1 |
commit: 092db4b12b022b3de298b4f33233c448e412e16c |
2 |
Author: Sam James <sam <AT> gentoo <DOT> org> |
3 |
AuthorDate: Thu Apr 7 03:30:16 2022 +0000 |
4 |
Commit: Sam James <sam <AT> gentoo <DOT> org> |
5 |
CommitDate: Thu Apr 7 03:37:47 2022 +0000 |
6 |
URL: https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=092db4b1 |
7 |
|
8 |
dev-util/cmake: add verify-sig |
9 |
|
10 |
Signed-off-by: Sam James <sam <AT> gentoo.org> |
11 |
|
12 |
dev-util/cmake/Manifest | 2 ++ |
13 |
dev-util/cmake/cmake-3.23.0.ebuild | 26 ++++++++++++++++++++++++++ |
14 |
dev-util/cmake/cmake-9999.ebuild | 26 ++++++++++++++++++++++++++ |
15 |
3 files changed, 54 insertions(+) |
16 |
|
17 |
diff --git a/dev-util/cmake/Manifest b/dev-util/cmake/Manifest |
18 |
index 10e9e6b40b94..f5928f1d86b5 100644 |
19 |
--- a/dev-util/cmake/Manifest |
20 |
+++ b/dev-util/cmake/Manifest |
21 |
@@ -1,3 +1,5 @@ |
22 |
DIST cmake-3.22.2.tar.gz 9779456 BLAKE2B 5f1c76344fe2d6fba012b0d745dc990ec1ed4bf32c99beac1e538f4b83c1d695aee757d2780e635b67c0a185935a6a70b344a733259e3a91d01c4b83e94e2730 SHA512 86e95f9ce773bcc7513a1c3901561a1b09d06830936b8b1d44e075fe3bac55cfa636eccdedfa94a9939f5e12eb965224559fac30a17c64314ee023acb2a3e53f |
23 |
DIST cmake-3.22.3.tar.gz 9779118 BLAKE2B 917b722701481cb87cc282a19083ec3299d845eeb633369bf29a961d1eef8a0f1157d0000866d983c4720a9b0524b81d647b5947a06281089a0a106146df2936 SHA512 a35003468153b99770ac6bbdeaa611a231a1104560da36aca0f393b8b71dbb44d854378504d2ec6b4af615f78efe18d91453fe15a1b7ec58129aa0289a5a1507 |
24 |
+DIST cmake-3.23.0-SHA-256.txt 1452 BLAKE2B 5b57c57389ba203222297ae1fa9868062cea839707d8e14c020543e1997acd804e34d29f98848f3ef2a4c5a7fb8516f34d8544d7cfab8f90839611c62823902a SHA512 77866404fb5ab0206bc527c74599c43e465e6d32cde3149ae2a82eadddc4bf3572f4b5ed06b38abd27162890ee47e9a2dac6e649b131dd0dd29047e1a300211a |
25 |
+DIST cmake-3.23.0-SHA-256.txt.asc 833 BLAKE2B 003db47ac8f5df3eabf06cb9a8d26c809fb43b2a1aca0510ae82a2d5db5514458cf578f42cc3885dbcb1fb68e1c5b679ea01af2a3111cf5280b588ea5640145b SHA512 a42ff36ee4d93f005205fd105b999b6fbd3b8644eec7b0aa25d043b18bd4f0a249b48574f1114a532e4c43c5041e473209836a29364bee7e78e0a6dd3373dedb |
26 |
DIST cmake-3.23.0.tar.gz 9981221 BLAKE2B 280b82af7bc345926f0e8cf47bfb5d6128b3807bed5f331e6a488c00ab72940b723d83638662f5a07367d4f651d7250a8f78abfadcc8c7c66bc2195171b9879b SHA512 bcde8f2bf2fff6c4ab37a28c115b4b53d5fef0d4e38305420966cbd9f0026a4ffdcd4137f917a83458c1f380a137f7a7bd78f6fbd4d92fdcc5cf1dfbe4c02003 |
27 |
|
28 |
diff --git a/dev-util/cmake/cmake-3.23.0.ebuild b/dev-util/cmake/cmake-3.23.0.ebuild |
29 |
index 402d531d597d..5f6e6cf173e7 100644 |
30 |
--- a/dev-util/cmake/cmake-3.23.0.ebuild |
31 |
+++ b/dev-util/cmake/cmake-3.23.0.ebuild |
32 |
@@ -21,6 +21,14 @@ if [[ ${PV} == 9999 ]] ; then |
33 |
else |
34 |
SRC_URI="https://cmake.org/files/v$(ver_cut 1-2)/${MY_P}.tar.gz" |
35 |
if [[ ${PV} != *_rc* ]] ; then |
36 |
+ VERIFY_SIG_OPENPGP_KEY_PATH="${BROOT}"/usr/share/openpgp-keys/bradking.asc |
37 |
+ inherit verify-sig |
38 |
+ |
39 |
