1 |
prometheanfire 14/01/23 16:31:28 |
2 |
|
3 |
Modified: ChangeLog |
4 |
Added: nova-2013.1.4-r4.ebuild nova-2013.2.1-r2.ebuild |
5 |
Removed: nova-2013.1.4-r3.ebuild nova-2013.2.1-r1.ebuild |
6 |
Log: |
7 |
fixes for CVE-2013-7130, old badness removed |
8 |
|
9 |
(Portage version: 2.2.7/cvs/Linux x86_64, signed Manifest commit with key 0x2471eb3e40ac5ac3) |
10 |
|
11 |
Revision Changes Path |
12 |
1.48 sys-cluster/nova/ChangeLog |
13 |
|
14 |
file : http://sources.gentoo.org/viewvc.cgi/gentoo-x86/sys-cluster/nova/ChangeLog?rev=1.48&view=markup |
15 |
plain: http://sources.gentoo.org/viewvc.cgi/gentoo-x86/sys-cluster/nova/ChangeLog?rev=1.48&content-type=text/plain |
16 |
diff : http://sources.gentoo.org/viewvc.cgi/gentoo-x86/sys-cluster/nova/ChangeLog?r1=1.47&r2=1.48 |
17 |
|
18 |
Index: ChangeLog |
19 |
=================================================================== |
20 |
RCS file: /var/cvsroot/gentoo-x86/sys-cluster/nova/ChangeLog,v |
21 |
retrieving revision 1.47 |
22 |
retrieving revision 1.48 |
23 |
diff -u -r1.47 -r1.48 |
24 |
--- ChangeLog 8 Jan 2014 06:00:45 -0000 1.47 |
25 |
+++ ChangeLog 23 Jan 2014 16:31:28 -0000 1.48 |
26 |
@@ -1,6 +1,15 @@ |
27 |
# ChangeLog for sys-cluster/nova |
28 |
# Copyright 1999-2014 Gentoo Foundation; Distributed under the GPL v2 |
29 |
-# $Header: /var/cvsroot/gentoo-x86/sys-cluster/nova/ChangeLog,v 1.47 2014/01/08 06:00:45 vapier Exp $ |
30 |
+# $Header: /var/cvsroot/gentoo-x86/sys-cluster/nova/ChangeLog,v 1.48 2014/01/23 16:31:28 prometheanfire Exp $ |
31 |
+ |
32 |
+*nova-2013.2.1-r2 (23 Jan 2014) |
33 |
+*nova-2013.1.4-r4 (23 Jan 2014) |
34 |
+ |
35 |
+ 23 Jan 2014; Matthew Thode <prometheanfire@g.o> |
36 |
+ +files/CVE-2013-7130-stable-grizzly.patch, |
37 |
+ +files/CVE-2013-7130-stable-havana.patch, +nova-2013.1.4-r4.ebuild, |
38 |
+ +nova-2013.2.1-r2.ebuild, -nova-2013.1.4-r3.ebuild, -nova-2013.2.1-r1.ebuild: |
39 |
+ fixes for CVE-2013-7130, old badness removed |
40 |
|
41 |
08 Jan 2014; Mike Frysinger <vapier@g.o> nova-2013.1.4-r3.ebuild, |
42 |
nova-2013.1.9999.ebuild, nova-2013.2.1-r1.ebuild, nova-2013.2.9999.ebuild, |
43 |
|
44 |
|
45 |
|
46 |
1.1 sys-cluster/nova/nova-2013.1.4-r4.ebuild |
47 |
|
48 |
file : http://sources.gentoo.org/viewvc.cgi/gentoo-x86/sys-cluster/nova/nova-2013.1.4-r4.ebuild?rev=1.1&view=markup |
49 |
plain: http://sources.gentoo.org/viewvc.cgi/gentoo-x86/sys-cluster/nova/nova-2013.1.4-r4.ebuild?rev=1.1&content-type=text/plain |
50 |
|
51 |
Index: nova-2013.1.4-r4.ebuild |
52 |
=================================================================== |
