diff options
| -rw-r--r-- | .SRCINFO | 32 | ||||
| -rw-r--r-- | .gitignore | 9 | ||||
| -rw-r--r-- | 10-appgate-tun.network | 5 | ||||
| -rw-r--r-- | PKGBUILD | 72 | ||||
| -rw-r--r-- | appgatedriver.service | 29 |
5 files changed, 75 insertions, 72 deletions
@@ -1,23 +1,27 @@ pkgbase = appgate-sdp - pkgdesc = Software Defined Perimeter - GUI client - pkgver = 4.2.2 + pkgdesc = Appgate SDP (Software Defined Perimeter) desktop client + pkgver = 6.2.3 pkgrel = 1 - url = https://www.cyxtera.com/essential-defense/appgate-sdp/support + url = https://www.appgate.com/support/software-defined-perimeter-support arch = x86_64 license = custom - depends = gconf - depends = libsecret + license = custom:commercial depends = gtk3 - depends = python - depends = nss + depends = libsecret depends = libxss depends = nodejs - depends = dnsmasq - conflicts = appgate-sdp-headless - source = https://sdpdownloads.cyxtera.com/AppGate-SDP-4.2/clients/appgate-sdp_4.2.2_amd64.deb - source = appgatedriver.service - md5sums = cdc1ec9ce02f95a5d826f876d9e55bc5 - md5sums = 002644116e20b2d79fdb36b7677ab4cf + depends = nss + depends = python-dbus + depends = python-distro + optdepends = gnome-keyring: saves the endpoint certificate between sessions + optdepends = dnsmasq: dns resolver for systems without systemd-resolved + provides = appgate-sdp + options = staticlibs + options = !strip + options = !emptydirs + source = https://bin.appgate-sdp.com/6.2/client/appgate-sdp_6.2.3_amd64.deb + source = 10-appgate-tun.network + sha256sums = 5ba3fcdfe0cf776551cf9d9428f269f83d56723803c325d8731eab5621db9a59 + sha256sums = 2eb0daa10429e67d703cceccd34069da3044d99c5652658ec73c7a01c88b64e9 pkgname = appgate-sdp - diff --git a/.gitignore b/.gitignore index 94bf332abe8d..966e12d708b6 100644 --- a/.gitignore +++ b/.gitignore @@ -1,4 +1,9 @@ -*.pkg.tar.xz -*.deb +appgate-sdp-*.pkg.tar.zst +appgate-sdp-*.pkg.tar.xz +appgate-sdp*.deb +appgate-sdp*.rpm +appgate-sdp_*/ +appgate-sdp-*.log +PKGBUILD-namcap.log pkg/ src/ diff --git a/10-appgate-tun.network b/10-appgate-tun.network new file mode 100644 index 000000000000..8a0e3c34d9c9 --- /dev/null +++ b/10-appgate-tun.network @@ -0,0 +1,5 @@ +[Match] +Name=tun* + +[Link] +Unmanaged=yes @@ -1,35 +1,53 @@ -# Maintainer: Pawel Mosakowski <pawel at mosakowski dot net> +# Maintainer: Fredy García <frealgagu at gmail dot com> +# Contributor: Pawel Mosakowski <pawel at mosakowski dot net> + pkgname=appgate-sdp -conflicts=('appgate-sdp-headless') -pkgver=4.2.2 -_download_pkgver=4.2 +pkgver=6.2.3 pkgrel=1 -epoch= -pkgdesc="Software Defined Perimeter - GUI client" -arch=('x86_64') -url="https://www.cyxtera.com/essential-defense/appgate-sdp/support" -license=('custom') - -# dependecies calculated by namcap -depends=('gconf' 'libsecret' 'gtk3' 'python' 'nss' 'libxss' 'nodejs' 'dnsmasq') -source=("https://sdpdownloads.cyxtera.com/AppGate-SDP-${_download_pkgver}/clients/${pkgname}_${pkgver}_amd64.deb" - "appgatedriver.service") +pkgdesc="Appgate SDP (Software Defined Perimeter) desktop client" +arch=("x86_64") +url="https://www.${pkgname%%-*}.com/support/software-defined-perimeter-support" +license=("custom" "custom:commercial") +depends=("gtk3" "libsecret" "libxss" "nodejs" "nss" "python-dbus" "python-distro") +optdepends=( + "gnome-keyring: saves the endpoint certificate between sessions" + "dnsmasq: dns resolver for systems without systemd-resolved" +) +provides=("${pkgname}") +options=(staticlibs !strip !emptydirs) +source=( + "https://bin.