Gentoo Archives: gentoo-commits

From: Thomas Deutschmann <whissi@g.o>
To: gentoo-commits@l.g.o
Subject: [gentoo-commits] repo/gentoo:master commit in: net-firewall/shorewall/, net-firewall/shorewall/files/
Date: Sat, 09 May 2020 21:41:49
Message-Id: 1589060499.eb76aa720f58dcf4776b236b9afe4e06a0fa98ae.whissi@gentoo
1 commit: eb76aa720f58dcf4776b236b9afe4e06a0fa98ae
2 Author: Thomas Deutschmann <whissi <AT> gentoo <DOT> org>
3 AuthorDate: Sat May 9 21:41:27 2020 +0000
4 Commit: Thomas Deutschmann <whissi <AT> gentoo <DOT> org>
5 CommitDate: Sat May 9 21:41:39 2020 +0000
6 URL: https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=eb76aa72
7
8 net-firewall/shorewall: drop old
9
10 Package-Manager: Portage-2.3.99, Repoman-2.3.22
11 Signed-off-by: Thomas Deutschmann <whissi <AT> gentoo.org>
12
13 net-firewall/shorewall/Manifest | 14 -
14 ...all-init-01_remove-ipset-functionality-r1.patch | 30 --
15 net-firewall/shorewall/shorewall-5.2.3.7.ebuild | 482 ---------------------
16 net-firewall/shorewall/shorewall-5.2.4.ebuild | 482 ---------------------
17 4 files changed, 1008 deletions(-)
18
19 diff --git a/net-firewall/shorewall/Manifest b/net-firewall/shorewall/Manifest
20 index 9ea8ede1bb1..a9a781cc953 100644
21 --- a/net-firewall/shorewall/Manifest
22 +++ b/net-firewall/shorewall/Manifest
23 @@ -1,21 +1,7 @@
24 -DIST shorewall-5.2.3.7.tar.bz2 579234 BLAKE2B 968d9f23f9d66d1326dfd9c0b989959a1a8449f6dd3230d9191cb3f3be805065fe4d1ab5e7bd679b5da7ebbf625654dc0a878a4ebc6346e51a9d2588102e52b5 SHA512 c0f90d5cbbc6a9cad443b3ecfedda79bee71f79685049c421d8bba3826e5c874c7c31f09f243d3728514684983a27c8d4ac6854b55766fbcf34f6937f8ab28bd
25 DIST shorewall-5.2.4.4.tar.bz2 581085 BLAKE2B 6830f1ce9350534a51b0d79efad07b338c511ab3cc1bf151ac958052c5feb1794d994a71e80ebf1546a76fae1718ebc74abab37fbb4d9362d8b3108133b30354 SHA512 c050af24969c2f18c4c020dfb611edaf9c6a5aa09d1dace502ae99b9aa82d7f217695e8099d6615a9a3c9f6de951f6d8b24621021c48ee2f2095edf9815a8d57
26 -DIST shorewall-5.2.4.tar.bz2 579480 BLAKE2B 5bbca22cfa11dc482859c2703d54f35f55f1c8db46286c3480879eb47d562358a73412f0ba3ba4af9d3763c838608269a70668daf30accb07314245308f46022 SHA512 2eee8b8e86aef29f646f324dcbd156eae7a687db179361e03172ef4792f2665fd3623830028a748ea3506ffbb2f59afa9f7deba7862643aff7628857aa2ac63c
27 -DIST shorewall-core-5.2.3.7.tar.bz2 71454 BLAKE2B 3df2b99dfbde169a817f4a5f45876c07dbdcda432763c1227fd86d9f2e2556c639595db9c57f195a404535c72f33ae1211aee080e5df37c342f6ebd4be2a5994 SHA512 e708ee48bc087cef24959b22430c8d8814d5c2f9315988c410e6fa59b4dca9c8b48501fea9515115e760d902d9e9719f33c1310d91a83550030a8768efd18751
28 DIST shorewall-core-5.2.4.4.tar.bz2 73257 BLAKE2B 16b8d3a1d08c9db6a939f946324295063cee71b373bd67dd85d0acb4332502df4b5d9bb932695228ad6d33395c6596e86fd3e77ca59abc99d88bab7e883777c9 SHA512 1868dcd6bad6b0cb5be2c1b0724f076605e7990d0b9dfd19fee06c758b19f2ebcbe18bccaa7a4ea861ceb26038ed07837eecdacdd2a02d0c2a927c732d6bdc30
29 -DIST shorewall-core-5.2.4.tar.bz2 71532 BLAKE2B edd3762b39db162775e05d30e3ddeac244ca4375ee74bc1581af85879ddcfda22e6cae7b1357ddf5b0df615a4f5072457b1e34918bde5cb43273b21dd60f76ba SHA512 40add35f175abd62ede0b0b8f84151d7a81d56bcc3d622ed9ac676e382bd33cfee648da205f23ead462b5e6e577784c79ffdcdde5f45c731c6d93c11788d982d
30 -DIST shorewall-docs-html-5.2.3.7.tar.bz2 4293387 BLAKE2B 6a0ffe8eac171c13961fcf448932b7287cdca3e1da895020d5551d135fe542ca8dba3e0cba7f505ec9a204649dd5fd9849613bbb30d2970a45f321b46aa74ba5 SHA512 19c5bb80f40c9df8262e6ee00908f64d3e2d489c734bdecf6faec5f8d23bf3b6201ed21673900a2906053bc7d59872b7974262caf9883207126a082bbb2cb281
31 DIST shorewall-docs-html-5.2.4.4.tar.bz2 4294159 BLAKE2B 81bb4a9d086f48bf8551be3bc8aff0ed8a0a99d215338f12b711c96115507ea5a7eb567d084db0a93628c4036623a72231f33dd15671e84739d59608268b98c7 SHA512 086096604f5a580906f05b460e1e19df24620b610675a8ec6038c0061199fd6f09cd8aff08f1e8daa8d2898bfaec9db95cf7f4f1397ca9df784d420907b16fac
32 -DIST shorewall-docs-html-5.2.4.tar.bz2 4293639 BLAKE2B c024da5a3fab5f98c0913f294dafd85eced4c259762f5f06d9e98a74ea2e1ac5c0565e027609da472bd911e08027a6524e7cf97e2ec06c70965e5088fa3c331e SHA512 cb3ce47a892e92a032d4f49d693b23ad47ad3a0effb44cb24c0ff86f9b9b75eaa231210369a0ae10789bddedbbfd4c2a8a11bef9695591ef22351570c5abe481
33 -DIST shorewall-init-5.2.3.7.tar.bz2 35860 BLAKE2B b6046004c246113105206f2a034e0d8930a8283c3431675a2cb5c29b1509619b5d79a03bdf8c1daea085a330344ffe519a0b9d7ec860fdcd3603efd739613d2e SHA512 f3f231923a5d352cb8288d051568d4dbf24ef38122a1d8ae0c158b317c09146d938389597a5f57e9099c7c1b283780357b74f8605ea1e14393a0e3b1fa6b1118
34 DIST shorewall-init-5.2.4.4.tar.bz2 38048 BLAKE2B 01b4664396933ca303d4013d50f290be850dad51142257a7b1f3081cee3baac219feadc96636c732072c6918f83d847eca2107aa094804691500972a90f222fd SHA512 fdab4aa68429144cbffdf41aad78744feb3e9736df0e8d6ed87ed7ac80aebf7078c6ec28646069a71cacc8d9a6738605d59c6b6fb35d8c4d9a1ed8353a71775c
35 -DIST shorewall-init-5.2.4.tar.bz2 36672 BLAKE2B 9b1d8e4670f2fadca9c3ffb4aade2734ab2714ae86d9b66728595b9e6c222b151be064634ea374767adea4424d578b7f7369acab855a5716e6f8def2f35d7b6f SHA512 7a68eb0c8e40e778123c0ecc60c2210888c1e6c68fd282e0d4f2fb2fdac3f1f00dde521c157520a1edd31ef77fe40e5d15834c5ce7d3d5500ae5fb8d66a6a324
36 -DIST shorewall-lite-5.2.3.7.tar.bz2 40674 BLAKE2B cf7ed3c81ab3a49556e61f48bdabf828dbb79a4c0a6c431f9ce77a4f15ec33ccbfc6bc5b1e6a942d695795679670bdb3ff22c37c54bcc4cd3552f6117bb4834b SHA512 c83f349f2626fe98a2f968a76fb48de2e7412f95ed0e72c48724cd93fe6e3b480d6cc185b5445434432bbf40ffaef7dbb875c4b5494f7875ce1f96f345314ea6
