feat(openssl): drop configure-project-installer, inline build#66
Merged
Sunrisepeak merged 1 commit intomainfrom May 1, 2026
Merged
feat(openssl): drop configure-project-installer, inline build#66Sunrisepeak merged 1 commit intomainfrom
Sunrisepeak merged 1 commit intomainfrom
Conversation
Switch fromsource:openssl from xim:configure-project-installer to its own inline build, applying the cluster-A sandbox-fix template: * paths derived from pkginfo.install_file() * Configure + make + make install_sw chained in single sh -c (openssl Configure does not support out-of-tree build, run from srcdir) * fixed -j8 * sysroot include dir wrapped in _sys_usr_includedir() helper * shell cp -r replaces os.dirs / os.files glob (silent no-ops in 0.4.9) * declare upstream url + sha256 * deps: add explicit xim:gcc + xim:make + xim:xpkg-helper (previously pulled in transitively via configure-project-installer) Build flags: linux-x86_64 enable-shared enable-legacy no-asm `no-asm` works around an openssl 3.1.5 perlasm/binutils bug: crypto/modes/aes-gcm-avx512.s emits `%SCALAR(...)` register names that binutils 2.42 (the assembler in our subos) rejects. C fallback is slower but stable; future binutils version bumps can drop the flag. `make install_sw` skips docs install (saves several minutes). Verified end-to-end in xlings 0.4.9 iso: ✓ Configure linux-x86_64 enable-shared enable-legacy no-asm ✓ make -j8 (~3 min on 8-core) ✓ make install_sw ✓ produced libssl.so.3 / libcrypto.so.3 + .so / .a ✓ openssl + c_rehash binaries staged ✓ headers (include/openssl/) shell-copied to subos sysroot Cluster B leaf 5/8.
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Summary
fromsource:opensslfromxim:configure-project-installershim to its own inline buildlinux-x86_64 enable-shared enable-legacy no-asmno-asm?openssl 3.1.5's perlasm output for AVX-512 (
crypto/modes/aes-gcm-avx512.s) emits%SCALAR(...)register names that the binutils 2.42 assembler in our subos rejects. C fallback is slower but stable; future binutils bumps can drop the flag.Verification (local isolated xlings 0.4.9)
libssl.so.3/libcrypto.so.3(+ .so / .a) under lib64/openssl+c_rehashbinaries stagedinclude/openssl/) copied to subos sysroot/usr/includeTest plan