scripts/ci/build-release.sh

@@ -71,8 +71,23 @@ case $build_host in
     ;;
 esac
 
+# Install the package definitions needed by openuf. The feeds tool recursively
+# installs their transitive package definitions; OpenWrt's build graph then
+# compiles that dependency closure before openuf.
 ./scripts/feeds update base packages
 ./scripts/feeds install mbedtls uci usteer
+
+# openuf needs the mbedTLS libraries, not its optional example/utility
+# executables. Under x86 user emulation on ARM, linking those large programs is
+# unreliable and unnecessary, so keep the library build and omit the programs.
+mbedtls_makefile=feeds/base_root/package/libs/mbedtls/Makefile
+[[ -f $mbedtls_makefile ]] || {
+  echo "mbedTLS feed Makefile not found: $mbedtls_makefile" >&2
+  exit 1
+}
+sed -i 's/-DENABLE_PROGRAMS:Bool=ON/-DENABLE_PROGRAMS:Bool=OFF/' "$mbedtls_makefile"
+grep -q -- '-DENABLE_PROGRAMS:Bool=OFF' "$mbedtls_makefile"
+
 mkdir -p package/openuf
 (cd "$repo_root" && tar --exclude=.git --exclude="$output_dir" -cf - .) | (cd package/openuf && tar -xf -)
 sed -i -E "s/^(PKG_VERSION[[:space:]]*:?=[[:space:]]*).*/\\1${version}/" package/openuf/Makefile