bootstrap-initrd

commit: 7fde5fb371799f705f942768d2afc467781b3b10
parent 9ce56bb2a1f133833534abe4ff9be1c949051095
Author: Haelwenn (lanodan) Monnier <contact@hacktivis.me>
Date:   Sat, 13 Sep 2025 04:12:31 +0200

Add usign

Diffstat:
M
RATIONALES.md
1
+
M
distfiles.SHA512SUM
1
+
M
extras-build-all.sh
2
++
A
extras/usign.sh
10
++++++++++
M
fetch.sh
1
+
M
make-root.sh
2
++

6 files changed, 17 insertions(+), 0 deletions(-)
diff --git a/RATIONALES.md b/RATIONALES.md
@@ -120,3 +120,4 @@ Meanwhile:
 - tiny-curl: Still pretty big but hopefully close enough to the usual one
 - cacert (from curl.haxx.se): Maybe could be reduced to a handful of CAs (like maybe even just Let's Encrypt)
 - git: For oasis
+- usign: To check signify(1) signatures
diff --git a/distfiles.SHA512SUM b/distfiles.SHA512SUM
@@ -57,6 +57,7 @@ b42a09dcc2f98bc2a1c8fa1d67c203a8e982b6ca97374962099f3074a6fbf12aa77f08963b731327
 37f4a8c282e7a3c567e2a4978767cea9f40e03a53dffc37d83be56e8dac9030ab287db8ff64d24b8479950ee1d3e53e3e4cf64823e724d317d2cd980f61c6069  distfiles/tcc-libs-static-0.9.27_git20250106-r0.apk.x86
 56f6c21c8591d5cc8a42f3d0c1d6f568319b91bcaa1bc31b17f6f1ee9ac22d8c3135fcd20eb4719ef562d280c91dbaac40b7f9a6025a993f7320646122f38369  distfiles/tcc-libs-static-0.9.27_git20250106-r0.apk.x86_64
 ccb62313eaf2fb149ba3a372ab6a0cccde2fc23e2193843f457b9ed181b832fddb34fe23b18ec3005aefb7d1137fcb440fb57462b9414734f3b1a90183d3db36  distfiles/tiny-curl-8.4.0.tar.gz
+e24f54749ce81a36fc9fb33bf89a70dd51a54d33eac8723e6fb0dfecf7753cd5df7095527dfcf6b01d18546833d350a5a2179cce1b5c9ee6b39c2b1d63a95113  distfiles/usign-f1f65026a94137c91b5466b149ef3ea3f20091e9.tar.gz
 8eff101fc2bff397f96a4a5ae5fca63492bd192ff7d690ba0a03a837e28f7668fa453eb6e99988d3b02482944f5b62f01440e8fc2557489641d59bc0e394a413  distfiles/utils-std-0.0.9.tar.gz
 84f2b9059bf70a0ec8fe74516aa76d32824bc9c152d8e9efccb7ea6122d63700074ed90326b6c12065072cc1df46a436326f11e0e7997317cb77f404f32e9d72  distfiles/utils-std-0.0.9.tar.gz.sign
 e186a8fc01871414574fd5e90e8ce87a45bcf40aa0d7276bd90a301ee8c312be3a0adb580fc2c8b6653fbeeda1ce4dfdd078095a5fc77e70263e5e940414dc54  distfiles/yacc-oyacc-6.6.tar.gz
diff --git a/extras-build-all.sh b/extras-build-all.sh
@@ -3,6 +3,8 @@ set -ex
 
 /extras/genext2fs.sh
 
+/extras/usign.sh
+
 /extras/lua.sh
 
 /extras/bearssl.sh
diff --git a/extras/usign.sh b/extras/usign.sh
@@ -0,0 +1,10 @@
+#!/bin/sh
+set -ex
+
+cd /extras/usign-*/
+
+${CC} -std=gnu99 ${CFLAGS} -o /bin/usign ed25519.c edsign.c f25519.c fprime.c sha512.c base64.c main.c
+
+ln -s usign /bin/signify
+
+cd -
diff --git a/fetch.sh b/fetch.sh
@@ -67,6 +67,7 @@ fetch_forge https://github.com/ibara/oksh/archive/refs/tags oksh oksh-7.7
 fetch_forge https://github.com/ibara/yacc/archive/refs/tags yacc oyacc-6.6
 fetch_forge https://github.com/pkgconf/pkgconf/archive/refs/tags pkgconf pkgconf-2.4.3
 fetch_forge https://github.com/bestouff/genext2fs/archive genext2fs v1.5.0
+fetch_forge https://github.com/openwrt/usign/archive usign f1f65026a94137c91b5466b149ef3ea3f20091e9
 
 # suckless.org doesn't provides snapshots of sbase (yet?)
 test -e sbase-b30fb568.tar.gz || curl ${CURL_OPTS} -o sbase-b30fb568.tar.gz https://git.sr.ht/~mcf/sbase/archive/b30fb56804bfed69b45ef0e944d2e029e4d26258.tar.gz
diff --git a/make-root.sh b/make-root.sh
@@ -35,6 +35,7 @@ extra_tarballs="
 	git-2.50.0.tar.gz
 	muon-v0.5.0.tar.gz
 	genext2fs-v1.5.0.tar.gz
+	usign-f1f65026a94137c91b5466b149ef3ea3f20091e9.tar.gz
 "
 extra_distfiles="
 	cacert-2024-11-26.pem
@@ -52,6 +53,7 @@ extra_local_files="
 	extras/pkgconf-lite.sh
 	extras/pkgconf.sh
 	extras/tiny-curl.sh
+	extras/usign.sh
 "
 WORKDIR="$(dirname "$0")"
 WORKDIR="$(realpath "$WORKDIR")"