mirror of
https://github.com/gentoo-mirror/gentoo.git
synced 2026-11-10 06:57:08 -08:00
net-firewall/xtables-addons: add 3.20 (5.17+ compat)
Closes: https://bugs.gentoo.org/839105 Bug: https://bugs.gentoo.org/836595 Bug: https://bugs.gentoo.org/832666 Signed-off-by: Sam James <sam@gentoo.org>
This commit is contained in:
Sam James
@@ -1,2 +1,3 @@
|
||||
DIST xtables-addons-3.13.tar.xz 327104 BLAKE2B 110719a7425060a79df0643ea35cf28ac62af811dde0f6744cf75b632809ff02518366e12ecdf8b017648b85843e689735629fc099b23b21b1999afa3a2e5c69 SHA512 0a9874269dafefe2fc364b41d3f5fb2108ba83dc49457f3aa436b814c8c65fb00f48f664576c8ccf183939edffa854fcf9f9c82a801ac90c0e2b9dc1426e1d85
|
||||
DIST xtables-addons-3.18.tar.xz 328624 BLAKE2B 9662773c4bd5464ca789975762233299ca194977d5605a3c5f9a8a5a15f51afa4c33c8c17fd622af301a0f377542b6497eac5ce7e23719d238de5df51a9554b1 SHA512 b334642ce9b6ec3fc775ddbe6b66d70467fdcbfe30dcb165dac203f9d7fcd222dfd8c91e10befa3666bf572115dc75ed32d8ece05ed2947a4ed21d1d09032b8f
|
||||
DIST xtables-addons-3.20.tar.xz 333232 BLAKE2B bc6df6d6e56bd539dc649d312fe84a5fe9e4743d6b1f72f3b3bb4689cea91cef9051754d30e530fa3140b877a67b2f84490740e669993669a1ee515d0a434b8d SHA512 0a38c12159dd555a31f24dc5a74d012b27723925df827edffe2343f6b8e61e838b5dc4776bafe37587e9622b9da1e9cd4220e4f576d58e78eb21ad18a419fb2e
|
||||
|
||||
@@ -0,0 +1,189 @@
|
||||
# Copyright 1999-2022 Gentoo Authors
|
||||
# Distributed under the terms of the GNU General Public License v2
|
||||
|
||||
EAPI=8
|
||||
|
||||
MODULES_OPTIONAL_USE=modules
|
||||
MODULES_OPTIONAL_USE_IUSE_DEFAULT=1
|
||||
inherit linux-info linux-mod multilib toolchain-funcs
|
||||
|
||||
DESCRIPTION="iptables extensions not yet accepted in the main kernel"
|
||||
HOMEPAGE="https://inai.de/projects/xtables-addons/"
|
||||
SRC_URI="https://inai.de/files/xtables-addons/${P}.tar.xz"
|
||||
|
||||
LICENSE="GPL-2"
|
||||
SLOT="0"
|
||||
KEYWORDS="~amd64 ~x86"
|
||||
|
||||
MODULES="quota2 psd pknock lscan length2 ipv4options ipp2p iface gradm geoip fuzzy condition tarpit sysrq proto logmark ipmark echo dnetmap dhcpmac delude chaos account"
|
||||
|
||||
for mod in ${MODULES}; do
|
||||
IUSE="${IUSE} xtables_addons_${mod}"
|
||||
done
|
||||
|
||||
DEPEND=">=net-firewall/iptables-1.6.0"
|
||||
|
||||
RDEPEND="${DEPEND}
|
||||
xtables_addons_geoip? (
|
||||
app-arch/unzip
|
||||
dev-perl/Net-CIDR-Lite
|
||||
dev-perl/Text-CSV_XS
|
||||
virtual/perl-Getopt-Long
|
||||
)
|
||||
"
|
||||
|
||||
DEPEND="${DEPEND}
|
||||
virtual/linux-sources"
|
||||
|
||||
SKIP_MODULES=""
|
||||
|
||||
XA_check4internal_module() {
|
||||
local mod=${1}
|
||||
local version=${3}
|
||||
local kconfigname=${3}
|
||||
|
||||
if use xtables_addons_${mod} && kernel_is -gt ${version}; then
|
||||
ewarn "${kconfigname} should be provided by the kernel. Skipping its build..."
|
||||
if ! linux_chkconfig_present ${kconfigname}; then
|
||||
ewarn "Please enable ${kconfigname} target in your kernel
|
||||
configuration or disable checksum module in ${PN}."
|
||||
fi
|
||||
# SKIP_MODULES in case we need to disable building of everything
|
||||
# like having this USE disabled
|
||||
SKIP_MODULES+=" ${mod}"
|
||||
fi
|
||||
}
|
||||
|
||||
pkg_setup() {
|
||||
if use modules; then
|
||||
get_version
|
||||
check_modules_supported
|
||||
CONFIG_CHECK="NF_CONNTRACK NF_CONNTRACK_MARK ~CONNECTOR"
|
||||
ERROR_CONNECTOR="Please, enable CONFIG_CONNECTOR if you wish to receive userspace notifications from pknock through netlink/connector"
|
||||
linux-mod_pkg_setup
|
||||
|
||||
if ! linux_chkconfig_present IPV6; then
|
||||
SKIP_IPV6_MODULES="ip6table_rawpost"
|
||||
ewarn "No IPV6 support in kernel. Disabling: ${SKIP_IPV6_MODULES}"
|
||||
fi
|
||||
kernel_is -lt 4 18 && die "${P} requires kernel version >= 4.18"
|
||||
fi
|
||||
}
|
||||
|
||||
# Helper for maintainer: cheks if all possible MODULES are listed.
|
||||
XA_qa_check() {
|
||||
local all_modules
|
||||
all_modules=$(sed -n '/^build_/{s/build_\(.*\)=.*/\L\1/;G;s/\n/ /;s/ $//;h}; ${x;p}' "${S}/mconfig")
|
||||
if [[ ${all_modules} != ${MODULES} ]]; then
|
||||
ewarn "QA: Modules in mconfig differ from \$MODULES in ebuild."
