From 1874aad81f0ad4ebbfa2941a3d9c64adf02f9f8b Mon Sep 17 00:00:00 2001 From: Stefano Brivio Date: Tue, 6 Sep 2022 12:39:26 +0000 Subject: [PATCH] Initial import (fedora#2106611). --- .gitignore | 1 + passt.spec | 141 +++++++++++++++++++++++++++++++++++++++++++++++++++++ sources | 1 + 3 files changed, 143 insertions(+) create mode 100644 .gitignore create mode 100644 passt.spec create mode 100644 sources diff --git a/.gitignore b/.gitignore new file mode 100644 index 0000000..b1bd068 --- /dev/null +++ b/.gitignore @@ -0,0 +1 @@ +/passt-7ce9fd165f4f0c85e13dcaf4ff97c53d34b4a51d.tar.xz diff --git a/passt.spec b/passt.spec new file mode 100644 index 0000000..f7aca6b --- /dev/null +++ b/passt.spec @@ -0,0 +1,141 @@ +# PASST - Plug A Simple Socket Transport +# for qemu/UNIX domain socket mode +# +# PASTA - Pack A Subtle Tap Abstraction +# for network namespace/tap device mode +# +# Copyright (c) 2022 Red Hat GmbH +# Author: Stefano Brivio + +%global git_hash 7ce9fd165f4f0c85e13dcaf4ff97c53d34b4a51d + +Name: passt +Version: 0^20220902.g7ce9fd1 +Release: 1%{?dist} +Summary: User-mode networking daemons for virtual machines and namespaces +License: AGPLv3+ and BSD +Group: System Environment/Daemons +URL: https://passt.top/ +Source: https://passt.top/passt/snapshot/passt-%{git_hash}.tar.xz + +BuildRequires: gcc, make, checkpolicy, selinux-policy-devel + +%description +passt implements a translation layer between a Layer-2 network interface and +native Layer-4 sockets (TCP, UDP, ICMP/ICMPv6 echo) on a host. It doesn't +require any capabilities or privileges, and it can be used as a simple +replacement for Slirp. + +pasta (same binary as passt, different command) offers equivalent functionality, +for network namespaces: traffic is forwarded using a tap interface inside the +namespace, without the need to create further interfaces on the host, hence not +requiring any capabilities or privileges. + +%package selinux +BuildArch: noarch +Summary: SELinux support for passt and pasta +Requires: %{name} = %{version}-%{release} +Requires: selinux-policy +Requires(post): %{name} +Requires(post): policycoreutils +Requires(preun): %{name} +Requires(preun): policycoreutils + +%description selinux +This package adds SELinux enforcement to passt(1) and pasta(1). + +%prep +%setup -q -n passt-%{git_hash} + +%build +%set_build_flags +%make_build + +%install +%make_install DESTDIR=%{buildroot} prefix=%{_prefix} bindir=%{_bindir} mandir=%{_mandir} docdir=%{_docdir}/%{name} +%ifarch x86_64 +ln -sr %{buildroot}%{_mandir}/man1/passt.1 %{buildroot}%{_mandir}/man1/passt.avx2.1 +ln -sr %{buildroot}%{_mandir}/man1/pasta.1 %{buildroot}%{_mandir}/man1/pasta.avx2.1 +%endif + +pushd contrib/selinux +make -f %{_datadir}/selinux/devel/Makefile +install -p -m 644 -D passt.pp %{buildroot}%{_datadir}/selinux/packages/%{name}/passt.pp +install -p -m 644 -D pasta.pp %{buildroot}%{_datadir}/selinux/packages/%{name}/pasta.pp +popd + +%post selinux +semodule -i %{_datadir}/selinux/packages/%{name}/passt.pp 2>/dev/null || : +semodule -i %{_datadir}/selinux/packages/%{name}/pasta.pp 2>/dev/null || : + +%preun selinux +semodule -r passt 2>/dev/null || : +semodule -r pasta 2>/dev/null || : + +%files +%license LICENSES/{AGPL-3.0-or-later.txt,BSD-3-Clause.txt} +%dir %{_docdir}/%{name} +%doc %{_docdir}/%{name}/README.md +%doc %{_docdir}/%{name}/demo.sh +%{_bindir}/passt +%{_bindir}/pasta +%{_bindir}/qrap +%{_mandir}/man1/passt.1* +%{_mandir}/man1/pasta.1* +%{_mandir}/man1/qrap.1* +%ifarch x86_64 +%{_bindir}/passt.avx2 +%{_mandir}/man1/passt.avx2.1* +%{_bindir}/pasta.avx2 +%{_mandir}/man1/pasta.avx2.1* +%endif + +%files selinux +%dir %{_datadir}/selinux/packages/%{name} +%{_datadir}/selinux/packages/%{name}/passt.pp +%{_datadir}/selinux/packages/%{name}/pasta.pp + +%changelog +* Fri Sep 2 2022 Stefano Brivio - 0^20220902.g7ce9fd1-1 +- Add selinux-policy Requires: tag +- Add %dir entries for own SELinux policy directory and documentation +- Upstream changes: https://passt.top/passt/log/?qt=range&q=2022_08_29.0cb795e..2022_09_01.7ce9fd1 + +* Tue Aug 30 2022 Stefano Brivio - 0^20220830.g0cb795e-1 +- Pass explicit bindir, mandir, docdir, and drop OpenSUSE override +- Use full versioning for SELinux subpackage Requires: tag +- Define git_hash in spec file and reuse it +- Drop comment stating the spec file is an example file +- Drop SPDX identifier from spec file +- Adopt versioning guideline for snapshots +- Upstream changes: https://passt.top/passt/log/?qt=range&q=2022_08_24.60ffc5b..2022_08_29.0cb795e + +* Wed Aug 24 2022 Stefano Brivio - 0^20220824.g60ffc5b-1 +- Upstream changes: https://passt.top/passt/log/?qt=range&q=2022_08_21.7b71094..2022_08_24.60ffc5b + +* Sun Aug 21 2022 Stefano Brivio - 0^20220821.g7b71094-1 +- Use more GNU-style directory variables, explicit docdir for OpenSUSE +- Upstream changes: https://passt.top/passt/log/?qt=range&q=2022_08_20.f233d6c..2022_08_21.7b71094 + +* Sat Aug 20 2022 Stefano Brivio - 0^20220820.gf233d6c-1 +- Fix man pages wildcards in spec file +- Don't hardcode CFLAGS setting, use %set_build_flags macro instead +- Build SELinux subpackage as noarch +- Change source URL to HEAD link with explicit commit SHA +- Drop VCS tag from spec file +- Start Release tag from 1, not 0 +- Introduce own rpkg macro for changelog +- Install "plain" README, instead of web version, and demo script +- Upstream changes: https://passt.top/passt/log/?qt=range&q=2022_08_04.b516d15..2022_08_20.f233d6c + +* Mon Aug 1 2022 Stefano Brivio - 0^20220801.gb516d15-1 +- Upstream changes: https://passt.top/passt/log/?qt=range&q=2022_07_20.9af2e5d..2022_08_04.b516d15 + +* Wed Jul 20 2022 Stefano Brivio - 0^20220720.g9af2e5d-1 +- Upstream changes: https://passt.top/passt/log/?qt=range&q=2022_07_14.b86cd00..2022_07_20.9af2e5d + +* Thu Jul 14 2022 Stefano Brivio - 0^20220714.gb86cd00-1 +- Use pre-processing macros in spec file +- Drop dashes from version +- Add example spec file for Fedora +- Upstream changes: https://passt.top/passt/log/?qt=range&q=e653f9b3ed1b60037e3bc661d53b3f9407243fc2..2022_07_14.b86cd00 diff --git a/sources b/sources new file mode 100644 index 0000000..0d048bd --- /dev/null +++ b/sources @@ -0,0 +1 @@ +SHA512 (passt-7ce9fd165f4f0c85e13dcaf4ff97c53d34b4a51d.tar.xz) = e0e8f5da08c334860b359abf7854e6d976206005cfbc948175cad931495246e330168ae5cea3c7ed3061c276ca33b3ff247b08ec71272cd1bceefc84b73e4fd9