summaryrefslogtreecommitdiff
path: root/mkosi.build
blob: 7ad3371ee7887c2f7006ce486cb3206733362a65 (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
#!/bin/sh
# SPDX-License-Identifier: LGPL-2.1-or-later
set -e

# This is a build script for OS image generation using mkosi (https://github.com/systemd/mkosi).
# Simply invoke "mkosi" in the project directory to build an OS image.

# If mkosi.builddir/ exists mkosi will set $BUILDDIR to it, let's then use it
# as out-of-tree build dir. Otherwise, let's make up our own builddir.
[ -z "$BUILDDIR" ] && BUILDDIR="$PWD"/build

# Let's make sure we're using stuff from the build directory first if available there.
PATH="$BUILDDIR:$PATH"
export PATH

# The bpftool script shipped by Ubuntu tries to find the actual program to run via querying `uname -r` and
# using the current kernel version. This obviously doesn't work in containers. As a workaround, we override
# the ubuntu script with a symlink to the first bpftool program we can find.
for bpftool in /usr/lib/linux-tools/*/bpftool; do
    [ -x "$bpftool" ] || continue
    ln -sf "$bpftool" "$BUILDDIR"/bpftool
    break
done

# CentOS Stream 8 includes bpftool 4.18.0 which is lower than what we need. However, they've backported the
# specific feature we need ("gen skeleton") to this version, so we replace bpftool with a script that reports
# version 5.6.0 to satisfy meson which makes bpf work on CentOS Stream 8 as well.
if [ "$(grep '^ID=' /etc/os-release)" = "ID=\"centos\"" ] && [ "$(grep '^VERSION=' /etc/os-release)" = "VERSION=\"8\"" ]; then
    cat >"$BUILDDIR"/bpftool <<EOF
#!/bin/sh
if [ "\$1" = --version ]; then
    echo 5.6.0
else
    exec /usr/sbin/bpftool \$@
fi
EOF
    chmod +x "$BUILDDIR"/bpftool
fi

if [ ! -f "$BUILDDIR"/build.ninja ] ; then
    sysvinit_path=$(realpath /etc/init.d)

    init_path=$(realpath /sbin/init 2>/dev/null)
    if [ -z "$init_path" ] ; then
        rootprefix=""
    else
        rootprefix=${init_path%/lib/systemd/systemd}
        rootprefix=/${rootprefix#/}
    fi

    # On debian-like systems the library directory is not /usr/lib64 but /usr/lib/<arch-triplet>/.
    # It is important to use the right one especially for cryptsetup plugins, otherwise they will be
    # installed in the wrong directory and not be found by cryptsetup. Assume native build.
    if grep -q -e "ID=debian" -e "ID_LIKE=debian" /etc/os-release && command -v dpkg 2>/dev/null; then
        LIBDIR="-Drootlibdir=/usr/lib/$(dpkg-architecture -qDEB_HOST_MULTIARCH)"
        PAMDIR="-Dpamlibdir=/usr/lib/$(dpkg-architecture -qDEB_HOST_MULTIARCH)/security"
    fi

