Files
vhaudiquet 42d15face5 fix(release): pin the tap formula to the release tarball
The formula's url pointed at the tag's source archive while its
sha256 came from the darwin tarball — two files, one checksum, so
brew refused every install. The formula now pours the darwin tarball
itself: the release workflow attaches it to the GitHub release, the
tap formula pins that asset's real sha256, and installs stop
compiling rust (the CI-signed entitlement also survives, which a
source build would have stripped).
2026-10-31 19:29:00 -05:00

43 lines
1.6 KiB
Ruby

# The formula lives in the repo and ships through the
# vhaudiquet/homebrew-ecrou tap; it needs the same tap libkrun's
# krunkit comes from, because the engine is dlopen'd from those kegs
# at runtime.
class Ecrou < Formula
desc "a small microVM runtime based on libkrun"
homepage "https://github.com/vhaudiquet/ecrou"
# Placeholder pin: the release workflow rewrites url and sha256 on publish.
url "https://github.com/vhaudiquet/ecrou.git", tag: "v0.1.0"
license "MIT"
# libkrun's Hypervisor.framework backend is arm64-only upstream.
depends_on arch: :arm64
depends_on "libkrun/homebrew-krun/libkrun"
depends_on "e2fsprogs"
# A libarchive-capable mke2fs populates ext4 images from tarballs in
# one pass; without it the build falls back to a per-file tree walk.
depends_on "libarchive"
def install
# CI signed the binary with the hypervisor entitlement (a hard
# requirement on current macOS, the same one krunkit's formula
# signs for); a rebuild here would strip the signature, so the
# release tarball's binary is poured as-is.
bin.install "ecrou"
end
def caveats
<<~EOS
The binary is ad-hoc signed with the com.apple.security.hypervisor
entitlement. Rebuilding from source (cargo) requires re-signing:
codesign --force --sign - --entitlements packaging/homebrew/ecrou.entitlements target/release/ecrou
`ecrou probe` reports this when the entitlement is missing.
EOS
end
test do
system bin/"ecrou", "probe"
output = shell_output("#{bin}/ecrou run --quiet alpine -- uname -r").strip
assert_match(/\d+\.\d+/, output)
end
end