В Пнд, 27/09/2010 в 11:37 +0000, Dirkjan Ochtman (djc) пишет:
> src_prepare() {
> epatch "${FILESDIR}/${PN}-2.1_rc13-peercred.patch"
> epatch "${FILESDIR}/${PN}-2.1_rc20-pkcs11.patch"
> use ipv6 && epatch "${WORKDIR}/${PN}-2.1.1-ipv6-${IPV6_VERSION}.patch"
> use eurephia && epatch "${DISTDIR}/${PN}-2.1.0_eurephia.patch"
> sed -i
> -e "s/gcc ${CC_FLAGS}/${CC} ${CFLAGS} -Wall/"
> -e "s/-shared/-shared ${LDFLAGS}/"
> plugin/*/Makefile || die "sed failed"
> eautoreconf

Is autoreconf really necessary here? Looks like it is redundant in case
ipv6 or eurephia are disabled.

> src_configure() {

> econf ${myconf}
> $(use_enable passwordsave password-save)
> $(use_enable ssl)
> $(use_enable ssl crypto)
> $(use_enable iproute2)
> || die "configure failed"

|| die is redundant here.


> src_compile() {
> use static && sed -i -e '/^LIBS/s/LIBS = /LIBS = -static /' Makefile
>
> emake || die "make failed"
>
> if ! use minimal ; then
> cd plugin
> for i in $( ls 2>/dev/null ); do

This is bad construction:
http://mywiki.wooledge.org/BashPitfalls#for_i_in_.24.28ls_.2A.mp3.29

> [[ ${i} == "README" || ${i} == "examples" || ${i} == "defer" ]] && continue
> [[ ${i} == "auth-pam" ]] && ! use pam && continue
> einfo "Building ${i} plugin"
> cd "${i}"
> emake CC=$(tc-getCC) || die "make failed"
> cd ..

I think pushd/popd are better suited for this then cd "${dir}" / cd ..

> done
> cd ..
> fi
> }

> # remove empty dir
> rmdir "${D}/usr/share/doc/openvpn"

|| die is prudent here.

> # Empty dir
> dodir /etc/openvpn
> keepdir /etc/openvpn

dodir is redundant: keepdir will create directory.

> # Install some helper scripts
> exeinto /etc/openvpn
> doexe "${FILESDIR}/up.sh"
> doexe "${FILESDIR}/down.sh"

|| die after doexe is really good idea.

> # Install the init script and config file
> newinitd "${FILESDIR}/${PN}-2.1.init" openvpn
> newconfd "${FILESDIR}/${PN}-2.1.conf" openvpn

|| die absent

> # install examples, controlled by the respective useflag
> if use examples ; then
> # dodoc does not supportly support directory traversal, #15193
> insinto /usr/share/doc/${PF}/examples
> doins -r sample-{config-files,keys,scripts} contrib
> prepalldocs
> fi

> # Install plugins and easy-rsa
> if ! use minimal ; then
> cd easy-rsa/2.0
> make install "DESTDIR=${D}/usr/share/${PN}/easy-rsa"
> cd ../..
>
> exeinto "/usr/$(get_libdir)/${PN}"
> doexe plugin/*/*.so
> fi
> }
>
> pkg_postinst() {
> # Add openvpn user so openvpn servers can drop privs
> # Clients should run as root so they can change ip addresses,
> # dns information and other such things.
> enewgroup openvpn
> enewuser openvpn "" "" "" openvpn
>
> if [[ -n $(ls /etc/openvpn/*/local.conf 2>/dev/null) ]] ; then

I'd suggested [ -e /etc/openvpn/*/local.conf ] here, but probably there
are better alternatives. Also ${ROOT} is missed here.

> ewarn "WARNING: The openvpn init script has changed"
> ewarn ""
> fi
>
> einfo "The openvpn init script expects to find the configuration file"
> einfo "openvpn.conf in /etc/openvpn along with any extra files it may need."

This information is for users, so, please, use elog here.

> einfo ""
> einfo "To create more VPNs, simply create a new .conf file for it and"
> einfo "then create a symlink to the openvpn init script from a link called"
> einfo "openvpn.newconfname - like so"
> einfo " cd /etc/openvpn"
> einfo " ${EDITOR##*/} foo.conf"
> einfo " cd /etc/init.d"
> einfo " ln -s openvpn openvpn.foo"
> einfo ""
> einfo "You can then treat openvpn.foo as any other service, so you can"
> einfo "stop one vpn and start another if you need to."
>
> if grep -Eq "^[ ]*(up|down)[ ].*" "${ROOT}/etc/openvpn"/*.conf 2>/dev/null ; then
> ewarn ""
> ewarn "WARNING: If you use the remote keyword then you are deemed to be"
> ewarn "a client by our init script and as such we force up,down scripts."
> ewarn "These scripts call /etc/openvpn/$SVCNAME-{up,down}.sh where you"
> ewarn "can move your scripts to."
> fi
>
> if ! use minimal ; then
> einfo ""
> einfo "plugins have been installed into /usr/$(get_libdir)/${PN}"
> fi
>
> if use ipv6 ; then
> einfo ""
> einfo "This build contains IPv6-Patch from JuanJo Ciarlante."
> einfo "For more information please visit:"
> einfo "http://github.com/jjo/openvpn-ipv6"
> fi
>
> if use eurephia ; then
> einfo ""
> einfo "This build contains eurephia patch."
> einfo "For more information please visit:"
> einfo "http://www.eurephia.net/"
> fi
> }

--
Peter.