modify
This commit is contained in:
parent
7822c3afc2
commit
c196cdbc9c
73
create-munge-key
Normal file
73
create-munge-key
Normal file
@ -0,0 +1,73 @@
|
|||||||
|
#! /bin/sh
|
||||||
|
# Generates a random key for munged
|
||||||
|
#
|
||||||
|
# (C) 2007 Gennaro Oliva
|
||||||
|
# You may freely distribute this file under the terms of the GNU General
|
||||||
|
# Public License, version 2 or later.
|
||||||
|
|
||||||
|
#Setting default random file
|
||||||
|
randomfile=/dev/urandom
|
||||||
|
|
||||||
|
#Usage message
|
||||||
|
usage="Try \`$0 -h' for more information."
|
||||||
|
|
||||||
|
#Help message
|
||||||
|
needhelp() {
|
||||||
|
echo Usage: create-munge-key [OPTION]...
|
||||||
|
echo Generates a random key for munged
|
||||||
|
echo List of options
|
||||||
|
echo " -f force overwriting existing old key"
|
||||||
|
echo " -r specify /dev/random as random file for key generation"
|
||||||
|
echo " default is /dev/urandom"
|
||||||
|
echo " -h display this help and exit"
|
||||||
|
}
|
||||||
|
|
||||||
|
#Parsing command line options
|
||||||
|
while getopts "hrf" options; do
|
||||||
|
case $options in
|
||||||
|
r ) randomfile=/dev/random;;
|
||||||
|
f ) force=yes;;
|
||||||
|
h ) needhelp
|
||||||
|
exit 0;;
|
||||||
|
\? ) echo $usage
|
||||||
|
exit 1;;
|
||||||
|
* ) echo $usage
|
||||||
|
exit 1;;
|
||||||
|
esac
|
||||||
|
done
|
||||||
|
|
||||||
|
if [ `id -u` != 0 ] ; then
|
||||||
|
echo "Please run create-munge-key as root."
|
||||||
|
exit 1
|
||||||
|
fi
|
||||||
|
|
||||||
|
|
||||||
|
#Checking random file presence
|
||||||
|
if [ ! -e $randomfile ] ; then
|
||||||
|
echo $0: cannot find random file $randomfile
|
||||||
|
exit 1
|
||||||
|
fi
|
||||||
|
|
||||||
|
#Checking if the user want to overwrite existing key file
|
||||||
|
if [ "$force" != "yes" ] && [ -e /etc/munge/munge.key ] ; then
|
||||||
|
echo The munge key /etc/munge/munge.key already exists
|
||||||
|
echo -n "Do you want to overwrite it? (y/N) "
|
||||||
|
read ans
|
||||||
|
if [ "$ans" != "y" -a "$ans" != "Y" ] ; then
|
||||||
|
exit 0
|
||||||
|
fi
|
||||||
|
fi
|
||||||
|
|
||||||
|
#Generating the key file and change owner and permissions
|
||||||
|
if [ "$randomfile" = "/dev/random" ] ; then
|
||||||
|
echo Please type on the keyboard, echo move your mouse,
|
||||||
|
echo utilize the disks. This gives the random number generator
|
||||||
|
echo a better chance to gain enough entropy.
|
||||||
|
fi
|
||||||
|
echo -n "Generating a pseudo-random key using $randomfile "
|
||||||
|
dd if=$randomfile bs=1 count=1024 > /etc/munge/munge.key \
|
||||||
|
2>/dev/null
|
||||||
|
chown munge:munge /etc/munge/munge.key
|
||||||
|
chmod 0400 /etc/munge/munge.key
|
||||||
|
echo completed.
|
||||||
|
exit 0
|
||||||
5
munge.logrotate
Normal file
5
munge.logrotate
Normal file
@ -0,0 +1,5 @@
|
|||||||
|
/var/log/munge/munged.log {
|
||||||
|
missingok
|
||||||
|
notifempty
|
||||||
|
copytruncate
|
||||||
|
}
|
||||||
123
munge.spec
123
munge.spec
@ -1,71 +1,65 @@
|
|||||||
Name: munge
|
Name: munge
|
||||||
Version: 0.5.13
|
Version: 0.5.13
|
||||||
Release: 3
|
Release: 1
|
||||||
Summary: MUNGE (MUNGE Uid 'N' Gid Emporium) is an authentication service for creating and validating credentials.
