omnibus-software 22.11.239

data/config/patches/ruby/ruby-fast-load_26.patch

@@ -0,0 +1,16 @@
+diff --git a/load.c b/load.c
+index 576464fb68..ae89f63820 100644
+--- a/load.c
++++ b/load.c
+@@ -908,6 +908,11 @@ search_required(VALUE fname, volatile VALUE *path, int safe_level, feature_func
+        if (loading) *path = rb_filesystem_str_new_cstr(loading);
+        return 'r';
+     }
++    else if ((ft = rb_feature_p(ftptr, 0, FALSE, FALSE, &loading)) == 's') {
++       if (loading) *path = rb_filesystem_str_new_cstr(loading);
++       return 's';
++    }
++
+     tmp = fname;
+     type = rb_find_file_ext_safe(&tmp, loadable_ext, safe_level);
+     switch (type) {

data/config/patches/ruby/ruby-fast-load_31.patch

@@ -0,0 +1,16 @@
+diff --git a/load.c b/load.c
+index a2b9da4..05ea96e 100644
+--- a/load.c
++++ b/load.c
+@@ -981,6 +981,11 @@ search_required(rb_vm_t *vm, VALUE fname, volatile VALUE *path, feature_func rb_
+        if (loading) *path = rb_filesystem_str_new_cstr(loading);
+        return 'r';
+     }
++    else if ((ft = rb_feature_p(vm, ftptr, 0, FALSE, FALSE, &loading)) == 's') {
++       if (loading) *path = rb_filesystem_str_new_cstr(loading);
++       return 's';
++    }
++
+     tmp = fname;
+     type = rb_find_file_ext(&tmp, ft == 's' ? ruby_ext : loadable_ext);
+     switch (type) {

data/config/patches/ruby/ruby-faster-load_26.patch

@@ -0,0 +1,11 @@
+--- a/load.c
++++ b/load.c
+@@ -605,7 +605,7 @@ rb_load_internal0(rb_execution_context_t *ec, VALUE fname, int wrap)
+ 	    rb_parser_set_context(parser, NULL, FALSE);
+ 	    ast = (rb_ast_t *)rb_parser_load_file(parser, fname);
+ 	    iseq = rb_iseq_new_top(&ast->body, rb_fstring_lit("<top (required)>"),
+-			    fname, rb_realpath_internal(Qnil, fname, 1), NULL);
++			    fname, fname, NULL);
+ 	    rb_ast_dispose(ast);
+ 	}
+         rb_exec_event_hook_script_compiled(ec, iseq, Qnil);

data/config/patches/ruby/ruby-faster-load_27.patch

@@ -0,0 +1,11 @@
+--- ruby-2.7.0/load.c.orig	2020-02-26 12:19:04.963826602 -0800
++++ ruby-2.7.0/load.c	2020-02-26 12:28:55.865876051 -0800
+@@ -578,7 +578,7 @@
+         rb_parser_set_context(parser, NULL, FALSE);
+         ast = (rb_ast_t *)rb_parser_load_file(parser, fname);
+         iseq = rb_iseq_new_top(&ast->body, rb_fstring_lit("<top (required)>"),
+-                               fname, rb_realpath_internal(Qnil, fname, 1), NULL);
++                               fname, fname, NULL);
+         rb_ast_dispose(ast);
+     }
+     rb_exec_event_hook_script_compiled(ec, iseq, Qnil);

