960 lines
31 KiB
RPMSpec
960 lines
31 KiB
RPMSpec
# Determine if this should be the default version for this Fedora release
|
||
# The default version will own /usr/bin/node and friends
|
||
%global nodejs_pkg_major 22
|
||
|
||
%global nodejs_default %{nodejs_pkg_major}
|
||
|
||
%global nodejs_default_sitelib %{_prefix}/lib/node_modules
|
||
%global nodejs_private_sitelib %{nodejs_default_sitelib}
|
||
|
||
|
||
# Break circular dependencies
|
||
%bcond bootstrap 0
|
||
|
||
# 2024-05-21: Temporarily re-enable bundling to work around issues in Rawhide
|
||
%if %{with bootstrap} || 0%{?nodejs_pkg_major} == 22
|
||
%bcond bundled_cjs_module_lexer 1
|
||
%bcond bundled_undici 1
|
||
%else
|
||
%bcond bundled_cjs_module_lexer 0
|
||
%bcond bundled_undici 0
|
||
%endif
|
||
|
||
%if 0%{?rhel} && 0%{?rhel} < 10
|
||
%bcond bundled_libuv 1
|
||
%else
|
||
%bcond bundled_libuv 0
|
||
%endif
|
||
|
||
%if 0%{?rhel} && 0%{?rhel} < 8
|
||
%bcond_without bundled_zlib
|
||
%else
|
||
%bcond_with bundled_zlib
|
||
%endif
|
||
|
||
# System SQLite is too old in any RHEL <= 10
|
||
%bcond_without bundled_sqlite
|
||
|
||
# LTO is currently broken on Node.js builds
|
||
%define _lto_cflags %{nil}
|
||
|
||
# Heavy-handed approach to avoiding issues with python
|
||
# bytecompiling files in the node_modules/ directory
|
||
%global __python %{python3}
|
||
|
||
# == Master Relase ==
|
||
# This is used by both the nodejs package and the npm subpackage that
|
||
# has a separate version - the name is special so that rpmdev-bumpspec
|
||
# will bump this rather than adding .1 to the end.
|
||
%global baserelease 1
|
||
|
||
%{?!_pkgdocdir:%global _pkgdocdir %{_docdir}/%{name}-%{version}}
|
||
|
||
# == Node.js Version ==
|
||
# Note: Fedora should only ship LTS versions of Node.js (currently expected
|
||
# to be major versions with even numbers). The odd-numbered versions are new
|
||
# feature releases that are only supported for nine months, which is shorter
|
||
# than a Fedora release lifecycle.
|
||
%global nodejs_epoch 1
|
||
%global nodejs_major 22
|
||
%global nodejs_minor 23
|
||
%global nodejs_patch 1
|
||
# nodejs_soversion - from NODE_MODULE_VERSION in src/node_version.h
|
||
%global nodejs_soversion 127
|
||
%global nodejs_abi %{nodejs_soversion}
|
||
%global nodejs_version %{nodejs_major}.%{nodejs_minor}.%{nodejs_patch}
|
||
%global nodejs_release %{baserelease}
|
||
%global nodejs_envr %{nodejs_epoch}:%{nodejs_version}-%{nodejs_release}%{?dist}
|
||
|
||
%global nodejs_datadir %{_datarootdir}/node-%{nodejs_pkg_major}
|
||
|
||
|
||
# == Bundled Dependency Versions ==
|
||
# v8 - from deps/v8/include/v8-version.h
|
||
# Epoch is set to ensure clean upgrades from the old v8 package
|
||
%global v8_epoch 3
|
||
%global v8_major 12
|
||
%global v8_minor 4
|
||
%global v8_build 254
|
||
%global v8_patch 21
|
||
%global v8_version %{v8_major}.%{v8_minor}.%{v8_build}.%{v8_patch}
|
||
%global v8_release %{nodejs_epoch}.%{nodejs_major}.%{nodejs_minor}.%{nodejs_patch}.%{nodejs_release}
|
||
|
||
# zlib - from deps/zlib/zlib.h
|
||
%global zlib_version 1.3.1
|
||
|
||
# c-ares - from deps/cares/include/ares_version.h
|
||
# https://github.com/nodejs/node/pull/9332
|
||
%global c_ares_version 1.34.6
|
||
|
||
# llhttp - from deps/llhttp/include/llhttp.h
|
||
%global llhttp_version 9.4.2
|
||
|
||
# libuv - from deps/uv/include/uv/version.h
|
||
%global libuv_version 1.51.0
|
||
|
||
# nghttp2 - from deps/nghttp2/lib/includes/nghttp2/nghttp2ver.h
|
||
%global nghttp2_version 1.69.0
|
||
|
||
# nghttp3 - from deps/ngtcp2/nghttp3/lib/includes/nghttp3/version.h
|
||
%global nghttp3_version 1.6.0
|
||
|
||
# ngtcp2 from deps/ngtcp2/ngtcp2/lib/includes/ngtcp2/version.h
|
||
%global ngtcp2_version 1.11.0
|
||
|
||
# ICU - from tools/icu/current_ver.dep
|
||
%global icu_major 78
|
||
%global icu_minor 2
|
||
%global icu_version %{icu_major}.%{icu_minor}
|
||
|
||
%global icudatadir %{nodejs_datadir}/icudata
|
||
%{!?little_endian: %global little_endian %(%{python3} -c "import sys;print (0 if sys.byteorder=='big' else 1)")}
