mirror of
https://git.proxmox.com/git/mirror_lxc
synced 2025-04-28 18:42:47 +00:00
1154 lines
38 KiB
Plaintext
1154 lines
38 KiB
Plaintext
AC_PREREQ([2.69])
|
|
|
|
m4_define([lxc_devel], 0)
|
|
m4_define([lxc_version_major], 4)
|
|
m4_define([lxc_version_minor], 0)
|
|
m4_define([lxc_version_micro], 12)
|
|
m4_define([lxc_version_beta], [])
|
|
|
|
m4_define([lxc_abi_major], 1)
|
|
m4_define([lxc_abi_minor], 7)
|
|
m4_define([lxc_abi_micro], 0)
|
|
m4_define([lxc_abi], [lxc_abi_major.lxc_abi_minor.lxc_abi_micro])
|
|
|
|
m4_define([lxc_version_base], [lxc_version_major.lxc_version_minor.lxc_version_micro])
|
|
m4_define([lxc_version],
|
|
[ifelse(lxc_devel, 1,
|
|
ifelse(lxc_version_beta, [], [lxc_version_base], [lxc_version_base.lxc_version_beta])-devel,
|
|
ifelse(lxc_version_beta, [], [lxc_version_base], [lxc_version_base.lxc_version_beta]))])
|
|
|
|
AC_INIT([lxc],[lxc_version])
|
|
|
|
# We need pkg-config
|
|
PKG_PROG_PKG_CONFIG
|
|
|
|
AC_SUBST(LXC_VERSION_BASE, lxc_version_base)
|
|
AC_SUBST(LXC_VERSION_BETA, lxc_version_beta)
|
|
|
|
AC_SUBST([LXC_VERSION_MAJOR], [lxc_version_major])
|
|
AC_SUBST([LXC_VERSION_MINOR], [lxc_version_minor])
|
|
AC_SUBST([LXC_VERSION_MICRO], [lxc_version_micro])
|
|
AC_SUBST([LXC_VERSION], [lxc_version])
|
|
AC_SUBST([LXC_DEVEL], [lxc_devel])
|
|
|
|
AC_SUBST([LXC_ABI_MAJOR], [lxc_abi_major])
|
|
AC_SUBST([LXC_ABI_MINOR], [lxc_abi_minor])
|
|
AC_SUBST([LXC_ABI_MICRO], [lxc_abi_micro])
|
|
AC_SUBST([LXC_ABI], [lxc_abi])
|
|
|
|
AC_CONFIG_SRCDIR([configure.ac])
|
|
AC_CONFIG_AUX_DIR([config])
|
|
AC_CONFIG_HEADERS([src/config.h])
|
|
AM_INIT_AUTOMAKE([-Wall -Werror -Wno-portability subdir-objects])
