From 7fe53443d11199c8648afe99c414b9c2f6cb0849 Mon Sep 17 00:00:00 2001 From: projectmoon Date: Thu, 24 Nov 2022 15:44:10 +0100 Subject: [PATCH] sys-kernel/libre-kernel: add verify-sig, use mirror to download source. --- sys-kernel/libre-kernel/Manifest | 2 + .../libre-kernel-5.15.77-r1.ebuild | 150 ++++++++++++++++++ .../libre-kernel-5.19.17-r1.ebuild | 150 ++++++++++++++++++ 3 files changed, 302 insertions(+) create mode 100644 sys-kernel/libre-kernel/libre-kernel-5.15.77-r1.ebuild create mode 100644 sys-kernel/libre-kernel/libre-kernel-5.19.17-r1.ebuild diff --git a/sys-kernel/libre-kernel/Manifest b/sys-kernel/libre-kernel/Manifest index 075e057..9d55c83 100644 --- a/sys-kernel/libre-kernel/Manifest +++ b/sys-kernel/libre-kernel/Manifest @@ -2,4 +2,6 @@ DIST gentoo-kernel-config-g1.tar.gz 4283 BLAKE2B 44dd51ec45ebc71bffcd6d85a2fefba DIST kernel-x86_64-fedora.config.5.15.19 223286 BLAKE2B 239995703c01dcb6d179133dd115bc0a57872c07d7a08afaf4d92cf6d78f0c17b19487b5b399ac7fdde5d460fa7931628147817a569fef2c3a62951c96054bdf SHA512 9bee4aff7e5ef4ada57bee7496aaf47b8fdd5c936c4c9b580660d130db0678eaecdebdbcab0dfcaf5c17a71f6419069840db10f5886806b6fc810f8a3619554f DIST linux-libre-5.15.75-gnu.tar.xz 119675216 BLAKE2B 7b5658c5516062eeba00fdd02e20c135b2d693a48b2d73afa98bd3f0e58be67213f722a2707c43db48db75d8f015ebd824b19b74c3b9193c00af8dd58f21ea23 SHA512 c5fbb755500692a12e859218b0e5a3c42336be073b234b543a865d30f95af0854634b9a7454fb15c08c3635cec44af7f5a24c54945345fb6bbafb0805fa808c8 DIST linux-libre-5.15.77-gnu.tar.xz 119696132 BLAKE2B c4a16a82a886c82954480f6063693edde3202e2c4981f40692c603d9917f5b39825b4b9c097c462ea42f3ae524a0aa5018fcd18c93ca908493e2aad6d18e5f7d SHA512 1b7309dd89ffc365722cdf2e0c0a8ed19ff769e22a90fd3a8b3fadc6d6a6dc442bf203c7cef075631b94d560144b3167a2f430fb27bf9c49946498917315aeb9 +DIST linux-libre-5.15.77-gnu.tar.xz.sign 195 BLAKE2B ba41ae8c34c9f53a9a9b7bb8ec67c990c4a30168bcab79b7deb15b99615aa257f4dd48a7ff59db40b6d32ce87b155aa5a56eb663c999f1c91d04441bc8db39aa SHA512 988464375ee5f41fcac07f0ecaa1194e9332cfa1f134f6b1427ddfadf31bbd71f3d51efa8ccc87a927011bc5d9e95791cdf0399a9464b8e5d4f85e83acab8e3c DIST linux-libre-5.19.17-gnu.tar.xz 124362148 BLAKE2B d62685af7373f5eaeb45c3917fec5df6bec43742ded71e4fa91ac995b09a29bfbf50ffceb232749624497280b4ba3d092a84856f676ac8fe09924b1d6027c870 SHA512 a491a96d26fd88cc1fadc06fcb363b4a35f03b38bb62c8adbc6e0bf2fc136655978f19a438d83efedcaa1a8142f35c249a3e4c7256f1122c436d55ac4d1cf432 +DIST linux-libre-5.19.17-gnu.tar.xz.sign 195 BLAKE2B 84d7b28ce97bb63de45b65206f6ebb6b3ee1c86858ca1220f6827210160ef160a0888682ef290b07e102586d18bae900ec5605281c4e31ee74e5c99ea0c0885f SHA512 22848fa4ae7ff33affc825be0d922cccfb59e2f1740c080ee0156d1077ef53cb38eb1314e7a44fc96406da6b3bf193971c032f5d33c39f14819f421333b6def4 diff --git a/sys-kernel/libre-kernel/libre-kernel-5.15.77-r1.ebuild b/sys-kernel/libre-kernel/libre-kernel-5.15.77-r1.ebuild new file mode 100644 index 0000000..f61bff4 --- /dev/null +++ b/sys-kernel/libre-kernel/libre-kernel-5.15.77-r1.ebuild @@ -0,0 +1,150 @@ +# Copyright 2020-2022 Gentoo Authors, projectmoon +# Distributed under the terms of the GNU General Public License v2 + +EAPI=8 + +inherit kernel-build verify-sig + +BASE_VER="$(ver_cut 1).