Recommend selinux-policy-extra instead of selinux-policy-epel

selinux-policy-epel was renamed to selinux-policy-extra. It still provides the old name, but we might as well recommend the actual package name. Also add a related comment for our future selves when working with dependencies in this package.
Add FORCE_DNF option to crb script
2025-11-18 22:24:08 -06:00 · 2025-04-17 16:42:39 +02:00 · 2025-04-03 01:17:54 -05:00 · 2025-03-04 17:40:28 +01:00 · 2024-11-25 15:12:54 -06:00 · 2024-10-08 06:04:51 -07:00
10 changed files with 270 additions and 308 deletions
--- a/.gitignore
+++ b/.gitignore
--- a/90-epel.preset
+++ b/90-epel.preset
@ -1,122 +1,5 @@
-# Also see:
-# https://fedoraproject.org/wiki/Starting_services_by_default
+# See https://docs.fedoraproject.org/en-US/packaging-guidelines/DefaultServices/
+# for the Fedora policy.  EPEL follows the same policy.  The EPEL Steering
+# Committee can approve exceptions to the policy, which will be defined in this
+# file.

-# On Fedora we deviate from some upstream defaults
-disable systemd-timesyncd.service
-disable systemd-networkd.service
-disable systemd-resolved.service
-
-# System stuff
-enable sshd.service
-enable atd.*
-enable crond.*
-enable chronyd.service
-enable rpcbind.*
-enable NetworkManager.service
-enable NetworkManager-dispatcher.service
-enable ModemManager.service
-enable auditd.service
-enable restorecond.service
-enable bluetooth.*
-enable avahi-daemon.*
-enable cups.*
-
-# The various syslog implementations
-enable rsyslog.*
-enable syslog-ng.*
-enable sysklogd.*
-
-# Network facing
-enable firewalld.service
-enable libvirtd.service
-enable xinetd.service
-enable ladvd.service
-
-# Storage
-enable multipathd.service
-enable lvm2-monitor.*
-enable lvm2-lvmetad.*
-enable dm-event.*
-enable dmraid-activation.service
-
-# https://bugzilla.redhat.com/show_bug.cgi?id=855372
-enable mdmonitor.service
-enable mdmonitor-takeover.service
-
-# https://bugzilla.redhat.com/show_bug.cgi?id=876237
-enable spice-vdagentd.service
-
-# https://bugzilla.redhat.com/show_bug.cgi?id=885406
-enable qemu-guest-agent.service
-
-# https://bugzilla.redhat.com/show_bug.cgi?id=928726
-enable dnf-makecache.timer
-
-# https://bugzilla.redhat.com/show_bug.cgi?id=957135
-enable vmtoolsd.service
-
-# https://bugzilla.redhat.com/show_bug.cgi?id=976315
-enable dkms.service
-
-# https://bugzilla.redhat.com/show_bug.cgi?id=961878
-enable ipmi.service
-enable ipmievd.service
-
-# https://bugzilla.redhat.com/show_bug.cgi?id=1039351
-enable x509watch.timer
-
-# https://bugzilla.redhat.com/show_bug.cgi?id=1141609
-enable x2gocleansessions
-
-# https://bugzilla.redhat.com/show_bug.cgi?id=1060754
-enable dnssec-triggerd.service
-
-# https://bugzilla.redhat.com/show_bug.cgi?id=1095353
-enable uuidd.socket
-
-# Hardware
-enable gpm.*
-
-# https://bugzilla.redhat.com/show_bug.cgi?id=1066421
-enable gpsd.socket
-
-# https://bugzilla.redhat.com/show_bug.cgi?id=1141607
-enable x2gocleansessions.service
-
-enable irqbalance.service
-enable lm_sensors.service
-enable mcelog.*
-enable acpid.*
-enable smartd.service
-enable pcscd.socket
-enable rngd.service
-
-# Other stuff
-enable abrtd.service
-enable abrt-ccpp.service
-enable abrt-oops.service
-enable abrt-xorg.service
-enable abrt-vmcore.service
-enable lttng-sessiond.service
-enable ksm.service
-enable ksmtuned.service
-enable rootfs-resize.service
-enable sysstat.service
-enable sysstat-collect.timer
-enable sysstat-summary.timer
-enable uuidd.service
-enable xendomains.service
-enable xenstored.service
-enable xenconsoled.service
-
-# Desktop stuff
-enable accounts-daemon.service
-enable rtkit-daemon.service
-enable upower.service
-enable udisks2.service
-enable polkit.service
-enable packagekit-offline-update.service
-
-# Support for the DRBD link-cleaning service
-# https://bugzilla.redhat.com/show_bug.cgi?id=1405744
-enable drbdlinksclean.service
--- a/GPL-2.0-only.txt
+++ b/GPL-2.0-only.txt
@ -1,20 +1,12 @@
-*****************************************************************************
-The following copyright applies to the Red Hat Linux compilation and any 
-portions of Red Hat Linux it does not conflict with. Whenever this
-policy does conflict with the copyright of any individual portion of Red Hat 
-Linux, it does not apply.
+                    GNU GENERAL PUBLIC LICENSE
+                       Version 2, June 1991

