harkaq: declarar deps medidas por el kernel (cosecha automática)
Cosecha desatendida de la campaña harkaq. Cada dep de acá la denunció el audit de Landlock en un build real: el kernel vio al build usarla sin declararla, y el store del hub confirma qué artefacto la provee (deuda DECLARABLE, §4.5). Recetas:sassc scdoc sed shadow socat sqlite tar tmux tree tzdata util-linux vim wget when which wpa_supplicant xorriso xz zlib No se tocó ninguna receta con deuda IRREDUCIBLE: declarar algo que el store no provee rompería el build en vez de arreglarlo. Esas van a tandas/needs-review-harkaq. Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
Semántico sayk'uy
Mana ima sutichaypas t'ikrakurqanchu: qillqalla, yachachiylla utaq willaylla t'ikrakurqan.
19 qillqakuna · +39 −9
- recipes/sassc.toml +1 −1
- recipes/scdoc.toml +3 −0
- recipes/sed.toml +1 −1
- recipes/shadow.toml +1 −1
- recipes/socat.toml +1 −1
- recipes/sqlite.toml +3 −0
- recipes/tar.toml +3 −0
- recipes/tmux.toml +1 −1
- recipes/tree.toml +3 −0
- recipes/tzdata.toml +3 −0
- recipes/util-linux.toml +1 −1
- recipes/vim.toml +1 −1
- recipes/wget.toml +1 −1
- recipes/when.toml +3 −0
- recipes/which.toml +3 −0
- recipes/wpa_supplicant.toml +1 −1
- recipes/xorriso.toml +3 −0
- recipes/xz.toml +3 −0
- recipes/zlib.toml +3 −0
diff --git a/recipes/sassc.toml b/recipes/sassc.toml
index d9e984b5..8cfe323d 100644
--- a/recipes/sassc.toml
+++ b/recipes/sassc.toml
@@ -24,4 +24,4 @@ zig c++ -static sassc.o -o sassc -L/usr/lib -lsass
install = "mkdir -p /out/usr/bin && cp sassc /out/usr/bin/sassc"
[deps]
-build = ["libsass"]
+build = ["libsass", "make"]
diff --git a/recipes/scdoc.toml b/recipes/scdoc.toml
index 8d380a57..5737bafd 100644
--- a/recipes/scdoc.toml
+++ b/recipes/scdoc.toml
@@ -16,6 +16,9 @@ target = "x86_64-linux-musl"
link = "static"
flags = []
+[deps]
+build = ["make"]
+
[build.phases]
# de build() de Alpine (traducido; el lab provee $CBUILD/$CHOST — Etapa G Fase 3; revisá --shared para estático):
compile = '''
diff --git a/recipes/sed.toml b/recipes/sed.toml
index f3dc4699..d71bbb5c 100644
--- a/recipes/sed.toml
+++ b/recipes/sed.toml
@@ -47,4 +47,4 @@ _abuild_phase
# perl era build-dep de Alpine sólo para tests/docs; el tarball trae configure + sed.1 pregenerado.
[deps]
-build = ["linux-headers"]
+build = ["linux-headers", "busybox", "make"]
