#global commit c4b843473a75fb38ed5bf54e9d3cfb1cb3719efa

%{?commit:%global shortcommit %(c=%{commit}; echo ${c:0:7})}

%global stable 1

# We ship a .pc file but don't want to have a dep on pkg-config. We

# strip the automatically generated dep here and instead co-own the

# directory.

%global __requires_exclude pkg-config

%global pkgdir %{_prefix}/lib/systemd

%global system_unit_dir %{pkgdir}/system

%global user_unit_dir %{pkgdir}/user

%if 0%{?__isa_bits} == 64

%global elf_bits (64bit)

%global elf_suffix ()%{elf_bits}

%endif

# Bootstrap may be needed to break intercircular dependencies with

# cryptsetup, e.g. when re-building cryptsetup on a json-c SONAME-bump.

%bcond_with    bootstrap

%bcond_without tests

%bcond_without lto

# Support for quick builds with rpmbuild --build-in-place.

# See README.build-in-place.

%bcond_with    inplace

Name:           systemd

Url:            https://www.freedesktop.org/wiki/Software/systemd

%if %{without inplace}

Version:        249.6

Release:        2%{?dist}

%else

# determine the build information from local checkout

Version:        %(tools/meson-vcs-tag.sh . error | sed -r 's/-([0-9])/.^\1/; s/-g/_g/')

Release:        1

%endif

# For a breakdown of the licensing, see README

License:        LGPLv2+ and MIT and GPLv2+

Summary:        System and Service Manager

# download tarballs with "spectool -g systemd.spec"

%if %{defined commit}

Source0:        https://github.com/systemd/systemd%{?stable:-stable}/archive/%{commit}/%{name}-%{shortcommit}.tar.gz

%else

%if 0%{?stable}

Source0:        https://github.com/systemd/systemd-stable/archive/v%{version_no_tilde}/%{name}-%{version_no_tilde}.tar.gz

%else

Source0:        https://github.com/systemd/systemd/archive/v%{version_no_tilde}/%{name}-%{version_no_tilde}.tar.gz

%endif

%endif

# This file must be available before %%prep.

# It is generated during systemd build and can be found in build/src/core/.

Source1:        triggers.systemd

Source2:        split-files.py

Source3:        purge-nobody-user

# Prevent accidental removal of the systemd package

Source4:        yum-protect-systemd.conf

Source5:        inittab

Source6:        sysctl.conf.README

Source7:        systemd-journal-remote.xml

Source8:        systemd-journal-gatewayd.xml

Source9:        20-yama-ptrace.conf

Source10:       systemd-udev-trigger-no-reload.conf

Source11:       20-grubby.install

Source12:       systemd-user

Source13:       libsystemd-shared.abignore

Source14:       10-oomd-defaults.conf

Source15:       10-oomd-root-slice-defaults.conf

Source16:       10-oomd-user-service-defaults.conf

Source21:       macros.sysusers

Source22:       sysusers.attr

Source23:       sysusers.prov

Source24:       sysusers.generate-pre.sh

%if 0

GIT_DIR=../../src/systemd/.git git format-patch-ab --no-signature -M -N v235..v235-stable

i=1; for j in 00*patch; do printf "Patch%04d:      %s\n" $i $j; i=$((i+1));done|xclip

GIT_DIR=../../src/systemd/.git git diffab -M v233..master@{2017-06-15} -- hwdb/[67]* hwdb/parse_hwdb.py > hwdb.patch

%endif

# Backports of patches from upstream (0000–0499)

#

# Any patches which are "in preparation" upstream should be listed

# here, rather than in the next section. Packit CI will drop any

# patches in this range before applying upstream pull requests.

Patch0001:      0001-rpm-don-t-specify-the-full-path-for-systemctl-and-ot.patch

Patch0002:      0002-rpm-use-a-helper-script-to-actually-invoke-systemctl.patch

Patch0003:      0003-rpm-call-needs-restart-in-parallel.patch

Patch0004:      0004-rpm-restart-user-services-at-the-end-of-the-transact.patch

Patch0005:      0005-update-helper-also-add-user-reexec-verb.patch

Patch0006:      0006-update-helper-add-missing-loop-over-user-units.patch

# Downstream-only patches (5000–9999)

# https://bugzilla.redhat.com/show_bug.cgi?id=1738828

Patch0500:      use-bfq-scheduler.patch

# https://github.com/systemd/systemd/pull/17050

Patch0501:      https://github.com/systemd/systemd/pull/17050/commits/f58b96d3e8d1cb0dd3666bc74fa673918b586612.patch

