Initial version of verity-squash-root

2 files changed, 64 insertions, 0 deletions

diff --git a/.SRCINFO b/.SRCINFO
new file mode 100644
index 000000000000..36a5e9334056
--- /dev/null
+++ b/.SRCINFO
@@ -0,0 +1,26 @@
+pkgbase = verity-squash-root
+	pkgdesc = Build signed efi files which mount a verified squashfs image as rootfs on boot
+	pkgver = 0.1.0
+	pkgrel = 1
+	url = https://github.com/brandsimon/verity-squash-root/
+	arch = any
+	license = MIT
+	checkdepends = flake8
+	checkdepends = mypy
+	checkdepends = shellcheck
+	makedepends = python-build
+	makedepends = python-installer
+	makedepends = python-setuptools
+	makedepends = python-wheel
+	depends = python
+	depends = efitools
+	depends = binutils
+	depends = sbsigntools
+	depends = squashfs-tools
+	depends = tar
+	optdepends = age: for encrypted secure boot keys
+	backup = etc/verity_squash_root/config.ini
+	source = verity-squash-root-0.1.0.tar.gz::https://github.com/brandsimon/verity-squash-root/archive/refs/tags/0.1.0.tar.gz
+	sha256sums = de2508ad8267d2de2ab272f4e8d823760e33e07a90ae09eb33bc458226ef8835
+
+pkgname = verity-squash-root
diff --git a/PKGBUILD b/PKGBUILD
new file mode 100644
index 000000000000..7ff3bbd048f5
--- /dev/null
+++ b/PKGBUILD
@@ -0,0 +1,38 @@
+# Maintainer: Simon Brand <simon.brand@postadigitale.de>
+
+pkgname=verity-squash-root
+pkgver=0.1.0
+pkgrel=1
+pkgdesc='Build signed efi files which mount a verified squashfs image as rootfs on boot'
+arch=(any)
+url='https://github.com/brandsimon/verity-squash-root/'
+license=(MIT)
+depends=(python binutils efitools sbsigntools squashfs-tools tar)
+makedepends=(python-build python-installer python-setuptools python-wheel)
+checkdepends=(shellcheck mypy flake8)
+checkdepends=(flake8 mypy shellcheck)
+optdepends=('age: for encrypted secure boot keys')
+backup=(etc/verity_squash_root/config.ini)
+source=("${pkgname}-${pkgver}.tar.gz::https://github.com/brandsimon/verity-squash-root/archive/refs/tags/${pkgver}.tar.gz")
+sha256sums=('16331436761e09257a5cec8dc3e66ffc57e197ea26ec8b509b2d994dfafbd9a1')
+
+build() {
+  cd "${pkgname}-${pkgver}"
+  python -m build --wheel --no-isolation
+}
+
+check() {
+  cd "${pkgname}-${pkgver}"
+  flake8 src/ tests/ setup.py
+  mypy src
+  shellcheck usr/lib/initcpio/install/verity-squash-root usr/lib/verity-squash-root/*
+}
+
+package() {
+  cd "${pkgname}-${pkgver}"
+  python -m installer --destdir="${pkgdir}" dist/*.whl
+  mkdir -p "${pkgdir}/usr/lib/" "${pkgdir}/usr/share/verity_squash_root/" "${pkgdir}/etc/verity_squash_root/"
+  cp -r usr/lib/* "${pkgdir}/usr/lib/"
+  cp src/verity_squash_root/default_config.ini "${pkgdir}/usr/share/verity_squash_root/default.ini"
+  cp src/verity_squash_root/default_config.ini "${pkgdir}/etc/verity_squash_root/config.ini"
+}