|
Summary: Enables uid & gid authentication across a host cluster
|
||||||
|
License: GPLv3+ and LGPLv3+
|
||||||
License: GPLv3+ and LGPLv3+
|
URL: https://dun.github.io/munge/
|
||||||
URL: https://dun.github.io/munge/
|
Source0: https://github.com/dun/munge/releases/download/munge-%{version}/munge-%{version}.tar.xz
|
||||||
Source0: https://github.com/dun/munge/releases/download/munge-%{version}/munge-%{version}.tar.xz
|
Source1: create-munge-key
|
||||||
|
Source2: munge.logrotate
|
||||||
BuildRequires: gcc systemd-units zlib-devel bzip2-devel libgcrypt-devel
|
BuildRequires: gcc systemd-units zlib-devel bzip2-devel libgcrypt-devel
|
||||||
|
Requires: munge-libs = %{version}-%{release}
|
||||||
Provides: munge-libs = %{version}-%{release}
|
Requires(pre): shadow-utils
|
||||||
Obsoletes: munge-libs < %{version}-%{release}
|
Requires(post): systemd
|
||||||
Requires(pre): shadow-utils
|
Requires(preun): systemd
|
||||||
Requires(post): systemd
|
Requires(postun): systemd
|
||||||
Requires(preun): systemd
|
|
||||||
Requires(postun): systemd
|
|
||||||
|
|
||||||
%description
|
%description
|
||||||
MUNGE (MUNGE Uid 'N' Gid Emporium) is an authentication service for creating
|
MUNGE (MUNGE Uid 'N' Gid Emporium) is an authentication service for creating
|
||||||
and validating credentials. It is designed to be highly scalable for use
|
and validating credentials. It is designed to be highly scalable for use
|
||||||
in an HPC cluster environment. It allows a process to authenticate the UID and
|
in an HPC cluster environment.
|
||||||
GID of another local or remote process within a group of hosts having common
|
It allows a process to authenticate the UID and GID of another local or
|
||||||
users and groups. These hosts form a security realm that is defined by a shared
|
remote process within a group of hosts having common users and groups.
|
||||||
cryptographic key. Clients within this security realm can create and validate
|
These hosts form a security realm that is defined by a shared cryptographic
|
||||||
credentials without the use of root privileges, reserved ports, or
|
key. Clients within this security realm can create and validate credentials
|
||||||
platform-specific methods.
|
without the use of root privileges, reserved ports, or platform-specific
|
||||||
|
methods.
|
||||||
|
|
||||||
%package devel
|
%package devel
|
||||||
Summary: Development tools for MUNGE
|
Summary: Development files for uid * gid authentication across a host cluster
|
||||||
Requires: munge = %{version}-%{release}
|
Requires: munge-libs%{?_isa} = %{version}-%{release}
|
||||||
|
|
||||||
%description devel
|
%description devel
|
||||||
Library files and header files for MUNGE development.
|
Header files for developing using MUNGE.
|
||||||
|
|
||||||
%package help
|
%package libs
|
||||||
Summary: Helpful information for MUNGE
|
Summary: Runtime libs for uid * gid authentication across a host cluster
|
||||||
|
%description libs
|
||||||
%description help
|
Runtime libraries for using MUNGE.
|
||||||
Documents and other helpful information for MUNGE.