%ifarch %{ix86} x86_64 aarch64

%global have_gnu_efi 1

%endif

BuildRequires:  gcc

BuildRequires:  gcc-c++

BuildRequires:  coreutils

BuildRequires:  libcap-devel

BuildRequires:  libmount-devel

BuildRequires:  libfdisk-devel

BuildRequires:  libpwquality-devel

BuildRequires:  pam-devel

BuildRequires:  libselinux-devel

BuildRequires:  audit-libs-devel

%if %{without bootstrap}

BuildRequires:  cryptsetup-devel

%endif

BuildRequires:  dbus-devel

BuildRequires:  /usr/sbin/sfdisk

# /usr/bin/getfacl is needed by test-acl-util

BuildRequires:  /usr/bin/getfacl

BuildRequires:  libacl-devel

BuildRequires:  gobject-introspection-devel

BuildRequires:  libblkid-devel

BuildRequires:  xz-devel

BuildRequires:  xz

BuildRequires:  lz4-devel

BuildRequires:  lz4

BuildRequires:  bzip2-devel

BuildRequires:  libzstd-devel

BuildRequires:  libidn2-devel

BuildRequires:  libcurl-devel

BuildRequires:  kmod-devel

BuildRequires:  elfutils-devel

BuildRequires:  openssl-devel

BuildRequires:  libgcrypt-devel

BuildRequires:  libgpg-error-devel

BuildRequires:  gnutls-devel

BuildRequires:  qrencode-devel

BuildRequires:  libmicrohttpd-devel

BuildRequires:  libxkbcommon-devel

BuildRequires:  iptables-devel

BuildRequires:  pkgconfig(libfido2)

BuildRequires:  pkgconfig(tss2-esys)

BuildRequires:  pkgconfig(tss2-rc)

BuildRequires:  pkgconfig(tss2-mu)

BuildRequires:  systemtap-sdt-devel

BuildRequires:  libxslt

BuildRequires:  docbook-style-xsl

BuildRequires:  pkgconfig

BuildRequires:  gperf

BuildRequires:  gawk

BuildRequires:  tree

BuildRequires:  hostname

BuildRequires:  python3dist(lxml)

BuildRequires:  python3dist(jinja2)

BuildRequires:  firewalld-filesystem

%if 0%{?have_gnu_efi}

BuildRequires:  gnu-efi gnu-efi-devel

%endif

BuildRequires:  libseccomp-devel

BuildRequires:  meson >= 0.43

BuildRequires:  gettext

# We use RUNNING_ON_VALGRIND in tests, so the headers need to be available

BuildRequires:  valgrind-devel

BuildRequires:  pkgconfig(bash-completion)

BuildRequires:  perl

BuildRequires:  perl(IPC::SysV)

Requires(post): coreutils

Requires(post): sed

Requires(post): acl

Requires(post): grep

# systemd-machine-id-setup requires libssl

Requires(post): openssl-libs

Requires(pre):  coreutils

Requires:       dbus >= 1.9.18

Requires:       %{name}-pam = %{version}-%{release}

Requires:       (%{name}-rpm-macros = %{version}-%{release} if rpm-build)

Requires:       %{name}-libs = %{version}-%{release}

%{?fedora:Recommends:     %{name}-networkd = %{version}-%{release}}

%{?fedora:Recommends:     %{name}-resolved = %{version}-%{release}}

Recommends:     diffutils

Requires:       (util-linux-core or util-linux)

