From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from lists.gentoo.org (pigeon.gentoo.org [208.92.234.80]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (2048 bits)) (No client certificate requested) by finch.gentoo.org (Postfix) with ESMTPS id 0B7C7159C96 for ; Mon, 29 Jul 2024 21:56:23 +0000 (UTC) Received: from pigeon.gentoo.org (localhost [127.0.0.1]) by pigeon.gentoo.org (Postfix) with SMTP id 1E4212BC169; Mon, 29 Jul 2024 21:52:57 +0000 (UTC) Received: from mail-ed1-x531.google.com (mail-ed1-x531.google.com [IPv6:2a00:1450:4864:20::531]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256) (No client certificate requested) by pigeon.gentoo.org (Postfix) with ESMTPS id DE9022BC166 for ; Mon, 29 Jul 2024 21:52:56 +0000 (UTC) Received: by mail-ed1-x531.google.com with SMTP id 4fb4d7f45d1cf-5a2ffc34677so6193899a12.2 for ; Mon, 29 Jul 2024 14:52:56 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20230601; t=1722289975; x=1722894775; darn=lists.gentoo.org; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:cc:to:from:from:to:cc:subject:date :message-id:reply-to; bh=S2LOpiJCJgUTkHhurNoXXwgNPrEGZ3z4M8oOJlZCjzU=; b=D4MgjaujDihZHhWAUlbHtOPogDdJRsPL+IYX+qn+KIWvudFIzuyJchFVUTRfh9Y6pj tjHuntcJ20stmuEZnd1NfN/HZBF2swVUc/TjTL2+BGsjOQIPJh9yNzXPrls1J+VhNdAt YHUrHFzOn4eE3f1LdW9xs1ripqBEn0s3rn52pIaJYKRpwFoZXAMM1uhihkBwq3cTbwEK AkFjjaeN6hgBMNS25PDGjQ5khrThspOHd6lDER+VZRoIrFnxPJL+XDfH532Zu2MPKhMr VNLSDGJULztATDUJYCCw5aCvUlomcbsuVqXvLmRKfyEuMrlcxvaYtX5bMay8F8UIGUlE ij9w== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20230601; t=1722289975; x=1722894775; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:cc:to:from:x-gm-message-state:from:to:cc :subject:date:message-id:reply-to; bh=S2LOpiJCJgUTkHhurNoXXwgNPrEGZ3z4M8oOJlZCjzU=; b=YLMf5NEYthAVo52780zKg32wWKYI2sG4cUY27RiGf0810fvZVg/F+wDLwQf78PG3kp n2/a0750zhoA10v5a1ck/R62KD0Yy4o9Rma3SOTl5Jwhh5x8qku1uyz2iva63X2EHcyp X0YsjuM4NL1Cys8Ip7pYUDmV1TQGSzl5QAxJ/2Kx0oaWBgUmm4RNoIADjp1I8LT5+PIx 4XcBBrwjgZWjWWeX9J1AS5Ub7MD3WTFg+m+HDxnOIZs/1rIrYi6dpGGfyrNH7OnTHyfd YJ3fWxRl7gxpt9hQncoO22Vwxc9JyRuiE17+9x+y76/HdER/PIiJkHxGo77hmE3d2Fsu O1Dg== X-Gm-Message-State: AOJu0YwGjzAWOS3yo9WAY5UmRLFQ5tuW9ewQUKlOxwcphO9OoJFFtuwK mZcp2zBOy8glHjxDFVE6YFIGIveTXCmF4wheD7pUGiOF1O8Kz4/CvzjWSQ== X-Google-Smtp-Source: AGHT+IHWadVzCFd9I1EMdbCJ4LSVMyRxBmJR4ubK4I50wzfcWWGcmyLD1xb/fJHH9/trrktQvEzorw== X-Received: by 2002:a17:907:9711:b0:a7a:ac5f:bc01 with SMTP id a640c23a62f3a-a7d3f9fadd5mr786771166b.0.1722289975508; Mon, 29 Jul 2024 14:52:55 -0700 (PDT) Received: from localhost.localdomain ([62.244.50.57]) by smtp.gmail.com with ESMTPSA id a640c23a62f3a-a7acad9046fsm564748266b.147.2024.07.29.14.52.54 (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Mon, 29 Jul 2024 14:52:55 -0700 (PDT) From: Zurab Kvachadze To: gentoo-dev@lists.gentoo.org Cc: conikost@gentoo.org, Zurab Kvachadze Subject: [gentoo-dev] [RFC PATCH v2 14/20] www-servers/nginx: revbump 1.26.1-r1 to 1.26.1-r2, use nginx.eclass Date: Tue, 30 Jul 2024 00:52:30 +0300 Message-ID: <20240729215241.13243-15-zurabid2016@gmail.com> X-Mailer: git-send-email 2.44.2 In-Reply-To: <20240729215241.13243-1-zurabid2016@gmail.com> References: <20240729215241.13243-1-zurabid2016@gmail.com> Precedence: bulk List-Post: List-Help: List-Unsubscribe: List-Subscribe: List-Id: Gentoo Linux mail X-BeenThere: gentoo-dev@lists.gentoo.org Reply-to: gentoo-dev@lists.gentoo.org X-Auto-Response-Suppress: DR, RN, NRN, OOF, AutoReply MIME-Version: 1.0 Content-Transfer-Encoding: 8bit X-Archives-Salt: 61ab1c5f-d93a-4591-966a-9f751c585235 X-Archives-Hash: a6dee9d131dd1e95d7740152984fefc9 