AC_PREREQ([2.69]) m4_define([lxc_devel], 1) m4_define([lxc_version_major], 4) m4_define([lxc_version_minor], 0) m4_define([lxc_version_micro], 0) m4_define([lxc_version_beta], []) m4_define([lxc_abi_major], 1) m4_define([lxc_abi_minor], 7) m4_define([lxc_abi_micro], 0) m4_define([lxc_abi], [lxc_abi_major.lxc_abi_minor.lxc_abi_micro]) m4_define([lxc_version_base], [lxc_version_major.lxc_version_minor.lxc_version_micro]) m4_define([lxc_version], [ifelse(lxc_devel, 1, ifelse(lxc_version_beta, [], [lxc_version_base], [lxc_version_base.lxc_version_beta])-devel, ifelse(lxc_version_beta, [], [lxc_version_base], [lxc_version_base.lxc_version_beta]))]) AC_INIT([lxc],[lxc_version]) # We need pkg-config PKG_PROG_PKG_CONFIG AC_SUBST(LXC_VERSION_BASE, lxc_version_base) AC_SUBST(LXC_VERSION_BETA, lxc_version_beta) AC_SUBST([LXC_VERSION_MAJOR], [lxc_version_major]) AC_SUBST([LXC_VERSION_MINOR], [lxc_version_minor]) AC_SUBST([LXC_VERSION_MICRO], [lxc_version_micro]) AC_SUBST([LXC_VERSION], [lxc_version]) AC_SUBST([LXC_DEVEL], [lxc_devel]) AC_SUBST([LXC_ABI_MAJOR], [lxc_abi_major]) AC_SUBST([LXC_ABI_MINOR], [lxc_abi_minor]) AC_SUBST([LXC_ABI_MICRO], [lxc_abi_micro]) AC_SUBST([LXC_ABI], [lxc_abi]) AC_CONFIG_SRCDIR([configure.ac]) AC_CONFIG_AUX_DIR([config]) AC_CONFIG_HEADERS([src/config.h]) AM_INIT_AUTOMAKE([-Wall -Werror -Wno-portability subdir-objects]) AC_CANONICAL_HOST AM_PROG_CC_C_O AC_USE_SYSTEM_EXTENSIONS AC_SYS_LARGEFILE AC_GNU_SOURCE # Test if we have a new enough compiler. AC_COMPILE_IFELSE([AC_LANG_PROGRAM([[ #define GCC_VERSION \ (__GNUC__ * 10000 + __GNUC_MINOR__ * 100 + __GNUC_PATCHLEVEL__) #define CLANG_VERSION \ (__clang_major__ * 10000 + __clang_minor__ * 100 + __clang_patchlevel__) #if GCC_VERSION < 40700 && CLANG_VERSION < 10000 #error Sorry, your compiler is too old - please upgrade it #endif ]])], [valid_compiler=yes], [valid_compiler=no]) if test "x$valid_compiler" = "xno"; then AC_MSG_ERROR([Sorry, your compiler is too old - please upgrade it]) fi AC_PROG_GCC_TRADITIONAL AC_PROG_CXX AC_ENABLE_SHARED AC_ENABLE_STATIC # Check binaries AC_PROG_SED case $CC in clang*) AC_CHECK_TOOL([AR], llvm-ar) AC_CHECK_TOOL([NM], llvm-nm) AC_CHECK_TOOL([OBJCOPY], llvm-objcopy) AC_CHECK_TOOL([RANLIB], llvm-ranlib) esac # libtool LT_INIT AC_SUBST([LIBTOOL_DEPS]) # Detect the distribution. This is used for the default configuration and # for some distro-specific build options. AC_MSG_CHECKING([host distribution]) AC_ARG_WITH(distro, AS_HELP_STRING([--with-distro=DISTRO], [Specify the Linux distribution to target: One of redhat, redhatenterpriseserver, oracle, centos, fedora, suse, gentoo, debian, arch, slackware, plamo, paldo, openmandriva, pardus, sparclinux, altlinux.])) if type lsb_release >/dev/null 2>&1 && test "z$with_distro" = "z"; then with_distro=$(lsb_release -is) fi if test "z$with_distro" = "z"; then AC_CHECK_FILE(/etc/redhat-release,with_distro="redhat") AC_CHECK_FILE(/etc/oracle-release,with_distro="oracle") AC_CHECK_FILE(/etc/sparclinux-release,with_distro="sparclinux") AC_CHECK_FILE(/etc/centos-release,with_distro="centos") AC_CHECK_FILE(/etc/fedora-release,with_distro="fedora") AC_CHECK_FILE(/etc/SuSE-release,with_distro="suse") AC_CHECK_FILE(/etc/gentoo-release,with_distro="gentoo") AC_CHECK_FILE(/etc/debian_version,with_distro="debian") AC_CHECK_FILE(/etc/arch-release,with_distro="arch") AC_CHECK_FILE(/etc/slackware-version,with_distro="slackware") AC_CHECK_FILE(/etc/plamo-version,with_distro="plamo") AC_CHECK_FILE(/etc/frugalware-release,with_distro="frugalware") AC_CHECK_FILE(/etc/mandrakelinux-release, with_distro="openmandriva") AC_CHECK_FILE(/etc/mandriva-release,with_distro="openmandriva") AC_CHECK_FILE(/etc/pardus-release,with_distro="pardus") AC_CHECK_FILE(/etc/altlinux-release,with_distro="altlinux") AC_CHECK_FILE(/etc/pld-release,with_distro="pld") fi with_distro=$(echo ${with_distro} | tr '[[:upper:]]' '[[:lower:]]') if test "z$with_distro" = "zforsparc"; then with_distro="sparclinux" fi if test "z$with_distro" = "z"; then with_distro="unknown" fi case $with_distro in ubuntu|raspbian) distroconf=default.conf.lxcbr distrosysconf="$sysconfdir/default" ;; redhat|redhatenterpriseserver|centos|fedora|oracle|oracleserver|sparclinux|altlinux|suse|opensuse*|plamo|pld) distroconf=default.conf.lxcbr distrosysconf="$sysconfdir/sysconfig" ;; *) distroconf=default.conf.unknown distrosysconf="$sysconfdir/default" ;; esac AC_MSG_RESULT([$with_distro]) AM_CONDITIONAL([HAVE_DEBIAN], [test x"$with_distro" = "xdebian" -o x"$with_distro" = "xubuntu" -o x"$with_distro" = "xraspbian"]) AM_CONDITIONAL([DISTRO_UBUNTU], [test "x$with_distro" = "xubuntu"]) AC_CONFIG_LINKS([config/etc/default.conf:config/etc/${distroconf}]) # Check for init system type AC_MSG_CHECKING([for init system type]) AC_ARG_WITH([init-script], [AS_HELP_STRING([--with-init-script@<:@=TYPE@<:@,TYPE,...