37 DIST shorewall-lite-5.2.4.4.tar.bz2 42806 BLAKE2B d6dd5d9268d40fb88ee99be36b359423a6d7785417752f6e9d7245806bf9677963851327dcfd0d5fe81ea54ab11d59a5e64ee4115d41d3a6c8f4ced1e7cda732 SHA512 b81aa04f124435d3bf63d1796cca4db987f56c3e31953386ab7f3aae290058e5f3240b43864753121ed48b3744f8d6ee2dcd5210105dc1ccf5a4f790b3e22092
38 -DIST shorewall-lite-5.2.4.tar.bz2 41491 BLAKE2B 1cdef18c368d44bf7aae756c2519b3cf8aaa648be0044b6aab22aa6dda989a8a7e51ab77d963f450ab0338ea490ca2629680e1c251e4dbf43594a952a17ded9a SHA512 a222d06e60f889167160cea5107fb534e8c5bec00b42e7027615447875e3ee2513ba1eefd1e14e17ea7c91d08f2e9cfebb1b3fe2bd384f6288961c1258cbb359
39 -DIST shorewall6-5.2.3.7.tar.bz2 197912 BLAKE2B 20193edb20a6e165cc83391ff36e5601104dbc95f8300d1880253edc451fb086b0b619496cec84f3a6e1ea52c33ebea9de436babeb6517b41688e95eaaa10641 SHA512 45ac97f27569006715156579ca86e9dc580d30f64dabb1557ef25dbb171e76a67251a64e4ff77c8e88017dc2a9e364503c1f565f376312335ca2ac0d961a6043
40 DIST shorewall6-5.2.4.4.tar.bz2 199722 BLAKE2B c5c741ea7108e6edbb35190bccea06d04c6a0d1cf5dbae23481e38d3c05155df6bcaf4deb6397d07a1f51ba0b13b18b4ed22349fbe1f6e605d0303486002d876 SHA512 cf212d1c7c8703319a5c6f34ba8629f115b2f03a0713c1b40cf370adad66b671bfd9536a28bc650aba04bf6a6fd7c396788d40c2eb650a006e8f2eb27baf76f8
41 -DIST shorewall6-5.2.4.tar.bz2 198630 BLAKE2B 4aa511ba5b998835b9aadad3a733b7ea7e4c0940135ae8959895ea499fd5f83e8cad3831560215c41c855f0d02f845ee97b8318af409fa088a98bbd5f3ec7a87 SHA512 b4dce7043b44fc1b84c5f8b07c524b0c9b5a83e06f694646115c448ad1e0407a77613ace99b5866cfa8b7078a98c1aba79a94c094e40453745d6cccc453d8934
42 -DIST shorewall6-lite-5.2.3.7.tar.bz2 40641 BLAKE2B d1c3720e7fefe6a20a29ab90e65fe9c0a113894c008377734e274177f6759245c056fb2a7e7abf42c7bddd35bd159f8c2ed2e4135edd1dda9d63ad1b596cec8c SHA512 0727a0e709bb206e4905ae8b5b4b39b2d2eb950b8aa03d8593de71a12464422681b5528a8e06a05e91e9bd1bae6a78962da1810ecbc8707e670073c28daccaaa
43 DIST shorewall6-lite-5.2.4.4.tar.bz2 42739 BLAKE2B 3f1caa78b12f779bd73716dad78a26544bf99204b96da2fa950c709bbb5d68ac1ee062714d5040d961a2df35b4d22e0b6c8747b36a84bb9a5b6805cb6d0158cd SHA512 4a0c6e939bd8ca239734de64ea0b2a94885f8f14d00e37dce291b2f5aa00384227c16cc0595ef1b038f05d3d42212ace3e9482937c8c072d7e194099ab867646
44 -DIST shorewall6-lite-5.2.4.tar.bz2 41474 BLAKE2B 123b73281cc4e84f74eef56111af24243eca9706ad03a38cb8bf3763b8645fffdb1847098d33c109b8b481eb66baa9d71a907285cc20ae6094eac9304cf7fd52 SHA512 a2a5f8054e59815e3dc2f3a51f59f29b3880226d5074b78e189e68e6c6f66de44a86791417f088bb4f1d0eead78d2841269cd222450d33b7b5cef1c00b08cfc8
45
46 diff --git a/net-firewall/shorewall/files/shorewall-init-01_remove-ipset-functionality-r1.patch b/net-firewall/shorewall/files/shorewall-init-01_remove-ipset-functionality-r1.patch
47 deleted file mode 100644
48 index 8b7925d6dce..00000000000
49 --- a/net-firewall/shorewall/files/shorewall-init-01_remove-ipset-functionality-r1.patch
50 +++ /dev/null
51 @@ -1,30 +0,0 @@
52 -diff -rupN old/shorewall-init-5.1.7/shorewall-init new/shorewall-init-5.1.7/shorewall-init
53 ---- old/shorewall-init-5.1.7/shorewall-init 2017-09-18 18:28:43.000000000 +0200
54 -+++ new/shorewall-init-5.1.7/shorewall-init 2017-09-23 15:46:03.489914459 +0200
55 -@@ -80,10 +80,6 @@ shorewall_start () {
56 - fi
57 - done
58 -
59 -- if [ -n "$SAVE_IPSETS" -a -f "$SAVE_IPSETS" ]; then
60 -- ipset -R < "$SAVE_IPSETS"
61 -- fi
62 --
63 - return 0
64 - }
65 -
66 -@@ -101,15 +97,6 @@ shorewall_stop () {
67 - fi
68 - done
69 -
70 -- if [ -n "$SAVE_IPSETS" ]; then
71 -- mkdir -p $(dirname "$SAVE_IPSETS")
72 -- if ipset -S > "${SAVE_IPSETS}.tmp"; then
73 -- grep -qE -- '^(-N|create )' "${SAVE_IPSETS}.tmp" && mv -f "${SAVE_IPSETS}.tmp" "$SAVE_IPSETS" || rm -f "${SAVE_IPSETS}.tmp"
74 -- else
75 -- rm -f "${SAVE_IPSETS}.tmp"
76 -- fi
77 -- fi
78 --
79 - return 0
80 - }
81 -
82
83 diff --git a/net-firewall/shorewall/shorewall-5.2.3.7.ebuild b/net-firewall/shorewall/shorewall-5.2.3.7.ebuild
84 deleted file mode 100644
85 index ab98fa11307..00000000000
86 --- a/net-firewall/shorewall/shorewall-5.2.3.7.ebuild
87 +++ /dev/null
88 @@ -1,482 +0,0 @@
89 -# Copyright 1999-2020 Gentoo Authors
90 -# Distributed under the terms of the GNU General Public License v2
91 -
92 -EAPI="7"
93 -
94 -inherit linux-info prefix systemd
95 -
96 -DESCRIPTION='A high-level tool for configuring Netfilter'
97 -HOMEPAGE="https://shorewall.org/"
98 -LICENSE="GPL-2"
99 -SLOT="0"
100 -IUSE="doc +init +ipv4 ipv6 lite4 lite6 selinux"
101 -
102 -MY_PV=${PV/_rc/-RC}
103 -MY_PV=${MY_PV/_beta/-Beta}
104 -MY_P=${PN}-${MY_PV}
105 -
106 -MY_MAJOR_RELEASE_NUMBER=$(ver_cut 1-2)
107 -MY_MAJORMINOR_RELEASE_NUMBER=$(ver_cut 1-3)
108 -
109 -# shorewall
110 -MY_PN_IPV4=Shorewall
111 -MY_P_IPV4=${MY_PN_IPV4/#S/s}-${MY_PV}
112 -
113 -# shorewall6
114 -MY_PN_IPV6=Shorewall6
115 -MY_P_IPV6=${MY_PN_IPV6/#S/s}-${MY_PV}
116 -
117 -# shorewall-lite
118 -MY_PN_LITE4=Shorewall-lite
119 -MY_P_LITE4=${MY_PN_LITE4/#S/s}-${MY_PV}
120 -
121 -# shorewall6-lite
122 -MY_PN_LITE6=Shorewall6-lite
123 -MY_P_LITE6=${MY_PN_LITE6/#S/s}-${MY_PV}
124 -
125 -# shorewall-init
126 -MY_PN_INIT=Shorewall-init
127 -MY_P_INIT=${MY_PN_INIT/#S/s}-${MY_PV}
128 -
129 -# shorewall-core
130 -MY_PN_CORE=Shorewall-core
131 -MY_P_CORE=${MY_PN_CORE/#S/s}-${MY_PV}
132 -
133 -# shorewall-docs-html