|
||
# " this line just fixes syntax highlighting for vim that is confused by the above and continues literal
|
||
|
||
# simdutf from deps/simdutf/simdutf.h
|
||
%global simdutf_version 6.4.2
|
||
|
||
# OpenSSL minimum version
|
||
%global openssl11_minimum 1:1.1.1
|
||
%global openssl30_minimum 1:3.0.2
|
||
|
||
# punycode - from lib/punycode.js
|
||
# Note: this was merged into the mainline since 0.6.x
|
||
# Note: this will be unmerged in an upcoming major release
|
||
%global punycode_version 2.1.0
|
||
|
||
# npm - from deps/npm/package.json
|
||
%global npm_epoch 1
|
||
%global npm_version 10.9.8
|
||
|
||
# In order to avoid needing to keep incrementing the release version for the
|
||
# main package forever, we will just construct one for npm that is guaranteed
|
||
# to increment safely. Changing this can only be done during an update when the
|
||
# base npm version number is increasing.
|
||
%global npm_release %{nodejs_epoch}.%{nodejs_major}.%{nodejs_minor}.%{nodejs_patch}.%{nodejs_release}
|
||
|
||
%global npm_envr %{npm_epoch}:%{npm_version}-%{npm_release}
|
||
|
||
# uvwasi - from deps/uvwasi/include/uvwasi.h
|
||
%global uvwasi_version 0.0.23
|
||
|
||
# histogram_c - assumed from timestamps
|
||
%global histogram_version 0.11.9
|
||
|
||
# sqlite – from deps/sqlite/sqlite3.h
|
||
%global sqlite_version 3.51.3
|
||
|
||
|
||
Name: nodejs
|
||
Epoch: %{nodejs_epoch}
|
||
Version: %{nodejs_version}
|
||
Release: %{nodejs_release}%{?dist}
|
||
Summary: JavaScript runtime
|
||
# see bundled_licenses.py, which helps identify licenses in bundled NPM modules
|
||
License: Apache-2.0 AND Artistic-2.0 AND BSD-2-Clause AND BSD-3-Clause AND BlueOak-1.0.0 AND CC-BY-3.0 AND CC0-1.0 AND ISC AND MIT
|
||
Group: Development/Languages
|
||
URL: http://nodejs.org/
|
||
|
||
ExclusiveArch: %{nodejs_arches}
|
||
|
||
# nodejs bundles openssl, but we use the system version in Fedora
|
||
# because openssl contains prohibited code, we remove openssl completely from
|
||
# the tarball, using the script in Source200
|
||
Source0: node-v%{nodejs_version}-stripped.tar.gz
|
||
Source1: npmrc
|
||
Source2: btest402.js
|
||
# The binary data that icu-small can use to get icu-full capability
|
||
Source3: https://github.com/unicode-org/icu/releases/download/release-%{icu_major}.%{icu_minor}/icu4c-%{icu_major}.%{icu_minor}-data-bin-b.zip
|
||
Source4: https://github.com/unicode-org/icu/releases/download/release-%{icu_major}.%{icu_minor}/icu4c-%{icu_major}.%{icu_minor}-data-bin-l.zip