|
|
||||||
|
|
||||||
%prep
|
%prep
|
||||||
%setup -q
|
%setup -q
|
||||||
|
cp -p %{SOURCE1} create-munge-key
|
||||||
|
cp -p %{SOURCE2} munge.logrotate
|
||||||
|
|
||||||
%build
|
%build
|
||||||
%configure --disable-static --with-crypto-lib=libgcrypt
|
%configure --disable-static --with-crypto-lib=libgcrypt
|
||||||
# Get rid of some rpaths for /usr/sbin
|
|
||||||
sed -i 's|^hardcode_libdir_flag_spec=.*|hardcode_libdir_flag_spec=""|g' libtool
|
sed -i 's|^hardcode_libdir_flag_spec=.*|hardcode_libdir_flag_spec=""|g' libtool
|
||||||
sed -i 's|^runpath_var=LD_RUN_PATH|runpath_var=DIE_RPATH_DIE|g' libtool
|
sed -i 's|^runpath_var=LD_RUN_PATH|runpath_var=DIE_RPATH_DIE|g' libtool
|
||||||
%make_build
|
make %{?_smp_mflags}
|
||||||
|
|
||||||
%install
|
%install
|
||||||
|
rm -rf %{buildroot}
|
||||||
%make_install
|
make install DESTDIR=%{buildroot}
|
||||||
|
install -p -m 755 create-munge-key %{buildroot}/%{_sbindir}/create-munge-key
|
||||||
|
install -p -D -m 644 munge.logrotate %{buildroot}/%{_sysconfdir}/logrotate.d/munge
|
||||||
rm %{buildroot}/%{_sysconfdir}/sysconfig/munge
|
rm %{buildroot}/%{_sysconfdir}/sysconfig/munge
|
||||||
rm %{buildroot}/%{_initddir}/munge
|
rm %{buildroot}/%{_initddir}/munge
|
||||||
|
|
||||||
rm %{buildroot}/%{_libdir}/libmunge.la
|
rm %{buildroot}/%{_libdir}/libmunge.la
|
||||||
|
|
||||||
chmod 700 %{buildroot}%{_var}/lib/munge %{buildroot}%{_var}/log/munge
|
chmod 700 %{buildroot}%{_var}/lib/munge %{buildroot}%{_var}/log/munge
|
||||||
chmod 700 %{buildroot}%{_sysconfdir}/munge
|
chmod 700 %{buildroot}%{_sysconfdir}/munge
|
||||||
|
|
||||||
touch %{buildroot}%{_var}/run/munge/munged.pid
|
touch %{buildroot}%{_var}/run/munge/munged.pid
|
||||||
|
|
||||||
%postun
|
%postun
|
||||||
%systemd_postun_with_restart munge.service
|
%systemd_postun_with_restart munge.service
|
||||||
/sbin/ldconfig
|
|
||||||
|
|
||||||
%preun
|
%preun
|
||||||
%systemd_preun munge.service
|
%systemd_preun munge.service
|
||||||
@ -79,39 +73,56 @@ exit 0
|
|||||||
|
|
||||||
%post
|
%post
|
||||||
%systemd_post munge.service
|
%systemd_post munge.service
|
||||||
/sbin/ldconfig
|
%ldconfig_scriptlets libs
|
||||||
|
|
||||||
%files
|
%files
|
||||||
%{_bindir}/munge
|
%{_bindir}/munge
|
||||||
%{_bindir}/remunge
|
%{_bindir}/remunge
|
||||||
%{_bindir}/unmunge
|
%{_bindir}/unmunge
|
||||||
%{_sbindir}/munged
|
%{_sbindir}/munged
|
||||||
|
%{_sbindir}/create-munge-key
|
||||||
|
%{_mandir}/man1/munge.1.gz
|
||||||
|
%{_mandir}/man1/remunge.1.gz
|
||||||
|
%{_mandir}/man1/unmunge.1.gz
|
||||||
|
%{_mandir}/man7/munge.7.gz
|
||||||
|
%{_mandir}/man8/munged.8.gz
|
||||||
%{_unitdir}/munge.service
|
%{_unitdir}/munge.service
