[gentoo-dev] Fwd: New eclass suggestion: docs.eclass

y. Please let me know if you find any issues, or potential improvements. Best Regards, Andrew See Also: https://github.com/gentoo/gentoo/pull/15302 # Copyright 1999-2020 Gentoo Authors # Distributed under the terms of the GNU General Public License v2 # @ECLASS: docs.eclass # @MAINTAINER: # Andr

Re: [gentoo-dev] Fwd: New eclass suggestion: docs.eclass

On 28/04/2020 07:41, Joonas Niilola wrote: On 4/27/20 7:10 PM, Andrew Ammerlaan wrote: Hi all, Hey, could you please plaintext your whole patch in this thread, so it can be viewed and commented by replying? See how lanodan did. Or check: https://archives.gentoo.org/gentoo-dev/message

[gentoo-dev] [PATCH 0/1]: docs.eclass: make compatible with python-single-r1

, Andrew From 7b3a170cfc85120f512bd8da5201ed1f59beeabe Mon Sep 17 00:00:00 2001 From: Andrew Ammerlaan Date: Sat, 16 Jan 2021 14:28:53 +0100 Subject: [PATCH] eclass/docs.eclass: make compatible with python-single-r1 python-single-r1 does not have the pyhton_gen_any-dep function, use

[gentoo-dev] [PATCH 1/1]: distutils-r1.eclass: make distutils_enable_sphinx compatible with DISTUTILS_SINGLE_IMPL

, Andrew From 9645afdcd4efa7702b538e70bcf2fc4fec93c245 Mon Sep 17 00:00:00 2001 From: Andrew Ammerlaan Date: Sat, 16 Jan 2021 14:27:00 +0100 Subject: [PATCH] eclass/distutils-r1: fix distutils_enable_sphinx with DISTUTILS_SINGLE_IMPL python-single-r1 does not have the python_gen_any_dep function

Re: [gentoo-dev] [PATCH 1/1 v2]: distutils-r1.eclass: make distutils_enable_sphinx compatible with DISTUTILS_SINGLE_IMPL

, Andrew On 16/01/2021 18:19, Michał Górny wrote: On Sat, 2021-01-16 at 14:49 +0100, Andrew Ammerlaan wrote: See my previous email for the rational behind these changes. This closes https://bugs.gentoo.org/704520 and the PR is here: https://github.com/gentoo/gentoo/pull/19078 This eclass

Re: [gentoo-dev] [PATCH 0/1 v2]: docs.eclass: make compatible with python-single-r1

version 2: now prepending the DOCS_BUILDER before calling python_gen_*_dep functions as suggested by @mgorny. (And this time the email should be plaintext as requested by David) Best regards, Andrew On 16/01/2021 14:49, Andrew Ammerlaan wrote: python-single-r1 does not have

[gentoo-dev] Last-rites: dev-python/python-{language,jsonrpc}-server

# Andrew Ammerlaan (2021-06-14) # The original Python Language Server by Palantir is no longer actively # developed [1]. Development on a language server for Python is # continued by the Spyder IDE community under a new name and in a # new package. To continue using pyls, please switch

Re: [gentoo-dev] [RFC] Should we switch IRC client defaults off Freenode?

On 16/06/2021 11:45, Michał Górny wrote: On Wed, 2021-06-16 at 12:43 +0300, Joonas Niilola wrote: On 16.6.2021 12.13, Michał Górny wrote: Hi, everyone. We've moved our official support channels from Freenode to Libera.chat. All that's happened afterwards pretty much proves that this was the

[gentoo-dev] [PATCH 1/1] docs.eclass: EAPI 8 support

Add support for EAPI 8, and also update the PYTHON_COMPAT variable in the example. diff --git a/eclass/docs.eclass b/eclass/docs.eclass index 7ee7a11ca5e..3f9191ddbd5 100644 --- a/eclass/docs.eclass +++ b/eclass/docs.eclass @@ -7,7 +7,7 @@ # @AUTHOR: # Author: Andrew Ammerlaan # Based

[gentoo-dev] last-rite: app-eselect/eselect-QtPy

# Andrew Ammmerlaan (2021-05-20) # dev-python/QtPy-1.9.0-r4 now uses USE flags to control if it uses # PySide2 or PyQt5. With the removal of -r3, this eselect module does # not do anything and will only lead to confusion and possibly breakage. # See also: https://bugs.gentoo.org/790764 # Removal

[gentoo-dev] [PATCH 1/1] docs.eclass: invert (B)DEPEND if condition

As suggested by Soap (Thank You!) Makes this part more future proof, and removes the "," that shouldn't have been there. diff --git a/eclass/docs.eclass b/eclass/docs.eclass index f49c6aeab9d..684ab26919c 100644 --- a/eclass/docs.eclass +++ b/eclass/docs.eclass @@ -378,7 +378,7 @@ case

Re: [gentoo-dev] Continuous integration on GURU

On 22/04/2021 14:39, Agostino Sarubbo wrote: On giovedì 22 aprile 2021 12:02:20 CEST Michał Górny wrote: Well, I suppose scanning the dev branch would be preferable over the master branch. In reality, they are usually only a few hours apart but it might be useful to know of new breakage in dev