-*****************************************************************************
-
-		    GNU GENERAL PUBLIC LICENSE
-		       Version 2, June 1991
-
- Copyright (C) 1989, 1991 Free Software Foundation, Inc.
-                          675 Mass Ave, Cambridge, MA 02139, USA
+ Copyright (C) 1989, 1991 Free Software Foundation, Inc.,
+ <https://fsf.org/>
 Everyone is permitted to copy and distribute verbatim copies
 of this license document, but changing it is not allowed.

-			    Preamble
+                            Preamble

  The licenses for most software are designed to take away your
 freedom to share and change it.  By contrast, the GNU General Public
@ -23,7 +15,7 @@ software--to make sure the software is free for all its users.  This
 General Public License applies to most of the Free Software
 Foundation's software and to any other program whose authors commit to
 using it.  (Some other Free Software Foundation software is covered by
-the GNU Library General Public License instead.)  You can apply it to
+the GNU Lesser General Public License instead.)  You can apply it to
 your programs, too.

  When we speak of free software, we are referring to freedom, not
@ -63,8 +55,8 @@ patent must be licensed for everyone's free use or not licensed at all.

  The precise terms and conditions for copying, distribution and
 modification follow.
-
-		    GNU GENERAL PUBLIC LICENSE
+
+                    GNU GENERAL PUBLIC LICENSE
   TERMS AND CONDITIONS FOR COPYING, DISTRIBUTION AND MODIFICATION

  0. This License applies to any program or other work which contains
@ -118,7 +110,7 @@ above, provided that you also meet all of these conditions:
    License.  (Exception: if the Program itself is interactive but
    does not normally print such an announcement, your work based on
    the Program is not required to print an announcement.)
-
+
 These requirements apply to the modified work as a whole.  If
 identifiable sections of that work are not derived from the Program,
 and can be reasonably considered independent and separate works in
@ -176,7 +168,7 @@ access to copy from a designated place, then offering equivalent
 access to copy the source code from the same place counts as
 distribution of the source code, even though third parties are not
 compelled to copy the source along with the object code.
-
+
  4. You may not copy, modify, sublicense, or distribute the Program
 except as expressly provided under this License.  Any attempt
 otherwise to copy, modify, sublicense or distribute the Program is
@ -233,7 +225,7 @@ impose that choice.

 This section is intended to make thoroughly clear what is believed to
 be a consequence of the rest of this License.
-
+
  8. If the distribution and/or use of the Program is restricted in
 certain countries either by patents or by copyrighted interfaces, the
 original copyright holder who places the Program under this License
@ -263,7 +255,7 @@ make exceptions for this.  Our decision will be guided by the two goals
 of preserving the free status of all derivatives of our free software and
 of promoting the sharing and reuse of software generally.

-			    NO WARRANTY
+                            NO WARRANTY

  11. BECAUSE THE PROGRAM IS LICENSED FREE OF CHARGE, THERE IS NO WARRANTY
 FOR THE PROGRAM, TO THE EXTENT PERMITTED BY APPLICABLE LAW.  EXCEPT WHEN
@ -285,9 +277,9 @@ YOU OR THIRD PARTIES OR A FAILURE OF THE PROGRAM TO OPERATE WITH ANY OTHER
 PROGRAMS), EVEN IF SUCH HOLDER OR OTHER PARTY HAS BEEN ADVISED OF THE
 POSSIBILITY OF SUCH DAMAGES.

-		     END OF TERMS AND CONDITIONS
-
-	Appendix: How to Apply These Terms to Your New Programs
+                     END OF TERMS AND CONDITIONS
+
+            How to Apply These Terms to Your New Programs

  If you develop a new program, and you want it to be of the greatest
 possible use to the public, the best way to achieve this is to make it
@ -299,7 +291,7 @@ convey the exclusion of warranty; and each file should have at least
 the "copyright" line and a pointer to where the full notice is found.

    <one line to give the program's name and a brief idea of what it does.>
-    Copyright (C) 19yy  <name of author>
+    Copyright (C) <year>  <name of author>

    This program is free software; you can redistribute it and/or modify
    it under the terms of the GNU General Public License as published by
@ -311,16 +303,15 @@ the "copyright" line and a pointer to where the full notice is found.
    MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
    GNU General Public License for more details.

-    You should have received a copy of the GNU General Public License
-    along with this program; if not, write to the Free Software
-    Foundation, Inc., 675 Mass Ave, Cambridge, MA 02139, USA.
+    You should have received a copy of the GNU General Public License along
+    with this program; if not, see <https://www.gnu.org/licenses/>.

 Also add information on how to contact you by electronic and paper mail.

 If the program is interactive, make it output a short notice like this
 when it starts in an interactive mode:

-    Gnomovision version 69, Copyright (C) 19yy name of author
+    Gnomovision version 69, Copyright (C) year name of author
    Gnomovision comes with ABSOLUTELY NO WARRANTY; for details type `show w'.
    This is free software, and you are welcome to redistribute it
    under certain conditions; type `show c' for details.
@ -337,11 +328,11 @@ necessary.  Here is a sample; alter the names:
  Yoyodyne, Inc., hereby disclaims all copyright interest in the program
  `Gnomovision' (which makes passes at compilers) written by James Hacker.

-  <signature of Ty Coon>, 1 April 1989
-  Ty Coon, President of Vice
+  <signature of Moe Ghoul>, 1 April 1989
+  Moe Ghoul, President of Vice

 This General Public License does not permit incorporating your program into
 proprietary programs.  If your program is a subroutine library, you may
 consider it more useful to permit linking proprietary applications with the
-library.  If this is what you want to do, use the GNU Library General
+library.  If this is what you want to do, use the GNU Lesser General
 Public License instead of this License.
--- a/29
+++ b/29
@ -0,0 +1,29 @@
+-----BEGIN PGP PUBLIC KEY BLOCK-----
+
+mQINBGV4X6kBEAC3eQxgiWuo08uc3mHo4ELux++uqTnYz/tJzEf9Ou3h36WnhumA
+Nvs+Ts5h8PBx879Y9/aIX1Z20p1kf6tBCinZnEJu59n+TAAsph0+XQlV1l5YkleK
+Z2ff/Fg65k8QcLXWaIGykA/FaKznRiSurGuD6tRGhJw7DawEwBJr8QZSkRUpnH1L
+URW97Q/iKrRPiE5VEayE0y8eAL28jIIiFvR+4oJMzvCsRRB/2wYZ2MlJOW91hcYf
+mbUoXKOBD5UzsJylu7kj25K/ge8rEJ7KicOOwcdYddxsU3DxGSSfwF8AMagENcm2
+XROeXknjm84A8sNlUkFZBJwfuc7eRTiZGJrnQQVYLrkKj8Mxpq9Ts7hU51TqAWNI
+uvGDlJdYNE3D2RMqjMEsZ8ej08Thrib6xslu4NzTBkt+6QNnXL4E3hEgYtoyio60
+GswSz2ulogKg7X4JrNdJYE8/qNowyF3hoVgj5TG1/wQRq+5HlMMOLjgGu9wzLUix
+fnVfEUnzaofbrUf4/GabCaeY8xRe4tFQrvzigQ4g+kgwKKnfAeqBmPov0yljkw9z
+BYJWR5zvaw0ffg9Ing00KUSaXBXA5jSlgk1603Y+LefY1SlXsTyqohiRvGH6FI77
+HNMo72DwoJfFcYjncZUzKgXWJECR4nhVsdj6pKoOjcQ4aSuyVxtsR86ASQARAQAB
+tChGZWRvcmEgKGVwZWwxMCkgPGVwZWxAZmVkb3JhcHJvamVjdC5vcmc+iQJOBBMB
+CAA4FiEEfY0Vy/xOYmiFkfsmM9mFF+N+0VgFAmV4X6kCGw8FCwkIBwIGFQoJCAsC
+BBYCAwECHgECF4AACgkQM9mFF+N+0Vhv/A/+PlhPLSctGRCUEahE+cN4764Acc3p
+l40ZYzXRhqR0/Tc1/cSDjlA3qVTc8SPohi5OJXwCyr9EiMqKoyoDN097euqbYpyp
+yN/Pj0lBjsXwcpdDtZ21WGeQU0Khb04N68bMtJbDaxeBciTvDDQravZuPPh0m4Rg
+Z6myEoa6Aa6EK0hI1Qwi1qIWeRiuEkVT671IaKVETBW5XiUpNBXDAB/L+6DzUF9u
+scBzfsUDiPO6NrpYDtV3jwq22y6gWluIct/Ka8brwPbqK2sBfFzrHboRhfqlTGjs
+7F9qUGwIQZn/A8iozXZYQ0+JG1bhQyvjA8eN1GOcRpT+O7H7JXN49o6IG2As4+iK
+F04+qjqAu2sVfpD8mzM2VubFNllcKKiyCzRYHhSbObRCPzsudDL9GPiXeGGaCuWg
+sDkiA1MESvf2tLETAGBs/TziO4GwmXUtlKbRiq1FYm90mVq9mBxPZ/Idn+yZusNB
+0O5SXIbI8lYZw5n4XTK4b+byHRBYsOTHiTsGvjTF2Y7oSwW2CVUmL6RZ23mI4qoY
+1p5kzRS+GjT1acnTei/FTsOlIKCsjfeHx7uxCkX6xpAD8P3UtLQqfsgH0CL4vSZt
+TGO6L1InQlp4ZG3OYIomTKbD3/R0wod3U3dTqdulQMXL895u6OLTY3spY2m2MO2k
+p9Dfd2pKuxK9Mys=
+=mhQZ
+-----END PGP PUBLIC KEY BLOCK-----
--- a/29
+++ b/29
@ -1,29 +0,0 @@
-----BEGIN PGP PUBLIC KEY BLOCK-----
-Version: GnuPG v1.4.11 (GNU/Linux)
-
-mQINBFKuaIQBEAC1UphXwMqCAarPUH/ZsOFslabeTVO2pDk5YnO96f+rgZB7xArB
-OSeQk7B90iqSJ85/c72OAn4OXYvT63gfCeXpJs5M7emXkPsNQWWSju99lW+AqSNm
-jYWhmRlLRGl0OO7gIwj776dIXvcMNFlzSPj00N2xAqjMbjlnV2n2abAE5gq6VpqP
-vFXVyfrVa/ualogDVmf6h2t4Rdpifq8qTHsHFU3xpCz+T6/dGWKGQ42ZQfTaLnDM
-jToAsmY0AyevkIbX6iZVtzGvanYpPcWW4X0RDPcpqfFNZk643xI4lsZ+Y2Er9Yu5
-S/8x0ly+tmmIokaE0wwbdUu740YTZjCesroYWiRg5zuQ2xfKxJoV5E+Eh+tYwGDJ
-n6HfWhRgnudRRwvuJ45ztYVtKulKw8QQpd2STWrcQQDJaRWmnMooX/PATTjCBExB
-9dkz38Druvk7IkHMtsIqlkAOQMdsX1d3Tov6BE2XDjIG0zFxLduJGbVwc/6rIc95
-T055j36Ez0HrjxdpTGOOHxRqMK5m9flFbaxxtDnS7w77WqzW7HjFrD0VeTx2vnjj
-GqchHEQpfDpFOzb8LTFhgYidyRNUflQY35WLOzLNV+pV3eQ3Jg11UFwelSNLqfQf
-uFRGc+zcwkNjHh5yPvm9odR1BIfqJ6sKGPGbtPNXo7ERMRypWyRz0zi0twARAQAB
-tChGZWRvcmEgRVBFTCAoNykgPGVwZWxAZmVkb3JhcHJvamVjdC5vcmc+iQI4BBMB
-AgAiBQJSrmiEAhsPBgsJCAcDAgYVCAIJCgsEFgIDAQIeAQIXgAAKCRBqL66iNSxk
-5cfGD/4spqpsTjtDM7qpytKLHKruZtvuWiqt5RfvT9ww9GUUFMZ4ZZGX4nUXg49q
-ixDLayWR8ddG/s5kyOi3C0uX/6inzaYyRg+Bh70brqKUK14F1BrrPi29eaKfG+Gu
-MFtXdBG2a7OtPmw3yuKmq9Epv6B0mP6E5KSdvSRSqJWtGcA6wRS/wDzXJENHp5re
-9Ism3CYydpy0GLRA5wo4fPB5uLdUhLEUDvh2KK//fMjja3o0L+SNz8N0aDZyn5Ax
