commit:     c4107a1f6e8e2d54c1f679cc11e79a2db64be9a7
Author:     orbea <orbea <AT> riseup <DOT> net>
AuthorDate: Sat Aug  3 04:42:02 2024 +0000
Commit:     orbea <orbea <AT> riseup <DOT> net>
CommitDate: Sat Aug  3 04:51:07 2024 +0000
URL:        https://gitweb.gentoo.org/repo/proj/libressl.git/commit/?id=c4107a1f

dev-lang/python: add 3.9.19_p4, 3.10.14_p2, 3.11.9_p1, 3.12.4_p3

Signed-off-by: orbea <orbea <AT> riseup.net>

 dev-lang/python/Manifest                           |   4 +
 dev-lang/python/files/python-3.9.19-libressl.patch |  34 ++
 dev-lang/python/python-3.10.14_p2.ebuild           | 543 +++++++++++++++++++
 dev-lang/python/python-3.11.9_p1.ebuild            | 577 +++++++++++++++++++++
 dev-lang/python/python-3.12.4_p3.ebuild            | 562 ++++++++++++++++++++
 dev-lang/python/python-3.9.19_p4.ebuild            | 496 ++++++++++++++++++
 6 files changed, 2216 insertions(+)

diff --git a/dev-lang/python/Manifest b/dev-lang/python/Manifest
index aa2c937..13388cf 100644
--- a/dev-lang/python/Manifest
+++ b/dev-lang/python/Manifest
@@ -12,8 +12,12 @@ DIST Python-3.9.19.tar.xz 19682840 BLAKE2B 
a12256663f0ff3b799c2193c5877aa89a4343
 DIST Python-3.9.19.tar.xz.asc 833 BLAKE2B 
b48b58b8ccf4d6ba8d0d7120f04bebf59f843ffecf5fde4c3989fd9c26e3d3d1ccf4e5688f7024ae94775c8731e9ffa56799fca8596289edf93e4aac5480aaad
 SHA512 
f7f4946243dfc56de2c84f50276b088d347f17054f50e3331d1e312e2a8e2c6ed1b4b4a807202b51137fd2af3fc9218cafa42ed348a954ace896d9a432e2defd
 DIST python-gentoo-patches-2.7.18_p16.tar.xz 35448 BLAKE2B 
0139c0944f62f9cdd236f6a8557e0ed19704c7d72869af1cb7d8bd3e646a746cd4a0201e1b44232a5e78ef49f254db20b0d0271bf744fbfd4fe0f1e99b8f3e6c
 SHA512 
810be590d0e06fab4b2165e6852ca49662f09dcd7e20b47a29f613ad7653252c8dfac3f0eb228d77c8a914efa7c08788b2fbd552a4b47504f5fd0ec17450c48f
 DIST python-gentoo-patches-3.10.14_p1.tar.xz 15836 BLAKE2B 
a850e4ad4f025fa9d38ccba937f1b3ee8443ed186c22ede58b4c7324a8541cf724590686671a9aa9194662303ce75bc80aac8ee6f9da34b793876817b6f593ff
 SHA512 
5d969f5e5126ee675a062924a5f403de142fc5bfe4a931fd3576bcc6298a855419d305d4b1ffedacb429783a05324b36eef4c45c861c47bada0bdd840de2bca3
+DIST python-gentoo-patches-3.10.14_p2.tar.xz 19564 BLAKE2B 
2ad1398e0679e73028a0614e8c4ef6bc76928f6c1d0e93c39c3bf2c23201904ee677377abb120444995154bda4251cb8f0aabafca5e6c82601a6270d0e62bf67
 SHA512 
6d4194b85a176a1a0f7acc3eab48829d504e66381f3008821a9a433e63f5188b444321192ad536d8219a1c3ca56dbdb5c39439401cbbb30f35a606e2b6617624
 DIST python-gentoo-patches-3.11.9.tar.xz 8456 BLAKE2B 
4e62837f17c1d056460df417b056a79ad78dbcdd3454761c7cda68ffe6faf8f4d4f04d5539e0ba94332fe19a751f7d5ff2c35ff969a6aa09a2c72d2ce5efbff1
 SHA512 
a288aa8d1d15e906e0f1762602a2122f9dc91bbd6b72123ac5d00ce55b3af324a4e8280b600fc0fb630e489e57ee1547d7595a4ede7a70e4b26d6686a8414997
+DIST python-gentoo-patches-3.11.9_p1.tar.xz 12348 BLAKE2B 
885c18eb52d299c8da43fe48106a2464ce594822e8ed362150c98f749065447b7438741cacf82a71db102434a5b2a2e91778aca8609fd7ede7898f9e57a82d49
 SHA512 
2ed8a97692a8980e565038ad095dad8ed3daf1f8c5c5e042a0bc278c320e099962ad13b5ff919ae334674a4828c5e8f3b9c3af6b3c37e93a42374284f5ea2243
 DIST python-gentoo-patches-3.12.3.tar.xz 6028 BLAKE2B 
7953a48a1d95a6a33bd88060fbcac463a5469371aa0c882c3945f1fea64a63c4d45fca8451f51f4eaeea00a04267ad2e54e4cc720c95e8bb5a3477e00263b80a
 SHA512 
4779bab2b24e59e4a77987ce3e9611d99e87c9c4d016309758c26a65fe2e11ef04d48d5af628c02b1552dc1f31b768f87448f8e19e716b4fe372941e6dacac3f
 DIST python-gentoo-patches-3.12.4_p1.tar.xz 7088 BLAKE2B 
450b95539aaf7c8c052ca1bbcab3b1a8f1c33e8007b6c66cc290c33d88cac8bad346e13cf96508834599a59ccb6548e6dd8cbfb1e24d84539f502101b04299d0
 SHA512 
df874cb1d8d0f5df60fca82daa2a59cbcfeba6be72b021101a753306a09bb19ee268681b3fdb39659be923d868c727bf7aabbe8173cfd48a329c66f4727353c7
 DIST python-gentoo-patches-3.12.4_p2.tar.xz 11124 BLAKE2B 
8e49af60b1e514de9b77c562a8df5ae7d6caf0045e631fcf85a8f91335cf18f1df2ac611ea73d26e5b70c2537beb423a9303dcce41c2c2e2b049ee9f1e537b53
 SHA512 
df1d49e60d23f5f09144c57034c86f81f8d185f65c3a93bbb2b386977638bd525b45fe1dff8c7202d60ca3a5fdf96b94a492b076072713565e7449b679fde7b5
+DIST python-gentoo-patches-3.12.4_p3.tar.xz 14796 BLAKE2B 
68f5235ef434f9db16e7bc635ff51b6607cfb9be713fdc3c0ef624ec0f513345f6e02e27b8ebc2b3c8a5fcd4f4f5161024407ae364bdffd3b22a7a9d3a509b30
 SHA512 
8e337a7234b8ad64dd82435dcda0ef4e90c21214bd7b13a83fe9ba700d5b07ce11fb33b7d34d808132120b4a077fde26278b87116bb02ccef50470c046a66d2b
 DIST python-gentoo-patches-3.9.19_p3.tar.xz 28240 BLAKE2B 
35c70b1f9a590abe9a74795f478ab788cd72c96e9d84f2756685e61324dc4203148e71b00a236bb4af8fb8315e3582ecec255b39749a653e0511d4a9f9fef725
 SHA512 
6b8f4dab4aa7d4d646ee4091b5cf76bbc8896d4299a3623660a2c5fec06c0cf56c0a50ac87604885cd155141bc85e0e80acdbedb7b34a813901aad021b9b8ab2
+DIST python-gentoo-patches-3.9.19_p4.tar.xz 32048 BLAKE2B 
9595d508304baf36a2c8daa2ae15d3596fdfb5fed5c531fc379ee347d5b165885ade1842f094184fb7bd81a6385e45f9b77ba7bfa4334ea30292c0bc59b373e2
 SHA512 
5713c69ee3745246a570e0f05ac8f45baa8f9fa8a2154c930f1ddcf827a2a790cb5e308f5ff9452d3ffda5d60c167a02429af773eebf13dcb6463793cd448500

diff --git a/dev-lang/python/files/python-3.9.19-libressl.patch 
b/dev-lang/python/files/python-3.9.19-libressl.patch
new file mode 100644
index 0000000..997bc0e
--- /dev/null
+++ b/dev-lang/python/files/python-3.9.19-libressl.patch
@@ -0,0 +1,34 @@
+$OpenBSD: patch-Modules__hashopenssl_c,v 1.3 2022/01/21 04:25:12 kmos Exp $
+
+Index: Modules/_hashopenssl.c
+--- a/Modules/_hashopenssl.c
++++ b/Modules/_hashopenssl.c
+@@ -43,7 +43,8 @@
+ #  error "OPENSSL_THREADS is not defined, Python requires thread-safe OpenSSL"
+ #endif
+
+-#if (OPENSSL_VERSION_NUMBER < 0x10100000L) || defined(LIBRESSL_VERSION_NUMBER)
++#if (OPENSSL_VERSION_NUMBER < 0x10100000L) || \
++    (defined(LIBRESSL_VERSION_NUMBER) && LIBRESSL_VERSION_NUMBER < 
0x2070000fL)
+ /* OpenSSL < 1.1.0 */
+ #define EVP_MD_CTX_new EVP_MD_CTX_create
+ #define EVP_MD_CTX_free EVP_MD_CTX_destroy
+
+$OpenBSD: patch-Modules__ssl_c,v 1.3 2021/11/18 15:45:28 tb Exp $
+
+XXX maybe this can go away now we have auto-init, I'm not sure exactly
+what python's lock protects
+
+Index: Modules/_ssl.c
+--- a/Modules/_ssl.c
++++ b/Modules/_ssl.c
+@@ -213,6 +213,9 @@ extern const SSL_METHOD *TLSv1_2_method(void);
+ #if defined(OPENSSL_VERSION_1_1) && !defined(OPENSSL_NO_SSL2)
+ #define OPENSSL_NO_SSL2
+ #endif
++#if defined(LIBRESSL_VERSION_NUMBER) && defined(WITH_THREAD)
++#define HAVE_OPENSSL_CRYPTO_LOCK
++#endif
+
+ #ifndef PY_OPENSSL_1_1_API
+ /* OpenSSL 1.1 API shims for OpenSSL < 1.1.0 and LibreSSL < 2.7.0 */

diff --git a/dev-lang/python/python-3.10.14_p2.ebuild 
b/dev-lang/python/python-3.10.14_p2.ebuild
new file mode 100644
index 0000000..6820947
--- /dev/null
+++ b/dev-lang/python/python-3.10.14_p2.ebuild
@@ -0,0 +1,543 @@
+# Copyright 1999-2024 Gentoo Authors
+# Distributed under the terms of the GNU General Public License v2
+
+EAPI="8"
+WANT_LIBTOOL="none"
+
+inherit autotools check-reqs flag-o-matic multiprocessing pax-utils
+inherit prefix python-utils-r1 toolchain-funcs verify-sig
+
+MY_PV=${PV/_rc/rc}
+MY_P="Python-${MY_PV%_p*}"
+PYVER=$(ver_cut 1-2)
+PATCHSET="python-gentoo-patches-${MY_PV}"
+
+DESCRIPTION="An interpreted, interactive, object-oriented programming language"
+HOMEPAGE="
+       https://www.python.org/
+       https://github.com/python/cpython/
+"
+SRC_URI="
+       https://www.python.org/ftp/python/${PV%%_*}/${MY_P}.tar.xz
+       https://dev.gentoo.org/~mgorny/dist/python/${PATCHSET}.tar.xz
+       verify-sig? (
+               https://www.python.org/ftp/python/${PV%%_*}/${MY_P}.tar.xz.asc
+       )
+"
+S="${WORKDIR}/${MY_P}"
+
+LICENSE="PSF-2"
+SLOT="${PYVER}"
+KEYWORDS="~alpha ~amd64 ~arm ~arm64 ~hppa ~ia64 ~loong ~m68k ~mips ~ppc ~ppc64 
~riscv ~s390 ~sparc ~x86"
+IUSE="
+       bluetooth build debug +ensurepip examples gdbm libedit
+       +ncurses pgo +readline +sqlite +ssl test tk valgrind
+"
+RESTRICT="!test? ( test )"
+
+# Do not add a dependency on dev-lang/python to this ebuild.