Re: [gentoo-dev] New project: binhost

On 10/02/2021 18:57, Andreas K. Hüttel wrote: Hi all, I'm announcing a new project here - "binhost" "The Gentoo Binhost project aims to provide readily installable, precompiled packages for a subset of configurations, via central binary package hosting. Currently we are still in the conceptual

Re: [gentoo-dev] [PATCH 2/3] dev-python/tikzplotlib: Use distutils-r1 pyproject.toml support

On 06/02/2021 12:54, Michał Górny wrote: Signed-off-by: Michał Górny --- dev-python/tikzplotlib/tikzplotlib-0.9.7.ebuild | 16 +--- 1 file changed, 1 insertion(+), 15 deletions(-) diff --git a/dev-python/tikzplotlib/tikzplotlib-0.9.7.ebuild

Re: [gentoo-dev] Experimental binary package hosting

On 22/09/2021 09:58, Torokhov Sergey wrote: I have repos configs placed into /etc/portage/repos.conf with "rsync-type = git" fo all repos so I created binhost.cond file here instead of /etc/portage/ as mentioned in blog post. binhost.conf should be in binrepos.conf instead of repos.conf. See

[gentoo-dev] Last rites: games-action/multimc

Andrew Ammerlaan (2021-12-10) As of MultiMC version 0.6.14 source built versions of MultiMC are no longer usable for anything but development. The sources have been de-branded and secret API keys and other required files are not included with the sources. Please use the official upstream

Re: [gentoo-dev] My resignation from Gentoo

Hi Marco, Thank you for all your work in Gentoo! I hope we'll maybe see you around again someday, Andrew On 18/07/2021 06:37, Marco Scardovi wrote: Hi everyone, while I'm writing these words I'm full of sadness because you all are an awesome family before being an incredible team. It's

[gentoo-dev] Last-rites: dev-python/spyder-{4,5.0}: ancient versions and dead plugins cleanup

# Andrew Ammerlaan (2022-01-08) # Ancient versions of spyder preventing clean up of things down the tree. # Sadly, this means we are also going to have to say goodbye to some plugins # that never got ported to the newer plugin system. # Removal in 15 days

[gentoo-dev] last-rites: dev-python/abydos

# Andrew Ammerlaan (2023-09-14) # No longer a test dependency of dev-python/textdistance, now fails tests # with the latest numpy. Upstream inactive and we already need patching for # python 3.10 compatibility. No other reverse dependencies. # Bug: https://bugs.gentoo.org/887845 # Removal

Re: [gentoo-dev] last rites: sys-fs/eudev

On 12 September 2023 21:47:31 CEST, Eddie Chapman wrote: >Andreas K. Huettel wrote: >> The eudev experiment has failed. >> * It was false labeling from the start.[*] >> * It's barely alive and not keeping up with udev upstream. > >Why does it have to? It is advertised as a fork after all. > >>

Re: [gentoo-dev] last rites: sys-fs/eudev

On 12/09/2023 23:23, Eddie Chapman wrote: Andrew Ammerlaan wrote: On 12 September 2023 21:47:31 CEST, Eddie Chapman wrote: Andreas K. Huettel wrote: * You don't gain anything from using it instead of udev. (Nobody does.) Is there only 1 tool for the job? Why do we have both

[gentoo-dev] [PATCH 1/2] kernel-build.eclass: fix kernel image signing on arm64 and, riscv

From ae095ca61e87f647923d437fe0e8cbe1d18bd0eb Mon Sep 17 00:00:00 2001 From: Andrew Ammerlaan Date: Wed, 30 Aug 2023 18:38:43 +0200 Subject: [PATCH] kernel-build.eclass: fix kernel image signing on arm64 and riscv Arm64/riscv have no compressed kernel support. With CONFIG_EFI_ZBOOT enabled

Re: [gentoo-dev] [PATCH 2/2] dist-kernel-utils.eclass: support CONFIG_EFI_ZBOOT with, USE=secureboot

From 59743aeaef2a1c163ba2150208995055964091d4 Mon Sep 17 00:00:00 2001 From: Andrew Ammerlaan Date: Thu, 31 Aug 2023 11:03:03 +0200 Subject: [PATCH] dist-kernel-utils.eclass: support CONFIG_EFI_ZBOOT with USE=secureboot This config options changes the name of the final image Closes: https

[gentoo-dev] [PATCH] kernel-build.eclass: drop obsolete if use secureboot statement

From 9f9da2272d413bd06cd7cfce65fb15bab848a6b7 Mon Sep 17 00:00:00 2001 From: Andrew Ammerlaan Date: Fri, 15 Sep 2023 07:53:56 +0200 Subject: [PATCH] kernel-build.eclass: drop obsolete if use secureboot statement CONFIG_EFI_ZBOOT (among other things) is now set by secureboot.config

[gentoo-dev] Last rites: media-sound/spotify-tray

# Andrew Ammerlaan (2023-09-23) # >=media-sound/spotify-1.2.20 now has its own tray icon. # Therefore the use case for this package is gone. # Removal on 2023-10-23 media-sound/spotify-tray