|
||
Source200: nodejs-tarball.sh
|
||
Source201: npmrc.builtin.in
|
||
Source202: nodejs.pc.in
|
||
Source203: v8.pc.in
|
||
Source300: test-runner.sh
|
||
Source301: test-should-pass.txt
|
||
|
||
Patch: 0001-Remove-unused-OpenSSL-config.patch
|
||
Patch: 0003-fips-disable-options.patch
|
||
Patch: 0001-CVE-2026-25547-braces-expansion.patch
|
||
# npm deps patches
|
||
Patch: 0002-CVE-2026-42338-npm-ip-address-security-fix.patch
|
||
|
||
%global pkgname nodejs
|
||
|
||
BuildRequires: make
|
||
BuildRequires: python%{python3_pkgversion}-devel
|
||
BuildRequires: python%{python3_pkgversion}-setuptools
|
||
BuildRequires: python%{python3_pkgversion}-jinja2
|
||
%if 0%{?rhel} && 0%{?rhel} < 9
|
||
BuildRequires: python-unversioned-command
|
||
%endif
|
||
%if %{with bundled_zlib}
|
||
Provides: bundled(zlib) = %{zlib_version}
|
||
%else
|
||
BuildRequires: zlib-devel
|
||
%endif
|
||
BuildRequires: brotli-devel
|
||
%if 0%{?rhel} && 0%{?rhel} < 8
|
||
BuildRequires: devtoolset-11-gcc
|
||
BuildRequires: devtoolset-11-gcc-c++
|
||
%else
|
||
BuildRequires: gcc >= 8.3.0
|
||
BuildRequires: gcc-c++ >= 8.3.0
|
||
%endif
|
||
|
||
BuildRequires: pkgconf
|
||
BuildRequires: jq
|
||
|
||
# needed to generate bundled provides for npm dependencies
|
||
# https://src.fedoraproject.org/rpms/nodejs/pull-request/2
|
||
# https://pagure.io/nodejs-packaging/pull-request/10
|
||
BuildRequires: nodejs-packaging
|
||
|
||
BuildRequires: chrpath
|
||
BuildRequires: libatomic
|
||
BuildRequires: ninja-build
|
||
BuildRequires: unzip
|
||
|
||
|
||
|
||
%if 0%{?nodejs_default}
|
||
Provides: nodejs = %{nodejs_envr}
|
||
%endif
|
||
|
||
%if %{with bundled_libuv}
|
||
Provides: bundled(libuv) = %{libuv_version}
|
||
%else
|
||
BuildRequires: libuv-devel >= 1:%{libuv_version}
|
||
Requires: libuv >= 1:%{libuv_version}
|
||
%endif
|
||
|
||
# Node.js frequently bumps this faster than Fedora can follow,
|
||
# so we will bundle it.
|
||
Provides: bundled(nghttp2) = %{nghttp2_version}
|
||
Provides: bundled(nghttp3) = %{nghttp3_version}
|
||
Provides: bundled(ngtcp2) = %{ngtcp2_version}
|
||
|
||
# Temporarily bundle llhttp because the upstream doesn't
|
||
# provide releases for it.
|
||
Provides: bundled(llhttp) = %{llhttp_version}
|
||
|
||
|
||
%if 0%{?rhel} && 0%{?rhel} < 8
|
||
BuildRequires: openssl11-devel >= %{openssl11_minimum}
|
||
Requires: openssl11 >= %{openssl11_minimum}
|
||
%global ssl_configure --shared-openssl --shared-openssl-includes=%{_includedir}/openssl11 --shared-openssl-libpath=%{_libdir}/openssl11
|
||
%else
|
||
|
||
%if 0%{?fedora} >= 36
|
||
BuildRequires: openssl >= %{openssl30_minimum}
|
||
BuildRequires: openssl-devel >= %{openssl30_minimum}
|
||
%global openssl_fips_configure --openssl-is-fips
|
||
%else
|
||
Requires: openssl >= %{openssl11_minimum}
|
||
BuildRequires: openssl-devel >= %{openssl11_minimum}
|
||
%global openssl_fips_configure %{nil}
|
||
%endif
|
||
|
||
%global ssl_configure --shared-openssl --openssl-conf-name=openssl_conf %{openssl_fips_configure}
|
||
%endif
|
||
|
||
|
||
# dtrace is not supported on Node.js 19+
|
||
%global dtrace_configure %{nil}
|
||
|
||
|
||
# we need the system certificate store
|
||
Requires: ca-certificates
|
||
|
||
Requires: %{pkgname}-libs%{?_isa} = %{nodejs_envr}
|
||
|
||
%if 0%{?fedora} || 0%{?rhel} >= 8
|
||
# Pull in the docs and full-icu data by default
|
||
Recommends: %{pkgname}-docs = %{nodejs_envr}
|
||
Recommends: %{pkgname}-full-i18n%{?_isa} = %{nodejs_envr}
|
||
Recommends: %{pkgname}-npm >= %{npm_envr}
|
||
%endif
|
||
|
||
# we need ABI virtual provides where SONAMEs aren't enough/not present so deps
|
||
# break when binary compatibility is broken
|
||
Provides: nodejs(abi) = %{nodejs_abi}
|
||
Provides: nodejs(abi%{nodejs_major}) = %{nodejs_abi}
|
||
|
||
# this corresponds to the "engine" requirement in package.json
|
||
Provides: nodejs(engine) = %{nodejs_version}
|
||
|
||
# Node.js currently has a conflict with the 'node' package in Fedora
|
||
# The ham-radio group has agreed to rename their binary for us, but
|
||
# in the meantime, we're setting an explicit Conflicts: here
|
||
Conflicts: node <= 0.3.2-12
|
||
|
||
# The punycode module was absorbed into the standard library in v0.6.
|
||
# It still exists as a seperate package for the benefit of users of older
|
||
# versions. Since we've never shipped anything older than v0.10 in Fedora,
|
||
# we don't need the seperate nodejs-punycode package, so we Provide it here so
|
||
# dependent packages don't need to override the dependency generator.
|
||
# See also: RHBZ#11511811
|
||
# UPDATE: punycode will be deprecated and so we should unbundle it in Node v8
|
||
# and use upstream module instead
|
||
# https://github.com/nodejs/node/commit/29e49fc286080215031a81effbd59eac092fff2f
|
||
Provides: nodejs-punycode = %{punycode_version}
|
||
Provides: npm(punycode) = %{punycode_version}
|
||
|
||
# Node.js has forked c-ares from upstream in an incompatible way, so we need
|
||
# to carry the bundled version internally.
|
||
# See https://github.com/nodejs/node/commit/766d063e0578c0f7758c3a965c971763f43fec85
|
||
Provides: bundled(c-ares) = %{c_ares_version}
|
||
|
||
# Node.js is closely tied to the version of v8 that is used with it. It makes
|
||
# sense to use the bundled version because upstream consistently breaks ABI
|
||
# even in point releases. Node.js upstream has now removed the ability to build
|
||
# against a shared system version entirely.
|
||
# See https://github.com/nodejs/node/commit/d726a177ed59c37cf5306983ed00ecd858cfbbef
|
||
Provides: bundled(v8) = %{v8_version}
|
||
|
||
# Node.js is bound to a specific version of ICU which may not match the OS
|
||
# We cannot pin the OS to this version of ICU because every update includes
|
||
# an ABI-break, so we'll use the bundled copy.
|
||
Provides: bundled(icu) = %{icu_version}
|
||
|
||
# Upstream added new dependencies, but so far they are not available in Fedora
|
||
# or there's no option to built it as a shared dependency, so we bundle them
|
||
Provides: bundled(uvwasi) = %{uvwasi_version}
|
||
Provides: bundled(histogram) = %{histogram_version}
|
||
Provides: bundled(simdutf) = %{simdutf_version}
|
||
|
||
# Upstream has added a new URL parser that has no option to build as a shared
|
||
# library (19.7.0+)
|
||
Provides: bundled(ada) = 2.9.2
|
||
|
||
|
||
# undici and cjs-module-lexer ship with pre-built WASM binaries.
|
||
%if %{with bundled_cjs_module_lexer}
|
||
Provides: bundled(nodejs-cjs-module-lexer) = 2.2.0
|
||
%else
|
||
BuildRequires: nodejs-cjs-module-lexer
|
||
Requires: nodejs-cjs-module-lexer
|
||
%endif
|
||
|
||
%if %{with bundled_undici}
|
||
Provides: bundled(nodejs-undici) = 6.27.0
|
||
%else
|
||
BuildRequires: nodejs-undici
|
||
Requires: nodejs-undici
|
||
%endif
|
||
|
||
%if %{with bundled_sqlite}
|
||
Provides: bundled(sqlite) = %{sqlite_version}
|
||
%else
|
||
BuildRequires: pkgconfig(sqlite3) >= 3.45
|
||
%endif
|
||
|
||
|
||
|
||
%description
|
||
Node.js is a platform built on Chrome's JavaScript runtime \
|
||
for easily building fast, scalable network applications. \
|
||
Node.js uses an event-driven, non-blocking I/O model that \
|
||
makes it lightweight and efficient, perfect for data-intensive \
|
||
real-time applications that run across distributed devices.}
|
||
|
||
%package -n %{pkgname}-devel
|
||
Summary: JavaScript runtime - development headers
|
||
Group: Development/Languages
|
||
Requires: %{pkgname}%{?_isa} = %{nodejs_envr}
|
||
Requires: %{pkgname}-libs%{?_isa} = %{nodejs_envr}
|
||
Requires: openssl-devel%{?_isa}
|
||
%if !%{with bundled_zlib}
|
||
Requires: zlib-devel%{?_isa}
|
||
%endif
|
||
Requires: brotli-devel%{?_isa}
|
||
Requires: nodejs-packaging
|
||
|
||
%if %{without bundled_libuv}
|
||
Requires: libuv-devel%{?_isa}
|
||
%endif
|
||
|
||
%if 0%{?nodejs_default}
|
||
Provides: nodejs-devel = %{nodejs_envr}
|
||
%endif
|
||
|
||
Provides: nodejs-devel-pkg = %{nodejs_envr}
|
||
Conflicts: nodejs-devel-pkg
|
||
|
||
|
||
%description -n %{pkgname}-devel
|
||
Development headers for the Node.js JavaScript runtime.
