update adxv

adxv/README.md

@@ -13,6 +13,14 @@ No build: the recipe downloads the prebuilt, sha-pinned
 installs it as `$PREFIX/bin/adxv`. Runtime needs system X11 + Motif
 (`motif` RPM, libXm) on the execution host and an X server.
 
+adxv.scripps.edu serves an incomplete TLS cert chain, so curl on Ra
+fails verification; `pbuild::pre_prep` therefore fetches with
+`--insecure` into the distfiles cache. That is safe here because the
+default prep still checks the binary against the pinned sha256. If the
+sha check fails (truncated download), delete
+`<distdir>/adxv-<ver>.x86_64CentOS7` and re-run; as a last resort
+download the binary on any machine and pre-stage it there by hand.
+
 ## Building on Ra
 
 ```sh

adxv/build

@@ -4,6 +4,19 @@
 # needs system Motif/X11 libs at runtime). Default pbuild::prep downloads +
 # sha-verifies + copies it into SRC_DIR (unpacker: none).
 
+pbuild::pre_prep() {
+    # adxv.scripps.edu serves an incomplete cert chain -> Ra's curl fails verify
+    # ("unable to get local issuer certificate"). Fetch with --insecure into the
+    # distfiles cache; integrity comes from the pinned sha256 in config.yaml,
+    # which the default prep still enforces. On sha mismatch: rm this file, re-run.
+    local -r f="${PMODULES_DISTFILESDIR}/adxv-${V_PKG}.x86_64CentOS7"
+    [[ -s "$f" ]] && return 0
+    mkdir -p "${PMODULES_DISTFILESDIR}"
+    curl --insecure --location --fail -o "$f" \
+        "https://adxv.scripps.edu/adxv/adxv_${V_PKG}/adxv.x86_64CentOS7" || \
+        std::die 42 "adxv: download failed - pre-stage the binary by hand at $f"
+}
+
 pbuild::configure() {
     :
 }