@:>@@:>@], [Type(s) of init script to install: sysvinit, systemd, upstart, distro @<:@default=distro@:>@])],[],[with_init_script=distro]) case "$with_init_script" in distro) case $with_distro in fedora|altlinux|opensuse*) init_script=systemd ;; redhat|redhatenterpriseserver|oracle|oracleserver|sparclinux|plamo) init_script=sysvinit ;; centos) init_script=sysvinit,systemd ;; debian|raspbian|ubuntu) init_script=upstart,systemd ;; pld) init_script=sysvinit,upstart,systemd ;; *) echo -n "Linux distribution init system unknown." init_script= ;; esac ;; *) init_script=$with_init_script ;; esac # Check valid init systems were given, run in subshell so we don't mess up IFS (IFS="," ; for init_sys in $init_script; do case "$init_sys" in none|sysvinit|systemd|upstart) ;; *) exit 1 ;; esac done) || AC_MSG_ERROR([Unknown init system type in $init_script]) AM_CONDITIONAL([INIT_SCRIPT_SYSV], [echo "$init_script" |grep -q "sysvinit"]) AM_CONDITIONAL([INIT_SCRIPT_SYSTEMD], [echo "$init_script" |grep -q "systemd"]) AM_CONDITIONAL([INIT_SCRIPT_UPSTART], [echo "$init_script" |grep -q "upstart"]) AC_MSG_RESULT($init_script) # systemd unit dir AC_ARG_WITH([systemdsystemunitdir], AS_HELP_STRING([--with-systemdsystemunitdir=DIR], [Directory for systemd service files]), [with_systemdsystemunitdir=$withval], [with_systemdsystemunitdir=$($PKG_CONFIG --variable=systemdsystemunitdir systemd)]) if test -z "$with_systemdsystemunitdir"; then with_systemdsystemunitdir=/lib/systemd/system fi if test "x$with_systemdsystemunitdir" != "xno"; then AC_SUBST([SYSTEMD_UNIT_DIR], [$with_systemdsystemunitdir]) fi AC_ARG_ENABLE([werror], [AS_HELP_STRING([--disable-werror], [do not treat warnings as errors])], [enable_werror=$enableval], [enable_werror=yes]) AC_ARG_ENABLE([no_undefined], [AS_HELP_STRING([--disable-no-undefined], [do not pass -Wl,--no-undefined])], [enable_no_undefined=$enableval], [enable_no_undefined=yes]) AM_CONDITIONAL([ENABLE_NO_UNDEFINED], [test "x$enable_no_undefined" = "xyes"]) AC_ARG_ENABLE([fuzzers], [AS_HELP_STRING([--enable-fuzzers], [compile with fuzzers])], [enable_fuzzers=$enableval], [enable_fuzzers=no]) AM_CONDITIONAL([ENABLE_FUZZERS], [test "x$enable_fuzzers" = "xyes"]) AM_CONDITIONAL([OSS_FUZZ], [test "x$LIB_FUZZING_ENGINE" != x]) # Allow disabling rpath AC_ARG_ENABLE([rpath], [AS_HELP_STRING([--enable-rpath], [set rpath in executables [default=no]])], [enable_rpath=$enableval], [enable_rpath=no]) AM_CONDITIONAL([ENABLE_RPATH], [test "x$enable_rpath" = "xyes"]) # Documentation (manpages) AC_ARG_ENABLE([doc], [AS_HELP_STRING([--enable-doc], [make man pages [default=auto]])], [enable_doc=$enableval], [enable_doc=auto]) if test "x$enable_doc" = "xyes" -o "x$enable_doc" = "xauto"; then db2xman="" dbparsers="docbook2X2man docbook2x-man db2x_docbook2man docbook2man docbook-to-man" AC_MSG_CHECKING(for docbook2x-man) for name in ${dbparsers}; do if "$name" --help >/dev/null 2>&1; then db2xman="$name" break; fi done if test -n "${db2xman}"; then AC_MSG_RESULT([${db2xman}]) enable_doc="yes" else AC_MSG_RESULT([no]) if test "x$enable_doc" = "xyes"; then AC_MSG_ERROR([docbook2x-man is required, but could not be found]) fi enable_doc="no" fi AC_SUBST(db2xman) fi AM_CONDITIONAL([ENABLE_DOCBOOK], [test "x$db2xman" != "x"]) AM_CONDITIONAL([USE_DOCBOOK2X], [test "x$db2xman" != "xdocbook2man"]) if test "x$db2xman" = "xdocbook2man"; then docdtd="\"-//Davenport//DTD DocBook V3.0//EN\"" else docdtd="\"-//OASIS//DTD DocBook XML\" \"http://www.oasis-open.org/docbook/xml/4.5/docbookx.dtd\"" fi AC_SUBST(docdtd) # Documentation (API) AC_ARG_ENABLE([api-docs], [AS_HELP_STRING([--enable-api-docs], [make API documentation [default=auto]])], [enable_api_docs=$enableval], [enable_api_docs=auto]) if test "x$enable_api_docs" = "xyes" -o "x$enable_api_docs" = "xauto"; then AC_CHECK_PROGS([HAVE_DOXYGEN],[doxygen]) AC_SUBST([HAVE_DOXYGEN]) if test "x$HAVE_DOXYGEN" != "x"; then enable_api_docs="yes" else if test "x$enable_api_docs" = "xyes"; then AC_MSG_ERROR([doxygen is required, but could not be found]) fi enable_api_docs="no" fi fi AM_CONDITIONAL([ENABLE_API_DOCS], [test "x$HAVE_DOXYGEN" != "x"]) AC_CONFIG_MACRO_DIRS([config]) # Apparmor AC_ARG_ENABLE([apparmor], [AS_HELP_STRING([--enable-apparmor], [enable apparmor support [default=auto]])], [enable_apparmor=$enableval], [enable_apparmor=auto]) if test "$enable_apparmor" = "auto" ; then