Commit Graph

63 Commits

Author SHA1 Message Date
Michal Schorm 1c5ecdf5bd Fix the RPM condition for when the PAM plugin subpackage is not built
--

Related: #2092370
2022-06-08 04:00:17 +02:00
Michal Schorm 4698a110e3 Fix whitespaces in the echo, so both variables are prefixed with exactly one whitespace
--

Related: #2092370
2022-06-08 04:00:12 +02:00
Michal Schorm 0354b9890a Fix the regular expression used to pick up the PCRE2 version the upstream bundles
Upstream changed the URL from which they download the PCRE2 tarball

--

Related: #2092370
2022-06-08 04:00:04 +02:00
Honza Horak 02a712fe8d Fix md5 in FIPS mode with OpenSSL 3.0.0
OpenSSL 3.0.0+ does not support EVP_MD_CTX_FLAG_NON_FIPS_ALLOW any longer.
In OpenSSL 1.1.1 the non FIPS allowed flag is context specific, while
in 3.0.0+ it is a different EVP_MD provider.

  Resolves: #2050541
2022-02-09 15:37:33 +00:00
Michal Schorm 5e82fd62a4 Disable the upstream hardening - it overrides the default compilation flags of the distribution, but provides lower level of hardening than the default flags
This issue was originally discovered by Annocheck stack-protection test in RHEL 9
Resolves: #2044388

The -DSECURITY_HARDENED is used to force a set of compilation flags for hardening
The issue is that the MariaDB upstream level of hardening is lower than expected by Red Hat
We disable this option to the default compilation flags (which have higher level of hardening) will be used
2022-02-07 14:17:10 +01:00
Zuzana Miklankova 119ed62f4f Whitelisting file Index.xml from rpminspect xml check
Reason is, that the bug is already reported on upstream:
https://jira.mariadb.org/browse/MDEV-26905.
Also we currently do not know how to fix it. If we eventually figure out
how to fix this bug, then the patch would be submitted directly to the
upstream, rather than to downstream, to avoid unintentionally breaking
some code that relied on the malformed XML.
2022-01-12 09:29:47 +01:00
Michal Schorm ce17bc05c4 Rebase to 10.5.13
- Full testsuite checked

Resolves: #1976230 #2036983 #2021189
2022-01-11 15:38:59 +01:00
Michal Schorm 23822d7ce3 Enable LTO
Resolves: #1986172
2022-01-11 09:05:56 +01:00
Michal Schorm a76a3c657b Reword lines applying OpenSSL patch to match Fedora SPECfile
Keeping the SPECfiles close helps with cherry-picking changes

Related: #2036983
2022-01-11 09:05:36 +01:00
Zuzana Miklankova 793527ec85 Disable badfunct rpinspect CI check for /usr/bin/resolveip
Resolveip binary is only used in mysql_install_db.sh script,
and only in non-"--rpm" mode [1]. However, we call this script with
"--rpm" option enabled, and thus the resolveip is not used [2],
and its badfuncs check can be disabled. [3]

Resolves: #1973194

[1] https://gitlab.com/redhat/centos-stream/rpms/mariadb/-/blob/c9s/mariadb-prepare-db-dir.sh#L100
[2] 5566cbadb0/scripts/mysql_install_db.sh (L425-L441)
[3] https://bugzilla.redhat.com/show_bug.cgi?id=1973194#c4
2021-12-16 10:47:36 +01:00
Zuzana Miklankova 0de9e0a77f Disable xmllint check for specific xmls in rpminspect CI task #2012936
based on https://lists.launchpad.net/maria-discuss/msg06133.html
discussion are the invalid xmls (except for Index.xml)
present in the sources on purpose and their xmllint
check can be thus disabled in the CI process.

A bug report [https://jira.mariadb.org/browse/MDEV-26905] was created
for the Index.xml file.

The CI picks up the rpmlimspect.yaml for specific package in the
dist-git repo.

Resolves: #2012936
2021-12-15 14:15:32 +00:00
Honza Horak 295ecfc23a Use OpenSSL 3.0.0 patch from upstream
Resolves: #1991498

