pkgbuild: pkgver=1.14.8 pkgrel=1 (genesis)
This repo was forked from the upstream Archlinux vault package at
commit 9c53f44a13c0115422f2a20561aa5b22997dcb4a.
This was then modified to download from the open-vault source, and
refactored to use a global GOFLAGS, split dep downloads into prepare(),
and tidies the build() + package() functions.
References: https://gitlab.archlinux.org/archlinux/packaging/packages/vault
References: 9c53f44a13
This commit is contained in:
commit
19c23fdeed
GPG key ID:
EDEA539F594E7E75
30
.SRCINFO
Normal file
30
.SRCINFO
Normal file
|
|
@ -0,0 +1,30 @@
|
|||
pkgbase = open-vault
|
||||
pkgdesc = A tool for managing secrets
|
||||
pkgver = 1.14.8
|
||||
pkgrel = 1
|
||||
url = https://developer.hashicorp.com/vault/docs/v1.14.x
|
||||
install = vault.install
|
||||
arch = x86_64
|
||||
license = MPL2
|
||||
makedepends = go
|
||||
makedepends = git
|
||||
makedepends = yarn
|
||||
makedepends = bower
|
||||
makedepends = nodejs-lts-iron
|
||||
makedepends = npm
|
||||
makedepends = zip
|
||||
depends = glibc
|
||||
provides = vault
|
||||
conflicts = vault
|
||||
backup = etc/vault.hcl
|
||||
backup = etc/default/vault
|
||||
source = open-vault-1.14.8.tar.gz::https://git.st8l.com/luxolus/open-vault/archive/9f12e0f892b27c5518a918b15c46133cfdd2dff5.tar.gz
|
||||
source = vault.sysusers
|
||||
source = vault.tmpfiles
|
||||
source = vault.hcl
|
||||
sha512sums = SKIP
|
||||
sha512sums = 92616ccf83fa5ca9f8b0d022cf8ceb1f3549e12b66bf21d9f77f3eb26bd75ec1dc36c155948ec987c642067b85fbfc30a9217d6c503d952a402aa5ef63e50928
|
||||
sha512sums = db327aae6f821ee1ea608abdb3fc82aeeae72ce873d78ada44461644add32afd6c0197019427734498bc28ae187b6f741a02196e40a620caab597e5eef32ca7a
|
||||
sha512sums = 75d654ec4eadfe983f57951d470fff8b9eb953b42c08e7b6b3a1baaa0721fd7a9d5be37480b0e4f4fd8518f375348bdd8394848f0fb27cb1d425279acb67f693
|
||||
|
||||
pkgname = open-vault
|
||||
89
.gitignore
vendored
Normal file
89
.gitignore
vendored
Normal file
|
|
@ -0,0 +1,89 @@
|
|||
# Created by https://www.toptal.com/developers/gitignore/api/archlinuxpackages,linux,macos,vim
|
||||
# Edit at https://www.toptal.com/developers/gitignore?templates=archlinuxpackages,linux,macos,vim
|
||||
|
||||
### ArchLinuxPackages ###
|
||||
*.tar
|
||||
*.tar.*
|
||||
*.jar
|
||||
*.exe
|
||||
*.msi
|
||||
*.zip
|
||||
*.tgz
|
||||
*.log
|
||||
*.log.*
|
||||
*.sig
|
||||
|
||||
pkg/
|
||||
src/
|
||||
|
||||
/open-vault*
|
||||
|
||||
### Linux ###
|
||||
*~
|
||||
|
||||
# temporary files which can be created if a process still has a handle open of a deleted file
|
||||
.fuse_hidden*
|
||||
|
||||
# KDE directory preferences
|
||||
.directory
|
||||
|
||||
# Linux trash folder which might appear on any partition or disk
|
||||
.Trash-*
|
||||
|
||||
# .nfs files are created when an open file is removed but is still being accessed
|
||||
.nfs*
|
||||
|
||||
### macOS ###
|
||||
# General
|
||||
.DS_Store
|
||||
.AppleDouble
|
||||
.LSOverride
|
||||
|
||||
# Icon must end with two \r
|
||||
Icon
|
||||
|
||||
|
||||
# Thumbnails
|
||||
._*
|
||||
|
||||
# Files that might appear in the root of a volume
|
||||
.DocumentRevisions-V100
|
||||
.fseventsd
|
||||
.Spotlight-V100
|
||||
.TemporaryItems
|
||||
.Trashes
|
||||
.VolumeIcon.icns
|
||||
.com.apple.timemachine.donotpresent
|
||||
|
||||
# Directories potentially created on remote AFP share
|
||||
.AppleDB
|
||||
.AppleDesktop
|
||||
Network Trash Folder
|
||||
Temporary Items
|
||||
.apdisk
|
||||
|
||||
### macOS Patch ###
|
||||
# iCloud generated files
|
||||
*.icloud
|
||||
|
||||
### Vim ###
|
||||
# Swap
|
||||
[._]*.s[a-v][a-z]
