1 |
commit: e899bf18f012ddeb2effdbc619eaecf79ca41be7 |
2 |
Author: Tomáš Mózes <hydrapolic <AT> gmail <DOT> com> |
3 |
AuthorDate: Wed Feb 2 19:07:34 2022 +0000 |
4 |
Commit: Sam James <sam <AT> gentoo <DOT> org> |
5 |
CommitDate: Thu Feb 3 02:20:45 2022 +0000 |
6 |
URL: https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=e899bf18 |
7 |
|
8 |
www-apps/gitea: security bump to 1.15.11/1.16.0 |
9 |
|
10 |
Signed-off-by: Tomáš Mózes <hydrapolic <AT> gmail.com> |
11 |
Signed-off-by: Sam James <sam <AT> gentoo.org> |
12 |
|
13 |
www-apps/gitea/Manifest | 2 + |
14 |
www-apps/gitea/gitea-1.15.11.ebuild | 107 ++++++++++++++++++++++++++++++++++++ |
15 |
www-apps/gitea/gitea-1.16.0.ebuild | 107 ++++++++++++++++++++++++++++++++++++ |
16 |
3 files changed, 216 insertions(+) |
17 |
|
18 |
diff --git a/www-apps/gitea/Manifest b/www-apps/gitea/Manifest |
19 |
index f02ea9c4895a..c3c2fe314ebe 100644 |
20 |
--- a/www-apps/gitea/Manifest |
21 |
+++ b/www-apps/gitea/Manifest |
22 |
@@ -1 +1,3 @@ |
23 |
DIST gitea-1.15.10.tar.gz 48818877 BLAKE2B 00e2fc8fb0ca5952d96de1b4ed53d0bd6d17b22fc0d7c2aacc313ed74d0a2d268ad714a363c5408daca9b57beaa0305b369d9400019f9c60e133a976f0731076 SHA512 6598e2b8cb84e03370b704f57783612bb4bb938527bbcfcaaf0607035e73e3b480e40ca6fa196ae641ec91483af54688c5acf8dcce59d4ee8c6de9f393a8f531 |
24 |
+DIST gitea-1.15.11.tar.gz 48782819 BLAKE2B 1f04314cef3ee1467ed0948e95dec89c75a45cc2c3de78f7fc998b9716c5859bd87ec51e6e2b79d048701ac82fc112b3239a6e27bccfe4b0eeb4cdfdc1fb99d6 SHA512 1f842b90997cb7463751a0e08d37f4823437094efadeb6a27a6bbdb502b2bf33ebb0eab1e8e6bf5b64790b4c513cc42b978ec54152f1a4bfe0b6b957cb179fde |
25 |
+DIST gitea-1.16.0.tar.gz 49689929 BLAKE2B d6713dd6c72ee659335f263bcde2bbf25beba44fda7dc5e31d30c1a24bcf6a9155909f2e8e8039f462a2982ddef235a57cb08d77676c9a139fe5f7ef4379bfa8 SHA512 24cb3d7859bf57a0d78ed7820b1daffda3095fd6025e886d828d956fd1a75e179bd6c784cd54c7f174d63353f68d59c7a2a76cb0ce0a209f6d11b3c3181f9b5e |
26 |
|
27 |
diff --git a/www-apps/gitea/gitea-1.15.11.ebuild b/www-apps/gitea/gitea-1.15.11.ebuild |
28 |
new file mode 100644 |
29 |
index 000000000000..eaeda1a3f382 |
30 |
--- /dev/null |
31 |
+++ b/www-apps/gitea/gitea-1.15.11.ebuild |
32 |
@@ -0,0 +1,107 @@ |
33 |
+# Copyright 2016-2022 Gentoo Authors |
34 |
+# Distributed under the terms of the GNU General Public License v2 |
35 |
+ |
36 |
+EAPI=8 |
37 |
+ |
38 |
+inherit fcaps go-module tmpfiles systemd |
39 |
+ |
40 |
+DESCRIPTION="A painless self-hosted Git service" |
41 |
+HOMEPAGE="https://gitea.io https://github.com/go-gitea/gitea" |
42 |
