buninu-linux 0.8.56 → 0.10.56

package/initramfs/usr/lib/bootstrap/7.build-gmp.js

@@ -0,0 +1,68 @@
+#!/usr/bin/env bun
+import { readFileSync } from "node:fs";
+import { cli } from "./lib/common.js";
+import {
+  buildRoot, canonicalizers, configure,
+  makeIn, patch, deps, ready,
+  source, stage,
+} from "./lib/build.js";
+
+async function main(args) {
+  const { arch, triple } = stage(
+    7, "gmp", args
+  );
+  const src = await source(
+    "gmp@4.3.2", "gmp-4.3.2"
+  );
+  const build = buildRoot + "/gmp";
+  canonicalizers(src);
+  patch(
+    src + "/gmp-impl.h",
+    "char *alloca ();",
+    "void *alloca ();"
+  );
+  // GMP 4.3 uses CPU "none" for C;
+  // --disable-assembly is ignored.
+  // Keep build/host equal: native,
+  // with 64-bit unsigned-long limbs.
+  const generic = arch === "x86_64";
+  const host = generic
+    ? "none-unknown-linux-musl"
+    : triple;
+  const env = {
+    ABI: generic ? "long" : "standard",
+    CPPFLAGS: "-DNO_ASM",
+  };
+  await configure(src, build, [
+    "--build=" + host,
+    "--host=" + host,
+    "--prefix=" + deps,
+    "--disable-shared",
+    "--enable-static",
+    "--disable-dependency-tracking",
+    "--disable-cxx",
+    "--enable-alloca=malloc-reentrant",
+  ], env);
+  checkConfiguration(src, build);
+  await makeIn(build, ["all"], env);
+  await makeIn(build, ["install"], env);
+  ready(7, "GMP static library");
+}
+
+function checkConfiguration(src, build) {
+  const log = readFileSync(build + "/config.log", "utf8");
+  const recorded = log.slice(log.lastIndexOf("## confdefs.h. ##"));
+  const template = readFileSync(src + "/config.in", "utf8");
+  const config = readFileSync(build + "/config.h", "utf8");
+  const names = new Set([...template.matchAll(/^#undef (\w+)/gm)].map(m => m[1]));
+  const actual = new Map([...config.matchAll(/^#define (\w+)[ \t]+(.*)$/gm)].map(m => [m[1], m[2].trim()]));
+  let checked = 0;
+  for (const m of recorded.matchAll(/^#define (\w+)[ \t]+(.*)$/gm)) {
+    if (!names.has(m[1])) continue;
+    if (actual.get(m[1]) !== m[2].trim()) throw new Error(`GMP config.h mismatch: ${m[1]}`);
+    checked++;
+  }
+  if (checked < 20) throw new Error("Insufficient GMP configure definitions");
+}
+
+if (import.meta.main) await cli(main);

package/initramfs/usr/lib/bootstrap/8.build-mpfr.js

@@ -0,0 +1,59 @@
+#!/usr/bin/env bun
+import {
+  readFileSync, writeFileSync,
+} from "node:fs";
+import { cli } from "./lib/common.js";
+import {
+  buildRoot, canonicalizers, command,
+  configure, makeIn, patch, deps,
+  ready, source, stage,
+} from "./lib/build.js";
+
+async function main(args) {
+  const { triple } = stage(
+    8, "mpfr", args
+  );
+  const src = await source(
+    "mpfr@2.4.2", "mpfr-2.4.2"
+  );
+  const build = buildRoot + "/mpfr";
+  canonicalizers(src);
+  prepareAllocation(src);
+  await configure(src, build, [
+    "--build=" + triple,
+    "--host=" + triple,
+    "--prefix=" + deps,
+    "--disable-shared",
+    "--enable-static",
+    "--disable-dependency-tracking",
+    "--with-gmp=" + deps,
+  ]);
+  await makeIn(build);
+  await makeIn(build, [
+    "-C", "tests",
+    "tadd", "tdiv", "tsqrt",
+  ]);
+  for (const name of [
+    "tadd", "tdiv", "tsqrt",
+  ]) {
+    await command(
+      [build + "/tests/" + name],
+      build + "/tests",
+      { srcdir: src + "/tests" }
+    );
+  }
+  await makeIn(build, ["install"]);
+  ready(8, "MPFR upstream tests");
+}
+
+function prepareAllocation(src) {
+  const path = src + "/mpfr-gmp.h";
+  patch(path, "char *alloca ();", "void *alloca ();");
+  const text = readFileSync(path, "utf8");
+  if (text.includes("/* Bootstrap: no working alloca. */")) return;
+  const start = text.indexOf("#define TMP_ALLOC(n)"), end = text.indexOf("#define TMP_DECL(m)", start);
+  if (start < 0 || end < 0) throw new Error("Unexpected MPFR allocation macros");
+  writeFileSync(path, text.slice(0, start) + "/* Bootstrap: no working alloca. */\n#ifdef C_ALLOCA\n#define TMP_ALLOC(n) mpfr_tmp_allocate (&tmp_marker, (n))\n#else\n" + text.slice(start, end) + "#endif\n" + text.slice(end));
+}
+
+if (import.meta.main) await cli(main);