${pkgname}.com/${pkgver%.*}/client/${pkgname}_${pkgver}_amd64.deb" + "10-appgate-tun.network" +) +sha256sums=( + "5ba3fcdfe0cf776551cf9d9428f269f83d56723803c325d8731eab5621db9a59" + "2eb0daa10429e67d703cceccd34069da3044d99c5652658ec73c7a01c88b64e9" +) prepare() { - tar -xf data.tar.xz + mkdir "${srcdir}/${pkgname}" + cd "${srcdir}/${pkgname}" + + bsdtar -xf "${srcdir}/data.tar.xz" -C . + + # Remove unnecessary .deb related directory + rm -rf "${srcdir}/${pkgname}/etc/init.d" } package() { - cp -dpr "${srcdir}"/{etc,lib,opt,usr} "${pkgdir}" - mv -v "$pkgdir/lib/systemd/system" "$pkgdir/usr/lib/systemd/" - rm -vrf "$pkgdir/lib" - - cp -v "$srcdir/appgatedriver.service" "$pkgdir/usr/lib/systemd/system/appgatedriver.service" - - mkdir -vp "$pkgdir/usr/share/licenses/appgate-sdp" - cp -v "$pkgdir/usr/share/doc/appgate/copyright" "$pkgdir/usr/share/licenses/appgate-sdp" - cp -v "$pkgdir/usr/share/doc/appgate/LICENSE.github" "$pkgdir/usr/share/licenses/appgate-sdp" - cp -v "$pkgdir/usr/share/doc/appgate/LICENSES.chromium.html.bz2" "$pkgdir/usr/share/licenses/appgate-sdp" + # Install application files + cp -dpr "${srcdir}/${pkgname}/"{etc,opt,usr} "${pkgdir}" + + # Install service files + install -dm755 "${pkgdir}/usr/lib/systemd/system" + install -Dm644 "${srcdir}/${pkgname}/lib/systemd/system/"* "${pkgdir}/usr/lib/systemd/system/" + + # Make systemd-networkd not manage tun interfaces + install -dm755 "${pkgdir}/usr/lib/systemd/network" + install -Dm644 "${srcdir}/10-appgate-tun.network" "${pkgdir}/usr/lib/systemd/network/" + + # Install license files + install -Dm644 "${srcdir}/${pkgname}/usr/share/doc/${pkgname/-sdp/}/copyright" "${pkgdir}/usr/share/licenses/${pkgname}/copyright" + install -Dm644 "${srcdir}/${pkgname}/usr/share/doc/${pkgname/-sdp/}/LICENSE.github" "${pkgdir}/usr/share/licenses/${pkgname}/LICENSE.github" + install -Dm644 "${srcdir}/${pkgname}/usr/share/doc/${pkgname/-sdp/}/LICENSES.chromium.html.bz2" "${pkgdir}/usr/share/licenses/${pkgname}/LICENSES.chromium.html.bz2" } -md5sums=('cdc1ec9ce02f95a5d826f876d9e55bc5' - '002644116e20b2d79fdb36b7677ab4cf') diff --git a/appgatedriver.service b/appgatedriver.service deleted file mode 100644 index 902db9a64f22..000000000000 --- a/appgatedriver.service +++ /dev/null @@ -1,29 +0,0 @@ -[Unit] -Description=AppGate driver service - -[Service] -# Remove traces of appgate-resolver, if it wasn't terminated properly -ExecStartPre=/bin/sh -c "test -e /etc/resolv.appgate && (chattr -i /etc/resolv.conf || :; mv /etc/resolv.appgate /etc/resolv.conf) ||:" -ExecStart="/opt/appgate/tun-service" -Type=forking -Restart=always -ProtectHome=true -ProtectKernelTunables=true -ProtectKernelModules=true -ProtectControlGroups=true -PrivateTmp=true -CapabilityBoundingSet=~CAP_SYS_ADMIN -CapabilityBoundingSet=~CAP_WAKE_ALARM -CapabilityBoundingSet=~CAP_SYSLOG -CapabilityBoundingSet=~CAP_SYS_TTY_CONFIG -CapabilityBoundingSet=~CAP_SYS_TIME -CapabilityBoundingSet=~CAP_SYS_RESOURCE -CapabilityBoundingSet=~CAP_SYS_PTRACE -CapabilityBoundingSet=~CAP_SYS_PACCT -CapabilityBoundingSet=~CAP_SYS_MODULE -CapabilityBoundingSet=~CAP_SYS_CHROOT -CapabilityBoundingSet=~CAP_SYS_BOOT -InaccessiblePaths=-/mnt -/srv -/boot -/media - -[Install] -WantedBy=multi-user.target |