134 -MY_PN_DOCS=Shorewall-docs-html
135 -MY_P_DOCS=${MY_PN_DOCS/#S/s}-${MY_PV}
136 -
137 -# Upstream URL schema:
138 -# Beta: $MIRROR/pub/shorewall/development/4.6/shorewall-4.6.4-Beta2/shorewall-4.6.4-Beta2.tar.bz2
139 -# RC: $MIRROR/pub/shorewall/development/4.6/shorewall-4.6.4-RC1/shorewall-4.6.4-RC1.tar.bz2
140 -# Release: $MIRROR/pub/shorewall/4.6/shorewall-4.6.3/shorewall-4.6.3.3.tar.bz2
141 -
142 -MY_URL_PREFIX=
143 -MY_URL_SUFFIX=
144 -if [[ ${MY_PV} = *-Beta* ]] || [[ ${MY_PV} = *-RC* ]]; then
145 - MY_URL_PREFIX='development/'
146 -
147 - if [[ ${MY_PV} = *-Beta* ]] ; then
148 - MY_URL_SUFFIX="-Beta${MY_PV##*-Beta}"
149 - elif [[ ${MY_PV} = *-RC* ]] ; then
150 - MY_URL_SUFFIX="-RC${MY_PV##*-RC}"
151 - fi
152 -
153 - # Cleaning up temporary variables
154 - unset _tmp_last_index
155 - unset _tmp_suffix
156 -else
157 - KEYWORDS="~alpha amd64 hppa ppc ppc64 sparc x86"
158 -fi
159 -
160 -SRC_URI="
161 - https://shorewall.org/pub/shorewall/${MY_URL_PREFIX}${MY_MAJOR_RELEASE_NUMBER}/shorewall-${MY_MAJORMINOR_RELEASE_NUMBER}${MY_URL_SUFFIX}/shorewall-core-${MY_PV}.tar.bz2
162 - ipv4? ( https://shorewall.org/pub/shorewall/${MY_URL_PREFIX}${MY_MAJOR_RELEASE_NUMBER}/shorewall-${MY_MAJORMINOR_RELEASE_NUMBER}${MY_URL_SUFFIX}/shorewall-${MY_PV}.tar.bz2 )
163 - ipv6? ( https://shorewall.org/pub/shorewall/${MY_URL_PREFIX}${MY_MAJOR_RELEASE_NUMBER}/shorewall-${MY_MAJORMINOR_RELEASE_NUMBER}${MY_URL_SUFFIX}/shorewall6-${MY_PV}.tar.bz2 )
164 - lite4? ( https://shorewall.org/pub/shorewall/${MY_URL_PREFIX}${MY_MAJOR_RELEASE_NUMBER}/shorewall-${MY_MAJORMINOR_RELEASE_NUMBER}${MY_URL_SUFFIX}/shorewall-lite-${MY_PV}.tar.bz2 )
165 - lite6? ( https://shorewall.org/pub/shorewall/${MY_URL_PREFIX}${MY_MAJOR_RELEASE_NUMBER}/shorewall-${MY_MAJORMINOR_RELEASE_NUMBER}${MY_URL_SUFFIX}/shorewall6-lite-${MY_PV}.tar.bz2 )
166 - init? ( https://shorewall.org/pub/shorewall/${MY_URL_PREFIX}${MY_MAJOR_RELEASE_NUMBER}/shorewall-${MY_MAJORMINOR_RELEASE_NUMBER}${MY_URL_SUFFIX}/shorewall-init-${MY_PV}.tar.bz2 )
167 - doc? ( https://shorewall.org/pub/shorewall/${MY_URL_PREFIX}${MY_MAJOR_RELEASE_NUMBER}/shorewall-${MY_MAJORMINOR_RELEASE_NUMBER}${MY_URL_SUFFIX}/${MY_P_DOCS}.tar.bz2 )
168 -"
169 -
170 -# - Shorewall6 requires Shorewall
171 -# - Installing Shorewall-init or just the documentation doesn't make any sense,
172 -# that's why we force the user to select at least one "real" Shorewall product
173 -#
174 -# See https://shorewall.org/download.htm#Which
175 -REQUIRED_USE="
176 - ipv6? ( ipv4 )
177 - || ( ipv4 lite4 lite6 )
178 -"
179 -
180 -# No build dependencies! Just plain shell scripts...
181 -DEPEND=""
182 -
183 -RDEPEND="
184 - >=net-firewall/iptables-1.4.20
185 - >=sys-apps/iproute2-3.8.0[-minimal]
186 - >=sys-devel/bc-1.06.95
187 - ipv4? (
188 - >=dev-lang/perl-5.16
189 - virtual/perl-Digest-SHA
190 - )
191 - ipv6? (
192 - >=dev-perl/Socket6-0.230.0
193 - >=net-firewall/iptables-1.4.20[ipv6]
194 - >=sys-apps/iproute2-3.8.0[ipv6]
195 - )
196 - lite6? (
197 - >=net-firewall/iptables-1.4.20[ipv6]
198 - >=sys-apps/iproute2-3.8.0[ipv6]
199 - )
200 - init? ( >=sys-apps/coreutils-8.20 )
201 - selinux? ( >=sec-policy/selinux-shorewall-2.20161023-r3 )
202 - !net-firewall/shorewall-core
203 - !net-firewall/shorewall6
204 - !net-firewall/shorewall-lite
205 - !net-firewall/shorewall6-lite
206 - !net-firewall/shorewall-init
207 - !<sys-apps/systemd-214
208 -"
209 -
210 -S=${WORKDIR}
211 -
212 -pkg_pretend() {
213 - local CONFIG_CHECK="~NF_CONNTRACK"
214 -
215 - local WARNING_CONNTRACK="Without NF_CONNTRACK support, you will be unable"
216 - local WARNING_CONNTRACK+=" to run any shorewall-based firewall on the local system."
217 -
218 - # kernel >=4.19 has unified NF_CONNTRACK module, bug 671176
219 - if kernel_is -lt 4 19; then
220 - if use ipv4 || use lite4; then
221 - CONFIG_CHECK="${CONFIG_CHECK} ~NF_CONNTRACK_IPV4"
222 -
223 - local WARNING_CONNTRACK_IPV4="Without NF_CONNTRACK_IPV4 support, you will"
224 - local WARNING_CONNTRACK_IPV4+=" be unable to run any shorewall-based IPv4 firewall on the local system."
225 - fi
226 -
227 - if use ipv6 || use lite6; then
228 - CONFIG_CHECK="${CONFIG_CHECK} ~NF_CONNTRACK_IPV6"
229 -
230 - local WARNING_CONNTRACK_IPV6="Without NF_CONNTRACK_IPV6 support, you will"
231 - local WARNING_CONNTRACK_IPV6+=" be unable to run any shorewall-based IPv6 firewall on the local system."
232 - fi
233 - fi
234 -
235 - check_extra_config
236 -}
237 -
238 -pkg_setup() {
239 - if [[ -n "${DIGEST}" ]]; then
240 - einfo "Unsetting environment variable \"DIGEST\" to prevent conflicts with package's \"install.sh\" script ..."
241 - unset DIGEST
242 - fi
243 -}
244 -
245 -src_prepare() {
246 - # We are moving each unpacked source from MY_P_* to MY_PN_*.
247 - # This allows us to use patches from upstream and keeps epatch_user working
248 -
249 - einfo "Preparing shorewallrc ..."
250 - cp "${FILESDIR}"/shorewallrc-r3 "${S}"/shorewallrc.gentoo || die "Copying shorewallrc failed"
251 - eprefixify "${S}"/shorewallrc.gentoo
252 - sed -i \
253 - -e "s|SERVICEDIR=tbs|SERVICEDIR=$(systemd_get_systemunitdir)|" \
254 - "${S}"/shorewallrc.gentoo || die "Failed to update shorewallrc"
255 -
256 - # shorewall-core
257 - mv "${S}"/${MY_P_CORE} "${S}"/${MY_PN_CORE} || die "Failed to move '${S}/${MY_P_CORE}' to '${S}/${MY_PN_CORE}'"
258 - ebegin "Applying Gentoo-specific changes to ${MY_P_CORE} ..."