    # Cannot quote $LIBDIR and $PAMDIR, because they may be empty, and meson will fail.
    # shellcheck disable=SC2086
    meson setup "$BUILDDIR" \
            ${LIBDIR:-} \
            ${PAMDIR:-} \
            -D "sysvinit-path=$sysvinit_path" \
            -D "rootprefix=$rootprefix" \
            -D default-timeout-sec=${DEFAULT_TIMEOUT_SEC:-10} \
            -D default-user-timeout-sec=${DEFAULT_TIMEOUT_SEC:-10} \
            -D man=false \
            -D translations=false \
            -D version-tag="${VERSION_TAG}" \
            -D mode=developer \
            -D b_sanitize="${SANITIZERS:-none}" \
            -D install-tests=true \
            -D tests=unsafe \
            -D slow-tests=true \
            -D utmp=true \
            -D hibernate=true \
            -D ldconfig=true \
            -D resolve=true \
            -D efi=true \
            -D tpm=true \
            -D environment-d=true \
            -D binfmt=true \
            -D repart=true \
            -D sysupdate=true \
            -D coredump=true \
            -D pstore=true \
            -D oomd=true \
            -D logind=true \
            -D hostnamed=true \
            -D localed=true \
            -D machined=true \
            -D portabled=true \
            -D sysext=true \
            -D userdb=true \
            -D homed=true \
            -D networkd=true \
            -D timedated=true \
            -D timesyncd=true \
            -D remote=true \
            -D nss-myhostname=true \
            -D nss-mymachines=true \
            -D nss-resolve=true \
            -D nss-systemd=true \
            -D firstboot=true \
            -D randomseed=true \
            -D backlight=true \
            -D vconsole=true \
            -D quotacheck=true \
            -D sysusers=true \
            -D tmpfiles=true \
            -D importd=true \
            -D hwdb=true \
            -D rfkill=true \
            -D xdg-autostart=true \
            -D translations=true \
            -D polkit=true \
            -D acl=true \
            -D audit=true \
            -D blkid=true \
            -D fdisk=true \
            -D kmod=true  \
            -D pam=true \
            -D pwquality=true \
            -D microhttpd=true \
            -D libcryptsetup=true \
            -D libcurl=true \
            -D idn=true \
            -D libidn2=true \
            -D qrencode=true \
            -D gcrypt=true \
            -D gnutls=true \
            -D openssl=true \
            -D cryptolib=openssl \
            -D p11kit=true \
            -D libfido2=true \
            -D tpm2=true \
            -D elfutils=true \
            -D zstd=true \
            -D xkbcommon=true \
            -D pcre2=true \
            -D glib=true \
            -D dbus=true \
            -D bootloader=true \
            -D kernel-install=true \
            -D analyze=true \
            -D bpf-framework=true \
            -D ukify=true
fi

ninja -C "$BUILDDIR" "$@"
if [ "$WITH_TESTS" = 1 ] ; then
    if [ -n "$SANITIZERS" ]; then
        export ASAN_OPTIONS="$MKOSI_ASAN_OPTIONS"
        export UBSAN_OPTIONS="$MKOSI_UBSAN_OPTIONS"
        TIMEOUT_MULTIPLIER=3
    else
        TIMEOUT_MULTIPLIER=1
    fi

    meson test -C "$BUILDDIR" --print-errorlogs --timeout-multiplier=$TIMEOUT_MULTIPLIER
fi

meson install -C "$BUILDDIR" --quiet --no-rebuild --only-changed

if [ -d mkosi.kernel/ ]; then
    SRCDIR="$SRCDIR/mkosi.kernel"
    BUILDDIR="$BUILDDIR/mkosi.kernel"
    cd "$SRCDIR"
    mkdir -p "$BUILDDIR"

    # Ensure fast incremental builds by fixating these values which usually change for each build.
    export KBUILD_BUILD_TIMESTAMP="Fri Jun  5 15:58:00 CEST 2015"
    export KBUILD_BUILD_HOST="mkosi"

    scripts/kconfig/merge_config.sh -O "$BUILDDIR" \
            ../mkosi.kernel.config \
            tools/testing/selftests/bpf/config.x86_64 \
            tools/testing/selftests/bpf/config

    # Make sure systemd-boot boots this kernel and not the distro provided one by overriding the version.
    make O="$BUILDDIR" VERSION=99 -j "$(nproc)"

    KERNEL_RELEASE=$(make O="$BUILDDIR" VERSION=99 -s kernelrelease)
    mkdir -p "$DESTDIR/usr/lib/modules/$KERNEL_RELEASE"
    make O="$BUILDDIR" VERSION=99 INSTALL_MOD_PATH="$DESTDIR/usr" modules_install
    make O="$BUILDDIR" VERSION=99 INSTALL_PATH="$DESTDIR/usr/lib/modules/$KERNEL_RELEASE" install
    mkdir -p "$DESTDIR/usr/lib/kernel/selftests"
    make -C tools/testing/selftests -j "$(nproc)" O="$BUILDDIR" VERSION=99 KSFT_INSTALL_PATH="$DESTDIR/usr/lib/kernel/selftests" SKIP_TARGETS="" install

    ln -sf /usr/lib/kernel/selftests/bpf/bpftool "$DESTDIR/usr/bin/bpftool"
fi