From 846faac428ac60800dc02b78ac713f777736d87a Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Cristian=20Cezar=20Mois=C3=A9s?= Date: Thu, 9 Jul 2026 23:30:24 -0300 Subject: [PATCH] packaging: correct 4.2.0 changelog weekday and make Fedora rpm spec source-only - 2026-07-09 is a Thursday; fix the weekday in the rpm, debian, and openSUSE 4.2.0 changelog entries (was "Wed"). - packaging/rpm/vaptvupt.spec: drop the stale vendored-library install and %files entries (the libraries were removed in 4.1.0's source-only switch), build with WITH_SDK=0, and list the actual vaptvupt binary and shell completions. Mirrors the already-source-only openSUSE spec. --- packaging/debian/changelog | 2 +- packaging/opensuse/vaptvupt.changes | 2 +- packaging/rpm/vaptvupt.spec | 53 +++++++++++++---------------- 3 files changed, 26 insertions(+), 31 deletions(-) diff --git a/packaging/debian/changelog b/packaging/debian/changelog index 850c492..49769b3 100644 --- a/packaging/debian/changelog +++ b/packaging/debian/changelog @@ -20,7 +20,7 @@ vaptvupt (4.2.0-1) UNRELEASED; urgency=high message pointing to native --pq / --pq-only (or a WITH_SDK=1 build). * Wire format v1.6 unchanged; the 0x06 envelope is additive. - -- Cristian Cezar Moisés Wed, 09 Jul 2026 12:00:00 +0000 + -- Cristian Cezar Moisés Thu, 09 Jul 2026 12:00:00 +0000 vaptvupt (4.1.0-1) UNRELEASED; urgency=high diff --git a/packaging/opensuse/vaptvupt.changes b/packaging/opensuse/vaptvupt.changes index 8a72875..c3e3261 100644 --- a/packaging/opensuse/vaptvupt.changes +++ b/packaging/opensuse/vaptvupt.changes @@ -1,5 +1,5 @@ ------------------------------------------------------------------- -Wed Jul 9 12:00:00 UTC 2026 - Alessandro de Oliveira Faria +Thu Jul 9 12:00:00 UTC 2026 - Alessandro de Oliveira Faria - Update to 4.2.0: * New native full (pure) post-quantum mode --pq-only: ML-KEM-768 diff --git a/packaging/rpm/vaptvupt.spec b/packaging/rpm/vaptvupt.spec index 4684c5b..ecd8a58 100644 --- a/packaging/rpm/vaptvupt.spec +++ b/packaging/rpm/vaptvupt.spec @@ -70,49 +70,44 @@ and optional encrypted comments. %autosetup -n %{name}-%{version} %build -# Use Fedora's default optflags but with the project's preferred warning set. -CFLAGS="%{optflags} -Wall -Wextra -Wpedantic -std=c11" \ -LDFLAGS="%{?build_ldflags}" \ -%make_build +# Source-only build (WITH_SDK=0): no vendored libraries, no external crypto +# dependency. Fedora's default optflags plus the project's warning set. +%make_build WITH_SDK=0 \ + CFLAGS="%{optflags} -fPIE -Wall -Wextra -std=c11 -Iinclude -Isrc" \ + LDFLAGS="%{?build_ldflags} -pie" \ + LDLIBS="-lm -lpthread" %check -# Run the upstream regression suite. F-06 HMAC trials, F-08 top-MAC sweep, -# F-09 byte sweep (1827 positions), F-10..F-12 regressions, dist -# reproducibility. ~3 minutes on modern hardware. -%make_build test +# Distro-safe regression subset: F-06 HMAC trials, F-08 top-MAC sweep, +# F-09 byte sweep, F-10..F-12 regressions, the dedup-nonce regression, +# and NIST/RFC vectors. Skips threaded/dist-reproducibility tests that +# are sensitive to the build host. +%make_build WITH_SDK=0 \ + CFLAGS="%{optflags} -fPIE -Wall -Wextra -std=c11 -Iinclude -Isrc" \ + LDFLAGS="%{?build_ldflags} -pie" \ + LDLIBS="-lm -lpthread" \ + check %install -%make_install DESTDIR=%{buildroot} PREFIX=/usr - -# Install the vendored libzuptsdk into /usr/lib/zupt/ — the binary is -# linked with -Wl,-rpath,$ORIGIN/vendor/zuptsdk so we preserve the same -# layout under /usr/. -install -d %{buildroot}%{_libdir}/%{name} -install -m 0755 vendor/zuptsdk/libzuptsdk.so.2.0.0 \ - %{buildroot}%{_libdir}/%{name}/libzuptsdk.so.2.0.0 -ln -sf libzuptsdk.so.2.0.0 %{buildroot}%{_libdir}/%{name}/libzuptsdk.so.2 -ln -sf libzuptsdk.so.2.0.0 %{buildroot}%{_libdir}/%{name}/libzuptsdk.so -install -m 0755 vendor/pqvaptvupt/libpqvaptvupt.so.0.6.0 \ - %{buildroot}%{_libdir}/%{name}/libpqvaptvupt.so.0.6.0 -ln -sf libpqvaptvupt.so.0.6.0 %{buildroot}%{_libdir}/%{name}/libpqvaptvupt.so.0 -ln -sf libpqvaptvupt.so.0.6.0 %{buildroot}%{_libdir}/%{name}/libpqvaptvupt.so +%make_install WITH_SDK=0 DESTDIR=%{buildroot} PREFIX=/usr %files %license LICENSE %doc README.md SECURITY.md CHANGELOG.md +%{_bindir}/%{name} %{_bindir}/zupt -%{_libdir}/%{name}/libzuptsdk.so.2.0.0 -%{_libdir}/%{name}/libzuptsdk.so.2 -%{_libdir}/%{name}/libzuptsdk.so -%{_libdir}/%{name}/libpqvaptvupt.so.0.6.0 -%{_libdir}/%{name}/libpqvaptvupt.so.0 -%{_libdir}/%{name}/libpqvaptvupt.so +%{_datadir}/bash-completion/completions/%{name} +%{_datadir}/bash-completion/completions/zupt +%{_datadir}/zsh/site-functions/_%{name} +%{_datadir}/zsh/site-functions/_zupt +%{_datadir}/fish/vendor_completions.d/%{name}.fish %if 0%{?_mandir:1} +%{_mandir}/man1/%{name}.1* %{_mandir}/man1/zupt.1* %endif %changelog -* Wed Jul 09 2026 Cristian Cezar Moisés - 4.2.0-1 +* Thu Jul 09 2026 Cristian Cezar Moisés - 4.2.0-1 - New native full (pure) post-quantum mode --pq-only: ML-KEM-768 as the sole KEM, no classical X25519 (envelope 0x06). For "PQ-only" compliance postures; hybrid --pq remains the recommended default. In-tree crypto.