE_OPTS[@]}"; }

%meson_build

new_triggers=%{_vpath_builddir}/src/rpm/triggers.systemd.sh

if ! diff -u %{SOURCE1} ${new_triggers}; then

   echo -e "\n\n\nWARNING: triggers.systemd in Source1 is different!"

   echo -e "      cp $PWD/${new_triggers} %{SOURCE1}\n\n\n"

   sleep 5

fi

%install

%meson_install

# udev links

mkdir -p %{buildroot}/%{_sbindir}

ln -sf ../bin/udevadm %{buildroot}%{_sbindir}/udevadm

# Compatiblity and documentation files

touch %{buildroot}/etc/crypttab

chmod 600 %{buildroot}/etc/crypttab

# /etc/initab

install -Dm0644 -t %{buildroot}/etc/ %{SOURCE5}

# /etc/sysctl.conf compat

install -Dm0644 %{SOURCE6} %{buildroot}/etc/sysctl.conf

ln -s ../sysctl.conf %{buildroot}/etc/sysctl.d/99-sysctl.conf

# Make sure these directories are properly owned

mkdir -p %{buildroot}%{system_unit_dir}/basic.target.wants

mkdir -p %{buildroot}%{system_unit_dir}/default.target.wants

mkdir -p %{buildroot}%{system_unit_dir}/dbus.target.wants

mkdir -p %{buildroot}%{system_unit_dir}/syslog.target.wants

mkdir -p %{buildroot}/run

mkdir -p %{buildroot}%{_localstatedir}/log

touch %{buildroot}%{_localstatedir}/log/lastlog

chmod 0664 %{buildroot}%{_localstatedir}/log/lastlog

touch %{buildroot}/run/utmp

touch %{buildroot}%{_localstatedir}/log/{w,b}tmp

# Make sure the user generators dir exists too

mkdir -p %{buildroot}%{pkgdir}/system-generators

mkdir -p %{buildroot}%{pkgdir}/user-generators

# Create new-style configuration files so that we can ghost-own them

touch %{buildroot}%{_sysconfdir}/hostname

touch %{buildroot}%{_sysconfdir}/vconsole.conf

touch %{buildroot}%{_sysconfdir}/locale.conf

touch %{buildroot}%{_sysconfdir}/machine-id

touch %{buildroot}%{_sysconfdir}/machine-info

touch %{buildroot}%{_sysconfdir}/localtime

mkdir -p %{buildroot}%{_sysconfdir}/X11/xorg.conf.d

touch %{buildroot}%{_sysconfdir}/X11/xorg.conf.d/00-keyboard.conf

# Make sure the shutdown/sleep drop-in dirs exist

mkdir -p %{buildroot}%{pkgdir}/system-shutdown/

mkdir -p %{buildroot}%{pkgdir}/system-sleep/

# Make sure directories in /var exist

mkdir -p %{buildroot}%{_localstatedir}/lib/systemd/coredump

mkdir -p %{buildroot}%{_localstatedir}/lib/systemd/catalog

mkdir -p %{buildroot}%{_localstatedir}/lib/systemd/backlight

mkdir -p %{buildroot}%{_localstatedir}/lib/systemd/rfkill

mkdir -p %{buildroot}%{_localstatedir}/lib/systemd/linger

mkdir -p %{buildroot}%{_localstatedir}/lib/private

mkdir -p %{buildroot}%{_localstatedir}/log/private

mkdir -p %{buildroot}%{_localstatedir}/cache/private

mkdir -p %{buildroot}%{_localstatedir}/lib/private/systemd/journal-upload

mkdir -p %{buildroot}%{_localstatedir}/lib/systemd/timesync

ln -s ../private/systemd/journal-upload %{buildroot}%{_localstatedir}/lib/systemd/journal-upload

mkdir -p %{buildroot}%{_localstatedir}/log/journal

touch %{buildroot}%{_localstatedir}/lib/systemd/catalog/database

touch %{buildroot}%{_sysconfdir}/udev/hwdb.bin

touch %{buildroot}%{_localstatedir}/lib/systemd/random-seed

touch %{buildroot}%{_localstatedir}/lib/systemd/timesync/clock

touch %{buildroot}%{_localstatedir}/lib/private/systemd/journal-upload/state

# Install yum protection fragment

install -Dm0644 %{SOURCE4} %{buildroot}/etc/dnf/protected.d/systemd.conf

install -Dm0644 -t %{buildroot}/usr/lib/firewalld/services/ %{SOURCE7} %{SOURCE8}

