From d39fec05a2fac9978cd77634744637509744b561 Mon Sep 17 00:00:00 2001 From: V3n3RiX Date: Wed, 18 Jan 2023 23:57:59 +0000 Subject: gentoo auto-resync : 18:01:2023 - 23:57:58 --- net-proxy/Manifest.gz | Bin 5366 -> 5361 bytes net-proxy/squid/Manifest | 2 +- net-proxy/squid/squid-5.7-r1.ebuild | 380 +++++++++++++++++++++++++++++++++++ net-proxy/squid/squid-5.7.ebuild | 383 ------------------------------------ 4 files changed, 381 insertions(+), 384 deletions(-) create mode 100644 net-proxy/squid/squid-5.7-r1.ebuild delete mode 100644 net-proxy/squid/squid-5.7.ebuild (limited to 'net-proxy') diff --git a/net-proxy/Manifest.gz b/net-proxy/Manifest.gz index 056255504fbb..304480a567f3 100644 Binary files a/net-proxy/Manifest.gz and b/net-proxy/Manifest.gz differ diff --git a/net-proxy/squid/Manifest b/net-proxy/squid/Manifest index 8ef8cc5aa8fb..744fdfa53f2f 100644 --- a/net-proxy/squid/Manifest +++ b/net-proxy/squid/Manifest @@ -10,5 +10,5 @@ AUX squid.pam 209 BLAKE2B 113fa119ce4fd96ddf34b95c1a1ca958b34aea405564076f89abdb DIST squid-4.17.tar.xz 2464204 BLAKE2B e227dfbac846dff66f04c6c72d81d667076107653721d14804f079518cef68efc53f5404fbe3306efb0c775a10638661c300a8e7cd3d7ab43c0e57a344387674 SHA512 cea36de10f128f5beb51bdc89604c16af3a820a5ac27284b2aa181ac87144930489688e1d85ce357fe1ed8a4e96e300277b95034a2475cbf86c9d6923ddf7c0a DIST squid-5.7.tar.xz 2566560 BLAKE2B 4a403ca4f94034356922ea1a4feffd5f5289e2aadbe1585bd04e83ee89712227ce04c53f7e05c10f7c8ac6be67a265a32b47032e7b56e929a172772fa41d5299 SHA512 624a39041a6ceda6c470dc0937616f1aa67200f3db02b4d74095d8d706ed31d6df5e0417dcacde45f6be40b617bee018849793d52c96a626aab32a2b182972aa EBUILD squid-4.17-r1.ebuild 8183 BLAKE2B ca1794b42ea7605d0fc0dae80a5d6071fc7929528d1619848fccd1a05c600057695596026d96efa21a3076b543ac8df20fecbba054a41182cdf317ca2059317b SHA512 7a94968e331c85dd6028d9c958c016c214d936176fae3c2453e8caab31df24bc2b3fa558934b2dc88ceec157af63323fb3ab7e10f893984414f49674fe5b1f6e -EBUILD squid-5.7.ebuild 9353 BLAKE2B 1571184bcc6091ac561a412d08955bd4b7c5f0a5acb162b2d7d5bd38df8210374d5f464e3ba085954732f93121dd26672f57c967122fc038e184c5dfc1c5e6c8 SHA512 9243053440aec5cb5a4f937e3482665379f644f957f635e199031dcb8c0a0c4cc35ce2842136a8d356b9431f198a961c99714e65bc1347353dadafcc84e73406 +EBUILD squid-5.7-r1.ebuild 9416 BLAKE2B 06d2d220c5d79bb6cd08e90ff3cdd131e60cbe43e7ee7d80efc7433b105d5f70b8c58d7693e7d34609fc65150668763d5a82f2193a49890aa3a726a2120d4c7a SHA512 92d96fb49886f2ef0df9ecd8b8c988b5ae8534849f42ba6ab7bba472537e5b2b7af4b9ceb1d77f596427c09642e411ccd560592a8a70222ad9a33bbd1b154224 MISC metadata.xml 1351 BLAKE2B 8a6ea8bc939b5900572bd323fb3be78e0dfa9b4d7436f2d5e27fa59905f57af5cd9b7fe9a2903f8f57859a88176aab17c1a5d507a69765aab0f5320ceec69c96 SHA512 db7a47668d220a16f10d25319ffc4cd33270209d7d00f488d45680150f094d70776c4bf3c7b203b6ec8c69be18e5ac3a78d3d4367ec90a9ffb91ffd29f66890f diff --git a/net-proxy/squid/squid-5.7-r1.ebuild b/net-proxy/squid/squid-5.7-r1.ebuild new file mode 100644 index 000000000000..adf1e1062c64 --- /dev/null +++ b/net-proxy/squid/squid-5.7-r1.ebuild @@ -0,0 +1,380 @@ +# Copyright 1999-2023 Gentoo Authors +# Distributed under the terms of the GNU General Public License v2 + +EAPI="8" + +inherit autotools