Re: [gentoo-dev] Last-rite: app-misc/neofetch

On 20/10/2023 14:39, Joonas Niilola wrote: On 20.10.2023 15.30, Pascal Jaeger wrote: This is only two years without a release. We have packages way way older than that. I know fetch scripts have a reputation, but this thing is kind of a staple in the community and it is still widely used. I

[gentoo-dev] [PATCH 1/1]: kernel-build.eclass: error out early if signing key not readable

Hi all, Currently if the MODULES_SIGN_KEY exists but is not readable the kernel will fail to compile. The kernel build system does not produce a clear error when this happens so it is not immediately obvious what is wrong. This small patch adjusts our src_prepare logic to check if the signing

[gentoo-dev] [PATCH 1/1] secureboot.eclass: error out early if signing key/cert not readable

Hi all, This patch is similar to the one I sent earlier for kernel-build.eclass. Instead of checking if the signing key/cert exists we now also check if we can actually read it. Also removed an extra "#" that prevents the documentation from rendering as intended. Best regards, Andrew diff

[gentoo-dev] [PATCH 1/1] docs.eclass: fix sphinx/mkdocs docs building in pep517 mode

Hi all, This patch copies the sphinx-build logic from python-utils-r1.eclass to use 'python -m mkdocs' instead of plain 'mkdocs' whenever possible. This fixes building mkdocs themes in pep517 mode where the very themes we are installing would otherwise be unavailable for building the

[gentoo-dev] [PATCH 1/1] kernel-build.eclass: Fix separate private and public module

Hi all, This is a small patch from [1] that allows signing kernel modules using a separate key and certificate PEM file. See the commit message below for a more in-depth explanation. Best regards, Andrew [1] https://github.com/gentoo/gentoo/pull/32275 From

[gentoo-dev] [PATCH 1/1] kernel-build.eclass: add missing dependency on openssl

From the kernel `make nconfig` description: ``` Module signature verification (MODULE_SIG) CONFIG_MODULE_SIG: Check modules for valid signatures upon load: the signature is simply appended to the module. For more information see . Note that this option adds the OpenSSL development packages as

[gentoo-dev] [PATCH] kernel-install.eclass: enforce signed modules in test with, USE=modules-sign

CONFIG_MODULE_SIG_FORCE=y. Signed-off-by: Andrew Ammerlaan --- eclass/kernel-install.eclass | 4 1 file changed, 4 insertions(+) diff --git a/eclass/kernel-install.eclass b/eclass/kernel-install.eclass index 62fbb1dab0493..84d306c19f1ab 100644 --- a/eclass/kernel-install.eclass +++ b/eclass/kernel

[gentoo-dev] [PATCH 1/2] kernel-build.eclass: sign the kernel image earlier in, src_install

kernel image in sys-kernel/gentoo-kernel-bin. Note, UKIs are always generated locally, so if UKIs are used these will still have to be signed in pkg_postinst and therefore the private key is still required on all systems with USE=secureboot and uefi=yes in dracut.conf. Signed-off-by: Andrew

Re: [gentoo-dev] [PATCH 1/2] kernel-build.eclass: sign the kernel image earlier in, src_install

If we are not using UKIs we don't have to do anything since the kernel image was already signed in kernel-build.eclass. Signed-off-by: Andrew Ammerlaan --- eclass/dist-kernel-utils.eclass | 8 1 file changed, 4 insertions(+), 4 deletions(-) diff --git a/eclass/dist-kernel

Re: [gentoo-dev] [PATCH 2/3] dist-kernel-utils.eclass: only sign image if it is a UKI

From 1a1062e142cf654b43790d2a211e3d447feb055c Mon Sep 17 00:00:00 2001 From: Andrew Ammerlaan Date: Sat, 26 Aug 2023 21:32:07 +0200 Subject: [PATCH] dist-kernel-utils.eclass: only sign image if it is a UKI If we are not using UKIs we don't have to do anything since the kernel image was already

Re: [gentoo-dev] [PATCH 3/3 v2] secureboot.eclass: secureboot_sign_efi_file allow call with 1

From efd3a440e652d96b7fadc56b171e14116be59768 Mon Sep 17 00:00:00 2001 From: Andrew Ammerlaan Date: Sun, 27 Aug 2023 18:24:08 +0200 Subject: [PATCH] secureboot.eclass: secureboot_sign_efi_file allow call with 1 arg Use the input file as the output file if it is not specified. Signed-off

Re: [gentoo-dev] [PATCH 1/3 v2] kernel-build.eclass: sign the kernel image earlier in, src_install

From 11c08f41e858561bd71fc5f19b612a7fd365b14a Mon Sep 17 00:00:00 2001 From: Andrew Ammerlaan Date: Sat, 26 Aug 2023 21:26:46 +0200 Subject: [PATCH] kernel-build.eclass: sign the kernel image earlier in src_install By signing it in src_install instead of pkg_postinst the signed version

[gentoo-dev] [PATCH 1/2] kernel-install.eclass: bump minimal dracut version

This is part of a larger PR at https://github.com/gentoo/gentoo/pull/33727. However these two eclass patches are relatively trivial and independent from the rest, so lets do these first. From 97a3eea0ab38bbe235df0ee20ede152a2a5e4dc1 Mon Sep 17 00:00:00 2001 From: Andrew Ammerlaan Date: Wed

