ExternalVendorCode/genode
1
0
Fork 0
mirror of https://github.com/genodelabs/genode.git synced 2024-12-29 10:08:53 +00:00
Code Issues Actions Packages Projects Releases Wiki Activity
853d541340
genode/libports/ports/libav.mk

47 lines
1.5 KiB
Makefile
Raw Normal View History

Add 'libav' to libports Fixes #212.
2012-05-22 09:15:39 +00:00
include lib/import/import-av.inc
libports: Verify signatures of 3rd-party code This patch adds integrity checks for the packages of the libports repository. Issue #748
2013-05-25 12:50:46 +00:00
LIBAV_TGZ = $(LIBAV).tar.gz
LIBAV_SIG = $(LIBAV_TGZ).asc
LIBAV_SHA = $(LIBAV_TGZ).sha1
LIBAV_BASE_URL = http://www.libav.org/releases
LIBAV_URL = $(LIBAV_BASE_URL)/$(LIBAV_TGZ)
LIBAV_URL_SIG = $(LIBAV_BASE_URL)/$(LIBAV_SIG)
LIBAV_URL_SHA = $(LIBAV_BASE_URL)/$(LIBAV_SHA)
#
# XXX Add hash verification for libav downloads. Note: signatures are provided
# for newer versions. Therefore, all is prepared in the make file for
# enabling the signature check. However, the signature check is yet
# commented out.
#
#LIBAV_KEY = UNCLEAR WHAT GOES IN HERE
Add 'libav' to libports Fixes #212.
2012-05-22 09:15:39 +00:00
#
# Interface to top-level prepare Makefile
#
PORTS += $(LIBAV)
prepare-libav: $(CONTRIB_DIR)/$(LIBAV)
$(CONTRIB_DIR)/$(LIBAV): clean-libav
#
# Port-specific local rules
#
$(DOWNLOAD_DIR)/$(LIBAV_TGZ):
$(VERBOSE)wget -c -P $(DOWNLOAD_DIR) $(LIBAV_URL) && touch $@
libports: Verify signatures of 3rd-party code This patch adds integrity checks for the packages of the libports repository. Issue #748
2013-05-25 12:50:46 +00:00
$(VERBOSE)wget -c -P $(DOWNLOAD_DIR) $(LIBAV_URL_SHA) && touch $@
#$(VERBOSE)wget -c -P $(DOWNLOAD_DIR) $(LIBAV_URL_SIG) && touch $@
ports/libports: Handle failed integrity checks This patch makes the handling of failed integrity checks of 3rd-party packages more robust. Previously, a once failed 'make prepare PKG=curl' would not leave any trace of the verification state. Hence, a successive attempt to perform the 'make prepare' step again succeeded even if the signature check failed. To solve this problem, the outcome of a successful signature check is represented by a tag file called 'download/<archive-name>.verified'. Because the rule for extracting the archive depends on the .verify tag file, the extraction step is not performed until the signature check succeeds. Issue #748
2013-06-06 14:49:56 +00:00
$(DOWNLOAD_DIR)/$(LIBAV_TGZ).verified: $(DOWNLOAD_DIR)/$(LIBAV_TGZ)
# XXX Hash verification of libav does not ensure authenticity
libports: Verify signatures of 3rd-party code This patch adds integrity checks for the packages of the libports repository. Issue #748
2013-05-25 12:50:46 +00:00
$(VERBOSE)$(HASHVERIFIER) $(DOWNLOAD_DIR)/$(LIBAV_TGZ) $(DOWNLOAD_DIR)/$(LIBAV_SHA) sha1
ports/libports: Handle failed integrity checks This patch makes the handling of failed integrity checks of 3rd-party packages more robust. Previously, a once failed 'make prepare PKG=curl' would not leave any trace of the verification state. Hence, a successive attempt to perform the 'make prepare' step again succeeded even if the signature check failed. To solve this problem, the outcome of a successful signature check is represented by a tag file called 'download/<archive-name>.verified'. Because the rule for extracting the archive depends on the .verify tag file, the extraction step is not performed until the signature check succeeds. Issue #748
2013-06-06 14:49:56 +00:00
$(VERBOSE)touch $@
Add 'libav' to libports Fixes #212.
2012-05-22 09:15:39 +00:00
ports/libports: Handle failed integrity checks This patch makes the handling of failed integrity checks of 3rd-party packages more robust. Previously, a once failed 'make prepare PKG=curl' would not leave any trace of the verification state. Hence, a successive attempt to perform the 'make prepare' step again succeeded even if the signature check failed. To solve this problem, the outcome of a successful signature check is represented by a tag file called 'download/<archive-name>.verified'. Because the rule for extracting the archive depends on the .verify tag file, the extraction step is not performed until the signature check succeeds. Issue #748
2013-06-06 14:49:56 +00:00
$(CONTRIB_DIR)/$(LIBAV): $(DOWNLOAD_DIR)/$(LIBAV_TGZ).verified
$(VERBOSE)tar xfz $(<:.verified=) -C $(CONTRIB_DIR) && touch $@
libports: make include paths absolute If contrib and/or download in libports are symlinks, then using ".." ends up in the wrong directory. Use CURDIR variable set by make.
2013-03-11 09:35:27 +00:00
$(VERBOSE)patch -d $(CONTRIB_DIR)/$(LIBAV) -p1 -i $(CURDIR)/src/app/avplay/avplay.patch
Add 'libav' to libports Fixes #212.
2012-05-22 09:15:39 +00:00
clean-libav:
$(VERBOSE)rm -rf $(CONTRIB_DIR)/$(LIBAV)
Reference in New Issue Copy Permalink