1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
243
244
245
246
247
248
249
250
251
252
253
254
255
256
257
258
259
260
261
262
263
264
265
266
267
268
269
270
271
272
273
274
275
276
277
278
279
280
281
282
283
284
285
286
287
288
289
290
291
292
293
294
295
296
297
298
299
300
301
302
303
304
305
306
307
308
309
310
311
312
313
314
315
|
# Copyright 1999-2012 Gentoo Foundation
# Distributed under the terms of the GNU General Public License v2
# $Header: /var/cvsroot/gentoo-x86/mail-mta/postfix/postfix-2.9.0-r1.ebuild,v 1.3 2012/02/13 07:36:20 eras Exp $
EAPI=4
inherit eutils multilib ssl-cert toolchain-funcs flag-o-matic pam versionator
MY_PV="${PV/_rc/-RC}"
MY_SRC="${PN}-${MY_PV}"
MY_URI="ftp://ftp.porcupine.org/mirrors/postfix-release/official"
VDA_PV="2.8.5"
VDA_P="${PN}-vda-v10-${VDA_PV}"
RC_VER="2.6"
DESCRIPTION="A fast and secure drop-in replacement for sendmail."
HOMEPAGE="http://www.postfix.org/"
SRC_URI="${MY_URI}/${MY_SRC}.tar.gz
vda? ( http://vda.sourceforge.net/VDA/${VDA_P}.patch ) "
LICENSE="IBM"
SLOT="0"
KEYWORDS="~alpha ~amd64 ~arm ~hppa ~ia64 ~ppc ~ppc64 ~sh ~sparc ~x86 ~x86-fbsd"
IUSE="+berkdb cdb doc dovecot-sasl hardened ldap ldap-bind memcached mbox mysql nis pam postgres sasl selinux sqlite ssl vda"
DEPEND=">=dev-libs/libpcre-3.4
dev-lang/perl
berkdb? ( >=sys-libs/db-3.2 )
cdb? ( || ( >=dev-db/tinycdb-0.76 >=dev-db/cdb-0.75-r1 ) )
ldap? ( net-nds/openldap )
ldap-bind? ( net-nds/openldap[sasl] )
mysql? ( virtual/mysql )
pam? ( virtual/pam )
postgres? ( dev-db/postgresql-base )
sasl? ( >=dev-libs/cyrus-sasl-2 )
sqlite? ( dev-db/sqlite:3 )
ssl? ( >=dev-libs/openssl-0.9.6g )"
RDEPEND="${DEPEND}
dovecot-sasl? ( net-mail/dovecot )
memcached? ( net-misc/memcached )
net-mail/mailbase
selinux? ( sec-policy/selinux-postfix )
!mail-mta/courier
!mail-mta/esmtp
!mail-mta/exim
!mail-mta/mini-qmail
!mail-mta/msmtp[mta]
!mail-mta/nbsmtp
!mail-mta/netqmail
!mail-mta/nullmailer
!mail-mta/qmail-ldap
!mail-mta/sendmail
!<mail-mta/ssmtp-2.64-r2
!>=mail-mta/ssmtp-2.64-r2[mta]
!net-mail/fastforward"
# vda patch is broken in 2.9
REQUIRED_USE="ldap-bind? ( ldap sasl )
!vda"
S="${WORKDIR}/${MY_SRC}"
pkg_setup() {
# Add postfix, postdrop user/group (bug #77565)
enewgroup postfix 207
enewgroup postdrop 208
enewuser postfix 207 -1 /var/spool/postfix postfix,mail
}
src_prepare() {
if use vda; then
epatch "${DISTDIR}"/${VDA_P}.patch
fi
if ! use berkdb; then
epatch "${FILESDIR}/${PN}_no-berkdb.patch"
fi
sed -i -e "/^#define ALIAS_DB_MAP/s|:/etc/aliases|:/etc/mail/aliases|" \
src/util/sys_defs.h || die "sed failed"
# change default paths to better comply with portage standard paths
sed -i -e "s:/usr/local/:/usr/:g" conf/master.cf || die "sed failed"
}
src_configure() {
# Make sure LDFLAGS get passed down to the executables.
local mycc="-DHAS_PCRE" mylibs="${LDFLAGS} -lpcre -lcrypt -lpthread"
use pam && mylibs="${mylibs} -lpam"
if use ldap; then
mycc="${mycc} -DHAS_LDAP"
mylibs="${mylibs} -lldap -llber"
fi
if use mysql; then
mycc="${mycc} -DHAS_MYSQL $(mysql_config --include)"
mylibs="${mylibs} $(mysql_config --libs)"
fi
if use postgres; then
mycc="${mycc} -DHAS_PGSQL -I$(pg_config --includedir)"
mylibs="${mylibs} -lpq -L$(pg_config --libdir)"
fi
if use sqlite; then
mycc="${mycc} -DHAS_SQLITE"
mylibs="${mylibs} -lsqlite3"
fi
if use ssl; then
mycc="${mycc} -DUSE_TLS"
mylibs="${mylibs} -lssl -lcrypto"
