File nginx.spec of Package nginx - j0ke.net Open Build Service

File nginx.spec of Package nginx (Revision fb76981ba5f131c6c10be8fc587e34f4)

Currently displaying revision fb76981ba5f131c6c10be8fc587e34f4, show latest

%define nginx_user      nginx
%define nginx_group     %{nginx_user}
%define nginx_home      %{_localstatedir}/lib/nginx
%define nginx_home_tmp  %{nginx_home}/tmp
%define nginx_logdir    %{_localstatedir}/log/nginx
%define nginx_confdir   %{_sysconfdir}/nginx
%define nginx_datadir   %{_datadir}/nginx
%define nginx_webroot   %{nginx_datadir}/html

%define rtmp_ext                nginx-rtmp-module
%define rtmp_ext_version        1.1.6
%define rtmp                    %{rtmp_ext}-%{rtmp_ext_version}
%define rtmp_nover              %{rtmp_ext}
%define with_rtmp_ext           1

%define nps_version		1.9.32.3
%define slowfs_version		1.5
#%define waf_version		2.8.0
%define openssl_version        	1.0.2g
%define ngxpurge_version	2.3

%define custoptflags "-g -O2 -fstack-protector --param=ssp-buffer-size=4 -Wformat -Werror=format-security -Wp,-D_FORTIFY_SOURCE=2 -m64 -mtune=native \
					  -mfpmath=sse -pipe -Wall -fexceptions -grecord-gcc-switches -fPIE -Wno-sign-compare -Wno-string-plus-int -Wno-deprecated-declarations \
					  -Wno-unused-parameter -Wno-unused-const-variable -Wno-conditional-uninitialized -Wno-mismatched-tags -Wno-c++11-extensions \
 					  -Wno-sometimes-uninitialized -Wno-parentheses-equality -Wno-tautological-compare -Wno-self-assign -Wno-deprecated-register \
					  -Wno-deprecated -Wno-invalid-source-encoding -Wno-pointer-sign -Wno-parentheses -Wno-enum-conversion"

Name:           nginx
Version:        1.9.12
Release:        1
Summary:        Robust, small and high performance http and reverse proxy server
Group:          System Environment/Daemons

License:        BSD
URL:            http://nginx.net/ 
BuildRoot:      %{_tmppath}/%{name}-%{version}-root

Provides: webserver

BuildRequires:      pcre-devel
BuildRequires:      zlib-devel
BuildRequires:      openssl-devel
BuildRequires:      perl(ExtUtils::Embed)
BuildRequires:      libxml2-devel
BuildRequires:      libxslt-devel
BuildRequires:      gd-devel
BuildRequires:	    GeoIP-devel

Requires:           pcre
Requires:	    zlib
Requires:	    openssl
Requires:	    libxml2
Requires:	    libxslt
Requires:	    gd
Requires:           perl(:MODULE_COMPAT_%(eval "`%{__perl} -V:version`"; echo $version))
Requires:	    GeoIP

Requires(pre):      shadow-utils
Requires(post):     chkconfig
Requires(preun):    chkconfig, initscripts
Requires(postun):   initscripts

Source0:    http://sysoev.ru/nginx/nginx-%{version}.tar.gz
Source1:    %{name}.init
Source2:    %{name}.logrotate
Source3:    virtual.conf
Source4:    ssl.conf
Source5:    nginx-upstream-fair.tgz
Source6:    upstream-fair.conf
Source7:    %{name}.sysconfig
Source8:    ngx_slowfs_cache-%{slowfs_version}.tar.gz
Source9:    Nginx-limit-traffic-rate-module.tar.gz
Source10:   %{rtmp}.tar.gz
Source11:   nginx_upstream_check_module-master.tar.gz
Source12:   openssl-%{openssl_version}.tar.gz
Source13:   nginx-munin.tar.gz
Source14:   release-%{nps_version}-beta.zip
Source15:   %{nps_version}.tar.gz
Source16:   ngx_cache_purge-%{ngxpurge_version}.tar.gz

Source100:  index.html
Source101:  poweredby.png
Source102:  nginx-logo.png
Source103:  50x.html
Source104:  404.html
Source105:  ssl-ciphersample
Source106:  pagespeed.conf

Patch0:     nginx-auto-cc-gcc.patch
Patch1:     nginx-conf-0.7.x.patch
#Patch2:	    check_1.7.5+.patch
Patch3:	    openssl-rc4tilt.patch
Patch4:     openssl__chacha20_poly1305_draft_and_rfc_ossl102g.patch

%description
Nginx [engine x] is an HTTP(S) server, HTTP(S) reverse proxy and IMAP/POP3
proxy server written by Igor Sysoev.

