Add .gitignore and .gitea/workflows/ci.yml

.gitea/workflows/ci.yml

@@ -13,4 +13,5 @@ jobs:
         with:
           CI_DEPLOY: ${{ secrets.CI_DEPLOY }}
           PUBLICATOR: ${{ secrets.PUBLICATOR }}
+          REPO_DEPLOY: ${{ secrets.REPO_DEPLOY }}
 

rootcerts.spec

@@ -53,22 +53,22 @@ Source10:	update-ca-trust.8.txt
 # https://www.gosuslugi.ru/crt -> macOS
 # https://developers.sber.ru/docs/ru/salutespeech/certificates
 Source11:	https://gu-st.ru/content/Other/doc/russiantrustedca.pem
-BuildRequires:	python3
+BuildRequires:	python38-devel
 BuildRequires:	openssl
 BuildRequires:	nss
 BuildRequires:	automake
 BuildRequires:	libtool
 %if %{with java}
 BuildRequires:	java-devel
-BuildRequires:	javapackages-tools
+#BuildRequires:	javapackages-tools
 %endif
 BuildRequires:	docbook-xsl
 BuildRequires:	asciidoc
 BuildRequires:	xsltproc
-Recommends:		(%{name}-russia if locales-ru)
+#Recommends:		(%{name}-russia if locales-ru)
 # have rootcerts-russia installed before update-ca-trust is run
 # TODO: convert %%post into filetriggers
-OrderWithRequires(post):	%{name}-russia
+#OrderWithRequires(post):	%{name}-russia
 Requires(post):	coreutils
 Requires(post):	p11-kit
 Requires(post):	p11-kit-trust
@@ -117,9 +117,12 @@ mkdir %{name}/certs/legacy-disable
 mkdir %{name}/java
 
 %build
+/usr/libexec/python3.8 -m venv .
+. bin/activate
+
 pushd %{name}/certs
  cp %{SOURCE0} certdata.txt
- python3 %{SOURCE4} >c2p.log 2>c2p.err
+ /usr/libexec/python3.8 %{SOURCE4} >c2p.log 2>c2p.err
 popd
 pushd %{name}
  (

trust-fixes

@@ -0,0 +1 @@
+