# Install additional docs

# https://bugzilla.redhat.com/show_bug.cgi?id=1234951

install -Dm0644 -t %{buildroot}%{_pkgdocdir}/ %{SOURCE9}

# https://bugzilla.redhat.com/show_bug.cgi?id=1378974

install -Dm0644 -t %{buildroot}%{system_unit_dir}/systemd-udev-trigger.service.d/ %{SOURCE10}

install -Dm0644 -t %{buildroot}%{_prefix}/lib/systemd/ %{SOURCE13}

install -D -t %{buildroot}/usr/lib/systemd/ %{SOURCE3}

# systemd-oomd default configuration

install -Dm0644 -t %{buildroot}%{_prefix}/lib/systemd/oomd.conf.d/ %{SOURCE14}

install -Dm0644 -t %{buildroot}%{system_unit_dir}/system.slice.d/ %{SOURCE15}

install -Dm0644 -t %{buildroot}%{user_unit_dir}/slice.d/ %{SOURCE15}

# https://fedoraproject.org/wiki/Changes/Shorter_Shutdown_Timer

install -Dm0644 -t %{buildroot}%{system_unit_dir}/service.d/ %{SOURCE16}

install -Dm0644 10-timeout-abort.conf.user %{buildroot}%{user_unit_dir}/service.d/10-timeout-abort.conf

# https://fedoraproject.org/wiki/Changes/IncreaseVmMaxMapCount

install -Dm0644 -t %{buildroot}%{_prefix}/lib/sysctl.d/ %{SOURCE17}

sed -i 's|#!/usr/bin/env python3|#!%{__python3}|' %{buildroot}/usr/lib/systemd/tests/run-unit-tests.py

install -m 0644 -D -t %{buildroot}%{_rpmconfigdir}/macros.d/ %{SOURCE21}

# Use rpm's own sysusers provides where available

%if ! (0%{?fedora} >= 39 || 0%{?rhel} >= 10)

install -m 0644 -D -t %{buildroot}%{_rpmconfigdir}/fileattrs/ %{SOURCE22}

install -m 0755 -D -t %{buildroot}%{_rpmconfigdir}/ %{SOURCE23}

%endif

install -m 0755 -D -t %{buildroot}%{_rpmconfigdir}/ %{SOURCE24}

# https://bugzilla.redhat.com/show_bug.cgi?id=2107754

install -Dm0644 -t %{buildroot}%{_prefix}/lib/systemd/network/ %{SOURCE25}

%find_lang %{name}

# Split files in build root into rpms. See split-files.py for the

# rules towards the end, anything which is an exception needs a line

# here.

python3 %{SOURCE2} %buildroot <

%ghost %config(noreplace) /etc/crypttab

%ghost %attr(0444,root,root) /etc/udev/hwdb.bin

/etc/inittab

/usr/lib/systemd/purge-nobody-user

%ghost %config(noreplace) /etc/vconsole.conf

%ghost %config(noreplace) /etc/X11/xorg.conf.d/00-keyboard.conf

%ghost %attr(0664,root,root) %verify(not group) /run/utmp

%ghost %attr(0664,root,root) %verify(not group) /var/log/wtmp

%ghost %attr(0660,root,root) %verify(not group) /var/log/btmp

%ghost %attr(0664,root,root) %verify(not md5 size mtime group) /var/log/lastlog

%ghost %config(noreplace) /etc/hostname

%ghost %config(noreplace) /etc/localtime

%ghost %config(noreplace) /etc/locale.conf

%ghost %attr(0444,root,root) %config(noreplace) /etc/machine-id

%ghost %config(noreplace) /etc/machine-info

%ghost %attr(0700,root,root) %dir /var/cache/private

%ghost %attr(0700,root,root) %dir /var/lib/private

%ghost %dir /var/lib/private/systemd

%ghost %dir /var/lib/private/systemd/journal-upload

%ghost /var/lib/private/systemd/journal-upload/state

%ghost %dir /var/lib/systemd/timesync

%ghost /var/lib/systemd/timesync/clock

%ghost %dir /var/lib/systemd/backlight

%ghost /var/lib/systemd/catalog/database

%ghost %dir /var/lib/systemd/coredump

%ghost /var/lib/systemd/journal-upload

%ghost %dir /var/lib/systemd/linger

%ghost %attr(0600,root,root) /var/lib/systemd/random-seed

%ghost %dir /var/lib/systemd/rfkill

%ghost %dir %verify(not mode group) /var/log/journal

%ghost %dir /var/log/journal/remote

%ghost %attr(0700,root,root) %dir /var/log/private

EOF

%check

%if %{with tests}

meson test -C %{_vpath_builddir} -t 6 --print-errorlogs

%endif

#############################################################################################

%include %{SOURCE1}

%post

systemd-machine-id-setup &>/dev/null || :

# FIXME: move to %postun. We want to restart systemd *after* removing

# files from the old rpm. Right now we may still have bits the old

# setup if the files are not present in the new version. But before

# implement restarting of *other* services after the transaction, moving

# this would make things worse, increasing the number of warnings we get

# about needed daemon-reload.

oomd_state=$(systemctl is-active systemd-oomd 2>/dev/null || :)

# Work-around for #1931034. Remove after F34 is released.

if [ "$oomd_state" == "active" ]; then

   systemctl stop -q systemd-oomd 2>/dev/null || :