Upgrade: tang version to 15 (#13797)

Author: archana25-ms

SPECS-EXTENDED/tang/tang.signatures.json

@@ -1,6 +1,6 @@
 {
  "Signatures": {
-  "tang-14.tar.gz": "0b56702a8ac19ff320d7e13a49682efba32403933c84ab1dae0b26ddcc4e3fe5",
+  "tang-15.tar.xz": "eaf4a2abfea3d05f454a8841e98332be1e1e2432744c70bb7765651ed82c3f7c",
   "tang.sysusers": "df52060d0ee8eadd72154925ed7b7420d42f0f9b3281bae1e02caee9f900e8fd"
  }
 }

SPECS-EXTENDED/tang/tang.spec

@@ -1,37 +1,41 @@
 Summary:        Network Presence Binding Daemon
 Name:           tang
-Version:        14
-Release:        1%{?dist}
+Version:        15
+Release:        7%{?dist}
 License:        GPL-3.0-or-later
 Vendor:         Microsoft Corporation
 Distribution:   Azure Linux
 URL:            https://github.com/latchset/%{name}
-Source0:        https://github.com/latchset/%{name}/archive/refs/tags/v%{version}.tar.gz#/%{name}-%{version}.tar.gz
+Source0:        https://github.com/latchset/%{name}/releases/download/v%{version}/%{name}-%{version}.tar.xz
 Source1:        tang.sysusers
+
 BuildRequires:  asciidoc
 BuildRequires:  coreutils
 BuildRequires:  curl
 BuildRequires:  gcc
 BuildRequires:  git-core
 BuildRequires:  grep
-BuildRequires:  http-parser-devel >= 2.7.1-3
 BuildRequires:  iproute
 BuildRequires:  jose >= 8
 BuildRequires:  libjose-devel >= 8
 BuildRequires:  libjose-openssl-devel >= 8
 BuildRequires:  libjose-zlib-devel >= 8
 BuildRequires:  meson
+BuildRequires:  llhttp-devel
 BuildRequires:  pkgconfig
 BuildRequires:  sed
 BuildRequires:  socat
 BuildRequires:  systemd
 BuildRequires:  systemd-devel
+BuildRequires:  systemd-rpm-macros
+
+%{?systemd_ordering}
 Requires:       coreutils
-Requires:       grep
 Requires:       jose >= 8
+Requires:       llhttp
+Requires:       grep
 Requires:       sed
 Requires(pre):  shadow-utils
-%{?systemd_requires}
 
 %description
 Tang is a small daemon for binding data to the presence of a third party.
@@ -46,22 +50,32 @@ Tang is a small daemon for binding data to the presence of a third party.
 %install
 %meson_install
 install -p -D -m 0644 %{SOURCE1} %{buildroot}%{_sysusersdir}/tang.conf
-echo "User=%{name}" >> %{buildroot}/%{_unitdir}/%{name}d@.service
-mkdir -p %{buildroot}/%{_localstatedir}/db/%{name}
+%{__mkdir_p} $RPM_BUILD_ROOT/%{_localstatedir}/db/%{name}
 
 %check
 %meson_test
 
 %pre
-getent group %{name} >/dev/null || groupadd -r %{name}
-getent passwd %{name} >/dev/null || \
-    useradd -r -g %{name} -d %{_localstatedir}/cache/%{name} -s %{_sbindir}/nologin \
-    -c "Tang Network Presence Daemon user" %{name}
+%sysusers_create_compat %{SOURCE1}
 exit 0
 
 %post
 %systemd_post %{name}d.socket
 
+# Let's make sure any existing keys are readable only
+# by the owner/group.
+if [ -d /var/db/tang ]; then
+    for k in /var/db/tang/*.jwk; do
+        test -e "${k}" || continue
+        chmod 0440 -- "${k}"
+    done
+    for k in /var/db/tang/.*.jwk; do
+        test -e "${k}" || continue
+        chmod 0440 -- "${k}"
+    done
+    chown tang:tang -R /var/db/tang
+fi
+
 %preun
 %systemd_preun %{name}d.socket
 