$(ver_cut 2).$(ver_cut 3)" +RESTRICT="mirror" + +# https://koji.fedoraproject.org/koji/packageinfo?packageID=8 +CONFIG_VER=5.15.19 +CONFIG_HASH=ec69da7a42b5b7c3da91572ef22097b069ddbd01 +GENTOO_CONFIG_VER=g1 + +DESCRIPTION="GNU Linux-libre kernel built from upstream sources" +HOMEPAGE="https://www.fsfla.org/ikiwiki/selibre/linux-libre/" +SRC_URI+=" + https://git.agnos.is/projectmoon/projectmoon-overlay-files/media/branch/main/sys-kernel/libre-kernel/linux-libre-${BASE_VER}-gnu.tar.xz + https://github.com/projg2/gentoo-kernel-config/archive/${GENTOO_CONFIG_VER}.tar.gz + -> gentoo-kernel-config-${GENTOO_CONFIG_VER}.tar.gz + verify-sig? ( + https://git.agnos.is/projectmoon/projectmoon-overlay-files/media/branch/main/sys-kernel/libre-kernel/linux-libre-${BASE_VER}-gnu.tar.xz.sign + ) + amd64? ( + https://src.fedoraproject.org/rpms/kernel/raw/${CONFIG_HASH}/f/kernel-x86_64-fedora.config + -> kernel-x86_64-fedora.config.${CONFIG_VER} + ) +" + +# Workdir is named linux-PV. +MY_P=linux-${PV} +S=${WORKDIR}/${MY_P} + +LICENSE="GPL-2" +KEYWORDS="amd64" +IUSE="debug" + +BDEPEND=" + debug? ( dev-util/pahole ) + verify-sig? ( sec-keys/openpgp-keys-linux-libre ) +" +PDEPEND=" + >=virtual/dist-kernel-${PV} +" + +VERIFY_SIG_OPENPGP_KEY_PATH=${BROOT}/usr/share/openpgp-keys/linux-libre.asc + +pkg_pretend() { + if has_version -d sys-kernel/linux-firmware[redistributable]; then + ewarn "sys-kernel/linux-firmware was found installed on your system," + ewarn "but it is configured to install non-Free firmware files." + ewarn "The non-Free firmware files may be required for some hardware" + ewarn "work. The Linux-libre kernel cannot load non-Free firmware." + ewarn "To install only the Free firmware, set the -redistributable" + ewarn "USE flag on sys-kernel/linux-firmware." + + if use initramfs; then + elog + elog "If you decide to change or remove linux-firmware later, you" + elog "can rebuild the initramfs via issuing a command equivalent to:" + elog + elog " emerge --config ${CATEGORY}/${PN}:${SLOT}" + fi + else + if ! has_version -d sys-kernel/linux-firmware; then + ewarn "sys-kernel/linux-firmware[-redistributable] not found installed" + ewarn "on your system. This package provides various firmware files that" + ewarn "may be needed for your hardware to work. If in doubt, it is recommended" + ewarn "to pause or abort the build process and install it before" + ewarn "resuming." + + if use initramfs; then + elog + elog "If you decide to install linux-firmware later, you can rebuild" + elog "the initramfs via issuing a command equivalent to:" + elog + elog " emerge --config ${CATEGORY}/${PN}:${SLOT}" + fi + fi + fi +} + +src_unpack() { + if use verify-sig; then + FILE="${DISTDIR}"/linux-libre-${PV}-gnu.tar.xz + SIGFILE="${DISTDIR}"/linux-libre-${PV}-gnu.tar.xz.sign + verify-sig_verify_detached $FILE $SIGFILE + fi + + default +} + +src_prepare() { + default + + local biendian=false + + # prepare the default config + case ${ARCH} in + amd64) + cp "${DISTDIR}/kernel-x86_64-fedora.config.