rpms/mariadb
7
0
Fork 0
Code Issues Pull Requests Releases Activity
60 Commits 21 Branches 38 Tags 3 MiB
02a712fe8d
Commit Graph

60 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
Honza Horak
02a712fe8d Fix md5 in FIPS mode with OpenSSL 3.0.0 
OpenSSL 3.0.0+ does not support EVP_MD_CTX_FLAG_NON_FIPS_ALLOW any longer.
In OpenSSL 1.1.1 the non FIPS allowed flag is context specific, while
in 3.0.0+ it is a different EVP_MD provider.

  Resolves: #2050541
 2022-02-09 15:37:33 +00:00
Michal Schorm
5e82fd62a4 Disable the upstream hardening - it overrides the default compilation flags of the distribution, but provides lower level of hardening than the default flags 
This issue was originally discovered by Annocheck stack-protection test in RHEL 9
Resolves: #2044388

The -DSECURITY_HARDENED is used to force a set of compilation flags for hardening
The issue is that the MariaDB upstream level of hardening is lower than expected by Red Hat
We disable this option to the default compilation flags (which have higher level of hardening) will be used
 2022-02-07 14:17:10 +01:00
Zuzana Miklankova
119ed62f4f Whitelisting file Index.xml from rpminspect xml check 
Reason is, that the bug is already reported on upstream:
https://jira.mariadb.org/browse/MDEV-26905.
Also we currently do not know how to fix it. If we eventually figure out
how to fix this bug, then the patch would be submitted directly to the
upstream, rather than to downstream, to avoid unintentionally breaking
some code that relied on the malformed XML.
 2022-01-12 09:29:47 +01:00
Michal Schorm
ce17bc05c4 Rebase to 10.5.13 
- Full testsuite checked

Resolves: #1976230 #2036983 #2021189
 2022-01-11 15:38:59 +01:00
Michal Schorm
23822d7ce3 Enable LTO 
Resolves: #1986172
 2022-01-11 09:05:56 +01:00
Michal Schorm
a76a3c657b Reword lines applying OpenSSL patch to match Fedora SPECfile 
Keeping the SPECfiles close helps with cherry-picking changes

Related: #2036983
 2022-01-11 09:05:36 +01:00
Zuzana Miklankova
793527ec85 Disable badfunct rpinspect CI check for /usr/bin/resolveip 
Resolveip binary is only used in mysql_install_db.sh script,
and only in non-"--rpm" mode [1]. However, we call this script with
"--rpm" option enabled, and thus the resolveip is not used [2],
and its badfuncs check can be disabled. [3]

Resolves: #1973194

[1] https://gitlab.com/redhat/centos-stream/rpms/mariadb/-/blob/c9s/mariadb-prepare-db-dir.sh#L100
[2] 5566cbadb0/scripts/mysql_install_db.sh (L425-L441)
[3] https://bugzilla.redhat.com/show_bug.cgi?id=1973194#c4
 2021-12-16 10:47:36 +01:00
Zuzana Miklankova
0de9e0a77f Disable xmllint check for specific xmls in rpminspect CI task #2012936 
based on https://lists.launchpad.net/maria-discuss/msg06133.html
discussion are the invalid xmls (except for Index.xml)
present in the sources on purpose and their xmllint
check can be thus disabled in the CI process.

A bug report [https://jira.mariadb.org/browse/MDEV-26905] was created
for the Index.xml file.

The CI picks up the rpmlimspect.yaml for specific package in the
dist-git repo.

Resolves: #2012936
 2021-12-15 14:15:32 +00:00
Honza Horak
295ecfc23a Use OpenSSL 3.0.0 patch from upstream 
Resolves: #1991498

Upstream patch: c80991c79f
Upstream JIRA ticket: https://jira.mariadb.org/browse/MDEV-25785
 2021-12-02 13:46:46 +01:00
Michal Schorm
5de93c78f5 Add wsrep_sst_rsync_tunnel script 
Resolves: #2003556
 2021-10-11 13:07:07 +02:00
Honza Horak
b23e21d635 Fix md5 usage in wsrep part 
Related: #1962047
 2021-08-17 16:02:15 +02:00
Michal Schorm
e59f4ddf66 Rebase to 10.5.12 
Related: #1971248
 2021-08-17 16:02:13 +02:00
Michal Schorm
61d38ce40d Enhance the usage of the "echo" program to get better formated output 
Related: #1971248
 2021-08-17 16:02:10 +02:00
Michal Schorm
c9900f6ca8 The user_map.conf configuration file is expected to be edited by users 
Resolves: #1989619
 2021-08-17 16:02:02 +02:00
Michal Schorm
b5366c5f57 Rebase to 10.5.11 
Related: #1971248
 2021-08-17 16:01:53 +02:00
Mohan Boddu
ed762744e1 Rebuilt for IMA sigs, glibc 2.34, aarch64 flags 
Related: rhbz#1991688
Signed-off-by: Mohan Boddu <mboddu@redhat.com>
 2021-08-09 22:07:19 +00:00
Lukas Javorsky
34c7a060a7 Add gating configuration 2021-08-09 11:27:31 +02:00
Florian Weimer
92eb3dd188 Another rebuild against pcre2-10.37 (bug #1970765) 
Related: #1970765
 2021-08-07 08:45:40 +02:00
Lukas Javorsky
4070c5be9a Rebuild against pcre2-10.37 (bug #1970765) 
Resolves: rhbz#1986851
 2021-07-28 15:40:46 +02:00
Mohan Boddu
ff1f296333 Rebuilt for RHEL 9 BETA for openssl 3.0 
Related: rhbz#1971065
Signed-off-by: Mohan Boddu <mboddu@redhat.com>
 2021-06-16 03:30:26 +00:00
Michal Schorm
beec309d53 Explicitly disable building of the Columnstore SE until it is packed properly 
Undefined behaviour leads to the SE being built by default on systems that have the necessary devel package installed