package/initramfs/usr/lib/bootstrap/9.build-mpc.js

@@ -0,0 +1,55 @@
+#!/usr/bin/env bun
+import { writeFileSync } from "node:fs";
+import { cli } from "./lib/common.js";
+import {
+  buildRoot, canonicalizers, command,
+  configure, makeIn, deps, ready,
+  source, stage, tools,
+} from "./lib/build.js";
+
+async function main(args) {
+  const { triple } = stage(
+    9, "mpc", args
+  );
+  const src = await source(
+    "mpc@0.8.1", "mpc-0.8.1"
+  );
+  const build = buildRoot + "/mpc";
+  canonicalizers(src);
+  await configure(src, build, [
+    "--build=" + triple,
+    "--host=" + triple,
+    "--prefix=" + deps,
+    "--disable-shared",
+    "--enable-static",
+    "--disable-dependency-tracking",
+    "--with-gmp=" + deps,
+    "--with-mpfr=" + deps,
+  ]);
+  await makeIn(build);
+  await makeIn(build, ["install"]);
+  await verifyMath(build);
+  ready(9, "GMP, MPFR and MPC math");
+}
+
+async function verifyMath(build) {
+  writeFileSync(build + "/verify-math.c", `#include <gmp.h>
+#include <mpfr.h>
+#include <mpc.h>
+int main(void){
+mpz_t z;mpfr_t f;mpc_t c;
+mpz_init(z);mpz_ui_pow_ui(z,2,100);
+if(mpz_sizeinbase(z,2)!=101)return 1;
+mpz_sub_ui(z,z,1);if(mpz_popcount(z)!=100)return 2;
+mpfr_init2(f,128);mpfr_set_ui(f,144,GMP_RNDN);mpfr_sqrt(f,f,GMP_RNDN);
+if(mpfr_cmp_ui(f,12))return 3;
+mpc_init2(c,128);mpc_set_ui_ui(c,3,4,MPC_RNDNN);mpc_mul(c,c,c,MPC_RNDNN);
+if(mpfr_cmp_si(mpc_realref(c),-7)||mpfr_cmp_ui(mpc_imagref(c),24))return 4;
+mpc_clear(c);mpfr_clear(f);mpz_clear(z);return 0;}
+`);
+  await command([tools + "/cc", "-I" + deps + "/include", "verify-math.c",
+    deps + "/lib/libmpc.a", deps + "/lib/libmpfr.a", deps + "/lib/libgmp.a", "-o", "verify-math"], build);
+  await command([build + "/verify-math"], build);
+}
+
+if (import.meta.main) await cli(main);

package/initramfs/usr/lib/bootstrap/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 Dr. John (醫者小智)
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/initramfs/usr/lib/bootstrap/LICENSES/MIT-ZilchOS-bootstrap-from-tcc.txt

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2021 Alexander Sosedkin.
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/initramfs/usr/lib/bootstrap/NOTICE.md

