glibc.yaml

package:
  name: glibc
  version: 2.36
  epoch: 2
  description: "the GNU C library"
  target-architecture:
    - all
  copyright:
    - paths:
      - "*"
      attestation: TODO
      license: GPL-3.0-or-later
  dependencies:
    runtime:
      - wolfi-baselayout
      - '!musl'
  scriptlets:
    trigger:
      paths:
        - /lib
        - /lib64
        - /usr/lib
        - /usr/lib64
      script: |
        #!/bin/busybox sh
        /sbin/ldconfig

secfixes:
  2.36-r1:
    - CVE-2022-39046

environment:
  contents:
    repositories:
      - https://packages.wolfi.dev/bootstrap/stage3
    keyring:
      - https://packages.wolfi.dev/bootstrap/stage3/wolfi-signing.rsa.pub
    packages:
      - wolfi-baselayout
      - busybox
      - build-base
      - ca-certificates-bundle
      - texinfo
      - zlib
      - gawk
      - bison
      - flex
      - grep
      - python3

pipeline:
  - uses: fetch
    with:
      uri: http://ftp.gnu.org/gnu/libc/glibc-${{package.version}}.tar.xz
      expected-sha256: 1c959fea240906226062cb4b1e7ebce71a9f0e3c0836c09e7e3423d434fcfe75
  - uses: patch
    with:
      patches: CVE-2022-39046.patch
  - uses: patch
    with:
      patches: CVE-2022-39046-fix.patch
  - name: 'Set up build directory'
    runs: |
      mkdir build
  - name: 'Configure glibc'
    runs: |
      cd build
      ../configure \
        --prefix=/usr \
        --libdir=/usr/lib \
        --datadir=/usr/share \
        --includedir=/usr/include \
        --host=$(uname -m)-pc-linux-gnu \
        --build=$(../config.guess) \
        --disable-werror \
        --enable-kernel=4.9
  - runs: |
      make -C build -j$(nproc)
  - runs: |
      make -C build -j$(nproc) install DESTDIR="${{targets.destdir}}"
  - name: "Set up ldconfig"
    runs: |
      cp vendor/ld.so.conf "${{targets.destdir}}"/etc/ld.so.conf
  - name: 'Clean up documentation'
    runs: |
      rm -rf ${{targets.destdir}}/usr/share/info
  - uses: strip

subpackages:
  - name: "glibc-dev"
    description: "GLIBC development headers"
    pipeline:
      - uses: split/dev
      - runs: |
          mkdir -p "${{targets.subpkgdir}}"/usr/lib
          mv "${{targets.destdir}}"/usr/lib/libc.so "${{targets.subpkgdir}}"/usr/lib/
          mv "${{targets.destdir}}"/usr/lib/libm.so "${{targets.subpkgdir}}"/usr/lib/

    dependencies:
      runtime:
        - linux-headers

  - name: "glibc-iconv"
    description: "GLIBC iconv tables"
    pipeline:
      - runs: |
          mkdir -p "${{targets.subpkgdir}}"/usr/lib
          mv "${{targets.destdir}}"/usr/lib/gconv "${{targets.subpkgdir}}"/usr/lib/

          mkdir -p "${{targets.subpkgdir}}"/usr/sbin
          mv "${{targets.destdir}}"/usr/sbin/iconvconfig "${{targets.subpkgdir}}"/usr/sbin

  - name: "glibc-locales"
    description: "GLIBC locale data"
    pipeline:
      - uses: split/locales
      - runs: |
          mkdir -p "${{targets.subpkgdir}}"/usr/share
          mv "${{targets.destdir}}"/usr/share/i18n "${{targets.subpkgdir}}"/usr/share/i18n

  - name: "tzutils"
    description: "Timezone utilities"
    pipeline:
      - runs: |
          mkdir -p "${{targets.subpkgdir}}"/usr/bin
          mkdir -p "${{targets.subpkgdir}}"/usr/sbin

          mv "${{targets.destdir}}"/usr/bin/tzselect "${{targets.subpkgdir}}"/usr/bin
          mv "${{targets.destdir}}"/usr/bin/zdump "${{targets.subpkgdir}}"/usr/bin
          mv "${{targets.destdir}}"/usr/sbin/zic "${{targets.subpkgdir}}"/usr/sbin