Recommends:     libxkbcommon%{?_isa}

Provides:       /bin/systemctl

Provides:       /sbin/shutdown

Provides:       syslog

Provides:       systemd-units = %{version}-%{release}

Obsoletes:      system-setup-keyboard < 0.9

Provides:       system-setup-keyboard = 0.9

# systemd-sysv-convert was removed in f20: https://fedorahosted.org/fpc/ticket/308

Obsoletes:      systemd-sysv < 206

# self-obsoletes so that dnf will install new subpackages on upgrade (#1260394)

Obsoletes:      %{name} < 249~~

Provides:       systemd-sysv = 206

Conflicts:      initscripts < 9.56.1

%if 0%{?fedora}

Conflicts:      fedora-release < 23-0.12

%endif

Obsoletes:      timedatex < 0.6-3

Provides:       timedatex = 0.6-3

Conflicts:      %{name}-standalone-tmpfiles < %{version}-%{release}^

Obsoletes:      %{name}-standalone-tmpfiles < %{version}-%{release}^

Conflicts:      %{name}-standalone-sysusers < %{version}-%{release}^

Obsoletes:      %{name}-standalone-sysusers < %{version}-%{release}^

# Recommends to replace normal Requires deps for stuff that is dlopen()ed

Recommends:     libidn2.so.0%{?elf_suffix}

Recommends:     libidn2.so.0(IDN2_0.0.0)%{?elf_bits}

Recommends:     libpcre2-8.so.0%{?elf_suffix}

Recommends:     libpwquality.so.1%{?elf_suffix}

Recommends:     libpwquality.so.1(LIBPWQUALITY_1.0)%{?elf_bits}

Recommends:     libqrencode.so.4%{?elf_suffix}

%description

systemd is a system and service manager that runs as PID 1 and starts the rest

of the system. It provides aggressive parallelization capabilities, uses socket

and D-Bus activation for starting services, offers on-demand starting of

daemons, keeps track of processes using Linux control groups, maintains mount

and automount points, and implements an elaborate transactional dependency-based

service control logic. systemd supports SysV and LSB init scripts and works as a

replacement for sysvinit. Other parts of this package are a logging daemon,

utilities to control basic system configuration like the hostname, date, locale,

maintain a list of logged-in users, system accounts, runtime directories and

settings, and daemons to manage simple network configuration, network time

synchronization, log forwarding, and name resolution.

%if 0%{?stable}

This package was built from the %{version}-stable branch of systemd.

%endif

%package libs

Summary:        systemd libraries

License:        LGPLv2+ and MIT

Obsoletes:      libudev < 183

Obsoletes:      systemd < 185-4

Conflicts:      systemd < 185-4

Obsoletes:      systemd-compat-libs < 230

Obsoletes:      nss-myhostname < 0.4

Provides:       nss-myhostname = 0.4

Provides:       nss-myhostname%{_isa} = 0.4

Requires(post): coreutils

Requires(post): sed

Requires(post): grep

Requires(post): /usr/bin/getent

%description libs

Libraries for systemd and udev.

%package pam

Summary:        systemd PAM module

Requires:       %{name} = %{version}-%{release}

%description pam

Systemd PAM module registers the session with systemd-logind.

%package rpm-macros

Summary:        Macros that define paths and scriptlets related to systemd

BuildArch:      noarch

%description rpm-macros

Just the definitions of rpm macros.

See

https://docs.fedoraproject.org/en-US/packaging-guidelines/Scriptlets/#_systemd

for information how to use those macros.

%package devel

Summary:        Development headers for systemd

License:        LGPLv2+ and MIT

Requires:       %{name}-libs%{?_isa} = %{version}-%{release}

Provides:       libudev-devel = %{version}

Provides:       libudev-devel%{_isa} = %{version}

Obsoletes:      libudev-devel < 183

# Fake dependency to make sure systemd-pam is pulled into multilib (#1414153)

Requires:       %{name}-pam = %{version}-%{release}

%description devel

Development headers and auxiliary files for developing applications linking

to libudev or libsystemd.

%package udev

Summary: Rule-based device node and kernel event manager

License:        LGPLv2+

Requires:       systemd%{?_isa} = %{version}-%{release}

Requires(post):   systemd

Requires(preun):  systemd

Requires(postun): systemd

Requires(post): grep

Requires:       kmod >= 18-4

# https://bodhi.fedoraproject.org/updates/FEDORA-2020-dd43dd05b1

Obsoletes:      systemd < 245.6-1

Provides:       udev = %{version}

Provides:       udev%{_isa} = %{version}

Obsoletes:      udev < 183

# https://bugzilla.redhat.com/show_bug.cgi?id=1377733#c9

Suggests:       systemd-bootchart

# https://bugzilla.redhat.com/show_bug.cgi?id=1408878

Requires:       kbd

# https://bugzilla.redhat.com/show_bug.cgi?id=1753381

Provides:       u2f-hidraw-policy = 1.0.2-40

Obsoletes:      u2f-hidraw-policy < 1.0.2-40

%description udev

This package contains systemd-udev and the rules and hardware database needed to

manage device nodes. This package is necessary on physical machines and in

virtual machines, but not in containers.

%package container

# Name is the same as in Debian

Summary: Tools for containers and VMs

Requires:       %{name}%{?_isa} = %{version}-%{release}

Requires(post):   systemd

Requires(preun):  systemd

Requires(postun): systemd

# obsolete parent package so that dnf will install new subpackage on upgrade (#1260394)

Obsoletes:      %{name} < 229-5

License:        LGPLv2+

%description container

Systemd tools to spawn and manage containers and virtual machines.

This package contains systemd-nspawn, machinectl, systemd-machined, and

systemd-importd.

%package journal-remote

# Name is the same as in Debian

Summary:        Tools to send journal events over the network

Requires:       %{name}%{?_isa} = %{version}-%{release}

License:        LGPLv2+

Requires(pre):    /usr/bin/getent

Requires(post):   systemd

Requires(preun):  systemd

Requires(postun): systemd

Requires:       firewalld-filesystem

Provides:       %{name}-journal-gateway = %{version}-%{release}

Provides:       %{name}-journal-gateway%{_isa} = %{version}-%{release}

Obsoletes:      %{name}-journal-gateway < 227-7

%description journal-remote

Programs to forward journal entries over the network, using encrypted HTTP, and

to write journal files from serialized journal contents.