-CU9RB3EHcTecFgoy5umRj99BZrebR1NO+4gBrivIfdvD4fJNfNBHXwhSH9ACGCNv
-HnXVjHQF9iHWApKkRIeh8Fr2n5dtfJEF7SEX8GbX7FbsWo29kXMrVgNqHNyDnfAB
-VoPubgQdtJZJkVZAkaHrMu8AytwT62Q4eNqmJI1aWbZQNI5jWYqc6RKuCK6/F99q
-thFT9gJO17+yRuL6Uv2/vgzVR1RGdwVLKwlUjGPAjYflpCQwWMAASxiv9uPyYPHc
-ErSrbRG0wjIfAR3vus1OSOx3xZHZpXFfmQTsDP7zVROLzV98R3JwFAxJ4/xqeON4
-vCPFU6OsT3lWQ8w7il5ohY95wmujfr6lk89kEzJdOTzcn7DBbUru33CQMGKZ3Evt
-RjsC7FDbL017qxS+ZVA/HGkyfiu4cpgV8VUnbql5eAZ+1Ll6Dw==
-=hdPa
-----END PGP PUBLIC KEY BLOCK-----
--- a/99
+++ b/99
@ -0,0 +1,99 @@
+#!/bin/bash
+#
+#  Enable / Disable / Status the codeready-builder(CRB) or equivalent repo.
+#
+# Copyright (C) 2024
+# SPDX-License-Identifier:      GPL-2.0-only
+#
+# Authors:
+#     Troy Dawson <tdawson@redhat.com>
+#
+
+
+###############
+# Show help
+###############
+usage() {
+  echo "Usage `basename $0` [ enable | disable | status ] " >&2
+  echo >&2
+  echo "Enable, Disable, or give the status of the CodeReady Builder (CRB) repo" >&2
+  echo >&2
+  echo "Options:" >&2
+  echo "  enable" >&2
+  echo "    Enable the CRB repo" >&2
+  echo "  disable" >&2
+  echo "    Disable the CRB repo" >&2
+  echo "  status" >&2
+  echo "    Show if the CRB repo is enabled or disabled" >&2
+  echo "  help" >&2
+  echo "    Show this options menu" >&2
+  echo >&2
+  echo "Environment Variable:" >&2
+  echo "  FORCE_DNF=1    Set this before the command to force the use of" >&2
+  echo "                 'dnf config-manager' even on RHEL systems." >&2
+  echo "                 Example: FORCE_DNF=1 $(basename "$0") enable" >&2
+  echo >&2
+  popd &>/dev/null
+  exit 1
+}
+
+
+# Show the status
+show_status()(
+    # Determine if a version of CRB is enabled
+    crb_repo=$(dnf repolist | grep -i -e crb -e powertools -e codeready | grep -v -i -e debug -e source -e eus -e virt -e rhui | awk '{print $1}')
+    if [ "${crb_repo}" == "" ] ; then
+        echo "CRB repo is disabled"
+    else
+        echo "CRB repo is enabled and named: ${crb_repo}"
+    fi
+)
+
+# Enable or Disable the repo
+enable_disable_repo(){
+    command="$1"
+    # Determine which repo we need to change
+    crb_repo=$(dnf repolist --all | grep -i -e crb -e powertools -e codeready | grep -v -i -e debug -e source -e eus -e virt -e rhui | awk '{print $1}')
+
+    # Determine if we are on RHEL or not, then do the correct steps
+        source /etc/os-release
+    if [[ "${FORCE_DNF:-0}" -eq 0 && "${NAME}" =~ "Red Hat" ]] ; then
+        subscription-manager repos ${command} ${crb_repo}
+    else
+        # Determine if dnf-command(config-manager) is installed
+        if ! rpm -q --whatprovides 'dnf-command(config-manager)' > /dev/null 2>&1 ; then
+            echo "Error: Please run: dnf install 'dnf-command(config-manager)'" >&2
+            echo "       before trying to enable/disable the CRB repo." >&2
+            echo "Aborting"'!' >&2
+            exit 1
+        fi
+        # Everything else uses dnf config-manager
+        dnf config-manager ${command} ${crb_repo}
+    fi
+}
+
+###############
+# Get our arguments
+###############
+key="$1"
+case $key in
+enable | --enable )
+    echo "Enabling CRB repo"
+    enable_disable_repo --enable
+    show_status
+;;
+disable | --disable )
+    echo "Disabling CRB repo"
+    enable_disable_repo --disable
+    show_status
+;;
+status | --status )
+    show_status
+;;
+* )
+    usage
+    exit 2
+;;
+esac
+
+exit 0
--- a/epel-release.spec
+++ b/epel-release.spec
@ -1,110 +1,91 @@
 Name:           epel-release
-Version:        7
-Release:        14
+Version:        10
+Release:        %autorelease
 Summary:        Extra Packages for Enterprise Linux repository configuration
+# Most things in this package are not considered copyrightable.  If that were
+# true for everything in the package, the license identifier would be
+# LicenseRef-Not-Copyrightable.  However, the exception is the crb script,
+# which is GPL-2.0-only.  Per advice from Fedora Legal, we should use
+# GPL-2.0-only as the license identifier for the package in this scenario.
+# https://bugzilla.redhat.com/show_bug.cgi?id=2302438
+License:        GPL-2.0-only
+BuildArch:      noarch
+URL:            https://epel.io

