From 6da401934c560a76d1b36b1fa6a5063297c9006b Mon Sep 17 00:00:00 2001 From: joborun Date: Thu, 26 Oct 2023 01:49:12 +0300 Subject: [PATCH] add dracut signify upg ethtool opensmtpd nftables --- dracut/60-dracut-remove.hook | 10 ++ dracut/90-dracut-install.hook | 11 ++ dracut/Makefile.inc | 12 ++ dracut/PKGBUILD | 81 +++++++++++ dracut/PKGBUILD-arch | 55 ++++++++ dracut/PKGBUILD-oba | 121 +++++++++++++++++ dracut/clean | 1 + dracut/deps | 6 + dracut/dracut-install | 15 +++ dracut/dracut-remove | 8 ++ dracut/dracut-systemd-253.patch | 225 +++++++++++++++++++++++++++++++ dracut/key | 1 + dracut/time | 6 + ethtool/PKGBUILD | 17 ++- ethtool/PKGBUILD-arch | 4 +- ethtool/deps | 1 + nftables/PKGBUILD | 34 +++-- nftables/PKGBUILD-arch | 8 +- nftables/key | 1 + opensmtpd/PKGBUILD | 23 +++- opensmtpd/PKGBUILD-arch | 17 ++- opensmtpd/clean | 2 +- opensmtpd/deps | 1 + opensmtpd/opensmtpd-20181026.pub | 2 + signify/PKGBUILD | 62 +++++++++ signify/PKGBUILD-arch | 48 +++++++ signify/clean | 1 + signify/deps | 3 + signify/key | 1 + signify/signify-LICENSE-31 | 16 +++ signify/time | 6 + 31 files changed, 753 insertions(+), 46 deletions(-) create mode 100644 dracut/60-dracut-remove.hook create mode 100644 dracut/90-dracut-install.hook create mode 100644 dracut/Makefile.inc create mode 100644 dracut/PKGBUILD create mode 100644 dracut/PKGBUILD-arch create mode 100644 dracut/PKGBUILD-oba create mode 100644 dracut/clean create mode 100644 dracut/deps create mode 100644 dracut/dracut-install create mode 100644 dracut/dracut-remove create mode 100644 dracut/dracut-systemd-253.patch create mode 100644 dracut/key create mode 100644 dracut/time create mode 100644 nftables/key create mode 100644 opensmtpd/opensmtpd-20181026.pub create mode 100644 signify/PKGBUILD create mode 100644 signify/PKGBUILD-arch create mode 100644 signify/clean create mode 100644 signify/deps create mode 100644 signify/key create mode 100644 signify/signify-LICENSE-31 create mode 100644 signify/time diff --git a/dracut/60-dracut-remove.hook b/dracut/60-dracut-remove.hook new file mode 100644 index 0000000..80a9c1e --- /dev/null +++ b/dracut/60-dracut-remove.hook @@ -0,0 +1,10 @@ +[Trigger] +Type = Path +Operation = Remove +Target = usr/lib/modules/*/pkgbase + +[Action] +Description = Removing linux initcpios... +When = PreTransaction +Exec = /usr/share/libalpm/scripts/dracut-remove +NeedsTargets diff --git a/dracut/90-dracut-install.hook b/dracut/90-dracut-install.hook new file mode 100644 index 0000000..2f33159 --- /dev/null +++ b/dracut/90-dracut-install.hook @@ -0,0 +1,11 @@ +[Trigger] +Type = Path +Operation = Install +Operation = Upgrade +Target = usr/lib/modules/*/pkgbase + +[Action] +Description = Updating linux initcpios with dracut... +When = PostTransaction +Exec = /usr/share/libalpm/scripts/dracut-install +NeedsTargets diff --git a/dracut/Makefile.inc b/dracut/Makefile.inc new file mode 100644 index 0000000..971ed23 --- /dev/null +++ b/dracut/Makefile.inc @@ -0,0 +1,12 @@ +prefix ?= /usr +libdir ?= /usr/lib +datadir ?= /usr/share +sysconfdir ?= /usr/etc +sbindir ?= /usr/bin +mandir ?= /usr/share/man +enable_documentation ?= yes +enable_dracut_cpio ?= no +bindir ?= /usr/bin +KMOD_CFLAGS ?= +KMOD_LIBS ?= -lkmod +FTS_LIBS ?= -lc diff --git a/dracut/PKGBUILD b/dracut/PKGBUILD new file mode 100644 index 0000000..c3efa9c --- /dev/null +++ b/dracut/PKGBUILD @@ -0,0 +1,81 @@ +#!/usr/bin/bash +# JOBoRun : Jwm OpenBox Obarun RUNit +# Maintainer : Joe Bo Run +# PkgSource : url="https://gittea.disroot.org/joborun-pkg/jobextra/$pkgname" +# Website : https://pozol.eu +#-----------------------------------------| DESCRIPTION |--------------------------------------- + +pkgname=dracut +pkgver=059 +pkgrel=03 +pkgdesc="An event driven initramfs infrastructure w/o systemd" +#url="https://dracut.wiki.kernel.org" +url="https://github.com/dracutdevs/dracut" +depends=('bash' 'coreutils' 'cpio' 'filesystem' 'findutils' 'grep' 'gzip' + 'kmod' 'pkgconf' 'procps-ng' 'sed' 'util-linux' 'xz') +makedepends=('asciidoc' 'bash-completion' 'git') +optdepends=('binutils: --uefi option support' + 'elfutils: strip binaries to reduce initramfs size' + 'multipath-tools: dmraid dracut module support' + 'pigz: faster gzip compression' + 'sbsigntools: uefi_secureboot_cert/key configuration option support') +provides=('initramfs') +backup=('etc/dracut.conf') +#source=(https://mirrors.edge.kernel.org/pub/linux/utils/boot/dracut/dracut-${pkgver}.tar{.gz,.sign}) +source=("${pkgname}::git+${url}#tag=${pkgver}?signed" + dracut-install + dracut-remove + 90-dracut-install.hook + 60-dracut-remove.hook) + +prepare() { + cd "$srcdir/${pkgname}" + +} + +build() { + local prefix=/usr sysconfdir=/etc + + cd "$srcdir/${pkgname}" + + ./configure \ + --sysconfdir=${sysconfdir} \ + --prefix=${prefix} \ + --libdir=${prefix}/lib \ + --systemdsystemunitdir=/delete \ + --bashcompletiondir=$(pkg-config --variable=completionsdir bash-completion) + make +} + +package() { + cd "$srcdir/${pkgname}" + + DESTDIR="$pkgdir" make install + + ## systemd crap thrown away + rm -rf ${pkgdir}/usr/lib/dracut/modules.d/*systemd* + rm -f ${pkgdir}/usr/share/man/man8/*.service.