[gentoo-commits] proj/portage:master commit in: cnf/sets/

[gentoo-commits] proj/portage:master commit in: cnf/sets/

[Zac Medico]

commit:     075c1951e1ac84e99a2219ff14be4a366d274f36
Author:     Georgy Yakovlev <gyakovlev <AT> gentoo <DOT> org>
AuthorDate: Fri Oct 16 19:43:54 2020 +0000
Commit:     Zac Medico <zmedico <AT> gentoo <DOT> org>
CommitDate: Sun Nov  1 21:11:09 2020 +0000
URL:        https://gitweb.gentoo.org/proj/portage.git/commit/?id=075c1951

cnf/sets/portage.conf: add new sets for go rebuilding go packages

go-built binaries may contain security
vulnerabilities if a binary built with vulnerable compiler.
go is known to embed vulnerable code to all binaries it builds, if
vulnerability was present in the compiler or one of standard libraries.

This commit adds `golang-rebuild` set, which allows easy
rebuild of most go-compiled system packages.

simple 'emerge @golang-rebuild' should rebuild everything affected.
a prompt to run this command can be added to postinst message in
dev-lang/go ebuild.

Closes: https://github.com/gentoo/portage/pull/630
Bug: https://bugs.gentoo.org/752153
Signed-off-by: Georgy Yakovlev <gyakovlev <AT> gentoo.org>
Signed-off-by: Zac Medico <zmedico <AT> gentoo.org>

 cnf/sets/portage.conf | 6 ++++++
 1 file changed, 6 insertions(+)

diff --git a/cnf/sets/portage.conf b/cnf/sets/portage.conf
index 0d11d7891..22f0fa3a5 100644
--- a/cnf/sets/portage.conf
+++ b/cnf/sets/portage.conf
@@ -103,3 +103,9 @@ class = portage.sets.dbapi.UnavailableBinaries
 # to the matching portdb entry.
 [changed-deps]
 class = portage.sets.dbapi.ChangedDepsSet
+
+# Installed packages that inherit from known go related eclasses.
+[golang-rebuild]
+class = portage.sets.dbapi.VariableSet
+variable = INHERITED
+includes = golang-base golang-build golang-vcs golang-vcs-snapshot go-module

[gentoo-commits] proj/portage:master commit in: cnf/sets/

[Sam James]

commit:     38c479d46dc91be66877d857a3682534eb1b5f12
Author:     Sam James <sam <AT> gentoo <DOT> org>
AuthorDate: Sat Sep 10 06:22:44 2022 +0000
Commit:     Sam James <sam <AT> gentoo <DOT> org>
CommitDate: Wed Sep 28 23:56:08 2022 +0000
URL:        https://gitweb.gentoo.org/proj/portage.git/commit/?id=38c479d4

cnf: sets: convert @golang-rebuild into VariableSet

This allows rebuilding *all* Go packages
correctly, rather than purely going off
inherit.

There's a few reasons to do this:
1. Even if (and it's a big if) we suppose that
all Go packages should inherit a Go eclass,
there will be packages in user repositories
which don't do that;

2. Eclasses are, by their nature,
repository-specific. This solution
is a generic approach independent
of the eclass layout in ::gentoo.

Bug: https://bugs.gentoo.org/827974
Bug: https://bugs.gentoo.org/865115
Signed-off-by: Sam James <sam <AT> gentoo.org>
Closes: https://github.com/gentoo/portage/pull/898
Signed-off-by: Sam James <sam <AT> gentoo.org>

 cnf/sets/portage.conf | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/cnf/sets/portage.conf b/cnf/sets/portage.conf
index c4ad2efca..3738f147d 100644
--- a/cnf/sets/portage.conf
+++ b/cnf/sets/portage.conf
@@ -110,8 +110,8 @@ class = portage.sets.dbapi.UnavailableBinaries
 [changed-deps]
 class = portage.sets.dbapi.ChangedDepsSet
 
