Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]

Groups > linux.gentoo.dev > #70477

[gentoo-dev] [PATCH] distutils-r1.eclass: update list of deletable dist-info "junk"

Show all headers | View raw

We remove lots of misc data that wheel builders try to install for
usually questionable reasons, such as licenses. Some projects now try to
install SBOMs too.

These contain e.g.
- the path in /var/tmp/portage where it was built

- unreproducible timestamps and serial number

- all of *.dist-info/METADATA but converted to json because reasons

- name, description, url and sha256 hash of every CRATES= used as
  distfile sources

- the *dependency relationship* between each of said crates

We don't care about any of this (portage models it better anyway :P).
Same reason we delete licenses and changelogs.

Signed-off-by: Eli Schwartz <eschwartz@gentoo.org>
---
 eclass/distutils-r1.eclass | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/eclass/distutils-r1.eclass b/eclass/distutils-r1.eclass
index 7cafa199bdac..e0d76123e835 100644
--- a/eclass/distutils-r1.eclass
+++ b/eclass/distutils-r1.eclass
@@ -1036,6 +1036,8 @@ distutils_wheel_install() {
 		-o -path '*.dist-info/license_files' \
 		-o -path '*.dist-info/licenses/*' \
 		-o -path '*.dist-info/licenses' \
+		-o -path '*.dist-info/sboms/*' \
+		-o -path '*.dist-info/sboms' \
 		-o -path '*.dist-info/zip-safe' \
 		\) -delete || die
 
-- 
2.53.0

Back to linux.gentoo.dev | Previous | Next | Find similar

Thread

[gentoo-dev] [PATCH] distutils-r1.eclass: update list of deletable dist-info "junk" Eli Schwartz <eschwartz@gentoo.org> - 2026-04-29 08:00 +0200

csiph-web