This commit makes NGINX employ new nginx.eclass. This bumps the stable 1.26.1 NGINX version to the second revision bringing a considerable amount of changes: * NGINX is now fully slotted. Stable versions are in the 'stable' SLOT and mainline ones are in the 'mainline' SLOT. There is also a 'live' slot for the latest Mercurial version. * All external modules have been unbundled from the main NGINX package. They will soon be available as separate packages in the www-nginx/ category. In addition, NGINX development kit (ngx_devel_kit) is no longer unconditionally statically built into NGINX binary. * LICENSE has been modified to reflect reality. * USE flag changes: 1. "pcre", "pcre2" have been removed along with the dependency on EOL libpcre1. Bug 886537, although it is not really closed until old versions that still depend on libpcre1 are treecleaned. 2. "ktls" and "pcre-jit" have been removed completely since they have no effect if system OpenSSL and libpcre are used (as is always the case with NGINX on Gentoo). 3. "threads" - removed, even though some really ancient third-party modules break with this (e.g. mogilefs last time I checked it). nginx.eclass enables pthreads support unconditionally, see https://bugs.gentoo.org/868336. 4. "vim-syntax" has been removed, as vimfiles are bundled with NGINX, are more updated there and, therefore, are now installed from the NGINX tarball. 5. "http2" and "http3" have been moved to their nginx_modules_http_v{2,3} counterparts where they actually belong as regular modules. 6. "ssl" has been moved to nginx_modules_{http,mail,stream}_ssl. 7. "http-cache" has been removed. It does not even qualify to be a USE flag: the flag just passes some argument to disable the http cache, which (the cache) is not documented upstream at all. 8. "modules" USE flag has been added to control dynamic modules support. 9. A substantial amount of USE flags have been added for minor HTTP, stream (bug 735020) and mail modules. * All the miscellaneous files (configuration file, confd, init and logrotate scripts, systemd service) have been revbumped. NGINX now ships with tmpfiles.d(5) configuration file (see below). This closes bugs 481456, 928131, 576414. * All the files that previously went into /etc/nginx are now stored in /usr/share/nginx, apart from nginx.conf. * NGINX's temporary files are now stored in /var/tmp/nginx, instead of /var/lib/nginx/tmp. The new directory is managed by systemd-tmpfiles(8), which has been added as a dependency. * NGINX now uses the access.log and error.log as default log names, instead of access_log and error_log (bug 700866). * NGINX no longer does strange permission checks for 8-year-old CVEs. This commit also closes the bug 578658 mentioned in nginx.eclass. Bug: https://bugs.gentoo.org/886537 Closes: https://bugs.gentoo.org/481456 Closes: https://bugs.gentoo.org/928131 Closes: https://bugs.gentoo.org/576414 Closes: https://bugs.gentoo.org/578658 Closes: https://bugs.gentoo.org/735020 Closes: https://bugs.gentoo.org/700866 Signed-off-by: Zurab Kvachadze --- www-servers/nginx/Manifest | 1 + www-servers/nginx/nginx-1.26.1-r2.ebuild | 31 ++++++++++++++++++++++++ 2 files changed, 32 insertions(+) create mode 100644 www-servers/nginx/nginx-1.26.1-r2.ebuild diff --git a/www-servers/nginx/Manifest b/www-servers/nginx/Manifest index 46b2b1a44166..1c5c432afd04 100644 --- a/www-servers/nginx/Manifest +++ b/www-servers/nginx/Manifest @@ -3,6 +3,7 @@ DIST nginx-1.26.1.tar.gz 1244738 BLAKE2B 5df95f6771a93009f5bd1a4038857c29af580d1 DIST nginx-1.27.0.tar.gz 1244887 BLAKE2B 