summaryrefslogtreecommitdiff
path: root/gnu/packages/networking.scm
diff options
context:
space:
mode:
authorAndrew Tropin <andrew@trop.in>2024-09-05 10:24:08 +0400
committerAndrew Tropin <andrew@trop.in>2024-09-05 10:28:45 +0400
commitb0e224566f2ca6b8d375c89f8d023e1b836f31e4 (patch)
tree20ebf8bab344b9a17dc0f81ade015edf5f0cc9c2 /gnu/packages/networking.scm
parent0b95de9b3bad19da20cb034ca2bc245c2b48cf00 (diff)
gnu: libcamera: Disable signature verification.
Signature verification breaks, when libcamera is grafted. Running built-in libcamera modules via proxy is not recommended by upstream and not always work. We control the build process of all libcamera modules, so to workaround the issue we disable signature verification. For more information see: <https://issues.guix.gnu.org/72828> * gnu/packages/patches/libcamera-ipa_manager-disable-signature-verification.patch: New file. * gnu/local.mk (dist_patch_DATA): Adjust accordingly. * gnu/packages/networking.scm (libcamera): Disable signature verification. [inputs]: Remove gnutls and openssl. [arguments]: Remove re-sign-binaries phase. [source]: Add disable-signature patch. Change-Id: Icf422553c0f49b28d7997a1e818a4b8d9a6b5732
Diffstat (limited to 'gnu/packages/networking.scm')
-rw-r--r--gnu/packages/networking.scm20
1 files changed, 3 insertions, 17 deletions
diff --git a/gnu/packages/networking.scm b/gnu/packages/networking.scm
index 9facbae82d7..11e92b919fe 100644
--- a/gnu/packages/networking.scm
+++ b/gnu/packages/networking.scm
@@ -382,6 +382,8 @@ them in order to efficiently transfer a minimal amount of data.")
382 (git-reference 382 (git-reference
383 (url "https://git.libcamera.org/libcamera/libcamera.git") 383 (url "https://git.libcamera.org/libcamera/libcamera.git")
384 (commit (string-append "v" version)))) 384 (commit (string-append "v" version))))
385 (patches (search-patches
386 "libcamera-ipa_manager-disable-signature-verification.patch"))
385 (file-name 387 (file-name
386 (git-file-name name version)) 388 (git-file-name name version))
387 (sha256 389 (sha256
@@ -431,21 +433,7 @@ them in order to efficiently transfer a minimal amount of data.")
431 (mkdir-p (string-append gst "/lib")) 433 (mkdir-p (string-append gst "/lib"))
432 (rename-file 434 (rename-file
433 (string-append out "/lib/gstreamer-1.0") 435 (string-append out "/lib/gstreamer-1.0")
434 (string-append gst "/lib/gstreamer-1.0"))))) 436 (string-append gst "/lib/gstreamer-1.0"))))))))
435 (add-after 'shrink-runpath 're-sign-binaries
436 (lambda* (#:key outputs #:allow-other-keys)
437 "Update signatures of all ipa libraries.
438
439After stipping phases signatures are not valid anymore, so it's necessary to
440re-sign."
441 (let* ((out (assoc-ref outputs "out")))
442 (for-each
443 (lambda (file)
444 (invoke
445 "source/src/ipa/ipa-sign.sh" "src/ipa-priv-key.pem"
446 file (string-append file ".sign")))
447 (find-files
448 (string-append out "/lib/libcamera") "\\.so$"))))))))
449 (native-inputs 437 (native-inputs
450 (list googletest 438 (list googletest
451 graphviz ;for 'dot' 439 graphviz ;for 'dot'
@@ -458,11 +446,9 @@ re-sign."
458 (list eudev 446 (list eudev
459 glib 447 glib
460 gst-plugins-base 448 gst-plugins-base
461 gnutls
462 libevent 449 libevent
463 libtiff 450 libtiff
464 libyaml 451 libyaml
465 openssl
466 python-jinja2 452 python-jinja2
467 python-ply 453 python-ply
468 qtbase)) 454 qtbase))