* + rm -rf $pkgdir/delete ## give us a break Jóhann, make a decent option to build this without the crap smeared all over it + + install -Dm644 "${srcdir}/90-dracut-install.hook" "${pkgdir}/usr/share/libalpm/hooks/90-dracut-install.hook" + install -Dm644 "${srcdir}/60-dracut-remove.hook" "${pkgdir}/usr/share/libalpm/hooks/60-dracut-remove.hook" + install -Dm755 "${srcdir}/dracut-install" "${pkgdir}/usr/share/libalpm/scripts/dracut-install" + install -Dm755 "${srcdir}/dracut-remove" "${pkgdir}/usr/share/libalpm/scripts/dracut-remove" + +} + +#---- arch license gpg-key & sha256sums ---- + +arch=(x86_64) + +license=('GPL') + +validpgpkeys=('F66745589DE755B02AD947D71F1139EBBED1ACA9') # "Jóhann B. Guðmundsson " + +sha256sums=(SKIP + 4c0ee4c9dc2941d34ebeecf4242c7577e3d193c2a00a9a465a39d42c8266ca6a # dracut-install + 4d6ca5da247a19f290bd8e375c470ef6dc01476288cb8aba71c09c09d23331f5 # dracut-remove + 7365ad289428c7f7dad522ea0a2c9381648912a626bd40237767051468d325ef # 90-dracut-install.hook + 054dac9f1d55029a922ff05c3064e54d25790c7a18d2b598edc58ef3d295cba1) # 60-dracut-remove.hook + +## 92b6daba2f0a0143445fae01fe9825fa2a4a7cca6c35616c44b2c18751c7e55c dracut-059-03-x86_64.pkg.tar.lz diff --git a/dracut/PKGBUILD-arch b/dracut/PKGBUILD-arch new file mode 100644 index 0000000..3fb4a96 --- /dev/null +++ b/dracut/PKGBUILD-arch @@ -0,0 +1,55 @@ +# Maintainer: Giancarlo Razzolini +pkgname=dracut +pkgver=059 +pkgrel=3 +pkgdesc="An event driven initramfs infrastructure" +arch=('x86_64') +url="https://github.com/dracutdevs/dracut" +license=('GPL') +depends=('bash' 'coreutils' 'cpio' 'filesystem' 'findutils' 'grep' 'gzip' + 'kmod' 'pkgconf' 'procps-ng' 'sed' 'systemd' 'util-linux' 'xz') +makedepends=('asciidoc' 'bash-completion' 'git') +optdepends=('binutils: --uefi option support' + 'elfutils: strip binaries to reduce initramfs size' + 'multipath-tools: dmraid dracut module support' + 'pigz: faster gzip compression' + 'sbsigntools: uefi_secureboot_cert/key configuration option support') +provides=('initramfs') +backup=('etc/dracut.conf') +source=("${pkgname}-${pkgver}::git+${url}#tag=${pkgver}?signed" + dracut-systemd-253.patch + dracut-systemd-254-uki.patch::https://github.com/dracutdevs/dracut/commit/f32e95bcadbc5158843530407adc1e7b700561b1.patch) +sha512sums=('SKIP' + 'dfbef5ee06fd0f7b51bfd3571eb284272d7694754eaf232cf1a14f3b2f95a67c87098fabf6d88068ef7e235e717bec26024a3b342c5dba940b8600799cef0791' + '880fa583e02557ca24047960bdf36bd4d02fb01baac9e090cc462a02159dddd1725dc59ca4f09e8c9d9827a51bbd0676c0a60d96080b89c2778a445b36d46f33') +b2sums=('SKIP' + '6386d1caf4765974e6f9fffde43cacc20f55a1ed487f6dba9f6f15318dc6dc593ef01309679c8a7f1deffc5dd66138cde7c11d53a825396971d6be29a9388744' + '620aef8362c22f51558010a4fa043448065dc6b3a27f40ed22b8bbdd3623d31759e4eff77f37059f0d91288a95843ea6b3c64292bd548d1aa6147d293cb17b30') +validpgpkeys=('F66745589DE755B02AD947D71F1139EBBED1ACA9') # Jóhann B. Guðmundsson + +prepare() { + cd "$srcdir/${pkgname}-${pkgver}" + + patch -Np1 < ../dracut-systemd-253.patch + patch -Np1 < ../dracut-systemd-254-uki.patch +} + +build() { + local prefix=/usr sysconfdir=/etc + + cd "$srcdir/${pkgname}-${pkgver}" + + ./configure \ + --sysconfdir=${sysconfdir} \ + --prefix=${prefix} \ + --libdir=${prefix}/lib \ + --systemdsystemunitdir=${prefix}/lib/systemd/system \ + --bashcompletiondir=$(pkg-config --variable=completionsdir bash-completion) + make +} + +package() { + cd "$srcdir/${pkgname}-${pkgver}" + + DESTDIR="$pkgdir" make install +} diff --git a/dracut/PKGBUILD-oba b/dracut/PKGBUILD-oba new file mode 100644 index 0000000..e00b911 --- /dev/null +++ b/dracut/PKGBUILD-oba @@ -0,0 +1,121 @@ +# Obarun : 66 init/supervisor +# Maintainer : Eric Vidal +# Maintainer : Jean-Michel T.Dydak +# Maintainer : YianIris +# Obarun PkgSrc : https://git.obarun.org/pkg/obextra/dracut +#---------------- +#-------------------------------------------------------------- +# DESCRIPTION ] + +pkgname=dracut +pkgver=056 +pkgrel=2 +pkgdesc='An event driven initramfs infrastructure' + +url='https://dracut.wiki.kernel.org' + +track=pub/linux/utils/boot/$pkgname +target=$pkgname-$pkgver +source=( + https://mirrors.edge.kernel.org/$track/$target.tar{.gz,.sign} + dracut-install + dracut-remove + 90-dracut-install.hook + 60-dracut-remove.hook +) + +#---------------------- +# BUILD CONFIGURATION ] + +makedepends=( + 'asciidoc' + 'bash-completion' +) + +#------------------------ +# INSTALL CONFIGURATION ] + +arch=(x86_64) + +depends=( + 'bash' + 'coreutils' + 'cpio' + 'filesystem' + 'findutils' + 'grep' + 'gzip' + 'kmod' + 'procps-ng' + 'sed' + 'util-linux' + 'xz' +) + +optdepends=( + 'linux-firmware: in some hardware booting will fail without adequate firmware' +) + +backup=( + 'etc/dracut.conf' +) + +provides=( + 'initramfs' +) + +conflicts=( + 'dracut-git' + 'mkinitcpio' + 'mkinitcpio-busybox' +) + +#---------------- +# BUILD CONTROL ] + +_path=( + --prefix=/usr + --sysconfdir=/etc + --libdir=/usr/lib + --bashcompletiondir=$(pkg-config --variable=completionsdir bash-completion) +) + +#-------- +# BUILD ] + +build() { + cd $pkgname-$pkgver + + ./configure "${_path[@]}" + make +} + +#---------- +# PACKAGE ] + +package() { + cd $pkgname-$pkgver + + DESTDIR="$pkgdir" make install + + ## We don't need the systemd stuff. + rm -rf ${pkgdir}/usr/lib/dracut/modules.d/*systemd* + rm -f ${pkgdir}/usr/share/man/man8/*.service.