From 933f97e380fafe589ea66e4f396b50e0d5a0ac80 Mon Sep 17 00:00:00 2001
From: Ophestra <cat@gensokyo.uk>
Date: Fri, 16 Oct 2026 22:06:39 +0900
Subject: internal/workflows: build wireplumber 0.5.14

PipeWire/WirePlumber had become slopware while I was not looking.
WirePlumber 0.5.15 broke SecurityContext, and it has still not been
fixed. I have filed a ticket upstream, but considering the fact that my
previous security-related ticket, filed over 10 months ago, is still
being ignored, I do not have high hopes that they will fix it.

It is no longer safe to use PipeWire. Users are advised to downgrade to
0.5.14 for now. A drop-in replacement of PipeWire might be needed for
Rosa OS.

This change also adds additional packages required by the native
cmd/hakurei integration test suite.

Signed-off-by: Ophestra <cat@gensokyo.uk>
---
 internal/workflows/Containerfile | 27 +++++++++++++++++++++++++++
 1 file changed, 27 insertions(+)

diff --git a/internal/workflows/Containerfile b/internal/workflows/Containerfile
index 3b1baeda..14bd5c2e 100644
--- a/internal/workflows/Containerfile
+++ b/internal/workflows/Containerfile
@@ -5,10 +5,37 @@ RUN add-apt-repository -y ppa:savoury1/pipewire && \
 	apt-get update && apt-get install -y \
 		msft-golang \
 		libmount-dev \
+		acl \
 		sway \
 		xwayland \
 		xdg-dbus-proxy \
 		pipewire \
+		pipewire-pulse \
+		wireplumber- \
+		pulseaudio-utils \
+		foot \
+		xterm \
 		fuse3 \
 		fsmark && \
 	apt-get clean && rm -rf /var/lib/apt/lists/*
+
+RUN VERSION='0.5.14' && \
+	curl "https://gitlab.freedesktop.org/pipewire/wireplumber/-/archive/${VERSION}/wireplumber-${VERSION}.tar.bz2" | \
+	tar -C /tmp -jx && \
+	apt-get update && apt-get install -y \
+		build-essential \
+		meson \
+		libpipewire-0.3-dev && \
+	meson setup \
+		-Dprefix=/usr \
+		-Dbuildtype=release \
+	"/tmp/wireplumber-${VERSION}" build && \
+	meson compile -C build && \
+	meson install -C build && \
+	rm -rf build "/tmp/wireplumber-${VERSION}" && \
+	apt-get remove -y \
+		build-essential \
+		meson \
+		libpipewire-0.3-dev && \
+	apt-get autoremove -y && \
+	apt-get clean && rm -rf /var/lib/apt/lists/*
-- 
cgit v1.3.1