Upstream patch: c80991c79f
Upstream JIRA ticket: https://jira.mariadb.org/browse/MDEV-25785
2021-12-02 13:46:46 +01:00
Michal Schorm 5de93c78f5 Add wsrep_sst_rsync_tunnel script
Resolves: #2003556
2021-10-11 13:07:07 +02:00
Honza Horak b23e21d635 Fix md5 usage in wsrep part
Related: #1962047
2021-08-17 16:02:15 +02:00
Michal Schorm e59f4ddf66 Rebase to 10.5.12
Related: #1971248
2021-08-17 16:02:13 +02:00
Michal Schorm 61d38ce40d Enhance the usage of the "echo" program to get better formated output
Related: #1971248
2021-08-17 16:02:10 +02:00
Michal Schorm c9900f6ca8 The user_map.conf configuration file is expected to be edited by users
Resolves: #1989619
2021-08-17 16:02:02 +02:00
Michal Schorm b5366c5f57 Rebase to 10.5.11
Related: #1971248
2021-08-17 16:01:53 +02:00
Mohan Boddu ed762744e1 Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
Related: rhbz#1991688
Signed-off-by: Mohan Boddu <mboddu@redhat.com>
2021-08-09 22:07:19 +00:00
Lukas Javorsky 34c7a060a7 Add gating configuration 2021-08-09 11:27:31 +02:00
Florian Weimer 92eb3dd188 Another rebuild against pcre2-10.37 (bug #1970765)
Related: #1970765
2021-08-07 08:45:40 +02:00
Lukas Javorsky 4070c5be9a Rebuild against pcre2-10.37 (bug #1970765)
Resolves: rhbz#1986851
2021-07-28 15:40:46 +02:00
Mohan Boddu ff1f296333 Rebuilt for RHEL 9 BETA for openssl 3.0
Related: rhbz#1971065
Signed-off-by: Mohan Boddu <mboddu@redhat.com>
2021-06-16 03:30:26 +00:00
Michal Schorm beec309d53 Explicitly disable building of the Columnstore SE until it is packed properly
Undefined behaviour leads to the SE being built by default on systems that have the necessary devel package installed

Cherry-picked from Fedora: e96ef648dd?branch=rawhide
Related: #1971248
2021-06-13 11:22:10 +02:00
Michal Schorm df56f318a4 Remove TokuDB Storage Engine subpackage
The TokuDB SE from Percona upstream has been deprecated in MariaDB 10.5 and completely removed in MariaDB 10.6
In Fedora, we don't build it since MariaDB 10.5

Cherry-picked from Fedora: f192442cc3?branch=rawhide
Related: #1971248
2021-06-13 11:21:49 +02:00
Michal Schorm 53f8029fe4 Use the modified sources; bump release
Cherry-picked from Fedora: 47762ab9fc?branch=rawhide
Related: #1971248
2021-06-13 11:21:37 +02:00
Michal Schorm aebcf6b79c Ignore missing files during "rm -r"
Cherry-picked from Fedora: b3ff1d5772?branch=rawhide
Related: #1971248
2021-06-13 11:21:22 +02:00
Michal Schorm dcf9624f00 Introduce the script for generating sources tarball without a code under a license which was not yet approved for Fedora or RHEL
Change the name of the sources archive, so the maintainer will encounter an error when uploading new sources which haven't undergo modification by this script

Cherry-picked from Fedora: 7f8a0e15a6?branch=rawhide
Related: #1971248
2021-06-13 11:20:56 +02:00
Michal Schorm 29b1e7172c Fix RPMLint warning: incoherent-version-in-changelog 10.5.10-1 ['3:10.5.10-1.fc35', '3:10.5.10-1']
Cherry-picked from Fedora: b14945398c?branch=rawhide
Related: #1971248
2021-06-13 11:20:39 +02:00
Michal Schorm 1450841692 Update RPMLint whitelist; fix RPMLint findings
Cherry-picked from Fedora: 2e03a737bb?branch=rawhide
Related: #1971248
2021-06-13 11:20:26 +02:00
Daniel Black 8db0f6ac1a Document systemd service changes
Prefer the systemctl edit mysql.service syntax
and leave the more complex alternatives to the
existing documents referenced.

Also show how to use the multiinstance a bit more.

Cherry-picked from Fedora: a87e9e5d9a?branch=rawhide
Related: #1971248
2021-06-13 11:20:12 +02:00
Daniel Black 72944367e0 drop KillMode=process
MariaDB-10.4 onwards included a pam_helper subprocess to help
with the pam authentication module.

If the user is running with Galera there are SST modules that could
be executing.

By dropping KillMode=process this reverts back to control-group to
cover all of these subprocesses. This is what upstream does.

https://jira.mariadb.org/browse/MDEV-25233 suggests moving to
KillMode=mixed, which is probably ok too, but has been tested less.

Cherry-picked from Fedora: 95f558b833?branch=rawhide
Related: #1971248
2021-06-13 11:19:53 +02:00
Daniel Black ee0fe005a8 update package descriptions
Use mariadbd rather than mysqld in package descriptions.

Changed community branch of MySQL to "fork from", since branch
implies far too many updates from or back to the original
which isn't true.

Updated server-galera package description as it didn't
reference Galera at all.

Cherry-picked from Fedora: fcdfad8ad8?branch=rawhide
Related: #1971248
2021-06-13 11:19:37 +02:00
Daniel Black e33b710c9d mariadb-scripts-common: update sections from mariadbd --help --verbose
Cherry-picked from Fedora: c205fe1604?branch=rawhide
Related: #1971248
2021-06-13 11:19:11 +02:00
Daniel Black 80862e14ea rename mysql scripts to mariadb
Use mariadb names in the scripts too.

