mirror of
https://github.com/honeymoose/OpenSearch.git
synced 2025-02-08 22:14:59 +00:00
4fca5f734a
This changes our packaging to be explicit about the permissions of files and directories in the tar.gz, rpm, and deb packages. This is to protect against a user having an incorrectly set umask when installing. Additionally, plugins that are installed now have their permissions set by the plugin installation so that plugins that may have been packaged with incorrect permissions are secured. Resolves #17634
49 lines
1.6 KiB
Groovy
49 lines
1.6 KiB
Groovy
/*
|
|
* Licensed to Elasticsearch under one or more contributor
|
|
* license agreements. See the NOTICE file distributed with
|
|
* this work for additional information regarding copyright
|
|
* ownership. Elasticsearch licenses this file to you under
|
|
* the Apache License, Version 2.0 (the "License"); you may
|
|
* not use this file except in compliance with the License.
|
|
* You may obtain a copy of the License at
|
|
*
|
|
* http://www.apache.org/licenses/LICENSE-2.0
|
|
*
|
|
* Unless required by applicable law or agreed to in writing,
|
|
* software distributed under the License is distributed on an
|
|
* "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY
|
|
* KIND, either express or implied. See the License for the
|
|
* specific language governing permissions and limitations
|
|
* under the License.
|
|
*/
|
|
|
|
task buildDeb(type: Deb) {
|
|
dependsOn preparePackagingFiles
|
|
baseName 'elasticsearch' // this is what pom generation uses for artifactId
|
|
// Follow elasticsearch's deb file naming convention
|
|
archiveName "${packageName}-${project.version}.deb"
|
|
packageGroup 'web'
|
|
requires 'libc6'
|
|
requires 'adduser'
|
|
|
|
into('/usr/share/lintian/overrides') {
|
|
from("${project.packagingFiles}/lintian/elasticsearch")
|
|
}
|
|
into('/usr/share/doc/elasticsearch') {
|
|
from "${project.packagingFiles}/copyright"
|
|
fileMode 0644
|
|
}
|
|
}
|
|
|
|
artifacts {
|
|
'default' buildDeb
|
|
archives buildDeb
|
|
}
|
|
|
|
integTest {
|
|
/* We use real deb tools to extract the deb file for testing so we have to
|
|
skip the test if they aren't around. */
|
|
enabled = new File('/usr/bin/dpkg-deb').exists() || // Standard location
|
|
new File('/usr/local/bin/dpkg-deb').exists() // Homebrew location
|
|
}
|