@@ -0,0 +1,65 @@
+# Bootstrap credits and third-party notices
+
+Original Buninu bootstrap work uses the MIT license in `LICENSE`.
+Third-party components retain the terms below.
+
+## ZilchOS bootstrap-from-tcc
+
+- Credit: [ZilchOS/bootstrap-from-tcc](https://github.com/ZilchOS/bootstrap-from-tcc).
+- Author/copyright: Copyright (c) 2021 Alexander Sosedkin.
+- License: MIT; the complete, unmodified notice is in
+  [LICENSES/MIT-ZilchOS-bootstrap-from-tcc.txt](LICENSES/MIT-ZilchOS-bootstrap-from-tcc.txt).
+- Reference checkout: `d2f9454b34fef570cfb32cf5b17d85a90dba81bf`.
+- Buninu's TinyCC-to-GCC bootstrap route was developed with this project's
+  route and recipes as references, particularly GNU Make's no-make bootstrap
+  and self-rebuild, Binutils configuration, and the transition to GCC 4.
+- Buninu adapts that approach to Bun.cc, bunmsh, musl and native ARM64/x64;
+  its JavaScript stages, layout and local compatibility edits differ from the
+  original recipes. This credit does not imply upstream verification or endorsement.
+- ZilchOS's MIT license covers its own work, not the independent packages
+  downloaded or compiled by either project's recipes.
+
+## Sources bundled with Buninu Linux
+
+| Material | License/provenance |
+| --- | --- |
+| musl 1.2.6 | MIT; original `COPYRIGHT` remains in the source archive and `/bootstrap/src/musl/COPYRIGHT` |
+| TinyCC `05f0faf` | Compiler principally LGPL-2.1-or-later; original `COPYING` and individual source notices remain in `/bootstrap/src/tinycc` |
+| TinyCC runtime helpers | Per-file terms apply; for example `lib/libtcc1.c` carries GPL-2.0-or-later with an additional linking permission, retained verbatim in the upstream archive |
+| Local bootstrap overlay and JS scripts | Buninu Linux's MIT terms for original local work; third-party material keeps its own terms and notices |
+
+- Archives are under `sources/` in the outer package; SHA-256 pins are in
+  `lib/seed.js`. Stage 1 extracts them without stripping copyright notices.
+- The overlay supplies local configuration, build entry points and smoke tests.
+  Compiling or including upstream TinyCC source does not relicense that source.
+- The musl ARM64 startup adjustment is a temporary local header override;
+  the original musl source and copyright notice are retained.
+
+## Sources fetched by stages 5–12
+
+These archives and their resulting binaries are not prebundled in the npm
+package. Fixed URLs and SHA-256 pins are in `downloads.md`. Downloads preserve
+upstream license texts and individual file notices in `/bootstrap/src`.
+
+| Stage | Package | Principal code license / upstream notice |
+| --- | --- | --- |
+| 5 | GNU Make 4.4.1 | GPL-3.0-or-later; `COPYING` |
+| 6 | GNU Binutils 2.39 | GPL-3.0-or-later for the main tools; component-specific terms also apply; `COPYING*` and source headers |
+| 7 | GMP 4.3.2 | LGPL-3.0-or-later for the library; `COPYING.LIB`, with GPL text in `COPYING` |
+| 8 | MPFR 2.4.2 | LGPL-2.1-or-later for the library; `COPYING.LIB` |
+| 9 | MPC 0.8.1 | LGPL-2.1-or-later for the library; `COPYING.LIB` |
+| 10 | GNU m4 1.4.18 | GPL-3.0-or-later; `COPYING` |
+| 11 | Flex 2.6.4 | Upstream BSD-style license; preserve its exact `COPYING` text |
+| 12 | GCC 4.7 vendor commit `9d2b63d100ae7c99ee8b128fb41086fd85c8f57d` | Compiler GPL-3.0-or-later; libgcc files carry their own notices and GCC Runtime Library Exception 3.1 where stated; `COPYING3`, `COPYING.RUNTIME`, other `COPYING*` and source headers |
+
+- This table summarizes the principal code licenses; manuals, bundled support
+  code and individual files may carry other terms. Their original notices govern.
+- Stage 12 preserves the top-level license texts for GCC, Binutils and linked
+  numerical libraries under `/bootstrap/result/share/licenses/`, together with
+  this bootstrap credit and the ZilchOS MIT license.
+- License texts alone are not Corresponding Source. A distributor of compiled
+  results must also retain/provide the applicable source and local changes as
+  required by the relevant licenses; the pinned downloads and shipped recipes
+  document the inputs and modifications.
+- Prebuilt Bun, musl, libgcc, libstdc++ and bunmsh remain separately licensed
+  seed components; see the outer package's `NOTICE.md` and application notices.

