From mboxrd@z Thu Jan 1 00:00:00 1970 Delivery-date: Thu, 25 Jun 2026 21:24:23 +0200 Received: from metis.whiteo.stw.pengutronix.de ([2a0a:edc0:2:b01:1d::104]) by lore.white.stw.pengutronix.de with esmtps (TLS1.3) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (Exim 4.96) (envelope-from ) id 1wcpgV-009opS-2m for lore@lore.pengutronix.de; Thu, 25 Jun 2026 21:24:23 +0200 Received: from [127.0.0.1] (helo=metis.whiteo.stw.pengutronix.de) by metis.whiteo.stw.pengutronix.de with esmtp (Exim 4.92) (envelope-from ) id 1wcpgV-0002TI-2K; Thu, 25 Jun 2026 21:24:23 +0200 Received: from mx1.white.stw.pengutronix.de ([185.203.200.13]) by metis.whiteo.stw.pengutronix.de with esmtp (Exim 4.92) (envelope-from ) id 1wcpfu-0008K7-JD; Thu, 25 Jun 2026 21:23:49 +0200 Received: from drehscheibe.grey.stw.pengutronix.de (drehscheibe.grey.stw.pengutronix.de [IPv6:2a0a:edc0:0:c01:1d::a2]) (Authenticated sender: relay-from-drehscheibe.grey.stw.pengutronix.de) by mx1.white.stw.pengutronix.de (Postfix) with ESMTPSA id 80508200954; Thu, 25 Jun 2026 21:23:46 +0200 (CEST) Received: from dude05.red.stw.pengutronix.de ([2a0a:edc0:0:1101:1d::54]) by drehscheibe.grey.stw.pengutronix.de with esmtps (TLS1.3) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (Exim 4.96) (envelope-from ) id 1wcpfu-004daD-1R; Thu, 25 Jun 2026 21:23:46 +0200 Received: from mol by dude05.red.stw.pengutronix.de with local (Exim 4.98.2) (envelope-from ) id 1wcpfu-00000003Uk2-1fuD; Thu, 25 Jun 2026 21:23:46 +0200 From: Michael Olbrich To: ptxdist@pengutronix.de Date: Thu, 25 Jun 2026 21:23:46 +0200 Message-ID: <20260625192346.833147-1-m.olbrich@pengutronix.de> X-Mailer: git-send-email 2.47.3 In-Reply-To: <20260623141556.1127001-1-s.pueschel@pengutronix.de> References: <20260623141556.1127001-1-s.pueschel@pengutronix.de> MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit X-Spam-Checker-Version: SpamAssassin 3.4.2 (2018-09-13) on metis.whiteo.stw.pengutronix.de X-Spam-Level: X-Spam-Status: No, score=-3.6 required=4.0 tests=ALL_TRUSTED,AWL,BAYES_00 autolearn=ham autolearn_force=no version=3.4.2 Subject: Re: [ptxdist] [APPLIED] bubblewrap: new package X-BeenThere: ptxdist@pengutronix.de X-Mailman-Version: 2.1.29 Precedence: list List-Id: PTXdist Development Mailing List List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Reply-To: ptxdist@pengutronix.de Cc: =?UTF-8?q?Sven=20P=C3=BCschel?= Sender: "ptxdist" X-SA-Exim-Connect-IP: 127.0.0.1 X-SA-Exim-Mail-From: ptxdist-bounces@pengutronix.de X-SA-Exim-Scanned: No (on metis.whiteo.stw.pengutronix.de); SAEximRunCond expanded to false Thanks, applied as b67b0b96256d69254d0765f4d3c39eeddc203e00. Michael [sent from post-receive hook] On Thu, 25 Jun 2026 21:23:46 +0200, Sven Püschel wrote: > Omitted -Drequire_userns, as it's only used when setuid support is > enabled. > > Signed-off-by: Sven Püschel > Message-Id: <20260623141556.1127001-1-s.pueschel@pengutronix.de> > Signed-off-by: Michael Olbrich > > diff --git a/rules/bubblewrap.in b/rules/bubblewrap.in > new file mode 100644 > index 000000000000..f0b959a69f0b > --- /dev/null > +++ b/rules/bubblewrap.in > @@ -0,0 +1,9 @@ > +## SECTION=shell_and_console > + > +config BUBBLEWRAP > + tristate > + select HOST_MESON > + select LIBCAP > + prompt "bubblewrap" > + help > + Low-level unprivileged sandboxing tool > diff --git a/rules/bubblewrap.make b/rules/bubblewrap.make > new file mode 100644 > index 000000000000..4443866070e2 > --- /dev/null > +++ b/rules/bubblewrap.make > @@ -0,0 +1,65 @@ > +# -*-makefile-*- > +# > +# Copyright (C) 2026 by Sven Püschel > +# > +# For further information about the PTXdist project and license conditions > +# see the README file. > +# > + > +# > +# We provide this package > +# > +PACKAGES-$(PTXCONF_BUBBLEWRAP) += bubblewrap > + > +# > +# Paths and names > +# > +BUBBLEWRAP_VERSION := 0.11.2 > +BUBBLEWRAP_SHA256 := 69abc30005d2186baf7737feacd8da35633b93cf5af38838ecff17c5f8e924f6 > +BUBBLEWRAP := bubblewrap-$(BUBBLEWRAP_VERSION) > +BUBBLEWRAP_SUFFIX := tar.xz > +BUBBLEWRAP_URL := https://github.com/containers/bubblewrap/releases/download/v$(BUBBLEWRAP_VERSION)/$(BUBBLEWRAP).$(BUBBLEWRAP_SUFFIX) > +BUBBLEWRAP_SOURCE := $(SRCDIR)/$(BUBBLEWRAP).$(BUBBLEWRAP_SUFFIX) > +BUBBLEWRAP_DIR := $(BUILDDIR)/$(BUBBLEWRAP) > +BUBBLEWRAP_LICENSE := LGPL-2.0-or-later > +BUBBLEWRAP_LICENSE_FILES := \ > + file://COPYING;md5=5f30f0716dfdd0d91eb439ebec522ec2 \ > + file://bubblewrap.c;startline=3;endline=16;md5=7632ecc0582c89a5ec336efd45feeade > + > +# ---------------------------------------------------------------------------- > +# Prepare > +# ---------------------------------------------------------------------------- > + > +# > +# meson > +# > +BUBBLEWRAP_CONF_TOOL := meson > +BUBBLEWRAP_CONF_OPT := \ > + $(CROSS_MESON_USR) \ > + -Dbash_completion=disabled \ > + -Dman=disabled \ > + -Dselinux=disabled \ > + -Dsupport_setuid=false \ > + -Dtests=false \ > + -Dzsh_completion=disabled > + > +# ---------------------------------------------------------------------------- > +# Target-Install > +# ---------------------------------------------------------------------------- > + > +$(STATEDIR)/bubblewrap.targetinstall: > + @$(call targetinfo) > + > + @$(call install_init, bubblewrap) > + @$(call install_fixup, bubblewrap,PRIORITY,optional) > + @$(call install_fixup, bubblewrap,SECTION,base) > + @$(call install_fixup, bubblewrap,AUTHOR,"Sven Püschel ") > + @$(call install_fixup, bubblewrap,DESCRIPTION,Low-level unprivileged sandboxing tool) > + > + @$(call install_copy, bubblewrap, 0, 0, 0755, -, /usr/bin/bwrap) > + > + @$(call install_finish, bubblewrap) > + > + @$(call touch) > + > +# vim: syntax=make