52 lines
2.7 KiB
Markdown
52 lines
2.7 KiB
Markdown
# grafana
|
|
The grafana package
|
|
|
|
## Setup instructions
|
|
* clone the upstream sources: `git clone https://github.com/grafana/grafana && cd grafana`
|
|
* checkout the version of the specfile: `git checkout <currentversion>`
|
|
* apply existing patches: `git am ../0*.patch`
|
|
|
|
## Upgrade instructions
|
|
* follow the Setup instructions above
|
|
* rebase to the new version: `git fetch && git rebase --onto <newversion> <oldversion>`
|
|
* rebasing `remove-unused-backend-dependencies.patch`: only apply the patch to `pkg/extensions/main.go` and run `go mod tidy`, then `go.mod` and `go.sum` will get updated automatically
|
|
* rebasing `remove-unused-frontend-crypto.patch`: only apply the patch to `package.json` and run `yarn install`, then `yarn.lock` will get updated automatically
|
|
* create new patches from the modified git commits: `git format-patch -N --no-stat --no-signature <newversion> && mv *.patch ..`
|
|
* update `Version`, `Release`, `%changelog` and tarball NVRs in the specfile
|
|
* create bundles and manifest: `./create_bundles_in_container.sh`
|
|
* inspect the vendor tarball for any new non-FIPS crypto (`vendor/golang.org/x/crypto`), delete these files/directories in the Makefile and update the `patch-removed-backend-crypto.patch` if required
|
|
* update specfile with contents of the `.manifest` file
|
|
* update the manpages patch in `0002-add-manpages.patch` and other patches if required
|
|
* run local build: `rpkg local`
|
|
* run rpmlint: `rpmlint -r grafana.rpmlintrc /tmp/rpkg/grafana-*/grafana-*.src.rpm /tmp/rpkg/grafana-*/x86_64/grafana-*.x86_64.rpm`
|
|
* run a scratch build: `fedpkg scratch-build --srpm`
|
|
* upload new source tarballs: `fedpkg new-sources *.tar.gz *.tar.xz`
|
|
* commit new `sources` file
|
|
|
|
## Patches
|
|
* create the patch
|
|
* declare and apply (`%prep`) the patch in the specfile
|
|
* if the patch affects Go or Node.js dependencies, or the webpack
|
|
* update the `create_bundles.sh` script and apply the patch
|
|
* create new tarballs
|
|
* update the specfile with new tarball name and contents of the `.manifest` file
|
|
|
|
### General guidelines
|
|
* aim to apply all patches in the specfile
|
|
* avoid rebuilding the tarballs
|
|
|
|
Patches fall in several categories:
|
|
* modify dependency versions
|
|
* modify both sources and vendored dependencies (e.g. CVEs)
|
|
* modify the Node.js source (i.e. affect the webpack)
|
|
* some patches are conditional (e.g. FIPS)
|
|
|
|
Patches cannot be applied twice.
|
|
It is not possible to unconditionally apply all patches in the Makefile, and great care must be taken to include the required patches at the correct stage of the build.
|
|
|
|
## Reproducible Bundles
|
|
Run `./create_bundles_in_container.sh` to generate a reproducible vendor and webpack bundle.
|
|
|
|
## Verification
|
|
* compare the list of files with the upstream RPM at https://grafana.com/grafana/download
|