035ec8d44f7f7df9b0c77e97e353a579642b75f905c1a6be5caf5ff952be9cae7ccc14c0bfce5ab148a11799d308225e9b7155458905b624c12acd09c03dfa44 SHA512 251bfe65c717a8027ef05caae2ab2ea73b9b544577f539a1d419fe6adf0bcc846b73b58f54ea3f102df79aaf340e4fa56793ddadea3cd61bcbbe2364ef94bacb DIST nginx-auth-ldap-42d195d7a7575ebab1c369ad3fc5d78dc2c2669c.tar.gz 18457 BLAKE2B 22225ca9e5299b20ab5a93a001cac48e446bd86b3a24ac49e716bc975b128890bdb4b0dbbf5730fbaaeadfd958160093c7a6af798dd0e6de27062f149a760333 SHA512 ec59637fda5acac053e815cb1d04b545fc6b765e5ec63d8c2c9c301abad87afaa2698145acac08e9e14c91e1423ebff7aff0cca2b940b19ccccbf4cf53973269 DIST nginx-tests-0b5ec15c62ed.tar.gz 282652 BLAKE2B af41397f88f7aa969749c6dd9a77c58d1835bca24fe764dd0af328d621817f5fb89b3f5b5c0fbd1e7db53d51365e9098b020005e27a531649bd8a51a05b3cbb0 SHA512 c376d23c7001c5203428b664c388e97956cdda8365eb7df57db0da5146d0806f5c35cd1352260d6803d55542f46a90da4a604ebf971055caa77dd6106930558e +DIST nginx-tests-0e9c1a8aa1d4.tar.gz 286643 BLAKE2B 0a768a8e1cc1a364ec36c67cca38882364aa076fbac582861724ad3086184ae76e41dac6698be58c93d4d589366d8e35521ae5e6c14cceff2c372ed731397c1c SHA512 1107a79cf1a6f152fe2e068d4447492c7d0a2fabc74ac1345b8784140a3653a0471ddb8bfbacd627bc148c7d05f3409299495122199ad95a242be9fc8a22aff5 DIST nginx-vod-module-1.33.tar.gz 471858 BLAKE2B fa5cb9fd185b30c5c53b25a6f103213b3d04dac5d2d81db72f9749a51548e09e3e17dccc636d748aff8d21c6623484c77fdeb10d70854480759665d140d42e0e SHA512 29ef77f1bbdb2410ff317ebdd7434f31b8ec370ae6b617b92e745e87c11bc820b451181d1d2b57156b414348da14ac448b689b32b17ab418144292eda094512d DIST nginx_http_sticky_module_ng-1.2.6-10-g08a395c66e42.tar.bz2 124047 BLAKE2B d37ef9a15c91abe3c6258e420d1f99fa452f9d9966a0e13102174973314a3bac5413957a5fe632a9dcb1163b3be5df8116e05cc053ee061e19319ec25f341570 SHA512 6c1bfdcf89884b2855d51ae7da0f6e53a4ca3629e1aaf58433b70c07dcb2af797ba6e87d9b3eb4fe2fb6d4d697e862f2b4c2f8d8b3fdaea201740c97ec936529 DIST ngx_brotli-1.0.0rc.tar.gz 16207 BLAKE2B 450d0ea693bd98d4a1b615f2cdcaad41ccd28266f6d80beec7fe77fe750ab8c5d1bb55aabe15161b9b6d819d2b4d99a7774f2706f2f6fd084b52a7c7dddbc00c SHA512 05a880d5e48ac83be84498ed41fb4750211b827a9d7541acfd6ef494e5205a6e853d5594bfec3ab4ae668ea3f803e4f4b0ba550c76811971c8e266e42663c56d diff --git a/www-servers/nginx/nginx-1.26.1-r2.ebuild b/www-servers/nginx/nginx-1.26.1-r2.ebuild new file mode 100644 index 000000000000..22409f4c242c --- /dev/null +++ b/www-servers/nginx/nginx-1.26.1-r2.ebuild @@ -0,0 +1,31 @@ +# Copyright 1999-2024 Gentoo Authors +# Distributed under the terms of the GNU General Public License v2 + +EAPI=8 + +KEYWORDS="~amd64 ~arm ~arm64 ~loong ~ppc ~ppc64 ~riscv ~x86 ~amd64-linux ~x86-linux" + +NGINX_SUBSYSTEMS=(+http stream mail) +NGINX_MODULES=( + +http_{charset,gzip,ssi,userid,access,auth_basic,mirror,autoindex,geo,map} + +http_{split_clients,referer,rewrite,proxy,fastcgi,uwsgi,scgi,grpc} + +http_{memcached,limit_conn,limit_req,empty_gif,browser,upstream_hash} + +http_{upstream_ip_hash,upstream_least_conn,upstream_random} + +http_{upstream_keepalive,upstream_zone} + http_{ssl,v2,v3,realip,addition,xslt,image_filter,geoip,sub,dav,flv,mp4} + http_{gunzip,gzip_static,auth_request,random_index,secure_link,degradation} + http_{slice,stub_status,perl} + +mail_{pop3,imap,smtp} + mail_ssl + +stream_{limit_conn,access,geo,map,split_clients,return,pass,set} + +stream_{upstream_hash,upstream_least_conn,upstream_random,upstream_zone} + stream_{ssl,realip,geoip,ssl_preread} +) +NGINX_UPDATE_STREAM=stable +NGINX_TESTS_RV=0e9c1a8aa1d4 +NGINX_MISC_FILES=( + nginx-{r2.logrotate,r2.service,r4.conf,r5.initd,r1.confd} + nginx.tmpfiles +) + +inherit nginx -- 2.44.2