+# If you need to apply a patch which requires python for bootstrapping, please
+# run the bootstrap code on your dev box and include the results in the
+# patchset. See bug 447752.
+
+RDEPEND="
+       app-arch/bzip2:=
+       app-arch/xz-utils:=
+       >=dev-libs/expat-2.1:=
+       dev-libs/libffi:=
+       dev-libs/mpdecimal:=
+       dev-python/gentoo-common
+       >=sys-libs/zlib-1.1.3:=
+       virtual/libcrypt:=
+       virtual/libintl
+       ensurepip? ( dev-python/ensurepip-wheels )
+       gdbm? ( sys-libs/gdbm:=[berkdb] )
+       kernel_linux? ( sys-apps/util-linux:= )
+       ncurses? ( >=sys-libs/ncurses-5.2:= )
+       readline? (
+               !libedit? ( >=sys-libs/readline-4.1:= )
+               libedit? ( dev-libs/libedit:= )
+       )
+       sqlite? ( >=dev-db/sqlite-3.3.8:3= )
+       ssl? ( >=dev-libs/openssl-1.1.1:= )
+       tk? (
+               >=dev-lang/tcl-8.0:=
+               >=dev-lang/tk-8.0:=
+               dev-tcltk/blt:=
+               dev-tcltk/tix
+       )
+"
+# bluetooth requires headers from bluez
+DEPEND="
+       ${RDEPEND}
+       bluetooth? ( net-wireless/bluez )
+       valgrind? ( dev-debug/valgrind )
+       test? ( app-arch/xz-utils )
+"
+# autoconf-archive needed to eautoreconf
+BDEPEND="
+       dev-build/autoconf-archive
+       app-alternatives/awk
+       virtual/pkgconfig
+       verify-sig? ( sec-keys/openpgp-keys-python )
+"
+RDEPEND+="
+       !build? ( app-misc/mime-types )
+"
+if [[ ${PV} != *_alpha* ]]; then
+       RDEPEND+="
+               dev-lang/python-exec[python_targets_python${PYVER/./_}(-)]
+       "
+fi
+
+VERIFY_SIG_OPENPGP_KEY_PATH=/usr/share/openpgp-keys/python.org.asc
+
+# large file tests involve a 2.5G file being copied (duplicated)
+CHECKREQS_DISK_BUILD=5500M
+
+QA_PKGCONFIG_VERSION=${PYVER}
+# false positives -- functions specific to *BSD
+QA_CONFIG_IMPL_DECL_SKIP=( chflags lchflags )
+
+pkg_pretend() {
+       use test && check-reqs_pkg_pretend
+}
+
+pkg_setup() {
+       use test && check-reqs_pkg_setup
+}
+
+src_unpack() {
+       if use verify-sig; then
+               verify-sig_verify_detached "${DISTDIR}"/${MY_P}.tar.xz{,.asc}
+       fi
+       default
+}
+
+src_prepare() {
+       # Ensure that internal copies of expat and libffi are not used.
+       rm -r Modules/expat || die
+       rm -r Modules/_ctypes/libffi* || die
+
+       local PATCHES=(
+               "${WORKDIR}/${PATCHSET}"
+               "${FILESDIR}"/${PN}-3.10.14-libressl.patch
+       )
+
+       default
+
+       # https://bugs.gentoo.org/850151
+       sed -i -e "s:@@GENTOO_LIBDIR@@:$(get_libdir):g" setup.py || die
+
+       # force the correct number of jobs
+       # https://bugs.gentoo.org/737660
+       local jobs=$(makeopts_jobs)
+       sed -i -e "s:-j0:-j${jobs}:" Makefile.pre.in || die
+       sed -i -e "/self\.parallel/s:True:${jobs}:" setup.py || die
+
+       eautoreconf
+}
+
+build_cbuild_python() {
+       # Hack to workaround get_libdir not being able to handle CBUILD, bug 
#794181
+       local cbuild_libdir=$(unset PKG_CONFIG_PATH ; $(tc-getBUILD_PKG_CONFIG) 
--keep-system-libs --libs-only-L libffi)
+
+       # pass system CFLAGS & LDFLAGS as _NODIST, otherwise they'll get
+       # propagated to sysconfig for built extensions
+       #
+       # -fno-lto to avoid bug #700012 (not like it matters for mini-CBUILD 
Python anyway)
+       local -x CFLAGS_NODIST="${BUILD_CFLAGS} -fno-lto"
+       local -x LDFLAGS_NODIST=${BUILD_LDFLAGS}
+       local -x CFLAGS= LDFLAGS=
+       local -x BUILD_CFLAGS="${CFLAGS_NODIST}"
+       local -x BUILD_LDFLAGS=${LDFLAGS_NODIST}
+
+       # We need to build our own Python on CBUILD first, and feed it in.
+       # bug #847910 and bug #864911.
+       local myeconfargs_cbuild=(
+               "${myeconfargs[@]}"
+
+               --prefix="${BROOT}"/usr
+               --libdir="${cbuild_libdir:2}"
+
+               # Avoid needing to load the right libpython.so.
+               --disable-shared
+
+               # As minimal as possible for the mini CBUILD Python
+               # we build just for cross.
+               --without-lto
+               --disable-optimizations
+       )
+
+       mkdir "${WORKDIR}"/${P}-${CBUILD} || die
+       pushd "${WORKDIR}"/${P}-${CBUILD} &> /dev/null || die
+       # We disable _ctypes and _crypt for CBUILD because Python's setup.py 
can't handle locating
+       # libdir correctly for cross.
+       PYTHON_DISABLE_MODULES+=" _ctypes _crypt" \
+               ECONF_SOURCE="${S}" econf_build "${myeconfargs_cbuild[@]}"
+
+       # Avoid as many dependencies as possible for the cross build.
+       cat >> Makefile <<-EOF || die
+               MODULE_NIS=disabled
+               MODULE__DBM=disabled
+               MODULE__GDBM=disabled
+               MODULE__DBM=disabled
+               MODULE__SQLITE3=disabled
+               MODULE__HASHLIB=disabled
+               MODULE__SSL=disabled
+               MODULE__CURSES=disabled
+               MODULE__CURSES_PANEL=disabled
+               MODULE_READLINE=disabled
+               MODULE__TKINTER=disabled
+               MODULE_PYEXPAT=disabled
+               MODULE_ZLIB=disabled
+       EOF
+
+       # Unfortunately, we do have to build this immediately, and
+       # not in src_compile, because CHOST configure for Python
+       # will check the existence of the Python it was pointed to
+       # immediately.
+       PYTHON_DISABLE_MODULES+=" _ctypes _crypt" emake
+       popd &> /dev/null || die
+}
+
+src_configure() {
+       # disable automagic bluetooth headers detection
+       if ! use bluetooth; then
+               local -x ac_cv_header_bluetooth_bluetooth_h=no
+       fi
+       local disable
+       use gdbm      || disable+=" gdbm"
+       use ncurses   || disable+=" _curses _curses_panel"
+       use readline  || disable+=" readline"
+       use sqlite    || disable+=" _sqlite3"
+       use ssl       || export PYTHON_DISABLE_SSL="1"
+       use tk        || disable+=" _tkinter"
+       export PYTHON_DISABLE_MODULES="${disable}"
+
+       if [[ -n "${PYTHON_DISABLE_MODULES}" ]]; then
+               einfo "Disabled modules: ${PYTHON_DISABLE_MODULES}"
+       fi
+
+       append-flags -fwrapv
+       filter-flags -malign-double
+
+       # Export CXX so it ends up in /usr/lib/python3.X/config/Makefile.
+       # PKG_CONFIG needed for cross.
+       tc-export CXX PKG_CONFIG
+
+       local dbmliborder=
+       if use gdbm; then
+               dbmliborder+="${dbmliborder:+:}gdbm"
+       fi
+
+       if use pgo; then
+               local profile_task_flags=(
+                       -m test
+                       "-j$(makeopts_jobs)"
+                       --pgo-extended
+                       -u-network
+
+                       # We use a timeout because of how often we've had hang 
issues
+                       # here. It also matches the default upstream 
PROFILE_TASK.
+                       --timeout 1200
+
+                       -x test_gdb
+                       -x test_dtrace
+
+                       # All of these seem to occasionally hang for PGO 
inconsistently
+                       # They'll even hang here but be fine in src_test 
sometimes.
+                       # bug #828535 (and related: bug #788022)
+                       -x test_asyncio
+                       -x test_concurrent_futures
+                       -x test_httpservers
+                       -x test_logging
+                       -x test_multiprocessing_fork
+                       -x test_socket
+                       -x test_xmlrpc
+
+                       # Hangs (actually runs indefinitely executing itself w/ 
many cpython builds)
+                       # bug #900429
+                       -x test_tools
+               )
+
+               # musl-specific skips
+               use elibc_musl && profile_task_flags+=(
+                       # various musl locale deficiencies
+                       -x test__locale
+                       -x test_c_locale_coercion
+                       -x test_locale
+                       -x test_re
+
+                       # known issues with find_library on musl
+                       # https://bugs.python.org/issue21622
+                       -x test_ctypes
+
+                       # fpathconf, ttyname errno values
+                       -x test_os
+               )
+
+               if has_version "app-arch/rpm" ; then
+                       # Avoid sandbox failure (attempts to write to 
/var/lib/rpm)
+                       profile_task_flags+=(
+                               -x test_distutils
+                       )
+               fi
+               local -x PROFILE_TASK="${profile_task_flags[*]}"
+       fi
+
+       local myeconfargs=(
+               # glibc-2.30 removes it; since we can't cleanly force-rebuild
+               # Python on glibc upgrade, remove it proactively to give
+               # a chance for users rebuilding python before glibc
+               ac_cv_header_stropts_h=no
+
+               --enable-shared
+               --without-static-libpython
+               --enable-ipv6
+               --infodir='${prefix}/share/info'
+               --mandir='${prefix}/share/man'
+               --with-computed-gotos
+               --with-dbmliborder="${dbmliborder}"
+               --with-libc=
+               --enable-loadable-sqlite-extensions
+               --without-ensurepip
+               --without-lto
+               --with-system-expat
+               --with-system-ffi
+               --with-system-libmpdec
+               --with-wheel-pkg-dir="${EPREFIX}"/usr/lib/python/ensurepip
+
+               $(use_with debug assertions)
+               $(use_enable pgo optimizations)
+               $(use_with readline readline "$(usex libedit editline 
readline)")
+               $(use_with valgrind)
+       )
+
+       # disable implicit optimization/debugging flags
+       local -x OPT=
+
+       # https://bugs.gentoo.org/700012
+       if tc-is-lto; then
+               append-cflags $(test-flags-CC -ffat-lto-objects)
+               myeconfargs+=(
+                       --with-lto
+               )
+       fi
+
+       if tc-is-cross-compiler ; then
+               build_cbuild_python
+               # Point the imminent CHOST build to the Python we just
+               # built for CBUILD.
+               export PATH="${WORKDIR}/${P}-${CBUILD}:${PATH}"
+       fi
+
+       # pass system CFLAGS & LDFLAGS as _NODIST, otherwise they'll get
+       # propagated to sysconfig for built extensions
+       local -x CFLAGS_NODIST=${CFLAGS}
+       local -x LDFLAGS_NODIST=${LDFLAGS}
+       local -x CFLAGS= LDFLAGS=
+
+       # Fix implicit declarations on cross and prefix builds. Bug #674070.
+       if use ncurses; then
+               append-cppflags -I"${ESYSROOT}"/usr/include/ncursesw
+       fi
+
+       hprefixify setup.py
+       econf "${myeconfargs[@]}"
+
+       if grep -q "#define POSIX_SEMAPHORES_NOT_ENABLED 1" pyconfig.h; then
+               eerror "configure has detected that the sem_open function is 
broken."