|
||
|
||
|
||
%package -n %{pkgname}-libs
|
||
Summary: Node.js and v8 libraries
|
||
|
||
# Compatibility for obsolete v8 package
|
||
%if 0%{?__isa_bits} == 64
|
||
Provides: libv8.so.%{v8_major}()(64bit) = %{v8_epoch}:%{v8_version}
|
||
Provides: libv8_libbase.so.%{v8_major}()(64bit) = %{v8_epoch}:%{v8_version}
|
||
Provides: libv8_libplatform.so.%{v8_major}()(64bit) = %{v8_epoch}:%{v8_version}
|
||
%else
|
||
# 32-bits
|
||
Provides: libv8.so.%{v8_major} = %{v8_epoch}:%{v8_version}
|
||
Provides: libv8_libbase.so.%{v8_major} = %{v8_epoch}:%{v8_version}
|
||
Provides: libv8_libplatform.so.%{v8_major} = %{v8_epoch}:%{v8_version}
|
||
%endif
|
||
|
||
Provides: v8 = %{v8_epoch}:%{v8_version}-%{nodejs_release}
|
||
Provides: v8%{?_isa} = %{v8_epoch}:%{v8_version}-%{nodejs_release}
|
||
Obsoletes: v8 < 1:6.7.17-10
|
||
|
||
Provides: nodejs-libs = %{nodejs_envr}
|
||
|
||
%description -n %{pkgname}-libs
|
||
Libraries to support Node.js and provide stable v8 interfaces.
|
||
|
||
|
||
%package -n %{pkgname}-full-i18n
|
||
Summary: Non-English locale data for Node.js
|
||
Requires: %{pkgname}%{?_isa} = %{nodejs_envr}
|
||
|
||
|
||
|
||
%description -n %{pkgname}-full-i18n
|
||
Optional data files to provide full-icu support for Node.js. Remove this
|
||
package to save space if non-English locales are not needed.
|
||
|
||
|
||
%package -n v8-%{v8_major}.%{v8_minor}-devel
|
||
Summary: v8 - development headers
|
||
Epoch: %{v8_epoch}
|
||
Version: %{v8_version}
|
||
Release: %{v8_release}%{?dist}
|
||
Requires: %{pkgname}-devel%{?_isa} = %{nodejs_envr}
|
||
Requires: %{pkgname}-libs%{?_isa} = %{nodejs_envr}
|
||
Provides: v8-devel = %{v8_epoch}:%{v8_version}-%{v8_release}
|
||
|
||
Conflicts: v8-devel
|
||
Conflicts: v8-314-devel
|
||
|
||
|
||
%description -n v8-%{v8_major}.%{v8_minor}-devel
|
||
Development headers for the v8 runtime.
|
||
|
||
|
||
%package -n npm
|
||
Summary: Node.js Package Manager
|
||
Epoch: %{npm_epoch}
|
||
Version: %{npm_version}
|
||
Release: %{npm_release}%{?dist}
|
||
|
||
# If we're using the companion NPM build, make sure to keep it in lock-step
|
||
# with the Node version.
|
||
Requires: %{pkgname} = %{nodejs_envr}
|
||
%if 0%{?fedora} || 0%{?rhel} >= 8
|
||
Recommends: %{pkgname}-docs = %{nodejs_envr}
|
||
%endif
|
||
|
||
# Do not add epoch to the virtual NPM provides or it will break
|
||
# the automatic dependency-generation script.
|
||
Provides: npm(npm) = %{npm_version}
|
||
|
||
|
||
%if 0%{?nodejs_default}
|
||
# Satisfy dependency requests for "npm"
|
||
Provides: npm = %{npm_envr}
|
||
|
||
# Obsolete the old 'npm' package
|
||
Obsoletes: npm < 1:9
|
||
|
||
%endif
|
||
|
||
|
||
%description -n npm
|
||
npm is a package manager for node.js. You can use it to install and publish
|
||
your node programs. It manages dependencies and does other cool stuff.
|
||
|
||
|
||
%package -n %{pkgname}-docs
|
||
Summary: Node.js API documentation
|
||
Group: Documentation
|
||
BuildArch: noarch
|
||
Requires(meta): %{pkgname} = %{nodejs_envr}
|
||
|
||
Provides: nodejs-docs = %{nodejs_envr}
|
||
|
||
|
||
%description -n %{pkgname}-docs
|
||
The API documentation for the Node.js JavaScript runtime.
|
||
|
||
|
||
%prep
|
||
%autosetup -p1 -n node-v%{nodejs_version}
|
||
|
||
# remove bundled dependencies that we aren't building
|
||
%if !%{with bundled_zlib}
|
||
rm -rf deps/zlib
|
||
%endif
|
||
|
||
rm -rf deps/brotli
|
||
rm -rf deps/v8/third_party/jinja2
|
||
rm -rf tools/inspector_protocol/jinja2
|
||
|
||
%if %{without bundled_cjs_module_lexer}
|
||
rm -rf deps/cjs-module-lexer
|
||
%endif
|
||
|
||
%if %{without bundled_undici}
|
||
rm -rf deps/undici
|
||
%endif
|
||
|
||
%if %{without bundled_sqlite}
|
||
rm -rf deps/sqlite
|
||
%endif
|
||
|
||
# Replace any instances of unversioned python with python3
|
||
pfiles=( $(grep -rl python) )
|
||
%py3_shebang_fix ${pfiles[@]}
|
||
|
||
|
||
%build
|
||
|
||
# Activate DevToolset 11 on EPEL 7
|
||
%if 0%{?rhel} && 0%{?rhel} < 8
|
||
. /opt/rh/devtoolset-11/enable
|
||
%endif
|
||
|
||
# When compiled on armv7hl this package generates an out of range
|
||
# reference to the literal pool. This is most likely a GCC issue.
|
||
%ifarch armv7hl
|
||
%define _lto_cflags %{nil}
|
||
%endif
|
||
|
||
# Decrease debuginfo verbosity to reduce memory consumption during final
|
||
# library linking
|
||
%global optflags %(echo %{optflags} | sed 's/-g /-g1 /')
|
||
|
||
export CC='%{__cc}'
|
||
export CXX='%{__cxx}'
