soubarnak
c462ffb4b2
Ticket: #25 Two in-repo void-packages-layout templates under packaging/void/srcpkgs: python3-pynput 1.8.2 (new; Void does not ship it) and python3-PyAudio 0.2.14 (updated local template; Void ships 0.2.12, below the project's pyaudio>=0.2.13 floor). Versions and checksums track uv.lock and requirements/runtime.txt; pynput post_patch strips setup_requires so the build never fetches helpers over the network (setuptools-lint and twine are not in void-packages). No noverifypydeps/nopyprovides anywhere. Adds tests/test_void_small_deps.py (offline policy test): template layout and metadata shape, lock/export/floor pins, checksum pins, no verification-disabling options, linux dep coverage, verified-only dependency names, and the digest-pinned base image in packaging/void/tool_checksums.txt. Verified: xlint clean on both templates; both packages build with xbps-src in the pinned ghcr.io/void-linux/void-glibc-full container (podman) and install in a fresh container with pyaudio 0.2.14 importing against PortAudio V19.6.0.
17 lines
857 B
Plaintext
17 lines
857 B
Plaintext
# Pinned build inputs for packaging/void (ticket #25: small Python dependency templates).
|
|
#
|
|
# Same contract as packaging/appimage/tool_checksums.txt and
|
|
# packaging/native/tool_checksums.txt: everything the template builds verify
|
|
# against is pinned here, so two builds of the same commit cannot differ.
|
|
#
|
|
# Columns: name, kind, value, source — parseable by awk.
|
|
#
|
|
# docker build inside image <value>; <source> records the tag it came from
|
|
#
|
|
# To bump the base image: replace the digest in <value> with the index digest
|
|
# from `podman manifest inspect ghcr.io/void-linux/void-glibc-full:latest`
|
|
# (use the index digest, not a per-architecture one — the same line has to
|
|
# work on x86_64 and aarch64).
|
|
|
|
base-image docker ghcr.io/void-linux/void-glibc-full@sha256:e98f8cdde9e6ca85f8542fad5cdd06032a05dca3bf2b81757949bb24d67afa37 latest
|