259 - ln -s ../shorewallrc.gentoo ${MY_PN_CORE}/shorewallrc.gentoo || die "Failed to symlink shorewallrc.gentoo"
260 - eend 0
261 -
262 - pushd "${S}"/${MY_PN_CORE} &>/dev/null || die
263 - eapply "${FILESDIR}"/shorewall-core-5.2.1-no-gzipped-manpages.patch
264 - popd &>/dev/null || die
265 -
266 - # shorewall
267 - if use ipv4; then
268 - mv "${S}"/${MY_P_IPV4} "${S}"/${MY_PN_IPV4} || die "Failed to move '${S}/${MY_P_IPV4}' to '${S}/${MY_PN_IPV4}'"
269 - ebegin "Applying Gentoo-specific changes to ${MY_P_IPV4}"
270 - ln -s ../shorewallrc.gentoo ${MY_PN_IPV4}/shorewallrc.gentoo || die "Failed to symlink shorewallrc.gentoo"
271 - cp "${FILESDIR}"/shorewall.confd-r1 "${S}"/${MY_PN_IPV4}/default.gentoo || die "Copying shorewall.confd-r1 failed"
272 - cp "${FILESDIR}"/shorewall.initd-r3 "${S}"/${MY_PN_IPV4}/init.gentoo.sh || die "Copying shorewall.initd-r2 failed"
273 - cp "${FILESDIR}"/shorewall.systemd "${S}"/${MY_PN_IPV4}/gentoo.service || die "Copying shorewall.systemd failed"
274 - eend 0
275 -
276 - pushd "${S}"/${MY_PN_IPV4} &>/dev/null || die
277 - eapply "${FILESDIR}"/shorewall-5.2.1-no-gzipped-manpages.patch
278 - popd &>/dev/null || die
279 - fi
280 -
281 - # shorewall6
282 - if use ipv6; then
283 - mv "${S}"/${MY_P_IPV6} "${S}"/${MY_PN_IPV6} || die "Failed to move '${S}/${MY_P_IPV6}' to '${S}/${MY_PN_IPV6}'"
284 - ebegin "Applying Gentoo-specific changes to ${MY_P_IPV6}"
285 - ln -s ../shorewallrc.gentoo ${MY_PN_IPV6}/shorewallrc.gentoo || die "Failed to symlink shorewallrc.gentoo"
286 - cp "${FILESDIR}"/shorewall.confd-r1 "${S}"/${MY_PN_IPV6}/default.gentoo || die "Copying shorewall.confd-r1 failed"
287 - cp "${FILESDIR}"/shorewall.initd-r3 "${S}"/${MY_PN_IPV6}/init.gentoo.sh || die "Copying shorewall.initd-r2 failed"
288 - cp "${FILESDIR}"/shorewall6.systemd "${S}"/${MY_PN_IPV6}/gentoo.service || die "Copying shorewall6.systemd failed"
289 - eend 0
290 -
291 - pushd "${S}"/${MY_PN_IPV6} &>/dev/null || die
292 - eapply "${FILESDIR}"/shorewall-5.2.1-no-gzipped-manpages.patch
293 - popd &>/dev/null || die
294 - fi
295 -
296 - # shorewall-lite
297 - if use lite4; then
298 - mv "${S}"/${MY_P_LITE4} "${S}"/${MY_PN_LITE4} || die "Failed to move '${S}/${MY_P_LITE4}' to '${S}/${MY_PN_LITE4}'"
299 - ebegin "Applying Gentoo-specific changes to ${MY_P_LITE4}"
300 - ln -s ../shorewallrc.gentoo ${MY_PN_LITE4}/shorewallrc.gentoo || die "Failed to symlink shorewallrc.gentoo"
301 - cp "${FILESDIR}"/shorewall-lite.confd-r1 "${S}"/${MY_PN_LITE4}/default.gentoo || die "Copying shorewall-lite.confd-r1 failed"
302 - cp "${FILESDIR}"/shorewall-lite.initd-r3 "${S}"/${MY_PN_LITE4}/init.gentoo.sh || die "Copying shorewall-lite.initd-r2 failed"
303 - cp "${FILESDIR}"/shorewall-lite.systemd "${S}"/${MY_PN_LITE4}/gentoo.service || die "Copying shorewall-lite.systemd failed"
304 - eend 0
305 -
306 - pushd "${S}"/${MY_PN_LITE4} &>/dev/null || die
307 - eapply "${FILESDIR}"/shorewall-lite-5.2.1-no-gzipped-manpages.patch
308 - popd &>/dev/null || die
309 - fi
310 -
311 - # shorewall6-lite
312 - if use lite6; then
313 - mv "${S}"/${MY_P_LITE6} "${S}"/${MY_PN_LITE6} || die "Failed to move '${S}/${MY_P_LITE6}' to '${S}/${MY_PN_LITE6}'"
314 - ebegin "Applying Gentoo-specific changes to ${MY_P_LITE6}"
315 - ln -s ../shorewallrc.gentoo ${MY_PN_LITE6}/shorewallrc.gentoo || die "Failed to symlink shorewallrc.gentoo"
316 - cp "${FILESDIR}"/shorewall-lite.confd-r1 "${S}"/${MY_PN_LITE6}/default.gentoo || die "Copying shorewall-lite.confd-r1 failed"
317 - cp "${FILESDIR}"/shorewall-lite.initd-r3 "${S}"/${MY_PN_LITE6}/init.gentoo.sh || die "Copying shorewall-lite.initd-r2 failed"
318 - cp "${FILESDIR}"/shorewall6-lite.systemd "${S}"/${MY_PN_LITE6}/gentoo.service || die "Copying shorewall6-lite.systemd failed"
319 - eend 0
320 -
321 - pushd "${S}"/${MY_PN_LITE6} &>/dev/null || die
322 - eapply "${FILESDIR}"/shorewall-lite-5.2.1-no-gzipped-manpages.patch
323 - popd &>/dev/null || die
324 - fi
325 -
326 - # shorewall-init
327 - if use init; then
328 - mv "${S}"/${MY_P_INIT} "${S}"/${MY_PN_INIT} || die "Failed to move '${S}/${MY_P_INIT}' to '${S}/${MY_PN_INIT}'"
329 - ebegin "Applying Gentoo-specific changes to ${MY_P_INIT}"
330 - ln -s ../shorewallrc.gentoo ${MY_PN_INIT}/shorewallrc.gentoo || die "Failed to symlink shorewallrc.gentoo"
331 - cp "${FILESDIR}"/shorewall-init.confd "${S}"/${MY_PN_INIT}/default.gentoo || die "Copying shorewall-init.confd failed"
332 - cp "${FILESDIR}"/shorewall-init.initd "${S}"/${MY_PN_INIT}/init.gentoo.sh || die "Copying shorewall-init.initd failed"
333 - cp "${FILESDIR}"/shorewall-init.systemd "${S}"/${MY_PN_INIT}/gentoo.service || die "Copying shorewall-init.systemd failed"
334 - cp "${FILESDIR}"/shorewall-init.readme "${S}"/${MY_PN_INIT}/shorewall-init.README.Gentoo.txt || die "Copying shorewall-init.systemd failed"
335 - eend 0
336 -
337 - eprefixify "${S}"/${MY_PN_INIT}/init.gentoo.sh
338 -
339 - pushd "${S}"/${MY_PN_INIT} &>/dev/null || die
340 - eapply -p2 "${FILESDIR}"/shorewall-init-01_remove-ipset-functionality-r1.patch
341 - popd &>/dev/null || die
342 - fi
343 -
344 - # shorewall-docs-html
345 - if use doc; then
346 - mv "${S}"/${MY_P_DOCS} "${S}"/${MY_PN_DOCS} || die "Failed to move '${S}/${MY_P_DOCS}' to '${S}/${MY_PN_DOCS}'"
347 - fi
348 -
349 - eapply_user
350 -}
351 -
352 -src_configure() {
353 - :;
354 -}
355 -
356 -src_compile() {
357 - :;
358 -}
359 -
360 -src_install() {
361 - # shorewall-core
362 - einfo "Installing ${MY_P_CORE} ..."
363 - DESTDIR="${ED}" ${MY_PN_CORE}/install.sh shorewallrc.gentoo || die "${MY_PN_CORE}/install.sh failed"
364 - dodoc "${S}"/${MY_PN_CORE}/changelog.txt "${S}"/${MY_PN_CORE}/releasenotes.txt
365 -
366 - # shorewall
367 - if use ipv4; then
368 - einfo "Installing ${MY_P_IPV4} ..."
369 - DESTDIR="${ED}" ${MY_PN_IPV4}/install.sh shorewallrc.gentoo || die "${MY_PN_IPV4}/install.sh failed"
370 - keepdir /var/lib/shorewall
371 -
372 - if use doc; then
373 - dodoc -r "${S}"/${MY_PN_IPV4}/Samples
374 - fi
375 - fi
376 -
377 - # shorewall6
378 - if use ipv6; then
379 - einfo "Installing ${MY_P_IPV6} ..."
380 - DESTDIR="${ED}" ${MY_PN_IPV6}/install.sh shorewallrc.gentoo || die "${MY_PN_IPV6}/install.sh failed"
381 - keepdir /var/lib/shorewall6
382 -
383 - if use doc; then
384 - dodoc -r "${S}"/${MY_PN_IPV6}/Samples6
385 - fi
386 - fi
387 -
388 - # shorewall-lite
389 - if use lite4; then
390 - einfo "Installing ${MY_P_LITE4} ..."
391 - DESTDIR="${ED}" ${MY_PN_LITE4}/install.sh shorewallrc.gentoo || die "${MY_PN_LITE4}/install.sh failed"
392 - keepdir /var/lib/shorewall-lite
393 - fi
394 -
395 - # shorewall6-lite
396 - if use lite6; then
397 - einfo "Installing ${MY_P_LITE6} ..."