Several 3rd Party Extensions added

%prep
%setup -q

%patch0 -p0
%patch1 -p0
#%patch2 -p1
%{__tar} zxvf %{SOURCE5}
%{__tar} zxvf %{SOURCE9}
%{__tar} zxvf %{SOURCE10}
#%{__tar} zxvf %{SOURCE11}
%{__tar} zxvf %{SOURCE12}
%{__tar} zxvf %{SOURCE13}
%{__tar} zxvf %{SOURCE16}

pwd
sleep 5s

cd openssl-%{openssl_version}
%patch4 -p1 
./config threads shared enable-ec_nistp_64_gcc_128 -Wl,-rpath=/usr/local/ssl/lib -fPIC -DOPENSSL_PIC -DOPENSSL_THREADS -D_REENTRANT \ 
-DDSO_DLFCN -DHAVE_DLFCN_H -m64 -DL_ENDIAN -g -O2 -fstack-protector-strong -Wformat -Werror=format-security -Wdate-time \
-D_FORTIFY_SOURCE=2 -Wl,-Bsymbolic-functions -Wl,-z,relro -Wall -DMD32_REG_T=int -DOPENSSL_IA32_SSE2 -DOPENSSL_BN_ASM_MONT \
-DOPENSSL_BN_ASM_MONT5 -DOPENSSL_BN_ASM_GF2m -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DMD5_ASM -DAES_ASM -DVPAES_ASM -DBSAES_ASM \
-DWHIRLPOOL_ASM -DGHASH_ASM -DECP_NISTZ256_ASM
%make depend

%if 0%{?rhel_version} == 700 || 0%{?centos_version} == 700

cd %{_builddir}/nginx-%{version}/
%{__unzip} -o %{SOURCE14}
if [ $? -ne 0 ]; then
  exit $?
fi

cd ngx_pagespeed-release-%{nps_version}-beta
%{__tar} xzf %{SOURCE15}
if [ $? -ne 0 ]; then
  exit $?
fi
chmod -Rf a+rX,u+w,g-w,o-w .

%endif

%build
export DESTDIR=%{buildroot}
./configure \
    --user=%{nginx_user} \
    --group=%{nginx_group} \
    --prefix=%{nginx_datadir} \
    --sbin-path=%{_sbindir}/%{name} \
    --conf-path=%{nginx_confdir}/%{name}.conf \
    --error-log-path=%{nginx_logdir}/error.log \
    --http-log-path=%{nginx_logdir}/access.log \
    --http-client-body-temp-path=%{nginx_home_tmp}/client_body \
    --http-proxy-temp-path=%{nginx_home_tmp}/proxy \
    --http-fastcgi-temp-path=%{nginx_home_tmp}/fastcgi \
    --pid-path=%{_localstatedir}/run/%{name}.pid \
    --lock-path=%{_localstatedir}/lock/subsys/%{name} \
    --with-http_ssl_module  \
    --with-http_v2_module \
    --with-http_realip_module \
    --with-http_addition_module \
    --with-http_xslt_module \
    --with-http_image_filter_module \
    --with-http_geoip_module \
    --with-http_sub_module \
    --with-http_dav_module \
    --with-http_flv_module \
    --with-http_mp4_module \
    --with-http_gunzip_module \
    --with-http_gzip_static_module \
    --with-http_auth_request_module \
    --with-http_random_index_module \
    --with-http_secure_link_module \
    --with-http_degradation_module \
    --with-http_stub_status_module \
    --with-stream \
    --with-stream_ssl_module \
    --with-threads \
    --with-libatomic \
    --with-pcre-jit \
    --with-pcre \
    --with-debug \
    --with-ipv6 \
    --with-http_slice_module \
    --with-ld-opt="-Wl,-z,relro,-z,now -Wl,-rpath -Wl,-Bsymbolic-functions -Wl,--as-needed -fPIE" \
    --with-openssl=%{_builddir}/nginx-%{version}/openssl-%{openssl_version} \
    --with-openssl-opt=enable-ec_nistp_64_gcc_128 \
    --with-file-aio \
    --add-module=%{_builddir}/nginx-%{version}/Nginx-limit-traffic-rate-module \
    --add-module=%{_builddir}/nginx-%{version}/ngx_cache_purge-2.3 \
%if 0%{?rhel_version} == 700 || 0%{?centos_version} == 700
    --add-module=%{_builddir}/nginx-%{version}/ngx_pagespeed-release-%{nps_version}-beta \
    --with-threads \
%endif
%if 0%{with_rtmp_ext}
    --add-module=%{_builddir}/nginx-%{version}/%{rtmp} \
%endif
    --with-mail \
    --with-mail_ssl_module

