v1.11.0

What's Changed

• Fixed maven plugin validation warnings of newer maven versions by @tisoft in #82

Full Changelog: rpm-1.10.1...rpm-1.11.0

v1.10.1

Also see: https://ctron.github.io/rpm-builder

This is a bugfix release, improving the Yum repository generation: rpm-1.10.0...rpm-1.10.1

Fixed issues

• #36 – Don't add requirements on files a package provides by itself

Thanks to @ThorAsgardDev for fixing this long standing issue.

Maven coordinates

<dependency>
    <groupId>de.dentrassi.maven</groupId>
    <artifactId>rpm</artifactId>
    <version>1.10.1</version>
</dependency>

v1.10.0

See also: https://ctron.github.io/rpm-builder

This is a feature release, improving some things: rpm-1.9.0...rpm-1.10.0

Fixed issues

• #66 – Assign project.build.rpm.outputFileName property – thanks @kasbert for contributing this
• #70 ­– Digest mismatch for RPM install with FIPS mode enabled – thanks @tksopra for reporting and testing this

Changes

• Update bouncycastle dependencies to "jdk18on" versions, to align with Eclipse Packager

More details

Some systems (FIPS mode enabled) seem to require a digest algorithm better than MD5 for file digests. RPM stores a digest for the headers only (which already was SHA-256), but also a digest for the content of each file. This in combination replaces the header+payload digest.

Up until version 1.9.0, the file digest was MD5. The header digest was SHA-256. For the file digest, it would also have been possible to use SHA-256 on newer RPM versions. The result was, that RPMs created by this plugin couldn't be installed out of the box on such FIPS enabled systems.

Starting with version 1.10.0, the default is to use SHA-256 also for the file digests. It also adds the ability configure this, in case someone would still need MD5, or would want SHA-512.

This results in a change in the output of this plugin. Meaning that version 1.10.0 will not be able to re-create the exact same output as created by 1.9.0 (reproducible RPMs, depending on the default configuration). However, this is expected, as the plugin in considered part of the build input, and there isn't a guarantee that newer versions of the plugin produce the same bytes.

Maven coordinates

<dependency>
    <groupId>de.dentrassi.maven</groupId>
    <artifactId>rpm</artifactId>
    <version>1.10.0</version>
</dependency>

v1.9.0

See also: https://ctron.github.io/rpm-builder

This is a maintenance release, fixing an issue with DNF verification.

Many thanks to @tobias1703 for reporting this!

Fixed issue

• #64 – Signed RPM failed to install using dnf on RHEL8 and RHEL9

More details

RPM has two ways for sign: V3 and V4. V4 was supported by this plugin so far, and signs the header section only. This works, as the header section contains digests of the payload section too. And it is a bit faster. V3 signs the header plus payload section.

Having either of them should be enough. However, DNF failed to install RPMs on RHEL 8 and RHEL 9. Installing (with verification) an RPM file using rpm or even dnf install <local-rpm>.rpm worked fine.

The reason for this is, that dnf does some extra checks using rpmkeys. Which reports that V4 fine, but some information (around V3) missing. "missing" however is a trigger for function evaluating the output of rpmkeys to thing that a signature is missing, and so it thinks it can verify the RPM. Adding the V3 signature tag and more payload digest fields to the header remove the "missing" message and make the RPM install fine from a YUM repository using DNF.

This however, changes the RPM files generated, by adding extra fields in the metadata. Which isn't a problem, just that you know.

Maven coordinates

<dependency>
    <groupId>de.dentrassi.maven</groupId>
    <artifactId>rpm</artifactId>
    <version>1.9.0</version>
</dependency>

v1.8.0

See also: https://ctron.github.io/rpm-builder

This is a feature release, which is backwards compatible with 1.7.x.

Many thanks to @tisoft for the contribution!

New features

• #60 – Allow to create reproducible RPMs

Maven coordinates

<dependency>
    <groupId>de.dentrassi.maven</groupId>
    <artifactId>rpm</artifactId>
    <version>1.8.0</version>
</dependency>

v1.7.1

See also: https://ctron.github.io/rpm-builder

This is a bugfix release for 1.7.x.

Many thanks to @hochraldo for the contribution!

Fixes

• #59 – Symbolic Links are not added when true is set on collector

Maven coordinates

<dependency>
    <groupId>de.dentrassi.maven</groupId>
    <artifactId>rpm</artifactId>
    <version>1.7.1</version>
</dependency>

v1.7.0

See also: https://ctron.github.io/rpm-builder

This is a feature release, backwards compatible with 1.6.x.

Many thanks for @dranuhl for the contributions!

New features

• #47 add an unpack goal to the plugin

Fixes

• #56 ghost entries not working as expected
• update documentation

Maven coordinates

<dependency>
    <groupId>de.dentrassi.maven</groupId>
    <artifactId>rpm</artifactId>
    <version>1.7.0</version>
</dependency>

1.6.0

See also: https://ctron.github.io/rpm-builder

This is a feature release, backwards compatible with 1.5.x.

New features

• #53: This fixes #52 by allowing to explicitly set a snapshot version. Thanks to @elkman for the contribution!

Maven coordinates

<dependency>
    <groupId>de.dentrassi.maven</groupId>
    <artifactId>rpm</artifactId>
    <version>1.6.0</version>
</dependency>

v1.4.0

See also: https://ctron.github.io/rpm-builder

This is a feature release, backwards compatible with 1.3.x.

New features

• #46: Allow configuring signature header content. Allows to create RPMs for older (really old) RPM versions, fixing the AIX issue eclipse/packager#7. Thanks to @rohit-lshift and @dwalluck for reporting, analyzing and testing this.

Changes

• Bring back support for compiling the plugin itself on Java 8

Maven coordinates

<dependency>
    <groupId>de.dentrassi.maven</groupId>
    <artifactId>rpm</artifactId>
    <version>1.4.0</version>
</dependency>

v1.3.0

See also: https://ctron.github.io/rpm-builder

This is a feature release, backwards compatible with 1.2.x.

New features

• #43: Allow customizing the verification flags using <verify> element. Thanks to @OliverMatz for contributing the PR.
• #40: Add support for using rpm as the Maven module type. Thanks to @singhald for contributing the PR.

Changes

• Switch to artifacts from Eclipse Packager
• Update a bunch of dependencies

Maven coordinates

<dependency>
    <groupId>de.dentrassi.maven</groupId>
    <artifactId>rpm</artifactId>
    <version>1.3.0</version>
</dependency>