+               eerror "Please ensure that /dev/shm is mounted as a tmpfs with 
mode 1777."
+               die "Broken sem_open function (bug 496328)"
+       fi
+
+       # install epython.py as part of stdlib
+       echo "EPYTHON='python${PYVER}'" > Lib/epython.py || die
+}
+
+src_compile() {
+       # Ensure sed works as expected
+       # https://bugs.gentoo.org/594768
+       local -x LC_ALL=C
+       # Prevent using distutils bundled by setuptools.
+       # https://bugs.gentoo.org/823728
+       export SETUPTOOLS_USE_DISTUTILS=stdlib
+
+       # Save PYTHONDONTWRITEBYTECODE so that 'has_version' doesn't
+       # end up writing bytecode & violating sandbox.
+       # bug #831897
+       local -x _PYTHONDONTWRITEBYTECODE=${PYTHONDONTWRITEBYTECODE}
+
+       if use pgo ; then
+               # bug 660358
+               local -x COLUMNS=80
+               local -x PYTHONDONTWRITEBYTECODE=
+
+               addpredict "/usr/lib/python${PYVER}/site-packages"
+       fi
+
+       # also need to clear the flags explicitly here or they end up
+       # in _sysconfigdata*
+       emake CPPFLAGS= CFLAGS= LDFLAGS=
+
+       # Restore saved value from above.
+       local -x PYTHONDONTWRITEBYTECODE=${_PYTHONDONTWRITEBYTECODE}
+
+       # Work around bug 329499. See also bug 413751 and 457194.
+       if has_version dev-libs/libffi[pax-kernel]; then
+               pax-mark E python
+       else
+               pax-mark m python
+       fi
+}
+
+src_test() {
+       # Tests will not work when cross compiling.
+       if tc-is-cross-compiler; then
+               elog "Disabling tests due to crosscompiling."
+               return
+       fi
+
+       local test_opts=(
+               -u-network
+               -j "$(makeopts_jobs)"
+
+               # fails
+               -x test_concurrent_futures
+               -x test_gdb
+       )
+
+       if use sparc ; then
+               # bug #788022
+               test_opts+=(
+                       -x test_multiprocessing_fork
+                       -x test_multiprocessing_forkserver
+               )
+       fi
+
+       # musl-specific skips
+       use elibc_musl && test_opts+=(
+               # various musl locale deficiencies
+               -x test__locale
+               -x test_c_locale_coercion
+               -x test_locale
+               -x test_re
+
+               # known issues with find_library on musl
+               # https://bugs.python.org/issue21622
+               -x test_ctypes
+
+               # fpathconf, ttyname errno values
+               -x test_os
+       )
+
+       # workaround docutils breaking tests
+       cat > Lib/docutils.py <<-EOF || die
+               raise ImportError("Thou shalt not import!")
+       EOF
+
+       # bug 660358
+       local -x COLUMNS=80
+       local -x PYTHONDONTWRITEBYTECODE=
+       # workaround https://bugs.gentoo.org/775416
+       addwrite "/usr/lib/python${PYVER}/site-packages"
+
+       nonfatal emake -Onone test EXTRATESTOPTS="${test_opts[*]}" \
+               CPPFLAGS= CFLAGS= LDFLAGS= < /dev/tty
+       local ret=${?}
+
+       rm Lib/docutils.py || die
+
+       [[ ${ret} -eq 0 ]] || die "emake test failed"
+}
+
+src_install() {
+       local libdir=${ED}/usr/lib/python${PYVER}
+
+       emake DESTDIR="${D}" altinstall
+
+       # Fix collisions between different slots of Python.
+       rm "${ED}/usr/$(get_libdir)/libpython3.so" || die
+
+       # Cheap hack to get version with ABIFLAGS
+       local abiver=$(cd "${ED}/usr/include"; echo python*)
+       if [[ ${abiver} != python${PYVER} ]]; then
+               # Replace python3.X with a symlink to python3.Xm
+               rm "${ED}/usr/bin/python${PYVER}" || die
+               dosym "${abiver}" "/usr/bin/python${PYVER}"
+               # Create python3.X-config symlink
+               dosym "${abiver}-config" "/usr/bin/python${PYVER}-config"
+               # Create python-3.5m.pc symlink
+               dosym "python-${PYVER}.pc" 
"/usr/$(get_libdir)/pkgconfig/${abiver/${PYVER}/-${PYVER}}.pc"
+       fi
+
+       # python seems to get rebuilt in src_install (bug 569908)
+       # Work around it for now.
+       if has_version dev-libs/libffi[pax-kernel]; then
+               pax-mark E "${ED}/usr/bin/${abiver}"
+       else
+               pax-mark m "${ED}/usr/bin/${abiver}"
+       fi
+
+       rm -r "${libdir}"/ensurepip/_bundled || die
+       if ! use ensurepip; then
+               rm -r "${libdir}"/ensurepip || die
+       fi
+       if ! use sqlite; then
+               rm -r "${libdir}/"{sqlite3,test/test_sqlite*} || die
+       fi
+       if ! use tk; then
+               rm -r "${ED}/usr/bin/idle${PYVER}" || die
+               rm -r "${libdir}/"{idlelib,tkinter,test/test_tk*} || die
+       fi
+
+       ln -s ../python/EXTERNALLY-MANAGED "${libdir}/EXTERNALLY-MANAGED" || die
+
+       dodoc Misc/{ACKS,HISTORY,NEWS}
+
+       if use examples; then
+               docinto examples
+               find Tools -name __pycache__ -exec rm -fr {} + || die
+               dodoc -r Tools
+       fi
+       insinto /usr/share/gdb/auto-load/usr/$(get_libdir) #443510
+       local libname=$(
+               printf 'e:\n\t@echo $(INSTSONAME)\ninclude Makefile\n' |
+               emake --no-print-directory -s -f - 2>/dev/null
+       )
+       newins Tools/gdb/libpython.py "${libname}"-gdb.py
+
+       newconfd "${FILESDIR}/pydoc.conf" pydoc-${PYVER}
+       newinitd "${FILESDIR}/pydoc.init" pydoc-${PYVER}
+       sed \
+               -e "s:@PYDOC_PORT_VARIABLE@:PYDOC${PYVER/./_}_PORT:" \
+               -e "s:@PYDOC@:pydoc${PYVER}:" \
+               -i "${ED}/etc/conf.d/pydoc-${PYVER}" \
+               "${ED}/etc/init.d/pydoc-${PYVER}" || die "sed failed"
+
+       # python-exec wrapping support
+       local pymajor=${PYVER%.*}
+       local EPYTHON=python${PYVER}
+       local scriptdir=${D}$(python_get_scriptdir)
+       mkdir -p "${scriptdir}" || die
+       # python and pythonX
+       ln -s "../../../bin/${abiver}" "${scriptdir}/python${pymajor}" || die
+       ln -s "python${pymajor}" "${scriptdir}/python" || die
+       # python-config and pythonX-config
+       # note: we need to create a wrapper rather than symlinking it due
+       # to some random dirname(argv[0]) magic performed by python-config
+       cat > "${scriptdir}/python${pymajor}-config" <<-EOF || die
+               #!/bin/sh
+               exec "${abiver}-config" "\${@}"
+       EOF
+       chmod +x "${scriptdir}/python${pymajor}-config" || die
+       ln -s "python${pymajor}-config" "${scriptdir}/python-config" || die
+       # 2to3, pydoc
+       ln -s "../../../bin/2to3-${PYVER}" "${scriptdir}/2to3" || die
+       ln -s "../../../bin/pydoc${PYVER}" "${scriptdir}/pydoc" || die
+       # idle
+       if use tk; then
+               ln -s "../../../bin/idle${PYVER}" "${scriptdir}/idle" || die
+       fi
+}

diff --git a/dev-lang/python/python-3.11.9_p1.ebuild 
b/dev-lang/python/python-3.11.9_p1.ebuild
new file mode 100644
index 0000000..3882bdb
--- /dev/null
+++ b/dev-lang/python/python-3.11.9_p1.ebuild
@@ -0,0 +1,577 @@
+# Copyright 1999-2024 Gentoo Authors
+# Distributed under the terms of the GNU General Public License v2
+
+EAPI="8"
+WANT_LIBTOOL="none"
+
+inherit autotools check-reqs flag-o-matic multiprocessing pax-utils
+inherit prefix python-utils-r1 toolchain-funcs verify-sig
+
+MY_PV=${PV/_rc/rc}
+MY_P="Python-${MY_PV%_p*}"
+PYVER=$(ver_cut 1-2)
+PATCHSET="python-gentoo-patches-${MY_PV}"
+
+DESCRIPTION="An interpreted, interactive, object-oriented programming language"
+HOMEPAGE="
+       https://www.python.org/
+       https://github.com/python/cpython/
+"
+SRC_URI="
+       https://www.python.org/ftp/python/${PV%%_*}/${MY_P}.tar.xz
+       https://dev.gentoo.org/~mgorny/dist/python/${PATCHSET}.tar.xz
+       verify-sig? (
+               https://www.python.org/ftp/python/${PV%%_*}/${MY_P}.tar.xz.asc
+       )
+"
+S="${WORKDIR}/${MY_P}"
+
+LICENSE="PSF-2"
+SLOT="${PYVER}"
+KEYWORDS="~alpha ~amd64 ~arm ~arm64 ~hppa ~ia64 ~loong ~m68k ~mips ~ppc ~ppc64 
~riscv ~s390 ~sparc ~x86"
+IUSE="
+       bluetooth build debug +ensurepip examples gdbm libedit
+       +ncurses pgo +readline +sqlite +ssl test tk valgrind
+"
+RESTRICT="!test? ( test )"
+
+# Do not add a dependency on dev-lang/python to this ebuild.
+# If you need to apply a patch which requires python for bootstrapping, please
+# run the bootstrap code on your dev box and include the results in the
+# patchset. See bug 447752.
+
+RDEPEND="
+       app-arch/bzip2:=
+       app-arch/xz-utils:=
+       app-crypt/libb2
+       >=dev-libs/expat-2.1:=
+       dev-libs/libffi:=
+       dev-libs/mpdecimal:=
+       dev-python/gentoo-common
+       >=sys-libs/zlib-1.1.3:=
+       virtual/libcrypt:=
+       virtual/libintl
+       ensurepip? ( dev-python/ensurepip-wheels )
+       gdbm? ( sys-libs/gdbm:=[berkdb] )
+       kernel_linux? ( sys-apps/util-linux:= )
+       ncurses? ( >=sys-libs/ncurses-5.2:= )
+       readline? (
+               !libedit? ( >=sys-libs/readline-4.1:= )
+               libedit? ( dev-libs/libedit:= )
+       )
+       sqlite? ( >=dev-db/sqlite-3.3.8:3= )
+       ssl? ( >=dev-libs/openssl-1.1.1:= )
+       tk? (
+               >=dev-lang/tcl-8.0:=
+               >=dev-lang/tk-8.0:=
+               dev-tcltk/blt:=
+               dev-tcltk/tix
+       )
+"
+# bluetooth requires headers from bluez
+DEPEND="
+       ${RDEPEND}
+       bluetooth? ( net-wireless/bluez )
+       test? ( app-arch/xz-utils )
+       valgrind? ( dev-debug/valgrind )
+"
+# autoconf-archive needed to eautoreconf
+BDEPEND="
+       dev-build/autoconf-archive
+       app-alternatives/awk
+       virtual/pkgconfig
+       verify-sig? ( sec-keys/openpgp-keys-python )
+"
+RDEPEND+="
+       !build? ( app-misc/mime-types )
+"
+if [[ ${PV} != *_alpha* ]]; then
+       RDEPEND+="
+               dev-lang/python-exec[python_targets_python${PYVER/./_}(-)]
+       "
+fi
+
+VERIFY_SIG_OPENPGP_KEY_PATH=/usr/share/openpgp-keys/python.org.asc
+
+# large file tests involve a 2.5G file being copied (duplicated)
+CHECKREQS_DISK_BUILD=5500M
+
+QA_PKGCONFIG_VERSION=${PYVER}
+# false positives -- functions specific to *BSD
+QA_CONFIG_IMPL_DECL_SKIP=( chflags lchflags )
+
+pkg_pretend() {
+       use test && check-reqs_pkg_pretend
+}
+
+pkg_setup() {
+       use test && check-reqs_pkg_setup
+}
+
+src_unpack() {
+       if use verify-sig; then
+               verify-sig_verify_detached "${DISTDIR}"/${MY_P}.tar.xz{,.asc}
+       fi
+       default
+}
+
+src_prepare() {
+       # Ensure that internal copies of expat and libffi are not used.