make

mv nginx-upstream-fair/README nginx-upstream-fair/README.nginx-upstream-fair

%install
rm -rf %{buildroot}
make install DESTDIR=%{buildroot} INSTALLDIRS=vendor
find %{buildroot} -type f -name .packlist -exec rm -f {} \;
find %{buildroot} -type f -name perllocal.pod -exec rm -f {} \;
find %{buildroot} -type f -empty -exec rm -f {} \;
find %{buildroot} -type f -exec chmod 0644 {} \;
find %{buildroot} -type f -name '*.so' -exec chmod 0755 {} \;
chmod 0755 %{buildroot}%{_sbindir}/nginx
%{__install} -p -D -m 0755 %{SOURCE1} %{buildroot}%{_initrddir}/%{name}
%{__install} -p -D -m 0644 %{SOURCE2} %{buildroot}%{_sysconfdir}/logrotate.d/%{name}
%{__install} -p -D -m 0644 %{SOURCE7} %{buildroot}%{_sysconfdir}/sysconfig/%{name}
%{__install} -p -d -m 0755 %{buildroot}%{nginx_confdir}/conf.d
%{__install} -p -m 0644 %{SOURCE3} %{SOURCE4} %{SOURCE6} %{buildroot}%{nginx_confdir}/conf.d

%if 0%{?rhel_version} == 700 || 0%{?centos_version} == 700
%{__install} -p -m 0644 %{SOURCE106} %{buildroot}%{nginx_confdir}/conf.d
%endif

%{__install} -p -m 0644 %{SOURCE105} %{buildroot}%{nginx_confdir}
%{__install} -p -d -m 0755 %{buildroot}%{nginx_home_tmp}
%{__install} -p -d -m 0755 %{buildroot}%{nginx_logdir}
%{__install} -p -d -m 0755 %{buildroot}%{nginx_webroot}
%{__install} -p -m 0644 %{SOURCE100} %{SOURCE101} %{SOURCE102} %{SOURCE103} %{SOURCE104} %{buildroot}%{nginx_webroot}

# convert to UTF-8 all files that give warnings.
for textfile in CHANGES
do
    mv $textfile $textfile.old
    iconv --from-code ISO8859-1 --to-code UTF-8 --output $textfile $textfile.old
    rm -f $textfile.old
done

%clean
rm -rf %{buildroot}

%pre
%{_sbindir}/useradd -c "Nginx user" -s /bin/false -r -d %{nginx_home} %{nginx_user} 2>/dev/null || :

%post
/sbin/chkconfig --add %{name}

%preun
if [ $1 = 0 ]; then
    /sbin/service %{name} stop >/dev/null 2>&1
    /sbin/chkconfig --del %{name}
fi

%postun
if [ $1 -ge 1 ]; then
    /sbin/service %{name} condrestart > /dev/null 2>&1 || :
fi

