Publish baldeagleos-repo candidate 0000000325-20260922-184323

18 files changed, 533 insertions, 7 deletions

diff --git a/net-misc/airouter/Manifest b/net-misc/airouter/Manifest
new file mode 100644
index 000000000000..142952972b49
--- /dev/null
+++ b/net-misc/airouter/Manifest
@@ -0,0 +1,4 @@
+DIST airouter-0.1.2-r1.tar.zst 85425944 BLAKE2B f31bc203d9db5d16bfaac7a17431fa1b2f65e8de9c6e6240a4bc70a47ec3949dd01b361683a5b9ae5b5e005f542a94ceee7e39771ee8a8e3ec187a52da2c33b9 SHA512 237c90491641518056ff7a4309685acdf596cc1022fd37f1df6914b31b94c9c67c1a4ddd05aa0992e866f1f317ed65ee5ef0040c328c986ed307068acb6dca8e
+DIST airouter-0.1.2-r2.tar.zst 87017898 BLAKE2B a6e8af5a79a33f12c2f681ca3cefc9d6e66a558705b301ccb1e3b9dfeea3dc0d100779765dfbd53367160c07241e680cba67cda9384ec94c128f4a446a6f4bb1 SHA512 7d8d15367f761c75a59952142ec5570ec7b3bb77150e8f8da14c637083beed46a19d56f60fcff0683b5e8284cec8e252fca69f849796c74691fe4e2222f7a976
+DIST airouter-0.1.2-r3.tar.zst 86794645 BLAKE2B 00d5e90a8fa187d47e15535d50dd74269f36b77af819deb69b831b58f6d789a4921633ab2c7566ad14effbe76e42c10c7681a46f31e03ef7ef4a55a3e7292dc6 SHA512 ae72c824afd624a4cc563a8bb137cc6455367443a2b0da15bc81ea03978839456102c245d5c864147c631706cefbeab6467e4b3bbecdbe6cd786d0fb7b42bee7
+DIST llmbridge-0.1.2-20260919.tar.zst 116018 BLAKE2B a290d588687a0d37b14ba9845da0201b0c3b8f6a5495f39e9a0f96d89226c7f5907ff666a5de9b3e104bbb1479b5be913a1801b4324de1745a70209371e0da63 SHA512 28b3c1b27c179cef85871f5d2f7c1098cfe87d228abfa01118ac3bf44744d6bf866e92f1fd7738c9898380fdde217599a729ff68fe3fb3d471ed1cf3f0374ca7
diff --git a/net-misc/airouter/airouter-0.1.2-r1.ebuild b/net-misc/airouter/airouter-0.1.2-r1.ebuild
new file mode 100644
index 000000000000..0fde16b1ddae
--- /dev/null
+++ b/net-misc/airouter/airouter-0.1.2-r1.ebuild
@@ -0,0 +1,112 @@
+EAPI=8
+
+RUST_MIN_VER="1.88.0"
+inherit cargo
+
+DESCRIPTION="Metadata-only routing plane for owned and frontier AI compute"
+HOMEPAGE="https://trunkmasters.com/airouter"
+SRC_URI="https://distfiles.baldeagleos.com/airouter-0.1.2-r1.tar.zst https://distfiles.baldeagleos.com/llmbridge-0.1.2-20260919.tar.zst"
+S="${WORKDIR}/airouter"
+
+# The archive contains AIRouter, its pinned LLMBridge path dependency, and a
+# complete Cargo vendor tree. The package must build without /srv/airouter or
+# network access.
+LICENSE="MIT"
+SLOT="0"
+KEYWORDS="~amd64"
+
+
+RDEPEND="
+    acct-group/airouter
+    acct-group/airouter-admin
+    acct-group/airouter-framework
+    acct-user/airouter
+    acct-user/airouter-agent
+    dev-db/postgresql
+    >=dev-lang/python-3.10
+    sys-apps/acl
+    sys-apps/bubblewrap
+    sys-apps/util-linux
+"
+BDEPEND="
+    net-misc/rsync
+    >=dev-lang/rust-1.88.0
+"
+
+src_unpack() {
+    # Portage on the target profile does not unpack .tar.zst through the
+    # generic helper; extract both immutable source inputs explicitly.
+    tar --zstd -xf "${DISTDIR}/airouter-0.1.2-r1.tar.zst" -C "${WORKDIR}" || die
+    tar --zstd -xf "${DISTDIR}/llmbridge-0.1.2-20260919.tar.zst" -C "${WORKDIR}" || die
+    mv "${WORKDIR}/llmbridge-0.1.2-20260919" "${WORKDIR}/llmbridge" || die
+}
+
+src_compile() {
+    cargo build --offline --release --workspace --locked \
+        --features "airouter-catalog/skills-tools,airouter-catalog/workspace-tools,\
+airouter-catalog/development-tools,airouter-catalog/release-tools,\
+airouter-catalog/learning-tools,airouter-catalog/host-tools,\
+airouter-catalog/control-tools" || die
+}
+
+src_install() {
+    dosbin target/release/airouterd
+    dosbin target/release/airouter-agentd
+    dosbin target/release/airouterctl
+    dosbin target/release/airouter-catalog
+    dosbin target/release/airouter-host
+    dosbin target/release/airouter-release
+    dosbin target/release/airouter-verify
+    dosbin target/release/airouter-permissions
+    dosbin target/release/airouter-toolsd
+    dobin target/release/airouter-smoke
+    dobin target/release/airouter-tool
+    exeinto /usr/libexec/airouter
+    doexe target/release/enroll-node
+    doexe packaging/scripts/airouter-renew-node-server