-Group:          System Environment/Base
-License:        GPLv2
+# keys
+Source10:       https://download.fedoraproject.org/pub/epel/RPM-GPG-KEY-EPEL-%{version}

-# This is a EPEL maintained package which is specific to
-# our distribution.  Thus the source is only available from
-# within this srpm.
-URL:            http://download.fedoraproject.org/pub/epel
-Source0:        http://download.fedoraproject.org/pub/epel/RPM-GPG-KEY-EPEL-7
-Source1:        GPL
-Source2:        epel.repo
-Source3:        epel-testing.repo
-# EPEL default preset policy (borrowed from fedora's 90-default.preset)
-Source4:        90-epel.preset
+# repo configs
+Source20:       epel.repo
+Source21:       epel-testing.repo
+
+# preset policy
+Source30:       90-epel.preset
+
+# Add epel crb script
+Source31:      crb
+# epel crb script is licensed GPL-2.0-only
+Source32:      GPL-2.0-only.txt
+
+# The setup process for EPEL involves installing epel-release before the EPEL
+# repository is available.  For this to continue to work correctly, all
+# dependencies of this package must be available from the default repositories.
+# Notably, if weak dependencies of this package are not present at the time of
+# installation, they will be skipped and never get installed.
+# https://pagure.io/epel/issue/328
+
+# This should only be installed on Enterprise Linux with the same major version
+Requires:       (redhat-release >= %{version} with redhat-release < %[%{version} + 1])
+
+# crb needs config-manager to run
+# But only recommend it, incase people do not need crb
+Recommends:     dnf-command(config-manager)
+
+# SELinux policy modules related to EPEL
+Recommends:     (selinux-policy-extra if selinux-policy)