|
||
export NODE_GYP_FORCE_PYTHON=%{python3}
|
||
|
||
# build with debugging symbols and add defines from libuv (#892601)
|
||
# 2022-07-14: There's a bug in either torque or gcc that causes a
|
||
# segmentation fault on ppc64le and s390x if compiled with -O2. Things
|
||
# run fine on -O1 and -O3, so we'll just go with -O3 (like upstream)
|
||
# while this gets sorted out.
|
||
extra_cflags=(
|
||
-D_LARGEFILE_SOURCE
|
||
-D_FILE_OFFSET_BITS=64
|
||
-DOPENSSL_NO_ENGINE # https://issues.redhat.com/browse/RHEL-33743
|
||
-DZLIB_CONST
|
||
-O3
|
||
-fno-ipa-icf
|
||
)
|
||
export CFLAGS="%{optflags} ${extra_cflags[*]}" CXXFLAGS="%{optflags} ${extra_cflags[*]}"
|
||
export LDFLAGS="%{build_ldflags}"
|
||
|
||
# Fake up the unversioned python executable because gyp calls it from the PATH
|
||
mkdir .bin
|
||
cwd=$(pwd)
|
||
ln -srf /usr/bin/python3 ./.bin/python
|
||
export PATH="${cwd}/.bin:$PATH"
|
||
|
||
%{python3} configure.py \
|
||
--verbose \
|
||
--ninja \
|
||
--enable-lto \
|
||
--prefix=%{_prefix} \
|
||
--shared \
|
||
--libdir=%{_lib} \
|
||
%{ssl_configure} \
|
||
%{dtrace_configure} \
|
||
%{!?with_bundled_zlib:--shared-zlib} \
|
||
%{!?with_bundled_cjs_module_lexer:--shared-builtin-cjs_module_lexer/lexer-path %{nodejs_private_sitelib}/cjs-module-lexer/lexer.js} \
|
||
%{!?with_bundled_cjs_module_lexer:--shared-builtin-cjs_module_lexer/dist/lexer-path %{nodejs_private_sitelib}/cjs-module-lexer/dist/lexer.js} \
|
||
%{!?with_bundled_undici:--shared-builtin-undici/undici-path %{nodejs_private_sitelib}/undici/loader.js} \
|
||
--shared-brotli \
|
||
%{!?with_bundled_libuv:--shared-libuv} \
|
||
%{!?with_bundled_sqlite:--shared-sqlite} \
|
||
--with-intl=small-icu \
|
||
--with-icu-default-data-dir=%{icudatadir} \
|
||
--without-corepack \
|
||
--openssl-use-def-ca-store \
|
||
--use-prefix-to-find-headers
|
||
|
||
%ninja_build -C out/Release
|
||
|
||
|
||
%install
|
||
|
||
# The ninja build does not put the shared library in the expected location, so
|
||
# we will move it.
|
||
mv out/Release/lib/libnode.so.%{nodejs_soversion} out/Release/
|
||
|
||
%if 0%{?nodejs_major} >= 20
|
||
./tools/install.py install --dest-dir %{buildroot} --prefix %{_prefix}
|
||
%else
|
||
./tools/install.py install %{buildroot} %{_prefix}
|
||
%endif
|
||
|
||
|
||
|
||
|
||
|
||
# Set the binary permissions properly
|
||
chmod 0755 %{buildroot}/%{_bindir}/node
|
||
chrpath --delete %{buildroot}%{_bindir}/node
|
||
|
||
# Rename the node binary
|
||
mv %{buildroot}%{_bindir}/node %{buildroot}%{_bindir}/node-%{nodejs_pkg_major}
|
||
|
||
# Move the npm binary to npm-NODEJS_MAJOR
|
||
rm -f %{buildroot}%{_bindir}/npm
|
||
|
||
# Set the hashbang to use the matching Node.js interpreter
|
||
sed --in-place --regexp-extended \
|
||
's;^#!/usr/bin/env node($|\ |\t)+;#!/usr/bin/node-%{nodejs_pkg_major};g' \
|
||
%{buildroot}%{nodejs_private_sitelib}/npm/bin/npm-cli.js
|
||
|
||
ln -srf %{buildroot}%{nodejs_private_sitelib}/npm/bin/npm-cli.js \
|
||
%{buildroot}%{_bindir}/npm-%{nodejs_pkg_major}
|
||
|
||
# Move the npx binary to npx-NODEJS_MAJOR
|
||
rm -f %{buildroot}%{_bindir}/npx
|
||
|
||
# Set the hashbang to use the matching Node.js interpreter
|
||
sed --in-place --regexp-extended \
|
||
's;^#!/usr/bin/env node($|\ |\t)+;#!/usr/bin/node-%{nodejs_pkg_major};g' \
|
||
%{buildroot}%{nodejs_private_sitelib}/npm/bin/npx-cli.js
|
||
|
||
ln -srf %{buildroot}%{nodejs_private_sitelib}/npm/bin/npx-cli.js \
|
||
%{buildroot}%{_bindir}/npx-%{nodejs_pkg_major}
|
||
|
||
# Add the symlinks back for the default version
|
||
%if 0%{?nodejs_default}
|
||
ln -srf %{buildroot}%{_bindir}/node-%{nodejs_pkg_major} \
|
||
%{buildroot}%{_bindir}/node
|
||
|
||
ln -srf %{buildroot}%{_bindir}/npm-%{nodejs_pkg_major} \
|
||
%{buildroot}%{_bindir}/npm
|
||
|
||
ln -srf %{buildroot}%{_bindir}/npx-%{nodejs_pkg_major} \
|
||
%{buildroot}%{_bindir}/npx
|
||
%endif
|
||