flag-o-matic linux-info pam systemd toolchain-funcs + +DESCRIPTION="A full-featured web proxy cache" +HOMEPAGE="http://www.squid-cache.org/" + +MY_PV_MAJOR=$(ver_cut 1) +# Upstream patch ID for the most recent bug-fixed update to the formal release. +#r=-20181117-r0022167 +r= +if [[ -z ${r} ]]; then + SRC_URI="http://www.squid-cache.org/Versions/v${MY_PV_MAJOR}/${P}.tar.xz" +else + SRC_URI="http://www.squid-cache.org/Versions/v${MY_PV_MAJOR}/${P}${r}.tar.bz2" + S="${S}${r}" +fi + +LICENSE="GPL-2" +SLOT="0" +KEYWORDS="~alpha amd64 arm ~arm64 ~hppa ~ia64 ~mips ~ppc ppc64 ~riscv ~sparc x86" +IUSE="caps gnutls pam ldap samba sasl kerberos nis radius ssl snmp selinux logrotate test ecap" +IUSE+=" esi ssl-crtd mysql postgres sqlite systemd perl qos tproxy +htcp +wccp +wccpv2" +RESTRICT="!test? ( test )" +REQUIRED_USE="tproxy? ( caps ) qos? ( caps )" + +DEPEND=" + acct-group/squid + acct-user/squid + dev-libs/libltdl + sys-libs/tdb + virtual/libcrypt:= + caps? ( >=sys-libs/libcap-2.16 ) + ecap? ( net-libs/libecap:1 ) + esi? ( + dev-libs/expat + dev-libs/libxml2 + ) + ldap? ( net-nds/openldap:= ) + gnutls? ( >=net-libs/gnutls-3.1.5:= ) + logrotate? ( app-admin/logrotate ) + nis? ( + net-libs/libtirpc:= + net-libs/libnsl:= + ) + kerberos? ( virtual/krb5 ) + pam? ( sys-libs/pam ) + qos? ( net-libs/libnetfilter_conntrack ) + ssl? ( + dev-libs/nettle:= + !gnutls? ( + dev-libs/openssl:= + ) + ) + sasl? ( dev-libs/cyrus-sasl ) + systemd? ( sys-apps/systemd:= ) +" +RDEPEND=" + ${DEPEND} + mysql? ( dev-perl/DBD-mysql ) + postgres? ( dev-perl/DBD-Pg ) + perl? ( dev-lang/perl ) + samba? ( net-fs/samba ) + selinux? ( sec-policy/selinux-squid ) + sqlite? ( dev-perl/DBD-SQLite ) +" +BDEPEND=" + dev-lang/perl + ecap? ( virtual/pkgconfig ) + test? ( dev-util/cppunit ) +" + +PATCHES=( + "${FILESDIR}"/${PN}-5.3-gentoo.patch + "${FILESDIR}"/${PN}-4.17-use-system-libltdl.patch +) + +pkg_pretend() { + if use tproxy; then + local CONFIG_CHECK="~NF_CONNTRACK ~NETFILTER_XT_MATCH_SOCKET ~NETFILTER_XT_TARGET_TPROXY" + linux-info_pkg_setup + fi +} + +src_prepare() { + default + + # Fixup various paths + sed -i -e 's:/usr/local/squid/etc:/etc/squid:' \ + INSTALL QUICKSTART \ + scripts/fileno-to-pathname.pl \ + scripts/check_cache.pl \ + tools/cachemgr.cgi.8 \ + tools/purge/conffile.hh \ + tools/purge/purge.1 || die + sed -i -e 's:/usr/local/squid/sbin:/usr/sbin:' \ + INSTALL QUICKSTART || die + sed -i -e 's:/usr/local/squid/var/cache:/var/cache/squid:' \ + QUICKSTART || die + sed -i -e 's:/usr/local/squid/var/logs:/var/log/squid:' \ + QUICKSTART \ + src/log/access_log.cc || die + sed -i -e 's:/usr/local/squid/logs:/var/log/squid:' \ + src/log/access_log.cc || die + sed -i -e 's:/usr/local/squid/libexec:/usr/libexec/squid:' \ + src/acl/external/unix_group/ext_unix_group_acl.8 \ + src/acl/external/session/ext_session_acl.8 || die + sed -i -e 's:/usr/local/squid/cache:/var/cache/squid:' \ + scripts/check_cache.pl || die + # /var/run/squid to /run/squid + sed -i -e 's:$(localstatedir)::' \ + src/ipc/Makefile.am || die + sed -i 's:/var/run/:/run/:g' tools/systemd/squid.service || die + + sed -i -e 's:_LTDL_SETUP:LTDL_INIT([installable]):' \ + libltdl/configure.ac || die + + eautoreconf +} + +src_configure() { + local myeconfargs=( + --datadir=/usr/share/squid + --libexecdir=/usr/libexec/squid + --localstatedir=/var + --sysconfdir=/etc/squid + --with-default-user=squid + --with-logdir=/var/log/squid + --with-pidfile=/run/squid.pid + + --enable-build-info="Gentoo ${PF} (r: ${r:-NONE})" + --enable-log-daemon-helpers + --enable-url-rewrite-helpers + --enable-cache-digests + --enable-delay-pools + --enable-disk-io + --enable-eui + --enable-icmp + --enable-ipv6 + --enable-follow-x-forwarded-for + --enable-removal-policies="lru,heap" + --disable-strict-error-checking + --disable-arch-native + + --with-large-files + --with-build-environment=default + + --with-tdb + + --without-included-ltdl + --with-ltdl-include="${ESYSROOT}"/usr/include + --with-ltdl-lib="${ESYSROOT}"/usr/$(get_libdir) + + $(use_with caps libcap) + $(use_enable snmp) + $(use_with ssl openssl) + $(use_with ssl nettle) + $(use_with gnutls) + $(use_enable ssl-crtd) + $(use_with systemd) + $(use_with test cppunit) + $(use_enable ecap) + $(use_enable esi) + $(use_enable esi expat) + $(use_enable esi libxml2) + $(use_enable htcp) + $(use_enable wccp) + $(use_enable wccpv2) + ) + + # Basic modules + local basic_modules=( + NCSA + POP3 + getpwnam + + $(usev samba 'SMB') + $(usev ldap 'SMB_LM LDAP') + $(usev pam 'PAM') + $(usev sasl 'SASL') + $(usev nis 'NIS') + $(usev radius 'RADIUS') + ) + + use nis && append-cppflags "-I${ESYSROOT}/usr/include/tirpc" + + if use mysql || use postgres || use sqlite; then + basic_modules+=( DB ) + fi + + # Digests + local digest_modules=( + file + + $(usev ldap 'LDAP eDirectory') + ) + + # Kerberos + local negotiate_modules=( none ) + + myeconfargs+=( --without-mit-krb5 --without-heimdal-krb5 ) + + if use kerberos; then + # We intentionally overwrite negotiate_modules here to lose + # the 'none'. + negotiate_modules=( kerberos wrapper ) + + if has_version app-crypt/heimdal; then + myeconfargs+=( + --without-mit-krb5 + --with-heimdal-krb5 + ) + else + myeconfargs+=( + --with-mit-krb5 + --without-heimdal-krb5 + ) + fi + fi + + # NTLM modules + local ntlm_modules=( none ) + + if use samba ; then + # We intentionally overwrite ntlm_modules here to lose + # the 'none'. + ntlm_modules=( SMB_LM ) + fi + + # External helpers + local ext_helpers=( + file_userip + session + unix_group + delayer + time_quota + + $(usev samba 'wbinfo_group') + $(usev ldap 'LDAP_group eDirectory_userip') + ) + + use ldap && use kerberos && ext_helpers+=( kerberos_ldap_group ) + if use mysql || use postgres || use sqlite; then + ext_helpers+=( SQL_session ) + fi + + # Storage modules + local storeio_modules=( + aufs + diskd + rock + ufs + ) + + # + local transparent + if use kernel_linux; then + myeconfargs+=( + --enable-linux-netfilter + $(usev qos '--enable-zph-qos --with-netfilter-conntrack') + ) + fi + + tc-export_build_env BUILD_CXX + export BUILDCXX="${BUILD_CXX}" + export BUILDCXXFLAGS="${BUILD_CXXFLAGS}" + tc-export CC AR + + # Should be able to drop this workaround with newer versions. + # https://bugs.squid-cache.org/show_bug.cgi?id=4224 + tc-is-cross-compiler && export squid_cv_gnu_atomics=no + + # Bug #719662 + append-atomic-flags + + print_options_without_comma() { + # IFS as ',' will cut off any trailing commas + ( + IFS=',' + options=( $(printf "%s," "${@}") ) + echo "${options[*]}" + ) + } + + myeconfargs+=( + --enable-storeio=$(print_options_without_comma "${storeio_modules[@]}") + --enable-auth-basic=$(print_options_without_comma "${basic_modules[@]}") + --enable-auth-digest=$(print_options_without_comma "${digest_modules[@]}") + --enable-auth-ntlm=$(print_options_without_comma "${ntlm_modules[@]}") + --enable-auth-negotiate=$(print_options_without_comma "${negotiate_modules[@]}") + --enable-external-acl-helpers=$(print_options_without_comma "${ext_helpers[@]}") + ) + + econf "${myeconfargs[@]}" +} + +src_install() { + default + + systemd_dounit tools/systemd/squid.service + + # Need suid root for looking into /etc/shadow + fowners root:squid /usr/libexec/squid/basic_ncsa_auth + fperms 4750 /usr/libexec/squid/basic_ncsa_auth + + if use pam; then + fowners root:squid /usr/libexec/squid/basic_pam_auth + fperms 4750 /usr/libexec/squid/basic_pam_auth + fi + + # Pinger needs suid as well + fowners root:squid /usr/libexec/squid/pinger + fperms 4750 /usr/libexec/squid/pinger + + # These scripts depend on perl + if ! use perl; then + local perl_scripts=( + basic_pop3_auth ext_delayer_acl helper-mux + log_db_daemon security_fake_certverify + storeid_file_rewrite url_lfs_rewrite + ) + + local script + for script in "${perl_scripts[@]}"; do + rm "${ED}"/usr/libexec/squid/${script} || die + done + fi + + # Cleanup + rm -r "${D}"/run "${D}"/var/cache || die + + dodoc CONTRIBUTORS CREDITS ChangeLog INSTALL QUICKSTART README SPONSORS doc/*.txt + newdoc src/auth/negotiate/kerberos/README README.kerberos + newdoc src/auth/basic/RADIUS/README README.RADIUS + newdoc src/acl/external/kerberos_ldap_group/README README.kerberos_ldap_group + dodoc RELEASENOTES.html + + if use pam; then + newpamd "${FILESDIR}"/squid.pam squid + fi + + newconfd "${FILESDIR}"/squid.confd-r2 squid + newinitd "${FILESDIR}"/squid.initd-r5 squid + + if use logrotate ; then + insinto /etc/logrotate.d + newins "${FILESDIR}"/squid.logrotate squid + else + exeinto /etc/cron.weekly + newexe "${FILESDIR}"/squid.cron squid.cron + fi + + diropts -m0750 -o squid -g squid + keepdir /var/log/squid /etc/ssl/squid /var/lib/squid + + # Hack for bug #834503 (see also bug #664940) + # Please keep this for a few years until it's no longer plausible + # someone is upgrading from < squid 5.7. + mv "${ED}"/usr/share/squid/errors{,.new} || die +} + +pkg_preinst() { + # Remove file in EROOT that the directory collides with. + rm -rf "${EROOT}"/usr/share/squid/errors || die + + # Following the collision protection check, reverse + # src_install's rename in ED. + mv "${ED}"/usr/share/squid/errors{.new,} || die +} + +pkg_postinst() { + elog "A good starting point to debug Squid issues is to use 'squidclient mgr:' commands such as 'squidclient mgr:info'." + + if [[ ${#r} -gt 0 ]]; then + elog "You are using a release with the official ${r} patch! Make sure you mention that, or send the output of 'squidclient mgr:info' when asking for support." + fi +} diff --git a/net-proxy/squid/squid-5.7.ebuild b/net-proxy/squid/squid-5.7.ebuild deleted file mode 100644 index 60bc862ec71f..000000000000 --- a/net-proxy/squid/squid-5.7.ebuild +++ /dev/null @@ -1,383 +0,0 @@ -# Copyright 1999-2023 Gentoo Authors -# Distributed under the terms of the GNU General Public License v2 - -EAPI="8" - -inherit autotools flag-o-matic linux-info pam systemd toolchain-funcs - -DESCRIPTION="A full-featured web proxy cache" -HOMEPAGE="http://www.squid-cache.org/" - -MY_PV_MAJOR=$(ver_cut 1) -# Upstream patch ID for the most recent bug-fixed update to the formal release. -#r=-20181117-r0022167 -r= -if [[ -z ${r} ]]; then - SRC_URI="http://www.squid-cache.org/Versions/v${MY_PV_MAJOR}/${P}.tar.xz" -else - SRC_URI="http://www.squid-cache.org/Versions/v${MY_PV_MAJOR}/${P}${r}.tar.bz2" - S="${S}${r}" -fi - -LICENSE="GPL-2" -SLOT="0" -KEYWORDS="~alpha amd64 arm ~arm64 ~hppa ~ia64 ~mips ~ppc ppc64 ~riscv ~sparc x86" -IUSE="caps gnutls pam ldap samba sasl kerberos nis radius ssl snmp selinux logrotate test ecap" -IUSE+=" esi ssl-crtd mysql postgres sqlite systemd perl qos tproxy +htcp +wccp +wccpv2" -RESTRICT="!test? ( test )" -REQUIRED_USE="tproxy? ( caps ) qos? ( caps )" - -DEPEND=" - acct-group/squid - acct-user/squid - dev-libs/libltdl - sys-libs/tdb - virtual/libcrypt:= - caps? ( >=sys-libs/libcap-2.16 ) - ecap? ( net-libs/libecap:1 ) - esi? ( - dev-libs/expat - dev-libs/libxml2 - ) - ldap? ( net-nds/openldap:= ) - gnutls? ( >=net-libs/gnutls-3.1.5:= ) - logrotate? ( app-admin/logrotate ) - nis? ( - net-libs/libtirpc:= - net-libs/libnsl:= - ) - kerberos? ( virtual/krb5 ) - pam? ( sys-libs/pam ) - qos? ( net-libs/libnetfilter_conntrack ) - ssl? ( - dev-libs/nettle:= - !gnutls? ( - dev-libs/openssl:= - ) - ) - sasl? ( dev-libs/cyrus-sasl ) - systemd? ( sys-apps/systemd:= ) -" -RDEPEND=" - ${DEPEND} - mysql? ( dev-perl/DBD-mysql ) - postgres? ( dev-perl/DBD-Pg ) - perl? ( dev-lang/perl ) - samba? ( net-fs/samba ) - selinux? ( sec-policy/selinux-squid ) - sqlite? ( dev-perl/DBD-SQLite ) -" -BDEPEND=" - dev-lang/perl - ecap? ( virtual/pkgconfig ) - test? ( dev-util/cppunit ) -" - -PATCHES=( - "${FILESDIR}"/${PN}-5.3-gentoo.patch - "${FILESDIR}"/${PN}-4.17-use-system-libltdl.patch -) - -pkg_pretend() { - if use tproxy; then - local CONFIG_CHECK="~NF_CONNTRACK ~NETFILTER_XT_MATCH_SOCKET ~NETFILTER_XT_TARGET_TPROXY" - linux-info_pkg_setup - fi -} - -pkg_setup() { - if [[ -n ${REPLACING_VERSIONS} ]]; then - local v - for v in ${REPLACING_VERSIONS}; do - if ver_test "${v}" -lt 5; then - ewarn "Moving ${EROOT}/usr/share/squid/errors out of the way (bug 834503)" - mv -v "${EROOT}"/usr/share/squid/errors{,.bak} - break - fi - done - fi -} - -src_prepare() { - default - - # Fixup various paths - sed -i -e 's:/usr/local/squid/etc:/etc/squid:' \ - INSTALL QUICKSTART \ - scripts/fileno-to-pathname.pl \ - scripts/check_cache.pl \ - tools/cachemgr.cgi.8 \ - tools/purge/conffile.hh \ - tools/purge/purge.1 || die - sed -i -e 's:/usr/local/squid/sbin:/usr/sbin:' \ - INSTALL QUICKSTART || die - sed -i -e 's:/usr/local/squid/var/cache:/var/cache/squid:' \ - QUICKSTART || die - sed -i -e 's:/usr/local/squid/var/logs:/var/log/squid:' \ - QUICKSTART \ - src/log/access_log.cc || die - sed -i -e 's:/usr/local/squid/logs:/var/log/squid:' \ - src/log/access_log.cc || die - sed -i -e 's:/usr/local/squid/libexec:/usr/libexec/squid:' \ - src/acl/external/unix_group/ext_unix_group_acl.8 \ - src/acl/external/session/ext_session_acl.8 || die - sed -i -e 's:/usr/local/squid/cache:/var/cache/squid:' \ - scripts/check_cache.pl || die - # /var/run/squid to /run/squid - sed -i -e 's:$(localstatedir)::' \ - src/ipc/Makefile.am || die - sed -i 's:/var/run/:/run/:g' tools/systemd/squid.service || die - - sed -i -e 's:_LTDL_SETUP:LTDL_INIT([installable]):' \ - libltdl/configure.ac || die - - eautoreconf -} - -src_configure() { - local myeconfargs=( - --datadir=/usr/share/squid - --libexecdir=/usr/libexec/squid - --localstatedir=/var - --sysconfdir=/etc/squid - --with-default-user=squid - --with-logdir=/var/log/squid - --with-pidfile=/run/squid.pid - - --enable-build-info="Gentoo ${PF} (r: ${r:-NONE})" - --enable-log-daemon-helpers - --enable-url-rewrite-helpers - --enable-cache-digests - --enable-delay-pools - --enable-disk-io - --enable-eui - --enable-icmp - --enable-ipv6 - --enable-follow-x-forwarded-for - --enable-removal-policies="lru,heap" - --disable-strict-error-checking - --disable-arch-native - - --with-large-files - --with-build-environment=default - - --with-tdb - - --without-included-ltdl - --with-ltdl-include="${ESYSROOT}"/usr/include - --with-ltdl-lib="${ESYSROOT}"/usr/$(get_libdir) - - $(use_with caps libcap) - $(use_enable snmp) - $(use_with ssl openssl) - $(use_with ssl nettle) - $(use_with gnutls) - $(use_enable ssl-crtd) - $(use_with systemd) - $(use_with test cppunit) - $(use_enable ecap) - $(use_enable esi) - $(use_enable esi expat) - $(use_enable esi libxml2) - $(use_enable htcp) - $(use_enable wccp) - $(use_enable wccpv2) - ) - - # Basic modules - local basic_modules=( - NCSA - POP3 - getpwnam - - $(usev samba 'SMB') - $(usev ldap 'SMB_LM LDAP') - $(usev pam 'PAM') - $(usev sasl 'SASL') - $(usev nis 'NIS') - $(usev radius 'RADIUS') - ) - - use nis && append-cppflags "-I${ESYSROOT}/usr/include/tirpc" - - if use mysql || use postgres || use sqlite; then - basic_modules+=( DB ) - fi - - # Digests - local digest_modules=( - file - - $(usev ldap 'LDAP eDirectory') - ) - - # Kerberos - local negotiate_modules=( none ) - - myeconfargs+=( --without-mit-krb5 --without-heimdal-krb5 ) - - if use kerberos; then - # We intentionally overwrite negotiate_modules here to lose - # the 'none'. - negotiate_modules=( kerberos wrapper ) - - if has_version app-crypt/heimdal; then - myeconfargs+=( - --without-mit-krb5 - --with-heimdal-krb5 - ) - else - myeconfargs+=( - --with-mit-krb5 - --without-heimdal-krb5 - ) - fi - fi - - # NTLM modules - local ntlm_modules=( none ) - - if use samba ; then - # We intentionally overwrite ntlm_modules here to lose - # the 'none'. - ntlm_modules=( SMB_LM ) - fi - - # External helpers - local ext_helpers=( - file_userip - session - unix_group - delayer - time_quota - - $(usev samba 'wbinfo_group') - $(usev ldap 'LDAP_group eDirectory_userip') - ) - - use ldap && use kerberos && ext_helpers+=( kerberos_ldap_group ) - if use mysql || use postgres || use sqlite; then - ext_helpers+=( SQL_session ) - fi - - # Storage modules - local storeio_modules=( - aufs - diskd - rock - ufs - ) - - # - local transparent - if use kernel_linux; then - myeconfargs+=( - --enable-linux-netfilter - $(usev qos '--enable-zph-qos --with-netfilter-conntrack') - ) - fi - - tc-export_build_env BUILD_CXX - export BUILDCXX="${BUILD_CXX}" - export BUILDCXXFLAGS="${BUILD_CXXFLAGS}" - tc-export CC AR - - # Should be able to drop this workaround with newer versions. - # https://bugs.squid-cache.org/show_bug.cgi?id=4224 - tc-is-cross-compiler && export squid_cv_gnu_atomics=no - - # Bug #719662 - append-atomic-flags - - print_options_without_comma() { - # IFS as ',' will cut off any trailing commas - ( - IFS=',' - options=( $(printf "%s," "${@}") ) - echo "${options[*]}" - ) - } - - myeconfargs+=( - --enable-storeio=$(print_options_without_comma "${storeio_modules[@]}") - --enable-auth-basic=$(print_options_without_comma "${basic_modules[@]}") - --enable-auth-digest=$(print_options_without_comma "${digest_modules[@]}") - --enable-auth-ntlm=$(print_options_without_comma "${ntlm_modules[@]}") - --enable-auth-negotiate=$(print_options_without_comma "${negotiate_modules[@]}") - --enable-external-acl-helpers=$(print_options_without_comma "${ext_helpers[@]}") - ) - - econf "${myeconfargs[@]}" -} - -src_install() { - default - - systemd_dounit tools/systemd/squid.service - - # Need suid root for looking into /etc/shadow - fowners root:squid /usr/libexec/squid/basic_ncsa_auth - fperms 4750 /usr/libexec/squid/basic_ncsa_auth - - if use pam; then - fowners root:squid /usr/libexec/squid/basic_pam_auth - fperms 4750 /usr/libexec/squid/basic_pam_auth - fi - - # Pinger needs suid as well - fowners root:squid /usr/libexec/squid/pinger - fperms 4750 /usr/libexec/squid/pinger - - # These scripts depend on perl - if ! use perl; then - local perl_scripts=( - basic_pop3_auth ext_delayer_acl helper-mux - log_db_daemon security_fake_certverify - storeid_file_rewrite url_lfs_rewrite - ) - - local script - for script in "${perl_scripts[@]}"; do - rm "${ED}"/usr/libexec/squid/${script} || die - done - fi - - # Cleanup - rm -r "${D}"/run "${D}"/var/cache || die - - dodoc CONTRIBUTORS CREDITS ChangeLog INSTALL QUICKSTART README SPONSORS doc/*.txt - newdoc src/auth/negotiate/kerberos/README README.kerberos - newdoc src/auth/basic/RADIUS/README README.RADIUS - newdoc src/acl/external/kerberos_ldap_group/README README.kerberos_ldap_group - dodoc RELEASENOTES.html - - if use pam; then - newpamd "${FILESDIR}"/squid.pam squid - fi - - newconfd "${FILESDIR}"/squid.confd-r2 squid - newinitd "${FILESDIR}"/squid.initd-r5 squid - - if use logrotate ; then - insinto /etc/logrotate.d - newins "${FILESDIR}"/squid.logrotate squid - else - exeinto /etc/cron.weekly - newexe "${FILESDIR}"/squid.cron squid.cron - fi - - diropts -m0750 -o squid -g squid - keepdir /var/log/squid /etc/ssl/squid /var/lib/squid -} - -pkg_postinst() { - if [[ -e ${EROOT}/usr/share/squid/errors.bak ]]; then - rm -rv "${EROOT}"/usr/share/squid/errors.bak - fi - - elog "A good starting point to debug Squid issues is to use 'squidclient mgr:' commands such as 'squidclient mgr:info'." - - if [[ ${#r} -gt 0 ]]; then - elog "You are using a release with the official ${r} patch! Make sure you mention that, or send the output of 'squidclient mgr:info' when asking for support." - fi -} -- cgit v1.2.3