|
|
AC_CANONICAL_HOST
|
|
AM_PROG_CC_C_O
|
|
AC_USE_SYSTEM_EXTENSIONS
|
|
AC_SYS_LARGEFILE
|
|
AC_GNU_SOURCE
|
|
|
|
# Test if we have a new enough compiler.
|
|
AC_COMPILE_IFELSE([AC_LANG_PROGRAM([[
|
|
#define GCC_VERSION \
|
|
(__GNUC__ * 10000 + __GNUC_MINOR__ * 100 + __GNUC_PATCHLEVEL__)
|
|
|
|
#define CLANG_VERSION \
|
|
(__clang_major__ * 10000 + __clang_minor__ * 100 + __clang_patchlevel__)
|
|
|
|
#if GCC_VERSION < 40700 && CLANG_VERSION < 10000
|
|
#error Sorry, your compiler is too old - please upgrade it
|
|
#endif
|
|
]])], [valid_compiler=yes], [valid_compiler=no])
|
|
if test "x$valid_compiler" = "xno"; then
|
|
AC_MSG_ERROR([Sorry, your compiler is too old - please upgrade it])
|
|
fi
|
|
|
|
AC_PROG_GCC_TRADITIONAL
|
|
AC_PROG_CXX
|
|
AC_ENABLE_SHARED
|
|
AC_ENABLE_STATIC
|
|
# Check binaries
|
|
AC_PROG_SED
|
|
case $CC in clang*)
|
|
AC_CHECK_TOOL([AR], llvm-ar)
|
|
AC_CHECK_TOOL([NM], llvm-nm)
|
|
AC_CHECK_TOOL([OBJCOPY], llvm-objcopy)
|
|
AC_CHECK_TOOL([RANLIB], llvm-ranlib)
|
|
esac
|
|
|
|
# libtool
|
|
LT_INIT
|
|
AC_SUBST([LIBTOOL_DEPS])
|
|
|
|
# Detect the distribution. This is used for the default configuration and
|
|
# for some distro-specific build options.
|
|
AC_MSG_CHECKING([host distribution])
|
|
AC_ARG_WITH(distro, AS_HELP_STRING([--with-distro=DISTRO], [Specify the Linux distribution to target: One of redhat, redhatenterpriseserver, oracle, centos, fedora, suse, gentoo, debian, arch, slackware, plamo, paldo, openmandriva, pardus, sparclinux, altlinux.]))
|
|
if type lsb_release >/dev/null 2>&1 && test "z$with_distro" = "z"; then
|
|
with_distro=$(lsb_release -is)
|
|
fi
|
|
if test "z$with_distro" = "z"; then
|
|
AC_CHECK_FILE(/etc/redhat-release,with_distro="redhat")
|
|
AC_CHECK_FILE(/etc/oracle-release,with_distro="oracle")
|
|
AC_CHECK_FILE(/etc/sparclinux-release,with_distro="sparclinux")
|
|
AC_CHECK_FILE(/etc/centos-release,with_distro="centos")
|
|
AC_CHECK_FILE(/etc/fedora-release,with_distro="fedora")
|
|
AC_CHECK_FILE(/etc/SuSE-release,with_distro="suse")
|
|
AC_CHECK_FILE(/etc/gentoo-release,with_distro="gentoo")
|
|
AC_CHECK_FILE(/etc/debian_version,with_distro="debian")
|
|
AC_CHECK_FILE(/etc/arch-release,with_distro="arch")
|
|
AC_CHECK_FILE(/etc/slackware-version,with_distro="slackware")
|
|
AC_CHECK_FILE(/etc/plamo-version,with_distro="plamo")
|
|
AC_CHECK_FILE(/etc/frugalware-release,with_distro="frugalware")
|
|
AC_CHECK_FILE(/etc/mandrakelinux-release, with_distro="openmandriva")
|
|
AC_CHECK_FILE(/etc/mandriva-release,with_distro="openmandriva")
|
|
AC_CHECK_FILE(/etc/pardus-release,with_distro="pardus")
|
|
AC_CHECK_FILE(/etc/altlinux-release,with_distro="altlinux")
|
|
AC_CHECK_FILE(/etc/pld-release,with_distro="pld")
|
|
fi
|
|