package/initramfs/usr/lib/bootstrap/README.md

@@ -0,0 +1,204 @@
+# Bootstrap from Bun
+
+- Route and recipe reference: [ZilchOS/bootstrap-from-tcc](https://github.com/ZilchOS/bootstrap-from-tcc),
+  by Alexander Sosedkin. See [NOTICE.md](NOTICE.md) for full credit and component licenses.
+
+- Requires Bun with `Bun.cc`, `Bun.Archive` and `Bun.YAML` (tested with 1.4.2).
+- Supported targets: native ARM64 and x86-64 Linux with musl.
+- Run stages 1 and 2 outside the new rootfs; run stages 3–12 inside it.
+- The numbered filenames are the execution order.
+- Inside the new rootfs, use `cd /bootstrap`; scripts, `lib/`, `README.md` and
+  `downloads.md` live alongside `src`, `toolchain`, `deps`, `build` and `result`.
+- Copies of scripts 1/2 are included for reference; run preparation/entry from
+  the outer package, which also contains the bundled seed archives.
+
+## 1. Prepare a new rootfs
+
+```sh
+bun /usr/lib/bootstrap/1.prepare-rootfs.js
+```
+
+- Default architecture: the running Bun's architecture.
+- Default destination: `./roota` for ARM64, `./rootx` for x86-64.
+- Optional arguments: `[ARCH] [ROOTFS]`.
+- Architecture aliases: `a`, `arm64`, `aarch64`; `x`, `x64`, `x86_64`, `x86-64`.
+- A single directory argument uses the default architecture.
+- Destination must be new; its parent directory must already exist.
+
+```sh
+bun /usr/lib/bootstrap/1.prepare-rootfs.js a ./my-root
+bun /usr/lib/bootstrap/1.prepare-rootfs.js x
+bun /usr/lib/bootstrap/1.prepare-rootfs.js ./my-root
+```
+
+- On Buninu Linux (`ID=buninu-linux` in `/etc/os-release`), reuse the local
+  Bun, musl loader, libgcc, libstdc++, DNS configuration, bunmsh and extraction tools.
+- For a different target architecture, or outside Buninu Linux:
+  - Fetch `buninu-linux@0.9.56` for the runtime libraries and JavaScript tools.
+  - Fetch musl Bun 1.4.2 for the target architecture (x64 uses baseline).
+  - Verify SHA-256 before using either download.
+- Pins live in `downloads.md`; despite its extension, it is YAML with the same
+  URL/hash pair format as `scripts/npm-packages.md`.
+- Cache: `${XDG_CACHE_HOME:-$HOME/.cache}/buninu-bootstrap/`; cached files are
+  verified again. A bad cache entry causes an error, not an unchecked fallback.
+- No musl-dev APK, prebuilt CRT, installed headers or standalone compiler required.
+- Bundled sources are hash-checked and extracted:
+  - `sources/musl-1.2.6.tar.gz` -> `/bootstrap/src/musl`.
+  - `sources/tinycc-05f0faf-upstream.tar.gz` -> `/bootstrap/src/tinycc`.
+  - `sources/tinycc-local-bootstrap-files.tar.gz` -> TinyCC recipes and `/bin/cc`.
+- `/bin/sh` is an executable JavaScript file with `#!/bin/bun`.
+- It prepends `/bootstrap/result/bin` and `/bootstrap/toolchain/bin` to PATH,
+  removes duplicates, then dynamically imports bunmsh. Missing bin directories
+  are harmless; child processes inherit the environment.
+- Build stages use a separate shell launcher and explicit PATH so installed
+  result tools do not silently replace bootstrap tools during a rebuild.
+- Scripts 1–12 and helpers are copied to `/bootstrap` in the new rootfs.
+- Preparation can select another architecture; entering/building requires a
+  matching CPU or a separately configured emulator. These scripts do not set up emulation.
+
+## 2. Print the entry command
+
+```sh
+bun /usr/lib/bootstrap/2.enter-rootfs.js
+```
+
+- Accepts `[ARCH] [ROOTFS]`, with the same architecture aliases as stage 1.
+- Without a destination (including an architecture-only invocation), prints
+  `/path/to/your/rootfs` as a placeholder instead of assuming `roota` or `rootx`.
