freebsd-ports/net/cvsup-mirror/Makefile

# New ports collection makefile for:	cvsup-mirror
# Date created:		01 February 1997
# Whom:			jdp
#
# $FreeBSD$
#

PORTNAME=	cvsup-mirror
PORTVERSION=	1.1
CATEGORIES=	net
DISTFILES=

MAINTAINER=	jdp@FreeBSD.org

RUN_DEPENDS=	${PREFIX}/bin/cvsup:${PORTSDIR}/net/cvsup-bin \
		${PREFIX}/sbin/cvsupd:${PORTSDIR}/net/cvsupd-bin

NO_WRKSUBDIR=	true
NO_CHECKSUM=	true
NO_BUILD=	true
IS_INTERACTIVE=	true
NO_PACKAGE=	too interactive
SCRIPTS_ENV=	USA_RESIDENT=${USA_RESIDENT}

base=${PREFIX}/etc/cvsup
distrib=${base}/sup.client/distrib
rc=${PREFIX}/etc/rc.d

do-extract:
	@test -d ${WRKSRC} || ${MKDIR} ${WRKSRC}

do-install:
	@${ECHO_MSG} "Installing files"
	@test -d ${distrib} || ${MKDIR} ${distrib}
	@test -d ${rc} || ${MKDIR} ${rc}
	@${INSTALL_DATA} ${WRKSRC}/config.sh ${base}
	@${INSTALL_DATA} ${WRKSRC}/cvsupd.access ${base}
	@${INSTALL_SCRIPT} ${FILESDIR}/update.sh ${base}
	@${INSTALL_DATA} ${FILESDIR}/supfile ${base}
	@${INSTALL_DATA} ${FILESDIR}/supfile.crypto ${base}
	@${INSTALL_DATA} ${FILESDIR}/supfile.non-crypto ${base}
	@${INSTALL_DATA} ${FILESDIR}/refuse.self ${distrib}
	@${INSTALL_SCRIPT} ${FILESDIR}/cvsupd.sh ${rc}
	@${CP} /dev/null ${base}/.start_server

post-install:
	@PREFIX=${PREFIX} ${SH} ${PKGDIR}/INSTALL ${PKGNAME} POST-INSTALL

.include <bsd.port.mk>
The cvsup-mirror port, a kit that makes it easy to set up a FreeBSD mirror site. 1997-02-02 04:11:35 +00:00			`# New ports collection makefile for: cvsup-mirror`
			`# Date created: 01 February 1997`
			`# Whom: jdp`
			`#`
$Id$ -> $FreeBSD$ 1999-08-30 14:24:37 +00:00			`# $FreeBSD$`
The cvsup-mirror port, a kit that makes it easy to set up a FreeBSD mirror site. 1997-02-02 04:11:35 +00:00			`#`

Update with the new PORTNAME/PORTVERSION variables 2000-04-09 18:14:07 +00:00			`PORTNAME= cvsup-mirror`
			`PORTVERSION= 1.1`
The cvsup-mirror port, a kit that makes it easy to set up a FreeBSD mirror site. 1997-02-02 04:11:35 +00:00			`CATEGORIES= net`
			`DISTFILES=`

			`MAINTAINER= jdp@FreeBSD.org`

This is a fairly substantial upgrade of the cvsup-mirror port. In honor of the occasion I have bumped the version number to 1.1. The port now depends upon the cvsup-bin and cvsupd-bin ports rather than on the more trouble-prone cvsup port. The CVSup server is run with "-C 100" (max. 100 clients at a time) and the true limit is set in the "/usr/local/etc/cvsup/cvsupd.access" file. This is nice because you can change the limit by editing the file; you don't have to restart the server. The cvsupd.access file also contains a rule to limit each individual host to one connection at a time. The CVSup client is now run under its own unprivileged user ID instead of root. This is a security enhancement. It makes it impossible for a compromised master site to install files into places outside the mirror area of the filesystem. The permissions of various other files such as /usr/local/etc/cvsup have also been strengthened to enhance security. Both client and server now cd to /var/tmp to run, so that if they decide to croak they'll be able to write the core file. :-) The /usr/local/etc/rc.d/cvsupd.sh script now honors the "start" and "stop" arguments. The configure script no longer attempts to tell you the sizes of the various collections. That's impossible to maintain. When I have time I plan to make a web page where one can obtain that information from an automatically-updated source. Then I will reference the URL in the configure script. It is possible to upgrade an existing cvsup-mirror-1.0 installation to this new version, but it is tricky because of the change in ownership of the mirrored files. I will post instructions to the freebsd-hubs mailing list after I make sure I have the procedure just right. 2000-01-28 06:42:37 +00:00			`RUN_DEPENDS= ${PREFIX}/bin/cvsup:${PORTSDIR}/net/cvsup-bin \`
			`${PREFIX}/sbin/cvsupd:${PORTSDIR}/net/cvsupd-bin`
Put RUN_DEPENDS in its own section. 1997-02-06 06:50:40 +00:00
The cvsup-mirror port, a kit that makes it easy to set up a FreeBSD mirror site. 1997-02-02 04:11:35 +00:00			`NO_WRKSUBDIR= true`
			`NO_CHECKSUM= true`
			`NO_BUILD= true`
			`IS_INTERACTIVE= true`
			`NO_PACKAGE= too interactive`
			`SCRIPTS_ENV= USA_RESIDENT=${USA_RESIDENT}`

