user/oniux: new package

[breakgimme]

Description

Oniux is a tool which provides easy to use Tor isolation for any Linux program with namespaces

example:

chiruno% curl ipv6.icanhazip.com
curl: (7) Failed to connect to ipv6.icanhazip.com port 80 after 7 ms: Could not connect to server
chiruno% oniux curl ipv6.icanhazip.com
2a0b:f4c0:16c:4::1

Checklist

Before this pull request is reviewed, certain conditions must be met.

The following must be true for all changes:

• I have read CONTRIBUTING.md

The following must be true for template/package changes:

• I have read Packaging.md
• I have built and tested my changes on my machine

The following must be true for new package submissions:

• I will take responsibility for my template and keep it up to date

[triallax]

don't think this is needed, or?

[breakgimme]

it is, without it it errors out like so:

[breakgimme]

updated to 0.6.0 and rebased

[breakgimme]

updated to 0.6.1 and rebased

[jcgruenhage]

Looks good to me except for being outdated. 0.7.0 is out now. If you update, I'll go ahead and merge this.

--- a/user/oniux/template.py
+++ b/user/oniux/template.py
@@ -1,18 +1,18 @@
 pkgname = "oniux"
-pkgver = "0.6.1"
+pkgver = "0.7.0"
 pkgrel = 0
 build_style = "cargo"
-make_install_args = ["--locked"]
 hostmakedepends = ["cargo-auditable", "cmake", "pkgconf", "rust-bindgen"]
 makedepends = ["openssl3-devel", "rust-std", "sqlite-devel", "zstd-devel"]
 pkgdesc = "Kernel-level Tor isolation for Linux applications"
 license = "MIT OR Apache-2.0"
 url = "https://gitlab.torproject.org/tpo/core/oniux"
 source = f"{url}/-/archive/v{pkgver}/oniux-v{pkgver}.tar.gz"
-sha256 = "de8387e2a53ea944d0f368a455661357e5c441ac2cc16b81fb5ce5fbb9d3f532"
+sha256 = "e84e9237e16b6f119ef2c02c05f94161fdd903727f9bf6038ccd2418228e8473"
 # no tests
 options = ["!check"]
 
 
-def post_install(self):
+def install(self):
+    self.install_bin(f"target/{self.profile().triplet}/release/oniux")
     self.install_license("LICENSE-MIT")

Built and tested it locally rebased on master with these changes applied, works just fine.

[breakgimme]

@jcgruenhage thanks
(double force push because forgot to do git add while figuring out how to add a co author smh...)

[jcgruenhage]

fyi, I've not merged this yet because it's broken on big endian at the moment. zkcrypto/merlin#5 fixes this, and I've locally applied it and am testing it now. Running this with emulation for all architectures takes a bit 😅

[breakgimme]

no worries, thanks for taking the time

[jcgruenhage]

Final problem: it requires 64 bit atomics, which aren't available on ppc. See jcgruenhage@2d5a5ca#diff-f717e60fdd11fff150eb234e9caa2d36c27ab1968ec0731b7bfff5caa347da18R15-R16

With this being somewhat more complex now, I'll ask for feedback from another maintainer before getting this merged.