From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from mp0 ([2001:41d0:2:4a6f::]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)) by ms11 with LMTPS id gFJQAASXT1+YTAAA0tVLHw (envelope-from ) for ; Wed, 02 Sep 2020 12:58:44 +0000 Received: from aspmx1.migadu.com ([2001:41d0:2:4a6f::]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)) by mp0 with LMTPS id UDnBNwOXT187KQAA1q6Kng (envelope-from ) for ; Wed, 02 Sep 2020 12:58:43 +0000 Received: from lists.gnu.org (lists.gnu.org [209.51.188.17]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by aspmx1.migadu.com (Postfix) with ESMTPS id 8AA529404C7 for ; Wed, 2 Sep 2020 12:58:43 +0000 (UTC) Received: from localhost ([::1]:44182 helo=lists1p.gnu.org) by lists.gnu.org with esmtp (Exim 4.90_1) (envelope-from ) id 1kDSLa-0005Nx-G9 for larch@yhetil.org; Wed, 02 Sep 2020 08:58:42 -0400 Received: from eggs.gnu.org ([2001:470:142:3::10]:36064) by lists.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1kDSKx-0003w0-8P for guix-patches@gnu.org; Wed, 02 Sep 2020 08:58:03 -0400 Received: from debbugs.gnu.org ([209.51.188.43]:47088) by eggs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_128_GCM_SHA256:128) (Exim 4.90_1) (envelope-from ) id 1kDSKw-0006sv-Un for guix-patches@gnu.org; Wed, 02 Sep 2020 08:58:02 -0400 Received: from Debian-debbugs by debbugs.gnu.org with local (Exim 4.84_2) (envelope-from ) id 1kDSKw-0005hO-Ui for guix-patches@gnu.org; Wed, 02 Sep 2020 08:58:02 -0400 X-Loop: help-debbugs@gnu.org Subject: [bug#43160] [PATCH v2 3/4] gnu: linux-libre: Validate that the cleaned up tarball is free of blobs. Resent-From: Maxim Cournoyer Original-Sender: "Debbugs-submit" Resent-CC: guix-patches@gnu.org Resent-Date: Wed, 02 Sep 2020 12:58:02 +0000 Resent-Message-ID: Resent-Sender: help-debbugs@gnu.org X-GNU-PR-Message: followup 43160 X-GNU-PR-Package: guix-patches X-GNU-PR-Keywords: patch To: 43160@debbugs.gnu.org Cc: Maxim Cournoyer Received: via spool by 43160-submit@debbugs.gnu.org id=B43160.159905145521853 (code B ref 43160); Wed, 02 Sep 2020 12:58:02 +0000 Received: (at 43160) by debbugs.gnu.org; 2 Sep 2020 12:57:35 +0000 Received: from localhost ([127.0.0.1]:58630 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1kDSKU-0005gG-W0 for submit@debbugs.gnu.org; Wed, 02 Sep 2020 08:57:35 -0400 Received: from mail-qk1-f196.google.com ([209.85.222.196]:32805) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1kDSKT-0005fh-9l for 43160@debbugs.gnu.org; Wed, 02 Sep 2020 08:57:34 -0400 Received: by mail-qk1-f196.google.com with SMTP id p4so4189582qkf.0 for <43160@debbugs.gnu.org>; Wed, 02 Sep 2020 05:57:33 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=from:to:cc:subject:date:message-id:in-reply-to:references :mime-version:content-transfer-encoding; bh=iqcYTgmCDczmSBP6e7yXP0c4RIybBrQzuVkQdoBZUOw=; b=V00Uo4iB0z2wZtvJw452Nynm0om/aWfXlmgYBBO5+0gLNgUo9eIfibM4ZEUo/0RsuP txQglYSi53uQkeC0iI5uJCBJV/Td5VTZ9ruGgrjgyIjGt+TNl/q/Pcw/KPGfZ/tUlK3C eq3YYFUCjfAjbLeKXdE4STZgFS27K1T6ZLccplOKj6O4Y2mKyNS0OoZC3r13068xctsX ZPSaYg7R96ftWqSb3UOMdABqQf1fhMfATyP9CpdstBtwqxGSgLNYuvj3n5unbx5g1fhM IEg92LRlNk9aTOmLZvbC9eFb6FHXfUTGR+bx18LX5RKxcyfHpklFFed4Yabu0FkJXpeI OcOg== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:from:to:cc:subject:date:message-id:in-reply-to :references:mime-version:content-transfer-encoding; bh=iqcYTgmCDczmSBP6e7yXP0c4RIybBrQzuVkQdoBZUOw=; b=PcxAe3qPWh/B57ECapJa1KC8oaJqcRA44mPZsEOJT4dqvuWNn5ha5ra6lTVw2gWgMj