data/config/patches/ruby/ruby-mkmf.patch

@@ -0,0 +1,29 @@
+--- a/lib/mkmf.rb	2016-06-16 16:19:13.000000000 -0400
++++ b/lib/mkmf.rb	2016-06-16 16:23:08.000000000 -0400
+@@ -365,6 +365,17 @@
+   end
+ 
+   def libpath_env
++    # Patch for aix
++    # Ideally applications should not need LIBPATH/LD_LIBRARY_PATH set
++    # and should rely on the embedded paths in binaries/shared objects
++    # For chef say on AIX we already build using -blibpath and
++    # LD_RUN_PATH, so the extensions built using chef embedded ruby
++    # (using rbconfig) should have correct paths set.
++    # Setting LIBPATH overrides the behaviour of programs invoked from
++    # chef built ruby, for example xlc ends up picking up libiconv built
++    # within chef embedded ruby libs instead of the one from /usr/lib
++    return {}
++
+     # used only if native compiling
+     if libpathenv = config_string("LIBPATHENV")
+       pathenv = ENV[libpathenv]
+@@ -1799,7 +1810,7 @@
+   #
+   if !CROSS_COMPILING
+     case CONFIG['build_os']
+-    when 'mingw32'
++    when 'mingw32', 'mingw64'
+       def mkintpath(path)
+         # mingw uses make from msys and it needs special care
+         # converts from C:\some\path to /C/some/path

data/config/patches/ruby/ruby-no-stack-protector-strong.patch

@@ -0,0 +1,11 @@
+--- ruby-2.6.5/configure.old	2019-12-06 13:03:20.962288441 -0800
++++ ruby-2.6.5/configure	2019-12-06 13:03:32.242919275 -0800
+@@ -8409,7 +8409,7 @@
+ esac
+     if test -z "${stack_protector+set}"; then :
+ 
+-	for opt in -fstack-protector-strong -fstack-protector
++	for opt in -fstack-protector
+ do :
+ 
+ 

data/config/patches/ruby/ruby-no-stack-protector.patch

@@ -0,0 +1,13 @@
+diff --git a/configure.dist b/configure
+index d83c15a..bd4813c 100755
+--- a/configure.dist
++++ b/configure
+@@ -7491,7 +7491,7 @@ main ()
+ }
+ _ACEOF
+ if ac_fn_c_try_compile "$LINENO"; then :
+-  stack_protector=yes
++  stack_protector=no
+ 	{ $as_echo "$as_me:${as_lineno-$LINENO}: result: yes" >&5
+ $as_echo "yes" >&6; }
+ else

data/config/patches/ruby/ruby-win32_warning_removal.patch

@@ -0,0 +1,12 @@
+--- a/ext/win32/lib/Win32API.rb
++++ b/ext/win32/lib/Win32API.rb
+@@ -1,9 +1,6 @@
+ # -*- ruby -*-
+ # frozen_string_literal: true
+ 
+-# for backward compatibility
+-warn "Win32API is deprecated after Ruby 1.9.1; use fiddle directly instead", uplevel: 2
+-
+ require 'fiddle/import'
+ 
+ class Win32API

data/config/patches/ruby/ruby_aix_openssl.patch

@@ -0,0 +1,10 @@
+--- ruby-1.9.3-p547/ext/openssl/extconf.rb.orig	2014-07-15 17:50:30 -0500
++++ ruby-1.9.3-p547/ext/openssl/extconf.rb	2014-07-15 17:50:39 -0500
+@@ -34,6 +34,7 @@
+ end
+ 
+ Logging::message "=== Checking for system dependent stuff... ===\n"
++have_library("z", "inflate")
+ have_library("nsl", "t_open")
+ have_library("socket", "socket")
+ have_header("assert.h")

data/config/patches/ruby/ruby_aix_ssl_EAGAIN.patch

@@ -0,0 +1,19 @@
+--- ruby-2.1.3/ext/openssl/lib/openssl/ssl.rb_orig	2014-10-24 13:09:44.000000000 -0500
++++ ruby-2.1.3/ext/openssl/lib/openssl/ssl.rb	2014-10-24 13:11:01.000000000 -0500
+@@ -194,7 +194,15 @@
+         begin
+           ssl = OpenSSL::SSL::SSLSocket.new(sock, @ctx)
+           ssl.sync_close = true
+-          ssl.accept if @start_immediately
++          if @start_immediately
++            # Retry on EAGAIN (may be due to underlying inprogress for TLS handshake or renegotiation requested.)
++            # Any other error is rescued further.
++             begin
++              ssl.accept
++            rescue Errno::EAGAIN
++              retry
++            end
++          end
+           ssl
+         rescue SSLError => ex
+           sock.close