* + rm -rf ${pkgdir}/usr/lib/kernel + + install -Dm644 "${srcdir}/90-dracut-install.hook" "${pkgdir}/usr/share/libalpm/hooks/90-dracut-install.hook" + install -Dm644 "${srcdir}/60-dracut-remove.hook" "${pkgdir}/usr/share/libalpm/hooks/60-dracut-remove.hook" + install -Dm755 "${srcdir}/dracut-install" "${pkgdir}/usr/share/libalpm/scripts/dracut-install" + install -Dm755 "${srcdir}/dracut-remove" "${pkgdir}/usr/share/libalpm/scripts/dracut-remove" +} + +#--------------------------- +# LICENSE AND VERIFICATION ] + +license=(GPL) + +validpgpkeys=( + '7F3D64824AC0B6B8009E50504BC0896FB5693595' # Harald Hoyer +) + +sha512sums=(' ') diff --git a/dracut/clean b/dracut/clean new file mode 100644 index 0000000..fb449c5 --- /dev/null +++ b/dracut/clean @@ -0,0 +1 @@ +rm -rf {src,pkg,dracut} diff --git a/dracut/deps b/dracut/deps new file mode 100644 index 0000000..8561eca --- /dev/null +++ b/dracut/deps @@ -0,0 +1,6 @@ +cpio +asciidoc +bash-completion +git + + diff --git a/dracut/dracut-install b/dracut/dracut-install new file mode 100644 index 0000000..f6ff8a4 --- /dev/null +++ b/dracut/dracut-install @@ -0,0 +1,15 @@ +#!/bin/bash + +args=('--no-hostonly-cmdline') + +while read -r line; do + if [[ "$line" == 'usr/lib/modules/'+([^/])'/pkgbase' ]]; then + read -r pkgbase < "/${line}" + kver="${line#'usr/lib/modules/'}" + kver="${kver%'/pkgbase'}" + + install -Dm0644 "/${line%'/pkgbase'}/vmlinuz" "/boot/vmlinuz-${pkgbase}" + dracut "${args[@]}" --force "/boot/initramfs-${pkgbase}.img" --kver "$kver" + dracut --no-hostonly --force "/boot/initramfs-${pkgbase}-fallback.img" --kver "$kver" + fi +done diff --git a/dracut/dracut-remove b/dracut/dracut-remove new file mode 100644 index 0000000..3f4c93f --- /dev/null +++ b/dracut/dracut-remove @@ -0,0 +1,8 @@ +#!/bin/bash + +while read -r line; do + if [[ "$line" == 'usr/lib/modules/'+([^/])'/pkgbase' ]]; then + read -r pkgbase < "/${line}" + rm -f "/boot/vmlinuz-${pkgbase}" "/boot/initramfs-${pkgbase}.img" "/boot/initramfs-${pkgbase}-fallback.img" + fi +done diff --git a/dracut/dracut-systemd-253.patch b/dracut/dracut-systemd-253.patch new file mode 100644 index 0000000..bf40eac --- /dev/null +++ b/dracut/dracut-systemd-253.patch @@ -0,0 +1,225 @@ +From 0000000000000000000000000000000000000000 Mon Sep 17 00:00:00 2001 +From: Antonio Alvarez Feijoo +Date: Mon, 9 Jan 2023 11:47:06 +0100 +Subject: [PATCH 1/4] fix(dracut-systemd): remove unused argument + +The `generator_wait_for_dev` function of the dracut rootfs systemd generator +only uses the first argument. Moreover, RDRETRY is unset at this point. + +(cherry picked from commit eb75861c2a1c05eb142616da1891a7fa5a2a34e1) +--- + modules.d/98dracut-systemd/rootfs-generator.sh | 2 +- + 1 file changed, 1 insertion(+), 1 deletion(-) + +diff --git a/modules.d/98dracut-systemd/rootfs-generator.sh b/modules.d/98dracut-systemd/rootfs-generator.sh +index e1d365df..3238b495 100755 +--- a/modules.d/98dracut-systemd/rootfs-generator.sh ++++ b/modules.d/98dracut-systemd/rootfs-generator.sh +@@ -104,7 +104,7 @@ esac + GENERATOR_DIR="$1" + + if [ "$rootok" = "1" ]; then +- generator_wait_for_dev "${root#block:}" "$RDRETRY" ++ generator_wait_for_dev "${root#block:}" + generator_fsck_after_pre_mount "${root#block:}" + strstr "$(cat /proc/cmdline)" 'root=' || generator_mount_rootfs "${root#block:}" "$(getarg rootfstype=)" "$(getarg rootflags=)" + fi + +From 0000000000000000000000000000000000000000 Mon Sep 17 00:00:00 2001 +From: Antonio Alvarez Feijoo +Date: Wed, 1 Mar 2023 11:21:16 +0100 +Subject: [PATCH 2/4] fix(dracut-systemd): do not hardcode the systemd + generator directory + +The normal directory is the first argument passed to the systemd generator, +so use it instead of hardcoding /run/systemd/generator. + +(cherry picked from commit a2b32ed976898188bc98d9b6c7eec3dc45f4abf0) +--- + modules.d/98dracut-systemd/rootfs-generator.sh | 8 ++++---- + 1 file changed, 4 insertions(+), 4 deletions(-) + +diff --git a/modules.d/98dracut-systemd/rootfs-generator.sh b/modules.d/98dracut-systemd/rootfs-generator.sh +index 3238b495..5b85d8c5 100755 +--- a/modules.d/98dracut-systemd/rootfs-generator.sh ++++ b/modules.d/98dracut-systemd/rootfs-generator.sh +@@ -17,7 +17,7 @@ generator_wait_for_dev() { + # after remote-fs-pre.target since the initqueue is ordered before it so + # it will never actually show up (think Tang-pinned rootfs). + cat > "$hookdir/initqueue/finished/devexists-${_name}.sh" << EOF +-if ! grep -q After=remote-fs-pre.target /run/systemd/generator/systemd-cryptsetup@*.service 2>/dev/null; then ++if ! grep -q After=remote-fs-pre.target "$GENERATOR_DIR"/systemd-cryptsetup@*.service 2>/dev/null; then + [ -e "$1" ] + fi + EOF +@@ -77,12 +77,12 @@ generator_fsck_after_pre_mount() { + [ -z "$1" ] && return 0 + + _name=$(dev_unit_name "$1") +- [ -d /run/systemd/generator/systemd-fsck@"${_name}".service.d ] || mkdir -p /run/systemd/generator/systemd-fsck@"${_name}".service.d +- if ! [ -f /run/systemd/generator/systemd-fsck@"${_name}".service.d/after-pre-mount.conf ]; then ++ [ -d "$GENERATOR_DIR"/systemd-fsck@"${_name}".service.d ] || mkdir -p "$GENERATOR_DIR"/systemd-fsck@"${_name}".service.d ++ if ! [ -f "$GENERATOR_DIR"/systemd-fsck@"${_name}".service.d/after-pre-mount.conf ]; then + { + echo "[Unit]" + echo "After=dracut-pre-mount.service" +- } > /run/systemd/generator/systemd-fsck@"${_name}".service.d/after-pre-mount.conf ++ } > "$GENERATOR_DIR"/systemd-fsck@"${_name}".service.d/after-pre-mount.conf + fi + + } + +From 0000000000000000000000000000000000000000 Mon Sep 17 00:00:00 2001 +From: Antonio Alvarez Feijoo +Date: Wed, 1 Mar 2023 12:07:29 +0100 +Subject: [PATCH 3/4] fix(dracut-systemd): check and create generator dir + outside of inner function + +(cherry picked from commit e21f8f7d5abaae37ada8c7a6dc91c2d878e0b501) +--- + modules.d/98dracut-systemd/rootfs-generator.sh | 7 ++++--- + 1 file changed, 4 insertions(+), 3 deletions(-) + +diff --git a/modules.d/98dracut-systemd/rootfs-generator.sh b/modules.d/98dracut-systemd/rootfs-generator.sh +index 5b85d8c5..c3f60ad4 100755 +--- a/modules.d/98dracut-systemd/rootfs-generator.sh ++++ b/modules.d/98dracut-systemd/rootfs-generator.sh +@@ -51,7 +51,6 @@ generator_mount_rootfs() { + [ -z "$1" ] && return 0 + + _name=$(dev_unit_name "$1") +- [ -d "$GENERATOR_DIR" ] || mkdir -p "$GENERATOR_DIR" + if ! [ -f "$GENERATOR_DIR"/sysroot.mount ]; then + { + echo "[Unit]" +@@ -101,9 +100,11 @@ case "${root#block:}" in + ;; + esac + +-GENERATOR_DIR="$1" +- + if [ "$rootok" = "1" ]; then ++ GENERATOR_DIR="$1" ++ [ -z "$GENERATOR_DIR" ] && exit 1 ++ [ -d "$GENERATOR_DIR" ] || mkdir -p "$GENERATOR_DIR" ++ + generator_wait_for_dev "${root#block:}" + generator_fsck_after_pre_mount "${root#block:}" + strstr "$(cat /proc/cmdline)" 'root=' || generator_mount_rootfs "${root#block:}" "$(getarg rootfstype=)" "$(getarg rootflags=)" + +From 0000000000000000000000000000000000000000 Mon Sep 17 00:00:00 2001 +From: Antonio Alvarez Feijoo +Date: Fri, 3 Mar 2023 16:06:30 +0100 +Subject: [PATCH 4/4] fix(dracut-systemd): rootfs-generator cannot write + outside of generator dir + +Altough it was already documented in systemd.generator(7) that generators must +not write to locations other than those passed as arguments, since +https://github.com/systemd/systemd/commit/ca6ce62d systemd executes generators +in a mount namespace "sandbox", so now the hooks created by the rootfs-generator +are lost. + +These hooks are created using the root= cmdline argument, so this patch moves +the creation of these hooks to a cmdline hook. + +Fixes issue #2211 +Fixes issue #2225 + +(cherry picked from commit 4bde75fabe31a5c048fd75e533b94e91c3faa83b) +--- + modules.d/98dracut-systemd/module-setup.sh | 2 + + .../98dracut-systemd/parse-root.sh (new +x) | 38 +++++++++++++++++++ + .../98dracut-systemd/rootfs-generator.sh | 20 +--------- + 3 files changed, 41 insertions(+), 19 deletions(-) + +diff --git a/modules.d/98dracut-systemd/module-setup.sh b/modules.d/98dracut-systemd/module-setup.sh +index b7da86db..e66fc956 100755 +--- a/modules.d/98dracut-systemd/module-setup.sh ++++ b/modules.d/98dracut-systemd/module-setup.sh +@@ -37,6 +37,8 @@ install() { + + inst_script "$moddir/rootfs-generator.sh" "$systemdutildir"/system-generators/dracut-rootfs-generator + ++ inst_hook cmdline 10 "$moddir/parse-root.sh" ++ + for i in \ + dracut-cmdline.service \ + dracut-cmdline-ask.service \ +diff --git a/modules.d/98dracut-systemd/parse-root.sh b/modules.d/98dracut-systemd/parse-root.sh +new file mode 100755 +index 00000000..deeeff3f +--- /dev/null ++++ b/modules.d/98dracut-systemd/parse-root.sh +@@ -0,0 +1,38 @@ ++#!