aports/main/python3/APKBUILD

276 lines
6.8 KiB
Text

# Maintainer: Natanael Copa <ncopa@alpinelinux.org>
# Contributor: Sheila Aman <sheila@vulpine.house>
pkgname=python3
# the python3-tkinter's pkgver needs to be synchronized with this.
pkgver=3.12.10
_basever="${pkgver%.*}"
pkgrel=0
pkgdesc="High-level scripting language"
url="https://www.python.org/"
arch="all"
license="PSF-2.0"
# pyc0 comes last because the files are named without a unique substring
subpackages="
$pkgname-dbg
$pkgname-dev
$pkgname-doc
$pkgname-tests::noarch
$pkgname-pyc:_default_pyc
$pkgname-pycache-pyc2
$pkgname-pycache-pyc1
$pkgname-pycache-pyc0
$pkgname-gdbm
pyc:_pyc_meta:noarch
"
depends="libssl3>=3.3.0"
makedepends="
!gettext-dev
bluez-headers
bzip2-dev
expat-dev
gdbm-dev
libffi-dev
linux-headers
mpdecimal-dev
musl-libintl
ncurses-dev
openssl-dev
readline-dev
sqlite-dev
tcl-dev
xz-dev
zlib-dev
"
source="https://www.python.org/ftp/python/$pkgver/Python-$pkgver.tar.xz
externally-managed
musl-find_library.patch
test_posix-nodev-disable.patch
fix-run_fileexflags-test.patch
"
options="net" # Required for tests
builddir="$srcdir/Python-$pkgver"
# secfixes:
# 3.12.9-r0:
# - CVE-2025-0938
# 3.12.8-r1:
# - CVE-2024-12254
# 3.12.8-r0:
# - CVE-2024-9287
# 3.12.6-r0:
# - CVE-2015-2104
# - CVE-2023-27043
# - CVE-2024-4032
# - CVE-2024-6232
# - CVE-2024-7592
# 3.12.5-r1:
# - CVE-2024-8088
# 3.12.5-r0:
# - CVE-2024-6923
# 3.11.5-r0:
# - CVE-2023-40217
# 3.11.1-r0:
# - CVE-2022-45061
# 3.10.5-r0:
# - CVE-2015-20107
# 3.9.5-r0:
# - CVE-2021-29921
# 3.9.4-r0:
# - CVE-2021-3426
# 3.8.8-r0:
# - CVE-2021-23336
# 3.8.7-r2:
# - CVE-2021-3177
# 3.8.5-r0:
# - CVE-2019-20907
# 3.8.4-r0:
# - CVE-2020-14422
# 3.8.2-r0:
# - CVE-2020-8315
# - CVE-2020-8492
# 3.7.5-r0:
# - CVE-2019-16056
# - CVE-2019-16935
# 3.6.8-r1:
# - CVE-2019-5010
# was briefly present, and is in 3.16
provides="pythonispython3=$pkgver-r$pkgrel"
prepare() {
default_prepare
# force system libs
rm -r Modules/expat
}
build() {
# set thread stack size to 2MB so we don't segfault before we hit
# sys.getrecursionlimit()
# note: raised from 1 as we ran into some stack limit on x86_64 too
# sometimes, but not recursion
local stacksize=0x200000
# we want -O2 here for more speed for such a large interpreter.
export CFLAGS_NODIST="$CFLAGS -O2 -DTHREAD_STACK_SIZE=$stacksize"
export CXXFLAGS_NODIST="$CXXFLAGS -O2"
export LDFLAGS_NODIST="$LDFLAGS -Wl,-z,stack-size=$stacksize"
case "$CARCH" in
ppc64le)
# FIXME: on ppc64le, the stack-clash-protection from gcc seems to segfault
# python.. sometimes. not sure if python or gcc bug (probably former)
# for an easy reproduction, run the testsuite of community/py3-lmdb
export CFLAGS_NODIST="${CFLAGS_NODIST/-fstack-clash-protection}"
export CXXFLAGS_NODIST="${CXXFLAGS_NODIST/-fstack-clash-protection}"
;;
esac
# we set them via NODIST to not propagate them and duplicate them to modules
unset LDFLAGS CFLAGS CXXFLAGS CPPFLAGS
./configure \
--build=$CBUILD \
--host=$CHOST \
--prefix=/usr \
--enable-ipv6 \
--enable-loadable-sqlite-extensions \
--enable-optimizations \
--enable-shared \
--with-lto \
--with-computed-gotos \
--with-dbmliborder=gdbm:ndbm \
--with-system-expat \
--with-system-libmpdec \
--without-ensurepip
make
}
check() {
# test that we reach recursionlimit before we segfault
cat > test-stacksize.py <<-EOF
import threading
import sys
def fun(i):
try:
fun(i+1)
except:
sys.exit(0)
t = threading.Thread(target=fun, args=[1])
t.start()
EOF
LD_LIBRARY_PATH=$PWD ./python test-stacksize.py
local fail
local ignore
# musl related
fail="test__locale" # various musl locale deficiencies
fail="$fail test_locale"
fail="$fail test_re"
fail="$fail test_c_locale_coercion"
fail="$fail test_datetime" # hangs if 'tzdata' installed
fail="$fail test_os" # fpathconf, ttyname errno values
ignore="test.test_strptime.StrptimeTests.test_date_locale2"
# FIXME: failures needing investigation
fail="$fail test_ctypes" # fail on aarch64 (ctypes.test.test_win32.Structures)