|
||
# Install library symlink
|
||
ln -srf %{buildroot}%{_libdir}/libnode.so.%{nodejs_soversion} \
|
||
%{buildroot}%{_libdir}/libnode.so
|
||
|
||
# Install v8 compatibility symlinks
|
||
for header in %{buildroot}%{_includedir}/node/libplatform %{buildroot}%{_includedir}/node/v8*.h; do
|
||
header=$(basename ${header})
|
||
ln -sf ./node/${header} %{buildroot}%{_includedir}/${header}
|
||
done
|
||
ln -s ./node/cppgc %{buildroot}%{_includedir}/cppgc
|
||
|
||
for soname in libv8 libv8_libbase libv8_libplatform; do
|
||
ln -srf %{buildroot}%{_libdir}/libnode.so.%{nodejs_soversion} %{buildroot}%{_libdir}/${soname}.so.%{v8_major}.%{v8_minor}
|
||
ln -srf %{buildroot}%{_libdir}/libnode.so.%{nodejs_soversion} %{buildroot}%{_libdir}/${soname}.so
|
||
|
||
%if 0%{?nodejs_default}
|
||
ln -srf %{buildroot}%{_libdir}/libnode.so.%{nodejs_soversion} %{buildroot}%{_libdir}/${soname}.so.%{v8_major}
|
||
%endif
|
||
done
|
||
|
||
# install documentation
|
||
mkdir -p %{buildroot}%{_pkgdocdir}/html
|
||
cp -pr doc/* %{buildroot}%{_pkgdocdir}/html
|
||
rm -f %{buildroot}%{_pkgdocdir}/html/nodejs.1
|
||
|
||
# node-gyp needs common.gypi too
|
||
mkdir -p %{buildroot}%{nodejs_datadir}
|
||
cp -p common.gypi %{buildroot}%{nodejs_datadir}
|
||
|
||
# The config.gypi file is platform-dependent, so rename it to not conflict
|
||
mv %{buildroot}%{_includedir}/node/config.gypi \
|
||
%{buildroot}%{_includedir}/node/config-%{_arch}.gypi
|
||
|
||
# Install the GDB init tool into the documentation directory
|
||
mv %{buildroot}/%{_datadir}/doc/node/gdbinit %{buildroot}/%{_pkgdocdir}/gdbinit
|
||
|
||
mkdir -p %{buildroot}%{_mandir}/nodejs-%{nodejs_pkg_major}/man1 \
|
||
%{buildroot}%{_mandir}/nodejs-%{nodejs_pkg_major}/man5 \
|
||
%{buildroot}%{_mandir}/nodejs-%{nodejs_pkg_major}/man7 \
|
||
%{buildroot}%{nodejs_default_sitelib}/npm/man \
|
||
%{buildroot}%{nodejs_private_sitelib}/npm/man \
|
||
%{buildroot}%{_pkgdocdir}/npm
|
||
|
||
# install manpage docs to mandir
|
||
cp -pr deps/npm/man/* \
|
||
%{buildroot}%{_mandir}/nodejs-%{nodejs_pkg_major}/
|
||
rm -rf %{buildroot}%{nodejs_private_sitelib}/npm/man
|
||
ln -srf %{buildroot}%{_mandir}/nodejs-%{nodejs_pkg_major} \
|
||
%{buildroot}%{nodejs_private_sitelib}/npm/man
|
||
|
||
%if 0%{?nodejs_default}
|
||
for i in 1 5 7; do
|
||
mkdir -p %{buildroot}%{_mandir}/man${i}
|
||
for manpage in %{buildroot}%{nodejs_private_sitelib}/npm/man/man$i/*; do
|
||
basename=$(basename ${manpage})
|
||
ln -srf %{buildroot}%{nodejs_private_sitelib}/npm/man/man${i}/${basename} \
|
||
%{buildroot}%{_mandir}/man${i}/${basename}
|
||
done
|
||
done
|
||
%endif
|
||
|
||
# Install the node interpreter manpage
|
||
mv %{buildroot}%{_mandir}/man1/node.1 \
|
||
%{buildroot}%{_mandir}/nodejs-%{nodejs_pkg_major}/man1/
|
||
|
||
%if 0%{?nodejs_default}
|
||
ln -srf %{buildroot}%{_mandir}/nodejs-%{nodejs_pkg_major}/man1/node.1 \
|
||
%{buildroot}%{_mandir}/man1/
|
||
%endif
|
||
|
||
# Install Gatsby HTML documentation to %%{_pkgdocdir}
|
||
cp -pr deps/npm/docs %{buildroot}%{_pkgdocdir}/npm/
|
||
rm -rf %{buildroot}%{nodejs_private_sitelib}/npm/docs
|
||
ln -srf %{buildroot}%{_pkgdocdir}/npm %{buildroot}%{nodejs_private_sitelib}/npm/docs
|
||
|
||
# Node tries to install some python files into a documentation directory
|
||
# (and not the proper one). Remove them for now until we figure out what to
|
||
# do with them.
|
||
rm -f %{buildroot}/%{_defaultdocdir}/node/lldb_commands.py \
|
||
%{buildroot}/%{_defaultdocdir}/node/lldbinit
|
||
|
||
# Some NPM bundled deps are executable but should not be. This causes
|
||
# unnecessary automatic dependencies to be added. Make them not executable.
|
||
# Skip the npm bin directory or the npm binary will not work.
|
||
find %{buildroot}%{nodejs_private_sitelib}/npm \
|
||
-not -path "%{buildroot}%{nodejs_private_sitelib}/npm/bin/*" \
|
||
-executable -type f \
|
||
-exec chmod -x {} \;