+    doexe packaging/scripts/airouter-capability-refresh
+    doexe packaging/scripts/airouter-framework-backup
+    doexe packaging/scripts/airouter-tools-launch
+    doexe target/release/airouter-desktop-worker
+    exeinto /usr/libexec/airouter/catalog
+    doexe target/release/airouter-skills-catalog
+    doexe target/release/airouter-workspace-catalog
+    doexe target/release/airouter-development-catalog
+    doexe target/release/airouter-release-catalog
+    doexe target/release/airouter-learning-catalog
+    doexe target/release/airouter-host-catalog
+    doexe target/release/airouter-control-catalog
+    newexe scripts/airouter-route.py airouter-route
+    insinto /etc/cron.d
+    doins packaging/cron/airouter-server-cert-renew
+    doins packaging/cron/airouter-capability-refresh
+    doins packaging/cron/airouter-framework-backup
+    insinto /etc/airouter
+    doins config/airouter.toml
+    newins config/framework.example.toml framework.toml
+    doins config/tools.example.toml config/tools-client.example.toml
+    newins config/routing.example.json routing.json
+    insinto /etc/airouter-capabilities
+    newins packaging/capabilities.sources.example.json sources.json
+    insinto /etc/airouter/qualification
+    doins packaging/qualification/native-codex-workbench.json
+    diropts -o airouter -g airouter -m 0700
+    keepdir /etc/airouter/secrets
+    newinitd packaging/openrc/airouterd airouterd
+    newinitd packaging/openrc/airouter-frameworkd airouter-frameworkd
+    newinitd packaging/openrc/airouter-catalog-refresh airouter-catalog-refresh
+    newinitd packaging/openrc/airouter-qualification airouter-qualification
+    newinitd packaging/openrc/airouter-toolsd airouter-toolsd
+    docinto tools
+    dodoc config/tools.example.toml config/tools-client.example.toml crates/airouter-tools/README.md crates/airouter-tools/DESKTOPS.md
+    docinto /
+    dodoc README.md schema/README.md
+    diropts -o airouter -g airouter -m 0750
+    keepdir /var/lib/airouter
+    keepdir /var/backups/airouter-framework
+}
+
+pkg_postinst() {
+    elog "Create the signing key with: airouterctl generate-signing-key"
+    elog "Apply migrations with the restricted airouter_migrate role before starting airouterd."
+}
diff --git a/net-misc/airouter/airouter-0.1.2-r2.ebuild b/net-misc/airouter/airouter-0.1.2-r2.ebuild
new file mode 100755
index 000000000000..a68bfd21c0f6
--- /dev/null
+++ b/net-misc/airouter/airouter-0.1.2-r2.ebuild
@@ -0,0 +1,113 @@
+EAPI=8
+
+RUST_MIN_VER="1.88.0"
+inherit cargo
+
+DESCRIPTION="Metadata-only routing plane for owned and frontier AI compute"
+HOMEPAGE="https://trunkmasters.com/airouter"
+SRC_URI="https://distfiles.baldeagleos.com/airouter-0.1.2-r2.tar.zst https://distfiles.baldeagleos.com/llmbridge-0.1.2-20260919.tar.zst"
+S="${WORKDIR}/airouter"
+
+# The archive contains AIRouter, its pinned LLMBridge path dependency, and a
+# complete Cargo vendor tree. The package must build without /srv/airouter or
+# network access.
+LICENSE="MIT"
+SLOT="0"
+KEYWORDS="~amd64"
+
+
+RDEPEND="
+    acct-group/airouter
+    acct-group/airouter-admin
+    acct-group/airouter-framework
+    acct-user/airouter
+    acct-user/airouter-agent
+    dev-db/postgresql
+    sys-auth/citadel
+    >=dev-lang/python-3.10
+    sys-apps/acl
+    sys-apps/bubblewrap
+    sys-apps/util-linux
+"
+BDEPEND="
+    net-misc/rsync
+    >=dev-lang/rust-1.88.0
+"
+
+src_unpack() {
+    # Portage on the target profile does not unpack .tar.zst through the
+    # generic helper; extract both immutable source inputs explicitly.
+    tar --zstd -xf "${DISTDIR}/airouter-0.1.2-r2.tar.zst" -C "${WORKDIR}" || die
+    tar --zstd -xf "${DISTDIR}/llmbridge-0.1.2-20260919.tar.zst" -C "${WORKDIR}" || die
+    mv "${WORKDIR}/llmbridge-0.1.2-20260919" "${WORKDIR}/llmbridge" || die
+}
+
+src_compile() {
+    cargo build --offline --release --workspace --locked \
+        --features "airouter-catalog/skills-tools,airouter-catalog/workspace-tools,\
+airouter-catalog/development-tools,airouter-catalog/release-tools,\
+airouter-catalog/learning-tools,airouter-catalog/host-tools,\
+airouter-catalog/control-tools" || die
+}
+
+src_install() {
+    dosbin target/release/airouterd
+    dosbin target/release/airouter-agentd
+    dosbin target/release/airouterctl
+    dosbin target/release/airouter-catalog
+    dosbin target/release/airouter-host
+    dosbin target/release/airouter-release
+    dosbin target/release/airouter-verify
+    dosbin target/release/airouter-permissions
+    dosbin target/release/airouter-toolsd
+    dobin target/release/airouter-smoke
+    dobin target/release/airouter-tool
+    exeinto /usr/libexec/airouter
+    doexe target/release/enroll-node
+    doexe packaging/scripts/airouter-renew-node-server
+    doexe packaging/scripts/airouter-capability-refresh
+    doexe packaging/scripts/airouter-framework-backup
+    doexe packaging/scripts/airouter-tools-launch
+    doexe target/release/airouter-desktop-worker
+    exeinto /usr/libexec/airouter/catalog
+    doexe target/release/airouter-skills-catalog
+    doexe target/release/airouter-workspace-catalog
+    doexe target/release/airouter-development-catalog
+    doexe target/release/airouter-release-catalog
+    doexe target/release/airouter-learning-catalog
+    doexe target/release/airouter-host-catalog
+    doexe target/release/airouter-control-catalog
+    newexe scripts/airouter-route.py airouter-route
+    insinto /etc/cron.d
+    doins packaging/cron/airouter-server-cert-renew
+    doins packaging/cron/airouter-capability-refresh
+    doins packaging/cron/airouter-framework-backup
+    insinto /etc/airouter
+    doins config/airouter.toml
+    newins config/framework.example.toml framework.toml
+    doins config/tools.example.toml config/tools-client.example.toml
+    newins config/routing.example.json routing.json
+    insinto /etc/airouter-capabilities
+    newins packaging/capabilities.sources.example.json sources.json
+    insinto /etc/airouter/qualification
+    doins packaging/qualification/native-codex-workbench.json
+    diropts -o airouter -g airouter -m 0700
+    keepdir /etc/airouter/secrets
+    newinitd packaging/openrc/airouterd airouterd
+    newinitd packaging/openrc/airouter-frameworkd airouter-frameworkd
+    newinitd packaging/openrc/airouter-catalog-refresh airouter-catalog-refresh
+    newinitd packaging/openrc/airouter-qualification airouter-qualification
+    newinitd packaging/openrc/airouter-toolsd airouter-toolsd
+    docinto tools
+    dodoc config/tools.example.toml config/tools-client.example.toml crates/airouter-tools/README.md crates/airouter-tools/DESKTOPS.md
+    docinto /
+    dodoc README.md schema/README.md
+    diropts -o airouter -g airouter -m 0750
+    keepdir /var/lib/airouter
+    keepdir /var/backups/airouter-framework
+}
+
+pkg_postinst() {
+    elog "Create the signing key with: airouterctl generate-signing-key"
+    elog "Apply migrations with the restricted airouter_migrate role before starting airouterd."
+}
diff --git a/net-misc/airouter/airouter-0.1.2-r3.ebuild b/net-misc/airouter/airouter-0.1.2-r3.ebuild
new file mode 100755
index 000000000000..54c400f0b5a1
--- /dev/null
+++ b/net-misc/airouter/airouter-0.1.2-r3.ebuild
@@ -0,0 +1,115 @@
+EAPI=8
+
+RUST_MIN_VER="1.88.0"
+inherit cargo
+
+DESCRIPTION="Metadata-only routing plane for owned and frontier AI compute"
+HOMEPAGE="https://trunkmasters.com/airouter"
+SRC_URI="https://distfiles.baldeagleos.com/airouter-0.1.2-r3.tar.zst https://distfiles.baldeagleos.com/llmbridge-0.1.2-20260919.tar.zst"
+S="${WORKDIR}/airouter"
+
+# The archive contains AIRouter, its pinned LLMBridge path dependency, and a
+# complete Cargo vendor tree. The package must build without /srv/airouter or
+# network access.
+LICENSE="MIT"
+SLOT="0"
+KEYWORDS="~amd64"
+
+
+RDEPEND="
+    acct-group/airouter
+    acct-group/airouter-admin
+    acct-group/airouter-framework
+    acct-user/airouter
+    acct-user/airouter-agent
+    dev-db/postgresql
+    sys-auth/citadel
+    >=dev-lang/python-3.10
+    sys-apps/acl
+    sys-apps/bubblewrap
+    sys-apps/util-linux
+"
+BDEPEND="
+    net-misc/rsync
+    >=dev-lang/rust-1.88.0
+"
+
+src_unpack() {
+    # Portage on the target profile does not unpack .tar.zst through the
+    # generic helper; extract both immutable source inputs explicitly.
+    tar --zstd -xf "${DISTDIR}/airouter-0.1.2-r3.tar.zst" -C "${WORKDIR}" || die
+    tar --zstd -xf "${DISTDIR}/llmbridge-0.1.2-20260919.tar.zst" -C "${WORKDIR}" || die
+    mv "${WORKDIR}/llmbridge-0.1.2-20260919" "${WORKDIR}/llmbridge" || die
+}
+
+src_compile() {
+    cargo build --offline --release --workspace --locked \
+        --features "airouter-catalog/skills-tools,airouter-catalog/workspace-tools,\
+airouter-catalog/development-tools,airouter-catalog/release-tools,\
+airouter-catalog/learning-tools,airouter-catalog/host-tools,\
+airouter-catalog/control-tools" || die
+}
+
+src_install() {
+    dosbin target/release/airouterd
+    dosbin target/release/airouter-agentd
+    dosbin target/release/airouterctl
+    dosbin target/release/airouter-catalog
+    dosbin target/release/airouter-host
+    dosbin target/release/airouter-release
+    dosbin target/release/airouter-verify
+    dosbin target/release/airouter-permissions
+    dosbin target/release/airouter-toolsd
+    dobin target/release/airouter-smoke
+    dobin target/release/airouter-tool
+    exeinto /usr/libexec/airouter
+    doexe target/release/enroll-node
+    doexe packaging/scripts/airouter-renew-node-server
+    doexe packaging/scripts/airouter-capability-refresh
+    doexe packaging/scripts/airouter-framework-backup
+    doexe packaging/scripts/airouter-tools-launch
+    doexe target/release/airouter-desktop-worker
+    exeinto /usr/libexec/airouter/catalog
+    doexe target/release/airouter-skills-catalog
+    doexe target/release/airouter-workspace-catalog
+    doexe target/release/airouter-development-catalog
+    doexe target/release/airouter-release-catalog
+    doexe target/release/airouter-learning-catalog
+    doexe target/release/airouter-host-catalog
+    doexe target/release/airouter-control-catalog
+    newexe scripts/airouter-route.py airouter-route
+    exeinto /usr/libexec/airouter/qualification
+    doexe scripts/qualify-citadel-session.py
+    insinto /etc/cron.d
+    doins packaging/cron/airouter-server-cert-renew
+    doins packaging/cron/airouter-capability-refresh
+    doins packaging/cron/airouter-framework-backup
+    insinto /etc/airouter
+    doins config/airouter.toml
+    newins config/framework.example.toml framework.toml
+    doins config/tools.example.toml config/tools-client.example.toml
+    newins config/routing.example.json routing.json
+    insinto /etc/airouter-capabilities
+    newins packaging/capabilities.sources.example.json sources.json
+    insinto /etc/airouter/qualification
+    doins packaging/qualification/native-codex-workbench.json
+    diropts -o airouter -g airouter -m 0700
+    keepdir /etc/airouter/secrets
+    newinitd packaging/openrc/airouterd airouterd
+    newinitd packaging/openrc/airouter-frameworkd airouter-frameworkd
+    newinitd packaging/openrc/airouter-catalog-refresh airouter-catalog-refresh
+    newinitd packaging/openrc/airouter-qualification airouter-qualification
+    newinitd packaging/openrc/airouter-toolsd airouter-toolsd
+    docinto tools
+    dodoc config/tools.example.toml config/tools-client.example.toml crates/airouter-tools/README.md crates/airouter-tools/DESKTOPS.md
+    docinto /
+    dodoc README.md schema/README.md
+    diropts -o airouter -g airouter -m 0750
+    keepdir /var/lib/airouter
+    keepdir /var/backups/airouter-framework
+}
+
+pkg_postinst() {
+    elog "Create the signing key with: airouterctl generate-signing-key"
+    elog "Apply migrations with the restricted airouter_migrate role before starting airouterd."
+}
diff --git a/net-misc/airouter/metadata.xml b/net-misc/airouter/metadata.xml
new file mode 100644
index 000000000000..bd2b3a7a6e38
--- /dev/null
+++ b/net-misc/airouter/metadata.xml
@@ -0,0 +1,10 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!DOCTYPE pkgmetadata SYSTEM "https://docs.baldeagleos.com/dtd/metadata.dtd">
+<pkgmetadata>
+  <maintainer type="person">
+    <email>root@localhost</email>
+    <name>Trunkmasters local systems</name>
+  </maintainer>
+  <longdescription>Airouter routes typed AI invocations without retaining payload content.</longdescription>
+  <origin>baldeagleos-repo</origin>
+</pkgmetadata>
diff --git a/net-misc/curl-impersonate/Manifest b/net-misc/curl-impersonate/Manifest
new file mode 100644
index 000000000000..9d02c983462d
--- /dev/null
+++ b/net-misc/curl-impersonate/Manifest
@@ -0,0 +1,11 @@
+DIST boringssl-156c7b75ae9b8c3b3f847acf264f17594c3859fb.zip 80313844 BLAKE2B 65a466046a3e24e36d810afc18c700e6e41bbf1f683be858cf973e85a48126ec1562cfd9f7f91dba50f4c78591bdfc0af823587c30d75bc79d9bd2991a3d2999 SHA512 1bd18f7344d6b30ff58f7e4319d7932ba915f235ee7552a997fc59977a863fc66ab3bbcc5020584cf0ef0b17af0bc2bcc87e083c7cd71993c9fc78e5af469767
+DIST brotli-1.2.0.tar.gz 646315 BLAKE2B e38ea35f4abe47b2113ccc0778bb7b0be77dcf4d26ce248347ecc4cfdea7ba40d17e0b175cad6f82055d07b1ec9976ffea649f59065866db2c36116c77e59824 SHA512 f94542afd2ecd96cc41fd21a805a3da314281ae558c10650f3e6d9ca732b8425bba8fde312823f0a564c7de3993bdaab5b43378edab65ebb798cefb6fd702256
+DIST cares-1.34.8.tar.gz 1036098 BLAKE2B b5a88811d8ee6a0c06737746a356bc1fc7c13416b11a0af3a2e6cab092d97adebb93234cf73b97a12b06b764f8562272a793961dc3367024c4322d923ac43f9f SHA512 d5997a57fda9b3a3385b1685e6b2f9292c3a1d39bd27579acaabf3d2d33aa5e91bfec5d41c5e51ca6b50dbc1f4346d75e9bfbccf44a494fbd4bc7613b167143c
+DIST curl-8.22.0.tar.gz 3695419 BLAKE2B d01692a64f41e6f5a5218908507e98782b46ef2076a886a05199add04d1f9c805b3074d5dc8225af82c9000c8592462acb3e9d10bca05c04f9ac2b5aeeb9411c SHA512 6284a82c908329fda4b5a8c2efe409bf477a1fd79a0b71c04ae62ee407a4f00751722e98c1b73c728b0b79ee032eed1d1903876783c48cc6be71166619c025a7
+DIST curl-impersonate-2.2.3.tar.gz 219040 BLAKE2B 9c85c59587d8ee04cbfc05ce8dd78fff0ba2220c0467086702f2fb6c12f5c015e0215d61efadd82c175f6277cc76f12d6256efb52d058b2d35df79f0e8c9b6c5 SHA512 441fae71735571f7b8ec14040339642ebcfafaccc34262cba717e36470ef7ec65a4c03d15cd29eb7d90cb387989f8efda646d51b44697cc17de6fdbc07fd2eca
+DIST libidn2-2.3.7.tar.gz 2155214 BLAKE2B 40fde88e6be1e4665738855608a65c949834728463a3fb466192403f1076e99f7d399b9631308ff6776a28915251a0136ddfe6a67e8e010c7ccdb7fc64125d39 SHA512 eab5702bc0baed45492f8dde43a4d2ea3560ad80645e5f9e0cfa8d3b57bccd7fd782d04638e000ba07924a5d9f85e760095b55189188c4017b94705bef9b4a66
+DIST nghttp2-1.63.0.tar.bz2 2012107 BLAKE2B 8caab3602d79abe03f0b266feba07edbdcc95288824d41b39c672a74a9ef9c97e9421138eba4fc04c87aaaa0f26a7ce3779831825629f421f293481fa9f315e3 SHA512 a328b4642c6ca4395adfcaaf4e6eb6dbd39fa7bd86f872a76260af59a5a830e0ff5ad015865d6bc00e0baa8e4d0d9a67b4b97e9d78e5e05d1c53522364e5e235
+DIST nghttp3-1.15.0.tar.bz2 519681 BLAKE2B 95064a8c9025822937af77da74b6f9b3bb6bef012678d20a2daf20c16b9f242c0a637f2dac009da82addb359200a72614efa1e2cbb2b464ae164d58c4d6f3f02 SHA512 e2de0402f3b75f081f421052e8fc72d7a679fbab67b8b1ba383bbfc61c90e7ff58e475c563747712a680e367af237c47f3f890326a55440bfdd2e51d0ea1fb6c
+DIST ngtcp2-1.20.0.tar.bz2 898205 BLAKE2B cb5fa78f07c8fe1dfe5890894e1f7811ae5750f7afc77bd6ff83b7086cd0654882f6acc58f2611af2a69827125a6f58d6e11721958a1d2ebd7b4fd092ba6a5eb SHA512 fead05300f91fe79bbacb1f57ca7f5e390ec0af5f847bcf2800434e0fa9a895851b71cc9774b0ac04cdd4d660bb1c02ddfa88cb08287649f57ce327a434b4262
+DIST zlib-1.3.1.tar.gz 1512791 BLAKE2B 872ef9cc41ba57e9809ab5714ffa15cc9d3ef6c4a948c57107f800fc373bcfe2475136407203cb9aa33b189994336f36f2757b7a582e065ad477bfd49260184b SHA512 580677aad97093829090d4b605ac81c50327e74a6c2de0b85dd2e8525553f3ddde17556ea46f8f007f89e435493c9a20bc997d1ef1c1c2c23274528e3c46b94f
+DIST zstd-1.5.7.tar.gz 2434947 BLAKE2B ef6bcf13bbb79edce2de21ef4860b01dcb4d2dd47ebd03657d5331c3bb1a207ef128e99ed907a32e787dca7bb51df225ebd8abb2097d03d02c003ca713e1e271 SHA512 b4de208f179b68d4c6454139ca60d66ed3ef3893a560d6159a056640f83d3ee67cdf6ffb88971cdba35449dba4b597eaa8b4ae908127ef7fd58c89f40bf9a705
diff --git a/net-misc/curl-impersonate/curl-impersonate-2.2.3.ebuild b/net-misc/curl-impersonate/curl-impersonate-2.2.3.ebuild
new file mode 100644
index 000000000000..24a580fa85bf
--- /dev/null
+++ b/net-misc/curl-impersonate/curl-impersonate-2.2.3.ebuild
@@ -0,0 +1,66 @@
+# Copyright 1999-2026 Gentoo Authors
+# Distributed under the terms of the GNU General Public License v2
+
+EAPI=8
+
+inherit cmake
+
+BORINGSSL_V="156c7b75ae9b8c3b3f847acf264f17594c3859fb"
+BROTLI_V="1.2.0"
+CARES_V="1.34.8"
+CURL_V="8.22.0"
+LIBIDN2_V="2.3.7"
+NGHTTP2_V="1.63.0"
+NGHTTP3_V="1.15.0"
+NGTCP2_V="1.20.0"
+ZLIB_V="1.3.1"
+ZSTD_V="1.5.7"
+
+DESCRIPTION="Build of curl that impersonates real browsers"
+HOMEPAGE="https://github.com/lexiforest/curl-impersonate"
+SRC_URI="
+	https://github.com/lexiforest/curl-impersonate/archive/refs/tags/v${PV}.tar.gz -> ${P}.tar.gz
+	https://github.com/google/boringssl/archive/${BORINGSSL_V}.zip -> boringssl-${BORINGSSL_V}.zip
+	https://github.com/google/brotli/archive/refs/tags/v${BROTLI_V}.tar.gz -> brotli-${BROTLI_V}.tar.gz
+	https://github.com/c-ares/c-ares/releases/download/v${CARES_V}/c-ares-${CARES_V}.tar.gz -> cares-${CARES_V}.tar.gz
+	https://github.com/curl/curl/archive/curl-${CURL_V//./_}.tar.gz -> curl-${CURL_V}.tar.gz
+	mirror://gnu/libidn/libidn2-${LIBIDN2_V}.tar.gz
+	https://github.com/nghttp2/nghttp2/releases/download/v${NGHTTP2_V}/nghttp2-${NGHTTP2_V}.tar.bz2
+	https://github.com/ngtcp2/nghttp3/releases/download/v${NGHTTP3_V}/nghttp3-${NGHTTP3_V}.tar.bz2
+	https://github.com/ngtcp2/ngtcp2/releases/download/v${NGTCP2_V}/ngtcp2-${NGTCP2_V}.tar.bz2
+	https://github.com/madler/zlib/releases/download/v${ZLIB_V}/zlib-${ZLIB_V}.tar.gz
+	https://github.com/facebook/zstd/releases/download/v${ZSTD_V}/zstd-${ZSTD_V}.tar.gz
+"
+
+LICENSE="MIT"
+SLOT="0"
+KEYWORDS="~amd64"
+
+src_unpack() {
+	unpack "${P}.tar.gz"
+}
+
+src_prepare() {
+	cmake_src_prepare
+
+	sed -e "s#^set(BORINGSSL_URL .*#set(BORINGSSL_URL \"${DISTDIR}/boringssl-${BORINGSSL_V}.zip\")#" \
+		-e "s#^set(BROTLI_URL .*#set(BROTLI_URL \"${DISTDIR}/brotli-${BROTLI_V}.tar.gz\")#" \
+		-e "s#^set(CARES_URL .*#set(CARES_URL \"${DISTDIR}/cares-${CARES_V}.tar.gz\")#" \
+		-e "s#^set(CURL_URL .*#set(CURL_URL \"${DISTDIR}/curl-${CURL_V}.tar.gz\")#" \
+		-e "s#^set(NGHTTP2_URL .*#set(NGHTTP2_URL \"${DISTDIR}/nghttp2-${NGHTTP2_V}.tar.bz2\")#" \
+		-e "s#^set(NGHTTP3_URL .*#set(NGHTTP3_URL \"${DISTDIR}/nghttp3-${NGHTTP3_V}.tar.bz2\")#" \
+		-e "s#^set(NGTCP2_URL .*#set(NGTCP2_URL \"${DISTDIR}/ngtcp2-${NGTCP2_V}.tar.bz2\")#" \
+		-e "s#^set(ZLIB_URL .*#set(ZLIB_URL \"${DISTDIR}/zlib-${ZLIB_V}.tar.gz\")#" \
+		-e "s#^set(ZSTD_URL .*#set(ZSTD_URL \"${DISTDIR}/zstd-${ZSTD_V}.tar.gz\")#" \
+		-i "CMakeLists.txt" || die
+
+	mkdir -p "${BUILD_DIR}/deps/downloads" || die
+	ln -s "${DISTDIR}/libidn2-${LIBIDN2_V}.tar.gz" "${BUILD_DIR}/deps/downloads"
+	make prepare-libidn2 BUILD_DIR="${BUILD_DIR}"
+}
+
+src_install() {
+	cmake_src_install
+
+	mv "${ED}/usr/include/"{curl,curl-impersonate} || die
+}
diff --git a/net-misc/curl-impersonate/metadata.xml b/net-misc/curl-impersonate/metadata.xml
new file mode 100644
index 000000000000..1794ad089571
--- /dev/null
+++ b/net-misc/curl-impersonate/metadata.xml
@@ -0,0 +1,12 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!DOCTYPE pkgmetadata SYSTEM "https://docs.baldeagleos.com/dtd/metadata.dtd">
+<pkgmetadata>
+  <maintainer type="person">
+    <name>Pavel Sobolev</name>
+    <email>contact@paveloom.dev</email>
+  </maintainer>
+  <upstream>
+    <bugs-to>https://github.com/lexiforest/curl-impersonate/issues</bugs-to>
+  </upstream>
+  <origin>baldeagleos-repo</origin>
+</pkgmetadata>
diff --git a/net-misc/gerbera/gerbera-3.2.1.ebuild b/net-misc/gerbera/gerbera-3.2.1.ebuild
index 8d807c656951..9f1051d24413 100644
--- a/net-misc/gerbera/gerbera-3.2.1.ebuild
+++ b/net-misc/gerbera/gerbera-3.2.1.ebuild
@@ -14,7 +14,7 @@ if [[ ${PV} == 9999 ]]; then
 else
 	SRC_URI="https://github.com/gerbera/${PN}/archive/refs/tags/v${PV}.tar.gz -> ${P}.tar.gz"
 	S="${WORKDIR}/${P}"
-	KEYWORDS="~amd64 ~arm ~arm64 ~x86"
+	KEYWORDS="amd64 ~arm ~arm64 ~x86"
 fi
 
 LICENSE="GPL-2"
diff --git a/net-misc/nat-traverse/nat-traverse-0.7.ebuild b/net-misc/nat-traverse/nat-traverse-0.7.ebuild
index abea8dc7223f..b1a98d280b95 100644
--- a/net-misc/nat-traverse/nat-traverse-0.7.ebuild
+++ b/net-misc/nat-traverse/nat-traverse-0.7.ebuild
@@ -1,4 +1,4 @@
-# Copyright 1999-2025 Gentoo Authors
+# Copyright 1999-2026 Gentoo Authors
 # Distributed under the terms of the GNU General Public License v2
 
 EAPI=8
@@ -9,7 +9,7 @@ SRC_URI="https://gitlab.com/iblech/${PN}/-/raw/master/${P}.tar.bz2"
 
 LICENSE="GPL-2"
 SLOT="0"
-KEYWORDS="~amd64 ~arm ~mips ~ppc ~ppc64 ~x86"
+KEYWORDS="amd64 ~arm ~mips ~ppc ~ppc64 x86"
 
 RDEPEND=">=dev-lang/perl-5.6.1"
 
diff --git a/net-misc/openssh/openssh-10.4_p1-r1.ebuild b/net-misc/openssh/openssh-10.4_p1-r1.ebuild
index 21dfb1693442..785d483b3787 100644
--- a/net-misc/openssh/openssh-10.4_p1-r1.ebuild
+++ b/net-misc/openssh/openssh-10.4_p1-r1.ebuild
@@ -23,7 +23,7 @@ S="${WORKDIR}/${PARCH}"
 
 LICENSE="BSD GPL-2"
 SLOT="0"
-KEYWORDS="~alpha amd64 arm ~arm64 ~hppa ~loong ~m68k ~mips ppc ppc64 ~riscv ~s390 ~sparc x86 ~arm64-macos ~x64-macos ~x64-solaris"
+KEYWORDS="~alpha amd64 arm arm64 ~hppa ~loong ~m68k ~mips ppc ppc64 ~riscv ~s390 ~sparc x86 ~arm64-macos ~x64-macos ~x64-solaris"
 # Probably want to drop ssl defaulting to on in a future version.
 IUSE="abi_mips_n32 audit debug kerberos ldns libedit livecd pam seccomp security-key selinux +ssl static test"
 
diff --git a/net-misc/rabbitmq-server/rabbitmq-server-4.2.4.ebuild b/net-misc/rabbitmq-server/rabbitmq-server-4.2.4.ebuild
index 60e15f55fd16..510b4276c071 100644
--- a/net-misc/rabbitmq-server/rabbitmq-server-4.2.4.ebuild
+++ b/net-misc/rabbitmq-server/rabbitmq-server-4.2.4.ebuild
@@ -14,7 +14,7 @@ SRC_URI="https://github.com/rabbitmq/rabbitmq-server/releases/download/v${PV}/${
 
 LICENSE="MPL-2.0"
 SLOT="0"
-KEYWORDS="~amd64 ~arm64 ~x86"
+KEYWORDS="amd64 ~arm64 x86"
 IUSE="selinux"
 REQUIRED_USE="${PYTHON_REQUIRED_USE}"
 RESTRICT="test"
diff --git a/net-misc/searxng/files/searxng.confd b/net-misc/searxng/files/searxng.confd
new file mode 100644
index 000000000000..87530d91fe38
--- /dev/null
+++ b/net-misc/searxng/files/searxng.confd
@@ -0,0 +1,12 @@
+# /etc/conf.d/searxng
+# Configuration for SearXNG OpenRC service
+
+# User and group to run as
+SEARXNG_USER="searxng"
+SEARXNG_GROUP="searxng"
+
+# Working directory
+SEARXNG_HOME="/var/lib/searxng"
+
+# Log file
+SEARXNG_LOG="/var/log/searxng/searxng.log"
diff --git a/net-misc/searxng/files/searxng.initd b/net-misc/searxng/files/searxng.initd
new file mode 100644
index 000000000000..ac72c2bb2038
--- /dev/null
+++ b/net-misc/searxng/files/searxng.initd
@@ -0,0 +1,36 @@
+#!/sbin/openrc-run
+# Copyright 1999-2026 Gentoo Authors
+# Distributed under the terms of the GNU General Public License v2
+
+depend() {
+	need net
+}
+
+description="SearXNG metasearch engine"
+
+: ${SEARXNG_USER:=searxng}
+: ${SEARXNG_GROUP:=searxng}
+: ${SEARXNG_HOME:=/var/lib/searxng}
+: ${SEARXNG_LOG:=/var/log/searxng/searxng.log}
+
+command="/usr/bin/searxng-run"
+pidfile="/run/searxng/searxng.pid"
+retry="TERM/5/KILL/5"
+
+start_pre() {
+	checkpath -d -m 0755 -o "${SEARXNG_USER}:${SEARXNG_GROUP}" /run/searxng
+	checkpath -d -m 0750 -o "${SEARXNG_USER}:${SEARXNG_GROUP}" /var/log/searxng
+	checkpath -f -m 0640 -o "${SEARXNG_USER}:${SEARXNG_GROUP}" "${SEARXNG_LOG}"
+}
+
+start() {
+	ebegin "Starting SearXNG"
+	start-stop-daemon --start \
+		--pidfile "${pidfile}" \
+		--user "${SEARXNG_USER}:${SEARXNG_GROUP}" \
+		--background \
+		--make-pidfile \
+		--exec "${command}" \
+		--stderr "${SEARXNG_LOG}"
+	eend $?
+}
diff --git a/net-misc/searxng/files/settings.yml b/net-misc/searxng/files/settings.yml
new file mode 100644
index 000000000000..24bdf74bf828
--- /dev/null
+++ b/net-misc/searxng/files/settings.yml
@@ -0,0 +1,7 @@
+# Full documentation: https://docs.searxng.org/admin/settings/settings.html
+
+use_default_settings: true
+server:
+  secret_key: "ultrasecretkey"   # change this!
+  bind_address: "127.0.0.1"
+  port: 8888
diff --git a/net-misc/searxng/searxng-9999.ebuild b/net-misc/searxng/searxng-9999.ebuild
index d9213ef44dc5..4b67d58357db 100644
--- a/net-misc/searxng/searxng-9999.ebuild
+++ b/net-misc/searxng/searxng-9999.ebuild
@@ -23,6 +23,7 @@ RDEPEND="
 
 	$(python_gen_cond_dep '
 		dev-python/babel[${PYTHON_USEDEP}]
+		dev-python/curl-cffi[${PYTHON_USEDEP}]
 		dev-python/flask-babel[${PYTHON_USEDEP}]
 		dev-python/flask[${PYTHON_USEDEP}]
 		dev-python/httpx-socks[${PYTHON_USEDEP}]
@@ -62,5 +63,32 @@ distutils_enable_tests pytest
 src_install() {
 	distutils-r1_src_install
 
+	newconfd "${FILESDIR}/searxng.confd" searxng
+	newinitd "${FILESDIR}/searxng.initd" searxng
 	systemd_dounit "${FILESDIR}/searxng.service"
+
+	insinto /etc/searxng
+	doins "${FILESDIR}/settings.yml"
+
+	keepdir /var/lib/searxng
+	keepdir /var/log/searxng
+
+	fowners searxng:searxng /etc/searxng
+	fowners searxng:searxng /var/lib/searxng
+	fowners searxng:searxng /var/log/searxng
+
+	fperms 750 /etc/searxng
+	fperms 640 /etc/searxng/settings.yml
+	fperms 750 /var/lib/searxng
+	fperms 750 /var/log/searxng
+}
+
+pkg_postinst() {
+	einfo "SearXNG has been installed."
+	einfo ""
+	einfo "To start:"
+	einfo "  OpenRC: rc-update add searxng default && rc-service searxng start"
+	einfo "  systemd: systemctl enable --now searxng"
+	einfo ""
+	einfo "SearXNG will listen on http://127.0.0.1:8888"
 }
diff --git a/net-misc/streamlink/streamlink-8.5.0.ebuild b/net-misc/streamlink/streamlink-8.5.0.ebuild
index be6ff7303bf8..1f5b1450aa01 100644
--- a/net-misc/streamlink/streamlink-8.5.0.ebuild
+++ b/net-misc/streamlink/streamlink-8.5.0.ebuild
@@ -32,7 +32,7 @@ else
 		verify-sig? ( https://github.com/streamlink/${PN}/releases/download/${PV}/${P}.tar.gz.asc )
 	"
 
-	KEYWORDS="~amd64 ~arm ~arm64 ~x86"
+	KEYWORDS="amd64 ~arm ~arm64 ~x86"
 
 	BDEPEND+=" verify-sig? ( sec-keys/openpgp-keys-streamlink )"
 fi
diff --git a/net-misc/stunnel/stunnel-5.79.ebuild b/net-misc/stunnel/stunnel-5.79.ebuild
index 258032259afb..d9dcee47985d 100644
--- a/net-misc/stunnel/stunnel-5.79.ebuild
+++ b/net-misc/stunnel/stunnel-5.79.ebuild
@@ -20,7 +20,7 @@ SRC_URI="
 
 LICENSE="GPL-2"
 SLOT="0"
-KEYWORDS="~alpha ~amd64 arm ~arm64 ~hppa ~mips ~ppc ~ppc64 ~s390 ~sparc x86"
+KEYWORDS="~alpha amd64 arm ~arm64 ~hppa ~mips ppc ppc64 ~s390 ~sparc x86"
 IUSE="selinux stunnel3 systemd tcpd test"
 RESTRICT="!test? ( test )"