/bin/sh ++ ++type getarg > /dev/null 2>&1 || . /lib/dracut-lib.sh ++ ++root=$(getarg root=) ++case "${root#block:}" in ++ LABEL=* | UUID=* | PARTUUID=* | PARTLABEL=*) ++ root="block:$(label_uuid_to_dev "$root")" ++ rootok=1 ++ ;; ++ /dev/nfs) # ignore legacy /dev/nfs ++ ;; ++ /dev/*) ++ root="block:${root}" ++ rootok=1 ++ ;; ++esac ++ ++if [ "$rootok" = "1" ]; then ++ root_dev="${root#block:}" ++ root_name="$(str_replace "$root_dev" '/' '\x2f')" ++ if ! [ -e "$hookdir/initqueue/finished/devexists-${root_name}.sh" ]; then ++ ++ # If a LUKS device needs unlocking via systemd in the initrd, assume ++ # it's for the root device. In that case, don't block on it if it's ++ # after remote-fs-pre.target since the initqueue is ordered before it so ++ # it will never actually show up (think Tang-pinned rootfs). ++ cat > "$hookdir/initqueue/finished/devexists-${root_name}.sh" << EOF ++if ! grep -q After=remote-fs-pre.target /run/systemd/generator/systemd-cryptsetup@*.service 2>/dev/null; then ++ [ -e "$root_dev" ] ++fi ++EOF ++ { ++ printf '[ -e "%s" ] || ' "$root_dev" ++ printf 'warn "\"%s\" does not exist"\n' "$root_dev" ++ } >> "$hookdir/emergency/80-${root_name}.sh" ++ fi ++fi +diff --git a/modules.d/98dracut-systemd/rootfs-generator.sh b/modules.d/98dracut-systemd/rootfs-generator.sh +index c3f60ad4..bcfd2b89 100755 +--- a/modules.d/98dracut-systemd/rootfs-generator.sh ++++ b/modules.d/98dracut-systemd/rootfs-generator.sh +@@ -6,28 +6,10 @@ generator_wait_for_dev() { + local _name + local _timeout + +- _name="$(str_replace "$1" '/' '\x2f')" ++ _name=$(dev_unit_name "$1") + _timeout=$(getarg rd.timeout) + _timeout=${_timeout:-0} + +- if ! [ -e "$hookdir/initqueue/finished/devexists-${_name}.sh" ]; then +- +- # If a LUKS device needs unlocking via systemd in the initrd, assume +- # it's for the root device. In that case, don't block on it if it's +- # after remote-fs-pre.target since the initqueue is ordered before it so +- # it will never actually show up (think Tang-pinned rootfs). +- cat > "$hookdir/initqueue/finished/devexists-${_name}.sh" << EOF +-if ! grep -q After=remote-fs-pre.target "$GENERATOR_DIR"/systemd-cryptsetup@*.service 2>/dev/null; then +- [ -e "$1" ] +-fi +-EOF +- { +- printf '[ -e "%s" ] || ' "$1" +- printf 'warn "\"%s\" does not exist"\n' "$1" +- } >> "$hookdir/emergency/80-${_name}.sh" +- fi +- +- _name=$(dev_unit_name "$1") + if ! [ -L "$GENERATOR_DIR"/initrd.target.wants/"${_name}".device ]; then + [ -d "$GENERATOR_DIR"/initrd.target.wants ] || mkdir -p "$GENERATOR_DIR"/initrd.target.wants + ln -s ../"${_name}".device "$GENERATOR_DIR"/initrd.target.wants/"${_name}".device diff --git a/dracut/key b/dracut/key new file mode 100644 index 0000000..fe7b9eb --- /dev/null +++ b/dracut/key @@ -0,0 +1 @@ +gpg --recv-key 1A845D0F6E0FD07D diff --git a/dracut/time b/dracut/time new file mode 100644 index 0000000..2f92d78 --- /dev/null +++ b/dracut/time @@ -0,0 +1,6 @@ + + +real 0m14.089s +user 0m11.927s +sys 0m1.632s + diff --git a/ethtool/PKGBUILD b/ethtool/PKGBUILD index f52cf94..473a078 100644 --- a/ethtool/PKGBUILD +++ b/ethtool/PKGBUILD @@ -6,7 +6,7 @@ #-----------------------------------------| DESCRIPTION |--------------------------------------- pkgname=ethtool -pkgver=6.4 +pkgver=6.5 pkgrel=01 epoch=1 pkgdesc="Utility for controlling network drivers and hardware" @@ -39,14 +39,13 @@ license=('GPL') validpgpkeys=(CE4A4D080F0D304F23B9EBDD972D5BF4DC613806 # John W. Linville D2CB120AB45957B721CD9596F4554567B91DE934) # Michal Kubecek -sha256sums=(5eaa083e8108e1dd3876b2c803a1942a2763942715b7f6eb916e189adbb44972 # ethtool-6.4.tar.xz - 8bdc25918fb5e7668411ed383f02b09f2d07ff7400429cb938e9b3cca94dfde3) # ethtool-6.4.tar.sign - -## a3ed426aee2a9bd387f812e410fdce22f227cfc56fd705e74802972c39f646b6 ethtool-1:6.4-01-x86_64.pkg.tar.lz - +sha256sums=(814171ea4b8026b081c0741dbbf32e6968311483ecf64711232faec2ac70a14c # ethtool-6.5.tar.xz + 55713c9414e87f0f878b0b47bcbf617bcbae114f16b5d08962790382725c2418) # ethtool-6.5.tar.sign # Note to packager: -ls -l *pkg.tar.lz -echo "you must rename this package to meet SF naming before you move to the repo" -mv $(ls -l $pkgname*pkg.tar.lz) $pkgname-$epoch_$pkgver-$pkgrel-$arch.pkg.tar.lz >pkg-mv.log +#ls -l *pkg.tar.lz +#echo "you must rename this package to meet SF naming before you move to the repo" +#mv $(ls -l $pkgname*pkg.tar.lz) $pkgname-$epoch_$pkgver-$pkgrel-$arch.pkg.tar.lz >pkg-mv.log + +## be5feb8c5b5ec108bce28c611fd71cc08a894c5bfea91e69c5f29bafcf0abc74 ethtool-1_6.5-01-x86_64.pkg.tar.lz diff --git a/ethtool/PKGBUILD-arch b/ethtool/PKGBUILD-arch index 2574593..7502dc4 100644 --- a/ethtool/PKGBUILD-arch +++ b/ethtool/PKGBUILD-arch @@ -3,7 +3,7 @@ # Contributor: Martin Kemp pkgname=ethtool -pkgver=6.4 +pkgver=6.5 pkgrel=1 epoch=1 pkgdesc="Utility for controlling network drivers and hardware" @@ -12,7 +12,7 @@ url="https://www.kernel.org/pub/software/network/ethtool/" license=('GPL') depends=('glibc' 'libmnl') source=(https://www.kernel.org/pub/software/network/$pkgname/$pkgname-$pkgver.tar.