53 |
# Copyright 1999-2014 Gentoo Foundation |
54 |
# Distributed under the terms of the GNU General Public License v2 |
55 |
# $Header: /var/cvsroot/gentoo-x86/sys-cluster/nova/nova-2013.1.4-r4.ebuild,v 1.1 2014/01/23 16:31:28 prometheanfire Exp $ |
56 |
|
57 |
EAPI=5 |
58 |
PYTHON_COMPAT=( python2_7 ) |
59 |
|
60 |
inherit distutils-r1 eutils multilib user |
61 |
|
62 |
DESCRIPTION="A cloud computing fabric controller (main part of an IaaS system) written in Python." |
63 |
HOMEPAGE="https://launchpad.net/nova" |
64 |
SRC_URI="http://launchpad.net/${PN}/grizzly/${PV}/+download/${P}.tar.gz" |
65 |
|
66 |
LICENSE="Apache-2.0" |
67 |
SLOT="0" |
68 |
KEYWORDS="~amd64 ~x86" |
69 |
IUSE="+api +cert +compute +conductor +consoleauth +kvm +network +novncproxy +scheduler +spicehtml5proxy +xvpvncproxy xen sqlite mysql postgres" |
70 |
REQUIRED_USE="|| ( mysql postgres sqlite ) |
71 |
|| ( kvm xen )" |
72 |
|
73 |
DEPEND="dev-python/setuptools[${PYTHON_USEDEP}] |
74 |
app-admin/sudo" |
75 |
|
76 |
RDEPEND=">=dev-python/amqplib-0.6.1[${PYTHON_USEDEP}] |
77 |
>=dev-python/anyjson-0.2.4[${PYTHON_USEDEP}] |
78 |
>=dev-python/cheetah-2.4.4[${PYTHON_USEDEP}] |
79 |
sqlite? ( >=dev-python/sqlalchemy-0.7.8[sqlite,${PYTHON_USEDEP}] |
80 |
<dev-python/sqlalchemy-0.7.10[sqlite,${PYTHON_USEDEP}] ) |
81 |
mysql? ( >=dev-python/sqlalchemy-0.7.8[mysql,${PYTHON_USEDEP}] |
82 |
<dev-python/sqlalchemy-0.7.10[mysql,${PYTHON_USEDEP}] ) |
83 |
postgres? ( >=dev-python/sqlalchemy-0.7.8[postgres,${PYTHON_USEDEP}] |
84 |
<dev-python/sqlalchemy-0.7.10[postgres,${PYTHON_USEDEP}] ) |
85 |
dev-python/boto[${PYTHON_USEDEP}] |
86 |
>=dev-python/lxml-2.3[${PYTHON_USEDEP}] |
87 |
>=dev-python/eventlet-0.9.17[${PYTHON_USEDEP}] |
88 |
>=dev-python/kombu-1.0.4-r1[${PYTHON_USEDEP}] |
89 |
>=dev-python/routes-1.12.3-r1[${PYTHON_USEDEP}] |
90 |
~dev-python/webob-1.2.3[${PYTHON_USEDEP}] |
91 |
>=dev-python/greenlet-0.3.1[${PYTHON_USEDEP}] |
92 |
>=dev-python/pastedeploy-1.5.0-r1[${PYTHON_USEDEP}] |
93 |
dev-python/paste[${PYTHON_USEDEP}] |
94 |
>=dev-python/sqlalchemy-migrate-0.7.2[${PYTHON_USEDEP}] |
95 |
dev-python/netaddr[${PYTHON_USEDEP}] |
96 |
>=dev-python/suds-0.4[${PYTHON_USEDEP}] |
97 |
dev-python/paramiko[${PYTHON_USEDEP}] |
98 |
dev-python/pyasn1[${PYTHON_USEDEP}] |
99 |
>=dev-python/Babel-0.9.6[${PYTHON_USEDEP}] |
100 |
>=dev-python/iso8601-0.1.4[${PYTHON_USEDEP}] |
101 |
dev-python/httplib2[${PYTHON_USEDEP}] |
102 |
>=dev-python/setuptools-git-0.4[${PYTHON_USEDEP}] |
103 |
>=dev-python/python-cinderclient-1.0.1[${PYTHON_USEDEP}] |
104 |