+- Prints commands only; it does not enter, modify or read the rootfs or its
+  marker file. The destination does not need to exist to print instructions.
+- Reads the host's os-release only to choose chroot versus bunproot.
+- Buninu Linux example (requires chroot privileges):
+
+```sh
+chroot '/absolute/path/rootx' /bin/sh
+```
+
+- Android/Termux and other hosts with bunproot:
+
+```sh
+bun x bunproot -koe -r '/absolute/path/roota'
+```
+
+## 3. Generate musl development files, inside the rootfs
+
+```sh
+cd /bootstrap
+bun 3.gen-musl-dev.js
+```
+
+- Generate 217 public headers from musl's source and architecture templates.
+- Build TinyCC in memory using `Bun.cc`; emit `crt1.o`, `crti.o`, `crtn.o`.
+- Install headers under `/usr/include`, CRT objects under `/usr/lib`.
+- Preserve the original musl sources.
+- ARM64 only: use a temporary startup-header override omitting the unused
+  `_DYNAMIC` argument, because TinyCC's ARM64 assembler does not support `adrp`.
+- This override applies only to ordinary `crt1`; static PIE `rcrt1` and the
+  dynamic loader are not built here.
+- Refuse existing headers/CRT instead of overwriting them.
+- If this stage fails after headers were generated, preserve the rootfs for
+  diagnosis and prepare a fresh destination before repeating the full flow.
+
+## 4. Build a standalone C compiler, inside the rootfs
+
+```sh
+bun /bootstrap/4.build-tcc.js
+cc /bootstrap/src/tinycc/bun-hello-libc.c -o /tmp/hello
+/tmp/hello
+```
+
+- Build TinyCC stage1 through `Bun.cc`, using the generated CRT.
+- Build the x64 compiler runtime helpers when needed.
+- Rebuild stage2 with stage1 and require byte-identical executables.
+- Verify libc, x64 conversions/variadic calls, and CRT startup behavior.
+- `/bin/cc` launches `/bootstrap/toolchain/bin/tcc` with the headers, libraries and helpers.
+- Stages 3/4 are offline; no host build tools are used.
+- The seed Bun, musl shared library, libgcc and libstdc++ remain prebuilt inputs.
+- Source licenses remain in the archives and extracted trees:
+  - musl: `/bootstrap/src/musl/COPYRIGHT`.
+  - TinyCC: `/bootstrap/src/tinycc/COPYING` and individual source-file notices.
+
+## 5–12. Build through GCC 4.7
+
+- Run each numbered script inside the same rootfs, in order.
+- Each stage fetches its source on demand and checks the SHA-256 in `downloads.md`.
+- These eight large source archives are **not** included in the npm package or initramfs.
+- Fixed version/commit URLs are used, never `latest` or a moving branch.
+- Cache: `/root/.cache/buninu-bootstrap` by default.
+- Source trees: `/bootstrap/src`; build trees and logs: `/bootstrap/build`.
+- Reserve at least 3 GB of writable workspace; avoid a small RAM-only rootfs.
+- Set `BOOTSTRAP_JOBS=1` to reduce build concurrency (default: 2).
+
+| Stage | Command after `bun /bootstrap/` | Source |
+| --- | --- | --- |
+| 5 | `5.build-make.js` | GNU Make 4.4.1, official GNU release |
+| 6 | `6.build-binutils.js` | Binutils 2.39, official GNU release |
+| 7 | `7.build-gmp.js` | GMP 4.3.2, official GNU release |
+| 8 | `8.build-mpfr.js` | MPFR 2.4.2, official version directory |
+| 9 | `9.build-mpc.js` | MPC 0.8.1, GCC infrastructure archive |
+| 10 | `10.build-m4.js` | GNU m4 1.4.18, official GNU release |
+| 11 | `11.build-flex.js` | Flex 2.6.4, official GitHub release |
+| 12 | `12.build-gcc.js` | GCC mirror, commit `9d2b63d100ae7c99ee8b128fb41086fd85c8f57d` |
+
+- GNU Make first uses its shipped no-make builder, then rebuilds itself.
+- Binutils supplies the assembler, linker and archive tools; stage 6 also
+  builds/tests the additional TinyCC runtime helpers needed by later stages.
