Vendor Tarball
==============

Cloud Hypervisor is packaged with a vendored Rust dependencies tarball
(orig-vendor.tar.xz) since building requires network access to fetch
crates, which is not available during package builds.

Regenerating the vendor tarball
-------------------------------

From a clean upstream source tree at the desired release tag:

    debian/rules vendor-tarball

Generating debian/copyright
----------------------------

The debian/copyright file is generated from the vendored crates metadata
using:

    debian/gen-copyright.py > debian/copyright

This script parses each vendor/<crate>/Cargo.toml for license and author
information and produces a DEP-5 machine-readable copyright file. It also
includes per-file overrides for cases where individual source files carry
a different license than the crate-level Cargo.toml declares (e.g.
auto-generated bindings with BSD headers).

After regenerating the vendor tarball, always re-run the script and review
the diff to catch any new or changed licenses.