398 - DESTDIR="${ED}" ${MY_PN_LITE6}/install.sh shorewallrc.gentoo || die "${MY_PN_LITE6}/install.sh failed"
399 - keepdir /var/lib/shorewall6-lite
400 - fi
401 -
402 - # shorewall-init
403 - if use init; then
404 - einfo "Installing ${MY_P_INIT} ..."
405 - DESTDIR="${ED}" ${MY_PN_INIT}/install.sh shorewallrc.gentoo || die "${MY_PN_INIT}/install.sh failed"
406 - dodoc "${S}"/${MY_PN_INIT}/shorewall-init.README.Gentoo.txt
407 -
408 - if [[ -f "${ED}/etc/logrotate.d/shorewall-init" ]]; then
409 - # On Gentoo, shorewall-init will not create shorewall-ifupdown.log,
410 - # so we don't need a logrotate configuration file for shorewall-init
411 - einfo "Removing unused \"${ED}/etc/logrotate.d/shorewall-init\" ..."
412 - rm -rf "${ED}"/etc/logrotate.d/shorewall-init || die "Removing \"${ED}/etc/logrotate.d/shorewall-init\" failed"
413 - fi
414 -
415 - if [[ -d "${ED}/etc/NetworkManager" ]]; then
416 - # On Gentoo, we don't support NetworkManager
417 - # so we don't need this folder at all
418 - einfo "Removing unused \"${ED}/etc/NetworkManager\" ..."
419 - rm -rf "${ED}"/etc/NetworkManager || die "Removing \"${ED}/etc/NetworkManager\" failed"
420 - fi
421 -
422 - if [[ -f "${ED}/usr/share/shorewall-init/ifupdown" ]]; then
423 - # This script isn't supported on Gentoo
424 - rm -rf "${ED}"/usr/share/shorewall-init/ifupdown || die "Removing \"${ED}/usr/share/shorewall-init/ifupdown\" failed"
425 - fi
426 - fi
427 -
428 - if use doc; then
429 - einfo "Installing ${MY_P_DOCS} ..."
430 - docinto html && dodoc -r "${S}"/${MY_PN_DOCS}/*
431 - fi
432 -}
433 -
434 -pkg_postinst() {
435 - if [[ -z "${REPLACING_VERSIONS}" ]]; then
436 - # This is a new installation
437 -
438 - # Show first steps for shorewall/shorewall6
439 - local _PRODUCTS=""
440 - if use ipv4; then
441 - _PRODUCTS="shorewall"
442 -
443 - if use ipv6; then
444 - _PRODUCTS="${_PRODUCTS}/shorewall6"
445 - fi
446 - fi
447 -
448 - if [[ -n "${_PRODUCTS}" ]]; then
449 - elog "Before you can use ${_PRODUCTS}, you need to edit its configuration in:"
450 - elog ""
451 - elog " /etc/shorewall/shorewall.conf"
452 -
453 - if use ipv6; then
454 - elog " /etc/shorewall6/shorewall6.conf"
455 - fi
456 -
457 - elog ""
458 - elog "To activate your shorewall-based firewall on system start, please add ${_PRODUCTS} to your default runlevel:"
459 - elog ""
460 - elog " # rc-update add shorewall default"
461 -
462 - if use ipv6; then
463 - elog " # rc-update add shorewall6 default"
464 - fi
465 - fi
466 -
467 - # Show first steps for shorewall-lite/shorewall6-lite
468 - _PRODUCTS=""
469 - if use lite4; then
470 - _PRODUCTS="shorewall-lite"
471 - fi
472 -
473 - if use lite6; then
474 - if [[ -z "${_PRODUCTS}" ]]; then
475 - _PRODUCTS="shorewall6-lite"
476 - else
477 - _PRODUCTS="${_PRODUCTS}/shorewall6-lite"
478 - fi
479 - fi
480 -
481 - if [[ -n "${_PRODUCTS}" ]]; then
482 - if use ipv4; then
483 - elog ""
484 - fi
485 -
486 - elog "Before you can use ${_PRODUCTS}, you need to provide a configuration, which you can"
487 - elog "create using ${CATEGORY}/shorewall (with \"ipv4\" and or \"ipv6\" USE flag)."
488 - elog ""
489 - elog "To read more about ${_PRODUCTS}, please visit"
490 - elog " https://shorewall.org/CompiledPrograms.html"
491 - elog ""
492 - elog "To activate your shorewall-lite-based firewall on system start, please add ${PRODUCTS} to your default runlevel:"
493 - elog ""
494 -
495 - if use lite4; then
496 - elog " # rc-update add shorewall-lite default"
497 - fi
498 -
499 - if use lite6; then
500 - elog " # rc-update add shorewall6-lite default"
501 - fi
502 - fi
503 -
504 - if use init; then
505 - elog ""
506 - elog "To secure your system on boot, please add shorewall-init to your boot runlevel:"
507 - elog ""
508 - elog " # rc-update add shorewall-init boot"
509 - elog ""
510 - elog "and review \$PRODUCTS in"
511 - elog ""
512 - elog " /etc/conf.d/shorewall-init"
513 - fi
514 -
515 - fi
516 -
517 - local v
518 - for v in ${REPLACING_VERSIONS}; do
519 - if ! version_is_at_least ${MY_MAJOR_RELEASE_NUMBER} ${v}; then
520 - # This is an upgrade
521 -
522 - elog "You are upgrading from a previous major version. It is highly recommended that you read"
523 - elog ""
524 - elog " - /usr/share/doc/shorewall*/releasenotes.tx*"
525 - elog " - https://shorewall.org/Shorewall-5.html#idm214"
526 -
527 - if use ipv4; then
528 - elog ""
529 - elog "You can auto-migrate your configuration using"
530 - elog ""
531 - elog " # shorewall update -A"
532 -
533 - if use ipv6; then
534 - elog " # shorewall6 update -A"
535 - fi
536 -
537 - elog ""
538 - elog "*after* you have merged the changed files using one of the configuration"
539 - elog "files update tools of your choice (dispatch-conf, etc-update...)."
540 -
541 - elog ""
542 - elog "But if you are not familiar with the \"shorewall[6] update\" command,"
543 - elog "please read the shorewall[6] man page first."
544 - fi
545 -
546 - # Show this elog only once
547 - break
548 - fi
549 - done
550 -
551 - if ! use init; then
552 - elog ""
553 - elog "Consider emerging ${CATEGORY}/${PN} with USE flag \"init\" to secure your system on boot"
554 - elog "before your shorewall-based firewall is ready to start."
555 - elog ""
556 - elog "To read more about shorewall-init, please visit"
557 - elog " https://shorewall.org/Shorewall-init.html"
558 - fi
559 -
560 - if ! has_version "net-firewall/conntrack-tools"; then
561 - elog ""
562 - elog "Your Shorewall firewall can utilize \"conntrack\" from the \"net-firewall/conntrack-tools\""
563 - elog "package. if you want to use this feature, you need to install \"net-firewall/conntrack-tools\"!"
564 - fi
565 -
566 - if ! has_version "dev-perl/Devel-NYTProf"; then
567 - elog ""
568 - elog "If you want to profile your Shorewall firewall you need to install \"dev-perl/Devel-NYTProf\"!"
