Github messages for voidlinux
 help / color / mirror / Atom feed
* [PR PATCH] elasticsearch: remove package
@ 2022-04-06 18:06 classabbyamp
  2022-04-06 23:00 ` [PR PATCH] [Merged]: " paper42
  0 siblings, 1 reply; 2+ messages in thread
From: classabbyamp @ 2022-04-06 18:06 UTC (permalink / raw)
  To: ml

[-- Attachment #1: Type: text/plain, Size: 409 bytes --]

There is a new pull request by classabbyamp against master on the void-packages repository

https://github.com/classabbyamp/void-packages elasticsearch-update
https://github.com/void-linux/void-packages/pull/36545

elasticsearch: remove package
- last updated in 2017
- contained vulnerable log4j
- licence is a mess


A patch file from https://github.com/void-linux/void-packages/pull/36545.patch is attached

[-- Warning: decoded text below may be mangled, UTF-8 assumed --]
[-- Attachment #2: github-pr-elasticsearch-update-36545.patch --]
[-- Type: text/x-diff, Size: 4550 bytes --]

From 3600d14c2cfb903492ec3db7bd692d439e5357e1 Mon Sep 17 00:00:00 2001
From: classabbyamp <dev@placeviolette.net>
Date: Wed, 6 Apr 2022 14:03:21 -0400
Subject: [PATCH] elasticsearch: remove package

- last updated in 2017
- contained vulnerable log4j
- licence is a mess
---
 srcpkgs/elasticsearch/INSTALL                 | 14 -----
 srcpkgs/elasticsearch/files/elasticsearch/run |  3 --
 srcpkgs/elasticsearch/template                | 52 -------------------
 srcpkgs/elasticsearch/update                  |  1 -
 srcpkgs/removed-packages/template             |  3 +-
 5 files changed, 2 insertions(+), 71 deletions(-)
 delete mode 100644 srcpkgs/elasticsearch/INSTALL
 delete mode 100755 srcpkgs/elasticsearch/files/elasticsearch/run
 delete mode 100644 srcpkgs/elasticsearch/template
 delete mode 100644 srcpkgs/elasticsearch/update

