Name	rsync
Description	A file transfer program to keep remote files in sync
Version	3.4.1-r1
Package Base	rsync
Homepage	https://rsync.samba.org/
Maintainers	['Natanael Copa <ncopa@alpinelinux.org>']
Contributors	[]
Distro-repo	https://gitlab.alpinelinux.org/alpine/aports/-/tree/3.22-stable/main/rsync
Sources	['CVE-2025-10158-fix-invalid-access-to-files-array.patch', 'dont-use-nobody.patch', 'https://download.samba.org/pub/rsync/rsync-3.4.1-r1.tar.gz', 'rsyncd.conf', 'rsyncd.confd', 'rsyncd.initd', 'rsyncd.logrotate\n']
Dependencies	['libacl.so.1', 'libc.musl-x86_64.so.1', 'liblz4.so.1', 'libpopt.so.0', 'libxxhash.so.0', 'libz.so.1', 'libzstd.so.1', 'rsync python3']
Optional-Dependencies	[]
Build-Dependencies	['acl-dev', 'attr-dev', 'lz4-dev', 'perl', 'popt-dev', 'xxhash-dev', 'zlib-dev', 'zstd-dev']
Provides	['cmd:rsync-ssl=3.4.1-r1', 'cmd:rsync=3.4.1-r1']
Builddate	20-11-2025 07:29:33
Architecture	x86_64
Distro-Version	v3.22
Licenses	['GPL-3.0-or-later']
Hash	Q1S7zEbGlMi2lkCfR6JH1a2Xpd+Gw=

# Maintainer: Natanael Copa <ncopa@alpinelinux.org>
pkgname=rsync
pkgver=3.4.1
pkgrel=1
pkgdesc="A file transfer program to keep remote files in sync"
url="https://rsync.samba.org/"
arch="all"
license="GPL-3.0-or-later"
makedepends="
	acl-dev
	attr-dev
	lz4-dev
	perl
	popt-dev
	xxhash-dev
	zlib-dev
	zstd-dev
	"
subpackages="$pkgname-doc $pkgname-openrc rrsync::noarch"
source="https://download.samba.org/pub/rsync/rsync-$pkgver.tar.gz
	dont-use-nobody.patch
	rsyncd.initd
	rsyncd.confd
	rsyncd.conf
	rsyncd.logrotate

	CVE-2025-10158-fix-invalid-access-to-files-array.patch
	"

# secfixes:
#   3.4.1-r1:
#     - CVE-2025-10158
#   3.4.0-r0:
#     - CVE-2024-12084
#     - CVE-2024-12085
#     - CVE-2024-12086
#     - CVE-2024-12087
#     - CVE-2024-12088
#     - CVE-2024-12747
#   3.2.4-r2:
#     - CVE-2022-29154
#   3.1.2-r7:
#     - CVE-2017-16548
#     - CVE-2017-17433
#     - CVE-2017-17434
#   0:
#     - CVE-2020-14387

# delete the itemize test because it is flawed and depends on filesystem-specific behavior
prepare() {
	default_prepare
	update_config_sub

	rm testsuite/itemize.test

	# Prevent the aports version being used
	printf '#!/bin/sh\n\necho "#define RSYNC_GITVER RSYNC_VERSION" >git-version.h\n' >mkgitver
}

build() {
	cp  rrsync.1 support/rrsync.1
	CFLAGS="$CFLAGS -flto=auto" \
	./configure \
		--build=$CBUILD \
		--host=$CHOST \
		--prefix=/usr \
		--sysconfdir=/etc \
		--mandir=/usr/share/man \
		--localstatedir=/var \
		--enable-acl-support \
		--enable-xattr-support \
		--enable-xxhash \
		--with-rrsync \
		--without-included-popt \
		--without-included-zlib \
		--disable-md2man \
		--disable-openssl
		# openssl is disabled since xxh checksums are faster anyway
	make
}

check() {
	make check
}

package() {
	make DESTDIR="$pkgdir" install

	install -Dm755 "$srcdir"/rsyncd.initd "$pkgdir"/etc/init.d/rsyncd
	install -Dm644 "$srcdir"/rsyncd.conf "$pkgdir"/etc/rsyncd.conf
	install -Dm644 "$srcdir"/rsyncd.confd "$pkgdir"/etc/conf.d/rsyncd
	install -Dm644 "$srcdir"/rsyncd.logrotate "$pkgdir"/etc/logrotate.d/rsyncd
}

rrsync() {
	pkgdesc="Restricted rsync, restricts rsync to a subdir declared in .ssh/authorized_keys"
	depends="rsync python3"

	amove usr/bin/rrsync
}

sha512sums="
a3ecde4843ddb795308dca88581b868ac0221eb6f88a1477d7a9a2ecb4e4686042966bdddbab40866f90a4715d3104daa7b83222ddf0f3387b796a86bde8e5c2  rsync-3.4.1.tar.gz
366e361e5d696ddcd0bb773ae4912e7b7cab81ad11123196c8b990802a14141115d1baecd28a445261d089d38964082ecdaecb6ccb43ccdabcfd7936b72d6d7e  dont-use-nobody.patch
b9bf1aa02f96e4294642ead5751bd529ca1267c08e83a16342fba5736c3a8ec89568feb11fb737e974cb1bee7e00e7a8898d25844892366c6167b9ea8d1e647c  rsyncd.initd
d91337cfb57e6e3b2a8ba1e24f7d851dd927bfc327da2212b9eb0acda0e1ca2f24987f6dcc4903eccc3bf170e0f115172b3cfa5a172700495296f26302c834d7  rsyncd.confd
3db8a2b364fc89132af6143af90513deb6be3a78c8180d47c969e33cb5edde9db88aad27758a6911f93781e3c9846aeadc80fffc761c355d6a28358853156b62  rsyncd.conf
e7ff164926785c4eff2ea641c7ce2d270b25f1c26d93a6108bb6ff2c0207a28ebfd93dca39596243446ce41aceaeae62fc2b34084eb9c9086fcdbc03a657eed8  rsyncd.logrotate
935ef8777b74ba8f57d7bd3ebbf281e04e0b1b7b74cb9552a93396669228e3764ba27e5fec5858583c0e06b678c95a4467ff057865a28249d19af5997b3c7305  CVE-2025-10158-fix-invalid-access-to-files-array.patch
"