sergioandClaude Opus 4.8
21ac060c4b
Cosecha desatendida de la campaña harkaq. Cada dep de acá la denunció el audit de Landlock en un build real: el kernel vio al build usarla sin declararla, y el store del hub confirma qué artefacto la provee (deuda DECLARABLE, §4.5). Recetas:gettext-tiny giflib git gnupg gperf gzip htop iproute2 jq kbd libassuan libcap libevent libffi libgcrypt libgpg-error libksba libnl libpng libsass libsodium libssh2 libudev-zero libusb libwebp libxml2 libyaml linux-generic linux-headers linux-metal linux-pam linux lz4 mandoc mtools musl nano npth openssh openssl parted pciutils pcre2 pigz procps-ng python3 readline rsync samurai ca-certificates curl doas dosfstools e2fsprogs fontconfig freetype No se tocó ninguna receta con deuda IRREDUCIBLE: declarar algo que el store no provee rompería el build en vez de arreglarlo. Esas van a tandas/needs-review-harkaq. Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
61 lines
2.0 KiB
TOML
61 lines
2.0 KiB
TOML
# gnupg 2.4.9 — GnuPG (gpg: firma/cifrado/verificación). De-Alpinizada (Etapa G).
|
|
# Cadena crypto canónica sellada: libgpg-error, libgcrypt, libassuan, libksba, npth.
|
|
# Objetivo mínimo: binario gpg (y gpgv) estático musl. scdaemon/dirmngr/tofu desactivados
|
|
# (quitan deps de red/smartcard/sqlite); doc/nls/bzip2 fuera para no arrastrar deps ausentes.
|
|
name = "gnupg"
|
|
version = "2.4.9"
|
|
|
|
[source]
|
|
tarball = "https://gnupg.org/ftp/gcrypt/gnupg/gnupg-2.4.9.tar.bz2"
|
|
sha256 = "dd17ab2e9a04fd79d39d853f599cbc852062ddb9ab52a4ddeb4176fd8b302964"
|
|
patches = ["0001-include-unistd.patch", "0010-avoid-beta-warning.patch", "0020-avoid-regenerating-defsincdate-use-shipped-file.patch", "0110-avoid-simple-memory-dumps-via-ptrace.patch", "0210-dirmngr-hkp-avoid-potential-race-condition-when-some-host-die.patch", "0230-dirmngr-avoid-automatically-checking-upstream-swdb.patch", "0330-gpg-default-to-sha512-for-all-signature-types-on-rsa-keys.patch", "0340-gpg-prefer-sha512-and-sha384-in-personal-digest.patch", "0420-gpg-drop-import-clean-from-default-keyserver-import-options.patch", "fix-i18n.patch", "HACK-revert-rfc4880bis-default.patch"]
|
|
|
|
[build]
|
|
compiler = "zig-cc"
|
|
target = "x86_64-linux-musl"
|
|
link = "static"
|
|
flags = []
|
|
|
|
[build.phases]
|
|
configure = '''
|
|
./configure \
|
|
--build=$CBUILD \
|
|
--host=$CHOST \
|
|
--prefix=/usr \
|
|
--sysconfdir=/etc \
|
|
--localstatedir=/var \
|
|
--enable-static \
|
|
--disable-shared \
|
|
--disable-nls \
|
|
--disable-tofu \
|
|
--disable-scdaemon \
|
|
--disable-dirmngr \
|
|
--disable-doc \
|
|
--disable-gpgtar \
|
|
--disable-wks-tools \
|
|
--disable-photo-viewers \
|
|
--without-readline \
|
|
--disable-bzip2 \
|
|
--with-libgpg-error-prefix=/usr \
|
|
--with-libgcrypt-prefix=/usr \
|
|
--with-libassuan-prefix=/usr \
|
|
--with-ksba-prefix=/usr \
|
|
--with-npth-prefix=/usr
|
|
'''
|
|
compile = 'make'
|
|
install = '''
|
|
make DESTDIR="/out" install
|
|
|
|
cd "/out"
|
|
|
|
# compat symlinks
|
|
ln -s gpg usr/bin/gpg2
|
|
ln -s gpgv usr/bin/gpgv2
|
|
|
|
# tool interno de tests
|
|
rm -f usr/bin/gpgscm
|
|
'''
|
|
|
|
[deps]
|
|
build = ["libgpg-error", "libgcrypt", "libassuan", "libksba", "npth", "zlib", "linux-headers", "pkgconf", "make"]
|