|
||||
ewarn "Please, update MODULES in ebuild."
|
||||
ewarn "'${all_modules}'"
|
||||
fi
|
||||
}
|
||||
|
||||
# Is there any use flag set?
|
||||
XA_has_something_to_build() {
|
||||
local mod
|
||||
for mod in ${MODULES}; do
|
||||
use xtables_addons_${mod} && return
|
||||
done
|
||||
|
||||
eerror "All modules are disabled. What do you want me to build?"
|
||||
eerror "Please, set XTABLES_ADDONS to any combination of"
|
||||
eerror "${MODULES}"
|
||||
die "All modules are disabled."
|
||||
}
|
||||
|
||||
# Parse Kbuid files and generates list of sources
|
||||
XA_get_module_name() {
|
||||
[[ $# != 1 ]] && die "XA_get_sources_for_mod: needs exactly one argument."
|
||||
local mod objdir build_mod sources_list
|
||||
mod=${1}
|
||||
objdir=${S}/extensions
|
||||
# Take modules name from mconfig
|
||||
build_mod=$(sed -n "s/\(build_${mod}\)=.*/\1/Ip" "${S}/mconfig")
|
||||
# strip .o, = and everything before = and print
|
||||
sources_list=$(sed -n "/^obj-[$][{]${build_mod}[}]/\
|
||||
{s:obj-[^+]\+ [+]=[[:space:]]*::;s:[.]o::g;p}" \
|
||||
"${objdir}/Kbuild")
|
||||
|
||||
if [[ -d ${S}/extensions/${sources_list} ]]; then
|
||||
objdir=${S}/extensions/${sources_list}
|
||||
sources_list=$(sed -n "/^obj-m/\
|
||||
{s:obj-[^+]\+ [+]=[[:space:]]*::;s:[.]o::g;p}" \
|
||||
"${objdir}/Kbuild")
|
||||
fi
|
||||
for mod_src in ${sources_list}; do
|
||||
has ${mod_src} ${SKIP_IPV6_MODULES} || \
|
||||
echo " ${mod_src}(xtables_addons:${S}/extensions:${objdir})"
|
||||
done
|
||||
}
|
||||
|
||||
# Die on modules known to fail on certain kernel version.
|
||||
XA_known_failure() {
|
||||
local module_name=$1
|
||||
local KV_max=$2
|
||||
|
||||
if use xtables_addons_${module_name} && kernel_is ge ${KV_max//./ }; then
|
||||
eerror
|
||||
eerror "XTABLES_ADDONS=${module_name} fails to build on linux ${KV_max} or above."
|
||||
eerror "Either remove XTABLES_ADDONS=${module_name} or use an earlier version of the kernel."
|
||||
eerror
|
||||
die
|
||||
fi
|
||||
}
|
||||
|
||||
src_prepare() {
|
||||
XA_qa_check
|
||||
XA_has_something_to_build
|
||||
|
||||
# Bug #553630#c2. echo fails on linux-4 and above.
|
||||
# This appears to be fixed, at least as of linux-4.2
|
||||
# XA_known_failure "echo" 4
|
||||
|
||||
local mod module_name
|
||||
if use modules; then
|
||||
MODULE_NAMES="compat_xtables(xtables_addons:${S}/extensions:)"
|
||||
fi
|
||||
for mod in ${MODULES}; do
|
||||
if ! has ${mod} ${SKIP_MODULES} && use xtables_addons_${mod}; then
|
||||
sed "s/\(build_${mod}=\).*/\1m/I" -i mconfig || die
|
||||
if use modules; then
|
||||
for module_name in $(XA_get_module_name ${mod}); do
|
||||
MODULE_NAMES+=" ${module_name}"
|
||||
done
|
||||
fi
|
||||
else
|
||||
sed "s/\(build_${mod}=\).*/\1n/I" -i mconfig || die
|
||||
fi
|
||||
done
|
||||
einfo "${MODULE_NAMES}" # for debugging
|
||||
|
||||
sed -e 's/depmod -a/true/' -i Makefile.in || die
|
||||
sed -e '/^all-local:/{s: modules::}' \
|
||||
-e '/^install-exec-local:/{s: modules_install::}' \
|
||||
-i extensions/Makefile.in || die
|
||||
|
||||
use xtables_addons_geoip || sed -e '/^SUBDIRS/{s/geoip//}' -i Makefile.in
|
||||
|
||||
eapply_user
|
||||
}
|
||||
|
||||
src_configure() {
|
||||
set_arch_to_kernel # .. or it'll look for /arch/amd64/Makefile
|
||||
econf --prefix="${EPREFIX}/" \
|
||||
--libexecdir="${EPREFIX}/$(get_libdir)/" \
|
||||
--with-kbuild="${KV_OUT_DIR}"
|
||||
}
|
||||
|
||||
src_compile() {
|
||||
emake CFLAGS="${CFLAGS}" CC="$(tc-getCC)" V=1
|
||||
use modules && BUILD_PARAMS="V=1" BUILD_TARGETS="modules" linux-mod_src_compile
|
||||
}
|
||||
|
||||
src_install() {
|
||||
emake DESTDIR="${D}" install
|
||||
use modules && linux-mod_src_install
|
||||
dodoc -r README doc/*
|
||||
find "${ED}" -type f -name '*.la' -exec rm -rf '{}' '+'
|
||||
}
|
||||
Reference in New Issue
Block a user