Recent improvements on apt.llvm.org

LLVM Project
1

Hello

Time for an update about recent improvements and changes on https://apt.llvm.org

Arm64

apt.llvm.org is now generating arm64 for all Debian & Ubuntu supported versions.

Thanks to Leandro Nunes & Kristof Beyls from ARM for the help and support.

Packages are built on two servers with 80 CPU and 256G of RAM.

For example, on Debian Bullseye, just add the following to your sources.list files:

deb http://apt.llvm.org/bullseye/ llvm-toolchain-bullseye main

MLIR

MLIR packages now generated from LLVM 13.

Packages can be installed with:
apt install libmlir-13 libmlir-13-dev mlir-13-tools

Sigstore

Sources and dsc files are signed and published using sigstore.

https://apt.llvm.org/#sigstore

These files can be verified with the following sequence:


file="llvm-toolchain-10_10.0.1~%2b%2b20210327072807%2bef32c611aa21-1~exp1~20210327183412.212.dsc"
url="https://apt.llvm.org/unstable/pool/main/l/llvm-toolchain-10/$file"
sig_file="$url.asc"
wget --quiet https://apt.llvm.org/sigstore.public.key
./rekor verify --rekor_server https://rekor.sigstore.dev --signature $sig_file --public-key sigstore.public.key --artifact $url

llvm.sh

https://apt.llvm.org/llvm.sh just got a new option to install all packages at once (instead of just the main packages):

It can be used like:

llvm.sh 13 all

Or

llvm.sh all

Various services

Scan-build:

I took the opportunity to fix and extend scan-build reports:

https://llvm.org/reports/scan-build/

They are now showing errors on other projects like mlir (but libc++ and a few others are still missing).

Coverity:

I fixed the coverity analysis. The analysis is done on a daily basis. It has been broken since the move to the gcp infrastructure.

It is identifying 3 138 defects in the code base.

Thanks to the Linux Foundation and the OpenSSF project for the help!

5 Likes