data/config/patches/ruby/rvm-cflags.patch

@@ -0,0 +1,27 @@
+--- a/configure.in
++++ b/configure.in
+@@ -267,11 +267,9 @@
+     cflagspat="$cflagspat;s|"`eval echo '"'"${debugflags}"'"' | sed 's/[[][|.*]]/\\&/g;s/^ */ /;s/ *$/ /'`'| |g'
+ test -z "warnflags" ||
+     cflagspat="$cflagspat;s|"`eval echo '"'"${warnflags}"'"' | sed 's/[[][|.*]]/\\&/g;s/^ */ /;s/ *$/ /'`'| |g'
+-if test -z "${CFLAGS+set}"; then
+-    cflags=`echo " $cflags " | sed "$cflagspat;s/^ *//;s/ *$//"`
+-    orig_cflags="$cflags"
+-    cflags="$cflags "'${optflags} ${debugflags} ${warnflags}'
+-fi
++cflags=`echo " $cflags " | sed "$cflagspat;s/^ *//;s/ *$//"`
++orig_cflags="$cflags"
++cflags="$cflags "'${optflags} ${debugflags} ${warnflags}'
+ if test -z "${CXXFLAGS+set}"; then
+     cxxflags=`echo " $cxxflags " | sed "$cflagspat;s/^ *//;s/ *$//"`
+     orig_cxxflags="$cxxflags"
+@@ -511,7 +509,8 @@
+     ])
+ fi
+
+-test -z "${ac_env_CFLAGS_set}" -a -n "${cflags+set}" && eval CFLAGS="\"$cflags $ARCH_FLAG\""
++test -z "${ac_env_CFLAGS_set}" && CFLAGS="$ARCH_FLAG"
++test -n "${cflags:+set}" && eval CFLAGS="\"$cflags\${CFLAGS:+ $CFLAGS}\""
+ test -z "${ac_env_CXXFLAGS_set}" -a -n "${cxxflags+set}" && eval CXXFLAGS="\"$cxxflags $ARCH_FLAG\""
+
+ dnl check for large file stuff

data/config/patches/stunnel/stunnel-on-windows.patch

@@ -0,0 +1,42 @@
+diff --git a/src/mingw.mk b/src/mingw.mk
+index 244602f..055c425 100644
+--- a/src/mingw.mk
++++ b/src/mingw.mk
+@@ -12,7 +12,7 @@
+ bindir = ../bin/$(win32_mingw)
+ objdir = ../obj/$(win32_mingw)
+
+-win32_ssl_dir = /opt/openssl-$(win32_mingw)
++win32_ssl_dir = $(WIN32_SSL_DIR_PATCHED)
+ win32_cppflags = -I$(win32_ssl_dir)/include
+ win32_cflags = -mthreads -fstack-protector -O2
+ win32_cflags += -Wall -Wextra -Wpedantic -Wformat=2 -Wconversion -Wno-long-long
+@@ -34,7 +34,8 @@ win32_cli_objs = $(addsuffix .o, $(addprefix $(objdir)/, $(win32_cli)))
+
+ win32_prefix = $(win32_targetcpu)-w64-mingw32-
+ win32_cc = $(win32_prefix)gcc
+-win32_windres = $(win32_prefix)windres
++# Our build system only has windres.exe, no prefix
++win32_windres = windres
+
+ all: mkdirs $(bindir)/stunnel.exe $(bindir)/tstunnel.exe
+
+diff --git a/src/stunnel.c b/src/stunnel.c
+index 00637b0..5a6a0a1 100644
+--- a/src/stunnel.c
++++ b/src/stunnel.c
+@@ -46,7 +46,13 @@
+ #pragma GCC diagnostic ignored "-pedantic"
+ #endif /* __GNUC__ */
+
+-#include <openssl/applink.c>
++/*
++ * Maybe we could remove
++ * omnibus-software/config/patches/openssl-fips/openssl-fips-fix-compiler-flags-table-for-msys.patch
++ * and leave this include here? Building applink into openssl broke some version
++ * of Ruby
++ */
++/* #include <openssl/applink.c> */
+
+ #ifdef __GNUC__
+ #pragma GCC diagnostic pop