Cherry-picked from Fedora: e96ef648dd
Related: #1971248
 2021-06-13 11:22:10 +02:00
Michal Schorm
df56f318a4 Remove TokuDB Storage Engine subpackage 
The TokuDB SE from Percona upstream has been deprecated in MariaDB 10.5 and completely removed in MariaDB 10.6
In Fedora, we don't build it since MariaDB 10.5

Cherry-picked from Fedora: f192442cc3
Related: #1971248
 2021-06-13 11:21:49 +02:00
Michal Schorm
53f8029fe4 Use the modified sources; bump release 
Cherry-picked from Fedora: 47762ab9fc
Related: #1971248
 2021-06-13 11:21:37 +02:00
Michal Schorm
aebcf6b79c Ignore missing files during "rm -r" 
Cherry-picked from Fedora: b3ff1d5772
Related: #1971248
 2021-06-13 11:21:22 +02:00
Michal Schorm
dcf9624f00 Introduce the script for generating sources tarball without a code under a license which was not yet approved for Fedora or RHEL 
Change the name of the sources archive, so the maintainer will encounter an error when uploading new sources which haven't undergo modification by this script

Cherry-picked from Fedora: 7f8a0e15a6
Related: #1971248
 2021-06-13 11:20:56 +02:00
Michal Schorm
29b1e7172c Fix RPMLint warning: incoherent-version-in-changelog 10.5.10-1 ['3:10.5.10-1.fc35', '3:10.5.10-1'] 
Cherry-picked from Fedora: b14945398c
Related: #1971248
 2021-06-13 11:20:39 +02:00
Michal Schorm
1450841692 Update RPMLint whitelist; fix RPMLint findings 
Cherry-picked from Fedora: 2e03a737bb
Related: #1971248
 2021-06-13 11:20:26 +02:00
Daniel Black
8db0f6ac1a Document systemd service changes 
Prefer the systemctl edit mysql.service syntax
and leave the more complex alternatives to the
existing documents referenced.

Also show how to use the multiinstance a bit more.

Cherry-picked from Fedora: a87e9e5d9a
Related: #1971248
 2021-06-13 11:20:12 +02:00
Daniel Black
72944367e0 drop KillMode=process 
MariaDB-10.4 onwards included a pam_helper subprocess to help
with the pam authentication module.

If the user is running with Galera there are SST modules that could
be executing.

By dropping KillMode=process this reverts back to control-group to
cover all of these subprocesses. This is what upstream does.

https://jira.mariadb.org/browse/MDEV-25233 suggests moving to
KillMode=mixed, which is probably ok too, but has been tested less.

Cherry-picked from Fedora: 95f558b833
Related: #1971248
 2021-06-13 11:19:53 +02:00
Daniel Black
ee0fe005a8 update package descriptions 
Use mariadbd rather than mysqld in package descriptions.

Changed community branch of MySQL to "fork from", since branch
implies far too many updates from or back to the original
which isn't true.

Updated server-galera package description as it didn't
reference Galera at all.

Cherry-picked from Fedora: fcdfad8ad8
Related: #1971248
 2021-06-13 11:19:37 +02:00
Daniel Black
e33b710c9d mariadb-scripts-common: update sections from mariadbd --help --verbose 
Cherry-picked from Fedora: c205fe1604
Related: #1971248
 2021-06-13 11:19:11 +02:00
Daniel Black
80862e14ea rename mysql scripts to mariadb 
Use mariadb names in the scripts too.

Cherry-picked from Fedora: df76620f9e
Related: #1971248
 2021-06-13 11:18:55 +02:00
Daniel Black
b731fafd7a Drop README.mysql-license, there are no exceptions 
MariaDB has LGPL-2.1 for the licensing of Connector/C

This is the submodule in libmariadb on the server repository
from which the client libraries are built.

ref: https://github.com/mariadb-corporation/mariadb-connector-c

From upstream:
  e4da179b03

Cherry-picked from Fedora: 00056934fb
Related: #1971248
 2021-06-13 11:18:30 +02:00
Daniel Black
0aa8eb7eef README.mariadb-docs to refer to MariaDB documentation 
MariaDB has its own documentation and refering to MySQL
documentation may mislead users.