[gentoo-dev] [PATCH 2/2] kernel-install.eclass: drop workaround skipping dracut kernel-install

This is part of a larger PR at https://github.com/gentoo/gentoo/pull/33727. However these two eclass patches are relatively trivial and independent from the rest, so lets do these first. From 0e4e64876732eb1d2794498a4f0446ec641bf978 Mon Sep 17 00:00:00 2001 From: Andrew Ammerlaan Date: Wed

[gentoo-dev] Last Rites: net-im/whatsapp-desktop-bin broken and masked for removal

# Andrew Ammerlaan (2022-05-19) # Unfortunately this has completely stopped working due to # upstream changes in WhatsApp. Bug 844985. As an alternative # try: *net-im/wazzapp-bin* which still works and also # offers additional features over whatsapp-desktop-bin # Masked for removal in 30 days

[gentoo-dev] Re: pkgdev new release v0.2.1 with breaking change

On 22/05/2022 20:20, Arthur Zamarin wrote: I have just released a new version [0] for pkgdev. Outside of multiple new features meant for easier developer workflows (like prepare to send a last-rite email), there is an important changes in the release which affect current users of pkgdev. **

Re: [gentoo-dev] [ebuild] How to do make install while in compilation stage

Hi, On 11/07/2022 05:17, Xi Shen wrote: Hi, I am trying to create an ebuild file for https://github.com/NVIDIA/libnvidia-container . It has a few other dependencies which will be built by itself. Such an ebuild already exists in the ::guru

Re: [gentoo-dev] Can app-office/sc be replaced by app-office/sc-im from GURU?

On June 28, 2022 1:37:19 AM GMT+02:00, Dex Conner wrote: >On 22/06/27 10:59AM, Mike Gilbert wrote: >> On Sun, Jun 26, 2022 at 11:24 PM Jeff Gazso wrote: >> > My thought is unless some serious deficiency is present in >> > app-office/sc-im it should be moved to Gentoo's main ebuild repository

Re: [gentoo-dev] [PATCH] glep-0076: Require real name instead of legal name

On 12/07/2022 13:47, Ulrich Mueller wrote: On Tue, 12 Jul 2022, Michał Górny wrote: to the commit message as a separate line. The sign-off must contain -the committer's legal name as a natural person, i.e., the name that -would appear in a government issued document. +the committer's real

Re: [gentoo-dev] Interest in a yarn / NPM eclass

Hi Chris, I think @Alessandro (CC) has already done some work on this over at [1]. I'm not sure what the status of it is though. Maybe you two can discuss this together to avoid doing double work. Best regards, Andrew [1] https://github.com/Alessandro-Barbieri/node-overlay On 05/06/2022

Re: [gentoo-dev] [PATCH] go-module.eclass: undeprecate EGO_SUM

On 13/06/2022 09:44, Florian Schmaus wrote: Following the gentoo-dev@ mailing list discussion [1], this un-deprecates EGO_SUM. 1: https://archives.gentoo.org/gentoo-dev/message/1a64a8e7694c3ee11cd48a58a95f2faa Signed-off-by: Florian Schmaus --- eclass/go-module.eclass | 30

Re: [gentoo-dev] [PATCH] 2022-07-28-pipewire-sound-server: add item

On July 26, 2022 10:08:39 PM GMT+02:00, Sam James wrote: >Bug: https://bugs.gentoo.org/744622 >Bug: https://bugs.gentoo.org/859280 >Signed-off-by: Sam James >--- > .../2022-07-28-pipewire-sound-server.en.txt | 130 ++ > 1 file changed, 130 insertions(+) > create mode 100644

[gentoo-dev] Last-rites: dev-python/pweave

# Andrew Ammerlaan (2022-10-28) # Unmaintained upstream, no reverse dependencies, fails tests # Removal in 30 days dev-python/pweave

[gentoo-dev] Last-rites: games-action/polymc

Please read https://bugs.gentoo.org/877495 for more information. # Andrew Ammerlaan (2022-10-17) # Hostile takeover ongoing, integrity cannot be guaranteed. # Use the release version only if you change the meta server setting. # Use games-action/multimc-bin or games-action/prismlauncher instead

[gentoo-dev] Up for grabs: net-im/rocketchat-desktop-bin

The following package is up for grabs because I no longer use it. It is up to date and has 1 small open bug (866099). Maintenance is very easy, because it is an electron application version bumping is almost always a simple copy-paste. Regardless, it should have a proper maintainer who

Re: [gentoo-dev] Up for grabs: dev-python/pyside2

On 29/07/2022 13:06, Ionen Wolkens wrote: On Fri, Jul 29, 2022 at 10:30:20AM +, waebbl-gen...@posteo.net wrote: On Sun, 17 Jul 2022 23:11:08 +0100 Sam James wrote: Up for grabs because of inactivity. dev-python/pyside2 has several open bugs and a version bump pending. Needs some real

Re: [gentoo-dev] Up for grabs: dev-python/pyside2

On 13/08/2022 11:10, waebbl-gen...@posteo.net wrote: On Fri, 12 Aug 2022 17:28:49 +0200 Andrew Ammerlaan wrote: On 29/07/2022 13:06, Ionen Wolkens wrote: On Fri, Jul 29, 2022 at 10:30:20AM +, waebbl-gen...@posteo.net wrote: On Sun, 17 Jul 2022 23:11:08 +0100 Sam James wrote: Up

