mirror of
https://forgejo.ellis.link/continuwuation/continuwuity.git
synced 2025-09-11 00:12:49 +02:00
Compare commits
3 commits
b5a2e49ae4
...
34417c96ae
Author | SHA1 | Date | |
---|---|---|---|
|
34417c96ae | ||
|
f33f281edb | ||
|
ddbca59193 |
2 changed files with 148 additions and 0 deletions
68
fedora/conduwuit.service
Normal file
68
fedora/conduwuit.service
Normal file
|
@ -0,0 +1,68 @@
|
||||||
|
[Unit]
|
||||||
|
Description=Continuwuity - Matrix homeserver
|
||||||
|
Documentation=https://continuwuity.org/
|
||||||
|
Wants=network-online.target
|
||||||
|
After=network-online.target
|
||||||
|
Alias=matrix-conduwuit.service
|
||||||
|
|
||||||
|
[Service]
|
||||||
|
DynamicUser=yes
|
||||||
|
User=conduwuit
|
||||||
|
Group=conduwuit
|
||||||
|
Type=notify
|
||||||
|
|
||||||
|
Environment="CONTINUWUITY_CONFIG=/etc/conduwuit/conduwuit.toml"
|
||||||
|
|
||||||
|
Environment="CONTINUWUITY_LOG_TO_JOURNALD=true"
|
||||||
|
Environment="CONTINUWUITY_JOURNALD_IDENTIFIER=%N"
|
||||||
|
|
||||||
|
ExecStart=/usr/bin/conduwuit
|
||||||
|
|
||||||
|
AmbientCapabilities=
|
||||||
|
CapabilityBoundingSet=
|
||||||
|
|
||||||
|
DevicePolicy=closed
|
||||||
|
LockPersonality=yes
|
||||||
|
MemoryDenyWriteExecute=yes
|
||||||
|
NoNewPrivileges=yes
|
||||||
|
#ProcSubset=pid
|
||||||
|
ProtectClock=yes
|
||||||
|
ProtectControlGroups=yes
|
||||||
|
ProtectHome=yes
|
||||||
|
ProtectHostname=yes
|
||||||
|
ProtectKernelLogs=yes
|
||||||
|
ProtectKernelModules=yes
|
||||||
|
ProtectKernelTunables=yes
|
||||||
|
ProtectProc=invisible
|
||||||
|
ProtectSystem=strict
|
||||||
|
PrivateDevices=yes
|
||||||
|
PrivateMounts=yes
|
||||||
|
PrivateTmp=yes
|
||||||
|
PrivateUsers=yes
|
||||||
|
PrivateIPC=yes
|
||||||
|
RemoveIPC=yes
|
||||||
|
RestrictAddressFamilies=AF_INET AF_INET6 AF_UNIX
|
||||||
|
RestrictNamespaces=yes
|
||||||
|
RestrictRealtime=yes
|
||||||
|
RestrictSUIDSGID=yes
|
||||||
|
SystemCallArchitectures=native
|
||||||
|
SystemCallFilter=@system-service @resources
|
||||||
|
SystemCallFilter=~@clock @debug @module @mount @reboot @swap @cpu-emulation @obsolete @timer @chown @setuid @privileged @keyring @ipc
|
||||||
|
SystemCallErrorNumber=EPERM
|
||||||
|
|
||||||
|
StateDirectory=conduwuit
|
||||||
|
ConfigurationDirectory=conduwuit
|
||||||
|
RuntimeDirectory=conduwuit
|
||||||
|
RuntimeDirectoryMode=0750
|
||||||
|
|
||||||
|
Restart=on-failure
|
||||||
|
RestartSec=5
|
||||||
|
|
||||||
|
TimeoutStopSec=2m
|
||||||
|
TimeoutStartSec=2m
|
||||||
|
|
||||||
|
StartLimitInterval=1m
|
||||||
|
StartLimitBurst=5
|
||||||
|
|
||||||
|
[Install]
|
||||||
|
WantedBy=multi-user.target
|
80
fedora/continuwuity.spec.rpkg
Normal file
80
fedora/continuwuity.spec.rpkg
Normal file
|
@ -0,0 +1,80 @@
|
||||||
|
# This should be run using rpkg-util: https://docs.pagure.org/rpkg-util
|
||||||
|
# it requires Internet access and is not suitable for Fedora main repos
|
||||||
|
# TODO: rpkg-util is no longer maintained, find a replacement
|
||||||
|
|
||||||
|
Name: continuwuity
|
||||||
|
Version: {{{ git_repo_version }}}
