From 6093b993d0797da11baf85e3f91ff541403d5417 Mon Sep 17 00:00:00 2001 From: Dawn Date: Tue, 1 Sep 2026 11:20:44 +0200 Subject: [PATCH] update adxv --- adxv/README.md | 8 ++++++++ adxv/build | 13 +++++++++++++ 2 files changed, 21 insertions(+) diff --git a/adxv/README.md b/adxv/README.md index 21b7712..e375106 100644 --- a/adxv/README.md +++ b/adxv/README.md @@ -13,6 +13,14 @@ No build: the recipe downloads the prebuilt, sha-pinned installs it as `$PREFIX/bin/adxv`. Runtime needs system X11 + Motif (`motif` RPM, libXm) on the execution host and an X server. +adxv.scripps.edu serves an incomplete TLS cert chain, so curl on Ra +fails verification; `pbuild::pre_prep` therefore fetches with +`--insecure` into the distfiles cache. That is safe here because the +default prep still checks the binary against the pinned sha256. If the +sha check fails (truncated download), delete +`/adxv-.x86_64CentOS7` and re-run; as a last resort +download the binary on any machine and pre-stage it there by hand. + ## Building on Ra ```sh diff --git a/adxv/build b/adxv/build index 8ff0176..3922763 100755 --- a/adxv/build +++ b/adxv/build @@ -4,6 +4,19 @@ # needs system Motif/X11 libs at runtime). Default pbuild::prep downloads + # sha-verifies + copies it into SRC_DIR (unpacker: none). +pbuild::pre_prep() { + # adxv.scripps.edu serves an incomplete cert chain -> Ra's curl fails verify + # ("unable to get local issuer certificate"). Fetch with --insecure into the + # distfiles cache; integrity comes from the pinned sha256 in config.yaml, + # which the default prep still enforces. On sha mismatch: rm this file, re-run. + local -r f="${PMODULES_DISTFILESDIR}/adxv-${V_PKG}.x86_64CentOS7" + [[ -s "$f" ]] && return 0 + mkdir -p "${PMODULES_DISTFILESDIR}" + curl --insecure --location --fail -o "$f" \ + "https://adxv.scripps.edu/adxv/adxv_${V_PKG}/adxv.x86_64CentOS7" || \ + std::die 42 "adxv: download failed - pre-stage the binary by hand at $f" +} + pbuild::configure() { : }