-BuildArch:     noarch
-Requires:      redhat-release >=  %{version}
-# epel-release is only for enterprise linux, not fedora
-Conflicts:     fedora-release

 %description
 This package contains the Extra Packages for Enterprise Linux (EPEL) repository
-GPG key as well as configuration for yum.
+configuration and GPG key.

 %prep
-%setup -q  -c -T
-install -pm 644 %{SOURCE0} .
-install -pm 644 %{SOURCE1} .
-
-%build
+%setup -q -c -T
+# Add epel crb script license
+install -pm 644 %{SOURCE32} .


 %install
-rm -rf $RPM_BUILD_ROOT
+# keys
+install -Dp -m 0644 -t %{buildroot}%{_sysconfdir}/pki/rpm-gpg %{S:10}

-#GPG Key
-install -Dpm 644 %{SOURCE0} \
-    $RPM_BUILD_ROOT%{_sysconfdir}/pki/rpm-gpg/RPM-GPG-KEY-EPEL-7
+# repo configs
+install -Dp -m 0644 -t %{buildroot}%{_sysconfdir}/yum.repos.d %{S:20} %{S:21}

-# yum
-install -dm 755 $RPM_BUILD_ROOT%{_sysconfdir}/yum.repos.d
-install -pm 644 %{SOURCE2} %{SOURCE3}  \
-    $RPM_BUILD_ROOT%{_sysconfdir}/yum.repos.d
-install -pm 644 -D %{SOURCE4} $RPM_BUILD_ROOT%{_prefix}/lib/systemd/system-preset/90-epel.preset
+# preset policy
+install -Dp -m 0644 -t %{buildroot}%{_prefix}/lib/systemd/system-preset %{S:30}
+
+# Add epel crb script
+install -D -pm744 -t %{buildroot}%{_bindir} %{SOURCE31}
+
+
+%post
+# Doing a check to see if crb is enabled is as hard and resource intense as enabling or disabling crb.
+#   So we will say crb is recommended, without first checking.  But only on the initial install.
+if [ "$1" -eq 1 ] ; then
+  echo "Many EPEL packages require the CodeReady Builder (CRB) repository."
+  echo "It is recommended that you run %{_bindir}/crb enable to enable the CRB repository."
+fi

-%clean
-rm -rf $RPM_BUILD_ROOT

 %files
-%defattr(-,root,root,-)
-%doc GPL
-%config(noreplace) /etc/yum.repos.d/*
-/etc/pki/rpm-gpg/*
+%license GPL-2.0-only.txt
+%{_sysconfdir}/pki/rpm-gpg/RPM-GPG-KEY-EPEL-%{version}
+%config(noreplace) %{_sysconfdir}/yum.repos.d/epel.repo
+%config(noreplace) %{_sysconfdir}/yum.repos.d/epel-testing.repo
 %{_prefix}/lib/systemd/system-preset/90-epel.preset
+%{_bindir}/crb
+