xuOee1UsJVlYZHRZkPQnVQvU6cp3u1tJbF4FTNYLNHN/vx30QA4G4PceISUSh4bePiSc 2v7VlArex4wRWRcOokVyOGfcEUyXm7y+6AHb3lGfQLrpTQaPLxRwzWv5r36cbOzXBaPU 5EDcQPTGAExDidh1HLKbpxaGcV1Z3w2nd6/7heeg7GJzOGgHjd4mjf7cGCz1AvYc+LTf /4buo60ejnVA5lOog+eZIMOyC+tJ9FC7YC7edEATxre6sJlSS66pI96yC8WnRLTOFHAj ygCA== X-Gm-Message-State: AOAM531XFhEEX1wD/+nLBGey7lQulaFRvBh+MP9zwYv/v944wz2tNvXh 0c+6NIOYytGHAdVd/2r67hzhFoIlAGMWGg== X-Google-Smtp-Source: ABdhPJyz948oGb66aP+kzIEZ8cYGuwrPvOfh05zwxnkvYTXrkG+8wqU+UTXRndVozuQoT3tLTU3X+Q== X-Received: by 2002:a37:814:: with SMTP id 20mr847853qki.142.1599051447592; Wed, 02 Sep 2020 05:57:27 -0700 (PDT) Received: from localhost.localdomain (dsl-10-133-254.b2b2c.ca. [72.10.133.254]) by smtp.gmail.com with ESMTPSA id x6sm4712553qke.54.2020.09.02.05.57.26 (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Wed, 02 Sep 2020 05:57:26 -0700 (PDT) From: Maxim Cournoyer Date: Wed, 2 Sep 2020 08:56:42 -0400 Message-Id: <20200902125643.27201-3-maxim.cournoyer@gmail.com> X-Mailer: git-send-email 2.27.0 In-Reply-To: <20200902125643.27201-1-maxim.cournoyer@gmail.com> References: <20200902125643.27201-1-maxim.cournoyer@gmail.com> MIME-Version: 1.0 Content-Type: text/plain; charset=yes Content-Transfer-Encoding: 8bit X-Spam-Score: 0.0 (/) X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list X-Spam-Score: -1.0 (-) X-BeenThere: guix-patches@gnu.org List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: guix-patches-bounces+larch=yhetil.org@gnu.org Sender: "Guix-patches" X-Scanner: scn0 Authentication-Results: aspmx1.migadu.com; dkim=fail (body hash did not verify) header.d=gmail.com header.s=20161025 header.b=V00Uo4iB; dmarc=fail reason="SPF not aligned (relaxed)" header.from=gmail.com (policy=none); spf=pass (aspmx1.migadu.com: domain of guix-patches-bounces@gnu.org designates 209.51.188.17 as permitted sender) smtp.mailfrom=guix-patches-bounces@gnu.org X-Spam-Score: 0.09 X-TUID: cWeIOm1LlagP * gnu/packages/linux.scm (make-linux-libre-source): Call the deblob-check script on the generated tarball archive with the --use-awk and --list-blobs options. --- gnu/packages/linux.scm | 9 ++++++++- 1 file changed, 8 insertions(+), 1 deletion(-) diff --git a/gnu/packages/linux.scm b/gnu/packages/linux.scm index 1b923f0c0a..e177386312 100644 --- a/gnu/packages/linux.scm +++ b/gnu/packages/linux.scm @@ -48,6 +48,7 @@ ;;; Copyright © 2020 John Soo ;;; Copyright © 2020 Michael Rohleder ;;; Copyright © 2020 Anders Thuné +;;; Copyright © 2020 Maxim Cournoyer ;;; ;;; This file is part of GNU Guix. ;;; @@ -90,6 +91,7 @@ #:use-module (gnu packages flex) #:use-module (gnu packages file) #:use-module (gnu packages freedesktop) + #:use-module (gnu packages gawk) #:use-module (gnu packages gcc) #:use-module (gnu packages gettext) #:use-module (gnu packages glib) @@ -299,6 +301,7 @@ corresponding UPSTREAM-SOURCE (an origin), using the given DEBLOB-SCRIPTS." #+(canonical-package bzip2) #+(canonical-package gzip) #+(canonical-package tar) + #+(canonical-package gawk) #+python-wrapper)) (with-directory-excursion "/tmp/bin" @@ -345,7 +348,11 @@ corresponding UPSTREAM-SOURCE (an origin), using the given DEBLOB-SCRIPTS." "--group=root:0" "--sort=name" "--hard-dereference" - dir)))))))))) + dir) + + (format #t "~%Scanning the generated tarball for blobs...~%") + (invoke "/tmp/bin/deblob-check" "--use-awk" "--list-blobs" + #$output)))))))))) ;;; -- 2.27.0