blob: b23b19f717df166271e54badbdb0167190152ba5 (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
|
# Maintainer: Diab Neiroukh <lazerl0rd@thezest.dev>
# Contributor: Bartłomiej Piotrowski <bpiotrowski@archlinux.org>
# Contributor: Sébastien Luttringer
# Contributor: Sergej Pupykin <pupykin.s+arch@gmail.com>
# Contributor: Miroslaw Szot <mss@czlug.icis.pcz.pl>
# Contributor: Daniel Micay <danielmicay@gmail.com>
pkgbase=nginx-zest-git
pkgname=(nginx-zest-git nginx-zest-src-git)
pkgver=1.19.4.r0.gb3f311dd8
pkgrel=7
epoch=3
pkgdesc='NGINX with beefed up security and performance'
arch=(x86_64)
url='https://github.com/ZestProjects/nginx'
license=(custom)
depends=(pcre openssl geoip mailcap libxcrypt brotli gperftools liburing zstd)
makedepends=(mercurial git 'rust>=1.39')
checkdepends=(perl perl-gd perl-io-socket-ssl perl-fcgi perl-cache-memcached
memcached ffmpeg inetutils)
backup=(etc/nginx/fastcgi.conf
etc/nginx/fastcgi_params
etc/nginx/koi-win
etc/nginx/koi-utf
etc/nginx/nginx.conf
etc/nginx/scgi_params
etc/nginx/uwsgi_params
etc/nginx/win-utf
etc/logrotate.d/nginx)
install=nginx.install
provides=(nginx nginx-mainline nginx-zest)
conflicts=(nginx)
source=(git+$url.git
hg+https://hg.nginx.org/nginx-tests
service
logrotate
git+https://github.com/cloudflare/quiche.git
git+https://github.com/cloudflare/zlib.git
git+https://github.com/google/ngx_brotli.git
git+https://github.com/tokers/zstd-nginx-module.git
https://nginx.org/LICENSE)
b2sums=('SKIP'
'SKIP'
'b6414f9917fe62cc57556a2927fb404cc839398dac64a0d60c1d45af11a4e6be71bbee5f9bae17ce3604c31ab9247e8c6aec759f86890b54f86267db1fe7c08a'
'fe32fb75a7677abca86c4bc3f4ca9bfeccb3cd7afb4dd3c4ec21ab8b53cc0d72ba5330a1131498b5df222c2e517bd01e2df9f67256011ff15241b777a85be6b3'
'SKIP'
'SKIP'
'SKIP'
'SKIP'
'fbd993990b43a4476d0963287bdc5f55f73fa5ce828f11977cf1abeedd478729a95861d930e27c6a1b0e78b16397164395afc4473fd34e050cadd32b94336beb')
_common_flags=(
--with-compat
--with-debug
--with-file-aio
--with-http_addition_module
--with-http_auth_request_module
--with-http_dav_module
--with-http_degradation_module
--with-http_flv_module
--with-http_geoip_module
--with-http_gunzip_module
--with-http_gzip_static_module
--with-http_mp4_module
--with-http_realip_module
--with-http_secure_link_module
--with-http_slice_module
--with-http_ssl_module
--with-http_stub_status_module
--with-http_sub_module
--with-http_v2_module
--with-mail
--with-mail_ssl_module
--with-pcre-jit
--with-stream
--with-stream_geoip_module
--with-stream_realip_module
--with-stream_ssl_module
--with-stream_ssl_preread_module
--with-threads
)
_zest_flags=(
--with-http_v2_hpack_enc
--with-http_v3_module
)
pkgver() {
cd "$pkgname"
( set -o pipefail
# cutting off 'release-' prefix that presents in the git tag
git describe --long --tags 2>/dev/null | sed 's/^release-//;s/\([^-]*-g\)/r\1/;s/-/./g' ||
printf "r%s.%s" "$(git rev-list --count HEAD)" "$(git rev-parse --short HEAD)"
)
}
prepare() {
cp -r nginx{,-src}
cd quiche
git submodule update --init # prepare quiche for building
