app-admin/vault: security bump.
authorRobin H. Johnson <robbat2@gentoo.org>
Tue, 21 Feb 2017 20:44:23 +0000 (12:44 -0800)
committerRobin H. Johnson <robbat2@gentoo.org>
Tue, 21 Feb 2017 20:49:22 +0000 (12:49 -0800)
See 0.6.4 release notes for notes about the security changes, as manual
actions may be required in addition to the upgrade.

See-Also: https://www.vaultproject.io/docs/install/upgrade-to-0.6.4.html
Package-Manager: portage-2.3.3
Signed-off-by: Robin H. Johnson <robbat2@gentoo.org>
app-admin/vault/Manifest
app-admin/vault/files/vault.initd
app-admin/vault/vault-0.5.3.ebuild
app-admin/vault/vault-0.6.2.ebuild
app-admin/vault/vault-0.6.5.ebuild [new file with mode: 0644]

index d18a5bade7eb529bb565ff4935fb566aef1a42ee..a013336805fa089f43d6102f2b4316b541cd015d 100644 (file)
@@ -2,3 +2,4 @@ DIST gox-c9740af9c6574448fd48eb30a71f964014c7a837.tar.gz 15772 SHA256 826666828f
 DIST iochan-87b45ffd0e9581375c491fef3d32130bb15c5bd7.tar.gz 1785 SHA256 71c117246bb1d4d78ad5c3bc5d301942bcebaae5b1e35da1ad7851ceac71a675 SHA512 2efc0e3cbca496240e3e24550fd0d2aab742eb9b227230ff1ed4ee47344b994642b028bd4644cd45cd697f5f5ef6a729aad65537b10c6555bd52d9ca4b9c717c WHIRLPOOL 15dfd50bfc992a7b6a1b5d672d5bf9bfcb71a357eae371eac773e7fe9ad4ec8d4d0578e0dc6b12bb14689d1497129616b0eb300bbcb483a6865ac315bced562a
 DIST vault-0.5.3.tar.gz 3591764 SHA256 b312f3d098ebabd4ed7647cf54bc219a0d2afeba49ee8b614a38e455900b2dae SHA512 d0706e045a674aab81c09d9c75d089896e44162bbeece7a92e03eb605997617ba3f8a4d7eeac65c40c4b68d8ea4bb76b3f3893d57466d83d9db6ca5e37ccb05e WHIRLPOOL a1893985d8acb788702fa3d5ce89b05179be23fab03e6fe34249c7554cacc5836bb6b0fc10c1aac8446dd7374c6c5df1abc58990104a59b63ec4f552160fbeea
 DIST vault-0.6.2.tar.gz 4862801 SHA256 295197e8ec7d03d4e141733579250ed653b13862a2d83dfd0d11a6e82f28b436 SHA512 5d444c32ee1dc464f9210331ed26ab56b9aaeb5fbdcb5c2fcc4d9363c6d1e60780d7c2f5020ebc3345fb8c3f32b3b8f8acc58533d5a036202685252b2affbe3e WHIRLPOOL d378f57598f6a9e8ce2e0a92382c2496ef1d78a714d3666d12b53760043e97b9eab4eea291a99745af59efcd2323907885d228f43a2154252ab2da1d47592a38
+DIST vault-0.6.5.tar.gz 5628341 SHA256 ef4c2fffbc80e126e027e76b30e37351fcaf0baf1178e1fba0e8912276441c00 SHA512 3a135281a2135aae45e9a659b0492d37069b080f42956f8a1fdbf842a8a1e54b474b7c5b48c0e6170b206fdb52da7a718a9702d5a14d3aa99f8e560839268374 WHIRLPOOL 9b2b564cefd1a1bd2858b3b34937314437f6b5dc5fd183f4be58d0517b75465064a860054102a286fd29ae5bb1cb2ba7b0c8b7ff7d52c911905c0ccedc053fd8
index 0d473fc26bb9b9882082a6a5e0def8bb5ed27b72..584038115192f7e0e0aa480f3b7321aab141e5a1 100644 (file)
@@ -1,5 +1,5 @@
 #!/sbin/openrc-run
-# Copyright 2015 Gentoo Foundation
+# Copyright 2015-2017 Gentoo Foundation
 # Distributed under the terms of the GNU General Public License v2
 # $Id$
 
index 31c138aaebbc9c3ae660d1e902a79e087873ea11..973cbcf3ad2be2c0b08974e4292796bc0dbc5806 100644 (file)
@@ -1,4 +1,4 @@
-# Copyright 1999-2016 Gentoo Foundation
+# Copyright 1999-2017 Gentoo Foundation
 # Distributed under the terms of the GNU General Public License v2
 # $Id$
 