|
||||
!*.svg # comment out if you don't need vector files
|
||||
[._]*.sw[a-p]
|
||||
[._]s[a-rt-v][a-z]
|
||||
[._]ss[a-gi-z]
|
||||
[._]sw[a-p]
|
||||
|
||||
# Session
|
||||
Session.vim
|
||||
Sessionx.vim
|
||||
|
||||
# Temporary
|
||||
.netrwhist
|
||||
# Auto-generated tag files
|
||||
tags
|
||||
# Persistent undo
|
||||
[._]*.un~
|
||||
|
||||
# End of https://www.toptal.com/developers/gitignore/api/archlinuxpackages,linux,macos,vim
|
||||
120
PKGBUILD
Normal file
120
PKGBUILD
Normal file
|
|
@ -0,0 +1,120 @@
|
|||
# Maintainer: Paul Stemmet <aur@luxolus.com>
|
||||
# Contributor: Christian Rebischke <Chris.Rebischke@archlinux.org>
|
||||
# Contributor: Justin Kromlinger <hashworks@archlinux.org>
|
||||
# Contributor: Tim Meusel <tim@bastelfreak.de>
|
||||
# Contributor: Sebastian Rakel <sebastian@devunit.eu>
|
||||
# Contributor: Andrew Tyler <assimilat@gmail.com>
|
||||
|
||||
pkgname=open-vault
|
||||
_commit='9f12e0f892b27c5518a918b15c46133cfdd2dff5'
|
||||
pkgver=1.14.8
|
||||
pkgrel=1
|
||||
pkgdesc='A tool for managing secrets'
|
||||
provides=('vault')
|
||||
conflicts=('vault')
|
||||
arch=('x86_64')
|
||||
url="https://developer.hashicorp.com/vault/docs/v1.14.x"
|
||||
license=('MPL2')
|
||||
depends=('glibc')
|
||||
makedepends=('go' 'git' 'yarn' 'bower' 'nodejs-lts-iron' 'npm' 'zip')
|
||||
install=vault.install
|
||||
backup=('etc/vault.hcl' 'etc/default/vault')
|
||||
source=("${pkgname}-${pkgver}.tar.gz::https://git.st8l.com/luxolus/${pkgname}/archive/${_commit}.tar.gz"
|
||||
'vault.sysusers'
|
||||
'vault.tmpfiles'
|
||||
'vault.hcl')
|
||||
sha512sums=('SKIP'
|
||||
'92616ccf83fa5ca9f8b0d022cf8ceb1f3549e12b66bf21d9f77f3eb26bd75ec1dc36c155948ec987c642067b85fbfc30a9217d6c503d952a402aa5ef63e50928'
|
||||
'db327aae6f821ee1ea608abdb3fc82aeeae72ce873d78ada44461644add32afd6c0197019427734498bc28ae187b6f741a02196e40a620caab597e5eef32ca7a'
|
||||
'75d654ec4eadfe983f57951d470fff8b9eb953b42c08e7b6b3a1baaa0721fd7a9d5be37480b0e4f4fd8518f375348bdd8394848f0fb27cb1d425279acb67f693')
|
||||
|
||||
export CGO_CPPFLAGS="${CPPFLAGS}"
|
||||
export CGO_CFLAGS="${CFLAGS}"
|
||||
export CGO_CXXFLAGS="${CXXFLAGS}"
|
||||
export CGO_LDFLAGS="${LDFLAGS}"
|
||||
|
||||
export GOFLAGS="-buildmode=pie -trimpath -mod=readonly -modcacherw"
|
||||
|
||||
prepare() {
|
||||
cd "${srcdir}/${pkgname}"
|
||||
|
||||
mkdir -p http/web_ui bin dist
|
||||
|
||||
local filename
|
||||
for filename in "${source[@]}"; do
|
||||
if [[ "$filename" =~ \.patch$ ]]; then
|
||||
patch -p1 -N -l -i "$srcdir/${filename##*/}"
|
||||
fi
|
||||
done
|
||||
|
||||
sed -i \
|
||||
's|/etc/vault.d/vault.hcl|/etc/vault.hcl|g' \
|
||||
.release/linux/package/usr/lib/systemd/system/vault.service
|
||||
sed -i \
|
||||
's|/etc/vault.d/vault.env|/etc/default/vault|g' \
|
||||
.release/linux/package/usr/lib/systemd/system/vault.service
|
||||
|
||||
# Vault UI
|
||||
(
|
||||
cd "ui"
|
||||
|
||||
yarn install
|
||||
)
|
||||
|
||||
# Vault service
|
||||
(
|
||||
go mod download
|
||||
)
|
||||
}
|
||||
|
||||
build() {
|
||||
cd "${srcdir}/${pkgname}"
|
||||
|
||||
# Vault UI
|
||||
(
|
||||
cd "ui"
|
||||
|
||||
npm rebuild node-sass ; yarn run build
|
||||
)
|
||||
|
||||
# Vault service
|
||||
(
|
||||
local _flags=github.com/hashicorp/vault/sdk/version
|
||||
local _ldflags=(
|
||||
"-linkmode=external"
|
||||
"-compressdwarf=false"
|
||||
$(
|
||||
printf -- "-X ${_flags}.%s " \
|
||||
"Version=${pkgver}" \
|
||||
"GitCommit=${_commit}" \
|
||||
"BuildDate=$(date -u '+%Y-%m-%dT%H:%M:%SZ')"
|
||||
)
|
||||
)
|
||||
|
||||
go build -tags ui -ldflags "${_ldflags[*]}" -o dist .