This package contains systemd-journal-gatewayd, systemd-journal-remote, and

systemd-journal-upload.

%package networkd

Summary:        System daemon that manages network configurations

Requires:       %{name}%{?_isa} = %{version}-%{release}

License:        LGPLv2+

# https://src.fedoraproject.org/rpms/systemd/pull-request/34

Obsoletes:      systemd < 246.6-2

%description networkd

systemd-networkd is a system service that manages networks. It detects and

configures network devices as they appear, as well as creating virtual network

devices.

%package resolved

Summary:        Network Name Resolution manager

Requires:       %{name}%{?_isa} = %{version}-%{release}

Obsoletes:      %{name} < 249~~

%description resolved

systemd-resolved is a system service that provides network name resolution to

local applications. It implements a caching and validating DNS/DNSSEC stub

resolver, as well as an LLMNR and MulticastDNS resolver and responder.

%package oomd-defaults

Summary:        Configuration files for systemd-oomd

Requires:       %{name} = %{version}-%{release}

License:        LGPLv2+

BuildArch:      noarch

%description oomd-defaults

A set of drop-in files for systemd units to enable action from systemd-oomd,

a userspace out-of-memory (OOM) killer.

%package tests

Summary:       Internal unit tests for systemd

Requires:      %{name}%{?_isa} = %{version}-%{release}

License:       LGPLv2+

%description tests

"Installed tests" that are usually run as part of the build system. They can be

useful to test systemd internals.

%package standalone-tmpfiles

Summary:       Standalone tmpfiles binary for use in non-systemd systems

RemovePathPostfixes: .standalone

%description standalone-tmpfiles

Standalone tmpfiles binary with no dependencies on the systemd-shared library or

other libraries from systemd-libs. This package conflicts with the main systemd

package and is meant for use in non-systemd systems.

%package standalone-sysusers

Summary:       Standalone sysusers binary for use in non-systemd systems

RemovePathPostfixes: .standalone

%description standalone-sysusers

Standalone sysusers binary with no dependencies on the systemd-shared library or

other libraries from systemd-libs. This package conflicts with the main systemd

package and is meant for use in non-systemd systems.

%prep

%autosetup -n %{?commit:%{name}%{?stable:-stable}-%{commit}}%{!?commit:%{name}%{?stable:-stable}-%{version_no_tilde}} -p1

%build

%define ntpvendor %(source /etc/os-release; echo ${ID})

%{!?ntpvendor: echo 'NTP vendor zone is not set!'; exit 1}

CONFIGURE_OPTS=(

        -Dmode=release

        -Dsysvinit-path=/etc/rc.d/init.d

        -Drc-local=/etc/rc.d/rc.local

        -Dntp-servers='0.%{ntpvendor}.pool.ntp.org 1.%{ntpvendor}.pool.ntp.org 2.%{ntpvendor}.pool.ntp.org 3.%{ntpvendor}.pool.ntp.org'

        -Ddns-servers=

        -Duser-path=/usr/local/bin:/usr/local/sbin:/usr/bin:/usr/sbin

        -Dservice-watchdog=

        -Ddev-kvm-mode=0666

        -Dkmod=true

        -Dxkbcommon=true

        -Dblkid=true

        -Dfdisk=true

        -Dseccomp=true

        -Dima=true

        -Dselinux=true

        -Dapparmor=false

        -Dpolkit=true

        -Dxz=true

        -Dzlib=true

        -Dbzip2=true

        -Dlz4=true

        -Dzstd=true

        -Dpam=true

        -Dacl=true

        -Dsmack=true

        -Dopenssl=true

        -Dp11kit=true

        -Dgcrypt=true

        -Daudit=true

        -Delfutils=true

        -Dlibcryptsetup=%[%{with bootstrap}?"false":"true"]

        -Delfutils=true

        -Dpwquality=true

        -Dqrencode=true

        -Dgnutls=true

        -Dmicrohttpd=true

        -Dlibidn2=true

        -Dlibiptc=true

        -Dlibcurl=true

        -Dlibfido2=true

        -Defi=true

        -Dgnu-efi=%[%{?have_gnu_efi}?"true":"false"]

        -Dtpm=true

        -Dtpm2=true

        -Dhwdb=true

        -Dsysusers=true

        -Dstandalone-binaries=true

        -Ddefault-kill-user-processes=false

        -Dtests=unsafe

        -Dinstall-tests=true

        -Dtty-gid=5

        -Dusers-gid=100

        -Dnobody-user=nobody

        -Dnobody-group=nobody

        -Dcompat-mutable-uid-boundaries=true

        -Dsplit-usr=false

        -Dsplit-bin=true

        -Db_lto=%[%{with lto}?"true":"false"]