AC_CHECK_LIB([apparmor],[aa_change_profile],[enable_apparmor=yes], [enable_apparmor=no]) fi AM_CONDITIONAL([ENABLE_APPARMOR], [test "x$enable_apparmor" = "xyes"]) # OpenSSL # libssl-dev AC_ARG_ENABLE([openssl], [AS_HELP_STRING([--enable-openssl], [enable OpenSSL support [default=auto]])], [enable_openssl=$enableval], [enable_openssl=auto]) if test "$enable_openssl" = "auto" ; then AC_CHECK_LIB([ssl], [OPENSSL_init_ssl], [enable_openssl=yes], [enable_openssl=no]) fi AM_CONDITIONAL([ENABLE_OPENSSL], [test "x$enable_openssl" = "xyes"]) AC_ARG_ENABLE([static-binaries], [AS_HELP_STRING([--enable-static-binaries], [build all binaries statically [default=no]])], [enable_static_binaries=$enableval], [enable_static_binaries=no]) AM_CONDITIONAL([ENABLE_STATIC_BINARIES], [test "x$enable_static_binaries" = "xyes"]) AM_COND_IF([ENABLE_OPENSSL], [AC_CHECK_HEADER([openssl/engine.h],[],[AC_MSG_ERROR([You must install the OpenSSL development package in order to compile lxc])]) AM_COND_IF([ENABLE_STATIC_BINARIES], [AC_SUBST([OPENSSL_LIBS], '-lssl -lcrypto -ldl')], [AC_SUBST([OPENSSL_LIBS], '-lssl -lcrypto')])]) # SELinux AC_ARG_ENABLE([selinux], [AS_HELP_STRING([--enable-selinux], [enable SELinux support [default=auto]])], [enable_selinux=$enableval], [enable_selinux=auto]) if test "x$enable_selinux" = xauto; then AC_CHECK_LIB([selinux],[setexeccon_raw],[enable_selinux=yes],[enable_selinux=no]) fi AM_CONDITIONAL([ENABLE_SELINUX], [test "x$enable_selinux" = "xyes"]) AM_COND_IF([ENABLE_SELINUX], [AC_CHECK_HEADER([selinux/selinux.h],[],[AC_MSG_ERROR([You must install the SELinux development package in order to compile lxc])]) AC_CHECK_LIB([selinux], [setexeccon_raw],[true],[AC_MSG_ERROR([You must install the SELinux development package in order to compile lxc])]) AC_SUBST([SELINUX_LIBS], [-lselinux])]) # Seccomp syscall filter AC_ARG_ENABLE([seccomp], [AS_HELP_STRING([--enable-seccomp], [enable seccomp support [default=auto]])], [enable_seccomp=$enableval], [enable_seccomp=auto]) if test "x$enable_seccomp" = "xauto" ; then AC_CHECK_LIB([seccomp],[seccomp_init],[enable_seccomp=yes],[enable_seccomp=no]) fi AM_CONDITIONAL([ENABLE_SECCOMP], [test "x$enable_seccomp" = "xyes"]) AM_COND_IF([ENABLE_SECCOMP], [PKG_CHECK_MODULES([SECCOMP],[libseccomp],[],[ AC_CHECK_HEADER([seccomp.h],[],[AC_MSG_ERROR([You must install the seccomp development package in order to compile lxc])]) AC_CHECK_LIB([seccomp], [seccomp_init],[],[AC_MSG_ERROR([You must install the seccomp development package in order to compile lxc])]) AC_SUBST([SECCOMP_LIBS], [-lseccomp]) ]) # HAVE_SCMP_FILTER_CTX=1 will tell us we have libseccomp api >= 1.0.0 OLD_CFLAGS="$CFLAGS" CFLAGS="$CFLAGS $SECCOMP_CFLAGS" AC_CHECK_TYPES([scmp_filter_ctx], [], [], [[#include ]]) AC_CHECK_DECLS([seccomp_notify_fd], [], [], [[#include ]]) AC_CHECK_TYPES([struct seccomp_notif_sizes], [], [], [[#include ]]) AC_CHECK_DECLS([seccomp_syscall_resolve_name_arch], [], [], [[#include ]]) CFLAGS="$OLD_CFLAGS" ]) AC_MSG_CHECKING(for static libcap) # Check for static libcap, make sure the function checked for differs from the # the one checked below so the cache doesn't give a wrong answer OLD_CFLAGS="$CFLAGS" OLD_CPPFLAGS="$CPPFLAGS" OLD_LDFLAGS="$LDFLAGS" OLD_LIBS="$LIBS" CFLAGS="" CPPFLAGS="" LDFLAGS="-static" LIBS="-lcap" AC_LINK_IFELSE([ AC_LANG_SOURCE( [[int main() { return 0; }]] )],[have_static_libcap=yes],[have_static_libcap=no]) AM_CONDITIONAL([HAVE_STATIC_LIBCAP], [test "x$have_static_libcap" = "xyes"]) if test "x$have_static_libcap" = "xyes"; then AC_DEFINE([HAVE_STATIC_LIBCAP], 1, [Have static libcap]) AC_MSG_RESULT([yes]) else AC_MSG_RESULT([no]) fi CPPFLAGS="$OLD_CPPFLAGS" CFLAGS="$OLD_CFLAGS" LDFLAGS="$OLD_LDFLAGS" LIBS="$OLD_LIBS" # Linux capabilities AC_ARG_ENABLE([capabilities], [AS_HELP_STRING([--enable-capabilities], [enable kernel capabilities support [default=auto]])], [enable_capabilities=$enableval], [enable_capabilities=auto]) if test "x$enable_capabilities" = "xauto"; then AC_CHECK_LIB([cap],[cap_set_proc],[enable_capabilities=yes],[enable_capabilities=no]) fi AM_CONDITIONAL([ENABLE_CAP], [test "x$enable_capabilities" = "xyes"]) AM_COND_IF([ENABLE_CAP], [AC_CHECK_HEADER([sys/capability.h],[],[AC_MSG_ERROR([You must install the libcap development package in order to compile lxc])]) AC_CHECK_LIB(cap,cap_set_proc,[],[AC_MSG_ERROR([You must install the libcap development package in order to compile lxc])]) # Test whether we support getting file capabilities via cap_get_file(). AC_CHECK_LIB(cap,cap_get_file, AC_DEFINE(LIBCAP_SUPPORTS_FILE_CAPABILITIES,1,[Have cap_get_file]),[],[]) AC_SUBST([CAP_LIBS], [-lcap])]) # Configuration examples