569 - fi
570 -}
571
572 diff --git a/net-firewall/shorewall/shorewall-5.2.4.ebuild b/net-firewall/shorewall/shorewall-5.2.4.ebuild
573 deleted file mode 100644
574 index 9f77b3406b1..00000000000
575 --- a/net-firewall/shorewall/shorewall-5.2.4.ebuild
576 +++ /dev/null
577 @@ -1,482 +0,0 @@
578 -# Copyright 1999-2020 Gentoo Authors
579 -# Distributed under the terms of the GNU General Public License v2
580 -
581 -EAPI="7"
582 -
583 -inherit linux-info prefix systemd
584 -
585 -DESCRIPTION='A high-level tool for configuring Netfilter'
586 -HOMEPAGE="https://shorewall.org/"
587 -LICENSE="GPL-2"
588 -SLOT="0"
589 -IUSE="doc +init +ipv4 ipv6 lite4 lite6 selinux"
590 -
591 -MY_PV=${PV/_rc/-RC}
592 -MY_PV=${MY_PV/_beta/-Beta}
593 -MY_P=${PN}-${MY_PV}
594 -
595 -MY_MAJOR_RELEASE_NUMBER=$(ver_cut 1-2)
596 -MY_MAJORMINOR_RELEASE_NUMBER=$(ver_cut 1-3)
597 -
598 -# shorewall
599 -MY_PN_IPV4=Shorewall
600 -MY_P_IPV4=${MY_PN_IPV4/#S/s}-${MY_PV}
601 -
602 -# shorewall6
603 -MY_PN_IPV6=Shorewall6
604 -MY_P_IPV6=${MY_PN_IPV6/#S/s}-${MY_PV}
605 -
606 -# shorewall-lite
607 -MY_PN_LITE4=Shorewall-lite
608 -MY_P_LITE4=${MY_PN_LITE4/#S/s}-${MY_PV}
609 -
610 -# shorewall6-lite
611 -MY_PN_LITE6=Shorewall6-lite
612 -MY_P_LITE6=${MY_PN_LITE6/#S/s}-${MY_PV}
613 -
614 -# shorewall-init
615 -MY_PN_INIT=Shorewall-init
616 -MY_P_INIT=${MY_PN_INIT/#S/s}-${MY_PV}
617 -
618 -# shorewall-core
619 -MY_PN_CORE=Shorewall-core
620 -MY_P_CORE=${MY_PN_CORE/#S/s}-${MY_PV}
621 -
622 -# shorewall-docs-html
623 -MY_PN_DOCS=Shorewall-docs-html
624 -MY_P_DOCS=${MY_PN_DOCS/#S/s}-${MY_PV}
625 -
626 -# Upstream URL schema:
627 -# Beta: $MIRROR/pub/shorewall/development/4.6/shorewall-4.6.4-Beta2/shorewall-4.6.4-Beta2.tar.bz2
628 -# RC: $MIRROR/pub/shorewall/development/4.6/shorewall-4.6.4-RC1/shorewall-4.6.4-RC1.tar.bz2
629 -# Release: $MIRROR/pub/shorewall/4.6/shorewall-4.6.3/shorewall-4.6.3.3.tar.bz2
630 -
631 -MY_URL_PREFIX=
632 -MY_URL_SUFFIX=
633 -if [[ ${MY_PV} = *-Beta* ]] || [[ ${MY_PV} = *-RC* ]]; then
634 - MY_URL_PREFIX='development/'
635 -
636 - if [[ ${MY_PV} = *-Beta* ]] ; then
637 - MY_URL_SUFFIX="-Beta${MY_PV##*-Beta}"
638 - elif [[ ${MY_PV} = *-RC* ]] ; then
639 - MY_URL_SUFFIX="-RC${MY_PV##*-RC}"
640 - fi
641 -
642 - # Cleaning up temporary variables
643 - unset _tmp_last_index
644 - unset _tmp_suffix
645 -else
646 - KEYWORDS="~alpha ~amd64 ~hppa ~ppc ~ppc64 ~sparc ~x86"
647 -fi
648 -
649 -SRC_URI="
650 - https://shorewall.org/pub/shorewall/${MY_URL_PREFIX}${MY_MAJOR_RELEASE_NUMBER}/shorewall-${MY_MAJORMINOR_RELEASE_NUMBER}${MY_URL_SUFFIX}/shorewall-core-${MY_PV}.tar.bz2
651 - ipv4? ( https://shorewall.org/pub/shorewall/${MY_URL_PREFIX}${MY_MAJOR_RELEASE_NUMBER}/shorewall-${MY_MAJORMINOR_RELEASE_NUMBER}${MY_URL_SUFFIX}/shorewall-${MY_PV}.tar.bz2 )
652 - ipv6? ( https://shorewall.org/pub/shorewall/${MY_URL_PREFIX}${MY_MAJOR_RELEASE_NUMBER}/shorewall-${MY_MAJORMINOR_RELEASE_NUMBER}${MY_URL_SUFFIX}/shorewall6-${MY_PV}.tar.bz2 )
653 - lite4? ( https://shorewall.org/pub/shorewall/${MY_URL_PREFIX}${MY_MAJOR_RELEASE_NUMBER}/shorewall-${MY_MAJORMINOR_RELEASE_NUMBER}${MY_URL_SUFFIX}/shorewall-lite-${MY_PV}.tar.bz2 )
654 - lite6? ( https://shorewall.org/pub/shorewall/${MY_URL_PREFIX}${MY_MAJOR_RELEASE_NUMBER}/shorewall-${MY_MAJORMINOR_RELEASE_NUMBER}${MY_URL_SUFFIX}/shorewall6-lite-${MY_PV}.tar.bz2 )
655 - init? ( https://shorewall.org/pub/shorewall/${MY_URL_PREFIX}${MY_MAJOR_RELEASE_NUMBER}/shorewall-${MY_MAJORMINOR_RELEASE_NUMBER}${MY_URL_SUFFIX}/shorewall-init-${MY_PV}.tar.bz2 )
656 - doc? ( https://shorewall.org/pub/shorewall/${MY_URL_PREFIX}${MY_MAJOR_RELEASE_NUMBER}/shorewall-${MY_MAJORMINOR_RELEASE_NUMBER}${MY_URL_SUFFIX}/${MY_P_DOCS}.tar.bz2 )
657 -"
658 -
659 -# - Shorewall6 requires Shorewall
660 -# - Installing Shorewall-init or just the documentation doesn't make any sense,
661 -# that's why we force the user to select at least one "real" Shorewall product
662 -#
663 -# See https://shorewall.org/download.htm#Which
664 -REQUIRED_USE="
665 - ipv6? ( ipv4 )
666 - || ( ipv4 lite4 lite6 )
667 -"
668 -
669 -# No build dependencies! Just plain shell scripts...
670 -DEPEND=""
671 -
672 -RDEPEND="
673 - >=net-firewall/iptables-1.4.20
674 - >=sys-apps/iproute2-3.8.0[-minimal]
675 - >=sys-devel/bc-1.06.95
676 - ipv4? (
677 - >=dev-lang/perl-5.16
678 - virtual/perl-Digest-SHA
679 - )
680 - ipv6? (
681 - >=dev-perl/Socket6-0.230.0
682 - >=net-firewall/iptables-1.4.20[ipv6]
683 - >=sys-apps/iproute2-3.8.0[ipv6]
684 - )
685 - lite6? (
686 - >=net-firewall/iptables-1.4.20[ipv6]
687 - >=sys-apps/iproute2-3.8.0[ipv6]
688 - )
689 - init? ( >=sys-apps/coreutils-8.20 )
690 - selinux? ( >=sec-policy/selinux-shorewall-2.20161023-r3 )
691 - !net-firewall/shorewall-core
692 - !net-firewall/shorewall6
693 - !net-firewall/shorewall-lite
694 - !net-firewall/shorewall6-lite
695 - !net-firewall/shorewall-init
696 - !<sys-apps/systemd-214
697 -"
698 -
699 -S=${WORKDIR}
700 -
701 -pkg_pretend() {
702 - local CONFIG_CHECK="~NF_CONNTRACK"
703 -
704 - local WARNING_CONNTRACK="Without NF_CONNTRACK support, you will be unable"
705 - local WARNING_CONNTRACK+=" to run any shorewall-based firewall on the local system."
706 -
707 - # kernel >=4.19 has unified NF_CONNTRACK module, bug 671176
708 - if kernel_is -lt 4 19; then
709 - if use ipv4 || use lite4; then
710 - CONFIG_CHECK="${CONFIG_CHECK} ~NF_CONNTRACK_IPV4"
711 -
712 - local WARNING_CONNTRACK_IPV4="Without NF_CONNTRACK_IPV4 support, you will"
713 - local WARNING_CONNTRACK_IPV4+=" be unable to run any shorewall-based IPv4 firewall on the local system."
714 - fi
715 -
716 - if use ipv6 || use lite6; then
717 - CONFIG_CHECK="${CONFIG_CHECK} ~NF_CONNTRACK_IPV6"
718 -
719 - local WARNING_CONNTRACK_IPV6="Without NF_CONNTRACK_IPV6 support, you will"
720 - local WARNING_CONNTRACK_IPV6+=" be unable to run any shorewall-based IPv6 firewall on the local system."
721 - fi
722 - fi
723 -
724 - check_extra_config
725 -}
726 -
727 -pkg_setup() {
728 - if [[ -n "${DIGEST}" ]]; then
729 - einfo "Unsetting environment variable \"DIGEST\" to prevent conflicts with package's \"install.sh\" script ..."
730 - unset DIGEST
731 - fi
732 -}
733 -
734 -src_prepare() {
735 - # We are moving each unpacked source from MY_P_* to MY_PN_*.
736 - # This allows us to use patches from upstream and keeps epatch_user working
737 -
738 - einfo "Preparing shorewallrc ..."
739 - cp "${FILESDIR}"/shorewallrc-r3 "${S}"/shorewallrc.gentoo || die "Copying shorewallrc failed"
740 - eprefixify "${S}"/shorewallrc.gentoo
741 - sed -i \
742 - -e "s|SERVICEDIR=tbs|SERVICEDIR=$(systemd_get_systemunitdir)|" \
743 - "${S}"/shorewallrc.gentoo || die "Failed to update shorewallrc"
744 -
745 - # shorewall-core
746 - mv "${S}"/${MY_P_CORE} "${S}"/${MY_PN_CORE} || die "Failed to move '${S}/${MY_P_CORE}' to '${S}/${MY_PN_CORE}'"
747 - ebegin "Applying Gentoo-specific changes to ${MY_P_CORE} ..."