cd "$srcdir/zlib"
[ -f "Makefile" ] && make clean # prepare zlib-cf for building
make -f "Makefile.in" "distclean" # prepare zlib-cf for statically linking
}
build() {
export CFLAGS="${CFLAGS//-flto/}" # lto breaks quiche
export CXXFLAGS="${CXXFLAGS//-flto/}" # lto breaks quiche
export CFLAGS="${CFLAGS//-flto=thinlto/}" # thinlto also breaks quiche
export CXXFLAGS="${CXXFLAGS//-fltothinlto/}" # thinlto also breaks quiche
export CFLAGS="$CFLAGS -fno-builtin-malloc -fno-builtin-calloc -fno-builtin-realloc -fno-builtin-free" # recommended for tcmalloc
export CXXFLAGS="$CXXFLAGS -fno-builtin-malloc -fno-builtin-calloc -fno-builtin-realloc -fno-builtin-free" # recommended for tcmalloc
export LDFLAGS="$LDFLAGS -ltcmalloc" # needed for tcmalloc
cd nginx
./auto/configure \
--prefix=/etc/nginx \
--conf-path=/etc/nginx/nginx.conf \
--sbin-path=/usr/bin/nginx \
--pid-path=/run/nginx.pid \
--lock-path=/run/lock/nginx.lock \
--user=http \
--group=http \
--http-log-path=/var/log/nginx/access.log \
--error-log-path=stderr \
--http-client-body-temp-path=/var/lib/nginx/client-body \
--http-proxy-temp-path=/var/lib/nginx/proxy \
--http-fastcgi-temp-path=/var/lib/nginx/fastcgi \
--http-scgi-temp-path=/var/lib/nginx/scgi \
--http-uwsgi-temp-path=/var/lib/nginx/uwsgi \
--with-cc-opt="$CFLAGS $CPPFLAGS" \
--with-ld-opt="$LDFLAGS" \
${_common_flags[@]} \
${_zest_flags[@]} \
--add-module="$srcdir/ngx_brotli" \
--add-module="$srcdir/zstd-nginx-module" \
--build="Zest Projects Ltd." \
--with-openssl="$srcdir/quiche/deps/boringssl" \
--with-zlib="$srcdir/zlib" \
--with-quiche="$srcdir/quiche"
make
}
check() {
cd nginx-tests
rm -rf "h2_server_push.t" # http2 hpack breaks this test
TEST_NGINX_BINARY="$srcdir/nginx/objs/nginx" prove .
}
package_nginx-zest-git() {
cd nginx
make DESTDIR="$pkgdir" install
sed -e 's|\<user\s\+\w\+;|user html;|g' \
-e '44s|html|/usr/share/nginx/html|' \
-e '54s|html|/usr/share/nginx/html|' \
-i "$pkgdir"/etc/nginx/nginx.conf
rm "$pkgdir"/etc/nginx/*.default
rm "$pkgdir"/etc/nginx/mime.types # in mailcap
install -d "$pkgdir"/var/lib/nginx
install -dm700 "$pkgdir"/var/lib/nginx/proxy
chmod 755 "$pkgdir"/var/log/nginx
chown root:root "$pkgdir"/var/log/nginx
install -d "$pkgdir"/usr/share/nginx
mv "$pkgdir"/etc/nginx/html/ "$pkgdir"/usr/share/nginx
install -Dm644 ../logrotate "$pkgdir"/etc/logrotate.d/nginx
install -Dm644 ../service "$pkgdir"/usr/lib/systemd/system/nginx.service
install -Dm644 "$srcdir/LICENSE" "$pkgdir"/usr/share/licenses/$pkgname/LICENSE
rmdir "$pkgdir"/run
install -d "$pkgdir"/usr/share/man/man8/
gzip -9c docs/man/nginx.8 > "$pkgdir"/usr/share/man/man8/nginx.8.gz
for i in ftdetect indent syntax; do
install -Dm644 contrib/vim/$i/nginx.vim \
"$pkgdir/usr/share/vim/vimfiles/$i/nginx.vim"
done
}
package_nginx-zest-src-git() {
pkgdesc="Source code of Zest NGINX $pkgver, useful for building modules"
depends=()
provides=(nginx-src nginx-mainline-src nginx-zest-src)
conflicts=()
install -d "$pkgdir/usr/src"
cp -r nginx-src "$pkgdir/usr/src/$pkgname"
}
|