Re: [gentoo-dev] Question about python compatibility in dev-python/pathlib2

Hi, Pathlib2 is a backport, as such it doesn't really make sense to add 3.10 and 3.11 to compat. The package from the overlay probably should adjust its dependencies to only depend on pathlib2 when instaling for 3.9 or 3.8. This can be accomplished with the python_gen_cond_dep function (see

Re: [gentoo-dev] Last rites: multiple packages lacking Python 3.10 support

On 22/11/2022 20:00, Zoltan Puskas wrote: Hi, Interesting, how come dev-util/kdevelop-python does not support higher versions of Python? I'll take a look! There is an open Pull Request to the kde overlay about this here: https://github.com/gentoo/kde/pull/914 Zoltan On Fri, Nov 18, 2022

Re: [gentoo-dev] dev-python/ package naming policy?

On 28/01/2023 19:02, Ulrich Mueller wrote: On Sat, 28 Jan 2023, Michał Górny wrote: However, it's been pointed out that this makes it hard for people to find packages they're looking for. I don't understand this argument. Why would all-lowercase make finding a package harder? Here's an

[gentoo-dev] [PATCH 0/2] docs.eclass: allow multiple documentation builders and support initializing git

Hi all, This first patch allows for using multiple documentation builders in one ebuild. This is a use case I initially hadn't considered, but has now already shown up twice (in the form of doxygen + python? ( sphinx )). Simply moving where we define default values of some variables is enough

[gentoo-dev] [PATCH 1/2] docs.eclass: allow multiple documentation builders

diff --git a/eclass/docs.eclass b/eclass/docs.eclass index 611485c227f..f7a82939a53 100644 --- a/eclass/docs.eclass +++ b/eclass/docs.eclass @@ -207,16 +207,15 @@ sphinx_deps() { } # @FUNCTION: sphinx_compile -# @INTERNAL # @DESCRIPTION: # Calls sphinx to build docs. -# -# If you overwrite

[gentoo-dev] [PATCH 2/2] docs.eclass: support initializing git

diff --git a/dev-python/mkdocs-git-revision-date-localized-plugin/mkdocs-git-revision-date-localized-plugin-1.1.0.ebuild b/dev-python/mkdocs-git-revision-date-localized-plugin/mkdocs-git-revision-date-localized-plugin-1.1.0.ebuild index 38f0810143e..9c5d2c4bf0c 100644 ---

Re: [gentoo-dev] [PATCH 1/2] docs.eclass: allow multiple documentation builders

On 10/11/2022 12:38, Anna wrote: On 2022-11-10 12:29, Andrew Ammerlaan wrote: diff --git a/eclass/docs.eclass b/eclass/docs.eclass index 611485c227f..f7a82939a53 100644 --- a/eclass/docs.eclass +++ b/eclass/docs.eclass @@ -207,16 +207,15 @@ sphinx_deps() { } # @FUNCTION: sphinx_compile

[gentoo-dev] Last rites: dev-python/trio-asyncio

# Andrew Ammerlaan (2023-02-25) # Fails tests, last upstream commit 2021, does not work with # python3.11. No reverse dependencies. # Removal on 2023-03-27. Bug 896898 and 888444 dev-python/trio-asyncio

Re: [gentoo-dev] Re: EGO_SUM

On 26/04/2023 18:12, Matt Turner wrote: On Wed, Apr 26, 2023 at 11:31 AM Florian Schmaus wrote: The discussion would be more productive if someone who is supporting the EGO_SUM deprecation could rationally summarize the main arguments why we deprecated EGO_SUM. You're requesting the changes.

[gentoo-dev] Last-rites: net-im/wazzapp-bin

# Andrew Ammerlaan (2023-04-09) # Archived upstream, better alternatives available, try: # - net-im/whatsapp-desktop-bin (another electron based approach) # - net-im/whatsie (a simple yet configurable Qt based app) # - net-im/whatsapp-for-linux::guru (a simple app using webkit2gtk) # Removal

[gentoo-dev] Misc python packages up for grabs

Because the following packages are no longer (test) dependencies of dev-python/spyder they are looking for a new maintainer: dev-python/pytest-faulthandler dev-python/pytest-ordering dev-python/pytest-xvfb dev-python/vncdotool (version bump available, requires new dependency)

[gentoo-dev] [PATCH 1/2] kernel-build.eclass: add IUSE="strip", install generated keys

From 480e54c27d09ceeb1dab662fcb395c33f807402a Mon Sep 17 00:00:00 2001 From: Andrew Ammerlaan Date: Fri, 9 Jun 2023 10:36:18 +0200 Subject: [PATCH] kernel-build.eclass: add IUSE="strip", install generated keys - Let the kernel build system handle stripping of the modules. This is

[gentoo-dev] [PATCH 2/2] kernel-build.eclass: add USE="modules-sign"

From fc8894ff62b45cc7a4148a9f6ba51f1afe7b920a Mon Sep 17 00:00:00 2001 From: Andrew Ammerlaan Date: Thu, 8 Jun 2023 20:44:58 +0200 Subject: [PATCH] sys-kernel/gentoo-kernel: add USE="modules-sign" - Enable module signing configure options if requested by the user. - Respect the li