748 - ln -s ../shorewallrc.gentoo ${MY_PN_CORE}/shorewallrc.gentoo || die "Failed to symlink shorewallrc.gentoo"
749 - eend 0
750 -
751 - pushd "${S}"/${MY_PN_CORE} &>/dev/null || die
752 - eapply "${FILESDIR}"/shorewall-core-5.2.1-no-gzipped-manpages.patch
753 - popd &>/dev/null || die
754 -
755 - # shorewall
756 - if use ipv4; then
757 - mv "${S}"/${MY_P_IPV4} "${S}"/${MY_PN_IPV4} || die "Failed to move '${S}/${MY_P_IPV4}' to '${S}/${MY_PN_IPV4}'"
758 - ebegin "Applying Gentoo-specific changes to ${MY_P_IPV4}"
759 - ln -s ../shorewallrc.gentoo ${MY_PN_IPV4}/shorewallrc.gentoo || die "Failed to symlink shorewallrc.gentoo"
760 - cp "${FILESDIR}"/shorewall.confd-r1 "${S}"/${MY_PN_IPV4}/default.gentoo || die "Copying shorewall.confd-r1 failed"
761 - cp "${FILESDIR}"/shorewall.initd-r3 "${S}"/${MY_PN_IPV4}/init.gentoo.sh || die "Copying shorewall.initd-r2 failed"
762 - cp "${FILESDIR}"/shorewall.systemd "${S}"/${MY_PN_IPV4}/gentoo.service || die "Copying shorewall.systemd failed"
763 - eend 0
764 -
765 - pushd "${S}"/${MY_PN_IPV4} &>/dev/null || die
766 - eapply "${FILESDIR}"/shorewall-5.2.1-no-gzipped-manpages.patch
767 - popd &>/dev/null || die
768 - fi
769 -
770 - # shorewall6
771 - if use ipv6; then
772 - mv "${S}"/${MY_P_IPV6} "${S}"/${MY_PN_IPV6} || die "Failed to move '${S}/${MY_P_IPV6}' to '${S}/${MY_PN_IPV6}'"
773 - ebegin "Applying Gentoo-specific changes to ${MY_P_IPV6}"
774 - ln -s ../shorewallrc.gentoo ${MY_PN_IPV6}/shorewallrc.gentoo || die "Failed to symlink shorewallrc.gentoo"
775 - cp "${FILESDIR}"/shorewall.confd-r1 "${S}"/${MY_PN_IPV6}/default.gentoo || die "Copying shorewall.confd-r1 failed"
776 - cp "${FILESDIR}"/shorewall.initd-r3 "${S}"/${MY_PN_IPV6}/init.gentoo.sh || die "Copying shorewall.initd-r2 failed"
777 - cp "${FILESDIR}"/shorewall6.systemd "${S}"/${MY_PN_IPV6}/gentoo.service || die "Copying shorewall6.systemd failed"
778 - eend 0
779 -
780 - pushd "${S}"/${MY_PN_IPV6} &>/dev/null || die
781 - eapply "${FILESDIR}"/shorewall-5.2.1-no-gzipped-manpages.patch
782 - popd &>/dev/null || die
783 - fi
784 -
785 - # shorewall-lite
786 - if use lite4; then
787 - mv "${S}"/${MY_P_LITE4} "${S}"/${MY_PN_LITE4} || die "Failed to move '${S}/${MY_P_LITE4}' to '${S}/${MY_PN_LITE4}'"
788 - ebegin "Applying Gentoo-specific changes to ${MY_P_LITE4}"
789 - ln -s ../shorewallrc.gentoo ${MY_PN_LITE4}/shorewallrc.gentoo || die "Failed to symlink shorewallrc.gentoo"
790 - cp "${FILESDIR}"/shorewall-lite.confd-r1 "${S}"/${MY_PN_LITE4}/default.gentoo || die "Copying shorewall-lite.confd-r1 failed"
791 - cp "${FILESDIR}"/shorewall-lite.initd-r3 "${S}"/${MY_PN_LITE4}/init.gentoo.sh || die "Copying shorewall-lite.initd-r2 failed"
792 - cp "${FILESDIR}"/shorewall-lite.systemd "${S}"/${MY_PN_LITE4}/gentoo.service || die "Copying shorewall-lite.systemd failed"
793 - eend 0
794 -
795 - pushd "${S}"/${MY_PN_LITE4} &>/dev/null || die
796 - eapply "${FILESDIR}"/shorewall-lite-5.2.1-no-gzipped-manpages.patch
797 - popd &>/dev/null || die
798 - fi
799 -
800 - # shorewall6-lite
801 - if use lite6; then
802 - mv "${S}"/${MY_P_LITE6} "${S}"/${MY_PN_LITE6} || die "Failed to move '${S}/${MY_P_LITE6}' to '${S}/${MY_PN_LITE6}'"
803 - ebegin "Applying Gentoo-specific changes to ${MY_P_LITE6}"
804 - ln -s ../shorewallrc.gentoo ${MY_PN_LITE6}/shorewallrc.gentoo || die "Failed to symlink shorewallrc.gentoo"
805 - cp "${FILESDIR}"/shorewall-lite.confd-r1 "${S}"/${MY_PN_LITE6}/default.gentoo || die "Copying shorewall-lite.confd-r1 failed"
806 - cp "${FILESDIR}"/shorewall-lite.initd-r3 "${S}"/${MY_PN_LITE6}/init.gentoo.sh || die "Copying shorewall-lite.initd-r2 failed"
807 - cp "${FILESDIR}"/shorewall6-lite.systemd "${S}"/${MY_PN_LITE6}/gentoo.service || die "Copying shorewall6-lite.systemd failed"
808 - eend 0
809 -
810 - pushd "${S}"/${MY_PN_LITE6} &>/dev/null || die
811 - eapply "${FILESDIR}"/shorewall-lite-5.2.1-no-gzipped-manpages.patch
812 - popd &>/dev/null || die
813 - fi
814 -
815 - # shorewall-init
816 - if use init; then
817 - mv "${S}"/${MY_P_INIT} "${S}"/${MY_PN_INIT} || die "Failed to move '${S}/${MY_P_INIT}' to '${S}/${MY_PN_INIT}'"
818 - ebegin "Applying Gentoo-specific changes to ${MY_P_INIT}"
819 - ln -s ../shorewallrc.gentoo ${MY_PN_INIT}/shorewallrc.gentoo || die "Failed to symlink shorewallrc.gentoo"
820 - cp "${FILESDIR}"/shorewall-init.confd "${S}"/${MY_PN_INIT}/default.gentoo || die "Copying shorewall-init.confd failed"
821 - cp "${FILESDIR}"/shorewall-init.initd "${S}"/${MY_PN_INIT}/init.gentoo.sh || die "Copying shorewall-init.initd failed"
822 - cp "${FILESDIR}"/shorewall-init.systemd "${S}"/${MY_PN_INIT}/gentoo.service || die "Copying shorewall-init.systemd failed"
823 - cp "${FILESDIR}"/shorewall-init.readme "${S}"/${MY_PN_INIT}/shorewall-init.README.Gentoo.txt || die "Copying shorewall-init.systemd failed"
824 - eend 0
825 -
826 - eprefixify "${S}"/${MY_PN_INIT}/init.gentoo.sh
827 -
828 - pushd "${S}"/${MY_PN_INIT} &>/dev/null || die
829 - eapply -p2 "${FILESDIR}"/shorewall-init-01_remove-ipset-functionality-r1.patch
830 - popd &>/dev/null || die
831 - fi
832 -
833 - # shorewall-docs-html
834 - if use doc; then
835 - mv "${S}"/${MY_P_DOCS} "${S}"/${MY_PN_DOCS} || die "Failed to move '${S}/${MY_P_DOCS}' to '${S}/${MY_PN_DOCS}'"
836 - fi
837 -
838 - eapply_user
839 -}
840 -
841 -src_configure() {
842 - :;
843 -}
844 -
845 -src_compile() {
846 - :;
847 -}
848 -
849 -src_install() {
850 - # shorewall-core
851 - einfo "Installing ${MY_P_CORE} ..."
852 - DESTDIR="${ED}" ${MY_PN_CORE}/install.sh shorewallrc.gentoo || die "${MY_PN_CORE}/install.sh failed"
853 - dodoc "${S}"/${MY_PN_CORE}/changelog.txt "${S}"/${MY_PN_CORE}/releasenotes.txt
854 -
855 - # shorewall
856 - if use ipv4; then
857 - einfo "Installing ${MY_P_IPV4} ..."