AC_ARG_ENABLE([examples], [AS_HELP_STRING([--enable-examples], [install examples [default=yes]])], [enable_examples=$enableval], [enable_examples=yes]) AM_CONDITIONAL([ENABLE_EXAMPLES], [test "x$enable_examples" = "xyes"]) # Enable dumping stack traces AC_ARG_ENABLE([mutex-debugging], [AS_HELP_STRING([--enable-mutex-debugging], [Makes mutexes to report error and provide stack trace [default=no]])], [enable_mutex_debugging=$enableval], [enable_mutex_debugging=no]) AM_CONDITIONAL([MUTEX_DEBUGGING], [test "x$enable_mutex_debugging" = "xyes"]) AM_COND_IF([MUTEX_DEBUGGING], AC_DEFINE_UNQUOTED([MUTEX_DEBUGGING], 1, [Enabling mutex debugging])) # Not in older autoconf versions # AS_VAR_COPY(DEST, SOURCE) # ------------------------- # Set the polymorphic shell variable DEST to the contents of the polymorphic # shell variable SOURCE. m4_ifdef([AS_VAR_COPY], [], [AC_DEFUN([AS_VAR_COPY], [AS_LITERAL_IF([$1[]$2], [$1=$$2], [eval $1=\$$2])]) ]) dnl PKG_CHECK_VAR was introduced with pkg-config 0.28 m4_ifdef([PKG_CHECK_VAR], [], [AC_DEFUN([PKG_CHECK_VAR], [AC_REQUIRE([PKG_PROG_PKG_CONFIG])dnl AC_ARG_VAR([$1], [value of $3 for $2, overriding pkg-config])dnl _PKG_CONFIG([$1], [variable="][$3]["], [$2]) AS_VAR_COPY([$1], [pkg_cv_][$1]) AS_VAR_IF([$1], [""], [$5], [$4])dnl ])# PKG_CHECK_VAR ]) # Optional bash integration AC_ARG_ENABLE([bash], [AS_HELP_STRING([--enable-bash], [build bash integration [default=yes]])], [enable_bash=$enableval], [enable_bash=yes]) AM_CONDITIONAL([ENABLE_BASH], [test "x$enable_bash" = "xyes"]) AM_COND_IF([ENABLE_BASH], [AC_MSG_CHECKING([bash completion directory]) PKG_CHECK_VAR(bashcompdir, [bash-completion], [completionsdir], , bashcompdir="${sysconfdir}/bash_completion.d") AC_MSG_RESULT([$bashcompdir]) AC_SUBST(bashcompdir) ]) # Build the command line tools AC_ARG_ENABLE([tools], [AS_HELP_STRING([--enable-tools], [build the command line tools [default=yes]])], [enable_tools=$enableval], [enable_tools=yes]) AM_CONDITIONAL([ENABLE_TOOLS], [test "x$enable_tools" = "xyes"]) # Build the liblxc commands AC_ARG_ENABLE([commands], [AS_HELP_STRING([--enable-commands], [build the liblxc commands [default=yes]])], [enable_commands=$enableval], [enable_commands=yes]) AM_CONDITIONAL([ENABLE_COMMANDS], [test "x$enable_commands" = "xyes"]) AC_ARG_ENABLE([static-binaries], [AS_HELP_STRING([--enable-static-binaries], [build all binaries statically [default=no]])], [enable_static_binaries=$enableval], [enable_static_binaries=no]) AM_CONDITIONAL([ENABLE_STATIC_BINARIES], [test "x$enable_static_binaries" = "xyes"]) AC_ARG_ENABLE([sanitizers], [AS_HELP_STRING([--enable-sanitizers], [build with sanitizers enabled [default=no]])], [enable_sanitizers=$enableval], [enable_sanitizers=no]) AM_CONDITIONAL([ENABLE_SANITIZERS], [test "x$enable_sanitizers" = "xyes"]) if test "x$enable_sanitizers" = "xyes"; then AC_DEFINE([ENABLE_SANITIZERS], 1, [build with sanitizers enabled]) CC_CHECK_FLAGS_APPEND([AM_CFLAGS],[CFLAGS],[ \ -fsanitize=address \ -fsanitize=undefined \ -fno-optimize-sibling-calls \ -fno-omit-frame-pointer]) AC_SUBST(AM_CFLAGS) CC_CHECK_FLAGS_APPEND([AM_LDFLAGS],[LDFLAGS],[ \ -fsanitize=address \ -fsanitize=undefined]) AC_SUBST(AM_LDFLAGS) AC_MSG_RESULT([yes]) else AC_MSG_RESULT([no]) fi if test "x$enable_fuzzers" = "xyes"; then if test "x$LIB_FUZZING_ENGINE" = x; then CC_CHECK_FLAGS_APPEND([AM_CFLAGS],[CFLAGS],[ \ -DFUZZING_BUILD_MODE_UNSAFE_FOR_PRODUCTION \ -DRUN_ON_OSS_FUZZ=0 \ -fsanitize=fuzzer-no-link]) else CC_CHECK_FLAGS_APPEND([AM_CFLAGS],[CFLAGS],[ \ -DRUN_ON_OSS_FUZZ=1]) fi fi if test "x$enable_fuzzers" = "xno" -a "x$enable_sanitizers" = "xno"; then CC_CHECK_FLAGS_APPEND([AM_CFLAGS],[CFLAGS],[-flto=thin]) fi AC_SUBST(AM_CFLAGS) # Optional test binaries AC_ARG_ENABLE([tests], [AS_HELP_STRING([--enable-tests], [build test/example binaries [default=no]])], [enable_tests=$enableval], [enable_tests=no]) AM_CONDITIONAL([ENABLE_TESTS], [test "x$enable_tests" = "xyes"]) # Allow overriding the default runtime dir (/run) AC_ARG_WITH([runtime-path], [AS_HELP_STRING([--with-runtime-path=dir], [runtime directory (default: /run)])], [with_runtime_path=$withval], [with_runtime_path=['/run']]) # LXC container path, where the containers are actually stored # This is overridden by an entry in the file called LXCCONF # (i.e. /etc/lxc/lxc.conf) AC_ARG_WITH([config-path], [AS_HELP_STRING([--with-config-path=dir], [lxc configuration repository path])], [with_config_path=$withval], [with_config_path=['${localstatedir}/lib/lxc']]) # The path of the global lxc configuration file. AC_ARG_WITH([global-conf], [AS_HELP_STRING([--with-global-conf=dir], [global lxc configuration