-# Installed packages that inherit from known go related eclasses.
+# Installed packages for which vdb *DEPEND includes dev-lang/go.
 [golang-rebuild]
 class = portage.sets.dbapi.VariableSet
-variable = INHERITED
-includes = golang-base golang-build golang-vcs golang-vcs-snapshot go-module
+variable = BDEPEND
+includes = dev-lang/go

[gentoo-commits] proj/portage:master commit in: cnf/sets/

[Sam James]

commit:     f034ac4a678a6da8d854f82a52d4fe523bf6cb8f
Author:     Sam James <sam <AT> gentoo <DOT> org>
AuthorDate: Thu Sep 29 02:37:14 2022 +0000
Commit:     Sam James <sam <AT> gentoo <DOT> org>
CommitDate: Fri Sep 30 20:35:00 2022 +0000
URL:        https://gitweb.gentoo.org/proj/portage.git/commit/?id=f034ac4a

cnf: sets: add @rust-rebuild set

Rust is statically linked like Go and this is useful for us
to mention in GLSAs (and possibly dev-lang/rust{,-bin}'s pkg_postinst).

Bug: https://bugs.gentoo.org/827974
Bug: https://bugs.gentoo.org/865115
Signed-off-by: Sam James <sam <AT> gentoo.org>
Closes: https://github.com/gentoo/portage/pull/915
Signed-off-by: Sam James <sam <AT> gentoo.org>

 cnf/sets/portage.conf | 6 ++++++
 1 file changed, 6 insertions(+)

diff --git a/cnf/sets/portage.conf b/cnf/sets/portage.conf
index 3738f147d..2e02f91f9 100644
--- a/cnf/sets/portage.conf
+++ b/cnf/sets/portage.conf
@@ -115,3 +115,9 @@ class = portage.sets.dbapi.ChangedDepsSet
 class = portage.sets.dbapi.VariableSet
 variable = BDEPEND
 includes = dev-lang/go
+
+# Installed packages for which vdb *DEPEND includes virtual/rust
+[rust-rebuild]
+class = portage.sets.dbapi.VariableSet
+variable = BDEPEND
+includes = virtual/rust

[gentoo-commits] proj/portage:master commit in: cnf/sets/

[Mike Gilbert]

commit:     c990345eb83cba8e1606f643b19b99520e54e06c
Author:     Eli Schwartz <eschwartz <AT> gentoo <DOT> org>
AuthorDate: Mon Nov 11 21:15:24 2024 +0000
Commit:     Mike Gilbert <floppym <AT> gentoo <DOT> org>
CommitDate: Mon Nov 18 16:48:57 2024 +0000
URL:        https://gitweb.gentoo.org/proj/portage.git/commit/?id=c990345e

update set for "rust-rebuild" to adapt to changes in gentoo

The virtual package is deprecated and we use an eclass to depend on an
any-of group for the relevant rust compilers. This set no longer does
anything without an update.

Start checking BDEPEND for the specific rust compilers. Also keep
checking for the virtual, so that "rust-rebuild" reports on packages
that have not, in fact, been rebuilt yet.

Bug: https://bugs.gentoo.org/906044
Closes: https://github.com/gentoo/portage/pull/1399
Signed-off-by: Eli Schwartz <eschwartz <AT> gentoo.org>
Signed-off-by: Mike Gilbert <floppym <AT> gentoo.org>

 cnf/sets/portage.conf | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/cnf/sets/portage.conf b/cnf/sets/portage.conf
index c272f98db1..fd78364c74 100644
--- a/cnf/sets/portage.conf
+++ b/cnf/sets/portage.conf
@@ -110,8 +110,8 @@ class = portage.sets.dbapi.UnavailableBinaries
 [changed-deps]
 class = portage.sets.dbapi.ChangedDepsSet
 
-# Installed packages for which vdb *DEPEND includes virtual/rust
+# Installed packages for which vdb *DEPEND includes rust
 [rust-rebuild]
 class = portage.sets.dbapi.VariableSet
 variable = BDEPEND
-includes = virtual/rust
+includes = dev-lang/rust dev-lang/rust-bin virtual/rust