        -Db_ndebug=false

        -Dman=true

        -Dversion-tag=v%{version}-%{release}

        -Dfallback-hostname=%[0%{?fedora}?"fedora":"localhost"]

        -Ddefault-dnssec=no

        -Ddefault-dns-over-tls=opportunistic

        # https://bugzilla.redhat.com/show_bug.cgi?id=1867830

        -Ddefault-mdns=no

        -Ddefault-llmnr=resolve

        -Doomd=true

        -Dadm-gid=4

        -Daudio-gid=63

        -Dcdrom-gid=11

        -Ddialout-gid=18

        -Ddisk-gid=6

        -Dinput-gid=104   # https://pagure.io/setup/pull-request/27

        -Dkmem-gid=9

        -Dkvm-gid=36

        -Dlp-gid=7

        -Drender-gid=105  # https://pagure.io/setup/pull-request/27

        -Dsgx-gid=106     # https://pagure.io/setup/pull-request/27

        -Dtape-gid=33

        -Dtty-gid=5

        -Dusers-gid=100

        -Dutmp-gid=22

        -Dvideo-gid=39

        -Dwheel-gid=10

        -Dsystemd-journal-gid=190

        -Dsystemd-network-uid=192

        -Dsystemd-resolve-uid=193

        # -Dsystemd-timesync-uid=, not set yet

)

%if %{without lto}

%global _lto_cflags %nil

%endif

# Do configuration. If doing an inplace build, try to do

# reconfiguration to pick up new options.

%if %{with inplace}

  command -v ccache 2>/dev/null && { CC="${CC:-ccache %__cc}"; CXX="${CXX:-ccache %__cxx}"; }

  [ -e %{_vpath_builddir}/build.ninja ] &&

  %__meson configure %{_vpath_builddir} "${CONFIGURE_OPTS[@]}" ||

%endif

{ %meson "${CONFIGURE_OPTS[@]}"; }

%meson_build

new_triggers=%{_vpath_builddir}/src/rpm/triggers.systemd.sh

if ! diff -u %{SOURCE1} ${new_triggers}; then

   echo -e "\n\n\nWARNING: triggers.systemd in Source1 is different!"

   echo -e "      cp $PWD/${new_triggers} %{SOURCE1}\n\n\n"