+SRC_URI="https://github.com/go-gitea/gitea/releases/download/v${PV}/gitea-src-${PV}.tar.gz -> ${P}.tar.gz" |
43 |
+KEYWORDS="~amd64 ~arm ~arm64" |
44 |
+S="${WORKDIR}" |
45 |
+ |
46 |
+LICENSE="Apache-2.0 BSD BSD-2 ISC MIT MPL-2.0" |
47 |
+SLOT="0" |
48 |
+IUSE="+acct pam sqlite" |
49 |
+ |
50 |
+DEPEND=" |
51 |
+ acct? ( |
52 |
+ acct-group/git |
53 |
+ acct-user/git[gitea] ) |
54 |
+ pam? ( sys-libs/pam )" |
55 |
+RDEPEND="${DEPEND} |
56 |
+ dev-vcs/git" |
57 |
+ |
58 |
+DOCS=( |
59 |
+ custom/conf/app.example.ini CONTRIBUTING.md README.md |
60 |
+) |
61 |
+FILECAPS=( |
62 |
+ -m 711 cap_net_bind_service+ep usr/bin/gitea |
63 |
+) |
64 |
+ |
65 |
+RESTRICT="test" |
66 |
+ |
67 |
+src_prepare() { |
68 |
+ default |
69 |
+ |
70 |
+ local sedcmds=( |
71 |
+ -e "s#^ROOT =#ROOT = ${EPREFIX}/var/lib/gitea/gitea-repositories#" |
72 |
+ -e "s#^ROOT_PATH =#ROOT_PATH = ${EPREFIX}/var/log/gitea#" |
73 |
+ -e "s#^APP_DATA_PATH = data#APP_DATA_PATH = ${EPREFIX}/var/lib/gitea/data#" |
74 |
+ -e "s#^HTTP_ADDR = 0.0.0.0#HTTP_ADDR = 127.0.0.1#" |
75 |
+ -e "s#^MODE = console#MODE = file#" |
76 |
+ -e "s#^LEVEL = Trace#LEVEL = Info#" |
77 |
+ -e "s#^LOG_SQL = true#LOG_SQL = false#" |
78 |
+ -e "s#^DISABLE_ROUTER_LOG = false#DISABLE_ROUTER_LOG = true#" |
79 |
+ ) |
80 |
+ |
81 |
+ sed -i "${sedcmds[@]}" custom/conf/app.example.ini || die |
82 |
+ if use sqlite ; then |
83 |
+ sed -i -e "s#^DB_TYPE = .*#DB_TYPE = sqlite3#" custom/conf/app.example.ini || die |
84 |
+ fi |
85 |
+} |
86 |
+ |
87 |
+src_compile() { |
88 |
+ local gitea_tags=( |
89 |
+ bindata |
90 |
+ $(usev pam) |
91 |
+ $(usex sqlite 'sqlite sqlite_unlock_notify' '') |
92 |
+ ) |
93 |
+ local gitea_settings=( |
94 |
+ "-X code.gitea.io/gitea/modules/setting.CustomConf=${EPREFIX}/etc/gitea/app.ini" |
95 |
+ "-X code.gitea.io/gitea/modules/setting.CustomPath=${EPREFIX}/var/lib/gitea/custom" |
96 |
+ "-X code.gitea.io/gitea/modules/setting.AppWorkPath=${EPREFIX}/var/lib/gitea" |
97 |
+ ) |
98 |
+ local makeenv=( |
99 |
+ DRONE_TAG="${PV}" |
100 |
+ LDFLAGS="-extldflags \"${LDFLAGS}\" ${gitea_settings[*]}" |
101 |
+ TAGS="${gitea_tags[*]}" |
102 |
+ ) |
103 |
+ |
104 |
+ env "${makeenv[@]}" emake backend |
105 |
+} |
106 |
+ |
107 |
+src_install() { |
108 |
+ dobin gitea |
109 |
+ |
110 |
+ einstalldocs |
111 |
+ |
112 |
+ newconfd "${FILESDIR}/gitea.confd-r1" gitea |
113 |
+ newinitd "${FILESDIR}/gitea.initd-r3" gitea |
114 |
+ newtmpfiles - gitea.conf <<-EOF |
115 |
+ d /run/gitea 0755 git git |
116 |
+ EOF |
117 |
+ systemd_newunit "${FILESDIR}"/gitea.service-r3 gitea.service |