${CONFIG_VER}" .config || die + ;; + arm) + return + ;; + arm64) + cp "${DISTDIR}/kernel-aarch64-fedora.config.${CONFIG_VER}" .config || die + biendian=true + ;; + hppa) + return + ;; + ppc) + # assume powermac/powerbook defconfig + # we still package.use.force savedconfig + cp "${WORKDIR}/${MY_P}/arch/powerpc/configs/pmac32_defconfig" .config || die + ;; + ppc64) + cp "${DISTDIR}/kernel-ppc64le-fedora.config.${CONFIG_VER}" .config || die + biendian=true + ;; + x86) + cp "${DISTDIR}/kernel-i686-fedora.config.${CONFIG_VER}" .config || die + ;; + *) + die "Unsupported arch ${ARCH}" + ;; + esac + + sed -i 's/EXTRAVERSION = -gnu/EXTRAVERSION = /' "${S}"/Makefile || die 'could not remove EXTRAVERSION' + local myversion="-gnu-dist" + echo "CONFIG_LOCALVERSION=\"${myversion}\"" > "${T}"/version.config || die + local dist_conf_path="${WORKDIR}/gentoo-kernel-config-${GENTOO_CONFIG_VER}" + + local merge_configs=( + "${T}"/version.config + "${dist_conf_path}"/base.config + ) + use debug || merge_configs+=( + "${dist_conf_path}"/no-debug.config + ) + + # this covers ppc64 and aarch64_be only for now + if [[ ${biendian} == true && $(tc-endian) == big ]]; then + merge_configs+=( "${dist_conf_path}/big-endian.config" ) + fi + + kernel-build_merge_configs "${merge_configs[@]}" +} diff --git a/sys-kernel/libre-kernel/libre-kernel-5.19.17-r1.ebuild b/sys-kernel/libre-kernel/libre-kernel-5.19.17-r1.ebuild new file mode 100644 index 0000000..9f82eae --- /dev/null +++ b/sys-kernel/libre-kernel/libre-kernel-5.19.17-r1.ebuild @@ -0,0 +1,150 @@ +# Copyright 2020-2022 Gentoo Authors, projectmoon +# Distributed under the terms of the GNU General Public License v2 + +EAPI=8 + +inherit kernel-build verify-sig + +BASE_VER="$(ver_cut 1).$(ver_cut 2).$(ver_cut 3)" +RESTRICT="mirror" + +# https://koji.fedoraproject.org/koji/packageinfo?packageID=8 +CONFIG_VER=5.15.19 +CONFIG_HASH=ec69da7a42b5b7c3da91572ef22097b069ddbd01 +GENTOO_CONFIG_VER=g1 + +DESCRIPTION="GNU Linux-libre kernel built from upstream sources" +HOMEPAGE="https://www.fsfla.org/ikiwiki/selibre/linux-libre/" +SRC_URI+=" + https://git.agnos.is/projectmoon/projectmoon-overlay-files/media/branch/main/sys-kernel/libre-kernel/linux-libre-${BASE_VER}-gnu.tar.xz + https://github.com/projg2/gentoo-kernel-config/archive/${GENTOO_CONFIG_VER}.tar.gz + -> gentoo-kernel-config-${GENTOO_CONFIG_VER}.tar.gz + verify-sig? ( + https://git.agnos.is/projectmoon/projectmoon-overlay-files/media/branch/main/sys-kernel/libre-kernel/linux-libre-${BASE_VER}-gnu.tar.xz.sign + ) + amd64? ( + https://src.fedoraproject.org/rpms/kernel/raw/${CONFIG_HASH}/f/kernel-x86_64-fedora.config + -> kernel-x86_64-fedora.config.