+- GMP/MPFR/MPC are static prerequisite libraries; MPFR runs upstream arithmetic
+  tests, and MPC's stage verifies all three libraries together.
+- m4 and Flex are built from source and tested before GCC uses them.
+- `configure` and build shell commands use bunmsh. External utility adapters
+  call its JavaScript builtins in POSIX mode; no host awk/sed/coreutils enter the build.
+- Logs are streamed to the terminal and retained under `/bootstrap/build/logs/`.
+- Re-running a failed stage revalidates the download, reconfigures and resumes
+  its existing build tree. Source compatibility patches are idempotent.
+- GCC uses a vendor 4.7 branch containing both ARM64 and x64 backends. The pinned
+  GitHub snapshot's 76,720 regular source files match the earlier local archive.
+- Stage 12 builds the C frontend and libgcc, then tests `-O0`/`-O2`, the musl
+  interpreter, architecture/type macros and 128-bit runtime arithmetic.
+- Stage 12 runs GCC's `install-gcc` and `install-target-libgcc` rules with
+  `--prefix=/bootstrap/result`, and includes native Binutils executables.
+- GCC's private `include` and `include-fixed` directories are installed using
+  JavaScript with symlinks dereferenced, avoiding the tar pipe and recursive
+  `cp -p` requirements and retaining headers after source/build removal.
+- The installed compiler is `/bootstrap/result/bin/gcc`; it is not an `xgcc`
+  wrapper and needs no `-B` pointing into a build directory.
+- The final check temporarily renames `src`, `toolchain`, `deps` and `build`
+  to sibling `*.verification-hidden` directories, compiles/runs ordinary and
+  shared-library checks using only result tools, then restores the directories.
+- If interrupted by a forced kill, restore any `*.verification-hidden` directory
+  to its original name before resuming. Ordinary errors restore them automatically.
+- Successful verification writes `/bootstrap/result/verified.json` and
+  `/bootstrap/result/verification.log`; stage 12's build log remains in `build/logs`.
+- After stage 12 succeeds, `/bootstrap/build` can be deleted. The installed GCC
+  also does not need `src`, `deps` or `toolchain`; keep these to rebuild or use
+  the intermediate tools such as Make and TinyCC.
+- Result still uses the rootfs's musl loader/libc, `/usr/include`, `/usr/lib`
+  startup objects and seed runtime libraries. It is not a self-contained rootfs.
+- The installation prefix is fixed at `/bootstrap/result`; moving it into `/usr`
+  is not supported by simply copying it. A system installation should instead
+  configure `--prefix=/usr` and stage the installation with `DESTDIR`.
+- This is the GCC 4.7 C + libgcc stopping milestone, not a full GCC three-stage
+  bootstrap or a completed Bun rebuild.
+- This layout/install revision has only received static checks; validate it
+  by running the numbered stages in a new rootfs.
+
+## Directory layout
+
+| Directory | Contents |
+| --- | --- |
+| `/bootstrap/src` | musl, TinyCC and downloaded package source trees |
+| `/bootstrap/toolchain` | intermediate compiler, runtime helpers, Make, Binutils, m4, Flex and JS utility adapters |
+| `/bootstrap/deps` | static GMP, MPFR and MPC libraries and headers |
+| `/bootstrap/build` | intermediate objects, build trees and build logs |
+| `/bootstrap/result` | installed GCC, libgcc, Binutils and final verification records |
+
+```sh
+# Entering through /bin/sh already sets PATH.
+gcc --version
+gcc hello.c -o hello
+./hello
+```
+
+- The generated musl headers and CRT remain in `/usr/include` and `/usr/lib`.
+- The source archive download cache remains under `/root/.cache/buninu-bootstrap`.
+