118 |
+ |
119 |
+ insinto /etc/gitea |
120 |
+ newins custom/conf/app.example.ini app.ini |
121 |
+ if use acct; then |
122 |
+ fowners root:git /etc/gitea/{,app.ini} |
123 |
+ fperms g+w,o-rwx /etc/gitea/{,app.ini} |
124 |
+ |
125 |
+ diropts -m0750 -o git -g git |
126 |
+ keepdir /var/lib/gitea /var/lib/gitea/custom /var/lib/gitea/data |
127 |
+ keepdir /var/log/gitea |
128 |
+ fi |
129 |
+} |
130 |
+ |
131 |
+pkg_postinst() { |
132 |
+ fcaps_pkg_postinst |
133 |
+ tmpfiles_process gitea.conf |
134 |
+ |
135 |
+ ewarn "The default JWT signing algorithm changed in 1.15.0 from HS256 (symmetric) to" |
136 |
+ ewarn "RS256 (asymmetric). Gitea OAuth2 tokens (and potentially client secrets) will" |
137 |
+ ewarn "need to be regenerated unless you change your JWT_SIGNING_ALGORITHM back to HS256." |
138 |
+ ewarn "For other breaking changes, see <https://github.com/go-gitea/gitea/releases/tag/v1.15.0>." |
139 |
+} |
140 |
|
141 |
diff --git a/www-apps/gitea/gitea-1.16.0.ebuild b/www-apps/gitea/gitea-1.16.0.ebuild |
142 |
new file mode 100644 |
143 |
index 000000000000..eaeda1a3f382 |
144 |
--- /dev/null |
145 |
+++ b/www-apps/gitea/gitea-1.16.0.ebuild |
146 |
@@ -0,0 +1,107 @@ |
147 |
+# Copyright 2016-2022 Gentoo Authors |
148 |
+# Distributed under the terms of the GNU General Public License v2 |
149 |
+ |
150 |
+EAPI=8 |
151 |
+ |
152 |
+inherit fcaps go-module tmpfiles systemd |
153 |
+ |
154 |
+DESCRIPTION="A painless self-hosted Git service" |
155 |
+HOMEPAGE="https://gitea.io https://github.com/go-gitea/gitea" |
156 |
+SRC_URI="https://github.com/go-gitea/gitea/releases/download/v${PV}/gitea-src-${PV}.tar.gz -> ${P}.tar.gz" |
157 |
+KEYWORDS="~amd64 ~arm ~arm64" |
158 |
+S="${WORKDIR}" |
159 |
+ |
160 |
+LICENSE="Apache-2.0 BSD BSD-2 ISC MIT MPL-2.0" |
161 |
+SLOT="0" |
162 |
+IUSE="+acct pam sqlite" |
163 |
+ |
164 |
+DEPEND=" |
165 |
+ acct? ( |
166 |
+ acct-group/git |
167 |
+ acct-user/git[gitea] ) |
168 |
+ pam? ( sys-libs/pam )" |
169 |
+RDEPEND="${DEPEND} |
170 |
+ dev-vcs/git" |
171 |
+ |
172 |
+DOCS=( |
173 |
+ custom/conf/app.example.ini CONTRIBUTING.md README.md |
174 |
+) |
175 |
+FILECAPS=( |
176 |
+ -m 711 cap_net_bind_service+ep usr/bin/gitea |
177 |
+) |
178 |
+ |
179 |
+RESTRICT="test" |
180 |
+ |
181 |
+src_prepare() { |
182 |
+ default |
183 |
+ |
184 |
+ local sedcmds=( |
185 |
+ -e "s#^ROOT =#ROOT = ${EPREFIX}/var/lib/gitea/gitea-repositories#" |
186 |
+ -e "s#^ROOT_PATH =#ROOT_PATH = ${EPREFIX}/var/log/gitea#" |
187 |
+ -e "s#^APP_DATA_PATH = data#APP_DATA_PATH = ${EPREFIX}/var/lib/gitea/data#" |
