bootstrap-initrd

commit: 4679cd378034ac4044ea48712724a147cef49c33
parent 86e215175c8ffed0eb9c34eb00e7537b08126db3
Author: Haelwenn (lanodan) Monnier <contact@hacktivis.me>
Date:   Wed,  8 May 2024 04:39:12 +0200

Add cacert

Diffstat:
M
README.md
1
+
M
bootstrap-tiny-curl.sh
2
+-
M
distfiles.SHA512SUM
1
+
M
fetch.sh
1
+
M
init.sh
3
+++
M
make-root.sh
1
+

6 files changed, 8 insertions(+), 1 deletion(-)
diff --git a/README.md b/README.md
@@ -130,6 +130,7 @@ Meanwhile:
 - mdevd: hotplug devices daemon
 - bearssl: small TLS library
 - tiny-curl: Still pretty big but hopefully close enough to the usual one
+- cacert (from curl.haxx.se): Maybe could be reduced to a handful of CAs (like maybe even just Let's Encrypt)
 
 ## Launching in QEMU
 ```
diff --git a/bootstrap-tiny-curl.sh b/bootstrap-tiny-curl.sh
@@ -4,7 +4,7 @@ set -ex
 tar xof /tiny-curl-*.tar.gz
 cd tiny-curl-*/
 
-LD=$CC ./configure --prefix=/usr --with-bearssl
+LD=$CC ./configure --prefix=/usr --with-bearssl --with-ca-bundle=/usr/share/cacert/cert.pem
 bmake RANLIB=true
 bmake install INSTALL=install
 
diff --git a/distfiles.SHA512SUM b/distfiles.SHA512SUM
@@ -2,6 +2,7 @@ c44a0ce381469219548a3a27589af3fea4f22eda1ca4e9434b59fc16da81b471c29ce18e31590e08
 f9ed25683cfc6c4abe7f1203a2b82ed101ee4c9e0f9ab60755b6a09c8d1e8e4f64d413624e7bb9c4b0033f909a2e4568a1d916cc6ce4736222900691e1f8359a  distfiles/bearssl-0.6.tar.gz
 50622aee8024b3e0385974a8f446a4b5df0ba494b6133ab91ebbe63c408154b112f62c9df8521f4f1beaf28cdd6e7da178c3334337f6b14c8bced532029d8ba5  distfiles/bmake-20230909.tar.gz
 083f5e675d73f3233c7930ebe20425a533feedeaaa9d8cc86831312a6581cefbe6ed0d08d2fa89be81082f2a5abdabca8b3c080bf97218a1bd59dc118a30b9f3  distfiles/bzip2-1.0.8.tar.gz
+31f03cc19566d007c4cffdad2ada71d99b4734ad7b13bc4f30d73d321f40cbe13b87a801aa61d9788207a851cc1f95a8af8ac732a372d45edb932f204bce3744  distfiles/cacert-2024-03-11.pem
 0b30b0f4c4c92a10ee2da263ea44666f445d96bac86ca4afb7bbb50d8278986e4145a7bcdf3ed9f75611bb956e93e16fc0e19874498ce3ae1a00e6fbb4f910c9  distfiles/heirloom-070715.tar.bz2
 1f1f10a7b49402053172cc028bbd939a46fcf933994cb867fa40e8c5bbd7b1291575b3bac254cd79dc4fce3e3a2c88fe0f890449888fda16169c8e6a2540f055  distfiles/heirloom-devtools-070527.tar.bz2
 8afbce28e3db544226987ae1979cf148515ba6a7e4a5c6beb1e58c05f3c6d01bbe81410b81ef32bea9a45788c86c7094130f56cb3f95c732906c02c05de1a370  distfiles/iproute2-6.6.0.tar.gz
diff --git a/fetch.sh b/fetch.sh
@@ -19,6 +19,7 @@ URLS="
 	https://skarnet.org/software/mdevd/mdevd-0.1.6.3.tar.gz
 	https://bearssl.org/bearssl-0.6.tar.gz
 	https://curl.se/tiny/tiny-curl-8.4.0.tar.gz
+	https://curl.haxx.se/ca/cacert-2024-03-11.pem
 "
 WORKDIR="$(dirname "$0")"
 
diff --git a/init.sh b/init.sh
@@ -162,6 +162,9 @@ build_hierloom || die
 # Needs bmake + m4
 build_utils_std || die
 
+mkdir -p /usr/share/cacert/ || die
+mv /cacert-*.pem /usr/share/cacert/cert.pem || die
+
 cat /proc/uptime
 echo 'Done bootstrapping!'
 cd /
diff --git a/make-root.sh b/make-root.sh
@@ -29,6 +29,7 @@ distfiles="
 	mdevd-0.1.6.3.tar.gz
 	bearssl-0.6.tar.gz
 	tiny-curl-8.4.0.tar.gz
+	cacert-2024-03-11.pem
 "
 local_files="
 	init.sh