fce2522aad
Some checks failed
CI / build-and-test (clang) (push) Has been cancelled
CI / build-and-test (gcc) (push) Has been cancelled
CI / strict-warnings (clang, -Wall -Wextra -Wpedantic -Wshadow -Wcast-align -Wstrict-prototypes -Wmissing-prototypes -Wnull-dereference -O2 -std=c11 -Werror) (push) Has been cancelled
CI / strict-warnings (gcc, -Wall -Wextra -Wpedantic -Wshadow -Wcast-align -Wstrict-prototypes -Wmissing-prototypes -Wnull-dereference -Wformat-security -Wlogical-op -Wjump-misses-init -Wdouble-promotion -O2 -std=c11 -Werror) (push) Has been cancelled
CI / sanitizers (push) Has been cancelled
CI / pie-hardening (push) Has been cancelled
CI / cross-aarch64 (push) Has been cancelled
CI / dist-reproducibility (push) Has been cancelled
CI / packaging-syntax (push) Has been cancelled
CI / release (push) Has been cancelled
cross-platform / windows (push) Has been cancelled
cross-platform / macos (push) Has been cancelled
cross-platform / portable (push) Has been cancelled
CHANGELOG 5.2.0 entry; README 'What's new in 5.2.0' + version-history row + download-table version refs; bump ZUPT_VERSION_STRING and the rpm/opensuse/ homebrew/guix packaging versions to 5.2.0.
208 lines
10 KiB
Scheme
208 lines
10 KiB
Scheme
;;; SPDX-License-Identifier: AGPL-3.0-or-later
|
|
;;; Copyright (c) 2026 Cristian Cezar Moisés
|
|
;;;
|
|
;;; GNU Guix package definitions for VaptVupt (CLI + PySide6 GUI).
|
|
;;; Source-only build (no vendored libraries): the CLI links only libc/libm/
|
|
;;; pthread from the store.
|
|
;;;
|
|
;;; Install into your profile (additive; keeps everything else):
|
|
;;; guix package -f packaging/guix/vaptvupt.scm ; installs the GUI
|
|
;;; guix package -e '(@ (guix) …)' — or, for the CLI on its own:
|
|
;;; guix install -f packaging/guix/vaptvupt.scm ; (last expr = GUI)
|
|
;;; The last expression is the GUI, which carries the CLI as an input; to get
|
|
;;; the `vaptvupt` command in your profile too, also run:
|
|
;;; guix package --install-from-expression='(begin (load "packaging/guix/vaptvupt.scm") vaptvupt)'
|
|
;;;
|
|
;;; GUI-on-Guix note: PySide6's Qt6 links several leaf libraries (libGL from
|
|
;;; mesa, libxkbcommon, the X11/xcb family, libzstd, harfbuzz, icu, ...) that are
|
|
;;; NOT in its RUNPATH. The launcher therefore sets LD_LIBRARY_PATH to those
|
|
;;; libraries (see %gui-runtime-libs). Without this, `import PySide6.QtWidgets`
|
|
;;; fails with "libGL.so.1: cannot open shared object file" and the GUI prints
|
|
;;; "requires PySide6 or PyQt6". Qt's OWN libraries are intentionally excluded
|
|
;;; from LD_LIBRARY_PATH — they resolve via PySide6's RUNPATH; forcing a second
|
|
;;; copy causes Qt private-API symbol clashes.
|
|
|
|
(use-modules (guix packages)
|
|
(guix download)
|
|
(guix gexp)
|
|
(guix utils)
|
|
(guix build-system gnu)
|
|
(guix build-system copy)
|
|
((guix licenses) #:prefix license:)
|
|
(gnu packages python) ; python
|
|
(gnu packages qt) ; python-pyside-6, python-shiboken-6, qtbase, qtwayland
|
|
(gnu packages bash) ; bash-minimal
|
|
(gnu packages gl) ; mesa (libGL)
|
|
(gnu packages xdisorg) ; libxkbcommon, pixman, mtdev
|
|
(gnu packages fontutils) ; fontconfig, freetype, graphite2
|
|
(gnu packages xorg) ; libX11 + xcb family, libxft, libevdev
|
|
(gnu packages freedesktop); wayland, libinput-minimal
|
|
(gnu packages glib) ; glib, dbus
|
|
(gnu packages compression); zlib, zstd, brotli
|
|
(gnu packages image) ; libpng, libjpeg-turbo
|
|
(gnu packages xml) ; expat, libxml2
|
|
(gnu packages gtk) ; harfbuzz
|
|
(gnu packages icu4c) ; icu4c
|
|
(gnu packages maths) ; double-conversion
|
|
(gnu packages pcre) ; pcre2
|
|
(gnu packages markup) ; md4c
|
|
(gnu packages crypto) ; libb2
|
|
(gnu packages linux)) ; eudev (libudev)
|
|
|
|
;; Leaf runtime libraries PySide6's Qt6 (Core/Gui/Widgets) needs but that are
|
|
;; NOT in its RUNPATH. NEVER add qtbase/qtwayland here (see header note). These
|
|
;; already live in PySide6's closure, so referencing them adds no store size.
