119 | | |
120 | | === python ssl === |
121 | | |
122 | | As of Bcfg2 1.0, Bcfg2 has switched to the in-tree ssl module included with python 2.6. A backport exists for 2.3, 2.4, and 2.5. With this, M2Crypto is not needed, and tlslite is no longer included with bcfg2 sources. The ssl module can be found [http://pypi.python.org/pypi/ssl here]. See [wiki:Authentication] for details. |
123 | | |
124 | | To build a package of the ssl backport for .deb based distributions that don't ship with python 2.6, you can follow these instructions, which use [http://github.com/astraw/stdeb/tree/master stdeb]. Alternatively if you happen to have .deb packaging skills, it would be great to get policy-complaint .debs into the major deb-based distributions. |
125 | | |
126 | | '''NOTE:''' To build the module on Debian (lenny) and Ubuntu (hardy), I had to apply this [attachment:ssl-debian.patch patch] to remove bluetooth references. |
127 | | |
128 | | {{{ |
129 | | sudo aptitude install python-all-dev fakeroot python-setuptools libssl-dev debhelper python-support |
130 | | sudo easy_install stdeb |
131 | | wget http://pypi.python.org/packages/source/s/ssl/ssl-1.15.tar.gz#md5=81ea8a1175e437b4c769ae65b3290e0c |
132 | | tar xvfz ssl-1.15.tar.gz |
133 | | cd ssl-1.15 |
134 | | # patch here if necessary |
135 | | stdeb_run_setup |
136 | | cd deb_dist/ssl-1.15 |
137 | | dpkg-buildpackage -rfakeroot -uc -us |
138 | | sudo dpkg -i ../python-ssl_1.15-1_amd64.deb |
139 | | }}} |
140 | | |
141 | | For complete bcfg2 goodness, you'll also want to package stdeb using stdeb: |
142 | | {{{ |
143 | | sudo aptitude install apt-file |
144 | | wget http://pypi.python.org/packages/source/s/stdeb/stdeb-0.3.tar.gz#md5=e692f745597dcdd9343ce133e3b910d0 |
145 | | tar xvfz stdeb-0.3.tar.gz |
146 | | cd stdeb-0.3 |
147 | | stdeb_run_setup |
148 | | cd deb_dist/stdeb-0.3 |
149 | | dpkg-buildpackage -rfakeroot -uc -us |
150 | | sudo dpkg -i ../python-stdeb_0.3-1_all.deb |
151 | | }}} |
339 | | ==== upload stdeb ==== |
340 | | |
341 | | Upload: |
342 | | {{{ |
343 | | #!/bin/sh -x |
344 | | |
345 | | sudo aptitude install python-all-dev fakeroot python-setuptools libssl-dev debhelper python-support apt-file |
346 | | sudo easy_install stdeb |
347 | | wget http://pypi.python.org/packages/source/s/stdeb/stdeb-0.4.1.tar.gz |
348 | | tar xvfz stdeb-0.4.1.tar.gz |
349 | | cd stdeb-0.4.1 |
350 | | stdeb_run_setup |
351 | | cd deb_dist/stdeb-0.4.1 |
352 | | cp debian/changelog debian/changelog.orig |
353 | | ppa="testing" # "testing" or "ppa" (for stable) |
354 | | try="2" |
355 | | |
356 | | for dist in dapper hardy intrepid jaunty karmic; do |
357 | | cp debian/changelog.orig debian/changelog |
358 | | (cd debian && debchange --force-bad-version --preserve --newversion \ |
359 | | "0.4.1-1~${ppa}${try}~${dist}${try}" \ |
360 | | backport to ppa ${ppa}, dist ${dist}, try ${try}) |
361 | | # Replace 0xAA95C349 to your GnuPG Key ID |
362 | | debuild -S -sa -k0xAA95C349 # Using -sa here because we need .orig.tar.gz file |
363 | | dput bcfg2-testing-force-${dist} ../stdeb_0.4.1-1~${ppa}${try}~${dist}${try}_source.changes |
364 | | done |
365 | | |
366 | | # TODO: Fix "Upload Warnings: No copyright file found." |
367 | | }}} |
368 | | |
369 | | |
370 | | |
371 | | And then make sure it's installed locally for the next step. |
372 | | |
373 | | ==== upload python-ssl ==== |
374 | | |
375 | | Upload: |
376 | | {{{ |
377 | | #!/bin/sh -x |
378 | | |
379 | | wget http://pypi.python.org/packages/source/s/ssl/ssl-1.15.tar.gz |
380 | | tar xvfz ssl-1.15.tar.gz |
381 | | cd ssl-1.15 |
382 | | wget https://trac.mcs.anl.gov/projects/bcfg2/raw-attachment/wiki/BuildingDebianPackages/ssl-1.15-debian.patch |
383 | | patch -p1 < ssl-1.15-debian.patch |
384 | | |
385 | | # Note: ssl backport will only build on systems with Python 2.5 or earlier |
386 | | # this is a workaround for newer systems... |
387 | | sudo ln -sf /usr/bin/python2.5 /usr/bin/python |
388 | | sudo easy_install stdeb |
389 | | stdeb_run_setup |
390 | | |
391 | | cd deb_dist/ssl-1.15 |
392 | | cp debian/changelog debian/changelog.orig |
393 | | ppa="testing" # "testing" or "ppa" (for stable) |
394 | | try="1" |
395 | | |
396 | | for dist in dapper hardy intrepid; do |
397 | | cp debian/changelog.orig debian/changelog |
398 | | (cd debian && debchange --force-bad-version --preserve --newversion \ |
399 | | "1.15-1~${ppa}${try}~${dist}${try}" \ |
400 | | backport to ppa ${ppa}, dist ${dist}, try ${try}) |
401 | | # Replace 0xAA95C349 to your GnuPG Key ID |
402 | | debuild -S -sa -k0xAA95C349 # Using -sa here because we need .orig.tar.gz file |
403 | | dput bcfg2-testing-force-${dist} ../ssl_1.15-1~${ppa}${try}~${dist}${try}_source.changes |
404 | | done |
405 | | |
406 | | sudo ln -sf /usr/bin/python2.6 /usr/bin/python |
407 | | }}} |
408 | | |
409 | | And then make sure it's installed locally for the next step. |
410 | | |