+       rm -r Modules/expat || die
+       rm -r Modules/_ctypes/libffi* || die
+
+       local PATCHES=(
+               "${WORKDIR}/${PATCHSET}"
+               "${FILESDIR}"/${PN}-3.10.14-libressl.patch
+       )
+
+       default
+
+       # https://bugs.gentoo.org/850151
+       sed -i -e "s:@@GENTOO_LIBDIR@@:$(get_libdir):g" setup.py || die
+
+       # force the correct number of jobs
+       # https://bugs.gentoo.org/737660
+       local jobs=$(makeopts_jobs)
+       sed -i -e "s:-j0:-j${jobs}:" Makefile.pre.in || die
+       sed -i -e "/self\.parallel/s:True:${jobs}:" setup.py || die
+
+       eautoreconf
+}
+
+build_cbuild_python() {
+       # Hack to workaround get_libdir not being able to handle CBUILD, bug 
#794181
+       local cbuild_libdir=$(unset PKG_CONFIG_PATH ; $(tc-getBUILD_PKG_CONFIG) 
--keep-system-libs --libs-only-L libffi)
+
+       # pass system CFLAGS & LDFLAGS as _NODIST, otherwise they'll get
+       # propagated to sysconfig for built extensions
+       #
+       # -fno-lto to avoid bug #700012 (not like it matters for mini-CBUILD 
Python anyway)
+       local -x CFLAGS_NODIST="${BUILD_CFLAGS} -fno-lto"
+       local -x LDFLAGS_NODIST=${BUILD_LDFLAGS}
+       local -x CFLAGS= LDFLAGS=
+       local -x BUILD_CFLAGS="${CFLAGS_NODIST}"
+       local -x BUILD_LDFLAGS=${LDFLAGS_NODIST}
+
+       # We need to build our own Python on CBUILD first, and feed it in.
+       # bug #847910
+       local myeconfargs_cbuild=(
+               "${myeconfargs[@]}"
+
+               --prefix="${BROOT}"/usr
+               --libdir="${cbuild_libdir:2}"
+
+               # Avoid needing to load the right libpython.so.
+               --disable-shared
+
+               # As minimal as possible for the mini CBUILD Python
+               # we build just for cross to satisfy --with-build-python.
+               --without-lto
+               --without-readline
+               --disable-optimizations
+       )
+
+       mkdir "${WORKDIR}"/${P}-${CBUILD} || die
+       pushd "${WORKDIR}"/${P}-${CBUILD} &> /dev/null || die
+       # We disable _ctypes and _crypt for CBUILD because Python's setup.py 
can't handle locating
+       # libdir correctly for cross.
+       PYTHON_DISABLE_MODULES+=" _ctypes _crypt" \
+               ECONF_SOURCE="${S}" econf_build "${myeconfargs_cbuild[@]}"
+
+       # Avoid as many dependencies as possible for the cross build.
+       cat >> Makefile <<-EOF || die
+               MODULE_NIS_STATE=disabled
+               MODULE__DBM_STATE=disabled
+               MODULE__GDBM_STATE=disabled
+               MODULE__DBM_STATE=disabled
+               MODULE__SQLITE3_STATE=disabled
+               MODULE__HASHLIB_STATE=disabled
+               MODULE__SSL_STATE=disabled
+               MODULE__CURSES_STATE=disabled
+               MODULE__CURSES_PANEL_STATE=disabled
+               MODULE_READLINE_STATE=disabled
+               MODULE__TKINTER_STATE=disabled
+               MODULE_PYEXPAT_STATE=disabled
+               MODULE_ZLIB_STATE=disabled
+       EOF
+
+       # Unfortunately, we do have to build this immediately, and
+       # not in src_compile, because CHOST configure for Python
+       # will check the existence of the --with-build-python value
+       # immediately.
+       PYTHON_DISABLE_MODULES+=" _ctypes _crypt" emake
+       popd &> /dev/null || die
+}
+
+src_configure() {
+       # disable automagic bluetooth headers detection
+       if ! use bluetooth; then
+               local -x ac_cv_header_bluetooth_bluetooth_h=no
+       fi
+
+       append-flags -fwrapv
+       filter-flags -malign-double
+
+       # Export CXX so it ends up in /usr/lib/python3.X/config/Makefile.
+       # PKG_CONFIG needed for cross.
+       tc-export CXX PKG_CONFIG
+
+       local dbmliborder=
+       if use gdbm; then
+               dbmliborder+="${dbmliborder:+:}gdbm"
+       fi
+
+       if use pgo; then
+               local profile_task_flags=(
+                       -m test
+                       "-j$(makeopts_jobs)"
+                       --pgo-extended
+                       -u-network
+
+                       # We use a timeout because of how often we've had hang 
issues
+                       # here. It also matches the default upstream 
PROFILE_TASK.
+                       --timeout 1200
+
+                       -x test_gdb
+                       -x test_dtrace
+
+                       # All of these seem to occasionally hang for PGO 
inconsistently
+                       # They'll even hang here but be fine in src_test 
sometimes.
+                       # bug #828535 (and related: bug #788022)
+                       -x test_asyncio
+                       -x test_concurrent_futures
+                       -x test_httpservers
+                       -x test_logging
+                       -x test_multiprocessing_fork
+                       -x test_socket
+                       -x test_xmlrpc
+
+                       # Hangs (actually runs indefinitely executing itself w/ 
many cpython builds)
+                       # bug #900429
+                       -x test_tools
+               )
+
+               # musl-specific skips
+               use elibc_musl && profile_task_flags+=(
+                       # various musl locale deficiencies
+                       -x test__locale
+                       -x test_c_locale_coercion
+                       -x test_locale
+                       -x test_re
+
+                       # known issues with find_library on musl
+                       # https://bugs.python.org/issue21622
+                       -x test_ctypes
+
+                       # fpathconf, ttyname errno values
+                       -x test_os
+               )
+
+               if has_version "app-arch/rpm" ; then
+                       # Avoid sandbox failure (attempts to write to 
/var/lib/rpm)
+                       profile_task_flags+=(
+                               -x test_distutils
+                       )
+               fi
+               local -x PROFILE_TASK="${profile_task_flags[*]}"
+       fi
+
+       local myeconfargs=(
+               # glibc-2.30 removes it; since we can't cleanly force-rebuild
+               # Python on glibc upgrade, remove it proactively to give
+               # a chance for users rebuilding python before glibc
+               ac_cv_header_stropts_h=no
+
+               # libressl doesn't find hashlib (From OpenBSD)
+               ac_cv_working_openssl_hashlib=yes
+
+               --enable-shared
+               --without-static-libpython
+               --enable-ipv6
+               --infodir='${prefix}/share/info'
+               --mandir='${prefix}/share/man'
+               --with-computed-gotos
+               --with-dbmliborder="${dbmliborder}"
+               --with-libc=
+               --enable-loadable-sqlite-extensions
+               --without-ensurepip
+               --without-lto
+               --with-system-expat
+               --with-system-ffi
+               --with-system-libmpdec
+               --with-platlibdir=lib
+               --with-pkg-config=yes
+               --with-wheel-pkg-dir="${EPREFIX}"/usr/lib/python/ensurepip
+
+               $(use_with debug assertions)
+               $(use_enable pgo optimizations)
+               $(use_with readline readline "$(usex libedit editline 
readline)")
+               $(use_with valgrind)
+       )
+
+       # disable implicit optimization/debugging flags
+       local -x OPT=
+
+       # https://bugs.gentoo.org/700012
+       if tc-is-lto; then
+               append-cflags $(test-flags-CC -ffat-lto-objects)
+               myeconfargs+=(
+                       --with-lto
+               )
+       fi
+
+       if tc-is-cross-compiler ; then
+               build_cbuild_python
+               myeconfargs+=(
+                       # Point the imminent CHOST build to the Python we just
+                       # built for CBUILD.
+                       --with-build-python="${WORKDIR}"/${P}-${CBUILD}/python
+               )
+       fi
+
+       # pass system CFLAGS & LDFLAGS as _NODIST, otherwise they'll get
+       # propagated to sysconfig for built extensions
+       local -x CFLAGS_NODIST=${CFLAGS}
+       local -x LDFLAGS_NODIST=${LDFLAGS}
+       local -x CFLAGS= LDFLAGS=
+
+       # Fix implicit declarations on cross and prefix builds. Bug #674070.
+       if use ncurses; then
+               append-cppflags -I"${ESYSROOT}"/usr/include/ncursesw
+       fi
+
+       hprefixify setup.py
+       econf "${myeconfargs[@]}"
+
+       if grep -q "#define POSIX_SEMAPHORES_NOT_ENABLED 1" pyconfig.h; then
+               eerror "configure has detected that the sem_open function is 
broken."
+               eerror "Please ensure that /dev/shm is mounted as a tmpfs with 
mode 1777."
+               die "Broken sem_open function (bug 496328)"
+       fi
+
+       # force-disable modules we don't want built
+       local disable_modules=( NIS )
+       use gdbm || disable_modules+=( _GDBM _DBM )
+       use sqlite || disable_modules+=( _SQLITE3 )
+       use ssl || disable_modules+=( _HASHLIB _SSL )
+       use ncurses || disable_modules+=( _CURSES _CURSES_PANEL )
+       use readline || disable_modules+=( READLINE )
+       use tk || disable_modules+=( _TKINTER )
+
+       local mod
+       for mod in "${disable_modules[@]}"; do
+               echo "MODULE_${mod}_STATE=disabled"
+       done >> Makefile || die
+
+       # install epython.py as part of stdlib
+       echo "EPYTHON='python${PYVER}'" > Lib/epython.py || die
+}
+
+src_compile() {
+       # Ensure sed works as expected
+       # https://bugs.gentoo.org/594768
+       local -x LC_ALL=C
+       # Prevent using distutils bundled by setuptools.
+       # https://bugs.gentoo.org/823728
+       export SETUPTOOLS_USE_DISTUTILS=stdlib
+       export PYTHONSTRICTEXTENSIONBUILD=1
+
+       # Save PYTHONDONTWRITEBYTECODE so that 'has_version' doesn't
+       # end up writing bytecode & violating sandbox.
+       # bug #831897
+       local -x _PYTHONDONTWRITEBYTECODE=${PYTHONDONTWRITEBYTECODE}
+
+       if use pgo ; then
+               # bug 660358
+               local -x COLUMNS=80
+               local -x PYTHONDONTWRITEBYTECODE=
+
+               addpredict "/usr/lib/python${PYVER}/site-packages"
+       fi
+
+       # also need to clear the flags explicitly here or they end up
+       # in _sysconfigdata*
+       emake CPPFLAGS= CFLAGS= LDFLAGS=
+
+       # Restore saved value from above.
+       local -x PYTHONDONTWRITEBYTECODE=${_PYTHONDONTWRITEBYTECODE}
+
+       # Work around bug 329499. See also bug 413751 and 457194.
+       if has_version dev-libs/libffi[pax-kernel]; then
+               pax-mark E python
+       else
+               pax-mark m python
+       fi
+}
+
+src_test() {
+       # Tests will not work when cross compiling.
+       if tc-is-cross-compiler; then
+               elog "Disabling tests due to crosscompiling."