|
|
(define %gui-runtime-libs
|
|
(list mesa libxkbcommon fontconfig freetype graphite2 harfbuzz
|
|
icu4c double-conversion pcre2 md4c libb2 brotli
|
|
libpng libjpeg-turbo zlib expat libxml2 pixman glib dbus wayland
|
|
libx11 libxext libxrender libxcb libxrandr libxi libxcursor libxft
|
|
libxfixes libxdamage libxcomposite libxtst libxinerama libsm libice
|
|
libxau libxdmcp xcb-util xcb-util-image xcb-util-keysyms
|
|
xcb-util-renderutil xcb-util-wm xcb-util-cursor
|
|
libinput-minimal mtdev libevdev eudev))
|
|
|
|
(define %vaptvupt-version "5.2.0")
|
|
|
|
(define %vaptvupt-source
|
|
(origin
|
|
(method url-fetch)
|
|
(uri (string-append
|
|
"https://git.securityops.co/cristiancmoises/vaptvupt"
|
|
"/releases/download/v" %vaptvupt-version
|
|
"/vaptvupt-" %vaptvupt-version ".tar.gz"))
|
|
(sha256
|
|
(base32 "1mzl5za5k80x74p1hb9kfi199fs74ymmlcdhhxkzxr9ls8gpg6z2"))))
|
|
|
|
(define-public vaptvupt
|
|
(package
|
|
(name "vaptvupt")
|
|
(version %vaptvupt-version)
|
|
(source %vaptvupt-source)
|
|
(build-system gnu-build-system)
|
|
(arguments
|
|
(list
|
|
#:make-flags
|
|
#~(list (string-append "PREFIX=" #$output)
|
|
"WITH_SDK=0"
|
|
(string-append "CC=" #$(cc-for-target)))
|
|
#:phases
|
|
#~(modify-phases %standard-phases
|
|
(delete 'configure) ; plain Makefile, no ./configure
|
|
(replace 'check
|
|
;; Self-contained NIST/RFC known-answer vectors (FIPS 180-4/202/203,
|
|
;; SP 800-38A, RFC 4231/7748) are the crypto gate.
|
|
(lambda* (#:key tests? #:allow-other-keys)
|
|
(when tests?
|
|
(invoke "make" "WITH_SDK=0"
|
|
(string-append "CC=" #$(cc-for-target))
|
|
"test-vectors")
|
|
(invoke "./test_vectors")))))))
|
|
(home-page "https://git.securityops.co/cristiancmoises/vaptvupt")
|
|
(synopsis "Post-quantum backup compression utility")
|
|
(description
|
|
"VaptVupt (formerly Zupt) is a pure-C11 backup compressor with native
|
|
post-quantum encryption. Two in-tree PQ modes: @code{--pq} hybridizes
|
|
ML-KEM-768 (FIPS 203, validated against OpenSSL) with X25519 (recommended), and
|
|
@code{--pq-only} uses ML-KEM-768 alone for @dfn{PQ-only} compliance postures.
|
|
Payload protection is AES-256-CTR + HMAC-SHA256 Encrypt-then-MAC with a fresh
|
|
random per-block nonce and measured constant-time tag comparison; AES-NI/SHA-NI
|
|
dispatch at runtime; the embedded VaptVupt 2.60.4 LZ+ANS codec ships
|
|
CBMC-verified BCJ filters. Password mode uses PBKDF2-SHA256. The tool is
|
|
AGPL-3.0-or-later; the embedded codec is GPL-3.0-or-later.")
|
|
(license (list license:agpl3+ license:gpl3+))))
|
|
|
|
(define-public vaptvupt-gui
|
|
(package
|
|
(name "vaptvupt-gui")
|
|
(version %vaptvupt-version)
|
|
(source (package-source vaptvupt)) ; same release tarball
|
|
(build-system copy-build-system)
|
|
(arguments
|
|
(list
|
|
#:install-plan
|
|
#~'(("gui/src/zupt_gui.py" "lib/vaptvupt-gui/")
|
|
("gui/assets/zupt-icon.png"
|
|
"share/icons/hicolor/256x256/apps/vaptvupt-gui.png")
|
|
("gui/README.md" "share/doc/vaptvupt-gui/")
|
|
("gui/LICENSE-GUI" "share/doc/vaptvupt-gui/"))
|
|
#:phases
|
|
#~(modify-phases %standard-phases
|
|
(add-after 'install 'make-launcher
|
|
(lambda* (#:key inputs outputs #:allow-other-keys)
|
|
(let* ((out (assoc-ref outputs "out"))
|
|
(bin (string-append out "/bin"))
|
|
(gui (string-append
|
|
out "/lib/vaptvupt-gui/zupt_gui.py"))
|
|
(sh (search-input-file inputs "/bin/sh"))
|
|
(python3 (search-input-file inputs "/bin/python3"))
|
|
(cli (search-input-file inputs "/bin/vaptvupt"))
|
|
(pyside (assoc-ref inputs "python-pyside-6"))
|
|
(site (car (find-files pyside "^site-packages$"
|
|
#:directories? #t)))
|
|
;; Shiboken6 is a SEPARATE package PySide6 imports at
|
|
;; runtime; its site-packages must be on GUIX_PYTHONPATH too.
