Name a patch *.patch.ondevice for it to only be applied when building
on device.
This can be useful if for example a tool for building documentation is
missing on device, or if a tool needed during build (but not runtime)
uses something that triggers selinux, fdsan or some other android
security thing.
I am in the process of switching to a new gpg key. This commit adds
both keys to the keyring, and in a few weeks or so I will deactivate
and remove the old one completely. The following message is signed
with my old key, to prove that this was done by me:
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256
In August 2021 I, Henrik Grimler, switched to a new gpg key. The old
key had fingerprint:
B631 6860 9E88 39CA 9150 CE2D D9EF D568 91B2 BB50
while the new one has:
2C7F 29AE 9789 1F64 19A9 E2CD B007 6E49 0B71 616B
-----BEGIN PGP SIGNATURE-----
iQEzBAEBCAAdFiEEm059JzlQJOpaT8Y5WqrJ4KRr5TwFAmEsj0YACgkQWqrJ4KRr
5TzQ7Af/Z0KTOQlNtxzJ2aE96v07pHCYc3ynlZoToUfWtgJ2XxkOZlviKRD5SC0M
zbv47IcWnquINGTyeEkZ6jdHd5XEDfkwe3JoyEVcr10v6vzQuAmETpHh1FcfE/2Q
5UqdcNxx3z34qxdWy9ntP+/SbETBsCrCcoJHa/q9UulR+OLwsoUjH83oxaB9nUph
QtaLX+u4hfbXJ9UhjIX/xgpLMOx9s4WORzIryz3HOffqD2YE2yo9SwFjjCJuvkbZ
VM1Gbpx0YabFWH9xqqaBwhjPXjKXGq5JNB1JpMnmagzylo7kTnztO8kDaLJoHPse
iHag4HjfO3R6T2hzX9SKmoK1sP2nNQ==
=huNj
-----END PGP SIGNATURE-----
When adding this, we go from compiling with
/home/builder/.termux-build/_cache/android-r21d-api-24-v4/bin/clang++ [...] -mrelocation-model pic -pic-level 2 -pic-is-pie [...]
to
/home/builder/.termux-build/_cache/android-r21d-api-24-v5/bin/clang++ [...] -mrelocation-model pic -pic-level 2 [...]
Before, we got a warning when compiling libandroid-spawn:
/home/builder/.termux-build/_cache/android-r21d-api-24-v4/bin/../lib/gcc/i686-linux-android/4.9.x/../../../../i686-linux-android/bin/ld: warning: shared library text segment is not shareable
and trying to use a program linked against libandroid-spawn gave an
error, see
https://github.com/termux/termux-packages/issues/7215#issuecomment-906154438
the Without this, libraries might end up with text relocations. For
some reason it does not seem to be an issue on the other arches.
%ci:no-build
This has already been done in termux_step_setup_build_folders. Doing
it here causes problems, after
ecd214881a
as BUILDDIR now might be SRCDIR, which should
not be created as it breaks zip extraction.