with_distro=$(echo ${with_distro} | tr '[[:upper:]]' '[[:lower:]]')
|
|
|
|
if test "z$with_distro" = "zforsparc"; then
|
|
with_distro="sparclinux"
|
|
fi
|
|
|
|
if test "z$with_distro" = "z"; then
|
|
with_distro="unknown"
|
|
fi
|
|
case $with_distro in
|
|
ubuntu|raspbian)
|
|
distroconf=default.conf.lxcbr
|
|
distrosysconf="$sysconfdir/default"
|
|
;;
|
|
redhat|redhatenterpriseserver|centos|fedora|oracle|oracleserver|sparclinux|altlinux|suse|opensuse*|plamo|pld)
|
|
distroconf=default.conf.lxcbr
|
|
distrosysconf="$sysconfdir/sysconfig"
|
|
;;
|
|
*)
|
|
distroconf=default.conf.unknown
|
|
distrosysconf="$sysconfdir/default"
|
|
;;
|
|
esac
|
|
AC_MSG_RESULT([$with_distro])
|
|
AM_CONDITIONAL([HAVE_DEBIAN], [test x"$with_distro" = "xdebian" -o x"$with_distro" = "xubuntu" -o x"$with_distro" = "xraspbian"])
|
|
AM_CONDITIONAL([DISTRO_UBUNTU], [test "x$with_distro" = "xubuntu"])
|
|
|
|
AC_CONFIG_LINKS([config/etc/default.conf:config/etc/${distroconf}])
|
|
|
|
# Check for init system type
|
|
AC_MSG_CHECKING([for init system type])
|
|
AC_ARG_WITH([init-script],
|
|
[AS_HELP_STRING([--with-init-script@<:@=TYPE@<:@,TYPE,...@:>@@:>@],
|
|
[Type(s) of init script to install: sysvinit, systemd, upstart,
|
|
distro @<:@default=distro@:>@])],[],[with_init_script=distro])
|
|
case "$with_init_script" in
|
|
distro)
|
|
case $with_distro in
|
|
fedora|altlinux|opensuse*)
|
|
init_script=systemd
|
|
;;
|
|
redhat|redhatenterpriseserver|oracle|oracleserver|sparclinux|plamo)
|
|
init_script=sysvinit
|
|
;;
|
|
centos)
|
|
init_script=sysvinit,systemd
|
|
;;
|
|
debian|raspbian|ubuntu)
|
|
init_script=upstart,systemd
|
|
;;
|
|
pld)
|
|
init_script=sysvinit,upstart,systemd
|
|
;;
|
|
*)
|
|
echo -n "Linux distribution init system unknown."
|
|
init_script=
|
|
;;
|
|
esac
|
|
;;
|
|
*)
|
|
init_script=$with_init_script
|
|
;;
|
|
esac
|
|
|
|
# Check valid init systems were given, run in subshell so we don't mess up IFS
|
|
(IFS="," ; for init_sys in $init_script;
|
|
do
|
|
case "$init_sys" in
|
|
none|sysvinit|systemd|upstart)
|
|
;;
|
|
*)
|
|
exit 1
|
|
;;
|
|
esac
|
|
done) || AC_MSG_ERROR([Unknown init system type in $init_script])
|
|
|
|
AM_CONDITIONAL([INIT_SCRIPT_SYSV], [echo "$init_script" |grep -q "sysvinit"])
|
|
AM_CONDITIONAL([INIT_SCRIPT_SYSTEMD], [echo "$init_script" |grep -q "systemd"])
|
|
AM_CONDITIONAL([INIT_SCRIPT_UPSTART], [echo "$init_script" |grep -q "upstart"])
|
|
AC_MSG_RESULT($init_script)
|
|
|
|
# systemd unit dir
|
|
AC_ARG_WITH([systemdsystemunitdir],
|
|
AS_HELP_STRING([--with-systemdsystemunitdir=DIR], [Directory for systemd service files]),
|
|
[with_systemdsystemunitdir=$withval],
|
|
[with_systemdsystemunitdir=$($PKG_CONFIG --variable=systemdsystemunitdir systemd)])
|
|