diff --git a/srcpkgs/elasticsearch/INSTALL b/srcpkgs/elasticsearch/INSTALL
deleted file mode 100644
index 622fb85bda9a..000000000000
--- a/srcpkgs/elasticsearch/INSTALL
+++ /dev/null
@@ -1,14 +0,0 @@
-# INSTALL
-case "$ACTION" in
-post)
-    if [ "$UPDATE" != "yes" ]; then
-        # actions to execute if package is being installed.
-        install -d usr/share/elasticsearch/plugins
-        install -d -m0750 var/log/elasticsearch
-        install -d -m0750 var/lib/elasticsearch/data
-        chown -R elastic etc/elasticsearch
-        chown -R elastic var/lib/elasticsearch/data
-        chown -R elastic var/log/elasticsearch
-    fi
-    ;;
-esac
diff --git a/srcpkgs/elasticsearch/files/elasticsearch/run b/srcpkgs/elasticsearch/files/elasticsearch/run
deleted file mode 100755
index 6b04b1770817..000000000000
--- a/srcpkgs/elasticsearch/files/elasticsearch/run
+++ /dev/null
@@ -1,3 +0,0 @@
-#!/bin/sh
-. /etc/profile # to pull in java path
-exec chpst -u elastic elasticsearch 2>&1
diff --git a/srcpkgs/elasticsearch/template b/srcpkgs/elasticsearch/template
deleted file mode 100644
index a149578d682c..000000000000
--- a/srcpkgs/elasticsearch/template
+++ /dev/null
@@ -1,52 +0,0 @@
-# Template file for 'elasticsearch'
-pkgname=elasticsearch
-version=5.1.2
-revision=2
-wrksrc="elasticsearch-${version}"
-# The only native part is libjnidispatch.so inside jna-*.jar, which is supplied
-# only for a few archs, namely arm (armv6l and better), aarch64, ppc64le, x86,
-# and x86_64; ppc64 is also supplied but elfv1 only, and all only for glibc.
-# We could recompile this, but someone would need to add code to do that.
-archs="i686 x86_64 aarch64 armv6l armv7l ppc64le"
-depends="virtual?java-runtime"
-short_desc="A distributed, open source search and analytics engine"
-maintainer="dota? =op <rogi@skylittlesystem.org>"
-license="Apache-2.0"
-homepage="http://www.elastic.co"
-distfiles="https://artifacts.elastic.co/downloads/elasticsearch/elasticsearch-${version}.tar.gz"
-checksum=74d752f9a8b46898d306ad169b72f328e17215c0909149e156a576089ef11c42
-system_accounts="elastic"
-conf_files="/etc/elasticsearch/elasticsearch.yml /etc/elasticsearch/jvm.options /etc/elasticsearch/log4j2.properties"
-
-do_install() {
-	ES="usr/share/elasticsearch"
-
-	rm -f bin/*.{bat,exe}
-	vmkdir $ES
-
-	vcopy bin $ES
-	vcopy lib $ES
-	vcopy modules $ES
-	vcopy plugins $ES
-
-	vmkdir usr/bin
-
-	ln -sf /$ES/bin/elasticsearch "$DESTDIR/usr/bin"
-
-	vmkdir etc/elasticsearch
-	vcopy config/* etc/elasticsearch
-
-	ln -sf /etc/elasticsearch "$DESTDIR/$ES/config"
-
-	vmkdir var/lib/elasticsearch/data
-	ln -sf /var/lib/elasticsearch/data "$DESTDIR/$ES/data"
-
-	vmkdir var/log/elasticsearch
-	ln -sf /var/log/elasticsearch "$DESTDIR/$ES/logs"
-
-	vlicense LICENSE.txt
-	vlicense NOTICE.txt
-	vdoc README.textile
-
-	vsv elasticsearch
-}
diff --git a/srcpkgs/elasticsearch/update b/srcpkgs/elasticsearch/update
deleted file mode 100644
index 32de96485c8f..000000000000
--- a/srcpkgs/elasticsearch/update
+++ /dev/null
@@ -1 +0,0 @@
-site="https://www.elastic.co/downloads/elasticsearch"
diff --git a/srcpkgs/removed-packages/template b/srcpkgs/removed-packages/template
index d5a5e66b8b1a..ca67aca138b0 100644
--- a/srcpkgs/removed-packages/template
+++ b/srcpkgs/removed-packages/template
@@ -1,7 +1,7 @@
 # Template file for 'removed-packages'
 pkgname=removed-packages
 version=0.1
-revision=67
+revision=68
 build_style=meta
 short_desc="Uninstalls packages removed from repository"
 maintainer="Piotr Wójcik <chocimier@tlen.pl>"
@@ -66,6 +66,7 @@ replaces="
  dtkwm<=2.0.12_1
  ebtables<=2.0.10.4_8
  eclipse-ecj<=4.9_3
+ elasticsearch<=5.1.2_2
  electron7<=7.3.3_1
  electron9<=9.4.1_1
  emacs-gtk2<=27.2_1

^ permalink raw reply	[flat|nested] 2+ messages in thread

* Re: [PR PATCH] [Merged]: elasticsearch: remove package
  2022-04-06 18:06 [PR PATCH] elasticsearch: remove package classabbyamp
@ 2022-04-06 23:00 ` paper42
  0 siblings, 0 replies; 2+ messages in thread
From: paper42 @ 2022-04-06 23:00 UTC (permalink / raw)
  To: ml

[-- Attachment #1: Type: text/plain, Size: 354 bytes --]

There's a merged pull request on the void-packages repository

elasticsearch: remove package
https://github.com/void-linux/void-packages/pull/36545

Description:
- last updated in 2017 (upstream is 3 major versions ahead)
- contained vulnerable log4j (#34534)
- licence is a mess

removal suggested instead of updating because of the effort involved

^ permalink raw reply	[flat|nested] 2+ messages in thread

end of thread, other threads:[~2022-04-06 23:00 UTC | newest]

Thread overview: 2+ messages (download: mbox.gz / follow: Atom feed)
-- links below jump to the message on this page --
2022-04-06 18:06 [PR PATCH] elasticsearch: remove package classabbyamp
2022-04-06 23:00 ` [PR PATCH] [Merged]: " paper42

This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox;
as well as URLs for NNTP newsgroup(s).