From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from gate001.proxmox.com (gate001.proxmox.com [45.144.208.40]) by lore.proxmox.com (Postfix) with ESMTPS id 5856F1FF0AA for ; Tue, 22 Sep 2026 15:07:10 +0200 (CEST) Received: from gate001.proxmox.com (localhost.localdomain [127.0.0.1]) by gate001.proxmox.com (Proxmox) with ESMTP id BA2DF215CD; Tue, 22 Sep 2026 15:07:00 +0200 (CEST) From: Fiona Ebner To: pve-devel@lists.proxmox.com Subject: [PATCH-SERIES qemu 0/2] build: more integrity checks of copied sources Date: Tue, 22 Sep 2026 15:05:40 +0200 Message-ID: <20260922130652.374790-1-f.ebner@proxmox.com> X-Mailer: git-send-email 2.47.3 MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit X-Bm-Milter-Handled: 55990f41-d878-4baa-be0a-ee34c49e34d2 X-Bm-Transport-Timestamp: 1790082415942 X-SPAM-LEVEL: Spam detection results: 0 AWL 0.546 Adjusted score from AWL reputation of From: address DMARC_MISSING 0.1 Missing DMARC policy KAM_DMARC_STATUS 0.01 Test Rule for DKIM or SPF Failure with Strict Alignment (newer systems) RCVD_IN_DNSWL_MED -2.3 Sender listed at https://www.dnswl.org/, medium trust SPF_HELO_NONE 0.001 SPF: HELO does not publish an SPF Record SPF_PASS -0.001 SPF: sender matches SPF record Message-ID-Hash: R2NTYP27ZOU5ZSZSY3JGBHJZBFU6RDFU X-Message-ID-Hash: R2NTYP27ZOU5ZSZSY3JGBHJZBFU6RDFU X-MailFrom: f.ebner@proxmox.com X-Mailman-Rule-Misses: dmarc-mitigation; no-senders; approved; loop; banned-address; emergency; member-moderation; nonmember-moderation; administrivia; implicit-dest; max-recipients; max-size; news-moderation; no-subject; digests; suspicious-header X-Mailman-Version: 3.3.10 Precedence: list List-Id: Proxmox VE development discussion List-Help: List-Owner: List-Post: List-Subscribe: List-Unsubscribe: Commit fe22d79a16 ("build: clean copied QEMU sources") made the first step towards checking the QEMU sources for integrity. It is not enough however, because it does not detect a dirty state that comes from a removed file, and does also not ensure anything about the subprojects directories, which are part of .gitignore. This series improves the checking with regard to those aspects. See the individual patches for details. pve-qemu: Fiona Ebner (2): build: check that copied sources are not dirty build: track and check subproject state Makefile | 7 +- debian/verify-subproject-state.pl | 167 ++++++++++++++++++++++++++++++ 2 files changed, 173 insertions(+), 1 deletion(-) create mode 100755 debian/verify-subproject-state.pl Summary over all repositories: 2 files changed, 173 insertions(+), 1 deletions(-) -- Generated by git-murpp 0.5.0