[PATCH 7/8] distutils-r1.eclass: update list of deletable dist-info "junk"

Michał Górny <[email protected]>
Newsgroups gmane.linux.gentoo.devel
Message-ID <[email protected]>
From: Eli Schwartz <[email protected]>

We remove lots of misc data that wheel builders try to install for
usually questionable reasons, such as licenses. Some projects now try to
install SBOMs too.

These contain e.g.
- the path in /var/tmp/portage where it was built

- unreproducible timestamps and serial number

- all of *.dist-info/METADATA but converted to json because reasons

- name, description, url and sha256 hash of every CRATES= used as
  distfile sources

- the *dependency relationship* between each of said crates

We don't care about any of this (portage models it better anyway :P).
Same reason we delete licenses and changelogs.

Signed-off-by: Eli Schwartz <[email protected]>
Signed-off-by: Michał Górny <[email protected]>
---
 eclass/distutils-r1.eclass | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/eclass/distutils-r1.eclass b/eclass/distutils-r1.eclass
index 7cafa199bdac6..e0d76123e8357 100644
--- a/eclass/distutils-r1.eclass
+++ b/eclass/distutils-r1.eclass
@@ -1036,6 +1036,8 @@ distutils_wheel_install() {
 		-o -path '*.dist-info/license_files' \
 		-o -path '*.dist-info/licenses/*' \
 		-o -path '*.dist-info/licenses' \
+		-o -path '*.dist-info/sboms/*' \
+		-o -path '*.dist-info/sboms' \
 		-o -path '*.dist-info/zip-safe' \
 		\) -delete || die
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.