			`base=${PREFIX}/etc/cvsup`
Install a "refuse" file to protect the mirror's scripts and configuration files from a malicious or compromised master site. 2000-01-14 04:39:57 +00:00			`distrib=${base}/sup.client/distrib`
The cvsup-mirror port, a kit that makes it easy to set up a FreeBSD mirror site. 1997-02-02 04:11:35 +00:00			`rc=${PREFIX}/etc/rc.d`

			`do-extract:`
			`@test -d ${WRKSRC} \|\| ${MKDIR} ${WRKSRC}`

			`do-install:`
echo -> ${ECHO} or ${ECHO_MSG} and in some cases, move echo stuff to pkg/MESSAGE and use ${CAT} ${PKGMESSAGE} 1999-08-27 22:30:39 +00:00			`@${ECHO_MSG} "Installing files"`
Install a "refuse" file to protect the mirror's scripts and configuration files from a malicious or compromised master site. 2000-01-14 04:39:57 +00:00			`@test -d ${distrib} \|\| ${MKDIR} ${distrib}`
awk -> ${AWK} basename -> ${BASENAME} cat -> ${CAT} cp -> ${CP} ldconfig -> ${LDCONFIG} mkdir -> ${MKDIR} 1999-08-22 23:33:47 +00:00			`@test -d ${rc} \|\| ${MKDIR} ${rc}`
The cvsup-mirror port, a kit that makes it easy to set up a FreeBSD mirror site. 1997-02-02 04:11:35 +00:00			`@${INSTALL_DATA} ${WRKSRC}/config.sh ${base}`
This is a fairly substantial upgrade of the cvsup-mirror port. In honor of the occasion I have bumped the version number to 1.1. The port now depends upon the cvsup-bin and cvsupd-bin ports rather than on the more trouble-prone cvsup port. The CVSup server is run with "-C 100" (max. 100 clients at a time) and the true limit is set in the "/usr/local/etc/cvsup/cvsupd.access" file. This is nice because you can change the limit by editing the file; you don't have to restart the server. The cvsupd.access file also contains a rule to limit each individual host to one connection at a time. The CVSup client is now run under its own unprivileged user ID instead of root. This is a security enhancement. It makes it impossible for a compromised master site to install files into places outside the mirror area of the filesystem. The permissions of various other files such as /usr/local/etc/cvsup have also been strengthened to enhance security. Both client and server now cd to /var/tmp to run, so that if they decide to croak they'll be able to write the core file. :-) The /usr/local/etc/rc.d/cvsupd.sh script now honors the "start" and "stop" arguments. The configure script no longer attempts to tell you the sizes of the various collections. That's impossible to maintain. When I have time I plan to make a web page where one can obtain that information from an automatically-updated source. Then I will reference the URL in the configure script. It is possible to upgrade an existing cvsup-mirror-1.0 installation to this new version, but it is tricky because of the change in ownership of the mirrored files. I will post instructions to the freebsd-hubs mailing list after I make sure I have the procedure just right. 2000-01-28 06:42:37 +00:00			`@${INSTALL_DATA} ${WRKSRC}/cvsupd.access ${base}`
The cvsup-mirror port, a kit that makes it easy to set up a FreeBSD mirror site. 1997-02-02 04:11:35 +00:00			`@${INSTALL_SCRIPT} ${FILESDIR}/update.sh ${base}`
			`@${INSTALL_DATA} ${FILESDIR}/supfile ${base}`
			`@${INSTALL_DATA} ${FILESDIR}/supfile.crypto ${base}`
			`@${INSTALL_DATA} ${FILESDIR}/supfile.non-crypto ${base}`
Install a "refuse" file to protect the mirror's scripts and configuration files from a malicious or compromised master site. 2000-01-14 04:39:57 +00:00			`@${INSTALL_DATA} ${FILESDIR}/refuse.self ${distrib}`
The cvsup-mirror port, a kit that makes it easy to set up a FreeBSD mirror site. 1997-02-02 04:11:35 +00:00			`@${INSTALL_SCRIPT} ${FILESDIR}/cvsupd.sh ${rc}`
			`@${CP} /dev/null ${base}/.start_server`

			`post-install:`
/bin/sh -> ${SH} 1997-07-13 18:49:31 +00:00			`@PREFIX=${PREFIX} ${SH} ${PKGDIR}/INSTALL ${PKGNAME} POST-INSTALL`
The cvsup-mirror port, a kit that makes it easy to set up a FreeBSD mirror site. 1997-02-02 04:11:35 +00:00
			`.include <bsd.port.mk>`