sergio/takana
> Una distribución Linux construida con un laboratorio funcional y hermético en el > sótano, y una terminal mutable, clásica y anárquica en el piso de arriba — diseñada > desde el suelo para que una IA programadora entienda, modifique y co…
granja: cargar cola base-system — 18 esenciales del userland foundational
1# Importada de Alpine aports por `hammer import-alpine` (Etapa G). PUNTO DE PARTIDA — pero
2# YA trae los parches de musl de Alpine (lo que un import de nix pierde). Pendiente: el
3# sha256 del tarball (el wrapper lo calcula), y adaptar build/install del shell de abuild.
4name = "ca-certificates"
5version = "20260611"
6
7[source]
8tarball = "https://gitlab.alpinelinux.org/alpine/ca-certificates/-/archive/20260611/ca-certificates-20260611.tar.bz2"
9# FIXME sha256: el wrapper lo calcula (Alpine publica sha512). sha512 de Alpine:
10# sha512 = "f473a1111eb508ef5d1096489479dba07db6b0d76ef2b900b3473933d57419429061d83e9c1e881ab61c4b0f17c64859ec74d670da6fc1d83d9b0fa73e1b7d8d"
11sha256 = "32ca73f2e81e2b88dc614f12e1ee04a82b1ec5a8e29d9f359ddf8905a0afcbb0"
12
13[build]
14compiler = "zig-cc"
15target = "x86_64-linux-musl"
16link = "static"
17flags = []
18
19[build.phases]
20# de build() de Alpine (traducido; el lab provee $CBUILD/$CHOST — Etapa G Fase 3; revisá --shared para estático):
21compile = '''
22_abuild_phase() {
23make
24}
25_abuild_phase
26'''
27# de package() de Alpine (traducido $pkgdir→/out):
28install = '''
29_abuild_phase() {
30make install DESTDIR="/out"
31
32 (
33 echo "# Automatically generated by ca-certificates-20260611-r$pkgrel"
34 echo "# $(date -ud@$SOURCE_DATE_EPOCH)"
35 echo "#"
36 cd "/out"/usr/share/ca-certificates
37 find . -name '*.crt' | sort | cut -b3-
38 ) > "/out"/etc/ca-certificates.conf
39
40 # generate the bundle in similar way as update-ca-certificates would do
41 find -- *.crt | sort | while read -r i; do
42 cat "$i"
43 printf "\n"
44 done > "/out"/etc/ssl/certs/ca-certificates.crt
45
46 mkdir -p "/out"/etc/apk/protected_paths.d
47 cat > "/out"/etc/apk/protected_paths.d/ca-certificates.list <<-EOF
48 -etc/ssl/certs/ca-certificates.crt
49 -etc/ssl/certs/ca-cert-*.pem
50 -etc/ssl/certs/[0-9a-f][0-9a-f][0-9a-f][0-9a-f][0-9a-f][0-9a-f][0-9a-f][0-9a-f].[r0-9]*
51 EOF
52
53 cat > "/out"/etc/ca-certificates/update.d/certhash <<-EOF
54 #!/bin/sh
55 exec /usr/bin/c_rehash /etc/ssl/certs
56 EOF
57 chmod +x "/out"/etc/ca-certificates/update.d/certhash
58}
59_abuild_phase
60'''