Re: [gentoo-dev] [PATCH 1/2 v2] kernel-build.eclass: add IUSE="+strip modules-sign", install generated keys

b0e42a34469c3799b2c2c636d794a95040549133 Mon Sep 17 00:00:00 2001 From: Andrew Ammerlaan Date: Thu, 15 Jun 2023 11:50:10 +0200 Subject: [PATCH] kernel-build.eclass: add IUSE="+strip modules-sign", install generated keys - Let the kernel build system handle stripping of the modules. This is

Re: [gentoo-dev] [PATCH 2/2] kernel-build.eclass: add USE="modules-sign"

On 15/06/2023 11:59, Florian Schmaus wrote: On 15.06.23 11:50, Andrew Ammerlaan wrote: +pkg_postinst() { +    kernel-build_pkg_postinst +    if use modules-sign; then +    if [[ -z "${MODULES_SIGN_KEY}" ]]; then +    ewarn "" You can drop the empty string argu

[gentoo-dev] [PATCH 0/2] kernel-build.eclass: fix signing and compressing of kernel modules

Hi all, This first patch reworks the stripping of kernel modules, mirroring the changes from linux-mod.eclass to linux-mod-r1.eclass, and fixing Bug 814344 and Bug 881651. Before this change enabling the CONFIG_MODULE_SIG=y and CONFIG_MODULE_SIG_ALL=y kernel options would cause the kernel

[gentoo-dev] [PATCH 1/1] docs.eclass: add missing python_check_deps() deceleration

duplication is removed. Best regards, Andrew [1] https://bugs.gentoo.org/910278 From 4f758c021094db0e4f2a085aba33a614f97200d1 Mon Sep 17 00:00:00 2001 From: Andrew Ammerlaan Date: Fri, 14 Jul 2023 09:40:59 +0200 Subject: [PATCH] docs.eclass: define python_check_deps() and remove some code

Re: [gentoo-dev] [PATCH 1/5 v2]: secureboot.eclass: add new eclass

00:00:00 2001 From: Andrew Ammerlaan Date: Tue, 11 Jul 2023 19:47:52 +0200 Subject: [PATCH] eclass/secureboot.eclass: add new eclass Signed-off-by: Andrew Ammerlaan --- eclass/secureboot.eclass | 173 +++ 1 file changed, 173 insertions(+) create mode 100644

[gentoo-dev] [PATCH 1/5]: secureboot.eclass: add new eclass

From 3116d64388a5381b5ad1d200eb2e01a8194cf631 Mon Sep 17 00:00:00 2001 From: Andrew Ammerlaan Date: Tue, 11 Jul 2023 19:47:52 +0200 Subject: [PATCH 01/13] eclass/secureboot.eclass: add new eclass Signed-off-by: Andrew Ammerlaan --- eclass/secureboot.eclass | 179

[gentoo-dev] [PATCH 4/5]: dist-kernel-utils.eclass: optionally sign the kernels

From e6d996555a460e9082c6b108fa038b84bf88bcd4 Mon Sep 17 00:00:00 2001 From: Andrew Ammerlaan Date: Tue, 11 Jul 2023 13:20:12 +0200 Subject: [PATCH 04/13] dist-kernel-utils.eclass: optionally sign the kernels We put this behind a KERNEL_IUSE_SECUREBOOT var so we can enable this only

[gentoo-dev] [PATCH 0/5]: Introduce secureboot.eclass

Hi all, Now that we have support for unified kernel images and signed kernel modules in gentoo-kernel and via linux-mod-r1.eclass the logical next step is to also make it possible to sign the kernel images, bootloaders, and other efi executables. This makes it possible to enable Secure Boot,

[gentoo-dev] [PATCH 1/1]: profiles/use.desc: add efi global use flag

/ipmicfg. I don't have a strong preference between the efi or uefi flags, but since a majority of the packages has chosen efi I suggest we go with that. Best regards, Andrew From 737eb5d8509b088f7689d417375c00773c131042 Mon Sep 17 00:00:00 2001 From: Andrew Ammerlaan Date: Fri, 14 Jul 2023

[gentoo-dev] [PATCH 3/5]: profiles/arch: mask secureboot flag on arches without sbsign

From 06a132a4999b532308f27c55d27c1fce9ea91e0b Mon Sep 17 00:00:00 2001 From: Andrew Ammerlaan Date: Tue, 11 Jul 2023 20:17:11 +0200 Subject: [PATCH 03/13] profiles/arch: mask secureboot flag on arches without sbsign Signed-off-by: Andrew Ammerlaan --- profiles/arch/amd64/use.mask | 4

[gentoo-dev] [PATCH 2/5]: profiles/use.desc: add secureboot global use flag

From 53039f9497483f513b2ab98ca031689415b00b21 Mon Sep 17 00:00:00 2001 From: Andrew Ammerlaan Date: Tue, 11 Jul 2023 20:13:08 +0200 Subject: [PATCH 02/13] profiles/use.desc: add secureboot global use flag Signed-off-by: Andrew Ammerlaan --- profiles/use.desc | 1 + 1 file changed, 1 insertion