+               return
+       fi
+
+       # this just happens to skip test_support.test_freeze that is broken
+       # without bundled expat
+       # TODO: get a proper skip for it upstream
+       local -x LOGNAME=buildbot
+
+       local test_opts=(
+               -u-network
+               -j "$(makeopts_jobs)"
+
+               # fails
+               -x test_concurrent_futures
+               -x test_gdb
+       )
+
+       if use sparc ; then
+               # bug #788022
+               test_opts+=(
+                       -x test_multiprocessing_fork
+                       -x test_multiprocessing_forkserver
+               )
+       fi
+
+       # musl-specific skips
+       use elibc_musl && test_opts+=(
+               # various musl locale deficiencies
+               -x test__locale
+               -x test_c_locale_coercion
+               -x test_locale
+               -x test_re
+
+               # known issues with find_library on musl
+               # https://bugs.python.org/issue21622
+               -x test_ctypes
+
+               # fpathconf, ttyname errno values
+               -x test_os
+       )
+
+       # workaround docutils breaking tests
+       cat > Lib/docutils.py <<-EOF || die
+               raise ImportError("Thou shalt not import!")
+       EOF
+
+       # bug 660358
+       local -x COLUMNS=80
+       local -x PYTHONDONTWRITEBYTECODE=
+       # workaround https://bugs.gentoo.org/775416
+       addwrite "/usr/lib/python${PYVER}/site-packages"
+
+       nonfatal emake -Onone test EXTRATESTOPTS="${test_opts[*]}" \
+               CPPFLAGS= CFLAGS= LDFLAGS= < /dev/tty
+       local ret=${?}
+
+       rm Lib/docutils.py || die
+
+       [[ ${ret} -eq 0 ]] || die "emake test failed"
+}
+
+src_install() {
+       local libdir=${ED}/usr/lib/python${PYVER}
+
+       # -j1 hack for now for bug #843458
+       emake -j1 DESTDIR="${D}" altinstall
+
+       # Fix collisions between different slots of Python.
+       rm "${ED}/usr/$(get_libdir)/libpython3.so" || die
+
+       # Cheap hack to get version with ABIFLAGS
+       local abiver=$(cd "${ED}/usr/include"; echo python*)
+       if [[ ${abiver} != python${PYVER} ]]; then
+               # Replace python3.X with a symlink to python3.Xm
+               rm "${ED}/usr/bin/python${PYVER}" || die
+               dosym "${abiver}" "/usr/bin/python${PYVER}"
+               # Create python3.X-config symlink
+               dosym "${abiver}-config" "/usr/bin/python${PYVER}-config"
+               # Create python-3.5m.pc symlink
+               dosym "python-${PYVER}.pc" 
"/usr/$(get_libdir)/pkgconfig/${abiver/${PYVER}/-${PYVER}}.pc"
+       fi
+
+       # python seems to get rebuilt in src_install (bug 569908)
+       # Work around it for now.
+       if has_version dev-libs/libffi[pax-kernel]; then
+               pax-mark E "${ED}/usr/bin/${abiver}"
+       else
+               pax-mark m "${ED}/usr/bin/${abiver}"
+       fi
+
+       rm -r "${libdir}"/ensurepip/_bundled || die
+       if ! use ensurepip; then
+               rm -r "${libdir}"/ensurepip || die
+       fi
+       if ! use sqlite; then
+               rm -r "${libdir}/"sqlite3 || die
+       fi
+       if ! use tk; then
+               rm -r "${ED}/usr/bin/idle${PYVER}" || die
+               rm -r "${libdir}/"{idlelib,tkinter,test/test_tk*} || die
+       fi
+
+       ln -s ../python/EXTERNALLY-MANAGED "${libdir}/EXTERNALLY-MANAGED" || die
+
+       dodoc Misc/{ACKS,HISTORY,NEWS}
+
+       if use examples; then
+               docinto examples
+               find Tools -name __pycache__ -exec rm -fr {} + || die
+               dodoc -r Tools
+       fi
+       insinto /usr/share/gdb/auto-load/usr/$(get_libdir) #443510
+       local libname=$(
+               printf 'e:\n\t@echo $(INSTSONAME)\ninclude Makefile\n' |
+               emake --no-print-directory -s -f - 2>/dev/null
+       )
+       newins Tools/gdb/libpython.py "${libname}"-gdb.py
+
+       newconfd "${FILESDIR}/pydoc.conf" pydoc-${PYVER}
+       newinitd "${FILESDIR}/pydoc.init" pydoc-${PYVER}
+       sed \
+               -e "s:@PYDOC_PORT_VARIABLE@:PYDOC${PYVER/./_}_PORT:" \
+               -e "s:@PYDOC@:pydoc${PYVER}:" \
+               -i "${ED}/etc/conf.d/pydoc-${PYVER}" \
+               "${ED}/etc/init.d/pydoc-${PYVER}" || die "sed failed"
+
+       # python-exec wrapping support
+       local pymajor=${PYVER%.*}
+       local EPYTHON=python${PYVER}
+       local scriptdir=${D}$(python_get_scriptdir)
+       mkdir -p "${scriptdir}" || die
+       # python and pythonX
+       ln -s "../../../bin/${abiver}" "${scriptdir}/python${pymajor}" || die
+       ln -s "python${pymajor}" "${scriptdir}/python" || die
+       # python-config and pythonX-config
+       # note: we need to create a wrapper rather than symlinking it due
+       # to some random dirname(argv[0]) magic performed by python-config
+       cat > "${scriptdir}/python${pymajor}-config" <<-EOF || die
+               #!/bin/sh
+               exec "${abiver}-config" "\${@}"
+       EOF
+       chmod +x "${scriptdir}/python${pymajor}-config" || die
+       ln -s "python${pymajor}-config" "${scriptdir}/python-config" || die
+       # 2to3, pydoc
+       ln -s "../../../bin/2to3-${PYVER}" "${scriptdir}/2to3" || die
+       ln -s "../../../bin/pydoc${PYVER}" "${scriptdir}/pydoc" || die
+       # idle
+       if use tk; then
+               ln -s "../../../bin/idle${PYVER}" "${scriptdir}/idle" || die
+       fi
+}
+
+pkg_postinst() {
+       local v
+       for v in ${REPLACING_VERSIONS}; do
+               if ver_test "${v}" -lt 3.11.0_beta4-r2; then
+                       ewarn "Python 3.11.0b4 has changed its module ABI.  The 
.pyc files"
+                       ewarn "installed previously are no longer valid and 
will be regenerated"
+                       ewarn "(or ignored) on the next import.  This may cause 
sandbox failures"
+                       ewarn "when installing some packages and checksum 
mismatches when removing"
+                       ewarn "old versions.  To actively prevent this, rebuild 
all packages"
+                       ewarn "installing Python 3.11 modules, e.g. using:"
+                       ewarn
+                       ewarn "  emerge -1v /usr/lib/python3.11/site-packages"
+               fi
+       done
+}

diff --git a/dev-lang/python/python-3.12.4_p3.ebuild 
b/dev-lang/python/python-3.12.4_p3.ebuild
new file mode 100644
index 0000000..1f5ded0
--- /dev/null
+++ b/dev-lang/python/python-3.12.4_p3.ebuild
@@ -0,0 +1,562 @@
+# Copyright 1999-2024 Gentoo Authors
+# Distributed under the terms of the GNU General Public License v2
+
+EAPI="8"
+WANT_LIBTOOL="none"
+
+inherit autotools check-reqs flag-o-matic multiprocessing pax-utils
+inherit python-utils-r1 toolchain-funcs verify-sig
+
+MY_PV=${PV/_rc/rc}
+MY_P="Python-${MY_PV%_p*}"
+PYVER=$(ver_cut 1-2)
+PATCHSET="python-gentoo-patches-${MY_PV}"
+
+DESCRIPTION="An interpreted, interactive, object-oriented programming language"
+HOMEPAGE="
+       https://www.python.org/
+       https://github.com/python/cpython/
+"
+SRC_URI="
+       https://www.python.org/ftp/python/${PV%%_*}/${MY_P}.tar.xz
+       https://dev.gentoo.org/~mgorny/dist/python/${PATCHSET}.tar.xz
+       verify-sig? (
+               https://www.python.org/ftp/python/${PV%%_*}/${MY_P}.tar.xz.asc
+       )
+"
+S="${WORKDIR}/${MY_P}"
+
+LICENSE="PSF-2"
+SLOT="${PYVER}"
+KEYWORDS="~alpha ~amd64 ~arm ~arm64 ~hppa ~ia64 ~loong ~m68k ~mips ~ppc ~ppc64 
~riscv ~s390 ~sparc ~x86"
+IUSE="
+       bluetooth build debug +ensurepip examples gdbm libedit
+       +ncurses pgo +readline +sqlite +ssl test tk valgrind
+"
+RESTRICT="!test? ( test )"
+
+# Do not add a dependency on dev-lang/python to this ebuild.
+# If you need to apply a patch which requires python for bootstrapping, please
+# run the bootstrap code on your dev box and include the results in the
+# patchset. See bug 447752.
+
+RDEPEND="
+       app-arch/bzip2:=
+       app-arch/xz-utils:=
+       app-crypt/libb2
+       >=dev-libs/expat-2.1:=
+       dev-libs/libffi:=
+       dev-libs/mpdecimal:=
+       dev-python/gentoo-common
+       >=sys-libs/zlib-1.1.3:=
+       virtual/libcrypt:=
+       virtual/libintl
+       ensurepip? ( dev-python/ensurepip-pip )
+       gdbm? ( sys-libs/gdbm:=[berkdb] )
+       kernel_linux? ( sys-apps/util-linux:= )
+       ncurses? ( >=sys-libs/ncurses-5.2:= )
+       readline? (
+               !libedit? ( >=sys-libs/readline-4.1:= )
+               libedit? ( dev-libs/libedit:= )
+       )
+       sqlite? ( >=dev-db/sqlite-3.3.8:3= )
+       ssl? ( >=dev-libs/openssl-1.1.1:= )
+       tk? (
+               >=dev-lang/tcl-8.0:=
+               >=dev-lang/tk-8.0:=
+               dev-tcltk/blt:=
+               dev-tcltk/tix
+       )
+"
+# bluetooth requires headers from bluez
+DEPEND="
+       ${RDEPEND}
+       bluetooth? ( net-wireless/bluez )
+       test? (
+               app-arch/xz-utils
+               dev-python/ensurepip-pip
+               dev-python/ensurepip-setuptools
+               dev-python/ensurepip-wheel
+       )
+       valgrind? ( dev-debug/valgrind )
+"
+# autoconf-archive needed to eautoreconf
+BDEPEND="
+       dev-build/autoconf-archive
+       app-alternatives/awk
+       virtual/pkgconfig
+       verify-sig? ( >=sec-keys/openpgp-keys-python-20221025 )
+"
+RDEPEND+="
+       !build? ( app-misc/mime-types )
+"
+if [[ ${PV} != *_alpha* ]]; then
+       RDEPEND+="
+               dev-lang/python-exec[python_targets_python${PYVER/./_}(-)]
+       "
+fi
+
+VERIFY_SIG_OPENPGP_KEY_PATH=/usr/share/openpgp-keys/python.org.asc
+
+# large file tests involve a 2.5G file being copied (duplicated)
+CHECKREQS_DISK_BUILD=5500M
+
+QA_PKGCONFIG_VERSION=${PYVER}
+# false positives -- functions specific to *BSD
+QA_CONFIG_IMPL_DECL_SKIP=( chflags lchflags )
+
+pkg_pretend() {
+       use test && check-reqs_pkg_pretend
+}
+
+pkg_setup() {
+       use test && check-reqs_pkg_setup
+}
+
+src_unpack() {
+       if use verify-sig; then
+               verify-sig_verify_detached "${DISTDIR}"/${MY_P}.tar.xz{,.asc}
+       fi
+       default
+}
+
+src_prepare() {
+       # Ensure that internal copies of expat and libffi are not used.