%files
%defattr(-,root,root,-)
%doc LICENSE CHANGES README nginx-upstream-fair/README.nginx-upstream-fair
%{nginx_datadir}/
%{_sbindir}/%{name}
%{_initrddir}/%{name}
%dir %{nginx_confdir}
%dir %{nginx_confdir}/conf.d
%config(noreplace) %{nginx_confdir}/conf.d/*.conf
%config(noreplace) %{nginx_confdir}/win-utf
%config(noreplace) %{nginx_confdir}/%{name}.conf.default
%config(noreplace) %{nginx_confdir}/mime.types.default
%config(noreplace) %{nginx_confdir}/fastcgi_params
%config(noreplace) %{nginx_confdir}/fastcgi_params.default
%config(noreplace) %{nginx_confdir}/fastcgi.conf
%config(noreplace) %{nginx_confdir}/fastcgi.conf.default
%config(noreplace) %{nginx_confdir}/scgi_params
%config(noreplace) %{nginx_confdir}/scgi_params.default
%config(noreplace) %{nginx_confdir}/uwsgi_params           
%config(noreplace) %{nginx_confdir}/uwsgi_params.default
%config(noreplace) %{nginx_confdir}/koi-win
%config(noreplace) %{nginx_confdir}/koi-utf
%config(noreplace) %{nginx_confdir}/%{name}.conf
%config(noreplace) %{nginx_confdir}/mime.types
%config(noreplace) %{_sysconfdir}/logrotate.d/%{name}
%config(noreplace) %{_sysconfdir}/sysconfig/%{name}
%config %{nginx_confdir}/ssl-ciphersample
#%dir %{perl_vendorarch}/auto/%{name}
#%{perl_vendorarch}/%{name}.pm
#%{perl_vendorarch}/auto/%{name}/%{name}.so
%attr(-,%{nginx_user},%{nginx_group}) %dir %{nginx_home}
%attr(-,%{nginx_user},%{nginx_group}) %dir %{nginx_home_tmp}
%attr(-,%{nginx_user},%{nginx_group}) %dir %{nginx_logdir}

%changelog
* Sun Mar 05 2016 Juergen Gotteswinter <jg@internetx.com> - 1.9.12-1
- 1.9.12 bump
- enabled http splice module

* Tue Dec 08 2015 Juergen Gotteswinter <jg@internetx.com> - 1.9.7-1
- version bump 1.9.7
- enabled http2
- enabled thread pool support

* Wed May 12 2015 Juergen Gotteswinter <jg@internetx.com> - 1.9.1-1
- Version Bump 1.9.1 Codename Putin

* Wed May 12 2015 Juergen Gotteswinter <jg@internetx.com> - 1.9.0-1
- moved on to the current stable mainline tree 1.9.x
- enabled stream module (appeared in 1.9.0) - simple tcp proxy feature

* Wed Mar 25 2015 Juergen Gotteswinter <jg@internetx.com> - 1.7.11-1
- pushed bundled openssl to latest 1.0.2
- enabled thread pool support (appeared in 1.7.11)
- updated rtmp module to latest git (previous version does not build with 1.7.11)

* Thu Dec 31 2014 Juergen Gotteswinter <jg@internetx.com> - 1.7.9-2
- added nginx pagespeed module - rhel/centos 7.x only
- added nginx pagespeed sample config
- enabled complete mainline module tree, except mail* support

* Thu Dec 31 2014 Juergen Gotteswinter <jg@internetx.com> - 1.7.9-1
- bumped to 1.7.9
- fixed check upstream module + patch
- 2014 byebye version bump
 
* Thu Dec 02 2014 Juergen Gotteswinter <jg@internetx.com> - 1.7.8-1
- bumped to 1.7.8

* Thu Nov 13 2014 Juergen Gotteswinter <jg@internetx.com> - 1.7.7-1
- bumped to 1.7.7

* Thu Oct 23 2014 Juergen Gotteswinter <jg@internetx.com> - 1.7.6-1
- added openssl source - nginx got built static against current vanilla openssl
- enabled additional mainline modules
- added patch to get rid of rc4 
- bumped to 1.7.6