|
|
(shiboken (assoc-ref inputs "python-shiboken-6"))
|
|
(shsite (car (find-files shiboken "^site-packages$"
|
|
#:directories? #t)))
|
|
(qtbase (assoc-ref inputs "qtbase"))
|
|
(qtwl (assoc-ref inputs "qtwayland"))
|
|
;; zstd ships libzstd.so.1 in its "lib" output (not "out").
|
|
(zstdlib (assoc-ref inputs "zstd"))
|
|
(ldpath (string-join
|
|
(append
|
|
(list #$@(map (lambda (p) (file-append p "/lib"))
|
|
%gui-runtime-libs))
|
|
(list (string-append zstdlib "/lib")))
|
|
":")))
|
|
(mkdir-p bin)
|
|
(call-with-output-file (string-append bin "/vaptvupt-gui")
|
|
(lambda (port)
|
|
(format port "#!~a
|
|
export VAPTVUPT_BIN=\"~a\"
|
|
export GUIX_PYTHONPATH=\"~a:~a${GUIX_PYTHONPATH:+:}$GUIX_PYTHONPATH\"
|
|
export QT_PLUGIN_PATH=\"~a/lib/qt6/plugins:~a/lib/qt6/plugins${QT_PLUGIN_PATH:+:}$QT_PLUGIN_PATH\"
|
|
export LD_LIBRARY_PATH=\"~a${LD_LIBRARY_PATH:+:}$LD_LIBRARY_PATH\"
|
|
exec \"~a\" \"~a\" \"$@\"\n"
|
|
sh cli site shsite qtbase qtwl ldpath python3 gui)))
|
|
(chmod (string-append bin "/vaptvupt-gui") #o755)
|
|
(symlink "vaptvupt-gui" (string-append bin "/zupt-gui")))))
|
|
(add-after 'make-launcher 'install-desktop-file
|
|
(lambda* (#:key outputs #:allow-other-keys)
|
|
(let* ((out (assoc-ref outputs "out"))
|
|
(apps (string-append out "/share/applications")))
|
|
(mkdir-p apps)
|
|
(call-with-output-file
|
|
(string-append apps "/vaptvupt-gui.desktop")
|
|
(lambda (port)
|
|
(format port "[Desktop Entry]
|
|
Type=Application
|
|
Name=VaptVupt
|
|
GenericName=Post-Quantum Backup
|
|
Comment=Compress, encrypt and restore .zupt archives
|
|
Exec=~a/bin/vaptvupt-gui %F
|
|
Icon=vaptvupt-gui
|
|
Terminal=false
|
|
Categories=Utility;Archiving;Security;
|
|
MimeType=application/x-zupt;
|
|
Keywords=backup;encryption;post-quantum;compression;zupt;\n"
|
|
out)))))))))
|
|
(inputs
|
|
(append (list bash-minimal python python-pyside-6 python-shiboken-6
|
|
qtbase qtwayland vaptvupt
|
|
(list zstd "lib")) ; libzstd.so.1 is in zstd's "lib" output
|
|
%gui-runtime-libs))
|
|
(home-page "https://git.securityops.co/cristiancmoises/vaptvupt")
|
|
(synopsis "Desktop frontend for the VaptVupt post-quantum backup tool")
|
|
(description
|
|
"PySide6 (Qt 6) graphical frontend for VaptVupt: create, inspect and
|
|
extract @code{.zupt} archives with password or post-quantum recipient
|
|
encryption, including the @code{--pq} hybrid and @code{--pq-only} full
|
|
post-quantum modes. The launcher pins the matching @code{vaptvupt} CLI from the
|
|
store via @env{VAPTVUPT_BIN} and sets @env{LD_LIBRARY_PATH} to the Qt6 leaf
|
|
libraries PySide6 needs but does not carry in its RUNPATH.")
|
|
(license license:agpl3+)))
|
|
|
|
;; `guix package -f' evaluates the file's last expression — the GUI, which
|
|
;; carries the CLI as an input.
|
|
vaptvupt-gui
|