fi
# broken. and "in other words, not supported" by upstream.
# Use inet_protocols setting in main.cf
#if ! use ipv6; then
# mycc="${mycc} -DNO_IPV6"
#fi
if use sasl; then
if use dovecot-sasl; then
# Set dovecot as default.
mycc="${mycc} -DDEF_SASL_SERVER=\\\"dovecot\\\""
fi
if use ldap-bind; then
mycc="${mycc} -DUSE_LDAP_SASL"
fi
mycc="${mycc} -DUSE_SASL_AUTH -DUSE_CYRUS_SASL -I/usr/include/sasl"
mylibs="${mylibs} -lsasl2"
elif use dovecot-sasl; then
mycc="${mycc} -DUSE_SASL_AUTH -DDEF_SERVER_SASL_TYPE=\\\"dovecot\\\""
fi
if ! use nis; then
sed -i -e "s|#define HAS_NIS|//#define HAS_NIS|g" \
src/util/sys_defs.h || die "sed failed"
fi
if ! use berkdb; then
mycc="${mycc} -DNO_DB"
if use cdb; then
# change default hash format from Berkeley DB to cdb
sed -i -e "s/hash/cdb/" src/util/sys_defs.h || die
fi
fi
if use cdb; then
mycc="${mycc} -DHAS_CDB -I/usr/include/cdb"
CDB_LIBS=""
# Tinycdb is preferred.
if has_version dev-db/tinycdb ; then
einfo "Building with dev-db/tinycdb"
CDB_LIBS="-lcdb"
else
einfo "Building with dev-db/cdb"
CDB_PATH="/usr/$(get_libdir)"
for i in cdb.a alloc.a buffer.a unix.a byte.a ; do
CDB_LIBS="${CDB_LIBS} ${CDB_PATH}/${i}"
done
fi
mylibs="${mylibs} ${CDB_LIBS}"
fi
# Robin H. Johnson <robbat2@gentoo.org> 17/Nov/2006
# Fix because infra boxes hit 2Gb .db files that fail a 32-bit fstat signed check.
mycc="${mycc} -D_FILE_OFFSET_BITS=64 -D_LARGEFILE_SOURCE -D_LARGEFILE64_SOURCE"
filter-lfs-flags
# Workaround for bug #76512
if use hardened; then
[[ "$(gcc-version)" == "3.4" ]] && replace-flags -O? -Os
fi
# Remove annoying C++ comment style warnings - bug #378099
append-flags -Wno-comment
emake DEBUG="" CC="$(tc-getCC)" OPT="${CFLAGS}" CCARGS="${mycc}" AUXLIBS="${mylibs}" makefiles
}
src_install () {
/bin/sh postfix-install \
-non-interactive \
install_root="${D}" \
config_directory="/etc/postfix" \
manpage_directory="/usr/share/man" \
readme_directory="/usr/share/doc/${PF}/readme" \
html_directory="/usr/share/doc/${PF}/html" \
command_directory="/usr/sbin" \
mailq_path="/usr/bin/mailq" \
newaliases_path="/usr/bin/newaliases" \
sendmail_path="/usr/sbin/sendmail" \
|| die "postfix-install failed"
# Fix spool removal on upgrade
rm -Rf "${D}"/var
keepdir /var/spool/postfix
# Install rmail for UUCP, closes bug #19127
dobin auxiliary/rmail/rmail
# Provide another link for legacy FSH
dosym /usr/sbin/sendmail /usr/$(get_libdir)/sendmail
# Install qshape tool
dobin auxiliary/qshape/qshape.pl
doman man/man1/qshape.1
# Performance tuning tools and their manuals
dosbin bin/smtp-{source,sink} bin/qmqp-{source,sink}
doman man/man1/smtp-{source,sink}.1 man/man1/qmqp-{source,sink}.1
# Set proper permissions on required files/directories
dodir /var/lib/postfix
keepdir /var/lib/postfix
fowners postfix:postfix /var/lib/postfix
fowners postfix:postfix /var/lib/postfix/.keep_${CATEGORY}_${PN}-${SLOT}
fperms 0750 /var/lib/postfix
fowners root:postdrop /usr/sbin/post{drop,queue}
fperms 02711 /usr/sbin/post{drop,queue}
keepdir /etc/postfix
if use mbox; then
mypostconf="mail_spool_directory=/var/spool/mail"
else
mypostconf="home_mailbox=.maildir/"
