[PATCH] distutils-r1.eclass: update list of deletable dist-info "junk"

Eli Schwartz <[email protected]>
Newsgroups gmane.linux.gentoo.devel
Message-ID <[email protected]>
We remove lots of misc data that wheel builders try to install for
usually questionable reasons, such as licenses. Some projects now try to
install SBOMs too.

These contain e.g.
- the path in /var/tmp/portage where it was built

- unreproducible timestamps and serial number

- all of *.dist-info/METADATA but converted to json because reasons

- name, description, url and sha256 hash of every CRATES= used as
  distfile sources

- the *dependency relationship* between each of said crates

We don't care about any of this (portage models it better anyway :P).
Same reason we delete licenses and changelogs.

Signed-off-by: Eli Schwartz <[email protected]>
---
 eclass/distutils-r1.eclass | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/eclass/distutils-r1.eclass b/eclass/distutils-r1.eclass
index 7cafa199bdac..e0d76123e835 100644
--- a/eclass/distutils-r1.eclass
+++ b/eclass/distutils-r1.eclass
@@ -1036,6 +1036,8 @@ distutils_wheel_install() {
 		-o -path '*.dist-info/license_files' \
 		-o -path '*.dist-info/licenses/*' \
 		-o -path '*.dist-info/licenses' \
+		-o -path '*.dist-info/sboms/*' \
+		-o -path '*.dist-info/sboms' \
 		-o -path '*.dist-info/zip-safe' \
 		\) -delete || die
 
-- 
2.53.0
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.