>=dev-python/python-glanceclient-0.5.0[${PYTHON_USEDEP}] |
105 |
<dev-python/python-glanceclient-2[${PYTHON_USEDEP}] |
106 |
>=dev-python/python-neutronclient-2.2.0[${PYTHON_USEDEP}] |
107 |
<=dev-python/python-neutronclient-3.0.0[${PYTHON_USEDEP}] |
108 |
>=dev-python/python-keystoneclient-0.2.0[${PYTHON_USEDEP}] |
109 |
>=dev-python/stevedore-0.7[${PYTHON_USEDEP}] |
110 |
<dev-python/websockify-0.4[${PYTHON_USEDEP}] |
111 |
>=dev-python/oslo-config-1.1.0[${PYTHON_USEDEP}] |
112 |
<dev-python/oslo-config-1.2.0[${PYTHON_USEDEP}] |
113 |
virtual/python-argparse[${PYTHON_USEDEP}] |
114 |
app-emulation/libvirt[${PYTHON_USEDEP}] |
115 |
novncproxy? ( www-apps/novnc ) |
116 |
sys-apps/iproute2 |
117 |
net-misc/openvswitch |
118 |
sys-fs/sysfsutils |
119 |
sys-fs/multipath-tools |
120 |
kvm? ( app-emulation/qemu ) |
121 |
xen? ( app-emulation/xen |
122 |
app-emulation/xen-tools )" |
123 |
|
124 |
PATCHES=( |
125 |
"${FILESDIR}/CVE-2013-4463_4469-grizzly.patch" |
126 |
"${FILESDIR}/CVE-2013-4497-grizzly-1.patch" |
127 |
"${FILESDIR}/CVE-2013-4497-grizzly-2.patch" |
128 |
"${FILESDIR}/CVE-2013-6419_2013.1.4.patch" |
129 |
"${FILESDIR}/CVE-2013-6437-2012.1.4.patch" |
130 |
"${FILESDIR}/CVE-2013-7130-stable-grizzly.patch" |
131 |
) |
132 |
|
133 |
pkg_setup() { |
134 |
enewgroup nova |
135 |
enewuser nova -1 -1 /var/lib/nova nova |
136 |
} |
137 |
|
138 |
src_prepare() { |
139 |
sed -i 's/setuptools_git>=0.4//g' "${S}/setup.py" |
140 |
distutils-r1_src_prepare |
141 |
} |
142 |
|
143 |
#python_test() { |
144 |
# nosetests || die |
145 |
#} |
146 |
|
147 |
python_install() { |
148 |
distutils-r1_python_install |
149 |
newconfd "${FILESDIR}/nova-confd" "nova" |
150 |
newinitd "${FILESDIR}/nova-initd" "nova" |
151 |
use api && dosym /etc/init.d/nova /etc/init.d/nova-api |
152 |
use cert && dosym /etc/init.d/nova /etc/init.d/nova-cert |
153 |
use compute && dosym /etc/init.d/nova /etc/init.d/nova-compute |
154 |
use conductor && dosym /etc/init.d/nova /etc/init.d/nova-conductor |
155 |
use consoleauth && dosym /etc/init.d/nova /etc/init.d/nova-consoleauth |
156 |
use network && dosym /etc/init.d/nova /etc/init.d/nova-network |
157 |
use novncproxy &&dosym /etc/init.d/nova /etc/init.d/nova-novncproxy |
158 |
use scheduler && dosym /etc/init.d/nova /etc/init.d/nova-scheduler |
159 |
use spicehtml5proxy && dosym /etc/init.d/nova /etc/init.d/nova-spicehtml5proxy |
160 |
use xvpvncproxy && dosym /etc/init.d/nova /etc/init.d/nova-xvpncproxy |
161 |
|
162 |
diropts -m 0750 |
163 |
dodir /var/run/nova /var/log/nova /var/lock/nova |
164 |