   sleep 5

fi

%install

%meson_install

# udev links

mkdir -p %{buildroot}/%{_sbindir}

ln -sf ../bin/udevadm %{buildroot}%{_sbindir}/udevadm

# Compatiblity and documentation files

touch %{buildroot}/etc/crypttab

chmod 600 %{buildroot}/etc/crypttab

# /etc/initab

install -Dm0644 -t %{buildroot}/etc/ %{SOURCE5}

# /etc/sysctl.conf compat

install -Dm0644 %{SOURCE6} %{buildroot}/etc/sysctl.conf

ln -s ../sysctl.conf %{buildroot}/etc/sysctl.d/99-sysctl.conf

# Make sure these directories are properly owned

mkdir -p %{buildroot}%{system_unit_dir}/basic.target.wants

mkdir -p %{buildroot}%{system_unit_dir}/default.target.wants

mkdir -p %{buildroot}%{system_unit_dir}/dbus.target.wants

mkdir -p %{buildroot}%{system_unit_dir}/syslog.target.wants

mkdir -p %{buildroot}/run

mkdir -p %{buildroot}%{_localstatedir}/log

touch %{buildroot}/run/utmp

touch %{buildroot}%{_localstatedir}/log/{w,b}tmp

# Make sure the user generators dir exists too

mkdir -p %{buildroot}%{pkgdir}/system-generators

mkdir -p %{buildroot}%{pkgdir}/user-generators

# Create new-style configuration files so that we can ghost-own them

touch %{buildroot}%{_sysconfdir}/hostname

touch %{buildroot}%{_sysconfdir}/vconsole.conf

touch %{buildroot}%{_sysconfdir}/locale.conf

touch %{buildroot}%{_sysconfdir}/machine-id

touch %{buildroot}%{_sysconfdir}/machine-info

touch %{buildroot}%{_sysconfdir}/localtime

mkdir -p %{buildroot}%{_sysconfdir}/X11/xorg.conf.d

touch %{buildroot}%{_sysconfdir}/X11/xorg.conf.d/00-keyboard.conf

# Make sure the shutdown/sleep drop-in dirs exist

mkdir -p %{buildroot}%{pkgdir}/system-shutdown/

mkdir -p %{buildroot}%{pkgdir}/system-sleep/

# Make sure directories in /var exist

mkdir -p %{buildroot}%{_localstatedir}/lib/systemd/coredump

mkdir -p %{buildroot}%{_localstatedir}/lib/systemd/catalog

mkdir -p %{buildroot}%{_localstatedir}/lib/systemd/backlight

mkdir -p %{buildroot}%{_localstatedir}/lib/systemd/rfkill

mkdir -p %{buildroot}%{_localstatedir}/lib/systemd/linger

mkdir -p %{buildroot}%{_localstatedir}/lib/private

mkdir -p %{buildroot}%{_localstatedir}/log/private

mkdir -p %{buildroot}%{_localstatedir}/cache/private

mkdir -p %{buildroot}%{_localstatedir}/lib/private/systemd/journal-upload

mkdir -p %{buildroot}%{_localstatedir}/lib/systemd/timesync

ln -s ../private/systemd/journal-upload %{buildroot}%{_localstatedir}/lib/systemd/journal-upload

mkdir -p %{buildroot}%{_localstatedir}/log/journal

touch %{buildroot}%{_localstatedir}/lib/systemd/catalog/database

touch %{buildroot}%{_sysconfdir}/udev/hwdb.bin

touch %{buildroot}%{_localstatedir}/lib/systemd/random-seed

touch %{buildroot}%{_localstatedir}/lib/systemd/timesync/clock

touch %{buildroot}%{_localstatedir}/lib/private/systemd/journal-upload/state

# Install yum protection fragment

install -Dm0644 %{SOURCE4} %{buildroot}/etc/dnf/protected.d/systemd.conf

install -Dm0644 -t %{buildroot}/usr/lib/firewalld/services/ %{SOURCE7} %{SOURCE8}

# Restore systemd-user pam config from before "removal of Fedora-specific bits"

install -Dm0644 -t %{buildroot}/etc/pam.d/ %{SOURCE12}

# Install additional docs

# https://bugzilla.redhat.com/show_bug.cgi?id=1234951

install -Dm0644 -t %{buildroot}%{_pkgdocdir}/ %{SOURCE9}

# https://bugzilla.redhat.com/show_bug.cgi?id=1378974

install -Dm0644 -t %{buildroot}%{system_unit_dir}/systemd-udev-trigger.service.d/ %{SOURCE10}

# A temporary work-around for https://bugzilla.redhat.com/show_bug.cgi?id=1663040

mkdir -p %{buildroot}%{system_unit_dir}/systemd-hostnamed.service.d/

cat >%{buildroot}%{system_unit_dir}/systemd-hostnamed.service.d/disable-privatedevices.conf <

[Service]

PrivateDevices=no

EOF

install -Dm0755 -t %{buildroot}%{_prefix}/lib/kernel/install.d/ %{SOURCE11}

install -Dm0644 -t %{buildroot}%{_prefix}/lib/systemd/ %{SOURCE13}

install -D -t %{buildroot}/usr/lib/systemd/ %{SOURCE3}

# systemd-oomd default configuration

install -Dm0644 -t %{buildroot}%{_prefix}/lib/systemd/oomd.conf.d/ %{SOURCE14}

install -Dm0644 -t %{buildroot}%{system_unit_dir}/-.slice.d/ %{SOURCE15}

install -Dm0644 -t %{buildroot}%{system_unit_dir}/user@.service.d/ %{SOURCE16}

sed -i 's|#!/usr/bin/env python3|#!%{__python3}|' %{buildroot}/usr/lib/systemd/tests/run-unit-tests.py