|
||
|
||
# The above command is a little overzealous. Add a few permissions back.
|
||
chmod 0755 %{buildroot}%{nodejs_private_sitelib}/npm/node_modules/@npmcli/run-script/lib/node-gyp-bin/node-gyp
|
||
chmod 0755 %{buildroot}%{nodejs_private_sitelib}/npm/node_modules/node-gyp/bin/node-gyp.js
|
||
|
||
# Set the hashbang to use the matching Node.js interpreter
|
||
sed --in-place --regexp-extended \
|
||
's;^#!/usr/bin/env node($|\ |\t)+;#!/usr/bin/node-%{nodejs_pkg_major};g' \
|
||
%{buildroot}%{nodejs_private_sitelib}/npm/node_modules/node-gyp/bin/node-gyp.js
|
||
|
||
# Drop the NPM builtin configuration in place
|
||
sed -e 's#@SYSCONFDIR@#%{_sysconfdir}#g' \
|
||
%{SOURCE201} > %{buildroot}%{nodejs_private_sitelib}/npm/npmrc
|
||
|
||
# Drop the NPM default configuration in place
|
||
%if 0%{?nodejs_default}
|
||
mkdir -p %{buildroot}%{_sysconfdir}
|
||
cp %{SOURCE1} %{buildroot}%{_sysconfdir}/npmrc
|
||
%endif
|
||
|
||
# Install the full-icu data files
|
||
mkdir -p %{buildroot}%{icudatadir}
|
||
%if 0%{?little_endian}
|
||
unzip -d %{buildroot}%{icudatadir} %{SOURCE4} icudt%{icu_major}l.dat
|
||
%else
|
||
unzip -d %{buildroot}%{icudatadir} %{SOURCE3} icudt%{icu_major}b.dat
|
||
%endif
|
||
|
||
# Add pkg-config files
|
||
mkdir -p %{buildroot}%{_libdir}/pkgconfig
|
||
sed -e 's#@PREFIX@#%{_prefix}#g' \
|
||
-e 's#@INCLUDEDIR@#%{_includedir}#g' \
|
||
-e 's#@LIBDIR@#%{_libdir}#g' \
|
||
-e 's#@PKGCONFNAME@#nodejs-%{nodejs_pkg_major}#g' \
|
||
-e 's#@NODEJS_VERSION@#%{nodejs_version}#g' \
|
||
%{SOURCE202} > %{buildroot}%{_libdir}/pkgconfig/nodejs-%{nodejs_pkg_major}.pc
|
||
|
||
sed -e 's#@PREFIX@#%{_prefix}#g' \
|
||
-e 's#@INCLUDEDIR@#%{_includedir}#g' \
|
||
-e 's#@LIBDIR@#%{_libdir}#g' \
|
||
-e 's#@PKGCONFVERSION@#v8-%{v8_major}.%{v8_minor}#g' \
|
||
-e 's#@V8_VERSION@#%{v8_version}#g' \
|
||
%{SOURCE203} > %{buildroot}%{_libdir}/pkgconfig/v8-%{v8_major}.%{v8_minor}.pc
|
||
|
||
|
||
%check
|
||
#run unit test that should pass from list
|
||
LD_LIBRARY_PATH=%{buildroot}%{_libdir} \
|
||
bash %{SOURCE300} \
|
||
%{buildroot}/%{_bindir}/node-%{nodejs_pkg_major} \
|
||
%{_builddir}/node-v%{nodejs_version}/test/ \
|
||
%{SOURCE301}
|
||
|
||
# Fail the build if the versions don't match
|
||
LD_LIBRARY_PATH=%{buildroot}%{_libdir} %{buildroot}/%{_bindir}/node-%{nodejs_pkg_major} -e "require('assert').equal(process.versions.node, '%{nodejs_version}')"
|
||
LD_LIBRARY_PATH=%{buildroot}%{_libdir} %{buildroot}/%{_bindir}/node-%{nodejs_pkg_major} -e "require('assert').equal(process.versions.v8.replace(/-node\.\d+$/, ''), '%{v8_version}')"
|
||
LD_LIBRARY_PATH=%{buildroot}%{_libdir} %{buildroot}/%{_bindir}/node-%{nodejs_pkg_major} -e "require('assert').equal(process.versions.ares.replace(/-DEV$/, ''), '%{c_ares_version}')"
|
||
|
||
# Ensure we have punycode and that the version matches
|
||
LD_LIBRARY_PATH=%{buildroot}%{_libdir} %{buildroot}/%{_bindir}/node-%{nodejs_pkg_major} -e "require(\"assert\").equal(require(\"punycode\").version, '%{punycode_version}')"
|
||
|
||
# Ensure we have npm and that the version matches
|
||
LD_LIBRARY_PATH=%{buildroot}%{_libdir} %{buildroot}%{_bindir}/node-%{nodejs_pkg_major} %{buildroot}%{_bindir}/npm-%{nodejs_pkg_major} version --json |jq -e '.npm == "%{npm_version}"'
|
||
|
||
# Make sure i18n support is working
|
||
NODE_PATH=%{buildroot}%{_prefix}/lib/node_modules:%{buildroot}%{nodejs_private_sitelib}/npm/node_modules LD_LIBRARY_PATH=%{buildroot}%{_libdir} %{buildroot}/%{_bindir}/node-%{nodejs_pkg_major} --icu-data-dir=%{buildroot}%{icudatadir} %{SOURCE2}
|
||
|
||
# Ensure npm's update notifier has been disabled
|
||
# Temporarily wrapped. As of 4.3.2025 %nodejs_default is always set so should be okay.
|
||
# Will be unwrapped once we get rid of %nodejs_default confusion in rhel.
|
||
%if 0%{nodejs_default}
|
||
LD_LIBRARY_PATH=%{buildroot}%{_libdir} \
|
||
%{buildroot}%{_bindir}/node \
|
||
%{buildroot}%{_bindir}/npm \
|
||
--globalconfig=%{buildroot}$(LD_LIBRARY_PATH=%{buildroot}%{_libdir} %{buildroot}%{_bindir}/node %{buildroot}%{_bindir}/npm config get globalconfig) config ls -l --json | jq -e '.["update-notifier"] == false'
|
||
%endif
|
||
|
||
%if 0%{?rhel} && 0%{?rhel} < 8
|
||
%pretrans %{pkgname}-npm -p <lua>
|
||
-- Remove all of the symlinks from the bundled npm node_modules directory
|
||
base_path = "%{_prefix}/lib/node_modules/npm/node_modules/"
|
||
d_st = posix.stat(base_path)
|
||
if d_st then
|
||
for f in posix.files(base_path) do
|
||
path = base_path..f
|
||
st = posix.stat(path)
|
||
if st and st.type == "link" then
|
||
os.remove(path)
|
||
end
|
||
end
|
||