+       # TODO: Makefile has annoying deps on expat headers
+       #rm -r Modules/expat || die
+
+       local PATCHES=(
+               "${WORKDIR}/${PATCHSET}"
+               "${FILESDIR}"/${PN}-3.12.4-libressl.patch
+       )
+
+       default
+
+       # force the correct number of jobs
+       # https://bugs.gentoo.org/737660
+       sed -i -e "s:-j0:-j$(makeopts_jobs):" Makefile.pre.in || die
+
+       # breaks tests when using --with-wheel-pkg-dir
+       rm -r Lib/test/wheeldata || die
+
+       eautoreconf
+}
+
+build_cbuild_python() {
+       # Hack to workaround get_libdir not being able to handle CBUILD, bug 
#794181
+       local cbuild_libdir=$(unset PKG_CONFIG_PATH ; $(tc-getBUILD_PKG_CONFIG) 
--keep-system-libs --libs-only-L libffi)
+
+       # pass system CFLAGS & LDFLAGS as _NODIST, otherwise they'll get
+       # propagated to sysconfig for built extensions
+       #
+       # -fno-lto to avoid bug #700012 (not like it matters for mini-CBUILD 
Python anyway)
+       local -x CFLAGS_NODIST="${BUILD_CFLAGS} -fno-lto"
+       local -x LDFLAGS_NODIST=${BUILD_LDFLAGS}
+       local -x CFLAGS= LDFLAGS=
+       local -x BUILD_CFLAGS="${CFLAGS_NODIST}"
+       local -x BUILD_LDFLAGS=${LDFLAGS_NODIST}
+
+       # We need to build our own Python on CBUILD first, and feed it in.
+       # bug #847910
+       local myeconfargs_cbuild=(
+               "${myeconfargs[@]}"
+
+               --prefix="${BROOT}"/usr
+               --libdir="${cbuild_libdir:2}"
+
+               # Avoid needing to load the right libpython.so.
+               --disable-shared
+
+               # As minimal as possible for the mini CBUILD Python
+               # we build just for cross to satisfy --with-build-python.
+               --without-lto
+               --without-readline
+               --disable-optimizations
+       )
+
+       mkdir "${WORKDIR}"/${P}-${CBUILD} || die
+       pushd "${WORKDIR}"/${P}-${CBUILD} &> /dev/null || die
+
+       # Avoid as many dependencies as possible for the cross build.
+       mkdir Modules || die
+       cat > Modules/Setup.local <<-EOF || die
+               *disabled*
+               nis
+               _dbm _gdbm
+               _sqlite3
+               _hashlib _ssl
+               _curses _curses_panel
+               readline
+               _tkinter
+               pyexpat
+               zlib
+               # We disabled these for CBUILD because Python's setup.py can't 
handle locating
+               # libdir correctly for cross. This should be rechecked for the 
pure Makefile approach,
+               # and uncommented if needed.
+               #_ctypes _crypt
+       EOF
+
+       ECONF_SOURCE="${S}" econf_build "${myeconfargs_cbuild[@]}"
+
+       # Unfortunately, we do have to build this immediately, and
+       # not in src_compile, because CHOST configure for Python
+       # will check the existence of the --with-build-python value
+       # immediately.
+       emake
+       popd &> /dev/null || die
+}
+
+src_configure() {
+       # disable automagic bluetooth headers detection
+       if ! use bluetooth; then
+               local -x ac_cv_header_bluetooth_bluetooth_h=no
+       fi
+
+       append-flags -fwrapv
+       filter-flags -malign-double
+
+       # Export CXX so it ends up in /usr/lib/python3.X/config/Makefile.
+       # PKG_CONFIG needed for cross.
+       tc-export CXX PKG_CONFIG
+
+       local dbmliborder=
+       if use gdbm; then
+               dbmliborder+="${dbmliborder:+:}gdbm"
+       fi
+
+       if use pgo; then
+               local profile_task_flags=(
+                       -m test
+                       "-j$(makeopts_jobs)"
+                       --pgo-extended
+                       -u-network
+
+                       # We use a timeout because of how often we've had hang 
issues
+                       # here. It also matches the default upstream 
PROFILE_TASK.
+                       --timeout 1200
+
+                       -x test_gdb
+                       -x test_dtrace
+
+                       # All of these seem to occasionally hang for PGO 
inconsistently
+                       # They'll even hang here but be fine in src_test 
sometimes.
+                       # bug #828535 (and related: bug #788022)
+                       -x test_asyncio
+                       -x test_concurrent_futures
+                       -x test_httpservers
+                       -x test_logging
+                       -x test_multiprocessing_fork
+                       -x test_socket
+                       -x test_xmlrpc
+
+                       # Hangs (actually runs indefinitely executing itself w/ 
many cpython builds)
+                       # bug #900429
+                       -x test_tools
+               )
+
+               # musl-specific skips
+               use elibc_musl && profile_task_flags+=(
+                       # various musl locale deficiencies
+                       -x test__locale
+                       -x test_c_locale_coercion
+                       -x test_locale
+                       -x test_re
+
+                       # known issues with find_library on musl
+                       # https://bugs.python.org/issue21622
+                       -x test_ctypes
+
+                       # fpathconf, ttyname errno values
+                       -x test_os
+               )
+
+               if has_version "app-arch/rpm" ; then
+                       # Avoid sandbox failure (attempts to write to 
/var/lib/rpm)
+                       profile_task_flags+=(
+                               -x test_distutils
+                       )
+               fi
+               local -x PROFILE_TASK="${profile_task_flags[*]}"
+       fi
+
+       local myeconfargs=(
+               # glibc-2.30 removes it; since we can't cleanly force-rebuild
+               # Python on glibc upgrade, remove it proactively to give
+               # a chance for users rebuilding python before glibc
+               ac_cv_header_stropts_h=no
+
+               # libressl doesn't find hashlib (From OpenBSD)
+               ac_cv_working_openssl_hashlib=yes
+
+               --enable-shared
+               --without-static-libpython
+               --enable-ipv6
+               --infodir='${prefix}/share/info'
+               --mandir='${prefix}/share/man'
+               --with-computed-gotos
+               --with-dbmliborder="${dbmliborder}"
+               --with-libc=
+               --enable-loadable-sqlite-extensions
+               --without-ensurepip
+               --without-lto
+               --with-system-expat
+               --with-system-libmpdec
+               --with-platlibdir=lib
+               --with-pkg-config=yes
+               --with-wheel-pkg-dir="${EPREFIX}"/usr/lib/python/ensurepip
+
+               $(use_with debug assertions)
+               $(use_enable pgo optimizations)
+               $(use_with readline readline "$(usex libedit editline 
readline)")
+               $(use_with valgrind)
+       )
+
+       # https://bugs.gentoo.org/700012
+       if tc-is-lto; then
+               append-cflags $(test-flags-CC -ffat-lto-objects)
+               myeconfargs+=(
+                       --with-lto
+               )
+       fi
+
+       # Force-disable modules we don't want built.
+       # See Modules/Setup for docs on how this works. Setup.local contains 
our local deviations.
+       cat > Modules/Setup.local <<-EOF || die
+               *disabled*
+               nis
+               $(usev !gdbm '_gdbm _dbm')
+               $(usev !sqlite '_sqlite3')
+               $(usev !ssl '_hashlib _ssl')
+               $(usev !ncurses '_curses _curses_panel')
+               $(usev !readline 'readline')
+               $(usev !tk '_tkinter')
+       EOF
+
+       # disable implicit optimization/debugging flags
+       local -x OPT=
+
+       if tc-is-cross-compiler ; then
+               build_cbuild_python
+               myeconfargs+=(
+                       # Point the imminent CHOST build to the Python we just
+                       # built for CBUILD.
+                       --with-build-python="${WORKDIR}"/${P}-${CBUILD}/python
+               )
+       fi
+
+       # pass system CFLAGS & LDFLAGS as _NODIST, otherwise they'll get
+       # propagated to sysconfig for built extensions
+       local -x CFLAGS_NODIST=${CFLAGS}
+       local -x LDFLAGS_NODIST=${LDFLAGS}
+       local -x CFLAGS= LDFLAGS=
+
+       # Fix implicit declarations on cross and prefix builds. Bug #674070.
+       if use ncurses; then
+               append-cppflags -I"${ESYSROOT}"/usr/include/ncursesw
+       fi
+
+       econf "${myeconfargs[@]}"
+
+       if grep -q "#define POSIX_SEMAPHORES_NOT_ENABLED 1" pyconfig.h; then
+               eerror "configure has detected that the sem_open function is 
broken."
+               eerror "Please ensure that /dev/shm is mounted as a tmpfs with 
mode 1777."
+               die "Broken sem_open function (bug 496328)"
+       fi
+
+       # install epython.py as part of stdlib
+       echo "EPYTHON='python${PYVER}'" > Lib/epython.py || die
+}
+
+src_compile() {
+       # Ensure sed works as expected
+       # https://bugs.gentoo.org/594768
+       local -x LC_ALL=C
+       export PYTHONSTRICTEXTENSIONBUILD=1
+
+       # Save PYTHONDONTWRITEBYTECODE so that 'has_version' doesn't
+       # end up writing bytecode & violating sandbox.
+       # bug #831897
+       local -x _PYTHONDONTWRITEBYTECODE=${PYTHONDONTWRITEBYTECODE}
+
+       if use pgo ; then
+               # bug 660358
+               local -x COLUMNS=80
+               local -x PYTHONDONTWRITEBYTECODE=
+
+               addpredict "/usr/lib/python${PYVER}/site-packages"
+       fi
+
+       # also need to clear the flags explicitly here or they end up
+       # in _sysconfigdata*
+       emake CPPFLAGS= CFLAGS= LDFLAGS=
+
+       # Restore saved value from above.
+       local -x PYTHONDONTWRITEBYTECODE=${_PYTHONDONTWRITEBYTECODE}
+
+       # Work around bug 329499. See also bug 413751 and 457194.
+       if has_version dev-libs/libffi[pax-kernel]; then
+               pax-mark E python
+       else
+               pax-mark m python
+       fi
+}
+
+src_test() {
+       # Tests will not work when cross compiling.
+       if tc-is-cross-compiler; then
+               elog "Disabling tests due to crosscompiling."
+               return
+       fi
+
+       # this just happens to skip test_support.test_freeze that is broken
+       # without bundled expat
+       # TODO: get a proper skip for it upstream
+       local -x LOGNAME=buildbot
+
+       local test_opts=(
+               -u-network
+               -j "$(makeopts_jobs)"
+
+               # fails
+               -x test_concurrent_futures
+               -x test_gdb
+       )
+
+       if use sparc ; then
+               # bug #788022
+               test_opts+=(
+                       -x test_multiprocessing_fork
+                       -x test_multiprocessing_forkserver
+               )
+       fi
+
+       # musl-specific skips
+       use elibc_musl && test_opts+=(
+               # various musl locale deficiencies
+               -x test__locale
+               -x test_c_locale_coercion
+               -x test_locale
+               -x test_re
+
+               # known issues with find_library on musl
+               # https://bugs.python.org/issue21622
+               -x test_ctypes
+
+               # fpathconf, ttyname errno values
+               -x test_os
+       )
+
+       # workaround docutils breaking tests
+       cat > Lib/docutils.py <<-EOF || die
+               raise ImportError("Thou shalt not import!")
+       EOF
+
+       # bug 660358
+       local -x COLUMNS=80
+       local -x PYTHONDONTWRITEBYTECODE=
+       # workaround https://bugs.gentoo.org/775416
+       addwrite "/usr/lib/python${PYVER}/site-packages"
+
+       nonfatal emake -Onone test EXTRATESTOPTS="${test_opts[*]}" \
+               CPPFLAGS= CFLAGS= LDFLAGS= < /dev/tty
+       local ret=${?}
+
+       rm Lib/docutils.py || die
+
+       [[ ${ret} -eq 0 ]] || die "emake test failed"
+}
+
+src_install() {
+       local libdir=${ED}/usr/lib/python${PYVER}
+
+       # the Makefile rules are broken
+       # https://github.com/python/cpython/issues/100221
+       mkdir -p "${libdir}"/lib-dynload || die
+
+       # -j1 hack for now for bug #843458
+       emake -j1 DESTDIR="${D}" altinstall
+
+       # Fix collisions between different slots of Python.