file])], [with_global_conf=$withval], [with_global_conf=['${sysconfdir}/lxc/lxc.conf']]) # The path of the userns network configuration file AC_ARG_WITH([usernic-conf], [AS_HELP_STRING([--with-usernic-conf], [user network interface configuration file])], [with_usernic_conf=$withval], [with_usernic_conf=['${sysconfdir}/lxc/lxc-usernet']]) # The path of the runtime usernic database AC_ARG_WITH([usernic-db], [AS_HELP_STRING([--with-usernic-db], [lxc user nic database])], [with_usernic_db=$withval], [with_usernic_db=['${with_runtime_path}/lxc/nics']]) # Rootfs path, where the container mount structure is assembled AC_ARG_WITH([rootfs-path], [AS_HELP_STRING([--with-rootfs-path=dir], [lxc rootfs mount point])], [with_rootfs_path=$withval], [with_rootfs_path=['${libdir}/lxc/rootfs']]) # cgroup pattern specification AC_ARG_WITH([cgroup-pattern], [AS_HELP_STRING([--with-cgroup-pattern=pattern], [pattern for container cgroups])], [with_cgroup_pattern=$withval], [with_cgroup_pattern=['']]) # The path for the apparmor_parser's cache for generated apparmor profiles AC_ARG_WITH([apparmor-cache-dir], [AS_HELP_STRING([--with-apparmor-cache-dir=dir],[path for apparmor_parser cache])], [with_apparmor_cache_dir=$withval], [with_apparmor_cache_dir=['${localstatedir}/cache/lxc/apparmor']]) # Container log path. By default, use $lxcpath. AC_MSG_CHECKING([Whether to place logfiles in container config path]) AC_ARG_ENABLE([configpath-log], [AS_HELP_STRING([--enable-configpath-log], [use logfiles in config path [default=no]])], [enable_configpath_log=$enableval], [enable_configpath_log=no]) AC_MSG_RESULT([$enable_configpath_log]) AM_CONDITIONAL([USE_CONFIGPATH_LOGS], [test "$enable_configpath_log" = "yes"]) if test "$enable_configpath_log" = "yes"; then default_log_path="${with_config_path}" else default_log_path="${localstatedir}/log/lxc" fi AC_ARG_WITH([log-path], [AS_HELP_STRING([--with-log-path=dir],[per container log path])], [with_log_path=$withval], [with_log_path=['${default_log_path}']]) # Expand some useful variables AS_AC_EXPAND(PREFIX, "$prefix") AS_AC_EXPAND(LIBDIR, "$libdir") AS_AC_EXPAND(BINDIR, "$bindir") AS_AC_EXPAND(SBINDIR, "$sbindir") AS_AC_EXPAND(LIBEXECDIR, "$libexecdir") AS_AC_EXPAND(INCLUDEDIR, "$includedir") AS_AC_EXPAND(SYSCONFDIR, "$sysconfdir") AS_AC_EXPAND(LXC_DEFAULT_CONFIG, "$sysconfdir/lxc/default.conf") AS_AC_EXPAND(DATADIR, "$datadir") AS_AC_EXPAND(LOCALSTATEDIR, "$localstatedir") AS_AC_EXPAND(DOCDIR, "$docdir") AS_AC_EXPAND(LXC_GENERATE_DATE, "$(date --utc --date=@${SOURCE_DATE_EPOCH:-$(date +%s)} '+%Y-%m-%d')") AS_AC_EXPAND(LXCPATH, "$with_config_path") AS_AC_EXPAND(LXC_GLOBAL_CONF, "$with_global_conf") AS_AC_EXPAND(LXC_USERNIC_CONF, "$with_usernic_conf") AS_AC_EXPAND(LXC_USERNIC_DB, "$with_usernic_db") AS_AC_EXPAND(LXC_DISTRO_SYSCONF, "$distrosysconf") AS_AC_EXPAND(LXCROOTFSMOUNT, "$with_rootfs_path") AS_AC_EXPAND(LXCTEMPLATEDIR, "$datadir/lxc/templates") AS_AC_EXPAND(LXCTEMPLATECONFIG, "$datadir/lxc/config") AS_AC_EXPAND(LXCHOOKDIR, "$datadir/lxc/hooks") AS_AC_EXPAND(LXCBINHOOKDIR, "$libexecdir/lxc/hooks") AS_AC_EXPAND(LXCINITDIR, "$libexecdir") AS_AC_EXPAND(LOGPATH, "$with_log_path") AS_AC_EXPAND(RUNTIME_PATH, "$with_runtime_path") AS_AC_EXPAND(APPARMOR_CACHE_DIR, "$with_apparmor_cache_dir") AC_SUBST(DEFAULT_CGROUP_PATTERN, ["$with_cgroup_pattern"]) # We need the install path so criu knows where to reference the hook scripts. AC_DEFINE_UNQUOTED([DATADIR], "$DATADIR", ["Prefix for shared files."]) # Check for some standard kernel headers AC_CHECK_HEADERS([linux/unistd.h linux/netlink.h linux/genetlink.h], [], AC_MSG_ERROR([Please install the Linux kernel headers.]), [#include ]) # Check for alternate C libraries AC_MSG_CHECKING(for bionic libc) AC_COMPILE_IFELSE([AC_LANG_PROGRAM( [[#ifndef __ANDROID__ error: Not bionic! #endif]])], [is_bionic=yes], [is_bionic=no]) if test "x$is_bionic" = "xyes"; then AC_DEFINE([IS_BIONIC], 1, [bionic libc]) AC_MSG_RESULT([yes]) else AC_MSG_RESULT([no]) fi AM_CONDITIONAL([IS_BIONIC], [test "x$is_bionic" = "xyes"]) # Configuration examples AC_ARG_ENABLE([pam], [AS_HELP_STRING([--enable-pam], [enable pam module [default=no]])], [enable_pam=$enableval], [enable_pam=no]) AM_CONDITIONAL([ENABLE_PAM], [test "x$enable_pam" = "xyes"]) AM_COND_IF([ENABLE_PAM], [AC_ARG_WITH( [pamdir], [AS_HELP_STRING([--with-pamdir=PATH],[Specify the directory where PAM modules are stored, or "none" if PAM modules are not to be built])], [exec_pamdir=$withval], [ if test "${prefix}" = "/usr"; then exec_pamdir="/lib${libdir##*/lib}/security" else exec_pamdir="\$(libdir)/security" fi ] )]) AM_CONDITIONAL([HAVE_PAM], [test