diff --git a/recipes/shadow.toml b/recipes/shadow.toml
index cd5bd2f8..c49a5272 100644
--- a/recipes/shadow.toml
+++ b/recipes/shadow.toml
@@ -74,4 +74,4 @@ install -m644 /dev/null etc/subgid
# deps de Alpine remapeadas al catálogo canónico. AUSENTES quitadas:
# linux-pam, libbsd, setcap. Sin fcaps (setcap falla en el sandbox) ⇒ sin libcap.
[deps]
-build = ["linux-headers"]
+build = ["linux-headers", "busybox", "make"]
diff --git a/recipes/socat.toml b/recipes/socat.toml
index b0c0757c..70b13192 100644
--- a/recipes/socat.toml
+++ b/recipes/socat.toml
@@ -14,4 +14,4 @@ configure = './configure --build=$CBUILD --host=$CHOST --prefix=/usr CPPFLAGS=-I
compile = 'make'
install = 'make DESTDIR=/out install'
[deps]
-build = ["openssl", "readline", "ncurses"]
+build = ["openssl", "readline", "ncurses", "perl"]
diff --git a/recipes/sqlite.toml b/recipes/sqlite.toml
index b13ef01b..7bf41ae4 100644
--- a/recipes/sqlite.toml
+++ b/recipes/sqlite.toml
@@ -8,6 +8,9 @@ sha256 = "67d3fe6d268e6eaddcae3727fce58fcc8e9c53869bdd07a0c61e38ddf2965071"
compiler = "zig-cc"
target = "x86_64-linux-musl"
link = "static"
+[deps]
+build = ["busybox", "make"]
+
[build.phases]
configure = "./configure --prefix=/usr --disable-shared --enable-static"
compile = "make"
diff --git a/recipes/tar.toml b/recipes/tar.toml
index 5fc9c995..ede1baf2 100644
--- a/recipes/tar.toml
+++ b/recipes/tar.toml
@@ -17,6 +17,9 @@ target = "x86_64-linux-musl"
link = "static"
flags = []
+[deps]
+build = ["busybox", "make"]
+
[build.phases]
# de build() de Alpine (traducido; el lab provee $CBUILD/$CHOST — Etapa G Fase 3; revisá --shared para estático):
compile = '''
diff --git a/recipes/tmux.toml b/recipes/tmux.toml
index 5dd78e11..6a9cebf8 100644
--- a/recipes/tmux.toml
+++ b/recipes/tmux.toml
@@ -15,4 +15,4 @@ configure = './configure --build=$CBUILD --host=$CHOST --prefix=/usr --sysconfdi
compile = 'make'
install = 'make DESTDIR=/out install'
[deps]
-build = ["libevent", "ncurses", "bison"]
+build = ["libevent", "ncurses", "bison", "make"]
diff --git a/recipes/tree.toml b/recipes/tree.toml
index eb67fe90..ebe8cc8e 100644
--- a/recipes/tree.toml
+++ b/recipes/tree.toml
@@ -16,6 +16,9 @@ target = "x86_64-linux-musl"
link = "static"
flags = []
+[deps]
+build = ["make"]
+
[build.phases]
# de build() de Alpine (traducido; el lab provee $CBUILD/$CHOST — Etapa G Fase 3; revisá --shared para estático):
compile = "make LDFLAGS=\"$LDFLAGS\" CFLAGS=\"$CFLAGS\""
diff --git a/recipes/tzdata.toml b/recipes/tzdata.toml
index de7e9530..ef26932e 100644
--- a/recipes/tzdata.toml
+++ b/recipes/tzdata.toml
@@ -22,6 +22,9 @@ target = "x86_64-linux-musl"
link = "static"
flags = []
+[deps]
+build = ["make"]
+
[build.phases]