  - name: "posix-libc-utils"
    description: "POSIX XCU utilities included with the C library"
    pipeline:
      - runs: |
          mkdir -p "${{targets.subpkgdir}}"/usr/bin
          mv "${{targets.destdir}}"/usr/bin/gencat "${{targets.subpkgdir}}"/usr/bin
          mv "${{targets.destdir}}"/usr/bin/getconf "${{targets.subpkgdir}}"/usr/bin
          mv "${{targets.destdir}}"/usr/bin/getent "${{targets.subpkgdir}}"/usr/bin
          mv "${{targets.destdir}}"/usr/bin/iconv "${{targets.subpkgdir}}"/usr/bin
          mv "${{targets.destdir}}"/usr/bin/ldd "${{targets.subpkgdir}}"/usr/bin
          mv "${{targets.destdir}}"/usr/bin/locale "${{targets.subpkgdir}}"/usr/bin
          mv "${{targets.destdir}}"/usr/bin/pldd "${{targets.subpkgdir}}"/usr/bin
          mv "${{targets.destdir}}"/usr/libexec "${{targets.subpkgdir}}"/usr

  - name: "localedef"
    description: "Tool for defining GLIBC locales"
    pipeline:
      - runs: |
          mkdir -p "${{targets.subpkgdir}}"/usr/bin
          mv "${{targets.destdir}}"/usr/bin/localedef "${{targets.subpkgdir}}"/usr/bin

  - name: "sotruss"
    description: "Shared object tracing tool"
    pipeline:
      - runs: |
          mkdir -p "${{targets.subpkgdir}}"/usr/lib/audit
          mkdir -p "${{targets.subpkgdir}}"/usr/bin

          mv "${{targets.destdir}}"/usr/bin/sotruss "${{targets.subpkgdir}}"/usr/bin
          mv "${{targets.destdir}}"/usr/lib/audit/* "${{targets.subpkgdir}}"/usr/lib/audit/

  - name: "nscd"
    description: "NSS caching daemon"
    pipeline:
      - runs: |
          mkdir -p "${{targets.subpkgdir}}"/usr/sbin
          mv "${{targets.destdir}}"/usr/sbin/nscd "${{targets.subpkgdir}}"/usr/sbin/

  - name: "nss-db"
    description: "NSS module for database lookups"
    pipeline:
       - runs: |
           mkdir -p "${{targets.subpkgdir}}"/usr/bin
           mkdir -p "${{targets.subpkgdir}}"/lib64
           mkdir -p "${{targets.subpkgdir}}"/var

           mv "${{targets.destdir}}"/usr/bin/makedb "${{targets.subpkgdir}}"/usr/bin
           mv "${{targets.destdir}}"/lib64/libnss_db.so.2 "${{targets.subpkgdir}}"/lib64
           mv "${{targets.destdir}}"/var/db "${{targets.subpkgdir}}"/var

  - name: "nss-hesiod"
    description: "NSS module for hesiod lookups"
    pipeline:
      - runs: |
           mkdir -p "${{targets.subpkgdir}}"/lib64
           mv "${{targets.destdir}}"/lib64/libnss_hesiod.so.2 "${{targets.subpkgdir}}"/lib64

  - name: "pcprofiledump"
    description: "PC profiling tool"
    pipeline:
      - runs: |
           mkdir -p "${{targets.subpkgdir}}"/lib64
           mv "${{targets.destdir}}"/lib64/libpcprofile.so "${{targets.subpkgdir}}"/lib64

           mkdir -p "${{targets.subpkgdir}}"/usr/bin
           mv "${{targets.destdir}}"/usr/bin/pcprofiledump "${{targets.subpkgdir}}"/usr/bin

  - name: "glibc-tracing"
    description: "GLIBC tracing and profiling utilities"
    pipeline:
      - runs: |
          mkdir -p "${{targets.subpkgdir}}"/usr/bin
          mv "${{targets.destdir}}"/usr/bin/mtrace "${{targets.subpkgdir}}"/usr/bin
          mv "${{targets.destdir}}"/usr/bin/xtrace "${{targets.subpkgdir}}"/usr/bin
          mv "${{targets.destdir}}"/usr/bin/sprof "${{targets.subpkgdir}}"/usr/bin

  - name: "sln"
    description: "Staticly-linked symbolic link tool"
    pipeline:
      - runs: |
          mkdir -p "${{targets.subpkgdir}}"/sbin
          mv "${{targets.destdir}}"/sbin/sln "${{targets.subpkgdir}}"/sbin