858 - DESTDIR="${ED}" ${MY_PN_IPV4}/install.sh shorewallrc.gentoo || die "${MY_PN_IPV4}/install.sh failed"
859 - keepdir /var/lib/shorewall
860 -
861 - if use doc; then
862 - dodoc -r "${S}"/${MY_PN_IPV4}/Samples
863 - fi
864 - fi
865 -
866 - # shorewall6
867 - if use ipv6; then
868 - einfo "Installing ${MY_P_IPV6} ..."
869 - DESTDIR="${ED}" ${MY_PN_IPV6}/install.sh shorewallrc.gentoo || die "${MY_PN_IPV6}/install.sh failed"
870 - keepdir /var/lib/shorewall6
871 -
872 - if use doc; then
873 - dodoc -r "${S}"/${MY_PN_IPV6}/Samples6
874 - fi
875 - fi
876 -
877 - # shorewall-lite
878 - if use lite4; then
879 - einfo "Installing ${MY_P_LITE4} ..."
880 - DESTDIR="${ED}" ${MY_PN_LITE4}/install.sh shorewallrc.gentoo || die "${MY_PN_LITE4}/install.sh failed"
881 - keepdir /var/lib/shorewall-lite
882 - fi
883 -
884 - # shorewall6-lite
885 - if use lite6; then
886 - einfo "Installing ${MY_P_LITE6} ..."
887 - DESTDIR="${ED}" ${MY_PN_LITE6}/install.sh shorewallrc.gentoo || die "${MY_PN_LITE6}/install.sh failed"
888 - keepdir /var/lib/shorewall6-lite
889 - fi
890 -
891 - # shorewall-init
892 - if use init; then
893 - einfo "Installing ${MY_P_INIT} ..."
894 - DESTDIR="${ED}" ${MY_PN_INIT}/install.sh shorewallrc.gentoo || die "${MY_PN_INIT}/install.sh failed"
895 - dodoc "${S}"/${MY_PN_INIT}/shorewall-init.README.Gentoo.txt
896 -
897 - if [[ -f "${ED}/etc/logrotate.d/shorewall-init" ]]; then
898 - # On Gentoo, shorewall-init will not create shorewall-ifupdown.log,
899 - # so we don't need a logrotate configuration file for shorewall-init
900 - einfo "Removing unused \"${ED}/etc/logrotate.d/shorewall-init\" ..."
901 - rm -rf "${ED}"/etc/logrotate.d/shorewall-init || die "Removing \"${ED}/etc/logrotate.d/shorewall-init\" failed"
902 - fi
903 -
904 - if [[ -d "${ED}/etc/NetworkManager" ]]; then
905 - # On Gentoo, we don't support NetworkManager
906 - # so we don't need this folder at all
907 - einfo "Removing unused \"${ED}/etc/NetworkManager\" ..."
908 - rm -rf "${ED}"/etc/NetworkManager || die "Removing \"${ED}/etc/NetworkManager\" failed"
909 - fi
910 -
911 - if [[ -f "${ED}/usr/share/shorewall-init/ifupdown" ]]; then
912 - # This script isn't supported on Gentoo
913 - rm -rf "${ED}"/usr/share/shorewall-init/ifupdown || die "Removing \"${ED}/usr/share/shorewall-init/ifupdown\" failed"
914 - fi
915 - fi
916 -
917 - if use doc; then
918 - einfo "Installing ${MY_P_DOCS} ..."
919 - docinto html && dodoc -r "${S}"/${MY_PN_DOCS}/*
920 - fi
921 -}
922 -
923 -pkg_postinst() {
924 - if [[ -z "${REPLACING_VERSIONS}" ]]; then
925 - # This is a new installation
926 -
927 - # Show first steps for shorewall/shorewall6
928 - local _PRODUCTS=""
929 - if use ipv4; then
930 - _PRODUCTS="shorewall"
931 -
932 - if use ipv6; then
933 - _PRODUCTS="${_PRODUCTS}/shorewall6"
934 - fi
935 - fi
936 -
937 - if [[ -n "${_PRODUCTS}" ]]; then
938 - elog "Before you can use ${_PRODUCTS}, you need to edit its configuration in:"
939 - elog ""
940 - elog " /etc/shorewall/shorewall.conf"
941 -
942 - if use ipv6; then
943 - elog " /etc/shorewall6/shorewall6.conf"
944 - fi
945 -
946 - elog ""
947 - elog "To activate your shorewall-based firewall on system start, please add ${_PRODUCTS} to your default runlevel:"
948 - elog ""
949 - elog " # rc-update add shorewall default"
950 -
951 - if use ipv6; then
952 - elog " # rc-update add shorewall6 default"
953 - fi
954 - fi
955 -
956 - # Show first steps for shorewall-lite/shorewall6-lite
957 - _PRODUCTS=""
958 - if use lite4; then
959 - _PRODUCTS="shorewall-lite"
960 - fi
961 -
962 - if use lite6; then
963 - if [[ -z "${_PRODUCTS}" ]]; then
964 - _PRODUCTS="shorewall6-lite"
965 - else
966 - _PRODUCTS="${_PRODUCTS}/shorewall6-lite"
967 - fi
968 - fi
969 -
970 - if [[ -n "${_PRODUCTS}" ]]; then
971 - if use ipv4; then
972 - elog ""
973 - fi
974 -
975 - elog "Before you can use ${_PRODUCTS}, you need to provide a configuration, which you can"
976 - elog "create using ${CATEGORY}/shorewall (with \"ipv4\" and or \"ipv6\" USE flag)."
977 - elog ""
978 - elog "To read more about ${_PRODUCTS}, please visit"
979 - elog " https://shorewall.org/CompiledPrograms.html"
980 - elog ""
981 - elog "To activate your shorewall-lite-based firewall on system start, please add ${PRODUCTS} to your default runlevel:"
982 - elog ""
983 -
984 - if use lite4; then
985 - elog " # rc-update add shorewall-lite default"
986 - fi
987 -
988 - if use lite6; then
989 - elog " # rc-update add shorewall6-lite default"
990 - fi
991 - fi
992 -
993 - if use init; then
994 - elog ""
995 - elog "To secure your system on boot, please add shorewall-init to your boot runlevel:"
996 - elog ""
997 - elog " # rc-update add shorewall-init boot"
998 - elog ""
999 - elog "and review \$PRODUCTS in"
1000 - elog ""
1001 - elog " /etc/conf.d/shorewall-init"
1002 - fi
1003 -
1004 - fi
1005 -
1006 - local v
1007 - for v in ${REPLACING_VERSIONS}; do
1008 - if ! version_is_at_least ${MY_MAJOR_RELEASE_NUMBER} ${v}; then
1009 - # This is an upgrade
1010 -
1011 - elog "You are upgrading from a previous major version. It is highly recommended that you read"
1012 - elog ""
1013 - elog " - /usr/share/doc/shorewall*/releasenotes.tx*"
1014 - elog " - https://shorewall.org/Shorewall-5.html#idm214"
1015 -
1016 - if use ipv4; then
1017 - elog ""
1018 - elog "You can auto-migrate your configuration using"
1019 - elog ""
1020 - elog " # shorewall update -A"
1021 -
1022 - if use ipv6; then
1023 - elog " # shorewall6 update -A"
1024 - fi
1025 -
1026 - elog ""
1027 - elog "*after* you have merged the changed files using one of the configuration"
1028 - elog "files update tools of your choice (dispatch-conf, etc-update...)."
1029 -
1030 - elog ""
1031 - elog "But if you are not familiar with the \"shorewall[6] update\" command,"
1032 - elog "please read the shorewall[6] man page first."
1033 - fi
1034 -
1035 - # Show this elog only once
1036 - break
1037 - fi
1038 - done
1039 -
1040 - if ! use init; then
1041 - elog ""
1042 - elog "Consider emerging ${CATEGORY}/${PN} with USE flag \"init\" to secure your system on boot"
1043 - elog "before your shorewall-based firewall is ready to start."
1044 - elog ""
1045 - elog "To read more about shorewall-init, please visit"
1046 - elog " https://shorewall.org/Shorewall-init.html"
1047 - fi
1048 -
1049 - if ! has_version "net-firewall/conntrack-tools"; then
1050 - elog ""
1051 - elog "Your Shorewall firewall can utilize \"conntrack\" from the \"net-firewall/conntrack-tools\""
1052 - elog "package. if you want to use this feature, you need to install \"net-firewall/conntrack-tools\"!"
1053 - fi
1054 -
1055 - if ! has_version "dev-perl/Devel-NYTProf"; then
1056 - elog ""
1057 - elog "If you want to profile your Shorewall firewall you need to install \"dev-perl/Devel-NYTProf\"!"
1058 - fi
1059 -}