 %changelog
-* Thu Jul 01 2021 Mohan Boddu <mboddu@bhujji.com> - 7-14
- Change the baseurl to point to source/tree for srpms
-
-* Sat Oct 31 2020 Kevin Fenzi <kevin@scrye.com> - 7-13
- Add preset for x2gocleansessions. Fixes bug #1141609
-
-* Mon Sep 16 2019 Stephen Smoogen <smooge@fedoraproject.org> - 7-12
- Add in &infra and content variables to better understand users of EPEL.
-
-* Mon Oct 02 2017 Kevin Fenzi <kevin@scrye.com> - 7-11
- Add Conflicts on fedora-release to prevent people from installing on Fedora systems. Fixes bug #1497702
-
-* Sat Jun 24 2017 Kevin Fenzi <kevin@scrye.com> - 7-10
- Change mirrorlist= in repo files to be metalink= (as thats what they are). Fixes bug #1451212
-
-* Tue Dec 27 2016 Kevin Fenzi <kevin@scrye.com> - 7-9
- Add preset for drbdlinks package. Fixes bug #1405744
-
-* Sat Jul 23 2016 Kevin Fenzi <kevin@scrye.com> - 7-8
- Drop duplicate libstoragemgmt from presets. Fixes bug #1358971
-
-* Fri Jun 03 2016 Kevin Fenzi <kevin@scrye.com> - 7-7
- Drop initial-setup from presets. Fixes bug #1342511
-
-* Wed Mar 30 2016 Jason L Tibbitts III <tibbs@math.uh.edu> - 7-6
- Remove macros.epel; let epel-rpm-macros handle it instead.
-
-* Tue Nov 25 2014 Rex Dieter <rdieter@fedoraproject.org> 7-5
- fix typo in macros.epel
-
-* Fri Nov 21 2014 Rex Dieter <rdieter@fedoraproject.org> 7-4
- add systemd 90-epel.preset
-
-* Fri Nov 21 2014 Rex Dieter <rdieter@fedoraproject.org> 7-3
- implement %%epel macro
-
-* Tue Sep 02 2014 Kevin Fenzi <kevin@scrye.com> 7-2
- Make repo files config(noreplace). Fixes bug #1135576
-
-* Thu Aug 28 2014 Dennis Gilmore <dennis@ausil.us> - 7-1
- enable gpg checking now we are out of beta
-
-* Wed Jun 18 2014 Kevin Fenzi <kevin@scrye.com> 7-0.2
- Drop unneeded up2date post/postun
- Fixed up description.
- Fixes bugs #1052434 and #1093918
-
-* Mon Dec 16 2013 Dennis Gilmore <dennis@ausil.us> - 7-0.1
- initial epel 7 build. gpg cheking is disabled
-
+%autochangelog
--- a/epel-testing.repo
+++ b/epel-testing.repo
@ -1,32 +1,36 @@
 [epel-testing]
-name=Extra Packages for Enterprise Linux 7 - Testing - $basearch
+name=Extra Packages for Enterprise Linux $releasever - Testing - $basearch
 # It is much more secure to use the metalink, but if you wish to use a local mirror
 # place its address here.
-#baseurl=http://download.example/pub/epel/testing/7/$basearch
-metalink=https://mirrors.fedoraproject.org/metalink?repo=testing-epel7&arch=$basearch&infra=$infra&content=$contentdir
-failovermethod=priority
-enabled=0
+#baseurl=https://download.example/pub/epel/testing/$releasever${releasever_minor:+z}/Everything/$basearch/
+metalink=https://mirrors.fedoraproject.org/metalink?repo=epel${releasever_minor:+-z}-testing-$releasever&arch=$basearch
+gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-EPEL-$releasever_major
 gpgcheck=1
-gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-EPEL-7
+repo_gpgcheck=0
+metadata_expire=24h
+countme=1
+enabled=0

 [epel-testing-debuginfo]
-name=Extra Packages for Enterprise Linux 7 - Testing - $basearch - Debug
+name=Extra Packages for Enterprise Linux $releasever - Testing - $basearch - Debug
 # It is much more secure to use the metalink, but if you wish to use a local mirror
 # place its address here.
-#baseurl=http://download.example/pub/epel/testing/7/$basearch/debug
-metalink=https://mirrors.fedoraproject.org/metalink?repo=testing-debug-epel7&arch=$basearch&infra=$infra&content=$contentdir
-failovermethod=priority
-enabled=0
-gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-EPEL-7
+#baseurl=https://download.example/pub/epel/testing/$releasever${releasever_minor:+z}/Everything/$basearch/debug/
+metalink=https://mirrors.fedoraproject.org/metalink?repo=epel${releasever_minor:+-z}-testing-debug-$releasever&arch=$basearch
+gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-EPEL-$releasever_major
 gpgcheck=1
+repo_gpgcheck=0
+metadata_expire=24h
+enabled=0

 [epel-testing-source]
-name=Extra Packages for Enterprise Linux 7 - Testing - $basearch - Source
+name=Extra Packages for Enterprise Linux $releasever - Testing - $basearch - Source
 # It is much more secure to use the metalink, but if you wish to use a local mirror
-# place it's address here.
-#baseurl=http://download.example/pub/epel/testing/7/source/tree/
-metalink=https://mirrors.fedoraproject.org/metalink?repo=testing-source-epel7&arch=$basearch&infra=$infra&content=$contentdir
-failovermethod=priority
-enabled=0
-gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-EPEL-7
+# place its address here.
+#baseurl=https://download.example/pub/epel/testing/$releasever${releasever_minor:+z}/Everything/source/tree/
+metalink=https://mirrors.fedoraproject.org/metalink?repo=epel${releasever_minor:+-z}-testing-source-$releasever&arch=source
+gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-EPEL-$releasever_major
 gpgcheck=1
+repo_gpgcheck=0
+metadata_expire=24h
+enabled=0
--- a/epel.repo
+++ b/epel.repo
@ -1,32 +1,36 @@
 [epel]
-name=Extra Packages for Enterprise Linux 7 - $basearch
+name=Extra Packages for Enterprise Linux $releasever - $basearch
 # It is much more secure to use the metalink, but if you wish to use a local mirror
 # place its address here.
-#baseurl=http://download.example/pub/epel/7/$basearch
-metalink=https://mirrors.fedoraproject.org/metalink?repo=epel-7&arch=$basearch&infra=$infra&content=$contentdir
-failovermethod=priority
-enabled=1
+#baseurl=https://download.example/pub/epel/$releasever${releasever_minor:+z}/Everything/$basearch/
+metalink=https://mirrors.fedoraproject.org/metalink?repo=epel${releasever_minor:+-z}-$releasever&arch=$basearch
+gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-EPEL-$releasever_major
 gpgcheck=1
-gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-EPEL-7
+repo_gpgcheck=0
+metadata_expire=24h
+countme=1
+enabled=1