# kernel related
fail="$fail test_fcntl" # wants DNOTIFY, we don't have it
# test_clock_settime returns Function not implemented instead of the
# expected permission error in docker (CI). Disable for now.
case "$CARCH" in
ppc64le) fail="$fail test_time";;
esac
make quicktest TESTOPTS="-j${JOBS:-$(nproc)} --exclude $fail --ignore $ignore"
}
package() {
make -j1 DESTDIR="$pkgdir" EXTRA_CFLAGS="$CFLAGS" install maninstall
install -Dm644 LICENSE "$pkgdir"/usr/share/licenses/$pkgname/LICENSE
install -Dm644 "$srcdir"/externally-managed \
"$pkgdir"/usr/lib/python$_basever/EXTERNALLY-MANAGED
# those are provided by python3-tkinter
rm -r "$pkgdir"/usr/bin/idle* "$pkgdir"/usr/lib/python*/idlelib \
"$pkgdir"/usr/lib/python*/tkinter
ln -s python3 "$pkgdir"/usr/bin/python
ln -s python3-config "$pkgdir"/usr/bin/python-config
}
dev() {
default_dev
# pyconfig.h is needed runtime so we move it back
mkdir -p "$pkgdir"/usr/include/python$_basever
mv "$subpkgdir"/usr/include/python$_basever/pyconfig.h \
"$pkgdir"/usr/include/python$_basever/
}
tests() {
pkgdesc="The test modules from the main python package"
amove usr/lib/python$_basever/test
}
gdbm() {
pkgdesc="Python backend for GNU gdbm"
amove usr/lib/python3*/lib-dynload/_gdbm.cpython*
}
_pyc_meta() {
pkgdesc="Meta package for pulling in all -pyc packages"
depends=""
mkdir -p "$subpkgdir"
}
# python3-pyc, to install pyc by default
_default_pyc() {
pkgdesc="$pkgdesc (install .pyc cache files)"
install_if="$pkgname=$pkgver-r$pkgrel"
depends="
$pkgname-pycache-pyc0=$pkgver-r$pkgrel
pyc
"
mkdir -p "$subpkgdir"
}
pyc0() {
pkgdesc="$pkgdesc (.pyc pycache files)"
cd "$pkgdir"
amove $(find usr/lib/python3* -name "*.pyc")
}
pyc1() {
pkgdesc="$pkgdesc (.opt-1.pyc pycache files)"
cd "$pkgdir"
amove $(find usr/lib/python3* -name "*.opt-1.pyc")
}
pyc2() {
pkgdesc="$pkgdesc (.opt-2.pyc pycache files)"
cd "$pkgdir"
amove $(find usr/lib/python3* -name "*.opt-2.pyc")
}
sha512sums="
520c30e3958d0be3c127e5dbb1c52bb3bfc404b5b3c7eb56525e25b9b59af9b21b53bee192f323f470e1df806f6cb2dd3411eb90cbc1c4b7d9b6b0777c29e644 Python-3.12.10.tar.xz
46dd8230ee2ab66e9c4157c10b2bd9c414fd7f30be0bee73e21a9eea88f63fff362d47828e0fc77ddc59df097b414b21505f8b5f98bc866381115c58ae3f4862 externally-managed
ab8eaa2858d5109049b1f9f553198d40e0ef8d78211ad6455f7b491af525bffb16738fed60fc84e960c4889568d25753b9e4a1494834fea48291b33f07000ec2 musl-find_library.patch
606cf7b3df0c81c90571c6bc65e4f07e065867739fa0d36e9c8e1ad2d6bcd64d265f90c4a7881880fc7e0c85eed94d1f72655a5c70d92ca63e5cc4bd3be8f145 test_posix-nodev-disable.patch
0e1155b1976be46d68fe50161b9644ac272d95c51f44ada51a0fd67a0154df89833752e97cfc85e977b384fca82b58907c30405a103f3a33a1483b9f76ce632f fix-run_fileexflags-test.patch
"