[gentoo-dev] [PATCH] linux-mod.eclass: Support module compression

2022-06-09 Thread Mike Pagano
The Linux kernel supports the compression of modules utilizing GZIP, XZ and ZSTD. Add code into linux-mod.eclass to support this for out of tree modules utilizing the compression binary specified in the kernel config. Note that if the binary which provides the compression is not present on the

[gentoo-dev] [PATCH] python-r1.eclass: Warn about direct foreach_impl calls in d-r1

2022-06-09 Thread Michał Górny
Warn if python_foreach_impl is called directly from within a phase function that is already covered by a distutils-r1 sub-phase. Signed-off-by: Michał Górny --- eclass/distutils-r1.eclass | 1 + eclass/python-r1.eclass| 18 ++ 2 files changed, 19 insertions(+) diff --git

[gentoo-dev] [PATCH] distutils-r1.eclass: Add assertions for bindir correctness

2022-06-09 Thread Michał Górny
The eclass code in distutils-r1_python_install makes some assumptions specific to _distutils-r1_post_python_compile being called, and scriptdir not being modified since. Make them more explicit by: 1) explicitly removing the files that we expect to have been created, 2) verifying that both the

Re: [gentoo-dev] About EGO_SUM

2022-06-09 Thread John Helmert III
On Thu, Jun 09, 2022 at 07:49:04PM +0200, Sebastian Pipping wrote: > On 08.06.22 22:42, Robin H. Johnson wrote: > > EGO_SUM vs dependency tarballs: > > [..] > > - EGO_SUM is verifiable/reproducible from Upstream Go systems > > Let's be explicit, there is a _security_ threat here: as a user of an

Re: [gentoo-dev] About EGO_SUM

2022-06-09 Thread Sebastian Pipping
On 08.06.22 22:42, Robin H. Johnson wrote: EGO_SUM vs dependency tarballs: [..] - EGO_SUM is verifiable/reproducible from Upstream Go systems Let's be explicit, there is a _security_ threat here: as a user of an ebuild, dependency tarballs now take effort in manual review just to confirm that

[gentoo-dev] [PATCH] java-vm-2.eclass: add BDEPEND="app-arch/unzip"

2022-06-09 Thread Florian Schmaus
Closes: https://bugs.gentoo.org/850415 Reported-by: Joonas Niilola Signed-off-by: Florian Schmaus --- eclass/java-vm-2.eclass | 5 + 1 file changed, 5 insertions(+) diff --git a/eclass/java-vm-2.eclass b/eclass/java-vm-2.eclass index 7c63e63fad76..c0aea3e9ea4a 100644 ---

[gentoo-dev] Re: About EGO_SUM

2022-06-09 Thread Madhu
* "Robin H. Johnson" : Wrote on Wed, 8 Jun 2022 20:42:48 +: > EGO_SUM vs dependency tarballs: > - bloats ebuilds > - bloats Manifests > - bloats metadata/md5-cache/ (SRC_URI etc) > - doesn't bloat mirrors with gentoo-unique distfiles > - EGO_SUM is verifiable/reproducible from Upstream Go