|
||||||
|
|
||||||
%attr(0700,munge,munge) %dir %{_var}/log/munge
|
%attr(0700,munge,munge) %dir %{_var}/log/munge
|
||||||
%attr(0700,munge,munge) %dir %{_sysconfdir}/munge
|
%attr(0700,munge,munge) %dir %{_sysconfdir}/munge
|
||||||
%attr(0755,munge,munge) %dir %{_var}/run/munge/
|
%attr(0755,munge,munge) %dir %{_var}/run/munge/
|
||||||
%attr(0644,munge,munge) %ghost %{_var}/run/munge/munged.pid
|
%attr(0644,munge,munge) %ghost %{_var}/run/munge/munged.pid
|
||||||
%attr(0700,munge,munge) %dir %{_var}/lib/munge
|
%attr(0700,munge,munge) %dir %{_var}/lib/munge
|
||||||
|
|
||||||
%config(noreplace) %{_tmpfilesdir}/munge.conf
|
%config(noreplace) %{_tmpfilesdir}/munge.conf
|
||||||
|
%config(noreplace) %{_sysconfdir}/logrotate.d/munge
|
||||||
|
%doc AUTHORS
|
||||||
|
%doc JARGON META NEWS QUICKSTART README
|
||||||
|
%doc doc
|
||||||
|
|
||||||
|
%files libs
|
||||||
%{_libdir}/libmunge.so.2
|
%{_libdir}/libmunge.so.2
|
||||||
%{_libdir}/libmunge.so.2.0.0
|
%{_libdir}/libmunge.so.2.0.0
|
||||||
%doc AUTHORS JARGON COPYING COPYING.LESSER
|
%doc COPYING COPYING.LESSER
|
||||||
|
|
||||||
%files devel
|
%files devel
|
||||||
%{_includedir}/munge.h
|
%{_includedir}/munge.h
|
||||||
%{_libdir}/libmunge.so
|
%{_libdir}/libmunge.so
|
||||||
%{_libdir}/pkgconfig/munge.pc
|
%{_libdir}/pkgconfig/munge.pc
|
||||||
|
%{_mandir}/man3/munge.3.gz
|
||||||
%files help
|
%{_mandir}/man3/munge_ctx.3.gz
|
||||||
%{_mandir}/man1/*.1.gz
|
%{_mandir}/man3/munge_ctx_copy.3.gz
|
||||||
%{_mandir}/man7/munge.7.gz
|
%{_mandir}/man3/munge_ctx_create.3.gz
|
||||||
%{_mandir}/man8/munged.8.gz
|
%{_mandir}/man3/munge_ctx_destroy.3.gz
|
||||||
%{_mandir}/man3/*.3.gz
|
%{_mandir}/man3/munge_ctx_get.3.gz
|
||||||
%doc META NEWS QUICKSTART README doc
|
%{_mandir}/man3/munge_ctx_set.3.gz
|
||||||
|
%{_mandir}/man3/munge_ctx_strerror.3.gz
|
||||||
|
%{_mandir}/man3/munge_decode.3.gz
|
||||||
|
%{_mandir}/man3/munge_encode.3.gz
|
||||||
|
%{_mandir}/man3/munge_enum.3.gz
|
||||||
|
%{_mandir}/man3/munge_enum_int_to_str.3.gz
|
||||||
|
%{_mandir}/man3/munge_enum_is_valid.3.gz
|
||||||
|
%{_mandir}/man3/munge_enum_str_to_int.3.gz
|
||||||
|
%{_mandir}/man3/munge_strerror.3.gz
|
||||||
|
|
||||||
%changelog
|
%changelog
|
||||||
* Mon Mar 09 2020 Jiang Kai <jiangkai20@huawei.com> - 0.5.13-3
|
* Mon Sep 7 2020 luoshengwei <luoshengwei@huawei.com> - 0.5.13-1
|
||||||
- Package init
|
- package init
|
||||||
|
|||||||
4
munge.yaml
Normal file
4
munge.yaml
Normal file
@ -0,0 +1,4 @@
|
|||||||
|
version_control: github
|
||||||
|
src_repo: dun/munge
|
||||||
|
tag_prefix: "munge-"
|
||||||
|
separator: "."
|
||||||
Loading…
x
Reference in New Issue
Block a user