* Fri Jun 28 2014 Juergen Gotteswinter <jg@internetx.com> - 1.7.3-1
- bump to 1.7.3

* Fri Apr 26 2014 Juergen Gotteswinter <jg@internetx.com> - 1.6.0-2
- added nginx-statsd module

* Fri Apr 26 2014 Juergen Gotteswinter <jg@internetx.com> - 1.6.0-1
- pushed to new stable branch 1.6

* Fri Apr 12 2014 Juergen Gotteswinter <jg@internetx.com> - 1.4.7-2
- added patch to log heartbleed attacks

* Tue Apr 03 2014 Juergen Gotteswinter <jg@internetx.com> - 1.4.7-1
- bump to 1.4.7

* Wed Nov 20 2013 Juergen Gotteswinter <jg@internetx.com> - 1.4.4-1
- https://bugzilla.redhat.com/show_bug.cgi?id=1032266

* Tue Oct 08 2013 Carsten Schoene <cs@linux-administrator.com> - 1.4.3-1
- update nginx to 1.4.3
- update rtmp module to 1.0.5

* Sun Aug 04 2013 Carsten Schoene <cs@linux-administrator.com> - 1.4.2-2
- update rtmp module to 1.0.2

* Wed Jul 17 2013 Carsten Schoene <cs@linux-administrator.com> - 1.4.2-1
- update nginx to 1.4.2

* Sat Jun 29 2013 Carsten Schoene <cs@linux-administrator.com> - 1.4.1-4
- update rtmp module to 1.0.1

* Sat May 25 2013 Carsten Schoene <cs@linux-administrator.com> - 1.4.1-3
- update rtmp module to 0.9.20

* Mon May 13 2013 Carsten Schoene <cs@linux-administrator.com> - 1.4.1-2
- update rtmp module to 0.9.19

* Fri May 10 2013 Juergen Gotteswinter <jg@internetx.de> - 1.4.1-1
- version bump to latest stable 1.4.1

* Fri Apr 26 2013 Carsten Schoene <cs@linux-administrator.com> - 1.2.7-2
- update rtmp module to 0.9.18

* Sun Apr 14 2013 Carsten Schoene <cs@linux-administrator.com> - 1.2.7-4
- update nginx to 1.2.7
- update rtmp module to 0.9.14

* Mon Mar 04 2013 Carsten Schoene <cs@linux-administrator.com> - 1.2.7-3
- update rtmp module to 0.9.11

* Thu Feb 28 2013 Carsten Schoene <cs@linux-administrator.com> - 1.2.7-2
- update rtmp module to 0.9.8

* Tue Feb 12 2013 Carsten Schoene <cs@linux-administrator.com> - 1.2.7-1
- update nginx to 1.2.7
- update rtmp module to 0.9.7

* Fri Jan 25 2013 Carsten Schoene <cs@linux-administrator.com> - 1.2.6-4
- update rtmp module to 0.9.1

* Wed Jan 16 2013 Carsten Schoene <cs@linux-administrator.com> - 1.2.6-3
- update rtmp module to 0.9.0

* Sat Jan 12 2013 Carsten Schoene <cs@linux-administrator.com> - 1.2.6-2
- added rtmp 0.8.7 module

* Tue Dec 11 2012 Carsten Schoene <cs@linux-administrator.com> - 1.2.6-1
- update to release 1.2.6

* Tue Nov 13 2012 Carsten Schoene <cs@linux-administrator.com> - 1.2.5-1
- update to release 1.2.5

* Mon Oct 04 2010 Juergen Gotteswinter <jg at internetx.de> 0.8.52-1
- update to latest stable branch

* Wed Nov 17 2009 Juergen Gotteswinter <jg at internetx.de> 0.7.64-1

- version bump to 0.7.64

* Wed Oct 28 2009 Juergen Gotteswinter <jg at internetx.de> 0.7.63-1

- version bump to 0.7.63

* Fri Oct 23 2009 Juergen Gotteswinter <jg at internetx.de> 0.7.62-3
- included nginx-socket-patch for unix socket support