|cunix 62ac69d8b5||1 year ago|
|LICENCE.EUPL-1.2||1 year ago|
|README.md||1 year ago|
|macros.vendored_licenses_packager||1 year ago|
|vendored_licenses_packager.sh||1 year ago|
script may help packagers to include some legal files of
vendored dependencies in archives created with RPM.
It was used during build of applications written in
Go and Rust for openSUSE on OBS.
How to use
Assuming extracted dependencies are available in directory "vendor"
below the working directory, the perhaps simplest way to make use of this
in a RPM spec file is:
and to add the following macros in their sections:
Executing the program directly offers some more flexibilty:
It can delete files recursively without confirmation.
This comes with no guarantee or promise to do what you expect.
See it as experimental, untested and unreviewed.
It is currently licensed under the EUPL v. 1.2 (only) where not noted otherwise.
Public upstream repository
Spec file examples
Verify released archives
Currently uses Minisign, for example implemented with rsign2.
To check version "x.y.z" , do:
rsign verify -P RWQ7vwLW5BF3r8teYKFPJuJb0NTCQi0OEhy3XvyySV78SIvlGE3ofPVx \ -x /path/to/vendored_licenses_packager-x.y.z.tar.xz.minisig \ /path/to/vendored_licenses_packager-x.y.z.tar.xz