@@ -83,73 +97,13 @@ exit 0
 %{_sysusersdir}/tang.conf
 
 %changelog
-* Tue Sep 05 2023 Muhammad Falak R Wani <mwani@microsoft.com> - 14-1
-- Upgrade version to address CVE-2023-1672
-- Lint spec
+* Wed May 14 2025 Archana Shettigar <v-shettigara@microsoft.com> - 15-7
+- Initial Azure Linux import from Fedora 41 (license: MIT).
 - License verified
 
-* Fri Apr 30 2021 Pawel Winogrodzki <pawelwi@microsoft.com> - 7-7
-- Initial CBL-Mariner import from Fedora 32 (license: MIT).
-- Making binaries paths compatible with CBL-Mariner's paths.
-
-* Tue Dec 1 2020 Sergio Correia <scorreia@redhat.com> - 7-6
-- Move build system to meson
-  Upstream commits (fed9020, 590de27)
-- Move key handling to tang itself
-  Upstream commits (6090505, c71df1d, 7119454)
-
-* Tue Feb 25 2020 Sergio Correia <scorreia@redhat.com> - 7-5
-- Rebuilt after http-parser update
-
-* Fri Jan 31 2020 Fedora Release Engineering <releng@fedoraproject.org> - 7-4
-- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild
-
-* Sat Jul 27 2019 Fedora Release Engineering <releng@fedoraproject.org> - 7-3
-- Rebuilt for https://fedoraproject.org/wiki/Fedora_31_Mass_Rebuild
-
-* Sun Feb 03 2019 Fedora Release Engineering <releng@fedoraproject.org> - 7-2
-- Rebuilt for https://fedoraproject.org/wiki/Fedora_30_Mass_Rebuild
-
-* Fri Aug 10 2018 Nathaniel McCallum <npmccallum@redhat.com> - 7-1
-- New upstream release
-- Retire tang-nagios package (now separate upstream)
-
-* Sat Jul 14 2018 Fedora Release Engineering <releng@fedoraproject.org> - 6-5
-- Rebuilt for https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild
-
-* Fri Feb 09 2018 Fedora Release Engineering <releng@fedoraproject.org> - 6-4
-- Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild
-
-* Thu Aug 03 2017 Fedora Release Engineering <releng@fedoraproject.org> - 6-3
-- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild
-
-* Thu Jul 27 2017 Fedora Release Engineering <releng@fedoraproject.org> - 6-2
-- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild
-
-* Wed Jun 14 2017 Nathaniel McCallum <npmccallum@redhat.com> - 6-1
-- New upstream release
-
-* Wed Jun 14 2017 Nathaniel McCallum <npmccallum@redhat.com> - 5-2
-- Fix incorrect dependencies
-
-* Wed Jun 14 2017 Nathaniel McCallum <npmccallum@redhat.com> - 5-1
-- New upstream release
-
-* Sat Feb 11 2017 Fedora Release Engineering <releng@fedoraproject.org> - 4-3
-- Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild
-
-* Mon Nov 14 2016 Nathaniel McCallum <npmccallum@redhat.com> - 4-2
-- Fix a race condition in one of the tests
-
-* Thu Nov 10 2016 Nathaniel McCallum <npmccallum@redhat.com> - 4-1
-- New upstream release
-- Add nagios subpackage
-
-* Wed Oct 26 2016 Nathaniel McCallum <npmccallum@redhat.com> - 3-1
-- New upstream release
-
-* Wed Oct 19 2016 Nathaniel McCallum <npmccallum@redhat.com> - 2-1
-- New upstream release
+* Sat Jul 20 2024 Fedora Release Engineering <releng@fedoraproject.org> - 15-6
+- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild
 
-* Tue Aug 23 2016 Nathaniel McCallum <npmccallum@redhat.com> - 1-1
-- First release
+* Thu May 09 2024 Sergio Correia <scorreia@redhat.com> - 15-5
+- RPMAUTOSPEC: unresolvable merge
+## END: Generated by rpmautospec

cgmanifest.json

@@ -28826,8 +28826,8 @@
         "type": "other",
         "other": {
           "name": "tang",
-          "version": "14",
-          "downloadUrl": "https://github.com/latchset/tang/archive/refs/tags/v14.tar.gz"
+          "version": "15",
+          "downloadUrl": "https://github.com/latchset/tang/releases/download/v15/tang-15.tar.xz"
         }
       }
     },