ExternalVendorCode/genode
1
0
Fork 0
mirror of https://github.com/genodelabs/genode.git synced 2024-12-21 06:33:31 +00:00
Code Issues Actions Packages Projects Releases Wiki Activity
853d541340
genode/libports/ports/readline.mk

40 lines
1.3 KiB
Makefile
Raw Normal View History

libports: Verify signatures of 3rd-party code This patch adds integrity checks for the packages of the libports repository. Issue #748
2013-05-25 12:50:46 +00:00
READLINE = readline-6.0
READLINE_TGZ = $(READLINE).tar.gz
READLINE_SIG = $(READLINE_TGZ).sig
READLINE_BASE_URL = ftp://ftp.gnu.org/gnu/readline
READLINE_URL = $(READLINE_BASE_URL)/$(READLINE_TGZ)
READLINE_URL_SIG = $(READLINE_BASE_URL)/$(READLINE_SIG)
READLINE_KEY = GNU
Imported Genode release 11.11
2011-12-22 15:19:25 +00:00
#
# Interface to top-level prepare Makefile
#
PORTS += $(READLINE)
prepare-readline: $(CONTRIB_DIR)/$(READLINE)
$(CONTRIB_DIR)/$(READLINE): clean-readline
#
# Port-specific local rules
#
$(DOWNLOAD_DIR)/$(READLINE_TGZ):
$(VERBOSE)wget -c -P $(DOWNLOAD_DIR) $(READLINE_URL) && touch $@
libports: Verify signatures of 3rd-party code This patch adds integrity checks for the packages of the libports repository. Issue #748
2013-05-25 12:50:46 +00:00
$(VERBOSE)wget -c -P $(DOWNLOAD_DIR) $(READLINE_URL_SIG) && touch $@
ports/libports: Handle failed integrity checks This patch makes the handling of failed integrity checks of 3rd-party packages more robust. Previously, a once failed 'make prepare PKG=curl' would not leave any trace of the verification state. Hence, a successive attempt to perform the 'make prepare' step again succeeded even if the signature check failed. To solve this problem, the outcome of a successful signature check is represented by a tag file called 'download/<archive-name>.verified'. Because the rule for extracting the archive depends on the .verify tag file, the extraction step is not performed until the signature check succeeds. Issue #748
2013-06-06 14:49:56 +00:00
$(DOWNLOAD_DIR)/$(READLINE_TGZ).verified: $(DOWNLOAD_DIR)/$(READLINE_TGZ)
libports: Verify signatures of 3rd-party code This patch adds integrity checks for the packages of the libports repository. Issue #748
2013-05-25 12:50:46 +00:00
$(VERBOSE)$(SIGVERIFIER) $(DOWNLOAD_DIR)/$(READLINE_TGZ) $(DOWNLOAD_DIR)/$(READLINE_SIG) $(READLINE_KEY)
ports/libports: Handle failed integrity checks This patch makes the handling of failed integrity checks of 3rd-party packages more robust. Previously, a once failed 'make prepare PKG=curl' would not leave any trace of the verification state. Hence, a successive attempt to perform the 'make prepare' step again succeeded even if the signature check failed. To solve this problem, the outcome of a successful signature check is represented by a tag file called 'download/<archive-name>.verified'. Because the rule for extracting the archive depends on the .verify tag file, the extraction step is not performed until the signature check succeeds. Issue #748
2013-06-06 14:49:56 +00:00
$(VERBOSE)touch $@
Imported Genode release 11.11
2011-12-22 15:19:25 +00:00
READLINE_HEADERS := rlstdc.h rltypedefs.h keymaps.h tilde.h
ports/libports: Handle failed integrity checks This patch makes the handling of failed integrity checks of 3rd-party packages more robust. Previously, a once failed 'make prepare PKG=curl' would not leave any trace of the verification state. Hence, a successive attempt to perform the 'make prepare' step again succeeded even if the signature check failed. To solve this problem, the outcome of a successful signature check is represented by a tag file called 'download/<archive-name>.verified'. Because the rule for extracting the archive depends on the .verify tag file, the extraction step is not performed until the signature check succeeds. Issue #748
2013-06-06 14:49:56 +00:00
$(CONTRIB_DIR)/$(READLINE): $(DOWNLOAD_DIR)/$(READLINE_TGZ).verified
$(VERBOSE)tar xfz $(<:.verified=) -C $(CONTRIB_DIR) && touch $@
Imported Genode release 11.11
2011-12-22 15:19:25 +00:00
@# create symbolic links for public headers from contrib dir
$(VERBOSE)for i in $(READLINE_HEADERS); do \
ln -sf ../../$(CONTRIB_DIR)/$(READLINE)/$$i include/readline/; done
clean-readline:
$(VERBOSE)rm -f $(addprefix include/readline/,$(READLINE_HEADERS))
$(VERBOSE)rm -rf $(CONTRIB_DIR)/$(READLINE)
Reference in New Issue Copy Permalink