package/initramfs/usr/lib/bootstrap/downloads.md

@@ -0,0 +1,49 @@
+# YAML: [immutable download URL, SHA-256]
+# npm SHA-256 verified against registry SHA-512 integrity.
+# Bun 1.4.2 pins match scripts/arch.js.
+
+"buninu-linux@0.9.56":
+  - https://registry.npmjs.org/buninu-linux/-/buninu-linux-0.9.56.tgz
+  - sha256:972b46b5f0b1caaa0e64e352de68e37b28cc6955ed4240e91f0fe358b0d6f73d
+
+"bun-linux-aarch64-musl@1.4.2":
+  - https://github.com/oven-sh/bun/releases/download/bun-v1.4.2/bun-linux-aarch64-musl.zip
+  - sha256:71760b6c8ea30623b81a4907cb815d48e2ea266f2e73e751534a44a0607950df
+
+"bun-linux-x64-musl-baseline@1.4.2":
+  - https://github.com/oven-sh/bun/releases/download/bun-v1.4.2/bun-linux-x64-musl-baseline.zip
+  - sha256:76e1db84e98f22f78de0a87e309bfbbf297732847f9720db36750646c85c8c18
+
+# Stages 5–12: fetched on demand, never bundled in the npm package.
+
+"make@4.4.1":
+  - https://ftp.gnu.org/gnu/make/make-4.4.1.tar.gz
+  - sha256:dd16fb1d67bfab79a72f5e8390735c49e3e8e70b4945a15ab1f81ddb78658fb3
+
+"binutils@2.39":
+  - https://ftp.gnu.org/gnu/binutils/binutils-2.39.tar.gz
+  - sha256:d12ea6f239f1ffe3533ea11ad6e224ffcb89eb5d01bbea589e9158780fa11f10
+
+"gmp@4.3.2":
+  - https://ftp.gnu.org/gnu/gmp/gmp-4.3.2.tar.gz
+  - sha256:7be3ad1641b99b17f6a8be6a976f1f954e997c41e919ad7e0c418fe848c13c97
+
+"mpfr@2.4.2":
+  - https://www.mpfr.org/mpfr-2.4.2/mpfr-2.4.2.tar.gz
+  - sha256:246d7e184048b1fc48d3696dd302c9774e24e921204221540745e5464022b637
+
+"mpc@0.8.1":
+  - https://gcc.gnu.org/pub/gcc/infrastructure/mpc-0.8.1.tar.gz
+  - sha256:e664603757251fd8a352848276497a4c79b7f8b21fd8aedd5cc0598a38fee3e4
+
+"m4@1.4.18":
+  - https://ftp.gnu.org/gnu/m4/m4-1.4.18.tar.gz
+  - sha256:ab2633921a5cd38e48797bf5521ad259bdc4b979078034a3b790d7fec5493fab
+
+"flex@2.6.4":
+  - https://github.com/westes/flex/releases/download/v2.6.4/flex-2.6.4.tar.gz
+  - sha256:e87aae032bf07c26f85ac0ed3250998c37621d95f8bd748b31f15b33c45ee995
+
+"gcc@4.7-9d2b63d":
+  - https://codeload.github.com/gcc-mirror/gcc/tar.gz/9d2b63d100ae7c99ee8b128fb41086fd85c8f57d
+  - sha256:8ba051b9c7e2de8f3dd97d0092cffd17cafec2e2e2f70f1ec17a6c94972c8f80