+ SRC_URI+=" verify-sig? ( |
40 |
+ https://github.com/Kitware/CMake/releases/download/v$(ver_cut 1-3)/${MY_P}-SHA-256.txt |
41 |
+ https://github.com/Kitware/CMake/releases/download/v$(ver_cut 1-3)/${MY_P}-SHA-256.txt.asc |
42 |
+ )" |
43 |
+ |
44 |
KEYWORDS="~alpha ~amd64 ~arm ~arm64 ~hppa ~ia64 ~m68k ~mips ~ppc ~ppc64 ~riscv ~s390 ~sparc ~x86 ~amd64-linux ~x86-linux ~ppc-macos ~x64-macos ~sparc-solaris ~sparc64-solaris ~x64-solaris ~x86-solaris" |
45 |
fi |
46 |
fi |
47 |
@@ -100,6 +108,24 @@ cmake_src_bootstrap() { |
48 |
|| die "Bootstrap failed" |
49 |
} |
50 |
|
51 |
+src_unpack() { |
52 |
+ if [[ ${PV} == 9999 ]] ; then |
53 |
+ git-r3_src_unpack |
54 |
+ elif ! use verify-sig || [[ ${PV} == *_rc ]] ; then |
55 |
+ default |
56 |
+ else |
57 |
+ cd "${DISTDIR}" || die |
58 |
+ |
59 |
+ # See https://mgorny.pl/articles/verify-sig-by-example.html#verifying-using-a-checksum-file-with-a-detached-signature |
60 |
+ verify-sig_verify_detached ${MY_P}-SHA-256.txt{,.asc} |
61 |
+ verify-sig_verify_unsigned_checksums ${MY_P}-SHA-256.txt sha256 cmake-3.23.0.tar.gz |
62 |
+ |
63 |
+ cd "${WORKDIR}" || die |
64 |
+ |
65 |
+ default |
66 |
+ fi |
67 |
+} |
68 |
+ |
69 |
src_prepare() { |
70 |
cmake_src_prepare |
71 |
|
72 |
|
73 |
diff --git a/dev-util/cmake/cmake-9999.ebuild b/dev-util/cmake/cmake-9999.ebuild |
74 |
index 402d531d597d..5f6e6cf173e7 100644 |
75 |
--- a/dev-util/cmake/cmake-9999.ebuild |
76 |
+++ b/dev-util/cmake/cmake-9999.ebuild |
77 |
@@ -21,6 +21,14 @@ if [[ ${PV} == 9999 ]] ; then |
78 |
else |
79 |
SRC_URI="https://cmake.org/files/v$(ver_cut 1-2)/${MY_P}.tar.gz" |
80 |
if [[ ${PV} != *_rc* ]] ; then |
81 |
+ VERIFY_SIG_OPENPGP_KEY_PATH="${BROOT}"/usr/share/openpgp-keys/bradking.asc |
82 |
+ inherit verify-sig |
83 |
+ |
84 |
+ SRC_URI+=" verify-sig? ( |
85 |
+ https://github.com/Kitware/CMake/releases/download/v$(ver_cut 1-3)/${MY_P}-SHA-256.txt |
86 |
+ https://github.com/Kitware/CMake/releases/download/v$(ver_cut 1-3)/${MY_P}-SHA-256.txt.asc |
87 |
+ )" |
88 |
+ |
89 |
KEYWORDS="~alpha ~amd64 ~arm ~arm64 ~hppa ~ia64 ~m68k ~mips ~ppc ~ppc64 ~riscv ~s390 ~sparc ~x86 ~amd64-linux ~x86-linux ~ppc-macos ~x64-macos ~sparc-solaris ~sparc64-solaris ~x64-solaris ~x86-solaris" |
90 |
fi |
91 |
fi |
92 |
@@ -100,6 +108,24 @@ cmake_src_bootstrap() { |
93 |
|| die "Bootstrap failed" |
94 |
} |
95 |
|
96 |
+src_unpack() { |
97 |
+ if [[ ${PV} == 9999 ]] ; then |
98 |
+ git-r3_src_unpack |
99 |
+ elif ! use verify-sig || [[ ${PV} == *_rc ]] ; then |
100 |
+ default |
101 |
+ else |
102 |
+ cd "${DISTDIR}" || die |
103 |
+ |
104 |
+ # See https://mgorny.pl/articles/verify-sig-by-example.html#verifying-using-a-checksum-file-with-a-detached-signature |
105 |
+ verify-sig_verify_detached ${MY_P}-SHA-256.txt{,.asc} |
106 |
+ verify-sig_verify_unsigned_checksums ${MY_P}-SHA-256.txt sha256 cmake-3.23.0.tar.gz |
107 |
+ |
108 |
+ cd "${WORKDIR}" || die |
109 |
+ |
110 |
+ default |
111 |
+ fi |
112 |
+} |
113 |
+ |
114 |
src_prepare() { |
115 |
cmake_src_prepare |