+       rm "${ED}/usr/$(get_libdir)/libpython3.so" || die
+
+       # Cheap hack to get version with ABIFLAGS
+       local abiver=$(cd "${ED}/usr/include"; echo python*)
+       if [[ ${abiver} != python${PYVER} ]]; then
+               # Replace python3.X with a symlink to python3.Xm
+               rm "${ED}/usr/bin/python${PYVER}" || die
+               dosym "${abiver}" "/usr/bin/python${PYVER}"
+               # Create python3.X-config symlink
+               dosym "${abiver}-config" "/usr/bin/python${PYVER}-config"
+               # Create python-3.5m.pc symlink
+               dosym "python-${PYVER}.pc" 
"/usr/$(get_libdir)/pkgconfig/${abiver/${PYVER}/-${PYVER}}.pc"
+       fi
+
+       # python seems to get rebuilt in src_install (bug 569908)
+       # Work around it for now.
+       if has_version dev-libs/libffi[pax-kernel]; then
+               pax-mark E "${ED}/usr/bin/${abiver}"
+       else
+               pax-mark m "${ED}/usr/bin/${abiver}"
+       fi
+
+       rm -r "${libdir}"/ensurepip/_bundled || die
+       if ! use ensurepip; then
+               rm -r "${libdir}"/ensurepip || die
+       fi
+       if ! use sqlite; then
+               rm -r "${libdir}/"sqlite3 || die
+       fi
+       if ! use tk; then
+               rm -r "${ED}/usr/bin/idle${PYVER}" || die
+               rm -r "${libdir}/"{idlelib,tkinter,test/test_tk*} || die
+       fi
+
+       ln -s ../python/EXTERNALLY-MANAGED "${libdir}/EXTERNALLY-MANAGED" || die
+
+       dodoc Misc/{ACKS,HISTORY,NEWS}
+
+       if use examples; then
+               docinto examples
+               find Tools -name __pycache__ -exec rm -fr {} + || die
+               dodoc -r Tools
+       fi
+       insinto /usr/share/gdb/auto-load/usr/$(get_libdir) #443510
+       local libname=$(
+               printf 'e:\n\t@echo $(INSTSONAME)\ninclude Makefile\n' |
+               emake --no-print-directory -s -f - 2>/dev/null
+       )
+       newins Tools/gdb/libpython.py "${libname}"-gdb.py
+
+       newconfd "${FILESDIR}/pydoc.conf" pydoc-${PYVER}
+       newinitd "${FILESDIR}/pydoc.init" pydoc-${PYVER}
+       sed \
+               -e "s:@PYDOC_PORT_VARIABLE@:PYDOC${PYVER/./_}_PORT:" \
+               -e "s:@PYDOC@:pydoc${PYVER}:" \
+               -i "${ED}/etc/conf.d/pydoc-${PYVER}" \
+               "${ED}/etc/init.d/pydoc-${PYVER}" || die "sed failed"
+
+       # python-exec wrapping support
+       local pymajor=${PYVER%.*}
+       local EPYTHON=python${PYVER}
+       local scriptdir=${D}$(python_get_scriptdir)
+       mkdir -p "${scriptdir}" || die
+       # python and pythonX
+       ln -s "../../../bin/${abiver}" "${scriptdir}/python${pymajor}" || die
+       ln -s "python${pymajor}" "${scriptdir}/python" || die
+       # python-config and pythonX-config
+       # note: we need to create a wrapper rather than symlinking it due
+       # to some random dirname(argv[0]) magic performed by python-config
+       cat > "${scriptdir}/python${pymajor}-config" <<-EOF || die
+               #!/bin/sh
+               exec "${abiver}-config" "\${@}"
+       EOF
+       chmod +x "${scriptdir}/python${pymajor}-config" || die
+       ln -s "python${pymajor}-config" "${scriptdir}/python-config" || die
+       # 2to3, pydoc
+       ln -s "../../../bin/2to3-${PYVER}" "${scriptdir}/2to3" || die
+       ln -s "../../../bin/pydoc${PYVER}" "${scriptdir}/pydoc" || die
+       # idle
+       if use tk; then
+               ln -s "../../../bin/idle${PYVER}" "${scriptdir}/idle" || die
+       fi
+}

diff --git a/dev-lang/python/python-3.9.19_p4.ebuild 
b/dev-lang/python/python-3.9.19_p4.ebuild
new file mode 100644
index 0000000..879c21f
--- /dev/null
+++ b/dev-lang/python/python-3.9.19_p4.ebuild
@@ -0,0 +1,496 @@
+# Copyright 1999-2024 Gentoo Authors
+# Distributed under the terms of the GNU General Public License v2
+
+EAPI="8"
+WANT_LIBTOOL="none"
+
+inherit autotools check-reqs flag-o-matic multiprocessing pax-utils
+inherit prefix python-utils-r1 toolchain-funcs verify-sig
+
+MY_PV=${PV/_rc/rc}
+MY_P="Python-${MY_PV%_p*}"
+PYVER=$(ver_cut 1-2)
+PATCHSET="python-gentoo-patches-${MY_PV}"
+
+DESCRIPTION="An interpreted, interactive, object-oriented programming language"
+HOMEPAGE="
+       https://www.python.org/
+       https://github.com/python/cpython/
+"
+SRC_URI="
+       https://www.python.org/ftp/python/${PV%%_*}/${MY_P}.tar.xz
+       https://dev.gentoo.org/~mgorny/dist/python/${PATCHSET}.tar.xz
+       verify-sig? (
+               https://www.python.org/ftp/python/${PV%%_*}/${MY_P}.tar.xz.asc
+       )
+"
+S="${WORKDIR}/${MY_P}"
+
+LICENSE="PSF-2"
+SLOT="${PYVER}"
+KEYWORDS="~alpha ~amd64 ~arm ~arm64 ~hppa ~ia64 ~loong ~m68k ~mips ~ppc ~ppc64 
~riscv ~s390 ~sparc ~x86"
+IUSE="
+       bluetooth build debug +ensurepip examples gdbm +ncurses pgo
+       +readline +sqlite +ssl test tk valgrind
+"
+RESTRICT="!test? ( test )"
+
+# Do not add a dependency on dev-lang/python to this ebuild.
+# If you need to apply a patch which requires python for bootstrapping, please
+# run the bootstrap code on your dev box and include the results in the
+# patchset. See bug 447752.
+
+RDEPEND="
+       app-arch/bzip2:=
+       app-arch/xz-utils:=
+       >=dev-libs/expat-2.1:=
+       dev-libs/libffi:=
+       dev-libs/mpdecimal:=
+       dev-python/gentoo-common
+       >=sys-libs/zlib-1.1.3:=
+       virtual/libcrypt:=
+       virtual/libintl
+       ensurepip? ( dev-python/ensurepip-wheels )
+       gdbm? ( sys-libs/gdbm:=[berkdb] )
+       kernel_linux? ( sys-apps/util-linux:= )
+       ncurses? ( >=sys-libs/ncurses-5.2:= )
+       readline? ( >=sys-libs/readline-4.1:= )
+       sqlite? ( >=dev-db/sqlite-3.3.8:3= )
+       ssl? ( >=dev-libs/openssl-1.1.1:= )
+       tk? (
+               >=dev-lang/tcl-8.0:=
+               >=dev-lang/tk-8.0:=
+               dev-tcltk/blt:=
+               dev-tcltk/tix
+       )
+"
+# bluetooth requires headers from bluez
+DEPEND="
+       ${RDEPEND}
+       bluetooth? ( net-wireless/bluez )
+       test? ( app-arch/xz-utils )
+       valgrind? ( dev-debug/valgrind )
+"
+# autoconf-archive needed to eautoreconf
+BDEPEND="
+       dev-build/autoconf-archive
+       app-alternatives/awk
+       virtual/pkgconfig
+       verify-sig? ( sec-keys/openpgp-keys-python )
+"
+RDEPEND+="
+       !build? ( app-misc/mime-types )
+"
+
+VERIFY_SIG_OPENPGP_KEY_PATH=/usr/share/openpgp-keys/python.org.asc
+
+# large file tests involve a 2.5G file being copied (duplicated)
+CHECKREQS_DISK_BUILD=5500M
+
+QA_PKGCONFIG_VERSION=${PYVER}
+# false positives -- functions specific to *BSD
+QA_CONFIG_IMPL_DECL_SKIP=( chflags lchflags )
+
+pkg_pretend() {
+       use test && check-reqs_pkg_pretend
+}
+
+pkg_setup() {
+       use test && check-reqs_pkg_setup
+}
+
+src_unpack() {
+       if use verify-sig; then
+               verify-sig_verify_detached "${DISTDIR}"/${MY_P}.tar.xz{,.asc}
+       fi
+       default
+}
+
+src_prepare() {
+       # Ensure that internal copies of expat and libffi are not used.
+       rm -r Modules/expat || die
+       rm -r Modules/_ctypes/libffi* || die
+
+       # Causes runtime issues with libressl
+       rm 
"${WORKDIR}/${PATCHSET}"/0013-bpo-43998-Default-to-TLS-1.2-and-increase-cipher-sui.patch
 || die
+
+       local PATCHES=(
+               "${WORKDIR}/${PATCHSET}"
+               "${FILESDIR}"/${PN}-3.9.19-libressl.patch
+       )
+
+       default
+
+       # https://bugs.gentoo.org/850151
+       sed -i -e "s:@@GENTOO_LIBDIR@@:$(get_libdir):g" setup.py || die
+
+       # force the correct number of jobs
+       # https://bugs.gentoo.org/737660
+       local jobs=$(makeopts_jobs)
+       sed -i -e "s:-j0:-j${jobs}:" Makefile.pre.in || die
+       sed -i -e "/self\.parallel/s:True:${jobs}:" setup.py || die
+
+       eautoreconf
+}
+
+src_configure() {
+       # disable automagic bluetooth headers detection
+       if ! use bluetooth; then
+               local -x ac_cv_header_bluetooth_bluetooth_h=no
+       fi
+       local disable
+       use gdbm      || disable+=" gdbm"
+       use ncurses   || disable+=" _curses _curses_panel"
+       use readline  || disable+=" readline"
+       use sqlite    || disable+=" _sqlite3"
+       use ssl       || export PYTHON_DISABLE_SSL="1"
+       use tk        || disable+=" _tkinter"
+       export PYTHON_DISABLE_MODULES="${disable}"
+
+       if [[ -n "${PYTHON_DISABLE_MODULES}" ]]; then
+               einfo "Disabled modules: ${PYTHON_DISABLE_MODULES}"
+       fi
+
+       append-flags -fwrapv
+       filter-flags -malign-double
+
+       # Export CXX so it ends up in /usr/lib/python3.X/config/Makefile.
+       # PKG_CONFIG needed for cross.
+       tc-export CXX PKG_CONFIG
+
+       local dbmliborder=
+       if use gdbm; then
+               dbmliborder+="${dbmliborder:+:}gdbm"
+       fi
+
+       if use pgo; then
+               local profile_task_flags=(
+                       -m test
+                       "-j$(makeopts_jobs)"
+                       --pgo-extended
+                       -x test_gdb
+                       -x test_dtrace
+                       -u-network
+
+                       # All of these seem to occasionally hang for PGO 
inconsistently
+                       # They'll even hang here but be fine in src_test 
sometimes.