|
||||
)
|
||||
}
|
||||
|
||||
package() {
|
||||
cd "${srcdir}/${pkgname}"
|
||||
|
||||
local file release='.release/linux/package'
|
||||
|
||||
# configuration
|
||||
install -Dm644 "${srcdir}/vault.hcl" "${pkgdir}/etc/vault.hcl"
|
||||
install -Dm644 "${srcdir}/vault.sysusers" "${pkgdir}/usr/lib/sysusers.d/vault.conf"
|
||||
install -Dm644 "${srcdir}/vault.tmpfiles" "${pkgdir}/usr/lib/tmpfiles.d/vault.conf"
|
||||
install -Dm644 \
|
||||
"$release/etc/vault.d/vault.env" "${pkgdir}/etc/default/vault"
|
||||
install -Dm644 \
|
||||
"$release/usr/lib/systemd/system/vault.service" "${pkgdir}/usr/lib/systemd/system/vault.service"
|
||||
|
||||
install -Dm644 "LICENSE" "${pkgdir}/usr/share/licenses/${pkgname}/LICENSE"
|
||||
|
||||
for file in 'README.md' 'CHANGELOG.md'; do
|
||||
install -Dm644 "${file}" "${pkgdir}/usr/share/doc/${pkgname}/${file}"
|
||||
done
|
||||
|
||||
# binaries
|
||||
install -Dm755 "dist/vault" "${pkgdir}/usr/bin/vault"
|
||||
}
|
||||
50
vault.hcl
Normal file
50
vault.hcl
Normal file
|
|
@ -0,0 +1,50 @@
|
|||
# Copyright (c) HashiCorp, Inc.
|
||||
# SPDX-License-Identifier: MPL-2.0
|
||||
|
||||
# Full configuration options can be found at https://www.vaultproject.io/docs/configuration
|
||||
|
||||
ui = true
|
||||
|
||||
#mlock = true
|
||||
#disable_mlock = true
|
||||
|
||||
storage "file" {
|
||||
path = "/var/lib/vault"
|
||||
}
|
||||
|
||||
#storage "consul" {
|
||||
# address = "127.0.0.1:8500"
|
||||
# path = "vault"
|
||||
#}
|
||||
|
||||
# HTTP listener
|
||||
listener "tcp" {
|
||||
address = "127.0.0.1:8200"
|
||||
tls_disable = 1
|
||||
}
|
||||
|
||||
# HTTPS listener
|
||||
#listener "tcp" {
|
||||
# address = "0.0.0.0:8200"
|
||||
# tls_cert_file = "/var/lib/vault/tls/tls.crt"
|
||||
# tls_key_file = "/var/lib/vault/tls/tls.key"
|
||||
#}
|
||||
|
||||
# Enterprise license_path
|
||||
# This will be required for enterprise as of v1.8
|
||||
#license_path = "/etc/vault.hclic"
|
||||
|
||||
# Example AWS KMS auto unseal
|
||||
#seal "awskms" {
|
||||
# region = "us-east-1"
|
||||
# kms_key_id = "REPLACE-ME"
|
||||
#}
|
||||
|
||||
# Example HSM auto unseal
|
||||
#seal "pkcs11" {
|
||||
# lib = "/usr/vault/lib/libCryptoki2_64.so"
|
||||
# slot = "0"
|
||||
# pin = "AAAA-BBBB-CCCC-DDDD"
|
||||
# key_label = "vault-hsm-key"
|
||||
# hmac_key_label = "vault-hsm-hmac-key"
|
||||
#}
|
||||
9
vault.install
Normal file
9
vault.install
Normal file
|
|
@ -0,0 +1,9 @@
|
|||
# vim: ft=sh ts=4 sw=4 et
|
||||
|
||||
post_install () {
|
||||
setcap cap_ipc_lock=+ep /usr/bin/vault
|
||||
}
|
||||
|
||||
post_upgrade () {
|
||||
setcap cap_ipc_lock=+ep /usr/bin/vault
|
||||
}
|
||||
1
vault.sysusers
Normal file
1
vault.sysusers
Normal file
|
|
@ -0,0 +1 @@
|
|||
u vault - "Vault daemon" /var/lib/vault
|
||||
1
vault.tmpfiles
Normal file
1
vault.tmpfiles
Normal file
|
|
@ -0,0 +1 @@
|
|||
d /var/lib/vault 0750 vault vault - -
|
||||
Loading…
Reference in a new issue