vendored_licenses_packager

This bash script may help packagers to include some legal files of
vendored dependencies in archives created with RPM.

It was used during build of applications written in
Go and Rust for openSUSE on OBS.

---

How to use

RPM macros

Assuming extracted dependencies are available in directory "vendor"
below the working directory, the perhaps simplest way to make use of this
in a RPM spec file is:

BuildRequires: vendored_licenses_packager

and to add the following macros in their sections:

%prep
%vendored_licenses_packager_prep

%install
%vendored_licenses_packager_install

%files
%vendored_licenses_packager_files

Script

Executing the program directly offers some more flexibilty:

    /path/to/vendored_licenses_packager.sh help

Be careful:
It can delete files recursively without confirmation.

---

This comes with no guarantee or promise to do what you expect.

See it as experimental, untested and unreviewed.

It is currently licensed under the EUPL v. 1.2 (only) where not noted otherwise.

---

Public upstream repository

Downstream

• openSUSE

Spec file examples

• dnscrypt-proxy @ openSUSE

• rage @ openSUSE

• rsign2 @ openSUSE

---

Verify released archives

Currently uses Minisign, for example implemented with rsign2.

To check version "x.y.z" , do:

 rsign verify -P RWQ7vwLW5BF3r8teYKFPJuJb0NTCQi0OEhy3XvyySV78SIvlGE3ofPVx \
              -x /path/to/vendored_licenses_packager-x.y.z.tar.xz.minisig \
              /path/to/vendored_licenses_packager-x.y.z.tar.xz