From: Adolf Belka <adolf.belka@ipfire.org>
To: development@lists.ipfire.org
Cc: Adolf Belka <adolf.belka@ipfire.org>
Subject: [PATCH] rpcbind: Update to version 1.2.8
Date: Tue, 26 Aug 2025 20:49:01 +0200 [thread overview]
Message-ID: <20250826184904.6229-20-adolf.belka@ipfire.org> (raw)
In-Reply-To: <20250826184904.6229-1-adolf.belka@ipfire.org>
- Update from version 1.2.7 to 1.2.8
- Update of rootfile not required
- Changelog
1.2.8
rpcinfo: Removed a number of "old-style function definition" warnings
rpcbind: Add -v flag to print version and config
This helps to see compiled time options, e.g. remote calls enablement.
$ ./rpcbind -v
rpcbind 1.2.7
debug: no, libset debug: no, libwrap: no, nss modules: files,
remote calls: no, statedir: /run/rpcbind, systemd: yes,
user: root, warm start: no
man/rpcbind: Update list of options
-L was removed in 718ab7e, -w added in 9b1aaa6, -f added in eb36cf1.
Fixes: 718ab7e ("Removed the documentation about the non-existent '-L' flag")
Fixes: 9b1aaa6 ("Allow the warms start code to be enabled at compile
time...")
Fixes: eb36cf1 ("rpcbind: add no-fork mode")
Comment out ListenStream=@/run/rpcbind.sock
[nfs/nfs-utils/rpcbind] rpcbind: avoid dereferencing NULL from realloc()
Fixes: https://bugzilla.redhat.com/show_bug.cgi?id=2173869
Move rpbind's default configuration to /run verses /var/run
Move rpcbind.lock to /run
Most of the distros have /var/run as symlink to /run.
Because /var may be a separate partition, and could even be mounted via
NFS, having to look directly to /run help to avoid issues rpcbind
startup early in boot when /var might not be available.
systemd/rpcbind.service.in: Want/After systemd-tmpfiles-setup
Add Want/After systemd-tmpfiles-setup.service. This is taken from Fedora
rpcbind-0.2.4-5.fc25 patch [1] which tried to handle bug #1401561 [2]
where /var/run/rpcbind.lock cannot be created due missing /var/run/
directory. But the suggestion to add RequiresMountFor=... was
implemented in ee569be ("Fix boot dependency in systemd service file").
But even with RequiresMountsFor=/run/rpcbind in rpcbind.service and
/run/rpcbind.lock there is error on openSUSE Tumbleweed with rpcbind
1.2.6:
rpcbind.service: Failed at step NAMESPACE spawning /usr/sbin/rpcbind:
Read-only file system
Adding systemd-tmpfiles-setup.service fixes it.
NOTE: Debian uses for this purpose remote-fs-pre.target (also works, but
systemd-tmpfiles-setup.service looks to me more specific).
openSUSE uses only After=sysinit.target as a result of #1117217 [3]
(also works).
[1] https://src.fedoraproject.org/rpms/rpcbind/blob/rawhide/f/rpcbind-0.2.4-systemd-service.patch
[2] https://bugzilla.redhat.com/show_bug.cgi?id=1401561
[3] https://bugzilla.suse.com/show_bug.cgi?id=1117217
systemd/rpcbind.service.in: Add various hardenings options
We've been running rpcbind 1.2.6 with it in openSUSE since 2021.
NOTE: In systemd < 244 (released Nov 2019) some of these options are
unknown and will produce warnings, see
https://en.opensuse.org/openSUSE:Security_Features#Systemd_hardening_effort
man/rpcbind: Add Files section to manpage
Previous commit added 3 non-default files, mention them in man page.
systemd/rpcbind.service.in: Add few default EnvironmentFile
Add some defaults so that distros can drop patches to configure it.