+                       # bug #828535 (and related: bug #788022)
+                       -x test_asyncio
+                       -x test_concurrent_futures
+                       -x test_httpservers
+                       -x test_logging
+                       -x test_multiprocessing_fork
+                       -x test_socket
+                       -x test_xmlrpc
+
+                       # Hangs (actually runs indefinitely executing itself w/ 
many cpython builds)
+                       # bug #900429
+                       -x test_tools
+               )
+
+               if has_version "app-arch/rpm" ; then
+                       # Avoid sandbox failure (attempts to write to 
/var/lib/rpm)
+                       profile_task_flags+=(
+                               -x test_distutils
+                       )
+               fi
+               local -x PROFILE_TASK="${profile_task_flags[*]}"
+       fi
+
+       local myeconfargs=(
+               # glibc-2.30 removes it; since we can't cleanly force-rebuild
+               # Python on glibc upgrade, remove it proactively to give
+               # a chance for users rebuilding python before glibc
+               ac_cv_header_stropts_h=no
+
+               --enable-shared
+               --enable-ipv6
+               --infodir='${prefix}/share/info'
+               --mandir='${prefix}/share/man'
+               --with-computed-gotos
+               --with-dbmliborder="${dbmliborder}"
+               --with-libc=
+               --enable-loadable-sqlite-extensions
+               --without-ensurepip
+               --without-lto
+               --with-system-expat
+               --with-system-ffi
+               --with-system-libmpdec
+               --with-wheel-pkg-dir="${EPREFIX}"/usr/lib/python/ensurepip
+
+               $(use_with debug assertions)
+               $(use_enable pgo optimizations)
+               $(use_with valgrind)
+       )
+
+       # disable implicit optimization/debugging flags
+       local -x OPT=
+
+       # https://bugs.gentoo.org/700012
+       if tc-is-lto; then
+               append-cflags $(test-flags-CC -ffat-lto-objects)
+               myeconfargs+=(
+                       --with-lto
+               )
+       fi
+
+       if tc-is-cross-compiler ; then
+               # Hack to workaround get_libdir not being able to handle 
CBUILD, bug #794181
+               local cbuild_libdir=$(unset PKG_CONFIG_PATH ; 
$(tc-getBUILD_PKG_CONFIG) --keep-system-libs --libs-only-L libffi)
+
+               # pass system CFLAGS & LDFLAGS as _NODIST, otherwise they'll get
+               # propagated to sysconfig for built extensions
+               #
+               # -fno-lto to avoid bug #700012 (not like it matters for 
mini-CBUILD Python anyway)
+               local -x CFLAGS_NODIST="${BUILD_CFLAGS} -fno-lto"
+               local -x LDFLAGS_NODIST=${BUILD_LDFLAGS}
+               local -x CFLAGS= LDFLAGS=
+               local -x BUILD_CFLAGS="${CFLAGS_NODIST}"
+               local -x BUILD_LDFLAGS=${LDFLAGS_NODIST}
+
+               # We need to build our own Python on CBUILD first, and feed it 
in.
+               # bug #847910 and bug #864911.
+               local myeconfargs_cbuild=(
+                       "${myeconfargs[@]}"
+
+                       --libdir="${cbuild_libdir:2}"
+
+                       # Avoid needing to load the right libpython.so.
+                       --disable-shared
+
+                       # As minimal as possible for the mini CBUILD Python
+                       # we build just for cross.
+                       --without-lto
+                       --disable-optimizations
+               )
+
+               # Point the imminent CHOST build to the Python we just
+               # built for CBUILD.
+               export PATH="${WORKDIR}/${P}-${CBUILD}:${PATH}"
+
+               mkdir "${WORKDIR}"/${P}-${CBUILD} || die
+               pushd "${WORKDIR}"/${P}-${CBUILD} &> /dev/null || die
+               # We disable _ctypes and _crypt for CBUILD because Python's 
setup.py can't handle locating
+               # libdir correctly for cross.
+               PYTHON_DISABLE_MODULES="${PYTHON_DISABLE_MODULES} _ctypes 
_crypt" \
+                       ECONF_SOURCE="${S}" econf_build 
"${myeconfargs_cbuild[@]}"
+
+               # Avoid as many dependencies as possible for the cross build.
+               cat >> Makefile <<-EOF || die
+                       MODULE_NIS=disabled
+                       MODULE__DBM=disabled
+                       MODULE__GDBM=disabled
+                       MODULE__DBM=disabled
+                       MODULE__SQLITE3=disabled
+                       MODULE__HASHLIB=disabled
+                       MODULE__SSL=disabled
+                       MODULE__CURSES=disabled
+                       MODULE__CURSES_PANEL=disabled
+                       MODULE_READLINE=disabled
+                       MODULE__TKINTER=disabled
+                       MODULE_PYEXPAT=disabled
+                       MODULE_ZLIB=disabled
+               EOF
+
+               # Unfortunately, we do have to build this immediately, and
+               # not in src_compile, because CHOST configure for Python
+               # will check the existence of the Python it was pointed to
+               # immediately.
+               PYTHON_DISABLE_MODULES="${PYTHON_DISABLE_MODULES} _ctypes 
_crypt" emake
+               popd &> /dev/null || die
+       fi
+
+       # pass system CFLAGS & LDFLAGS as _NODIST, otherwise they'll get
+       # propagated to sysconfig for built extensions
+       local -x CFLAGS_NODIST=${CFLAGS}
+       local -x LDFLAGS_NODIST=${LDFLAGS}
+       local -x CFLAGS= LDFLAGS=
+
+       # Fix implicit declarations on cross and prefix builds. Bug #674070.
+       if use ncurses; then
+               append-cppflags -I"${ESYSROOT}"/usr/include/ncursesw
+       fi
+
+       hprefixify setup.py
+       econf "${myeconfargs[@]}"
+
+       if grep -q "#define POSIX_SEMAPHORES_NOT_ENABLED 1" pyconfig.h; then
+               eerror "configure has detected that the sem_open function is 
broken."
+               eerror "Please ensure that /dev/shm is mounted as a tmpfs with 
mode 1777."
+               die "Broken sem_open function (bug 496328)"
+       fi
+
+       # install epython.py as part of stdlib
+       echo "EPYTHON='python${PYVER}'" > Lib/epython.py || die
+}
+
+src_compile() {
+       # Ensure sed works as expected
+       # https://bugs.gentoo.org/594768
+       local -x LC_ALL=C
+       # Prevent using distutils bundled by setuptools.
+       # https://bugs.gentoo.org/823728
+       export SETUPTOOLS_USE_DISTUTILS=stdlib
+
+       # Save PYTHONDONTWRITEBYTECODE so that 'has_version' doesn't
+       # end up writing bytecode & violating sandbox.
+       # bug #831897
+       local -x _PYTHONDONTWRITEBYTECODE=${PYTHONDONTWRITEBYTECODE}
+
+       if use pgo ; then
+               # bug 660358
+               local -x COLUMNS=80
+               local -x PYTHONDONTWRITEBYTECODE=
+
+               addpredict "/usr/lib/python${PYVER}/site-packages"
+       fi
+
+       # also need to clear the flags explicitly here or they end up
+       # in _sysconfigdata*
+       emake CPPFLAGS= CFLAGS= LDFLAGS=
+
+       # Restore saved value from above.
+       local -x PYTHONDONTWRITEBYTECODE=${_PYTHONDONTWRITEBYTECODE}
+
+       # Work around bug 329499. See also bug 413751 and 457194.
+       if has_version dev-libs/libffi[pax-kernel]; then
+               pax-mark E python
+       else
+               pax-mark m python
+       fi
+}
+
+src_test() {
+       # Tests will not work when cross compiling.
+       if tc-is-cross-compiler; then
+               elog "Disabling tests due to crosscompiling."
+               return
+       fi
+
+       local test_opts=(
+               -u-network
+               -j "$(makeopts_jobs)"
+
+               # fails
+               -x test_concurrent_futures
+               -x test_gdb
+       )
+
+       if use sparc ; then
+               # bug #788022
+               test_opts+=(
+                       -x test_multiprocessing_fork
+                       -x test_multiprocessing_forkserver
+               )
+       fi
+
+       # workaround docutils breaking tests
+       cat > Lib/docutils.py <<-EOF || die
+               raise ImportError("Thou shalt not import!")
+       EOF
+
+       # bug 660358
+       local -x COLUMNS=80
+       local -x PYTHONDONTWRITEBYTECODE=
+
+       nonfatal emake -Onone test EXTRATESTOPTS="${test_opts[*]}" \
+               CPPFLAGS= CFLAGS= LDFLAGS= < /dev/tty
+       local ret=${?}
+
+       rm Lib/docutils.py || die
+
+       [[ ${ret} -eq 0 ]] || die "emake test failed"
+}
+
+src_install() {
+       local libdir=${ED}/usr/lib/python${PYVER}
+
+       emake DESTDIR="${D}" altinstall
+
+       # Remove static library
+       rm "${ED}"/usr/$(get_libdir)/libpython*.a || die
+
+       # Fix collisions between different slots of Python.
+       rm "${ED}/usr/$(get_libdir)/libpython3.so" || die
+
+       # Cheap hack to get version with ABIFLAGS
+       local abiver=$(cd "${ED}/usr/include"; echo python*)
+       if [[ ${abiver} != python${PYVER} ]]; then
+               # Replace python3.X with a symlink to python3.Xm
+               rm "${ED}/usr/bin/python${PYVER}" || die
+               dosym "${abiver}" "/usr/bin/python${PYVER}"
+               # Create python3.X-config symlink
+               dosym "${abiver}-config" "/usr/bin/python${PYVER}-config"
+               # Create python-3.5m.pc symlink
+               dosym "python-${PYVER}.pc" 
"/usr/$(get_libdir)/pkgconfig/${abiver/${PYVER}/-${PYVER}}.pc"
+       fi
+
+       # python seems to get rebuilt in src_install (bug 569908)
+       # Work around it for now.
+       if has_version dev-libs/libffi[pax-kernel]; then
+               pax-mark E "${ED}/usr/bin/${abiver}"
+       else
+               pax-mark m "${ED}/usr/bin/${abiver}"
+       fi
+
+       rm -r "${libdir}"/ensurepip/_bundled || die
+       if ! use ensurepip; then
+               rm -r "${libdir}"/ensurepip || die
+       fi
+       if ! use sqlite; then
+               rm -r "${libdir}/"{sqlite3,test/test_sqlite*} || die
+       fi
+       if ! use tk; then
+               rm -r "${ED}/usr/bin/idle${PYVER}" || die
+               rm -r "${libdir}/"{idlelib,tkinter,test/test_tk*} || die
+       fi
+
+       ln -s ../python/EXTERNALLY-MANAGED "${libdir}/EXTERNALLY-MANAGED" || die
+
+       dodoc Misc/{ACKS,HISTORY,NEWS}
+
+       if use examples; then
+               docinto examples
+               find Tools -name __pycache__ -exec rm -fr {} + || die
+               dodoc -r Tools
+       fi
+       insinto /usr/share/gdb/auto-load/usr/$(get_libdir) #443510
+       local libname=$(
+               printf 'e:\n\t@echo $(INSTSONAME)\ninclude Makefile\n' |
+               emake --no-print-directory -s -f - 2>/dev/null
+       )
+       newins Tools/gdb/libpython.py "${libname}"-gdb.py
+
+       newconfd "${FILESDIR}/pydoc.conf" pydoc-${PYVER}
+       newinitd "${FILESDIR}/pydoc.init" pydoc-${PYVER}
+       sed \
+               -e "s:@PYDOC_PORT_VARIABLE@:PYDOC${PYVER/./_}_PORT:" \
+               -e "s:@PYDOC@:pydoc${PYVER}:" \
+               -i "${ED}/etc/conf.d/pydoc-${PYVER}" \
+               "${ED}/etc/init.d/pydoc-${PYVER}" || die "sed failed"
+
+       # python-exec wrapping support
+       local pymajor=${PYVER%.*}
+       local EPYTHON=python${PYVER}
+       local scriptdir=${D}$(python_get_scriptdir)
+       mkdir -p "${scriptdir}" || die
+       # python and pythonX
+       ln -s "../../../bin/${abiver}" "${scriptdir}/python${pymajor}" || die
+       ln -s "python${pymajor}" "${scriptdir}/python" || die
+       # python-config and pythonX-config
+       # note: we need to create a wrapper rather than symlinking it due
+       # to some random dirname(argv[0]) magic performed by python-config
+       cat > "${scriptdir}/python${pymajor}-config" <<-EOF || die
+               #!/bin/sh
+               exec "${abiver}-config" "\${@}"
+       EOF
+       chmod +x "${scriptdir}/python${pymajor}-config" || die
+       ln -s "python${pymajor}-config" "${scriptdir}/python-config" || die
+       # 2to3, pydoc
+       ln -s "../../../bin/2to3-${PYVER}" "${scriptdir}/2to3" || die
+       ln -s "../../../bin/pydoc${PYVER}" "${scriptdir}/pydoc" || die
+       # idle
+       if use tk; then
+               ln -s "../../../bin/idle${PYVER}" "${scriptdir}/idle" || die
+       fi
+}

Reply via email to