fowners nova:nova /var/log/nova /var/lock/nova /var/run/nova |
165 |
|
166 |
diropts -m 0755 |
167 |
dodir /var/lib/nova/instances |
168 |
fowners nova:nova /var/lib/nova/instances |
169 |
|
170 |
keepdir /etc/nova |
171 |
insinto /etc/nova |
172 |
newins "etc/nova/nova.conf.sample" "nova.conf" |
173 |
doins "etc/nova/api-paste.ini" |
174 |
doins "etc/nova/logging_sample.conf" |
175 |
doins "etc/nova/policy.json" |
176 |
doins "etc/nova/rootwrap.conf" |
177 |
insinto /etc/nova/rootwrap.d |
178 |
doins "etc/nova/rootwrap.d/api-metadata.filters" |
179 |
doins "etc/nova/rootwrap.d/compute.filters" |
180 |
doins "etc/nova/rootwrap.d/network.filters" |
181 |
|
182 |
#copy migration conf file (not coppied on install via setup.py script) |
183 |
insinto /usr/$(get_libdir)/python2.7/site-packages/nova/db/sqlalchemy/migrate_repo/ |
184 |
doins "nova/db/sqlalchemy/migrate_repo/migrate.cfg" |
185 |
|
186 |
#copy the CA cert dir (not coppied on install via setup.py script) |
187 |
cp -R "${S}/nova/CA" "${D}/usr/$(get_libdir)/python2.7/site-packages/nova/" || die "isntalling CA files failed" |
188 |
|
189 |
#add sudoers definitions for user nova |
190 |
insinto /etc/sudoers.d/ |
191 |
doins "${FILESDIR}/nova-sudoers" |
192 |
} |
193 |
|
194 |
|
195 |
|
196 |
1.1 sys-cluster/nova/nova-2013.2.1-r2.ebuild |
197 |
|
198 |
file : http://sources.gentoo.org/viewvc.cgi/gentoo-x86/sys-cluster/nova/nova-2013.2.1-r2.ebuild?rev=1.1&view=markup |
199 |
plain: http://sources.gentoo.org/viewvc.cgi/gentoo-x86/sys-cluster/nova/nova-2013.2.1-r2.ebuild?rev=1.1&content-type=text/plain |
200 |
|
201 |
Index: nova-2013.2.1-r2.ebuild |
202 |
=================================================================== |
203 |
# Copyright 1999-2014 Gentoo Foundation |
204 |
# Distributed under the terms of the GNU General Public License v2 |
205 |
# $Header: /var/cvsroot/gentoo-x86/sys-cluster/nova/nova-2013.2.1-r2.ebuild,v 1.1 2014/01/23 16:31:28 prometheanfire Exp $ |
206 |
|
207 |
EAPI=5 |
208 |
PYTHON_COMPAT=( python2_7 ) |
209 |
|
210 |
inherit distutils-r1 eutils multilib user |
211 |
|
212 |
DESCRIPTION="A cloud computing fabric controller (main part of an IaaS system) written in Python." |
213 |
HOMEPAGE="https://launchpad.net/nova" |
214 |
SRC_URI="http://launchpad.net/${PN}/havana/${PV}/+download/${P}.tar.gz" |
215 |
|
216 |
LICENSE="Apache-2.0" |
217 |
SLOT="0" |
218 |
KEYWORDS="~amd64 ~x86" |
219 |
IUSE="+api +cert +compute +conductor +consoleauth +kvm +network +novncproxy +scheduler +spicehtml5proxy +xvpvncproxy sqlite mysql postgres xen" |
220 |
REQUIRED_USE="|| ( mysql postgres sqlite ) |
