1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62
|
#!/usr/bin/make -f
# -*- makefile -*-
# Uncomment this to turn on verbose mode.
#export DH_VERBOSE=1
export DPKG_GENSYMBOLS_CHECK_LEVEL=4
export DEB_BUILD_MAINT_OPTIONS = hardening=+all
DPKG_EXPORT_BUILDFLAGS = 1
include /usr/share/dpkg/buildflags.mk
BUILDHOME=/tmp/home
%:
dh $@
apparmor:
aa-easyprof -m ./debian/morph-browser-apparmor.manifest --no-verify | \
egrep -v '(# Click packages|CLICK_DIR)' | \
sed 's/@{APP_PKGNAME}_@{APP_APPNAME}_@{APP_VERSION}/@{APP_PKGNAME}/g' | \
sed 's#/run/shm/\.org\.chromium\.Chromium\.\*#/{dev,run}/shm/.org.chromium.Chromium.*#g' | \
egrep -v 'deny /run/udev/data/\*\* r,' | \
sed 's#^}$$#\n /sys/class/ r,\n /sys/class/input/ r,\n /run/udev/data/** r,\n}#g' | \
egrep -v '^\s*deny /dev/ r,\s*$$' | \
sed 's#^\(\s*\)deny\(\s\+/{run,dev}/shm/pulse-shm\*\s\+w,\).*$$#\1owner\2#g' | \
sed 's#^}$$#\n /dev/dri/ r,\n /sys/devices/pci[0-9]*/**/config r,\n}#g' | \
sed 's#^}$$#\n @{HOME}/@{XDG_DOWNLOAD_DIR}/** rwk,\n}#g' \
> ./debian/usr.bin.morph-browser
ifeq ($(DEB_BUILD_GNU_TYPE),$(DEB_HOST_GNU_TYPE))
apparmor_parser -QTK ./debian/usr.bin.morph-browser
endif
override_dh_install: apparmor
mv debian/tmp/usr/share/doc/morph-web debian/tmp/usr/share/doc/qml-module-morph-web
rmdir debian/tmp/usr/share/doc/qml-module-morph-web/html/images
# temporarily don't ship the files of morph-webapp-container
rm -v debian/tmp/usr/bin/webapp-container
rm -Rv debian/tmp/usr/share/morph-browser/webcontainer/
rm -v debian/tmp/usr/share/click/hooks/webapp-container.hook
rm -v debian/tmp/usr/bin/webapp-container-hook
dh_install
override_dh_missing:
dh_missing --fail-missing
override_dh_installdeb:
dh_apparmor --profile-name=usr.bin.morph-browser -pmorph-browser
dh_installdeb
override_dh_clean:
dh_clean
rm -rf $(BUILDHOME)
override_dh_auto_test:
mkdir -p $(BUILDHOME)
HOME=$(BUILDHOME) dh_auto_test --no-parallel -- ARGS+=-VV
get-orig-source:
uscan --noconf --force-download --rename --download-current-version --destdir=..
|