[gentoo-dev] [PATCH 5/5]: kernel-build.eclass: require modules-sign if secureboot

From d528f87cb015cc60ef6f702d02d20b4f1fc42e74 Mon Sep 17 00:00:00 2001 From: Andrew Ammerlaan Date: Thu, 13 Jul 2023 09:55:32 +0200 Subject: [PATCH 05/13] kernel-build.eclass: require modules-sign if secureboot Signed-off-by: Andrew Ammerlaan --- eclass/kernel-build.eclass | 18

Re: [gentoo-dev] [PATCH 1/1]: profiles/use.desc: add efi global use flag

On 14/07/2023 11:05, David Seifert wrote: On Thu, 1970-01-01 at 00:00 +, Andrew Ammerlaan wrote: Hi all, Currently we have 7 packages defining the efi flag and an additional 2 defining the uefi flag. These flags do the same thing, add support for (U)EFI booting. I therefore propose we

Re: [gentoo-dev] [PATCH 1/1]: profiles/use.desc: add efi global use flag

On 14/07/2023 19:11, Mike Gilbert wrote: On Fri, Jul 14, 2023 at 5:07 AM Sam James wrote: Andrew Ammerlaan writes: Hi all, Currently we have 7 packages defining the efi flag and an additional 2 defining the uefi flag. These flags do the same thing, add support for (U)EFI booting. I

Re: [gentoo-dev] Re: EGO_SUM

On 30/05/2023 18:35, Arthur Zamarin wrote: My solution is as such: 1. Undeprecate EGO_SUM in eclass 2. Forbid it's usage in ::gentoo (done by pkgcheck, error level, will fail CI and as such we can see the misuse). Overlays are allowed. 3. Maintainer starts talks with upstreams to add release

[gentoo-dev] [PATCH 1/2] dist-kernel-utils.eclass: fix extension of generated efi file

on the ESP. This is required to load the uki directly from efi firmware. From 1c406ada60d3493203c1fbd6333caf74e53ee8ac Mon Sep 17 00:00:00 2001 From: Andrew Ammerlaan Date: Fri, 16 Jun 2023 16:33:56 +0200 Subject: [PATCH] dist-kernel-utils.eclass: fix extension of generated efi file If kernel-install

Re: [gentoo-dev] [PATCH 2/2 v3] kernel-build.eclass: add USE="modules-sign"

Split the patch in two pieces and changed the name of the pre-inherit variable to KERNEL_IUSE_MODULES_SIGN. Plus some quotation fixes. From e019e78448376b04c91397c7efc60ee72c24bf93 Mon Sep 17 00:00:00 2001 From: Andrew Ammerlaan Date: Thu, 15 Jun 2023 21:10:02 +0200 Subject: [PATCH] kernel

Re: [gentoo-dev] [PATCH 1/2 v3] kernel-build.eclass: add IUSE="strip", install generated keys

No functional changes in version 3, just renaming some variables and splitting the version 2 patch. From 969f242c3269c068ebfe5adc37ebfc92dcd56181 Mon Sep 17 00:00:00 2001 From: Andrew Ammerlaan Date: Thu, 15 Jun 2023 11:50:10 +0200 Subject: [PATCH] kernel-build.eclass: add IUSE="

Re: [gentoo-dev] [PATCH 2/2] dist-kernel-utils.eclass: skip initrd installation when using the uki layout

open to fix the underlying issue (i.e make 50-dracut.install work properly with uefi=yes and layout=uki): https://github.com/dracutdevs/dracut/pull/2405 From c2d6ecb074d25c70677fa9c371801a0002c9a216 Mon Sep 17 00:00:00 2001 From: Andrew Ammerlaan Date: Fri, 16 Jun 2023 22:51:00 +0200 Subject

Re: [gentoo-dev] Eselect repository feature request

On 20/06/2023 19:26, Mike Gilbert wrote: On Tue, Jun 20, 2023 at 1:08 PM Florian Schmaus wrote: On 20.06.23 16:41, TOMAS FABRIZIO ORSI wrote: Isn't that duplicating the information of metadata/layout.conf's 'master' key-value pair [1]? Yes, I agree that it would be duplicating

Re: [gentoo-dev] [PATCH 2/2 v4] kernel-build.eclass: add USE="modules-sign"

Version 4 (and that's the last one, I promise), makes this work with pkcs11 uri's as well. Tested with my Nitrokey, it is (unsurprisingly) incredibly slow but it works. From 70415544a4aea458039f1abbbf9c7e112de846f3 Mon Sep 17 00:00:00 2001 From: Andrew Ammerlaan Date: Thu, 15 Jun 2023 21:10

Re: [gentoo-dev] Eselect repository feature request

On 21/06/2023 04:17, TOMAS FABRIZIO ORSI wrote: A warning could be a great way of making the user aware of this situation. Having said that, if eselect repository is able to check and warn the user of a not synced overlay(ies) dependency, then the hard bit is done What I meant is that emerge

Re: [gentoo-dev] Eselect repository feature request

On 21/06/2023 15:40, TOMAS FABRIZIO ORSI wrote: What I meant is that emerge --sync/eix --sync does this check instead of eselect repository. To me this makes sense since we can only do this check *after* syncing. That is a great point; I had not considered it. So, you are