x"$exec_pamdir" != "xnone"]) AM_COND_IF([ENABLE_PAM], [if test "z$exec_pamdir" != "znone"; then AC_ARG_VAR([PAM_CFLAGS], [C compiler flags for pam]) AC_ARG_VAR([PAM_LIBS], [linker flags for pam]) AC_CHECK_LIB( [pam], [pam_authenticate], [PAM_LIBS="-lpam"], [AC_MSG_ERROR([*** libpam not found.]) ]) AC_SUBST(PAM_LIBS) AC_SUBST([exec_pamdir]) fi]) # Some systems lack PR_CAPBSET_DROP definition => HAVE_DECL_PR_CAPBSET_DROP AC_CHECK_DECLS([PR_CAPBSET_DROP], [], [], [#include ]) # Some systems lack PR_{G,S}ET_NO_NEW_PRIVS definition => HAVE_DECL_PR_{G,S}ET_NO_NEW_PRIVS AC_CHECK_DECLS([PR_SET_NO_NEW_PRIVS], [], [], [#include ]) AC_CHECK_DECLS([PR_GET_NO_NEW_PRIVS], [], [], [#include ]) # Check for some headers AC_CHECK_HEADERS([pty.h sys/memfd.h sys/personality.h sys/resource.h sys/signalfd.h sys/timerfd.h utmpx.h]) AC_CHECK_HEADER([ifaddrs.h], AM_CONDITIONAL(HAVE_IFADDRS_H, true) AC_DEFINE(HAVE_IFADDRS_H, 1, [Have ifaddrs.h]), AM_CONDITIONAL(HAVE_IFADDRS_H, false)) AC_ARG_ENABLE([liburing], [AS_HELP_STRING([--enable-liburing], [enable liburing support [default=auto]])], [enable_liburing=$enableval], [enable_liburing=auto]) if test "x$enable_liburing" = "auto"; then AC_CHECK_LIB([uring],[__io_uring_sqring_wait],[enable_liburing=yes],[enable_liburing=no]) fi AM_CONDITIONAL([ENABLE_LIBURING], [test "x$enable_liburing" = "xyes"]) AM_COND_IF([ENABLE_LIBURING], [AC_CHECK_HEADER([liburing.h],[],[AC_MSG_ERROR([You must install the liburing development package in order to compile lxc])]) # We use __io_uring_sqring_wait as an indicator whether liburing is new enough to support poll. AC_CHECK_LIB([uring],[__io_uring_sqring_wait],[],[AC_MSG_ERROR([The liburing development package in order to compile lxc])]) AC_SUBST([LIBURING_LIBS], [-luring])]) # lookup major()/minor()/makedev() AC_HEADER_MAJOR # Check for some syscalls functions AC_CHECK_FUNCS([setns pivot_root sethostname unshare rand_r confstr faccessat gettid memfd_create move_mount open_tree execveat clone3 fsopen fspick fsconfig fsmount openat2 close_range statvfs mount_setattr sigdescr_np]) AC_CHECK_TYPES([__aligned_u64], [], [], [[#include ]]) AC_CHECK_TYPES([struct mount_attr], [], [], [[#include ]]) AC_CHECK_TYPES([struct open_how], [], [], [[#include ]]) AC_CHECK_TYPES([struct clone_args], [], [], [[#include ]]) AC_CHECK_MEMBERS([struct clone_args.set_tid],[],[],[[#include ]]) AC_CHECK_MEMBERS([struct clone_args.cgroup],[],[],[[#include ]]) # Check for strerror_r() support. Defines: # - HAVE_STRERROR_R if available # - HAVE_DECL_STRERROR_R if defined # - STRERROR_R_CHAR_P if it returns char * AC_FUNC_STRERROR_R # Check for some functions AC_CHECK_LIB(pthread, main) AC_CHECK_LIB(util, openpty) AC_CHECK_FUNCS([hasmntopt setmntent endmntent utmpxname]) AC_CHECK_FUNCS([getgrgid_r], AM_CONDITIONAL(HAVE_GETGRGID_R, true) AC_DEFINE(HAVE_GETGRGID_R,1,[Have getgrgid_r]), AM_CONDITIONAL(HAVE_GETGRGID_R, false)) AC_CHECK_FUNCS([getline], AM_CONDITIONAL(HAVE_GETLINE, true) AC_DEFINE(HAVE_GETLINE,1,[Have getline]), AM_CONDITIONAL(HAVE_GETLINE, false)) AC_CHECK_FUNCS([getsubopt], AM_CONDITIONAL(HAVE_GETSUBOPT, true) AC_DEFINE(HAVE_GETSUBOPT,1,[Have getsubopt]), AM_CONDITIONAL(HAVE_GETSUBOPT, false)) AC_CHECK_FUNCS([fgetln], AM_CONDITIONAL(HAVE_FGETLN, true) AC_DEFINE(HAVE_FGETLN,1,[Have fgetln]), AM_CONDITIONAL(HAVE_FGETLN, false)) AC_CHECK_FUNCS([keyctl], AM_CONDITIONAL(HAVE_KEYCTL, true) AC_DEFINE(HAVE_KEYCTL,1,[Have keyctl]), AM_CONDITIONAL(HAVE_KEYCTL, false)) AC_CHECK_FUNCS([openpty], AM_CONDITIONAL(HAVE_OPENPTY, true) AC_DEFINE(HAVE_OPENPTY,1,[Have openpty]), AM_CONDITIONAL(HAVE_OPENPTY, false)) AC_CHECK_FUNCS([prlimit], AM_CONDITIONAL(HAVE_PRLIMIT, true) AC_DEFINE(HAVE_PRLIMIT,1,[Have prlimit]), AM_CONDITIONAL(HAVE_PRLIMIT, false)) AC_CHECK_FUNCS([prlimit64], AM_CONDITIONAL(HAVE_PRLIMIT64, true) AC_DEFINE(HAVE_PRLIMIT64,1,[Have prlimit64]), AM_CONDITIONAL(HAVE_PRLIMIT64, false)) AC_CHECK_FUNCS([pthread_setcancelstate], AM_CONDITIONAL(HAVE_PTHREAD_SETCANCELSTATE, true) AC_DEFINE(HAVE_PTHREAD_SETCANCELSTATE,1,[Have pthread_setcancelstate]), AM_CONDITIONAL(HAVE_PTHREAD_SETCANCELSTATE, false)) AC_CHECK_FUNCS([strlcpy], AM_CONDITIONAL(HAVE_STRLCPY, true) AC_DEFINE(HAVE_STRLCPY,1,[Have strlcpy]), AM_CONDITIONAL(HAVE_STRLCPY, false)) AC_CHECK_FUNCS([strlcat], AM_CONDITIONAL(HAVE_STRLCAT, true) AC_DEFINE(HAVE_STRLCAT,1,[Have strlcat]), AM_CONDITIONAL(HAVE_STRLCAT, false)) AC_CHECK_FUNCS([strchrnul], AM_CONDITIONAL(HAVE_STRCHRNUL, true) AC_DEFINE(HAVE_STRCHRNUL,1,[Have strchnul]), AM_CONDITIONAL(HAVE_STRCHRNUL, false)) AC_CHECK_FUNCS([fmemopen], AM_CONDITIONAL(HAVE_FMEMOPEN, true) AC_DEFINE(HAVE_FMEMOPEN,1,[Have