# El Makefile de tz compila `zic` (C estándar, sin deps externas). VERSION lo pasamos a
# mano porque el árbol se materializa vía `git archive` (sin .git para `git describe`).
diff --git a/recipes/util-linux.toml b/recipes/util-linux.toml
index aec0367c..dcc866a0 100644
--- a/recipes/util-linux.toml
+++ b/recipes/util-linux.toml
@@ -73,4 +73,4 @@ make DESTDIR="/out" install
# deps de Alpine/nix remapeadas al catálogo canónico. AUSENTES quitadas:
# autoconf/automake/po4a/libxcrypt/sqlite/linux-pam/libcap-ng/systemd-minimal-libs.
[deps]
-build = ["linux-headers"]
+build = ["linux-headers", "busybox", "make"]
diff --git a/recipes/vim.toml b/recipes/vim.toml
index c3d91c9f..a0df897f 100644
--- a/recipes/vim.toml
+++ b/recipes/vim.toml
@@ -68,4 +68,4 @@ rm -rf "/out"/usr/share/applications/ || true
'''
[deps]
-build = ["ncurses", "linux-headers", "pkgconf"]
+build = ["ncurses", "linux-headers", "pkgconf", "make"]
diff --git a/recipes/wget.toml b/recipes/wget.toml
index 0b846a6d..0f66e15b 100644
--- a/recipes/wget.toml
+++ b/recipes/wget.toml
@@ -19,4 +19,4 @@ configure = '''
compile = 'make'
install = 'make DESTDIR=/out install'
[deps]
-build = ["openssl", "zlib", "pcre2"]
+build = ["openssl", "zlib", "pcre2", "perl"]
diff --git a/recipes/when.toml b/recipes/when.toml
index a1809381..a41a69e4 100644
--- a/recipes/when.toml
+++ b/recipes/when.toml
@@ -16,6 +16,9 @@ target = "x86_64-linux-musl"
link = "static"
flags = []
+[deps]
+build = ["make"]
+
[build.phases]
# de package() de Alpine (traducido $pkgdir→/out):
install = '''
diff --git a/recipes/which.toml b/recipes/which.toml
index 1ddb7294..a11cbb5a 100644
--- a/recipes/which.toml
+++ b/recipes/which.toml
@@ -17,6 +17,9 @@ target = "x86_64-linux-musl"
link = "static"
flags = []
+[deps]
+build = ["busybox", "make"]
+
[build.phases]
# de build() de Alpine (traducido; el lab provee $CBUILD/$CHOST — Etapa G Fase 3; revisá --shared para estático):
compile = '''
diff --git a/recipes/wpa_supplicant.toml b/recipes/wpa_supplicant.toml
index 447dfdf2..54307c39 100644
--- a/recipes/wpa_supplicant.toml
+++ b/recipes/wpa_supplicant.toml
@@ -23,7 +23,7 @@ target = "x86_64-linux-musl"
link = "static"
[deps]
-build = ["libnl"]
+build = ["libnl", "busybox", "make"]
[build.phases]
configure = '''
diff --git a/recipes/xorriso.toml b/recipes/xorriso.toml
index 4dcd63ff..c559a94a 100644
--- a/recipes/xorriso.toml
+++ b/recipes/xorriso.toml
@@ -42,6 +42,9 @@ target = "x86_64-linux-musl"
link = "static"
zig_version = "0.13.0"
+[deps]
+build = ["busybox", "make"]
+
[build.phases]
configure = "./configure --prefix=/usr --disable-libreadline --disable-libedit --disable-libacl --disable-xattr --disable-zlib --disable-libbz2 --disable-libcdio CC='zig cc -mcpu=baseline -target x86_64-linux-musl' LDFLAGS=-static"
compile = "make -j\"$(nproc)\""
diff --git a/recipes/xz.toml b/recipes/xz.toml
index 9523c787..7a4fb1fd 100644
--- a/recipes/xz.toml
+++ b/recipes/xz.toml
@@ -10,6 +10,9 @@ compiler = "gcc"
target = "x86_64-linux-musl"
link = "static"
flags = []
+[deps]
+build = ["make"]
+
[build.phases]
configure = '''
./configure --build=$CBUILD --host=$CHOST --prefix=/usr \
diff --git a/recipes/zlib.toml b/recipes/zlib.toml
index 44403327..126e5520 100644
--- a/recipes/zlib.toml
+++ b/recipes/zlib.toml
@@ -24,6 +24,9 @@ compiler = "zig-cc"
target = "x86_64-linux-musl"
link = "static"
+[deps]
+build = ["make"]
+
[build.phases]
# --static: sólo libz.a (sin .so; mrustc/rustc enlazan estático). --prefix=/usr: zlib.h→/usr/include,
# libz.a→/usr/lib, zlib.pc→/usr/lib/pkgconfig (layout que materialize_build_deps overlaya en /usr).