if test -z "$with_systemdsystemunitdir"; then
|
|
with_systemdsystemunitdir=/lib/systemd/system
|
|
fi
|
|
if test "x$with_systemdsystemunitdir" != "xno"; then
|
|
AC_SUBST([SYSTEMD_UNIT_DIR], [$with_systemdsystemunitdir])
|
|
fi
|
|
|
|
AC_ARG_ENABLE([werror],
|
|
[AS_HELP_STRING([--disable-werror], [do not treat warnings as errors])],
|
|
[enable_werror=$enableval], [enable_werror=yes])
|
|
|
|
AC_ARG_ENABLE([no_undefined],
|
|
[AS_HELP_STRING([--disable-no-undefined], [do not pass -Wl,--no-undefined])],
|
|
[enable_no_undefined=$enableval], [enable_no_undefined=yes])
|
|
AM_CONDITIONAL([ENABLE_NO_UNDEFINED], [test "x$enable_no_undefined" = "xyes"])
|
|
|
|
AC_ARG_ENABLE([fuzzers],
|
|
[AS_HELP_STRING([--enable-fuzzers], [compile with fuzzers])],
|
|
[enable_fuzzers=$enableval], [enable_fuzzers=no])
|
|
AM_CONDITIONAL([ENABLE_FUZZERS], [test "x$enable_fuzzers" = "xyes"])
|
|
|
|
AM_CONDITIONAL([OSS_FUZZ], [test "x$LIB_FUZZING_ENGINE" != x])
|
|
|
|
# Allow disabling rpath
|
|
AC_ARG_ENABLE([rpath],
|
|
[AS_HELP_STRING([--enable-rpath], [set rpath in executables [default=no]])],
|
|
[enable_rpath=$enableval], [enable_rpath=no])
|
|
AM_CONDITIONAL([ENABLE_RPATH], [test "x$enable_rpath" = "xyes"])
|
|
|
|
# Documentation (manpages)
|
|
AC_ARG_ENABLE([doc],
|
|
[AS_HELP_STRING([--enable-doc], [make man pages [default=auto]])],
|
|
[enable_doc=$enableval], [enable_doc=auto])
|
|
|
|
if test "x$enable_doc" = "xyes" -o "x$enable_doc" = "xauto"; then
|
|
db2xman=""
|
|
dbparsers="docbook2X2man docbook2x-man db2x_docbook2man docbook2man docbook-to-man"
|
|
|
|
AC_MSG_CHECKING(for docbook2x-man)
|
|
for name in ${dbparsers}; do
|
|
if "$name" --help >/dev/null 2>&1; then
|
|
db2xman="$name"
|
|
break;
|
|
fi
|
|
done
|
|
|
|
if test -n "${db2xman}"; then
|
|
AC_MSG_RESULT([${db2xman}])
|
|
enable_doc="yes"
|
|
else
|
|
AC_MSG_RESULT([no])
|
|
if test "x$enable_doc" = "xyes"; then
|
|
AC_MSG_ERROR([docbook2x-man is required, but could not be found])
|
|
fi
|
|
enable_doc="no"
|
|
fi
|
|
|
|
AC_SUBST(db2xman)
|
|
fi
|
|
AM_CONDITIONAL([ENABLE_DOCBOOK], [test "x$db2xman" != "x"])
|
|
AM_CONDITIONAL([USE_DOCBOOK2X], [test "x$db2xman" != "xdocbook2man"])
|
|
|
|
if test "x$db2xman" = "xdocbook2man"; then
|
|
docdtd="\"-//Davenport//DTD DocBook V3.0//EN\""
|
|
else
|
|
docdtd="\"-//OASIS//DTD DocBook XML\" \"http://www.oasis-open.org/docbook/xml/4.5/docbookx.dtd\""
|
|
fi
|
|
AC_SUBST(docdtd)
|
|
|
|
# Documentation (API)
|
|
AC_ARG_ENABLE([api-docs],
|
|
[AS_HELP_STRING([--enable-api-docs], [make API documentation [default=auto]])],
|
|
[enable_api_docs=$enableval], [enable_api_docs=auto])
|
|
|
|
if test "x$enable_api_docs" = "xyes" -o "x$enable_api_docs" = "xauto"; then
|
|
AC_CHECK_PROGS([HAVE_DOXYGEN],[doxygen])