fmemopen]), AM_CONDITIONAL(HAVE_FMEMOPEN, false)) # HAVE_STRUCT_RTNL_LINK_STATS64={0,1} AC_CHECK_TYPES([struct rtnl_link_stats64], [], [], [[#include ]]) # Check for some libraries AX_PTHREAD AC_SEARCH_LIBS(clock_gettime, [rt]) # Hardening flags CC_CHECK_FLAGS_APPEND([AM_CFLAGS],[CFLAGS],[ \ -fPIE \ -Wvla \ -std=gnu11 \ -fms-extensions \ -fdiagnostics-color \ -Wimplicit-fallthrough=5 \ -Wcast-align \ -Wstrict-prototypes \ -fno-strict-aliasing \ -fstack-clash-protection \ -fstack-protector-strong \ --param=ssp-buffer-size=4 \ -g \ --mcet -fcf-protection \ -Werror=implicit-function-declaration \ -Wlogical-op \ -Wmissing-include-dirs \ -Wold-style-definition \ -Winit-self \ -Wunused-but-set-variable \ -Wfloat-equal \ -Wsuggest-attribute=noreturn \ -Werror=return-type \ -Werror=incompatible-pointer-types \ -Wformat=2 \ -Wshadow \ -Wendif-labels \ -Werror=overflow \ -fdiagnostics-show-option \ -Werror=shift-count-overflow \ -Werror=shift-overflow=2 \ -Wdate-time \ -Wnested-externs \ -fasynchronous-unwind-tables \ -pipe \ -fexceptions \ -Warray-bounds \ -Wrestrict \ -Wreturn-local-addr \ -fsanitize=cfi \ -Wstringop-overflow]) AC_SUBST(AM_CFLAGS) CC_CHECK_FLAGS_APPEND([AM_LDFLAGS],[LDFLAGS],[ \ -Wl,--as-needed \ -Wl,--gc-sections \ -Wl,-z,relro \ -Wl,-z,now \ -pie \ -Wl,-fuse-ld=gold]) AM_COND_IF([ENABLE_NO_UNDEFINED], [CC_CHECK_FLAGS_APPEND([AM_LDFLAGS],[LDFLAGS],[-Wl,--no-undefined])]) AC_SUBST(AM_LDFLAGS) CFLAGS="$CFLAGS -Wvla -std=gnu11 -fms-extensions" if test "x$enable_werror" = "xyes"; then CFLAGS="$CFLAGS -Werror" fi AC_ARG_ENABLE([thread-safety], [AS_HELP_STRING([--enable-thread-safety], [enforce thread-safety otherwise fail the build [default=yes]])], [enable_thread_safety=$enableval], [enable_thread_safety=yes]) AM_CONDITIONAL([ENFORCE_THREAD_SAFETY], [test "x$enable_thread_safety" = "xyes"]) if test "x$enable_thread_safety" = "xyes"; then AC_DEFINE([ENFORCE_THREAD_SAFETY], 1, [enforce thread-safety otherwise fail the build]) AC_MSG_RESULT([yes]) else AC_MSG_RESULT([no]) fi AC_ARG_ENABLE([coverity-build], [AS_HELP_STRING([--enable-coverity-build], [build for use with Coverity [default=no]])], [enable_coverity_build=$enableval], [enable_coverity_build=no]) AM_CONDITIONAL([ENABLE_COVERITY_BUILD], [test "x$enable_coverity_build" = "xyes"]) if test "x$enable_coverity_build" = "xyes"; then AC_DEFINE([ENABLE_COVERITY_BUILD], 1, [build for use with Coverity]) AC_MSG_RESULT([yes]) else AC_MSG_RESULT([no]) fi AC_ARG_ENABLE([dlog], [AS_HELP_STRING([--enable-dlog], [enable dlog support [default=no]])], [enable_dlog=$enableval], [enable_dlog=no]) AM_CONDITIONAL([ENABLE_DLOG], [test "x$enable_dlog" = "xyes"]) AM_COND_IF([ENABLE_DLOG], [PKG_CHECK_MODULES([DLOG],[dlog],[],[ AC_CHECK_HEADER([dlog.h],[],[AC_MSG_ERROR([You must install the dlog development package in order to compile lxc])]) AC_CHECK_LIB([dlog], [dlog_print],[],[AC_MSG_ERROR([You must install the dlog development package in order to compile lxc])]) AC_SUBST([DLOG_LIBS], [-ldlog]) ]) ]) AC_ARG_ENABLE([memfd-rexec], [AS_HELP_STRING([--enable-memfd-rexec], [enforce liblxc as a memfd to protect against certain symlink attacks [default=yes]])], [enable_memfd_rexec=$enableval], [enable_memfd_rexec=yes]) AM_CONDITIONAL([ENFORCE_MEMFD_REXEC], [test "x$enable_memfd_rexec" = "xyes"]) if test "x$enable_memfd_rexec" = "xyes"; then AC_DEFINE([ENFORCE_MEMFD_REXEC], 1, [Rexec liblxc as memfd]) AC_MSG_RESULT([yes]) else AC_MSG_RESULT([no]) fi # Files requiring some variable expansion AC_CONFIG_FILES([ Makefile lxc.pc lxc.spec coccinelle/Makefile config/Makefile config/apparmor/Makefile config/apparmor/abstractions/start-container config/selinux/Makefile config/bash/Makefile config/bash/lxc config/init/Makefile config/init/common/Makefile config/init/common/lxc-containers config/init/common/lxc-net config/init/systemd/Makefile config/init/systemd/lxc.service config/init/systemd/lxc@.service config/init/systemd/lxc-net.service config/init/systemd/lxc-monitord.service config/init/sysvinit/Makefile config/init/sysvinit/lxc-containers config/init/sysvinit/lxc-net config/init/upstart/lxc.conf config/init/upstart/lxc-net.conf config/init/upstart/Makefile config/etc/Makefile config/templates/Makefile config/templates/common.conf config/templates/common.conf.d/Makefile config/templates/nesting.conf config/templates/oci.common.conf config/templates/userns.conf config/yum/Makefile config/sysconfig/Makefile config/sysconfig/lxc doc/Makefile doc/api/Makefile doc/lxc-attach.sgml doc/lxc-autostart.sgml doc/lxc-cgroup.sgml doc/lxc-checkconfig.sgml doc/lxc-checkpoint.sgml doc/lxc-config.sgml doc/lxc-console.sgml doc/lxc-copy.sgml