install -m 0644 -D -t %{buildroot}%{_rpmconfigdir}/macros.d/ %{SOURCE21}

install -m 0644 -D -t %{buildroot}%{_rpmconfigdir}/fileattrs/ %{SOURCE22}

install -m 0755 -D -t %{buildroot}%{_rpmconfigdir}/ %{SOURCE23}

install -m 0755 -D -t %{buildroot}%{_rpmconfigdir}/ %{SOURCE24}

%find_lang %{name}

# Split files in build root into rpms. See split-files.py for the

# rules towards the end, anything which is an exception needs a line

# here.

python3 %{SOURCE2} %buildroot <

%ghost %config(noreplace) /etc/crypttab

%ghost /etc/udev/hwdb.bin

/etc/inittab

/usr/lib/systemd/purge-nobody-user

%ghost %config(noreplace) /etc/vconsole.conf

%ghost %config(noreplace) /etc/X11/xorg.conf.d/00-keyboard.conf

%ghost %attr(0664,root,utmp) /run/utmp

%ghost %attr(0664,root,utmp) /var/log/wtmp

%ghost %attr(0660,root,utmp) /var/log/btmp

%ghost %config(noreplace) /etc/hostname

%ghost %config(noreplace) /etc/localtime

%ghost %config(noreplace) /etc/locale.conf

%ghost %attr(0444,root,root) %config(noreplace) /etc/machine-id

%ghost %config(noreplace) /etc/machine-info

%ghost %attr(0700,root,root) %dir /var/cache/private

%ghost %attr(0700,root,root) %dir /var/lib/private

%ghost %dir /var/lib/private/systemd

%ghost %dir /var/lib/private/systemd/journal-upload

%ghost /var/lib/private/systemd/journal-upload/state

%ghost %dir /var/lib/systemd/timesync

%ghost /var/lib/systemd/timesync/clock

%ghost %dir /var/lib/systemd/backlight

%ghost /var/lib/systemd/catalog/database

%ghost %dir /var/lib/systemd/coredump

%ghost /var/lib/systemd/journal-upload

%ghost %dir /var/lib/systemd/linger

%ghost /var/lib/systemd/random-seed

%ghost %dir /var/lib/systemd/rfkill

%ghost %dir %attr(2755, root, systemd-journal) %verify(not mode) /var/log/journal

%ghost %dir /var/log/journal/remote

%ghost %attr(0700,root,root) %dir /var/log/private

EOF

%check

%if %{with tests}

meson test -C %{_vpath_builddir} -t 6 --print-errorlogs

%endif

#############################################################################################

%include %{SOURCE1}

%post

systemd-machine-id-setup &>/dev/null || :

# FIXME: move to %postun. We want to restart systemd *after* removing

# files from the old rpm. Right now we may still have bits the old

# setup if the files are not present in the new version. But before

# implement restarting of *other* services after the transaction, moving

# this would make things worse, increasing the number of warnings we get

# about needed daemon-reload.

oomd_state=$(systemctl is-active systemd-oomd 2>/dev/null || :)

# Work-around for #1931034. Remove after F34 is released.

if [ "$oomd_state" == "active" ]; then

   systemctl stop -q systemd-oomd 2>/dev/null || :

fi

systemctl daemon-reexec &>/dev/null || {

  # systemd v239 had bug #9553 in D-Bus authentication of the private socket,

  # which was later fixed in v240 by #9625.

  #

  # The end result is that a `systemctl daemon-reexec` call as root will fail

  # when upgrading from systemd v239, which means the system will not start

  # running the new version of systemd after this post install script runs.

  #

  # To work around this issue, let's fall back to using a `kill -TERM 1` to

  # re-execute the daemon when the `systemctl daemon-reexec` call fails.

  #

  # In order to prevent issues when the reason why the daemon-reexec failed is

  # not the aforementioned bug, let's only use this fallback when:

  #   - we're upgrading this RPM package; and

  #   - we confirm that systemd is running as PID1 on this system.

  if [ $1 -gt 1 ] && [ -d /run/systemd/system ] ; then

    kill -TERM 1 &>/dev/null || :

  fi

}

if [ "$oomd_state" == "active" ]; then

   systemctl start -q systemd-oomd 2>/dev/null || :

fi

[ $1 -eq 1 ] || exit 0

# create /var/log/journal only on initial installation,

# and only if it's writable (it won't be in rpm-ostree).

[ -w %{_localstatedir} ] && mkdir -p %{_localstatedir}/log/journal

[ -w %{_localstatedir} ] && journalctl --update-catalog || :

systemd-sysusers || :

systemd-tmpfiles --create &>/dev/null || :

# We reset the enablement of all services upon initial installation

# https://bugzilla.redhat.com/show_bug.cgi?id=1118740#c23

# This will fix up enablement of any preset services that got installed

# before systemd due to rpm ordering problems:

# https://bugzilla.redhat.com/show_bug.cgi?id=1647172.

# We also do this for user units, see

# https://fedoraproject.org/wiki/Changes/Systemd_presets_for_user_units.

systemctl preset-all &>/dev/null || :

systemctl --global preset-all &>/dev/null || :

%postun

if [ $1 -eq 1 ]; then

   [ -w %{_localstatedir} ] && journalctl --update-catalog || :

   systemd-tmpfiles --create &>/dev/null || :

fi

%systemd_postun_with_restart systemd-timedated.service systemd-portabled.service systemd-homed.service systemd-hostnamed.service systemd-journald.service systemd-localed.service systemd-userdbd.service systemd-oomd.service