* openSUSE and Fedora use /etc/sysconfig/rpcbind
https://build.opensuse.org/projects/network/packages/rpcbind/files/0001-systemd-unit-files.patch?expand=1
https://src.fedoraproject.org/rpms/rpcbind/blob/f41/f/rpcbind-0.2.3-systemd-envfile.patch
* Debian uses /etc/rpcbind.conf and /etc/default/rpcbind
https://salsa.debian.org/debian/rpcbind/-/blob/buster/debian/rpcbind.service?ref_type=heads
Add all these 3 in order:
* /etc/rpcbind.conf
* /etc/default/rpcbind
* /etc/sysconfig/rpcbind
Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
---
lfs/rpcbind | 15 +++++++--------
1 file changed, 7 insertions(+), 8 deletions(-)
diff --git a/lfs/rpcbind b/lfs/rpcbind
index a707d9c05..196089af6 100644
--- a/lfs/rpcbind
+++ b/lfs/rpcbind
@@ -26,7 +26,7 @@ include Config
SUMMARY = Transport independent RPC portmapper
-VER = 1.2.7
+VER = 1.2.8
THISAPP = rpcbind-$(VER)
DL_FILE = $(THISAPP).tar.bz2
@@ -34,7 +34,7 @@ DL_FROM = $(URL_IPFIRE)
DIR_APP = $(DIR_SRC)/$(THISAPP)
TARGET = $(DIR_INFO)/$(THISAPP)
PROG = rpcbind
-PAK_VER = 8
+PAK_VER = 9
DEPS =
@@ -48,7 +48,7 @@ objects = $(DL_FILE)
$(DL_FILE) = $(DL_FROM)/$(DL_FILE)
-$(DL_FILE)_BLAKE2 = f1e79b304ce5fe06c1c256d3512d999daffca782d956440f612b8a957ad7ddb35356b47aa4f4105d5b24d820daab32ec3a0f4a3b8ac76bb7adf5c3ed22d2ef01
+$(DL_FILE)_BLAKE2 = 70bef658aafc4b1b626a7e9ff312b34748e0142a0a93d058c28d6599545281464f27a5546abe287f0dd369e5264cb38940f85e5e6c128cb0e0f7aaa4b841ab77
install : $(TARGET)
@@ -83,11 +83,10 @@ $(TARGET) : $(patsubst %,$(DIR_DL)/%,$(objects))
@rm -rf $(DIR_APP) && cd $(DIR_SRC) && tar jxf $(DIR_DL)/$(DL_FILE)
cd $(DIR_APP) && sed -i "/servname/s:rpcbind:sunrpc:" src/rpcbind.c
cd $(DIR_APP) && ./configure \
- --prefix=/usr \
- --bindir=/sbin \
- --with-rpcuser=root \
- --without-systemdsystemunitdir
-
+ --prefix=/usr \
+ --bindir=/sbin \
+ --with-rpcuser=root \
+ --without-systemdsystemunitdir
cd $(DIR_APP) && make $(MAKETUNING) $(EXTRA_MAKE)
cd $(DIR_APP) && make install
#install initscripts
--
2.51.0
next prev parent reply other threads:[~2025-08-26 18:49 UTC|newest]
Thread overview: 23+ messages / expand[flat|nested] mbox.gz Atom feed top
2025-08-26 18:48 [PATCH] btrfs-progs: Update to version 6.16 Adolf Belka
2025-08-26 18:48 ` [PATCH] core198: Ship btrfs-progs Adolf Belka
2025-08-26 18:48 ` [PATCH] core198: Ship gdbm Adolf Belka
2025-08-26 18:48 ` [PATCH] core198: Ship harfbuzz Adolf Belka
2025-08-26 18:48 ` [PATCH] core198: Ship hwdata Adolf Belka
2025-08-26 18:48 ` [PATCH] core198: Ship libinih Adolf Belka
2025-08-26 18:48 ` [PATCH] core198: Ship lsof Adolf Belka
2025-08-26 18:48 ` [PATCH] core198: Ship nano Adolf Belka
2025-08-26 18:48 ` [PATCH] core198: Ship sudo Adolf Belka
2025-08-26 18:48 ` [PATCH] core198: Ship whois Adolf Belka
2025-08-26 18:48 ` [PATCH] fping: Update to version 5.4 Adolf Belka
2025-08-26 18:48 ` [PATCH] gdbm: Update to version 1.26 Adolf Belka
2025-08-26 18:48 ` [PATCH] git: Update to version 2.51.0 Adolf Belka
2025-08-26 18:48 ` [PATCH] harfbuzz: Update to version 11.4.3 Adolf Belka
2025-08-26 18:48 ` [PATCH] hwdata: Update to version 0.398 Adolf Belka
2025-08-26 18:48 ` [PATCH] libinih: Update to version 61 Adolf Belka
2025-08-26 18:48 ` [PATCH] lsof: Update to version 4.99.5 Adolf Belka
2025-08-26 18:48 ` [PATCH] nano: Update to version 8.6 Adolf Belka
2025-08-26 18:49 ` [PATCH] postfix: Update to version 3.10.4 Adolf Belka
2025-08-26 18:49 ` Adolf Belka [this message]
2025-08-26 18:49 ` [PATCH] sudo: Update to version 1.9.17p2 Adolf Belka
2025-08-26 18:49 ` [PATCH] whois: Update to version 5.6.4 Adolf Belka
2025-08-26 18:49 ` [PATCH] wsdd: Update to version 0.9 Adolf Belka
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=20250826184904.6229-20-adolf.belka@ipfire.org \
--to=adolf.belka@ipfire.org \
--cc=development@lists.ipfire.org \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox