Adding metadata

2 files changed, 205 insertions, 0 deletions

diff --git a/net-vpn/tor/Manifest b/net-vpn/tor/Manifest
index 6d9bcd601d83..d699c76fd484 100644
--- a/net-vpn/tor/Manifest
+++ b/net-vpn/tor/Manifest
@@ -1,6 +1,9 @@
 DIST tor-0.4.9.10.tar.gz 10855905 BLAKE2B da39c42035a5b43b4cd5bce0e7dc089f3ad737b25bfded127d5acbf788294716ea0a4376393df21865b13b23b7ce151fa04de6e0be4cb3edfcdf17d18f9ec475 SHA512 5dcd961f418addf3fd49b14a1e9e26a91413d980c1e670a88d8f8de611c6e7cde889a01fdbf08aeec87610417d64a39062e3e2dc4e42eebb49869cbc9290b4ce
 DIST tor-0.4.9.10.tar.gz.sha256sum 86 BLAKE2B df328dbcd0764d3848abd49f0ef5dcee0a1fea7a053a0c1880079f643adb15d815a11cb8a380cee414dfc406d824eae7eb672badacce6ee60a965f439b0ee70f SHA512 f6d87ac2a675e3486274381b7abdc2048936904dbf153406a18a59461b55811efc09ca152073df3f2287ffd9dd3588d35698cbdd071cb318a89daab76bc687b8
 DIST tor-0.4.9.10.tar.gz.sha256sum.asc 716 BLAKE2B f1ff5f3ba11960fc908d205d1fd0a1809445a538fc7906b62848e849c6c513090858073e2f4f4ab89a8c7ff181490e8ffd60d72d412931ddb91fce3feb23c3cc SHA512 c9c6228b4be8e8425a8951874a051f39ca95faf28f1fd6ca4148de3a1bc0b289a82c187003500ab9a97dc205c8766a9317dfc10d214a70158b245da9ee1a47f7
+DIST tor-0.4.9.11.tar.gz 10859160 BLAKE2B 553f18fdbfade78bf461f6abb44b2876c8ec771ddd005c77027942b396ec76ca6cb71ccae776a89495fb12be03193c4d006d43781ce7e4a15bc91f2486bcd145 SHA512 a9bf90c16998b68ca794dc717abc7bf681dcc2e6f4d1eb57badd0f1a3eb4a84347b2a41758d19dc20913655694ce4898c605c566cdeb8dd71be263a866263bb1
+DIST tor-0.4.9.11.tar.gz.sha256sum 86 BLAKE2B d4793ae196bcac406ce785b2fc6b2215a37465dca27801e35f190eb652915d3f42a2f1cdd95befed0e9887012f7c77f736270a69f51bce93ed4b2aac1a248832 SHA512 e974523e11c6525b4298d91cb3d8ff3346f9278ffa2b21c19405dba3e2cd0a844b649d3e5552546302cdc38e2c4d7ac13a0a0e3a57001e35a8adcc860f48062a
+DIST tor-0.4.9.11.tar.gz.sha256sum.asc 716 BLAKE2B a5b6b1ee3bb7bd6eb8087360ca6afb2ff93991f80c4cc7acd8a300a7da9c3dfe8af33fa9bfab671317c56d16d7a6875b61356fce874e90f5682d6344d1d35b7a SHA512 f84dcac1f40313b3e4d5ddfa7f6d06299968de78977c7c9a89e7de6a30402e218cfb0e5a69784078648e6650785651643ee7ca5396970f2794557d582d4d544e
 DIST tor-0.4.9.8.tar.gz 10934822 BLAKE2B d9f2ea4231161a39ed02e832afaa224ebdf6d16ae210fac4b8e7bacc47ad8876cff4cb93f6376954b38fe1a030d88bd2accf784f89d08f0fc4b2b0940b5a1c91 SHA512 310cf2989dc1202971780ea299818db8a1a63ad9be35fabb6d9b60714c48b83988224a2d78ed046c2f713b8f967c3b9ee875857a1bbac9d2099f59bb5d44da45
 DIST tor-0.4.9.8.tar.gz.sha256sum 85 BLAKE2B a4b35c92c3fec8abf45780ac544698df77da3a0bb86ef9515e647497b4ac2c372ec36a352ea389ad7daf5a8d9696f79102e3c1ffb2cf0cdff0501341c8a9bbed SHA512 9cc3cf9abc5ce4c62dc2bd25a6da49beaf49c185ad0b2f63a457fa8f39f8bed8b6d3e990f60275e984099bf43b72e9ff5dcc6e6d450d3cb2ccb5b13290d807ad
 DIST tor-0.4.9.8.tar.gz.sha256sum.asc 716 BLAKE2B 4004c4e57aefc1b33ad50a234ace1545d3ab1732d2b3b7cba3345c80231bd6ce78f377b11effec8aef4e2debeebfd7f3904d2f8dc9444f45fc806739c7a34698 SHA512 0ba91f2819b34c31430b72595700a5f0ad288776b92787b296f832f2b8a73f7ed10c3d6088b125a159044dece6e3f27f4f71d71a52440c9b4951695c599f19de
diff --git a/net-vpn/tor/tor-0.4.9.11.ebuild b/net-vpn/tor/tor-0.4.9.11.ebuild
new file mode 100644
index 000000000000..91236b12b791
--- /dev/null
+++ b/net-vpn/tor/tor-0.4.9.11.ebuild
@@ -0,0 +1,202 @@
+# Copyright 1999-2026 Gentoo Authors
+# Distributed under the terms of the GNU General Public License v2
+
+EAPI=8
+
+PYTHON_COMPAT=( python3_{13..14} )
+VERIFY_SIG_OPENPGP_KEY_PATH=/usr/share/openpgp-keys/torproject.org.asc
+inherit edo python-any-r1 readme.gentoo-r1 systemd verify-sig
+
+MY_PV="$(ver_rs 4 -)"
+MY_PF="${PN}-${MY_PV}"
+DESCRIPTION="Anonymizing overlay network for TCP"
+HOMEPAGE="https://www.torproject.org/ https://gitlab.torproject.org/tpo/core/tor/"
+
+if [[ ${PV} == 9999 ]] ; then
+	EGIT_REPO_URI="https://gitlab.torproject.org/tpo/core/tor"
+	inherit autotools git-r3
+else
+	SRC_URI="
+		https://www.torproject.org/dist/${MY_PF}.tar.gz
+		https://archive.torproject.org/tor-package-archive/${MY_PF}.tar.gz
+		verify-sig? (
+			https://dist.torproject.org/${MY_PF}.tar.gz.sha256sum
+			https://dist.torproject.org/${MY_PF}.tar.gz.sha256sum.asc
+		)
+	"
+
+	S="${WORKDIR}/${MY_PF}"
+
+	if [[ ${PV} != *_alpha* && ${PV} != *_beta* && ${PV} != *_rc* ]]; then
+		KEYWORDS="~amd64 ~arm ~arm64 ~hppa ~mips ~ppc ~ppc64 ~riscv ~sparc ~x86"
+	fi
+
+	BDEPEND="verify-sig? ( >=sec-keys/openpgp-keys-tor-20250713 )"
+fi
+
+# BSD in general, but for PoW, needs --enable-gpl (GPL-3 per --version)
+# We also already had GPL-2 listed here for the init script, but obviously
+# that's different from the actual binary.
+LICENSE="BSD GPL-2 GPL-3"
+SLOT="0"
+IUSE="caps doc hardened lzma +man scrypt seccomp selinux +server systemd test zstd"
+RESTRICT="!test? ( test )"
+
+RDEPEND="
+	>=dev-libs/libevent-2.1.12-r1:=[ssl]
+	>=dev-libs/openssl-1.1.1:=[-bindist(-)]
+	virtual/zlib:=
+	caps? ( sys-libs/libcap )
+	man? ( app-text/asciidoc )
+	lzma? ( app-arch/xz-utils )
+	scrypt? ( app-crypt/libscrypt )
+	seccomp? ( >=sys-libs/libseccomp-2.4.1 )
+	systemd? ( sys-apps/systemd:= )
+	zstd? ( app-arch/zstd:= )
+"
+DEPEND="
+	${RDEPEND}
+	test? (
+		${DEPEND}
+		${PYTHON_DEPS}
+	)
+"
+RDEPEND+="
+	acct-user/tor
+	acct-group/tor
+	selinux? ( sec-policy/selinux-tor )
+"
+BDEPEND+="
+	acct-user/tor
+	acct-group/tor
+"
+
+DOCS=()
+
+PATCHES=(
+	"${FILESDIR}"/${PN}-0.2.7.4-torrc.sample.patch
+)
+
+QA_CONFIG_IMPL_DECL_SKIP=(
+	# test correctly fails because -lnacl fails if not available
+	# https://bugs.gentoo.org/900092
+	crypto_scalarmult_curve25519
+)
+
+pkg_setup() {
+	use test && python-any-r1_pkg_setup
+}
+
+src_unpack() {
+	if [[ ${PV} == 9999 ]] ; then
+		git-r3_src_unpack
+	else
+		if use verify-sig; then
+			cd "${DISTDIR}" || die
+			verify-sig_verify_detached ${MY_PF}.tar.gz.sha256sum{,.asc}
+			verify-sig_verify_unsigned_checksums \
+				${MY_PF}.tar.gz.sha256sum sha256 ${MY_PF}.tar.gz
+			cd "${WORKDIR}" || die
+		fi
+
+		default
+	fi
+}
+
+src_prepare() {
+	default
+
+	# Running shellcheck automagically isn't useful for ebuild testing.
+	echo "exit 0" > scripts/maint/checkShellScripts.sh || die
+
+	if [[ ${PV} == 9999 ]] ; then
+		eautoreconf
+	fi
+}
+
+src_configure() {
+	use doc && DOCS+=( README.md ChangeLog ReleaseNotes doc/HACKING )
+
+	export ac_cv_lib_cap_cap_init=$(usex caps)
+	export tor_cv_PYTHON="${EPYTHON}"
+	# Already set by default in profiles for our toolchain
+	export tor_cv_cflags__fcf_protection_full=no
+	export tor_cv_cflags__mbranch_protection_standard=no
+
+	local myeconfargs=(
+		--localstatedir="${EPREFIX}/var"
+		--disable-all-bugs-are-fatal
+		--enable-system-torrc
+		--disable-android
+		--disable-coverage
+		--disable-html-manual
+		--disable-libfuzzer
+		--enable-missing-doc-warnings
+		--disable-module-dirauth
+		--enable-pic
+		--disable-restart-debugging
+
+		# Unless someone asks & has a compelling reason, just always
+		# build in GPL mode for pow, given we don't want yet another USE
+		# flag combination to have to test just for the sake of it.
+		# (PoW requires GPL.)
+		--enable-gpl
+		--enable-module-pow
+
+		$(use_enable hardened gcc-hardening)
+		$(use_enable hardened linker-hardening)
+		$(use_enable man asciidoc)
+		$(use_enable man manpage)
+		$(use_enable lzma)
+		$(use_enable scrypt libscrypt)
+		$(use_enable seccomp)
+		$(use_enable server module-relay)
+		$(use_enable systemd)
+		$(use_enable test unittests)
+		$(use_enable zstd)
+	)
+
+	econf "${myeconfargs[@]}"
+}
+
+src_test() {
+	local skip_tests=(
+		# Fails in sandbox
+		:sandbox/open_filename
+		:sandbox/openat_filename
+	)
+
+	if use arm ; then
+		skip_tests+=(
+			# bug #920905
+			# https://gitlab.torproject.org/tpo/core/tor/-/issues/40912
+			:sandbox/opendir_dirname
+			:sandbox/openat_filename
+			:sandbox/chmod_filename
+			:sandbox/chown_filename
+			:sandbox/rename_filename
+		)
+	fi
+
+	# The makefile runs these by parallel by chunking them with a script
+	# but that means we lose verbosity and can't skip individual tests easily
+	# either.
+	edo ./src/test/test --verbose "${skip_tests[@]}"
+}
+
+src_install() {
+	default
+	readme.gentoo_create_doc
+
+	newconfd "${FILESDIR}"/tor.confd tor
+	newinitd "${FILESDIR}"/tor.initd-r9 tor
+	systemd_dounit "${FILESDIR}"/tor.service
+
+	keepdir /var/lib/tor
+
+	fperms 750 /var/lib/tor
+	fowners tor:tor /var/lib/tor
+
+	insinto /etc/tor/
+	newins "${FILESDIR}"/torrc-r2 torrc
+}