221 |
|| ( kvm xen )" |
222 |
|
223 |
DEPEND="dev-python/setuptools[${PYTHON_USEDEP}] |
224 |
>=dev-python/pbr-0.5.21[${PYTHON_USEDEP}] |
225 |
<dev-python/pbr-1.0[${PYTHON_USEDEP}] |
226 |
app-admin/sudo" |
227 |
|
228 |
RDEPEND="sqlite? ( >=dev-python/sqlalchemy-0.7.8[sqlite,${PYTHON_USEDEP}] |
229 |
<dev-python/sqlalchemy-0.7.99[sqlite,${PYTHON_USEDEP}] ) |
230 |
mysql? ( >=dev-python/sqlalchemy-0.7.8[mysql,${PYTHON_USEDEP}] |
231 |
<dev-python/sqlalchemy-0.7.99[mysql,${PYTHON_USEDEP}] ) |
232 |
postgres? ( >=dev-python/sqlalchemy-0.7.8[postgres,${PYTHON_USEDEP}] |
233 |
<dev-python/sqlalchemy-0.7.99[postgres,${PYTHON_USEDEP}] ) |
234 |
>=dev-python/amqplib-0.6.1[${PYTHON_USEDEP}] |
235 |
>=dev-python/anyjson-0.3.3[${PYTHON_USEDEP}] |
236 |
virtual/python-argparse[${PYTHON_USEDEP}] |
237 |
>=dev-python/boto-2.4.0[${PYTHON_USEDEP}] |
238 |
!~dev-python/boto-2.13.0[${PYTHON_USEDEP}] |
239 |
>=dev-python/eventlet-0.13.0[${PYTHON_USEDEP}] |
240 |
dev-python/jinja[${PYTHON_USEDEP}] |
241 |
>=dev-python/kombu-2.4.8[${PYTHON_USEDEP}] |
242 |
>=dev-python/lxml-2.3[${PYTHON_USEDEP}] |
243 |
>=dev-python/routes-1.12.3-r1[${PYTHON_USEDEP}] |
244 |
>=dev-python/webob-1.2.3[${PYTHON_USEDEP}] |
245 |
<dev-python/webob-1.3[${PYTHON_USEDEP}] |
246 |
>=dev-python/greenlet-0.3.2[${PYTHON_USEDEP}] |
247 |
>=dev-python/pastedeploy-1.5.0-r1[${PYTHON_USEDEP}] |
248 |
dev-python/paste[${PYTHON_USEDEP}] |
249 |
>=dev-python/sqlalchemy-migrate-0.7.2[${PYTHON_USEDEP}] |
250 |
dev-python/netaddr[${PYTHON_USEDEP}] |
251 |
>=dev-python/suds-0.4[${PYTHON_USEDEP}] |
252 |
>=dev-python/paramiko-1.8.0[${PYTHON_USEDEP}] |
253 |
dev-python/pyasn1[${PYTHON_USEDEP}] |
254 |
>=dev-python/Babel-1.3[${PYTHON_USEDEP}] |
255 |
>=dev-python/iso8601-0.1.8[${PYTHON_USEDEP}] |
256 |
>=dev-python/python-cinderclient-1.0.5[${PYTHON_USEDEP}] |
257 |
>=dev-python/python-neutronclient-2.3.0[${PYTHON_USEDEP}] |
258 |
<=dev-python/python-neutronclient-3.0.0[${PYTHON_USEDEP}] |
259 |
>=dev-python/python-glanceclient-0.9.0[${PYTHON_USEDEP}] |
260 |
>=dev-python/python-keystoneclient-0.3.2[${PYTHON_USEDEP}] |
261 |
>=dev-python/stevedore-0.10[${PYTHON_USEDEP}] |
262 |
>=dev-python/websockify-0.5.1[${PYTHON_USEDEP}] |
263 |
<dev-python/websockify-0.6[${PYTHON_USEDEP}] |
264 |
>=dev-python/oslo-config-1.2.0[${PYTHON_USEDEP}] |
265 |
dev-python/libvirt-python[${PYTHON_USEDEP}] |
266 |
novncproxy? ( www-apps/novnc ) |
267 |
sys-apps/iproute2 |
268 |
net-misc/openvswitch |
269 |
sys-fs/sysfsutils |
270 |
sys-fs/multipath-tools |
271 |
kvm? ( app-emulation/qemu ) |