{xz,sign}) -sha256sums=('5eaa083e8108e1dd3876b2c803a1942a2763942715b7f6eb916e189adbb44972' +sha256sums=('814171ea4b8026b081c0741dbbf32e6968311483ecf64711232faec2ac70a14c' 'SKIP') validpgpkeys=(CE4A4D080F0D304F23B9EBDD972D5BF4DC613806 # John W. Linville D2CB120AB45957B721CD9596F4554567B91DE934) # Michal Kubecek diff --git a/ethtool/deps b/ethtool/deps index d99bfa2..41112a0 100644 --- a/ethtool/deps +++ b/ethtool/deps @@ -1,2 +1,3 @@ + diff --git a/nftables/PKGBUILD b/nftables/PKGBUILD index 54c4590..87791d2 100644 --- a/nftables/PKGBUILD +++ b/nftables/PKGBUILD @@ -7,8 +7,8 @@ pkgname=nftables epoch=1 -pkgver=1.0.8 -pkgrel=02 +pkgver=1.0.9 +pkgrel=01 pkgdesc='Netfilter tables userspace tools w/o systemd' url='https://netfilter.org/projects/nftables/' depends=('libmnl' 'libnftnl' 'gmp' 'readline' 'ncurses' 'jansson') @@ -16,12 +16,9 @@ optdepends=('python: Python bindings') makedepends=('asciidoc' 'python' 'python-setuptools' 'python-build' 'python-installer' 'python-wheel') backup=('etc/nftables.conf') -validpgpkeys=('37D964ACC04981C75500FB9BD55D978A8A1420E4') # Netfilter Core Team source=("https://netfilter.org/projects/nftables/files/nftables-$pkgver.tar.xz"{,.sig} - 'meta-stash-context-statement-length.patch' - 'nftables.conf') -# 'nftables.service') - + 'nftables.conf' + 'nftables.service') install=nftables.install prepare() { @@ -64,8 +61,8 @@ package() { popd # basic safe firewall config install -Dm644 nftables.conf "$pkgdir/etc/nftables.conf" -# # systemd -# install -Dm644 nftables.service "$pkgdir/usr/lib/systemd/system/nftables.service" + # systemd service file saved in docs for reference in making a runit or 66 service file + install -Dm644 nftables.service "$pkgdir/usr/share/doc/$pkgname/nftables.service" } #---- arch license gpg-key & sha256sums ---- @@ -74,16 +71,17 @@ arch=(x86_64) license=('GPL2') -sha256sums=(9373740de41a82dbc98818e0a46a073faeb8a8d0689fa4fa1a74399c32bf3d50 # nftables-1.0.8.tar.xz - eadbbad3eb70bc08a7a8c5598807f81b81860b571243f2e308dae01a97c656ae # nftables-1.0.8.tar.xz.sig - 3c428a2e5037ff5ea54be060c46a48bf659cd783c8ce5f5ee943fec6ddc61da6 # meta-stash-context-statement-length.patch - 2aff88019097d21dbfa4713f5b54c184751c86376e458b683f8d90f3abd232a8) # nftables.conf +validpgpkeys=('37D964ACC04981C75500FB9BD55D978A8A1420E4') # Netfilter Core Team -## ad2c0fbfa0ff9956a6a898cead950b8a3b3205dc3d350fbc06f01eae18c6adec nftables-1:1.0.8-02-x86_64.pkg.tar.lz +sha256sums=(a3c304cd9ba061239ee0474f9afb938a9bb99d89b960246f66f0c3a0a85e14cd # nftables-1.0.9.tar.xz + d07c88a9b5e8510c4af787caabb108b69dd53885939c135ef8cfe12bab79fe2f # nftables-1.0.9.tar.xz.sig + 2aff88019097d21dbfa4713f5b54c184751c86376e458b683f8d90f3abd232a8 # nftables.conf + deffeef36fe658867dd9203ec13dec85047a6d224ea63334dcf60db97e1809ea) # nftables.service + +## 57625d8b25798688d38b06e6142b190a2d9a918a8895addfb6970c53c606b70b nftables-1_1.0.9-01-x86_64.pkg.tar.lz # Note to packager: -ls -l *pkg.tar.lz -echo "you must rename this package to meet SF naming before you move to the repo" -mv $(ls -l $pkgname*pkg.tar.lz) $pkgname-$epoch_$pkgver-$pkgrel-$arch.pkg.tar.lz >pkg-mv.log - +#ls -l *pkg.tar.lz +#echo "you must rename this package to meet SF naming before you move to the repo" +#mv $(ls -l $pkgname*pkg.tar.lz) $pkgname-$epoch_$pkgver-$pkgrel-$arch.pkg.tar.lz >pkg-mv.log diff --git a/nftables/PKGBUILD-arch b/nftables/PKGBUILD-arch index 6d0d0c2..f5ed335 100644 --- a/nftables/PKGBUILD-arch +++ b/nftables/PKGBUILD-arch @@ -2,8 +2,8 @@ pkgname=nftables epoch=1 -pkgver=1.0.8 -pkgrel=2 +pkgver=1.0.9 +pkgrel=1 pkgdesc='Netfilter tables userspace tools' arch=('x86_64') url='https://netfilter.org/projects/nftables/' @@ -15,13 +15,11 @@ makedepends=('asciidoc' 'python' 'python-setuptools' 'python-build' backup=('etc/nftables.conf') validpgpkeys=('37D964ACC04981C75500FB9BD55D978A8A1420E4') # Netfilter Core Team source=("https://netfilter.org/projects/nftables/files/nftables-$pkgver.tar.xz"{,.sig} - 'meta-stash-context-statement-length.patch' 'nftables.conf' 'nftables.service') install=nftables.install -sha256sums=('9373740de41a82dbc98818e0a46a073faeb8a8d0689fa4fa1a74399c32bf3d50' +sha256sums=('a3c304cd9ba061239ee0474f9afb938a9bb99d89b960246f66f0c3a0a85e14cd' 'SKIP' - '3c428a2e5037ff5ea54be060c46a48bf659cd783c8ce5f5ee943fec6ddc61da6' '2aff88019097d21dbfa4713f5b54c184751c86376e458b683f8d90f3abd232a8' 'deffeef36fe658867dd9203ec13dec85047a6d224ea63334dcf60db97e1809ea') diff --git a/nftables/key b/nftables/key new file mode 100644 index 0000000..e73e166 --- /dev/null +++ b/nftables/key @@ -0,0 +1 @@ +gpg --recv-key D55D978A8A1420E4 diff --git a/opensmtpd/PKGBUILD b/opensmtpd/PKGBUILD index dcc99c8..7518109 100644 --- a/opensmtpd/PKGBUILD +++ b/opensmtpd/PKGBUILD @@ -1,4 +1,4 @@ -#!/usr/bin/bash +#!usr/bin/bash # JOBoRun : Jwm OpenBox Obarun RUNit # Maintainer : Joe Bo Run # PkgSource : url="https://gittea.disroot.org/joborun-pkg/jobextra/$pkgname" @@ -6,18 +6,20 @@ #-----------------------------------------| DESCRIPTION |--------------------------------------- pkgname=opensmtpd -pkgver=7.3.0p2 -pkgrel=01 +pkgver=7.4.0p0 +pkgrel=02 pkgdesc="Free implementation of the server-side SMTP protocol on libressl w/o systemd " url="https://www.opensmtpd.org/" depends=(libevent openssl pam libxcrypt zlib) -makedepends=(bison) +makedepends=(bison signify) optdepends=('opensmtpd-filter-rspamd: rspamd integration') provides=(smtp-server smtp-forwarder) conflicts=(smtp-server smtp-forwarder) backup=(etc/smtpd/smtpd.conf etc/smtpd/aliases) options=(emptydirs) source=("https://www.opensmtpd.org/archives/${pkgname}-${pkgver}.tar.gz" + ${pkgname}-${pkgver}.signify::"${url}/archives/${pkgname}-${pkgver}.sum.sig" + opensmtpd-20181026.pub $pkgname.sysusers $pkgname.install) @@ -26,6 +28,10 @@ source=("https://www.opensmtpd.org/archives/${pkgname}-${pkgver}.tar.gz" install=${pkgname}.install prepare() { + signify -Cp ${pkgname}-20181026.pub \ + -x ${pkgname}-${pkgver}.signify \ + ${pkgname}-${pkgver}.tar.gz + sed -ri 's,/etc/mail,/etc/smtpd,g' ${pkgname}-${pkgver}/usr.sbin/smtpd/smtpd.conf } @@ -37,7 +43,7 @@ build() { --sysconfdir=/etc/smtpd \ --sbindir=/usr/bin \ --libexecdir=/usr/lib/smtpd \ - --with-bundled-libtls \ + --without-libbsd \ --with-path-mbox=/var/spool/mail \ --with-path-empty=/var/empty \ --with-path-socket=/run \ @@ -75,8 +81,11 @@ arch=(x86_64) license=(custom) -sha256sums=(fccdfbc5b98d150012bf9ccdef51752c18a862ed10888b56289826b83a2b5a4e # opensmtpd-7.3.0p2.tar.gz +sha256sums=(c181ccc3434a11e583619e00028520d457fe062e34dc03beea358078220ce374 # opensmtpd-7.4.0p0.tar.gz + bbdccb72eac8c713c1d24d6d48f3cfd8eb8ff7bf0f36e8b72bf389405c11dab7 # opensmtpd-7.4.0p0.signify + b74dca53567cd5070905a0a1acd77041805b6c0c4a0e1285830ea13654e1dcd5 # opensmtpd-20181026.pub 699c5f5596d9db725d4d302c24f10dbc6f31749836be690b3f056f817de82d83 # opensmtpd.sysusers d49f106bd55701e75ca820db262e427dcdb50837b0a06a7043e051dc2608b676) # opensmtpd.install -## 15bf6b8755fd22916841bce824653171bcbecff9308a5192ab6cc1c0b93a7434 opensmtpd-7.3.0p2-01-x86_64.pkg.tar.lz +## 506e91ce22bb047d15266db6221c66a23ed20a5168cd69ac47959789564fdfdf opensmtpd-7.4.0p0-02-x86_64.pkg.tar.lz + diff --git a/opensmtpd/PKGBUILD-arch b/opensmtpd/PKGBUILD-arch index 706c8ea..46c089d 100644 --- a/opensmtpd/PKGBUILD-arch +++ b/opensmtpd/PKGBUILD-arch @@ -5,29 +5,38 @@ # Contributor: parchd pkgname=opensmtpd -pkgver=7.3.0p2 -pkgrel=1 +pkgver=7.4.0p0 +pkgrel=2 pkgdesc="Free implementation of the server-side SMTP protocol" arch=(x86_64) url="https://www.opensmtpd.org/" license=(custom) depends=(libevent openssl pam libxcrypt zlib) optdepends=('opensmtpd-filter-rspamd: rspamd integration') +makedepends=(signify) provides=(smtp-server smtp-forwarder) conflicts=(smtp-server smtp-forwarder) backup=(etc/smtpd/smtpd.conf etc/smtpd/aliases) options=(emptydirs) source=("https://www.opensmtpd.org/archives/${pkgname}-${pkgver}.tar.gz" + ${pkgname}-${pkgver}.signify::"${url}/archives/${pkgname}-${pkgver}.sum.sig" + opensmtpd-20181026.pub opensmtpd.sysusers smtpd.service smtpd.socket) -sha256sums=('fccdfbc5b98d150012bf9ccdef51752c18a862ed10888b56289826b83a2b5a4e' +sha256sums=('c181ccc3434a11e583619e00028520d457fe062e34dc03beea358078220ce374' + 'bbdccb72eac8c713c1d24d6d48f3cfd8eb8ff7bf0f36e8b72bf389405c11dab7' + 'b74dca53567cd5070905a0a1acd77041805b6c0c4a0e1285830ea13654e1dcd5' 'b38b64f1457b7227d55585edc711cce525e089516d16b093e6c44387380e6b13' 'abf5baeb2a87c60d668ad18ea41cc08cab7a4f76339dd6df05de15cdaadaf922' '32d46de5562d01de445d04c93bcc9f94bf103539b676e449c32e3603a3866cf8') install=${pkgname}.install prepare() { + signify -Cp ${pkgname}-20181026.pub \ + -x ${pkgname}-${pkgver}.signify \ + ${pkgname}-${pkgver}.tar.gz + sed -ri 's,/etc/mail,/etc/smtpd,g' ${pkgname}-${pkgver}/usr.sbin/smtpd/smtpd.conf } @@ -39,7 +48,7 @@ build() { --sysconfdir=/etc/smtpd \ --sbindir=/usr/bin \ --libexecdir=/usr/lib/smtpd \ - --with-bundled-libtls \ + --without-libbsd \ --with-path-mbox=/var/spool/mail \ --with-path-empty=/var/empty \ --with-path-socket=/run \ diff --git a/opensmtpd/clean b/opensmtpd/clean index f8aeb11..e956752 100644 --- a/opensmtpd/clean +++ b/opensmtpd/clean @@ -1 +1 @@ -rm -rf {src,pkg,opensmtpd*tar.gz} +rm -rf {src,pkg,opensmtpd*tar.gz,opensmtp*.signify} diff --git a/opensmtpd/deps b/opensmtpd/deps index f53af8e..e2a8cb2 100644 --- a/opensmtpd/deps +++ b/opensmtpd/deps @@ -1,3 +1,4 @@ bison +signify diff --git a/opensmtpd/opensmtpd-20181026.pub b/opensmtpd/opensmtpd-20181026.pub new file mode 100644 index 0000000..028f02f --- /dev/null +++ b/opensmtpd/opensmtpd-20181026.pub @@ -0,0 +1,2 @@ +untrusted comment: signify public key +RWSy+pcnS2OE5wgr6gFOqONFrrvnmmVnWuwsUVGre0m7+2oRGvEZD1Hl diff --git a/signify/PKGBUILD b/signify/PKGBUILD new file mode 100644 index 0000000..0e9402f --- /dev/null +++ b/signify/PKGBUILD @@ -0,0 +1,62 @@ +#!/usr/bin/bash +# JOBoRun : Jwm OpenBox Obarun RUNit +# Maintainer : Joe Bo Run +# PkgSource : url="https://gittea.disroot.org/joborun-pkg/jobextra/$pkgname" +# Website : https://pozol.eu +#-----------------------------------------| DESCRIPTION |--------------------------------------- + +pkgname=signify +pkgver=31 +pkgrel=03 +pkgdesc='OpenBSD tool to cryptographically sign and verify files' +url='https://github.com/aperezdc/signify' +depends=('glibc' 'libbsd>=0.8') +source=(${url}/releases/download/v${pkgver}/${pkgname}-${pkgver}.tar.xz{,.asc} + ${pkgname}-LICENSE-${pkgver}::https://raw.githubusercontent.com/aperezdc/signify/v${pkgver}/COPYING) + +prepare() { + cd ${pkgname}-${pkgver} + # using O_NOFOLLOW doesn't lock anything down here, swapping files + # without symlinks