Jan Alexander Steffens (heftig) pushed to branch main at Arch Linux / Packaging
/ Packages / anubis
Commits:
19f224f2 by Jan Alexander Steffens (heftig) at 2025-05-01T20:56:58+02:00
1.17.1-2: Verify signature, improve reproducibility
- - - - -
4 changed files:
- .SRCINFO
- + 0001-fix-web-Avoid-timestamping-main.mjs.gz.patch
- PKGBUILD
- + keys/pgp/833F64161167B501058C394756375DA2DF02ABFF.asc
Changes:
=====================================
.SRCINFO
=====================================
@@ -1,7 +1,7 @@
pkgbase = anubis
pkgdesc = Reverse proxy to protect against scraper bots
pkgver = 1.17.1
- pkgrel = 1
+ pkgrel = 2
url = https://anubis.techaro.lol/
arch = x86_64
license = MIT
@@ -14,7 +14,10 @@ pkgbase = anubis
makedepends = zstd
depends = glibc
backup = etc/anubis/default.env
- source = git+https://github.com/TecharoHQ/anubis#tag=v1.17.1
+ source = git+https://github.com/TecharoHQ/anubis?signed#tag=v1.17.1
+ source = 0001-fix-web-Avoid-timestamping-main.mjs.gz.patch
+ validpgpkeys = 833F64161167B501058C394756375DA2DF02ABFF
b2sums =
723989641b4ab37588e052c6147ce16836211a8a1a170eb89f36504c63bac2ea061ab275f83c75aeef4b1e0949bb5ee35160c7a46f85b0fc957791bbc9f7514f
+ b2sums =
00f0e216eb328d9305932a5a96c1542861a59b48fd95e02d1b0f7568f8c5afbdf9f6c44c89c60a83986db47028f00474fccccf2dc366b4c5f5e941804ee89103
pkgname = anubis
=====================================
0001-fix-web-Avoid-timestamping-main.mjs.gz.patch
=====================================
@@ -0,0 +1,23 @@
+From 0000000000000000000000000000000000000000 Mon Sep 17 00:00:00 2001
+From: "Jan Alexander Steffens (heftig)" <hef...@archlinux.org>
+Date: Thu, 1 May 2025 20:53:52 +0200
+Subject: [PATCH] fix(web): Avoid timestamping main.mjs.gz
+
+Improves reproducibility.
+---
+ web/build.sh | 2 +-
+ 1 file changed, 1 insertion(+), 1 deletion(-)
+
+diff --git a/web/build.sh b/web/build.sh
+index dfe62662afe4..8b5f65286cda 100755
+--- a/web/build.sh
++++ b/web/build.sh
+@@ -33,7 +33,7 @@ for the JavaScript code in this page.
+ */'
+
+ esbuild js/main.mjs --sourcemap --bundle --minify
--outfile=static/js/main.mjs "--banner:js=${LICENSE}"
+-gzip -f -k static/js/main.mjs
++gzip -f -k -n static/js/main.mjs
+ zstd -f -k --ultra -22 static/js/main.mjs
+ brotli -fZk static/js/main.mjs
+
=====================================
PKGBUILD
=====================================
@@ -2,7 +2,7 @@
pkgname=anubis
pkgver=1.17.1
-pkgrel=1
+pkgrel=2
pkgdesc="Reverse proxy to protect against scraper bots"
url="https://anubis.techaro.lol/";
arch=(x86_64)
@@ -18,11 +18,22 @@ makedepends=(
zstd
)
backup=(etc/anubis/default.env)
-source=("git+https://github.com/TecharoHQ/anubis#tag=v${pkgver/[a-z]/-&}";)
-b2sums=('723989641b4ab37588e052c6147ce16836211a8a1a170eb89f36504c63bac2ea061ab275f83c75aeef4b1e0949bb5ee35160c7a46f85b0fc957791bbc9f7514f')
+source=(
+ "git+https://github.com/TecharoHQ/anubis?signed#tag=v${pkgver/[a-z]/-&}";
+ 0001-fix-web-Avoid-timestamping-main.mjs.gz.patch
+)
+b2sums=('723989641b4ab37588e052c6147ce16836211a8a1a170eb89f36504c63bac2ea061ab275f83c75aeef4b1e0949bb5ee35160c7a46f85b0fc957791bbc9f7514f'
+
'00f0e216eb328d9305932a5a96c1542861a59b48fd95e02d1b0f7568f8c5afbdf9f6c44c89c60a83986db47028f00474fccccf2dc366b4c5f5e941804ee89103')
+validpgpkeys=(
+ 833F64161167B501058C394756375DA2DF02ABFF # Techaro Packages Signatures
<gpg+packa...@techaro.lol>
+)
prepare() {
cd anubis
+
+ # Reproducibility fix
+ git apply -3 ../0001-fix-web-Avoid-timestamping-main.mjs.gz.patch
+
make deps
}
=====================================
keys/pgp/833F64161167B501058C394756375DA2DF02ABFF.asc
=====================================
@@ -0,0 +1,14 @@
+-----BEGIN PGP PUBLIC KEY BLOCK-----
+
+mDMEaAU/hRYJKwYBBAHaRw8BAQdANg5d753IR7Q3NxfE+vVgpBx9w66HSzx74zEz
+2djVqZm0NlRlY2hhcm8gUGFja2FnZXMgU2lnbmF0dXJlcyA8Z3BnK3BhY2thZ2Vz
+QHRlY2hhcm8ubG9sPoiZBBMWCgBBFiEEgz9kFhFntQEFjDlHVjddot8Cq/8FAmgF
+P4UCGwMFCRLMAwAFCwkIBwICIgIGFQoJCAsCBBYCAwECHgcCF4AACgkQVjddot8C
+q/8PYwEAk1B1r8cBZi54fTOpMnkKUJnbk9wnmNLdUkRADlPRCcIBAN3Zgsjb/SXw
+nWINVPKvodwUVanDwl5uZuXtROv1mQ8GuDgEaAU/hRIKKwYBBAGXVQEFAQEHQLqY
+3RXQiv/4d7y+eGs+YE4BymAguYG44jRtHHwFERZEAwEIB4h+BBgWCgAmFiEEgz9k
+FhFntQEFjDlHVjddot8Cq/8FAmgFP4UCGwwFCRLMAwAACgkQVjddot8Cq/8WXgEA
+lMjj013kuKsSCrczDxCSH0boW6xSTfyjnC2SQ4VDj78A/i6JrmkMq0wUSevgxlGw
+ZIoXIS4aVdSnfY9LMcnklKcL
+=zIdk
+-----END PGP PUBLIC KEY BLOCK-----
View it on GitLab:
https://gitlab.archlinux.org/archlinux/packaging/packages/anubis/-/commit/19f224f26f24d64468bc1b6df4b46fbadf9f6c64
--
View it on GitLab:
https://gitlab.archlinux.org/archlinux/packaging/packages/anubis/-/commit/19f224f26f24d64468bc1b6df4b46fbadf9f6c64
You're receiving this email because of your account on gitlab.archlinux.org.