doc/lxc-create.sgml doc/lxc-destroy.sgml doc/lxc-device.sgml doc/lxc-execute.sgml doc/lxc-freeze.sgml doc/lxc-info.sgml doc/lxc-ls.sgml doc/lxc-monitor.sgml doc/lxc-snapshot.sgml doc/lxc-start.sgml doc/lxc-stop.sgml doc/lxc-top.sgml doc/lxc-unfreeze.sgml doc/lxc-unshare.sgml doc/lxc-update-config.sgml doc/lxc-user-nic.sgml doc/lxc-usernsexec.sgml doc/lxc-wait.sgml doc/pam_cgfs.sgml doc/lxc.conf.sgml doc/lxc.container.conf.sgml doc/lxc.system.conf.sgml doc/lxc-usernet.sgml doc/lxc.sgml doc/common_options.sgml doc/see_also.sgml doc/rootfs/Makefile doc/examples/Makefile doc/examples/lxc-macvlan.conf doc/examples/lxc-vlan.conf doc/examples/lxc-no-netns.conf doc/examples/lxc-empty-netns.conf doc/examples/lxc-phys.conf doc/examples/lxc-veth.conf doc/examples/lxc-complex.conf doc/ja/Makefile doc/ja/lxc-attach.sgml doc/ja/lxc-autostart.sgml doc/ja/lxc-cgroup.sgml doc/ja/lxc-checkconfig.sgml doc/ja/lxc-checkpoint.sgml doc/ja/lxc-config.sgml doc/ja/lxc-console.sgml doc/ja/lxc-copy.sgml doc/ja/lxc-create.sgml doc/ja/lxc-destroy.sgml doc/ja/lxc-device.sgml doc/ja/lxc-execute.sgml doc/ja/lxc-freeze.sgml doc/ja/lxc-info.sgml doc/ja/lxc-ls.sgml doc/ja/lxc-monitor.sgml doc/ja/lxc-snapshot.sgml doc/ja/lxc-start.sgml doc/ja/lxc-stop.sgml doc/ja/lxc-top.sgml doc/ja/lxc-unfreeze.sgml doc/ja/lxc-unshare.sgml doc/ja/lxc-update-config.sgml doc/ja/lxc-user-nic.sgml doc/ja/lxc-usernsexec.sgml doc/ja/lxc-wait.sgml doc/ja/pam_cgfs.sgml doc/ja/lxc.conf.sgml doc/ja/lxc.container.conf.sgml doc/ja/lxc.system.conf.sgml doc/ja/lxc-usernet.sgml doc/ja/lxc.sgml doc/ja/common_options.sgml doc/ja/see_also.sgml doc/ko/Makefile doc/ko/lxc-attach.sgml doc/ko/lxc-autostart.sgml doc/ko/lxc-cgroup.sgml doc/ko/lxc-checkconfig.sgml doc/ko/lxc-checkpoint.sgml doc/ko/lxc-config.sgml doc/ko/lxc-console.sgml doc/ko/lxc-copy.sgml doc/ko/lxc-create.sgml doc/ko/lxc-destroy.sgml doc/ko/lxc-device.sgml doc/ko/lxc-execute.sgml doc/ko/lxc-freeze.sgml doc/ko/lxc-info.sgml doc/ko/lxc-ls.sgml doc/ko/lxc-monitor.sgml doc/ko/lxc-snapshot.sgml doc/ko/lxc-start.sgml doc/ko/lxc-stop.sgml doc/ko/lxc-top.sgml doc/ko/lxc-unfreeze.sgml doc/ko/lxc-unshare.sgml doc/ko/lxc-user-nic.sgml doc/ko/lxc-usernsexec.sgml doc/ko/lxc-wait.sgml doc/ko/lxc.conf.sgml doc/ko/lxc.container.conf.sgml doc/ko/lxc.system.conf.sgml doc/ko/lxc-usernet.sgml doc/ko/lxc.sgml doc/ko/common_options.sgml doc/ko/see_also.sgml hooks/Makefile hooks/dhclient templates/Makefile templates/lxc-busybox templates/lxc-download templates/lxc-local templates/lxc-oci src/Makefile src/lxc/Makefile src/lxc/lxc.functions src/lxc/cmd/lxc-checkconfig src/lxc/cmd/lxc-update-config src/lxc/version.h src/tests/Makefile src/tests/lxc-test-usernic ]) AC_CONFIG_COMMANDS([default],[[]],[[]]) AC_OUTPUT # Configuration overview cat << EOF ---------------------------- Binaries - Command Line Tools: - lxc-attach: $enable_tools - lxc-autostart: $enable_tools - lxc-cgroup: $enable_tools - lxc-checkpoint: $enable_tools - lxc-config: $enable_tools - lxc-console: $enable_tools - lxc-copy: $enable_tools - lxc-create: $enable_tools - lxc-destroy: $enable_tools - lxc-device: $enable_tools - lxc-execute: $enable_tools - lxc-freeze: $enable_tools - lxc-info: $enable_tools - lxc-ls: $enable_tools - lxc-monitor: $enable_tools - lxc-snapshot: $enable_tools - lxc-start: $enable_tools - lxc-stop: $enable_tools - lxc-top: $enable_tools - lxc-unfreeze: $enable_tools - lxc-unshare: $enable_tools - lxc-wait: $enable_tools - liblxc Commands: - lxc-checkconfig: $enable_commands - lxc-update-config: $enable_commands - lxc-init: $enable_commands - lxc-monitord: $enable_commands - lxc-user-nic: $enable_commands - lxc-usernsexec: $enable_commands - static binaries: $enable_static_binaries Environment: - compiler: $CC - cflags: ${AM_CFLAGS} ${PTHREAD_CFLAGS} - ldflags: ${AM_LDFLAGS} ${PTHREAD_LIBS} - distribution: $with_distro - init script type(s): $init_script - rpath: $enable_rpath - OpenSSL: $enable_openssl - Bash integration: $enable_bash Security features: - Apparmor: $enable_apparmor - Linux capabilities: $enable_capabilities - seccomp: $enable_seccomp - SELinux: $enable_selinux - memfd rexec: $enable_memfd_rexec PAM: - PAM module: $enable_pam - cgroup PAM module: $exec_pamdir Documentation: - examples: $enable_examples - API documentation: $enable_api_docs - user documentation: $enable_doc Debugging: - Sanitizers: $enable_sanitizers - Coverity: $enable_coverity_build - mutex debugging: $enable_mutex_debugging - tests: $enable_tests - fuzzers: $enable_fuzzers Paths: - Logs in configpath: $enable_configpath_log Thread-safety: - enforce: $enable_thread_safety Dlog: - enable: $enable_dlog EOF