data/config/patches/zlib/zlib-windows-relocate.patch

@@ -0,0 +1,20 @@
+--- zlib-1.2.8/win32/Makefile.gcc.orig	2016-02-11 13:46:54.000000000 -0500
++++ zlib-1.2.8/win32/Makefile.gcc	2016-02-11 13:53:08.000000000 -0500
+@@ -57,6 +57,8 @@
+ RC = $(PREFIX)windres
+ RCFLAGS = --define GCC_WINDRES
+ 
++IMAGE_BASE = 0x63300000
++
+ STRIP = $(PREFIX)strip
+ 
+ CP = cp -fp
+@@ -93,7 +95,7 @@
+ $(IMPLIB): $(SHAREDLIB)
+ 
+ $(SHAREDLIB): win32/zlib.def $(OBJS) $(OBJA) zlibrc.o
+-	$(CC) -shared -Wl,--out-implib,$(IMPLIB) $(LDFLAGS) \
++	$(CC) -shared -Wl,--out-implib,$(IMPLIB),--image-base,$(IMAGE_BASE) $(LDFLAGS) \
+ 	-o $@ win32/zlib.def $(OBJS) $(OBJA) zlibrc.o
+ 	$(STRIP) $@
+ 

data/config/software/autoconf.rb

@@ -0,0 +1,46 @@
+#
+# Copyright:: Chef Software, Inc.
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#     http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+#
+# expeditor/ignore: deprecated 2021-04
+
+name "autoconf"
+default_version "2.69"
+
+license "GPL-3.0"
+license_file "COPYING"
+license_file "COPYING.EXCEPTION"
+skip_transitive_dependency_licensing true
+
+dependency "m4"
+
+version("2.69") { source sha256: "954bd69b391edc12d6a4a51a2dd1476543da5c6bbf05a95b59dc0dd6fd4c2969" }
+
+source url: "https://ftp.gnu.org/gnu/autoconf/autoconf-#{version}.tar.gz"
+
+relative_path "autoconf-#{version}"
+
+build do
+  env = with_standard_compiler_flags(with_embedded_path)
+
+  if solaris2?
+    env["M4"] = "#{install_dir}/embedded/bin/m4"
+  end
+
+  command "./configure" \
+          " --prefix=#{install_dir}/embedded", env: env
+
+  make "-j #{workers}", env: env
+  make "install", env: env
+end

data/config/software/automake.rb

@@ -0,0 +1,49 @@
+#
+# Copyright 2012-2014 Chef Software, Inc.
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#     http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+#
+# expeditor/ignore: deprecated 2021-04
+
+name "automake"
+default_version "1.16"
+
+dependency "autoconf"
+dependency "perl-thread-queue"
+
+license "GPL-2.0"
+license_file "COPYING"
+skip_transitive_dependency_licensing true
+
+version("1.16") { source sha256: "80da43bb5665596ee389e6d8b64b4f122ea4b92a685b1dbd813cd1f0e0c2d83f" }
+version("1.15") { source sha256: "7946e945a96e28152ba5a6beb0625ca715c6e32ac55f2e353ef54def0c8ed924" }
+version("1.11.2") { source sha256: "c339e3871d6595620760725da61de02cf1c293af8a05b14592d6587ac39ce546" }
+
+source url: "https://ftp.gnu.org/gnu/automake/automake-#{version}.tar.gz"
+
+relative_path "automake-#{version}"
+
+build do
+  env = with_standard_compiler_flags(with_embedded_path)
+
+  if version == "1.15"
+    command "./bootstrap.sh", env: env
+  else
+    command "./bootstrap", env: env
+  end
+  command "./configure" \
+          " --prefix=#{install_dir}/embedded", env: env
+
+  make "-j #{workers}", env: env
+  make "install", env: env
+end