is still equally open to TOCTOU and it doesn't even + # matter here. let's prefer supporting symlinked target files. + sed -E 's/\| ?O_NOFOLLOW//g' -i ./*.c +} + +build () { + cd ${pkgname}-${pkgver} + make PREFIX=/usr \ + LTO=1 \ + EXTRA_CFLAGS="${CFLAGS} ${CPPFLAGS}" \ + EXTRA_LDFLAGS="${LDFLAGS}" \ + GIT_TAG='' +} + +package () { + cd ${pkgname}-${pkgver} + make PREFIX=/usr \ + DESTDIR="${pkgdir}" \ + GIT_TAG='' install + install -Dm644 README.md CHANGELOG.md -t "${pkgdir}/usr/share/doc/${pkgname}" + install -Dm644 ../${pkgname}-LICENSE-${pkgver} "${pkgdir}/usr/share/licenses/${pkgname}/LICENSE" +} + + +#---- arch license gpg-key & sha256sums ---- + +arch=(x86_64) + +license=('BSD') + +validpgpkeys=(5AA3BC334FD7E3369E7C77B291C559DBE4C9123B) # Adrián Pérez de Castro + +sha512sums=('f39597ea278a7eb10b786909752fde59e16405f0bc76c9906f8014e9e7f6801b4733479eec765fb960b6062359954caf54a3460ff67258a9cff93fa978951962' + 'SKIP' + '5de1345ef929058040975f1106318ac9443fc107d19a12bfbc919a152ddd4dde11c76201722bc5847bad579e5dc4ba467f0947b6f0fce5cc3eccc68d5f4e9dfe') + +## +sha256sums=(1155fd9eeed4a8aa20476b2333d251953ec5d52338d943a770db5b78dd8d2b74 # signify-31.tar.xz + 4eb39324dfaf9888c54193c17ae579eb288d13ce81fa81271b201498a192f086 # signify-31.tar.xz.asc + 39a0576350c89b404a0c152e626a3925d40aba505dc376d59d6eed12b2f48110) # signify-LICENSE-31 + +## bdfe27cdd16fc746736e05c313abb1031da6d531da7fd77e852c81b72a7f0db9 signify-31-03-x86_64.pkg.tar.lz + diff --git a/signify/PKGBUILD-arch b/signify/PKGBUILD-arch new file mode 100644 index 0000000..d9c6137 --- /dev/null +++ b/signify/PKGBUILD-arch @@ -0,0 +1,48 @@ +# Maintainer: Levente Polyak +# Maintainer: T.J. Townsend +# Contributor: Adrian Perez de Castro + +pkgname=signify +pkgver=31 +pkgrel=3 +pkgdesc='OpenBSD tool to cryptographically sign and verify files' +url='https://github.com/aperezdc/signify' +arch=('x86_64') +license=('BSD') +depends=('glibc' 'libbsd>=0.8') +source=(${url}/releases/download/v${pkgver}/${pkgname}-${pkgver}.tar.xz{,.asc} + ${pkgname}-LICENSE-${pkgver}::https://raw.githubusercontent.com/aperezdc/signify/v${pkgver}/COPYING) +sha512sums=('f39597ea278a7eb10b786909752fde59e16405f0bc76c9906f8014e9e7f6801b4733479eec765fb960b6062359954caf54a3460ff67258a9cff93fa978951962' + 'SKIP' + '5de1345ef929058040975f1106318ac9443fc107d19a12bfbc919a152ddd4dde11c76201722bc5847bad579e5dc4ba467f0947b6f0fce5cc3eccc68d5f4e9dfe') +validpgpkeys=( + '5AA3BC334FD7E3369E7C77B291C559DBE4C9123B' # Adrián Pérez de Castro +) + +prepare() { + cd ${pkgname}-${pkgver} + # using O_NOFOLLOW doesn't lock anything down here, swapping files + # without symlinks is still equally open to TOCTOU and it doesn't even + # matter here. let's prefer supporting symlinked target files. + sed -E 's/\| ?O_NOFOLLOW//g' -i ./*.c +} + +build () { + cd ${pkgname}-${pkgver} + make PREFIX=/usr \ + LTO=1 \ + EXTRA_CFLAGS="${CFLAGS} ${CPPFLAGS}" \ + EXTRA_LDFLAGS="${LDFLAGS}" \ + GIT_TAG='' +} + +package () { + cd ${pkgname}-${pkgver} + make PREFIX=/usr \ + DESTDIR="${pkgdir}" \ + GIT_TAG='' install + install -Dm644 README.md CHANGELOG.md -t "${pkgdir}/usr/share/doc/${pkgname}" + install -Dm644 ../${pkgname}-LICENSE-${pkgver} "${pkgdir}/usr/share/licenses/${pkgname}/LICENSE" +} + +# vim: ts=2 sw=2 et: diff --git a/signify/clean b/signify/clean new file mode 100644 index 0000000..1d109b3 --- /dev/null +++ b/signify/clean @@ -0,0 +1 @@ +rm -rf {src,pkg,signify-*.tar.xz*} diff --git a/signify/deps b/signify/deps new file mode 100644 index 0000000..348e022 --- /dev/null +++ b/signify/deps @@ -0,0 +1,3 @@ +libbsd + + diff --git a/signify/key b/signify/key new file mode 100644 index 0000000..9551365 --- /dev/null +++ b/signify/key @@ -0,0 +1 @@ +gpg --recv-key 91C559DBE4C9123B diff --git a/signify/signify-LICENSE-31 b/signify/signify-LICENSE-31 new file mode 100644 index 0000000..d2c4af9 --- /dev/null +++ b/signify/signify-LICENSE-31 @@ -0,0 +1,16 @@ +Copyright (c) 2013 Ted Unangst +Copyright (c) 2016 Marc Espie +Copyright (c) 2019 Adrian Perez de Castro +Copyright (c) 2019 Scott Bennett and other contributors + +Permission to use, copy, modify, and distribute this software for any +purpose with or without fee is hereby granted, provided that the above +copyright notice and this permission notice appear in all copies. + +THE SOFTWARE IS PROVIDED "AS IS" AND THE AUTHOR DISCLAIMS ALL WARRANTIES +WITH REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF +MERCHANTABILITY AND FITNESS. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR +ANY SPECIAL, DIRECT, INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES +WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS, WHETHER IN AN +ACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF +OR IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE. diff --git a/signify/time b/signify/time new file mode 100644 index 0000000..a717b54 --- /dev/null +++ b/signify/time @@ -0,0 +1,6 @@ + + +real 0m4.301s +user 0m3.456s +sys 0m0.514s +