gnu: linux-libre: Validate that the cleaned up tarball is free of blobs.

* gnu/packages/linux.scm (make-linux-libre-source): Call the deblob-check
script on the generated tarball archive with the --use-awk and --list-blobs
options.
This commit is contained in:
Maxim Cournoyer 2020-09-01 16:28:22 -04:00
parent 8b41fdaf3f
commit 957f4e4c22
No known key found for this signature in database
GPG key ID: 1260E46482E63562

View file

@ -48,6 +48,7 @@
;;; Copyright © 2020 John Soo <jsoo1@asu.edu> ;;; Copyright © 2020 John Soo <jsoo1@asu.edu>
;;; Copyright © 2020 Michael Rohleder <mike@rohleder.de> ;;; Copyright © 2020 Michael Rohleder <mike@rohleder.de>
;;; Copyright © 2020 Anders Thuné <asse.97@gmail.com> ;;; Copyright © 2020 Anders Thuné <asse.97@gmail.com>
;;; Copyright © 2020 Maxim Cournoyer <maxim.cournoyer@gmail.com>
;;; ;;;
;;; This file is part of GNU Guix. ;;; This file is part of GNU Guix.
;;; ;;;
@ -90,6 +91,7 @@ (define-module (gnu packages linux)
#:use-module (gnu packages flex) #:use-module (gnu packages flex)
#:use-module (gnu packages file) #:use-module (gnu packages file)
#:use-module (gnu packages freedesktop) #:use-module (gnu packages freedesktop)
#:use-module (gnu packages gawk)
#:use-module (gnu packages gcc) #:use-module (gnu packages gcc)
#:use-module (gnu packages gettext) #:use-module (gnu packages gettext)
#:use-module (gnu packages glib) #:use-module (gnu packages glib)
@ -299,6 +301,7 @@ (define (make-linux-libre-source version
#+(canonical-package bzip2) #+(canonical-package bzip2)
#+(canonical-package gzip) #+(canonical-package gzip)
#+(canonical-package tar) #+(canonical-package tar)
#+(canonical-package gawk)
#+python-wrapper)) #+python-wrapper))
(with-directory-excursion "/tmp/bin" (with-directory-excursion "/tmp/bin"
@ -345,7 +348,11 @@ (define (make-linux-libre-source version
"--group=root:0" "--group=root:0"
"--sort=name" "--sort=name"
"--hard-dereference" "--hard-dereference"
dir)))))))))) dir)
(format #t "~%Scanning the generated tarball for blobs...~%")
(invoke "/tmp/bin/deblob-check" "--use-awk" "--list-blobs"
#$output))))))))))
;;; ;;;