188 |
+ -e "s#^HTTP_ADDR = 0.0.0.0#HTTP_ADDR = 127.0.0.1#" |
189 |
+ -e "s#^MODE = console#MODE = file#" |
190 |
+ -e "s#^LEVEL = Trace#LEVEL = Info#" |
191 |
+ -e "s#^LOG_SQL = true#LOG_SQL = false#" |
192 |
+ -e "s#^DISABLE_ROUTER_LOG = false#DISABLE_ROUTER_LOG = true#" |
193 |
+ ) |
194 |
+ |
195 |
+ sed -i "${sedcmds[@]}" custom/conf/app.example.ini || die |
196 |
+ if use sqlite ; then |
197 |
+ sed -i -e "s#^DB_TYPE = .*#DB_TYPE = sqlite3#" custom/conf/app.example.ini || die |
198 |
+ fi |
199 |
+} |
200 |
+ |
201 |
+src_compile() { |
202 |
+ local gitea_tags=( |
203 |
+ bindata |
204 |
+ $(usev pam) |
205 |
+ $(usex sqlite 'sqlite sqlite_unlock_notify' '') |
206 |
+ ) |
207 |
+ local gitea_settings=( |
208 |
+ "-X code.gitea.io/gitea/modules/setting.CustomConf=${EPREFIX}/etc/gitea/app.ini" |
209 |
+ "-X code.gitea.io/gitea/modules/setting.CustomPath=${EPREFIX}/var/lib/gitea/custom" |
210 |
+ "-X code.gitea.io/gitea/modules/setting.AppWorkPath=${EPREFIX}/var/lib/gitea" |
211 |
+ ) |
212 |
+ local makeenv=( |
213 |
+ DRONE_TAG="${PV}" |
214 |
+ LDFLAGS="-extldflags \"${LDFLAGS}\" ${gitea_settings[*]}" |
215 |
+ TAGS="${gitea_tags[*]}" |
216 |
+ ) |
217 |
+ |
218 |
+ env "${makeenv[@]}" emake backend |
219 |
+} |
220 |
+ |
221 |
+src_install() { |
222 |
+ dobin gitea |
223 |
+ |
224 |
+ einstalldocs |
225 |
+ |
226 |
+ newconfd "${FILESDIR}/gitea.confd-r1" gitea |
227 |
+ newinitd "${FILESDIR}/gitea.initd-r3" gitea |
228 |
+ newtmpfiles - gitea.conf <<-EOF |
229 |
+ d /run/gitea 0755 git git |
230 |
+ EOF |
231 |
+ systemd_newunit "${FILESDIR}"/gitea.service-r3 gitea.service |
232 |
+ |
233 |
+ insinto /etc/gitea |
234 |
+ newins custom/conf/app.example.ini app.ini |
235 |
+ if use acct; then |
236 |
+ fowners root:git /etc/gitea/{,app.ini} |
237 |
+ fperms g+w,o-rwx /etc/gitea/{,app.ini} |
238 |
+ |
239 |
+ diropts -m0750 -o git -g git |
240 |
+ keepdir /var/lib/gitea /var/lib/gitea/custom /var/lib/gitea/data |
241 |
+ keepdir /var/log/gitea |
242 |
+ fi |
243 |
+} |
244 |
+ |
245 |
+pkg_postinst() { |
246 |
+ fcaps_pkg_postinst |
247 |
+ tmpfiles_process gitea.conf |
248 |
+ |
249 |
+ ewarn "The default JWT signing algorithm changed in 1.15.0 from HS256 (symmetric) to" |
250 |
+ ewarn "RS256 (asymmetric). Gitea OAuth2 tokens (and potentially client secrets) will" |
251 |
+ ewarn "need to be regenerated unless you change your JWT_SIGNING_ALGORITHM back to HS256." |
252 |
+ ewarn "For other breaking changes, see <https://github.com/go-gitea/gitea/releases/tag/v1.15.0>." |
253 |
+} |