data/config/software/bash.rb

@@ -0,0 +1,72 @@
+#
+# Copyright 2015 Chef Software, Inc.
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#     http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+#
+
+name "bash"
+default_version "5.1.16"
+
+dependency "libiconv"
+dependency "ncurses"
+
+# version_list: url=https://ftp.gnu.org/gnu/bash/ filter=*.tar.gz
+
+version("5.0")    { source sha256: "b4a80f2ac66170b2913efbfb9f2594f1f76c7b1afd11f799e22035d63077fb4d" }
+version("5.1")    { source sha256: "cc012bc860406dcf42f64431bcd3d2fa7560c02915a601aba9cd597a39329baa" }
+version("5.1.8")  { source sha256: "0cfb5c9bb1a29f800a97bd242d19511c997a1013815b805e0fdd32214113d6be" }
+version("5.1.16") { source sha256: "5bac17218d3911834520dad13cd1f85ab944e1c09ae1aba55906be1f8192f558" }
+
+license "GPL-3.0"
+license_file "COPYING"
+
+source url: "https://ftp.gnu.org/gnu/bash/bash-#{version}.tar.gz"
+
+# bash builds bash as libraries into a special directory. We need to include
+# that directory in lib_dirs so omnibus can sign them during macOS deep signing.
+lib_dirs lib_dirs.concat ["#{install_dir}/embedded/lib/bash"]
+
+relative_path "bash-#{version}"
+
+build do
+  env = with_standard_compiler_flags(with_embedded_path)
+
+  # FreeBSD can build bash with this patch but it doesn't work properly
+  # Things like command substitution will throw syntax errors even though the syntax is correct
+  unless freebsd?
+    # Fix bash race condition
+    # https://lists.gnu.org/archive/html/bug-bash/2020-12/msg00051.html
+    patch source: "race-condition.patch", plevel: 1, env: env
+  end
+
+  configure_command = ["./configure",
+                       "--prefix=#{install_dir}/embedded"]
+
+  if freebsd?
+    # On freebsd, you have to force static linking, otherwise the executable
+    # will link against the system ncurses instead of ours.
+    configure_command << "--enable-static-link"
+
+    # FreeBSD 12 system files come with mktime but for some reason running "configure"
+    # doesn't detect this which results in a build failure. Setting this environment variable
+    # corrects that.
+    env["ac_cv_func_working_mktime"] = "yes"
+  end
+
+  command configure_command.join(" "), env: env
+  make "-j #{workers}", env: env
+  make "-j #{workers} install", env: env
+
+  # We do not install bashbug in macos as it fails Notarization
+  delete "#{install_dir}/embedded/bin/bashbug"
+end

data/config/software/berkshelf-no-depselector.rb

@@ -0,0 +1,46 @@
+#
+# Copyright 2016 Chef Software, Inc.
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#     http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+#
+# expeditor/ignore: deprecated 2021-04
+
+name "berkshelf-no-depselector"
+default_version "main"
+
+license "Apache-2.0"
+license_file "LICENSE"
+
+source git: "https://github.com/berkshelf/berkshelf.git"
+
+relative_path "berkshelf"
+
+dependency "ruby"
+
+unless windows? && (project.overrides[:ruby].nil? || project.overrides[:ruby][:version] == "ruby-windows")
+  dependency "libarchive"
+end
+
+dependency "nokogiri"
+
+build do
+  env = with_standard_compiler_flags(with_embedded_path)
+
+  bundle "config set --local without guard changelog development test", env: env
+  bundle "install --jobs #{workers}", env: env
+
+  bundle "exec thor gem:build", env: env
+
+  gem "install pkg/berkshelf-*.gem" \
+      " --no-document", env: env
+end

data/config/software/berkshelf.rb

@@ -0,0 +1,34 @@
+#
+# Copyright 2014-2018 Chef Software, Inc.
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#     http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+#
+# expeditor/ignore: deprecated 2021-04
+
+name "berkshelf"
+
+license "Apache-2.0"
+license_file "https://raw.githubusercontent.com/berkshelf/berkshelf/main/LICENSE"
+# berkshelf does not have any dependencies. We only install it from
+# rubygems here.
+skip_transitive_dependency_licensing true
+
+dependency "nokogiri"
+dependency "dep-selector-libgecode"
+
+build do
+  env = with_standard_compiler_flags(with_embedded_path)
+
+  gem "install berkshelf" \
+      "  --no-document", env: env
+end

