Hello Russ,

thanks! This feedback is really useful! :) Of course I would like to have
some help for the .rpms. I did had a system in place for the older releases,
but it was working only on Fedora as I have never had time to work on some
other OS releases..

I would be really happy to include your patches so that the .rpm build
system will work again (and more properly!) :D

Let me know,
Max


R P Herrold wrote:
> 
> 
> I resend this as the SF mailing list has not returned me a copy of this 
> pice yet.  There are some problems in the embedded .spec files in both 
> OpenCA, and openca-tools, as at the FTP site.
> 
> I have completed patches, and a rebuild of openca-tools (it has an 
> improper use of some options in 'install' and is 'finished; OpenCA needs 
> a bit more with in the Makefile.in in the 'install' target.
> 
> The patches, the ORIG and patched .spec files [which seem to be created 
> through some sort of scripted release mechanism] and the 'proof' SRPMs 
> after the patches are at:
> 
>     ftp://ftp.owlriver.com/pub/local/ORC/openca/
> 
> I would suggest editing the specfile.in files to add the 'CentOS' 
> specific detection code.  There is also a version problem in the .spec 
> file in openca-tools-1.0.0.  I will look at the specfile generation code 
> in a bit. There are also problems in the Makefile.in with the use of the 
> '-o' and '-g' options.
> 
> Lines like:
> 
> /usr/bin/install -c -o root -g nobody
> 
> are ** not ** permissible (in specifying -o and -g options). Such 
> options cause errors which users find hard to understand when (properly) 
> building as non-root, and should be addressed in the %files stanza 
> rather than in 'install'
> 
> This .spec file construct is where the ownerships are set:
> 
> %defattr(-, -, -)
> 
> should be something like
> 
> %defattr(644,root,root,755)
> 
> ... or if something like:
> 
> /usr/bin/install -c -o root -g nobody -m 755 openssl-setopt 
> /var/tmp/openca-base-1.0.1//opt/openca/bin/openssl-setopt
> 
> is REALLY needed,
> 
> %defattr(644,root,nobody,755)
> 
> 
> I really doubt that the 'nobody' group is needed, when the perms are 
> 755, but .... perhaps.   Please advise if this is really so.
> 
> 
> As to the dangers of root building, and how to do better, see my piece 
> about building as non-root:
>     http://www.owlriver.com/tips/non-root/
> 
> Many people do not 'solve' non-root building, but RPM was (and is) 
> clearly able to do EVERYTHING that a root build can do, but in a fashion 
> to be safe to the surrounding build environment.  Getting this working 
> properly is someting which a 'proper' project should be doing, and I can 
> of course help.
> 
> I was the long time editor of the RPM website, prior to its recent 
> return to Red Hat editorship control, and a founder in the CentOS 
> project.   I am certainly willing to send along patches to help this 
> project.
> 
> -- Russ
> 
> 
> 
> ---------- Forwarded message ----------
> Date: Mon, 13 Oct 2008 13:11:13
> From: R P Herrold <[EMAIL PROTECTED]>
> To: Users' Help and Suggestions <[EMAIL PROTECTED]>
> Cc: R P Herrold <[EMAIL PROTECTED]>
> Subject: Testing OpenCA ten-ten
> 
> On Mon, 13 Oct 2008, Massimiliano Pala wrote:
> 
>> I think that the error is related to the fact you have no RPM system 
>> installed. If you install the rpm software on your system you will not 
>> get that error anymore.
> 
> no -- CentOS is the community rebuild of RHEL from Red Hat [I speak as 
> one of the core team members], and clearly does have the RPM package 
> amnagement system at its heart.  Perhaps the 'rpm-build' package (which 
> provides /usr/bin/rpmbuild) was not installed on Samuel Rios Carvalho's 
> system.
> 
> I will try to replicate the error in a proper CentOS setup
> 
> -- Russ herrold
>     herrold at centos dot org
> 


-- 

Best Regards,

        Massimiliano Pala

--o------------------------------------------------------------------------
Massimiliano Pala [OpenCA Project Manager]  [EMAIL PROTECTED]
                                                  [EMAIL PROTECTED]

Dartmouth Computer Science Dept               Home Phone: +1 (603) 369-9332
PKI/Trust Laboratory                          Work Phone: +1 (603) 646-9179
--o------------------------------------------------------------------------

People who think they know everything are a great annoyance to those of us
who do.
                                                           -- Isaac Asimov

-------------------------------------------------------------------------
This SF.Net email is sponsored by the Moblin Your Move Developer's challenge
Build the coolest Linux based applications with Moblin SDK & win great prizes
Grand prize is a trip for two to an Open Source event anywhere in the world
http://moblin-contest.org/redirect.php?banner_id=100&url=/
_______________________________________________
OpenCA-Devel mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/openca-devel

Reply via email to