2025. 01. 29. 6:36 keltezéssel, Alexander Kanavin írta:
On Tue, 28 Jan 2025 at 22:52, Randy MacLeod <[email protected]> wrote:
A patch to enable the signing using a PACKAGECONFIG for rpm would
likely be accepted. Off by default of course and a test would be ideal.
We already have this in rpm recipe:
# has replaced openpgp support and is written in rust:
https://fedoraproject.org/wiki/Changes/RpmSequoia
PACKAGECONFIG[sequoia] = "-DWITH_SEQUOIA=ON,-DWITH_SEQUOIA=OFF,rpm-sequoia"
I also have a half-baked sequoia recipe:
https://git.yoctoproject.org/poky-contrib/tree/meta/recipes-devtools/rpm/rpm-sequoia_1.5.0.bb?h=akanavin/package-version-updates-later
FWIW, I have created an rpm-sequoia 1.6.0 recipe that builds now.
1.7.0 has some dependencies that need rust 1.83 but Yocto master
has 1.81 at the moment.
Some ideas were taken from Fedora 41 and the dependencies
do not include clang, only openssl. The librpm_sequoia.so.1 library
is only about 2.5MB large, so rpm may re-enable signing either
unconditionally, or automatically / conditionally based on
PACKAGE_CLASSES.
I had to slightly modify cargo.bbclass, though, because "cargo build"
complained about the --frozen flag because it wanted to make some
changes to Cargo.lock. It also recommended using --offline instead,
which also avoids looking for the network. So I created a conditional
in cargo.bbclass for this, maybe other recipes need it, too, that
previously didn't build.
I will post the patchset after testing that I can actually build signed rpms.
And there's a currently disabled selftest:
https://git.yoctoproject.org/poky/tree/meta/lib/oeqa/selftest/cases/signing.py#n62
So someone needs to take all these, add meta-clang, and make it all work.
Alex
-=-=-=-=-=-=-=-=-=-=-=-
Links: You receive all messages sent to this group.
View/Reply Online (#210346):
https://lists.openembedded.org/g/openembedded-core/message/210346
Mute This Topic: https://lists.openembedded.org/mt/110856095/21656
Group Owner: [email protected]
Unsubscribe: https://lists.openembedded.org/g/openembedded-core/unsub
[[email protected]]
-=-=-=-=-=-=-=-=-=-=-=-
