Adjust the sanity check for patch file names to allow a hyphen.

ok aja

exit early if the errata name is invalid to avoid building a syspatch
that cannot be installed

MACHINE_ARCH -> MACHINE to fix syspatch build on macppc and arm64.

prodded by "multiplexd"
ok tb@ who was coming up with the same patch

SUBDIR is a remnant of the past.

ok robert@

Split the ${ERRATA}/${ERRATA}.patch target up into two: one for
moving the signed patch to the proper location and one for
verifying its signature and applying it.

ok ajacoutot, robert

white spaces

use the correct relink directory path

remove the remaining references to .depend files since nothing creates them
any longer; ok espie@ deraadt@

Install the patched kernel on the build machine just like we do for
userland.

ok robert@

No need to explicitely add patch.sig to the plist, diff.sh will now pick it
up properly.

Kernel syspatches will now only contain the differing object files.
The syspatch(8) utility will be modified accordingly to relink the kernel at the
end of its run (not done yet, still WIP). That wil

Kernel syspatches will now only contain the differing object files.
The syspatch(8) utility will be modified accordingly to relink the kernel at the
end of its run (not done yet, still WIP). That will give us KARL and much
smaller patches.

Idea from deraadt@
OK robert@

show more ...

use the previous syspatch's fake root for getting the link order
instead of using / where the libraries are re-ordered on reboot

ok aja@

Set XSRCDIR to /usr/xenocara if it's not defined. Matches what
/usr/X11R6/share/mk/bsd.xorg.mk does.

ok robert@

Set SRCDIR according to build type and s/X11SRC/XSRCDIR

ok robert@

Don't patch(1) as the 'build' user; it has no right over the src tree.
That bug was hidden because patch(1) returns '0' on that particular case.
To be fixed...

ok robert@

a kernel errata requires a full build as well in case some headers
change so let's do a full build all the time

set BUILDUSER to build by default, this can be overwritten from the environment

do not add ./ to the path of the files in the tarball

rework the syspatch makefile and do complete builds for each errata
and diff those instead of doing partial builds of affected directories

rework some of the variables for better directory name handling and
add support for linking against libraries inside the fake root so
that syspatches can include static binaries linked with the fixed

rework some of the variables for better directory name handling and
add support for linking against libraries inside the fake root so
that syspatches can include static binaries linked with the fixed libraries

show more ...

oops, OSREV -> OSrev.

Use https to get the patches.
Fix syspatch naming.

ok robert@

switch to using BUILDUSER and add more error checking

use OSREV and OSrev instead of setting them in the makefile
and remove variables for MAKE, SIGNIFY, etc.

prodded by deraadt@

allow everything to run as unprivileged user except for fake
install and mtree by splitting up some targets