[arch-commits] Commit in matterbridge/trunk (PKGBUILD matterbridge.service)

[Bruno Pagani]

    Date: Thursday, January 31, 2019 @ 15:20:00
  Author: archange
Revision: 428740

upgpkg: matterbridge 1.13.0-1

Modified:
  matterbridge/trunk/PKGBUILD
  matterbridge/trunk/matterbridge.service

----------------------+
 PKGBUILD             |   12 +++++++++---
 matterbridge.service |   19 +++++++++++++++++--
 2 files changed, 26 insertions(+), 5 deletions(-)

Modified: PKGBUILD
===================================================================
--- PKGBUILD	2019-01-31 15:19:32 UTC (rev 428739)
+++ PKGBUILD	2019-01-31 15:20:00 UTC (rev 428740)
@@ -1,7 +1,7 @@
 # Maintainer: Bruno Pagani <archange at archlinux.org>
 
 pkgname=matterbridge
-pkgver=1.12.3
+pkgver=1.13.0
 pkgrel=1
 pkgdesc="Multi-protocols (IRC/XMPP/Mattermost/Slack/Matrix/etc) bridge"
 arch=('x86_64')
@@ -13,11 +13,17 @@
 source=(${pkgname}-${pkgver}.tar.gz::"${url}/archive/v${pkgver}.tar.gz"
         ${pkgname}-${pkgver}.tar.gz.asc::"${url}/releases/download/v${pkgver}/v${pkgver}.tar.gz.asc"
         'matterbridge.service')
-sha256sums=('240a76ea0c6d1cd4e671edf2684a606d052236e1140ce3c45582831f01d3ae12'
+sha256sums=('6f66b562035d2cf1f9bb9fe2cacb36327326bb483673c4ddf8a2c7438b2487c9'
             'SKIP'
-            'afb424b918f7108f5efae39afbed5d23d9a2c36710c6e0adbb96c7e5c7835aa3')
+            '89e52388054d3c83199ccbfe8f2dc02a6ae02ec1a2d024460b11464324a1fb9b')
 validpgpkeys=('CC7D978417C1AEA1E4CDD7240E41AB4BF4C610B4') # wim <wim at 42.be>
 
+prepare() {
+  cd ${pkgname}-${pkgver}
+  # https://github.com/golang/go/issues/29278
+  sed -i 's:9PfxPUmasKzeJor9uQTaXLT6WUG/r+vSTmvXxvv3JO4:Y3vG4kINVWNQN8Y6Jdur8uLat7fSLV5n5yLE8n+JbF4:' go.sum
+}
+
 build() {
   cd ${pkgname}-${pkgver}
   go build -v \

Modified: matterbridge.service
===================================================================
--- matterbridge.service	2019-01-31 15:19:32 UTC (rev 428739)
+++ matterbridge.service	2019-01-31 15:20:00 UTC (rev 428740)
@@ -3,10 +3,25 @@
 After=network.target
 
 [Service]
-User=nobody
-Group=nobody
+User=matterbridge
+DynamicUser=yes
 ExecStart=/usr/bin/matterbridge -conf /etc/matterbridge.toml
 Type=simple
+CapabilityBoundingSet=
+NoNewPrivileges=True
+PrivateUsers=true
+PrivateDevices=true
+PrivateTmp=true
+ProtectHome=true
+ProtectSystem=strict
+ProtectControlGroups=yes
+ProtectKernelTunables=true
+ProtectKernelModules=yes
+LockPersonality=true
+MemoryDenyWriteExecute=true
+RestrictRealtime=true
+SystemCallArchitectures=native
+SystemCallFilter=@system-service
 
 [Install]
 WantedBy=multi-user.target