Cherry-picked from Fedora: 8a01c71407
Related: #1971248
 2021-06-13 11:18:02 +02:00
Michal Schorm
065445600c Rebase to 10.5.10 
Cherry-picked from Fedora: b84b8cfc8c
Related: #1971248
 2021-06-13 11:11:56 +02:00
Honza Horak
0a14bc58a2 Fix OpenSSL 3.x compatibility 
Resolves: #1962047
 2021-05-27 15:19:29 +02:00
Michal Schorm
6d39bc1dbb Fix package Conflicts on other OS than Fedora 
The "community-mysql" package is named just "mysql" on RHEL & CentOS

Resolves: #1955704

Fedora upstream commit:
  939918b1e0
 2021-05-03 11:48:17 +02:00
Michal Schorm
7929519a6b Disable consistently failing test 
Related: #1906426
 2021-04-30 15:45:11 +02:00
Mohan Boddu
6ac7cab344 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 
Signed-off-by: Mohan Boddu <mboddu@redhat.com>
 2021-04-16 01:58:42 +00:00
DistroBaker
56ba4d0668 Merged update from upstream sources 
This is an automated DistroBaker update from upstream sources.
If you do not know what this is about or would like to opt out,
contact the OSCI team.

Source: https://src.fedoraproject.org/rpms/mariadb.git#a5d57f35209c105ef3990f18005bae9582f342fa
 2021-04-04 21:56:20 +00:00
DistroBaker
5805483d45 Merged update from upstream sources 
This is an automated DistroBaker update from upstream sources.
If you do not know what this is about or would like to opt out,
contact the OSCI team.

Source: https://src.fedoraproject.org/rpms/mariadb.git#33b0b7903b0341dfdc21d2ae1dd3d30d749796c1
 2021-03-24 23:25:32 +00:00
DistroBaker
5d1026ca16 Merged update from upstream sources 
This is an automated DistroBaker update from upstream sources.
If you do not know what this is about or would like to opt out,
contact the OSCI team.

Source: https://src.fedoraproject.org/rpms/mariadb.git#7d46a8244f4691d51199a8530eb989e5cc0a9a5c
 2021-02-19 12:21:43 +00:00
DistroBaker
2202fb6672 Merged update from upstream sources 
This is an automated DistroBaker update from upstream sources.
If you do not know what this is about or would like to opt out,
contact the OSCI team.

Source: https://src.fedoraproject.org/rpms/mariadb.git#7d46a8244f4691d51199a8530eb989e5cc0a9a5c
 2021-02-17 12:16:51 +01:00
DistroBaker
38d034d0f7 Merged update from upstream sources 
This is an automated DistroBaker update from upstream sources.
If you do not know what this is about or would like to opt out,
contact the OSCI team.

Source: https://src.fedoraproject.org/rpms/mariadb.git#7d46a8244f4691d51199a8530eb989e5cc0a9a5c
 2021-02-16 17:45:47 +00:00
DistroBaker
19a7626c6a Merged update from upstream sources 
This is an automated DistroBaker update from upstream sources.
If you do not know what this is about or would like to opt out,
contact the OSCI team.

Source: https://src.fedoraproject.org/rpms/mariadb.git#153eaac4b2c8652c05473a075d585dc8e8e50f62
 2021-02-09 19:52:58 +01:00
DistroBaker
5da429c22d Merged update from upstream sources 
This is an automated DistroBaker update from upstream sources.
If you do not know what this is about or would like to opt out,
contact the OSCI team.

Source: https://src.fedoraproject.org/rpms/mariadb.git#153eaac4b2c8652c05473a075d585dc8e8e50f62
 2021-02-09 16:45:15 +01:00
DistroBaker
887dc569a5 Merged update from upstream sources 
This is an automated DistroBaker update from upstream sources.
If you do not know what this is about or would like to opt out,
contact the OSCI team.

Source: https://src.fedoraproject.org/rpms/mariadb.git#153eaac4b2c8652c05473a075d585dc8e8e50f62
 2021-02-03 23:28:19 +00:00
DistroBaker
f5d9c5d872 Merged update from upstream sources 
This is an automated DistroBaker update from upstream sources.
If you do not know what this is about or would like to opt out,
contact the OSCI team.

Source: https://src.fedoraproject.org/rpms/mariadb.git#67fe36f42d6eb54a5f5b3d361fbda8aabf0c0b4c
 2021-01-12 15:07:02 +00:00
DistroBaker
19527f2b02 Merged update from upstream sources 
This is an automated DistroBaker update from upstream sources.
If you do not know what this is about or would like to opt out,
contact the OSCI team.

Source: https://src.fedoraproject.org/rpms/mariadb.git#95e69a74bcb5a5f4981ead3885ef81730e8f0217
 2020-12-18 18:18:17 +01:00
DistroBaker
57103e367a Merged update from upstream sources 
This is an automated DistroBaker update from upstream sources.
If you do not know what this is about or would like to opt out,
contact the OSCI team.

Source: https://src.fedoraproject.org/rpms/mariadb.git#95e69a74bcb5a5f4981ead3885ef81730e8f0217
 2020-12-16 22:58:38 +00:00