3 for patch in *.
patch; do
7 # Remove libcap dependency (used solely when bwrap is suid root).
8 # User namespaces are better - should be used in place of libcap and are free.
9 sed 's/as_fn_error.*libcap/: "/g' configure
> _
11 sed 's/as_fn_error.*capability\.h/: "/g' configure
> _
14 # Remove fuse2 dependency (used solely w/ root "system-helper" daemon for file transfer.
15 # Unneeded in our case and drops the old fuse version.
16 sed 's/as_fn_error.*fuse/: "/g' configure
> _
19 # Turn the fuse2 filesystem into a C program which does nothing.
20 # This is the easiest way to "turn off" revokefs as there's no official support for doing so.
21 cat <<EOF > revokefs/main.c
22 int main() { return 0; }
30 --libexecdir=/usr
/lib \
32 --disable-system-helper \
35 --disable-sandboxed-triggers \
36 --disable-documentation \
37 --disable-introspection \
43 # Remove dbus/systemd/libraries (unneeded stuff).
44 # This is a dumb warning which appears only when /usr/share does.
45 # shellcheck disable=2115
50 rm -rf "$1/usr/include"
51 rm -f "$1/usr/libexec/revokefs-fuse"