${CONFIG_VER} + ) +" + +# Workdir is named linux-PV. +MY_P=linux-${PV} +S=${WORKDIR}/${MY_P} + +LICENSE="GPL-2" +KEYWORDS="~amd64" +IUSE="debug" + +BDEPEND=" + debug? ( dev-util/pahole ) + verify-sig? ( sec-keys/openpgp-keys-linux-libre ) +" +PDEPEND=" + >=virtual/dist-kernel-${PV} +" + +VERIFY_SIG_OPENPGP_KEY_PATH=${BROOT}/usr/share/openpgp-keys/linux-libre.asc + +pkg_pretend() { + if has_version -d sys-kernel/linux-firmware[redistributable]; then + ewarn "sys-kernel/linux-firmware was found installed on your system," + ewarn "but it is configured to install non-Free firmware files." + ewarn "The non-Free firmware files may be required for some hardware" + ewarn "work. The Linux-libre kernel cannot load non-Free firmware." + ewarn "To install only the Free firmware, set the -redistributable" + ewarn "USE flag on sys-kernel/linux-firmware." + + if use initramfs; then + elog + elog "If you decide to change or remove linux-firmware later, you" + elog "can rebuild the initramfs via issuing a command equivalent to:" + elog + elog " emerge --config ${CATEGORY}/${PN}:${SLOT}" + fi + else + if ! has_version -d sys-kernel/linux-firmware; then + ewarn "sys-kernel/linux-firmware[-redistributable] not found installed" + ewarn "on your system. This package provides various firmware files that" + ewarn "may be needed for your hardware to work. If in doubt, it is recommended" + ewarn "to pause or abort the build process and install it before" + ewarn "resuming." + + if use initramfs; then + elog + elog "If you decide to install linux-firmware later, you can rebuild" + elog "the initramfs via issuing a command equivalent to:" + elog + elog " emerge --config ${CATEGORY}/${PN}:${SLOT}" + fi + fi + fi +} + +src_unpack() { + if use verify-sig; then + FILE="${DISTDIR}"/linux-libre-${PV}-gnu.tar.xz + SIGFILE="${DISTDIR}"/linux-libre-${PV}-gnu.tar.xz.sign + verify-sig_verify_detached $FILE $SIGFILE + fi + + default +} + +src_prepare() { + default + + local biendian=false + + # prepare the default config + case ${ARCH} in + amd64) + cp "${DISTDIR}/kernel-x86_64-fedora.config.${CONFIG_VER}" .config || die + ;; + arm) + return + ;; + arm64) + cp "${DISTDIR}/kernel-aarch64-fedora.config.${CONFIG_VER}" .config || die + biendian=true + ;; + hppa) + return + ;; + ppc) + # assume powermac/powerbook defconfig + # we still package.use.force savedconfig + cp "${WORKDIR}/${MY_P}/arch/powerpc/configs/pmac32_defconfig" .config || die + ;; + ppc64) + cp "${DISTDIR}/kernel-ppc64le-fedora.config.${CONFIG_VER}" .config || die + biendian=true + ;; + x86) + cp "${DISTDIR}/kernel-i686-fedora.config.${CONFIG_VER}" .config || die + ;; + *) + die "Unsupported arch ${ARCH}" + ;; + esac + + sed -i 's/EXTRAVERSION = -gnu/EXTRAVERSION = /' "${S}"/Makefile || die 'could not remove EXTRAVERSION' + local myversion="-gnu-dist" + echo "CONFIG_LOCALVERSION=\"${myversion}\"" > "${T}"/version.config || die + local dist_conf_path="${WORKDIR}/gentoo-kernel-config-${GENTOO_CONFIG_VER}" + + local merge_configs=( + "${T}"/version.config + "${dist_conf_path}"/base.config + ) + use debug || merge_configs+=( + "${dist_conf_path}"/no-debug.config + ) + + # this covers ppc64 and aarch64_be only for now + if [[ ${biendian} == true && $(tc-endian) == big ]]; then + merge_configs+=( "${dist_conf_path}/big-endian.config" ) + fi + + kernel-build_merge_configs "${merge_configs[@]}" +}