|
||||||
|
Release: 1%{?dist}
|
||||||
|
Summary: Very cool Matrix chat homeserver written in Rust
|
||||||
|
|
||||||
|
License: Apache-2.0 AND MIT
|
||||||
|
|
||||||
|
URL: https://continuwuity.org
|
||||||
|
VCS: {{{ git_repo_vcs }}}
|
||||||
|
Source: {{{ git_repo_pack }}}
|
||||||
|
|
||||||
|
BuildRequires: cargo-rpm-macros >= 25
|
||||||
|
BuildRequires: systemd-rpm-macros
|
||||||
|
# Needed to build rust-librocksdb-sys
|
||||||
|
BuildRequires: clang
|
||||||
|
BuildRequires: liburing-devel
|
||||||
|
|
||||||
|
Requires: liburing
|
||||||
|
Requires: glibc
|
||||||
|
Requires: libstdc++
|
||||||
|
|
||||||
|
%global _description %{expand:
|
||||||
|
A cool hard fork of Conduit, a Matrix homeserver written in Rust}
|
||||||
|
|
||||||
|
%description %{_description}
|
||||||
|
|
||||||
|
%prep
|
||||||
|
{{{ git_repo_setup_macro }}}
|
||||||
|
%cargo_prep -N
|
||||||
|
# Perform an online build so Git dependencies can be retrieved
|
||||||
|
sed -i 's/^offline = true$//' .cargo/config.toml
|
||||||
|
|
||||||
|
%build
|
||||||
|
%cargo_build
|
||||||
|
|
||||||
|
# Here's the one legally required mystery incantation in this file.
|
||||||
|
# Some of our dependencies have source files which are (for some reason) marked as excutable.
|
||||||
|
# Files in .cargo/registry/ are copied into /usr/src/ by the debuginfo machinery
|
||||||
|
# at the end of the build step, and then the BRP shebang mangling script checks
|
||||||
|
# the entire buildroot to find executable files, and fails the build because
|
||||||
|
# it thinks Rust's file attributes are shebangs because they start with `#!`.
|
||||||
|
# So we have to clear the executable bit on all of them before that happens.
|
||||||
|
find .cargo/registry/ -executable -name "*.rs" -exec chmod -x {} +
|
||||||
|
|
||||||
|
# TODO: this fails currently because it's forced to run in offline mode
|
||||||
|
# {cargo_license -- --no-dev} > LICENSE.dependencies
|
||||||
|
|
||||||
|
%install
|
||||||
|
install -Dpm0755 target/rpm/conduwuit -t %{buildroot}%{_bindir}
|
||||||
|
install -Dpm0644 fedora/conduwuit.service -t %{buildroot}%{_unitdir}
|
||||||
|
install -Dpm0644 conduwuit-example.toml %{buildroot}%{_sysconfdir}/conduwuit/conduwuit.toml
|
||||||
|
|
||||||
|
%files
|
||||||
|
%license LICENSE
|
||||||
|
%license src/core/matrix/state_res/LICENSE
|
||||||
|
%doc CODE_OF_CONDUCT.md
|
||||||
|
%doc CONTRIBUTING.md
|
||||||
|
%doc README.md
|
||||||
|
%doc SECURITY.md
|
||||||
|
%config %{_sysconfdir}/conduwuit/conduwuit.toml
|
||||||
|
|
||||||
|
%{_bindir}/conduwuit
|
||||||
|
%{_unitdir}/conduwuit.service
|
||||||
|
# Do not create /var/lib/conduwuit, systemd will create it if necessary
|
||||||
|
|
||||||
|
%post
|
||||||
|
%systemd_post conduwuit.service
|
||||||
|
|
||||||
|
%preun
|
||||||
|
%systemd_preun conduwuit.service
|
||||||
|
|
||||||
|
%postun
|
||||||
|
%systemd_postun_with_restart conduwuit.service
|
||||||
|
|
||||||
|
%changelog
|
||||||
|
{{{ git_repo_changelog }}}
|
Loading…
Add table
Add a link
Reference in a new issue