 [epel-debuginfo]
-name=Extra Packages for Enterprise Linux 7 - $basearch - Debug
+name=Extra Packages for Enterprise Linux $releasever - $basearch - Debug
 # It is much more secure to use the metalink, but if you wish to use a local mirror
 # place its address here.
-#baseurl=http://download.example/pub/epel/7/$basearch/debug
-metalink=https://mirrors.fedoraproject.org/metalink?repo=epel-debug-7&arch=$basearch&infra=$infra&content=$contentdir
-failovermethod=priority
-enabled=0
-gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-EPEL-7
+#baseurl=https://download.example/pub/epel/$releasever${releasever_minor:+z}/Everything/$basearch/debug/
+metalink=https://mirrors.fedoraproject.org/metalink?repo=epel${releasever_minor:+-z}-debug-$releasever&arch=$basearch
+gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-EPEL-$releasever_major
 gpgcheck=1
+repo_gpgcheck=0
+metadata_expire=24h
+enabled=0

 [epel-source]
-name=Extra Packages for Enterprise Linux 7 - $basearch - Source
+name=Extra Packages for Enterprise Linux $releasever - $basearch - Source
 # It is much more secure to use the metalink, but if you wish to use a local mirror
-# place it's address here.
-#baseurl=http://download.example/pub/epel/7/source/tree/
-metalink=https://mirrors.fedoraproject.org/metalink?repo=epel-source-7&arch=$basearch&infra=$infra&content=$contentdir
-failovermethod=priority
-enabled=0
-gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-EPEL-7
+# place its address here.
+#baseurl=https://download.example/pub/epel/$releasever${releasever_minor:+z}/Everything/source/tree/
+metalink=https://mirrors.fedoraproject.org/metalink?repo=epel${releasever_minor:+-z}-source-$releasever&arch=source
+gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-EPEL-$releasever_major
 gpgcheck=1
+repo_gpgcheck=0
+metadata_expire=24h
+enabled=0
--- a/0
+++ b/0
Author	SHA1	Message	Date
Carl George	b4df7af82f	Recommend selinux-policy-extra instead of selinux-policy-epel selinux-policy-epel was renamed to selinux-policy-extra. It still provides the old name, but we might as well recommend the actual package name. Also add a related comment for our future selves when working with dependencies in this package.	2025-11-18 22:24:08 -06:00
Martin Hoyer	a3b436b710	Add FORCE_DNF option to crb script This is useful for testing, where subscription-manager might not be fully configured.	2025-04-17 16:42:39 +02:00
Carl George	727ad36044	Change metalinks/baseurls to new repo naming scheme https://pagure.io/epel/issue/324	2025-04-03 01:17:54 -05:00
Petr Lautrbach	ffadafbe85	Recommend selinux-policy-epel selinux-policy-40.13.26-1.el10 dropped modules related to EPEL in order to make the policy smaller and operation faster. These modules are shipped in selinux-policy-epel-{targeted,mls}-40.13.26-1.el10_1 packages which are required by selinux-policy-epel as shown bellow: Requires: (selinux-policy-epel-targeted if selinux-policy-targeted) Requires: (selinux-policy-epel-mls if selinux-policy-mls) Signed-off-by: Petr Lautrbach <lautrbach@redhat.com>	2025-03-04 17:40:28 +01:00
Carl George	44c2c984f7	Relax dependency on redhat-release Depending on a matching system-release(releasever) currently works on CentOS Stream 10 and RHEL 10 Beta. However, it is expected that RHEL 10.0 GA will use 10.0 for this virtual provides, so we need allow that to satisfy the dependency as well. Related: RHEL-68034	2024-11-25 15:12:54 -06:00
Troy Dawson	36d5cef269	Add epel crb script Add license file for script, since this repo is upstream Signed-off-by: Troy Dawson <tdawson@redhat.com>	2024-10-08 06:04:51 -07:00
Carl George	fb754866c6	Initial package for EPEL 10 Historically the EPEL compilation was released under the GPLv2 license. For EPEL 10 going forward, we will forego the concept of a compilation license per the recommendation of Fedora Legal. With no other copyrightable code or content in the package, we will use LicenseRef-Not-Copyrightable as the License tag. If at some point copyrightable code or content is added to this package, then the License tag should be switched to whatever license that code or content is released under. https://bugzilla.redhat.com/show_bug.cgi?id=2302438	2024-08-16 15:33:28 -05:00