# FIXME: systemd-logind.service is excluded (https://github.com/systemd/systemd/pull/17558)

# FIXME: user@*.service needs to be restarted, but using systemctl --user daemon-reexec

%triggerun resolved -- systemd < 246.1-1

# This is for upgrades from previous versions before systemd-resolved became the default.

systemctl --no-reload preset systemd-resolved.service &>/dev/null || :

if systemctl -q is-enabled systemd-resolved.service &>/dev/null; then

  systemctl -q is-enabled NetworkManager.service 2>/dev/null && \

  ! test -L /etc/resolv.conf 2>/dev/null && \

  ! mountpoint /etc/resolv.conf &>/dev/null && \

  grep -q 'Generated by NetworkManager' /etc/resolv.conf 2>/dev/null && \

  echo -e '/etc/resolv.conf was generated by NetworkManager.\nRemoving it to let systemd-resolved manage this file.' && \

  mv -v /etc/resolv.conf /etc/resolv.conf.orig-with-nm && \

  ln -sv ../run/systemd/resolve/stub-resolv.conf /etc/resolv.conf 2>/dev/null || :

  systemctl start systemd-resolved.service &>/dev/null || :

fi

%triggerpostun -- systemd < 247.3-2

# This is for upgrades from previous versions before oomd-defaults is available.

# We use %%triggerpostun here because rpm doesn't allow a second %%triggerun with

# a different package version.

systemctl --no-reload preset systemd-oomd.service &>/dev/null || :

%post libs

%{?ldconfig}

function mod_nss() {

    if [ -f "$1" ] ; then

        # Add nss-systemd to passwd and group

        grep -E -q '^(passwd|group):.* systemd' "$1" ||

        sed -i.bak -r -e '

                s/^(passwd|group):(.*)/\1:\2 systemd/

                ' "$1" &>/dev/null || :

        # Add nss-resolve to hosts

        if grep -E -q '^hosts:.* resolve' "$1"; then

            sed -i.bak -r -e '

                s/^(hosts):(.*) files( .*) myhostname dns/\1:\2 files myhostname\3 dns/

                ' "$1" &>/dev/null || :

        else

            sed -i.bak -r -e '

                s/^(hosts):(.*) files( mdns4_minimal .NOTFOUND=return.)? dns myhostname/\1:\2 files myhostname\3 resolve [!UNAVAIL=return] dns/

                ' "$1" &>/dev/null || :

        fi

    fi

}

FILE="$(readlink /etc/nsswitch.conf || echo /etc/nsswitch.conf)"

if [ "$FILE" = "/etc/authselect/nsswitch.conf" ] && authselect check &>/dev/null; then

        mod_nss "/etc/authselect/user-nsswitch.conf"

        authselect apply-changes &> /dev/null || :

else

        mod_nss "$FILE"

        # also apply the same changes to user-nsswitch.conf to affect

        # possible future authselect configuration

        mod_nss "/etc/authselect/user-nsswitch.conf"

fi

# check if nobody or nfsnobody is defined

export SYSTEMD_NSS_BYPASS_SYNTHETIC=1

if getent passwd nfsnobody &>/dev/null; then

   test -f /etc/systemd/dont-synthesize-nobody || {

       echo 'Detected system with nfsnobody defined, creating /etc/systemd/dont-synthesize-nobody'

       mkdir -p /etc/systemd || :

       : >/etc/systemd/dont-synthesize-nobody || :

   }

elif getent passwd nobody 2>/dev/null | grep -v 'nobody:[x*]:65534:65534:.*:/:/sbin/nologin' &>/dev/null; then

   test -f /etc/systemd/dont-synthesize-nobody || {

       echo 'Detected system with incompatible nobody defined, creating /etc/systemd/dont-synthesize-nobody'

       mkdir -p /etc/systemd || :

       : >/etc/systemd/dont-synthesize-nobody || :

   }

fi

%{?ldconfig:%postun libs -p %ldconfig}

%global udev_services systemd-udev{d,-settle,-trigger}.service systemd-udevd-{control,kernel}.socket systemd-timesyncd.service

%post udev

# Move old stuff around in /var/lib

mv %{_localstatedir}/lib/random-seed %{_localstatedir}/lib/systemd/random-seed &>/dev/null

mv %{_localstatedir}/lib/backlight %{_localstatedir}/lib/systemd/backlight &>/dev/null

if [ -L %{_localstatedir}/lib/systemd/timesync ]; then

    rm %{_localstatedir}/lib/systemd/timesync

    mv %{_localstatedir}/lib/private/systemd/timesync %{_localstatedir}/lib/systemd/timesync

fi

if [ -f %{_localstatedir}/lib/systemd/clock ] ; then

    mkdir -p %{_localstatedir}/lib/systemd/timesync

    mv %{_localstatedir}/lib/systemd/clock %{_localstatedir}/lib/systemd/timesync/.

fi

udevadm hwdb --update &>/dev/null

%systemd_post %udev_services

# Try to save the random seed, but don't complain if /dev/urandom is unavailable

/usr/lib/systemd/systemd-random-seed save 2>&1 | \

    grep -v 'Failed to open /dev/urandom' || :

# Replace obsolete keymaps