data/config/software/binutils.rb

@@ -0,0 +1,47 @@
+#
+# Copyright:: Chef Software, Inc.
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#     http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+#
+# expeditor/ignore: deprecated 2021-04
+
+name "binutils"
+default_version "2.26"
+
+version("2.35") { source sha256: "a3ac62bae4f339855b5449cfa9b49df90c635adbd67ecb8a0e7f3ae86a058da6" }
+version("2.26") { source sha256: "9615feddaeedc214d1a1ecd77b6697449c952eab69d79ab2125ea050e944bcc1" }
+
+license "GPL-3.0"
+license_file "COPYING"
+license_file "COPYING.LIB"
+
+source url: "https://ftp.gnu.org/gnu/binutils/binutils-#{version}.tar.gz"
+
+dependency "config_guess"
+
+relative_path "binutils-#{version}"
+
+build do
+  env = with_standard_compiler_flags(with_embedded_path)
+
+  update_config_guess
+
+  configure_command = ["./configure",
+                     "--prefix=#{install_dir}/embedded",
+                     "--disable-libquadmath"]
+
+  command configure_command.join(" "), env: env
+
+  make "-j #{workers}", env: env
+  make "-j #{workers} install", env: env
+end

data/config/software/bundler.rb

@@ -0,0 +1,38 @@
+#
+# Copyright 2012-2019, Chef Software Inc.
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#     http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+#
+# expeditor/ignore: deprecated 2021-04
+
+name "bundler"
+
+license "MIT"
+license_file "https://raw.githubusercontent.com/bundler/bundler/master/LICENSE.md"
+skip_transitive_dependency_licensing true
+
+dependency "rubygems"
+
+build do
+  env = with_standard_compiler_flags(with_embedded_path)
+
+  v_opts = "--version '#{version}'" unless version.nil?
+  gem [
+    "install bundler",
+    v_opts,
+    "--no-document --force",
+  ].compact.join(" "), env: env
+
+  # confirm the install was successful
+  command "bundle version", env: env
+end

data/config/software/bzip2.rb

@@ -0,0 +1,55 @@
+#
+# Copyright 2013-2018 Chef Software, Inc.
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#     http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+#
+# Install bzip2 and its shared library, libbz2.so
+# This library object is required for building Python with the bz2 module,
+# and should be picked up automatically when building Python.
+
+name "bzip2"
+default_version "1.0.8"
+
+license "BSD-2-Clause"
+license_file "LICENSE"
+skip_transitive_dependency_licensing true
+
+dependency "zlib"
+dependency "openssl"
+
+# version_list: url=https://sourceware.org/pub/bzip2/ filter=*.tar.gz
+version("1.0.8") { source sha256: "ab5a03176ee106d3f0fa90e381da478ddae405918153cca248e682cd0c4a2269" }
+
+source url: "https://fossies.org/linux/misc/#{name}-#{version}.tar.gz"
+
+relative_path "#{name}-#{version}"
+
+build do
+  env = with_standard_compiler_flags(with_embedded_path)
+
+  # Avoid warning where .rodata cannot be used when making a shared object
+  env["CFLAGS"] << " -fPIC" unless aix?
+
+  # The list of arguments to pass to make
+  args = "PREFIX='#{install_dir}/embedded' VERSION='#{version}'"
+  args << " CFLAGS='-qpic=small -qpic=large -O2 -g -D_ALL_SOURCE -D_LARGE_FILES'" if aix?
+
+  patch source: "makefile_take_env_vars.patch", plevel: 1, env: env
+  patch source: "makefile_no_bins.patch", plevel: 1, env: env # removes various binaries we don't want to ship
+  patch source: "soname_install_dir.patch", env: env if mac_os_x?
+  patch source: "aix_makefile.patch", env: env if aix?
+
+  make "#{args}", env: env
+  make "#{args} -f Makefile-libbz2_so", env: env
+  make "#{args} install", env: env
+end