Re: [gentoo-dev] Eselect repository feature request

On 21/06/2023 16:12, TOMAS FABRIZIO ORSI wrote: In any case, this is just something to keep in mind when writing this check. It is not fully guaranteed that eselect repository can find the repository that is requested in some master= entry. Great point. Btw, in your opinion, do you

Re: [gentoo-dev] [PATCH 2/2 v2] dist-kernel-utils.eclass: skip initrd installation when using the uki layout

akefile. Best regards, Andrew [1] https://github.com/dracutdevs/dracut/pull/2405 From 08302fddf42f9c34fa0cf5647ff44a55f25f75c2 Mon Sep 17 00:00:00 2001 From: Andrew Ammerlaan Date: Fri, 16 Jun 2023 22:51:00 +0200 Subject: [PATCH] dist-kernel-utils.eclass: skip initrd installation when using uki Gets rid o

Re: [gentoo-dev] [PATCH 1/2 v2] kernel-build.eclass: add IUSE="+strip modules-sign", install generated keys

On 15/06/2023 15:46, Mike Gilbert wrote: On Thu, Jun 15, 2023 at 9:06 AM Andrew Ammerlaan wrote: # @FUNCTION: kernel-build_merge_configs @@ -270,16 +354,39 @@ kernel-build_merge_configs() { local user_configs=( "${BROOT}"/etc/kernel/config.d/*.config ) shopt -

[gentoo-dev] Last-rites: sys-kernel/installkernel-systemd

# Andrew Ammerlaan (2024-01-24) # The functionality of sys-kernel/installkernel-systemd has been # integrated into sys-kernel/installkernel[systemd]. # Please install sys-kernel/installkernel and remove # sys-kernel/installkernel-systemd. See the news item entitled # "Merging of installk

Re: [gentoo-dev] [PATCH] kernel-install.eclass: explicitly set kernel image to 644

On 11/02/2024 10:55, Sam James wrote: Andrew Ammerlaan writes: Author: Andrew Ammerlaan Date: Sun Feb 11 10:41:32 2024 +0100 Did you not use git-send-email here or what's going on? Formatting looks off. I was lazy and copy-pasted from 'git log -p'. I do not have git-send-email

[gentoo-dev] [PATCH] kernel-install.eclass: explicitly set kernel image to 644

Author: Andrew Ammerlaan Date: Sun Feb 11 10:41:32 2024 +0100 kernel-install.eclass: explicitly set kernel image to 644 The kernel build system sets the permissions on the kernel image to 644. However objcopy creates a file with permissions 755. This causes a discrepancy in the permissions

Re: [gentoo-dev] [PATCH] check-reqs.eclass: more disk checks

On 19 February 2024 23:08:32 CET, "Robin H. Johnson" wrote: >Allow checking more disk space, for users with many split volumes and >ever-larger packages. > >gentoo-kernel-bin: >/ >=350MB/version (in /lib/modules) >/boot >=40MB/version > The problem here is that the kernel is not always

[gentoo-dev] [PATCH 2/2] kernel-install.eclass: install vmlinu{x,z} symlink

From a06fd4447d34febaa2cca449c8f6979b91a2818e Mon Sep 17 00:00:00 2001 From: Andrew Ammerlaan Date: Wed, 7 Feb 2024 13:41:30 +0100 Subject: [PATCH] kernel-install.eclass: install vmlinu{x,z} symlink and also link generic initrd/uki.efi Signed-off-by: Andrew Ammerlaan --- eclass/kernel

[gentoo-dev] [PATCH 1/2] kernel-build.eclass: install vmlinu{x,z} symlink

From 3d3c073f932caa307c26f8cf17b061a609433fce Mon Sep 17 00:00:00 2001 From: Andrew Ammerlaan Date: Wed, 7 Feb 2024 13:28:02 +0100 Subject: [PATCH] kernel-build.eclass: install vmlinu{x,z} symlink Some other distributions install (a symlink to) the kernel image here. Tools such as 'kernel

Re: [gentoo-dev] [PATCH v2] kernel-install.eclass: fix test phase on systemd systems

but this shouldn't be a problem since at least for systemd systems you can apparently not boot at all if it is not valid. v2: From 0a22dcc93c8ba16cdb450f2443ad256e56111d6e Mon Sep 17 00:00:00 2001 From: Andrew Ammerlaan Date: Mon, 11 Dec 2023 08:36:58 +0100 Subject: [PATCH] kernel-install.eclas

Re: [gentoo-dev] [PATCH v4] kernel-build.eclass: work around permissions issue with module signing

re that the temporary key is readable by the user that the kernel is being built as. The variable is then unset so it does not end up in the final environment file. Co-authored-by: Andrew Ammerlaan Signed-off-by: Violet Purcell --- eclass/kernel-build.eclass | 18 -- 1 file chan

Re: [gentoo-dev] [PATCH v3] kernel-build.eclass: work around permissions issue with module signing

to ensure that the temporary key is readable by the user that the kernel is being built as. The variable is then unset so it does not end up in the final environment file. Co-authored-by: Andrew Ammerlaan Signed-off-by: Violet Purcell --- eclass/kernel-build.eclass | 18 -- 1 file

  1   2   >