index 48720ff886a2b189d33e7962a2ecd4354f379311..b9b2b5375ce48d45e7c66e82a288c706791d3698 100644 (file)
@@ -1,4 +1,4 @@
-# Copyright 1999-2016 Gentoo Foundation
+# Copyright 1999-2017 Gentoo Foundation
 # Distributed under the terms of the GNU General Public License v2
 # $Id$
 
diff --git a/app-admin/vault/vault-0.6.5.ebuild b/app-admin/vault/vault-0.6.5.ebuild
new file mode 100644 (file)
index 0000000..09483c9
--- /dev/null
@@ -0,0 +1,99 @@
+# Copyright 1999-2017 Gentoo Foundation
+# Distributed under the terms of the GNU General Public License v2
+# $Id$
+
+EAPI=6
+
+inherit fcaps golang-base systemd user
+
+EGO_PN="github.com/hashicorp/${PN}/..."
+DESCRIPTION="A tool for managing secrets"
+HOMEPAGE="https://vaultproject.io/"
+SRC_URI="https://${EGO_PN%/*}/archive/v${PV}.tar.gz -> ${P}.tar.gz
+       https://github.com/mitchellh/gox/archive/c9740af9c6574448fd48eb30a71f964014c7a837.tar.gz -> gox-c9740af9c6574448fd48eb30a71f964014c7a837.tar.gz
+       https://github.com/mitchellh/iochan/archive/87b45ffd0e9581375c491fef3d32130bb15c5bd7.tar.gz -> iochan-87b45ffd0e9581375c491fef3d32130bb15c5bd7.tar.gz
+"
+SLOT="0"
+LICENSE="MPL-2.0"
+KEYWORDS="~amd64"
+IUSE=""
+
+RESTRICT="test"
+
+DEPEND=">=dev-lang/go-1.7:="
+RDEPEND=""
+
+FILECAPS=(
+       -m 755 'cap_ipc_lock=+ep' usr/bin/${PN}
+)
+
+get_archive_go_package() {
+       local archive=${1} uri x
+       for x in ${SRC_URI}; do
+               if [[ ${x} == http* ]]; then
+                       uri=${x}
+               elif [[ ${x} == ${archive} ]]; then
+                       break
+               fi
+       done
+       uri=${uri#https://}
+       echo ${uri%/archive/*}
+}
+
+unpack_go_packages() {
+       local go_package x
+       # Unpack packages to appropriate locations for GOPATH
+       for x in ${A}; do
+               unpack ${x}
+               if [[ ${x} == *.tar.gz ]]; then
+                       go_package=$(get_archive_go_package ${x})
+                       mkdir -p src/${go_package%/*}
+                       mv ${go_package##*/}-* src/${go_package} || die
+               fi
+       done
+}
+
+src_unpack() {
+       mkdir "${S}" && cd "${S}" || die
+       unpack_go_packages
+}
+
+src_prepare() {
+       eapply_user
+       # Avoid the need to have a git checkout
+       sed -e 's:^GIT.*::' -i src/${EGO_PN%/*}/scripts/build.sh || die
+}
+
+pkg_setup() {
+       enewgroup ${PN}
+       enewuser ${PN} -1 -1 -1 ${PN}
+}
+
+src_compile() {
+       export GOPATH=${S}
+       go install -v -work -x ${EGO_BUILD_FLAGS} "github.com/mitchellh/gox/..." || die
+       cd "${S}"/src/${EGO_PN%/*} || die
+       PATH=${PATH}:${S}/bin \
+       XC_ARCH=$(go env GOARCH) \
+       XC_OS=$(go env GOOS) \
+       XC_OSARCH=$(go env GOOS)/$(go env GOARCH) \
+       emake
+}
+
+src_install() {
+       dodoc "${S}"/src/${EGO_PN%/*}/{CHANGELOG.md,CONTRIBUTING.md,README.md}
+       newinitd "${FILESDIR}/${PN}.initd" "${PN}"
+       newconfd "${FILESDIR}/${PN}.confd" "${PN}"
+       insinto /etc/logrotate.d
+       newins "${FILESDIR}/${PN}.logrotated" "${PN}"
+       systemd_dounit "${FILESDIR}/${PN}.service"
+
+       keepdir /etc/${PN}.d
+       insinto /etc/${PN}.d
+       doins "${FILESDIR}/"*.json.example
+
+       keepdir /var/log/${PN}
+       fowners ${PN}:${PN} /var/log/${PN}
+
+       dobin "${S}/bin/${PN}"
+}