end
|
||
%endif
|
||
|
||
%files -n %{pkgname}
|
||
%doc CHANGELOG.md onboarding.md GOVERNANCE.md README.md
|
||
|
||
%if 0%{?nodejs_default}
|
||
%{_bindir}/node
|
||
%{_bindir}/node-%{nodejs_major}
|
||
%doc %{_mandir}/man1/node.1*
|
||
%{nodejs_default_sitelib}
|
||
|
||
|
||
%endif
|
||
|
||
%dir %{nodejs_private_sitelib}
|
||
|
||
%doc %{_mandir}/nodejs-%{nodejs_pkg_major}/man1/node.1*
|
||
|
||
|
||
%files -n %{pkgname}-devel
|
||
%{_includedir}/node
|
||
%{_libdir}/libnode.so
|
||
%{nodejs_datadir}/common.gypi
|
||
%{_pkgdocdir}/gdbinit
|
||
%{_libdir}/pkgconfig/nodejs-%{nodejs_pkg_major}.pc
|
||
|
||
|
||
%files -n %{pkgname}-full-i18n
|
||
%dir %{icudatadir}
|
||
%{icudatadir}/icudt%{icu_major}*.dat
|
||
|
||
|
||
%files -n %{pkgname}-libs
|
||
%license LICENSE
|
||
%{_libdir}/libnode.so.%{nodejs_soversion}
|
||
%{_libdir}/libv8.so.%{v8_major}.%{v8_minor}
|
||
%{_libdir}/libv8_libbase.so.%{v8_major}.%{v8_minor}
|
||
%{_libdir}/libv8_libplatform.so.%{v8_major}.%{v8_minor}
|
||
%dir %{nodejs_datadir}/
|
||
%if 0%{?nodejs_default}
|
||
%{_libdir}/libv8.so.%{v8_major}
|
||
%{_libdir}/libv8_libbase.so.%{v8_major}
|
||
%{_libdir}/libv8_libplatform.so.%{v8_major}
|
||
%endif
|
||
|
||
%files -n v8-%{v8_major}.%{v8_minor}-devel
|
||
%{_includedir}/libplatform
|
||
%{_includedir}/v8*.h
|
||
%{_includedir}/cppgc
|
||
%{_libdir}/libv8.so
|
||
%{_libdir}/libv8_libbase.so
|
||
%{_libdir}/libv8_libplatform.so
|
||
%{_libdir}/pkgconfig/v8-%{v8_major}.%{v8_minor}.pc
|
||
|
||
|
||
%files -n npm
|
||
%if 0%{?nodejs_default}
|
||
%{_bindir}/npm
|
||
%{_bindir}/npx
|
||
%config(noreplace) %{_sysconfdir}/npmrc
|
||
%ghost %{_sysconfdir}/npmignore
|
||
|
||
%doc %{_mandir}/man*/
|
||
%exclude %doc %{_mandir}/man1/node.1*
|
||
%endif
|
||
|
||
%{_bindir}/npm-%{nodejs_pkg_major}
|
||
%{_bindir}/npx-%{nodejs_pkg_major}
|
||
%{nodejs_private_sitelib}/npm
|
||
|
||
%doc %{_mandir}/nodejs-%{nodejs_pkg_major}/
|
||
%exclude %doc %{_mandir}/nodejs-%{nodejs_pkg_major}/man1/node.1*
|
||
|
||
|
||
%files -n %{pkgname}-docs
|
||
%doc doc
|
||
%dir %{_pkgdocdir}
|
||
%{_pkgdocdir}/html
|
||
%{_pkgdocdir}/npm/docs
|
||
|
||
|
||
%changelog
|
||
* Wed Jun 24 2026 Andrei Radchenko <aradchen@redhat.com> - 1:22.23.1-1
|
||
- Update to version 22.23.1
|
||
Resolves: RHEL-186622 RHEL-185998 RHEL-183669
|
||
Fixes: CVE-2026-12151 CVE-2026-48618 CVE-2026-48933 CVE-2026-48937 CVE-2026-48930 CVE-2026-48619 CVE-2026-48615 CVE-2026-48934 CVE-2026-48928 CVE-2026-48617 CVE-2026-48931 CVE-2026-48935 CVE-2026-42338
|
||
|
||
* Wed Mar 25 2026 Andrei Radchenko <aradchen@redhat.com> - 1:22.22.2-1
|
||
- Update to version 22.22.2
|
||
- introduced patch updating deps/nghttp2 to v 1.68.1 for CVE-2026-27135
|
||
- disabled failing tests in nghttp2 due to newer version
|
||
- patch for npm/braces CVE-2026-25547
|
||
Resolves: RHEL-163370
|
||
Fixes: CVE-2026-1528 CVE-2026-2229 CVE-2026-1526 CVE-2026-1525 CVE-2026-27135 CVE-2026-27904 CVE-2026-26996 CVE-2026-25547
|
||
|
||
* Tue Jan 13 2026 Tomas Juhasz <tjuhasz@redhat.com> - 1:22.22.0-1
|
||
- Update to 22.22.0
|
||
Resolves: RHEL-118153
|
||
|
||
* Fri Aug 29 2025 Tomas Juhasz <tjuhasz@redhat.com> - 1.22.19.0-1
|
||
- Update to 22.19.0
|
||
Resolves: RHEL-111913
|
||
|
||
* Mon Jul 21 2025 Tomas Juhasz <tjuhasz@redhat.com> - 1:22.16.0-2
|
||
- Patch fix for CVE-2025-6965
|
||
Resolves: RHEL-103853
|
||
|
||
* Tue May 20 2025 Andrei Radchenko <aradchen@redhat.com> - 1:22.16.0-1
|
||
- Update to 22.16.0
|
||
Resolves: RHEL-92870 RHEL-89599 RHEL-92058
|
||
|
||
* Thu Apr 24 2025 Tomas Juhasz <tjuhasz@redhat.com> - 1:22.15.0-1
|
||
- Update to 22.15.0
|
||
- Drop upstream patches
|
||
|
||
* Tue Apr 22 2025 Tomas Juhasz <tjuhasz@redhat.com> - 1:22.13.1-4
|
||
- Patch fix for sqlite CVE-2025-31498
|
||
Resolves: RHEL-87320
|
||
|
||
* Mon Apr 14 2025 Tomas Juhasz <tjuhasz@redhat.com> - 1:22.13.1-3
|
||
- Update c-ares to newest version with fix for CVE-2025-31498
|
||
Resolves: RHEL-86587
|
||
|
||
* Mon Mar 03 2025 Andrei Radchenko <aradchen@redhat.com> - 1:22.13.1-2
|
||
- Remove obsolete lua pretransaction script from spec file
|
||
Resolves: RHEL-81119
|
||
- Disable npm update notifications for users
|
||
Resolves: RHEL-81079
|
||
|
||
* Thu Jan 30 2025 Jan Staněk <jstanek@redhat.com> - 1:22.13.1-1
|
||
- Update to version 22.13.1
|
||
Fixes CVE-2025-23083 CVE-2025-23085 CVE-2025-22150
|
||
Resolves: RHEL-76354
|
||
|
||
* Mon Nov 04 2024 Jan Staněk <jstanek@redhat.com> - 1:22.11.0-1
|
||
- Update to version 22.11.0
|
||
|
||
* Thu Aug 15 2024 Filip Janus <fjanus@redhat.com> - 22.4.1-4
|
||
- Initial import of nodeJS 22
|