add patch to disable IPA signing for Flatpak compatibility

Author: saeugetier

io.github.saeugetier.photobooth.json

@@ -18,7 +18,6 @@
         "--socket=fallback-x11",
         "--socket=wayland",
         "--env=LIBCAMERA_LOG_LEVELS=*:DEBUG",
-        "--env=LIBCAMERA_IPA_FORCE_ISOLATION=0",
         "--env=LIBCAMERA_IPA_MODULE_PATH=/app/lib/libcamera",
         "--env=LIBCAMERA_IPA_CONFIG_PATH=/app/share/libcamera/ipa"
     ],
@@ -81,6 +80,10 @@
                     "type": "git",
                     "url": "https://github.com/raspberrypi/libcamera.git",
                     "tag": "v0.6.0"
+                },
+                {
+                    "type": "patch",
+                    "path": "patches/disable-ipa-signing.patch"
                 }
             ],
             "modules": [

patches/disable-ipa-signing.patch

@@ -0,0 +1,57 @@
+diff --git a/src/libcamera/meson.build b/src/libcamera/meson.build
+index 34e20f55..72ddbf47 100644
+--- a/src/libcamera/meson.build
++++ b/src/libcamera/meson.build
+@@ -85,24 +85,10 @@ libyaml = dependency('yaml-0.1', default_options : [
+     'werror=false',
+ ])
+ 
+-# Use one of gnutls or libcrypto (provided by OpenSSL), trying gnutls first.
+-libcrypto = dependency('gnutls', required : false)
+-if libcrypto.found()
+-    config_h.set('HAVE_GNUTLS', 1)
+-else
+-    libcrypto = dependency('libcrypto', required : false)
+-    if libcrypto.found()
+-        config_h.set('HAVE_CRYPTO', 1)
+-    endif
+-endif
+-
+-if not libcrypto.found()
+-    warning('Neither gnutls nor libcrypto found, all IPA modules will be isolated')
+-    summary({'IPA modules signed with': 'None (modules will run isolated)'},
+-            section : 'Configuration')
+-else
+-    summary({'IPA modules signed with' : libcrypto.name()}, section : 'Configuration')
+-endif
++# IPA signing disabled for Flatpak compatibility
++warning('IPA signing disabled for Flatpak sandbox compatibility')
++summary({'IPA modules signed with': 'None (modules will run isolated)'},
++        section : 'Configuration')
+ 
+ if liblttng.found()
+     tracing_enabled = true
+diff --git a/src/meson.build b/src/meson.build
+index 9b63c8e8..687d6b51 100644
+--- a/src/meson.build
++++ b/src/meson.build
+@@ -15,17 +15,8 @@ summary({
+          }, section : 'Paths')
+ 
+ # Module Signing
+-openssl = find_program('openssl', required : false)
+-if openssl.found()
+-    ipa_priv_key = custom_target('ipa-priv-key',
+-                                 output : ['ipa-priv-key.pem'],
+-                                 command : [gen_ipa_priv_key, '@OUTPUT@'])
+-    config_h.set('HAVE_IPA_PUBKEY', 1)
+-    ipa_sign_module = true
+-else
+-    warning('openssl not found, all IPA modules will be isolated')
+-    ipa_sign_module = false
+-endif
++# IPA signing disabled for Flatpak compatibility
++ipa_sign_module = false 
+ 
+ # libyuv, used by the Android adaptation layer and the virtual pipeline handler.
+ # Fallback to a subproject if libyuv isn't found, as it's typically not provided