Cherry-picked from Fedora: df76620f9e?branch=rawhide
Related: #1971248
2021-06-13 11:18:55 +02:00
Daniel Black b731fafd7a Drop README.mysql-license, there are no exceptions
MariaDB has LGPL-2.1 for the licensing of Connector/C

This is the submodule in libmariadb on the server repository
from which the client libraries are built.

ref: https://github.com/mariadb-corporation/mariadb-connector-c

From upstream:
  e4da179b03

Cherry-picked from Fedora: 00056934fb?branch=rawhide
Related: #1971248
2021-06-13 11:18:30 +02:00
Daniel Black 0aa8eb7eef README.mariadb-docs to refer to MariaDB documentation
MariaDB has its own documentation and refering to MySQL
documentation may mislead users.

Cherry-picked from Fedora: 8a01c71407?branch=rawhide
Related: #1971248
2021-06-13 11:18:02 +02:00
Michal Schorm 065445600c Rebase to 10.5.10
Cherry-picked from Fedora: b84b8cfc8c?branch=rawhide
Related: #1971248
2021-06-13 11:11:56 +02:00
Honza Horak 0a14bc58a2 Fix OpenSSL 3.x compatibility
Resolves: #1962047
2021-05-27 15:19:29 +02:00
Michal Schorm 6d39bc1dbb Fix package Conflicts on other OS than Fedora
The "community-mysql" package is named just "mysql" on RHEL & CentOS

Resolves: #1955704

Fedora upstream commit:
  939918b1e0?branch=rawhide
2021-05-03 11:48:17 +02:00
Michal Schorm 7929519a6b Disable consistently failing test
Related: #1906426
2021-04-30 15:45:11 +02:00
Mohan Boddu 6ac7cab344 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937
Signed-off-by: Mohan Boddu <mboddu@redhat.com>
2021-04-16 01:58:42 +00:00
DistroBaker 56ba4d0668 Merged update from upstream sources
This is an automated DistroBaker update from upstream sources.
If you do not know what this is about or would like to opt out,
contact the OSCI team.

Source: https://src.fedoraproject.org/rpms/mariadb.git#a5d57f35209c105ef3990f18005bae9582f342fa
2021-04-04 21:56:20 +00:00
DistroBaker 5805483d45 Merged update from upstream sources
This is an automated DistroBaker update from upstream sources.
If you do not know what this is about or would like to opt out,
contact the OSCI team.

Source: https://src.fedoraproject.org/rpms/mariadb.git#33b0b7903b0341dfdc21d2ae1dd3d30d749796c1
2021-03-24 23:25:32 +00:00
DistroBaker 5d1026ca16 Merged update from upstream sources
This is an automated DistroBaker update from upstream sources.
If you do not know what this is about or would like to opt out,
contact the OSCI team.

Source: https://src.fedoraproject.org/rpms/mariadb.git#7d46a8244f4691d51199a8530eb989e5cc0a9a5c
2021-02-19 12:21:43 +00:00
DistroBaker 2202fb6672 Merged update from upstream sources
This is an automated DistroBaker update from upstream sources.
If you do not know what this is about or would like to opt out,
contact the OSCI team.

Source: https://src.fedoraproject.org/rpms/mariadb.git#7d46a8244f4691d51199a8530eb989e5cc0a9a5c
2021-02-17 12:16:51 +01:00
DistroBaker 38d034d0f7 Merged update from upstream sources
This is an automated DistroBaker update from upstream sources.
If you do not know what this is about or would like to opt out,
contact the OSCI team.

Source: https://src.fedoraproject.org/rpms/mariadb.git#7d46a8244f4691d51199a8530eb989e5cc0a9a5c
2021-02-16 17:45:47 +00:00
DistroBaker 19a7626c6a Merged update from upstream sources
This is an automated DistroBaker update from upstream sources.
If you do not know what this is about or would like to opt out,
contact the OSCI team.

Source: https://src.fedoraproject.org/rpms/mariadb.git#153eaac4b2c8652c05473a075d585dc8e8e50f62
2021-02-09 19:52:58 +01:00
DistroBaker 5da429c22d Merged update from upstream sources
This is an automated DistroBaker update from upstream sources.
If you do not know what this is about or would like to opt out,
contact the OSCI team.

Source: https://src.fedoraproject.org/rpms/mariadb.git#153eaac4b2c8652c05473a075d585dc8e8e50f62
2021-02-09 16:45:15 +01:00
DistroBaker 887dc569a5 Merged update from upstream sources
This is an automated DistroBaker update from upstream sources.
If you do not know what this is about or would like to opt out,
contact the OSCI team.

Source: https://src.fedoraproject.org/rpms/mariadb.git#153eaac4b2c8652c05473a075d585dc8e8e50f62
2021-02-03 23:28:19 +00:00