272 |
xen? ( app-emulation/xen |
273 |
app-emulation/xen-tools )" |
274 |
|
275 |
PATCHES=( |
276 |
"${FILESDIR}/CVE-2013-6437-2012.2.1.patch" |
277 |
"${FILESDIR}/CVE-2013-7130-stable-havana.patch" |
278 |
) |
279 |
|
280 |
pkg_setup() { |
281 |
enewgroup nova |
282 |
enewuser nova -1 -1 /var/lib/nova nova |
283 |
} |
284 |
|
285 |
python_install() { |
286 |
distutils-r1_python_install |
287 |
newconfd "${FILESDIR}/nova-confd" "nova" |
288 |
newinitd "${FILESDIR}/nova-initd" "nova" |
289 |
use api && dosym /etc/init.d/nova /etc/init.d/nova-api |
290 |
use cert && dosym /etc/init.d/nova /etc/init.d/nova-cert |
291 |
use compute && dosym /etc/init.d/nova /etc/init.d/nova-compute |
292 |
use conductor && dosym /etc/init.d/nova /etc/init.d/nova-conductor |
293 |
use consoleauth && dosym /etc/init.d/nova /etc/init.d/nova-consoleauth |
294 |
use network && dosym /etc/init.d/nova /etc/init.d/nova-network |
295 |
use novncproxy &&dosym /etc/init.d/nova /etc/init.d/nova-novncproxy |
296 |
use scheduler && dosym /etc/init.d/nova /etc/init.d/nova-scheduler |
297 |
use spicehtml5proxy && dosym /etc/init.d/nova /etc/init.d/nova-spicehtml5proxy |
298 |
use xvpvncproxy && dosym /etc/init.d/nova /etc/init.d/nova-xvpncproxy |
299 |
|
300 |
diropts -m 0750 |
301 |
dodir /var/run/nova /var/log/nova /var/lock/nova |
302 |
fowners nova:nova /var/log/nova /var/lock/nova /var/run/nova |
303 |
|
304 |
diropts -m 0755 |
305 |
dodir /var/lib/nova/instances |
306 |
fowners nova:nova /var/lib/nova/instances |
307 |
|
308 |
keepdir /etc/nova |
309 |
insinto /etc/nova |
310 |
newins "etc/nova/nova.conf.sample" "nova.conf" |
311 |
doins "etc/nova/api-paste.ini" |
312 |
doins "etc/nova/logging_sample.conf" |
313 |
doins "etc/nova/policy.json" |
314 |
doins "etc/nova/rootwrap.conf" |
315 |
insinto /etc/nova/rootwrap.d |
316 |
doins "etc/nova/rootwrap.d/api-metadata.filters" |
317 |
doins "etc/nova/rootwrap.d/compute.filters" |
318 |
doins "etc/nova/rootwrap.d/network.filters" |
319 |
|
320 |
#copy migration conf file (not coppied on install via setup.py script) |
321 |
insinto /usr/$(get_libdir)/python2.7/site-packages/nova/db/sqlalchemy/migrate_repo/ |
322 |
doins "nova/db/sqlalchemy/migrate_repo/migrate.cfg" |
323 |
|
324 |
#copy the CA cert dir (not coppied on install via setup.py script) |
325 |
cp -R "${S}/nova/CA" "${D}/usr/$(get_libdir)/python2.7/site-packages/nova/" || die "isntalling CA files failed" |
326 |
|
327 |
#add sudoers definitions for user nova |
328 |
insinto /etc/sudoers.d/ |
329 |
doins "${FILESDIR}/nova-sudoers" |
330 |
} |