fi
"${D}"/usr/sbin/postconf -c "${D}"/etc/postfix \
-e ${mypostconf} || die "postconf failed"
insinto /etc/postfix
newins "${FILESDIR}"/smtp.pass saslpass
fperms 600 /etc/postfix/saslpass
newinitd "${FILESDIR}"/postfix.rc6.${RC_VER} postfix
# do not start mysql/postgres unnecessarily - bug #359913
use mysql || sed -i -e "s/mysql //" "${D}/etc/init.d/postfix"
use postgres || sed -i -e "s/postgresql //" "${D}/etc/init.d/postfix"
mv "${S}"/examples "${D}"/usr/share/doc/${PF}/
mv "${D}"/etc/postfix/{*.default,makedefs.out} "${D}"/usr/share/doc/${PF}/
dodoc *README COMPATIBILITY HISTORY INSTALL PORTING RELEASE_NOTES*
pamd_mimic_system smtp auth account
if use sasl; then
insinto /etc/sasl2
newins "${FILESDIR}"/smtp.sasl smtpd.conf
fi
# header files
insinto /usr/include/postfix
doins include/*.h
# Remove unnecessary files
rm -f "${D}"/etc/postfix/{*LICENSE,access,aliases,canonical,generic}
rm -f "${D}"/etc/postfix/{header_checks,relocated,transport,virtual}
}
pkg_preinst() {
# default for inet_protocols changed from ipv4 to all in postfix-2.9.
# check inet_protocols setting in main.cf and modify if necessary to prevent
# performance loss with useless DNS lookups and useless connection attempts.
[[ -d ${ROOT}/etc/postfix ]] && {
if [[ "$(${D}/usr/sbin/postconf -dh inet_protocols)" != "ipv4" ]]; then
if [[ ! -n "$(${D}/usr/sbin/postconf -c ${ROOT}/etc/postfix -nh inet_protocols)" ]];
then
ewarn "\nCOMPATIBILITY: adding inet_protocols=ipv4 to main.cf."
ewarn "That will keep the same behaviour as previous postfix versions."
ewarn "Specify inet_protocols explicitly if you want to enable IPv6.\n"
else
# delete inet_protocols setting. there is already one in /etc/postfix
sed -i -e /inet_protocols/d "${D}"/etc/postfix/main.cf || die
fi
fi
}
}
pkg_postinst() {
# Do not install server.{key,pem) SSL certificates if they already exist
if use ssl && [[ ! -f "${ROOT}"/etc/ssl/postfix/server.key \
&& ! -f "${ROOT}"/etc/ssl/postfix/server.pem ]] ; then
SSL_ORGANIZATION="${SSL_ORGANIZATION:-Postfix SMTP Server}"
install_cert /etc/ssl/postfix/server
chown postfix:mail "${ROOT}"/etc/ssl/postfix/server.{key,pem}
fi
if [[ ! -e /etc/mail/aliases.db ]] ; then
ewarn
ewarn "You must edit /etc/mail/aliases to suit your needs"
ewarn "and then run /usr/bin/newaliases. Postfix will not"
ewarn "work correctly without it."
ewarn
fi
if [[ $(get_version_component_range 2 ${REPLACING_VERSIONS}) -lt 9 ]]; then
elog "If you are using old style postfix instances by symlinking"
elog "startup scripts in ${ROOT}etc/init.d, please consider"
elog "upgrading your config for postmulti support. For more info:"
elog "http://www.postfix.org/MULTI_INSTANCE_README.html"
if ! use berkdb; then
ewarn "\nPostfix is installed without BerkeleyDB support."
ewarn "Please turn on berkdb USE flag for hash or btree table"
ewarn "lookup support.\n"
fi
ewarn "Postfix daemons now live under /usr/libexec/postfix"
ewarn "Please adjust your main.cf accordingly by running"
ewarn "etc-update/dispatch-conf or similar and accepting the new"
ewarn "daemon_directory setting."
fi
}
|