Not dropping the last 0.22 since its the version before slop got
introduced, too bad it also isn't MIT still but oh well.
Signed-off-by: zyxhere💭 <zyx@envs.net>
Doesn't pycargoebuild bump these automatically these days?
Should have checked myself after noticing that this update
didn't bump RUST_MIN_VER.
Closes: https://bugs.gentoo.org/983752
Signed-off-by: zyxhere💭 <zyx@envs.net>
The crate tarball was made using:
- first patched the webp crate like in commit 93fcc8668b
- then unpacked them all to cargo_home
- ran tar -cJvf zola-0.23.6-vendor.tar.xz cargo_home
- rsynced to the server I have a user account in
Signed-off-by: zyxhere💭 <zyx@envs.net>
Say it with me: the pidfile and its parent directories should
only be writable by root unless you use supervise-daemon ;)
With `checkpath -o someuser:someuser $pidfile` in start_pre(), it can
cause DOS attacks because the now unprivelaged process can replace the
pidfile with some other pid number in it like pid 1 and cause the host
machine to crash when the daemon finally stops. Supervise-daemon can
supervise without the daemon creating a pidfile so don't export the
variable at all.
That assumes the scripts *are* using supervise-daemon, if
supervise-daemon fails to start (due to maybe some incorrect config
option *wink wink*) then OpenRC falls back to the older
start-stop-daemon and that *does* use the $pidfile. If thats the case
then the daemon will simply fail to start (yes I haven't tested if any
these packages work without $pidfile which they should since they are
specifying `supervisor=supervise-daemon`).
IMO failing to start is better than running in a potentially vulnerable
configuration.
Merges: https://codeberg.org/gentoo/guru/pulls/92
Part-off: https://codeberg.org/gentoo/guru/pulls/92
Signed-off-by: zyxhere💭 <zyx@envs.net>
I haven't been able to test them because:
- In (unprivileged) bubblewrap container setuid binaries
(fuse3) get disabled[1]
- Inside a normal chroot bubblewrap can't run[2]
(which these packages use)
- Inside bubblewrap running as root the bwrap that buildbox
invokes for some reason doesn't get permissions to make
use of user-namespaces (even tho I can make nested bwrap container
via `bwrap --bind /somerootfs / --dev /dev --proc /proc bash`)
- Inside a lxc container is the same story as above
The only real way to test (for me) is to install on host BUT
buildbox doesn't compile on musl libc (which I'm using) and
I can't report that to them because they use gitlab and for
making an account there you need to give them a credit card :s
[1]: https://github.com/containers/bubblewrap/issues/132
[2]: https://github.com/containers/bubblewrap/issues/689#issuecomment-2940775396
Signed-off-by: zyxhere💭 <zyx@envs.net>
Otherwise pyroaring (the only reverse dependency) fails to #include:
fatal error: roaring.h: No such file or directory
``````
Part-off: https://codeberg.org/gentoo/guru/pulls/17
Signed-off-by: zyxhere💭 <zyx@envs.net>
Otherwise LTO also gets disabled and upstream wants LTO as it
decreases binary size (45M -> 38M). Though LTO also
substantially increases build times due to `codegen-units=1`
Signed-off-by: zyxhere💭 <zyx@envs.net>
- Upstream's Cargo.lock has a very old version of libwebp-sys because of
webp[1] crate. Update with `cargo_update_crates` and enable dynamic linking
or else builds might fail[2].
- Upstream disables indexing cjk support by default to reduce the binary size
(40M vs 116M) for their releases.
- pkg-config needed by oniguruma:
```
error: failed to run custom build command for `onig_sys v69.9.1`
...
Unable to find oniguruma in pkg-config, and RUSTONIG_SYSTEM_LIBONIG is set:
Could not run `PKG_CONFIG_ALLOW_SYSTEM_LIBS=1 \
PKG_CONFIG_ALLOW_SYSTEM_CFLAGS=1 pkg-config --libs --cflags oniguruma 'oniguruma >= 6.9.3'`
The pkg-config command could not be found.
```
- pkg-config also needed with the updated libwebp-sys (old versions don't):
[1]: https://github.com/jaredforth/webp/issues/50
[2]: https://bugs.gentoo.org/947693#c16
Signed-off-by: zyxhere💭 <zyx@envs.net>
From README.md
```
This project contains code under multiple licenses.
Code introduced after version 0.22 is licensed under the EUPL-1.2. Code that
existed prior to commit 3c9131db0d203640b6d5619ca1f75ce1e0d49d8f remains
licensed under the MIT License, including in later versions of the project.
```
Signed-off-by: zyxhere💭 <zyx@envs.net>
This reverts commit 3891e28773.
Only the ebuild got major changes not the package itself (and `::guru` doesn't
get stable keywords anyways).
Thanks-to: David Roman <davidroman96@gmail.com>
Signed-off-by: zyxhere💭 <zyx@envs.net>
This reverts commit e4d9518bfa.
Should probably be communicated that the same LICENSE is found in one of the
crates too, bit confusing but oh well.
Signed-off-by: zyxhere💭 <zyx@envs.net>
zyxhere💭