|
|
AC_SUBST([HAVE_DOXYGEN])
|
|
|
|
if test "x$HAVE_DOXYGEN" != "x"; then
|
|
enable_api_docs="yes"
|
|
else
|
|
if test "x$enable_api_docs" = "xyes"; then
|
|
AC_MSG_ERROR([doxygen is required, but could not be found])
|
|
fi
|
|
enable_api_docs="no"
|
|
fi
|
|
fi
|
|
|
|
AM_CONDITIONAL([ENABLE_API_DOCS], [test "x$HAVE_DOXYGEN" != "x"])
|
|
|
|
AC_CONFIG_MACRO_DIRS([config])
|
|
|
|
# Apparmor
|
|
AC_ARG_ENABLE([apparmor],
|
|
[AS_HELP_STRING([--enable-apparmor], [enable apparmor support [default=auto]])],
|
|
[enable_apparmor=$enableval], [enable_apparmor=auto])
|
|
|
|
if test "$enable_apparmor" = "auto" ; then
|
|
AC_CHECK_LIB([apparmor],[aa_change_profile],[enable_apparmor=yes], [enable_apparmor=no])
|
|
fi
|
|
AM_CONDITIONAL([ENABLE_APPARMOR], [test "x$enable_apparmor" = "xyes"])
|
|
|
|
# OpenSSL
|
|
# libssl-dev
|
|
AC_ARG_ENABLE([openssl],
|
|
[AS_HELP_STRING([--enable-openssl], [enable OpenSSL support [default=auto]])],
|
|
[enable_openssl=$enableval], [enable_openssl=auto])
|
|
|
|
if test "$enable_openssl" = "auto" ; then
|
|
AC_CHECK_LIB([ssl], [OPENSSL_init_ssl], [enable_openssl=yes], [enable_openssl=no])
|
|
|
|
fi
|
|
AM_CONDITIONAL([ENABLE_OPENSSL], [test "x$enable_openssl" = "xyes"])
|
|
|
|
AC_ARG_ENABLE([static-binaries],
|
|
[AS_HELP_STRING([--enable-static-binaries], [build all binaries statically [default=no]])],
|
|
[enable_static_binaries=$enableval], [enable_static_binaries=no])
|
|
AM_CONDITIONAL([ENABLE_STATIC_BINARIES], [test "x$enable_static_binaries" = "xyes"])
|
|
|
|
AM_COND_IF([ENABLE_OPENSSL],
|
|
[AC_CHECK_HEADER([openssl/engine.h],[],[AC_MSG_ERROR([You must install the OpenSSL development package in order to compile lxc])])
|
|
AM_COND_IF([ENABLE_STATIC_BINARIES], [AC_SUBST([OPENSSL_LIBS], '-lssl -lcrypto -ldl')], [AC_SUBST([OPENSSL_LIBS], '-lssl -lcrypto')])])
|
|
|
|
# SELinux
|
|
AC_ARG_ENABLE([selinux],
|
|
[AS_HELP_STRING([--enable-selinux], [enable SELinux support [default=auto]])],
|
|
[enable_selinux=$enableval], [enable_selinux=auto])
|
|
|
|
if test "x$enable_selinux" = xauto; then
|
|
AC_CHECK_LIB([selinux],[setexeccon_raw],[enable_selinux=yes],[enable_selinux=no])
|
|
fi
|
|
AM_CONDITIONAL([ENABLE_SELINUX], [test "x$enable_selinux" = "xyes"])
|
|
AM_COND_IF([ENABLE_SELINUX],
|
|
[AC_CHECK_HEADER([selinux/selinux.h],[],[AC_MSG_ERROR([You must install the SELinux development package in order to compile lxc])])
|
|
AC_CHECK_LIB([selinux], [setexeccon_raw],[true],[AC_MSG_ERROR([You must install the SELinux development package in order to compile lxc])])
|
|
AC_SUBST([SELINUX_LIBS], [-lselinux])])
|
|
|
|
# Seccomp syscall filter
|
|
AC_ARG_ENABLE([seccomp],
|
|
[AS_HELP_STRING([--enable-seccomp], [enable seccomp support [default=auto]])],
|
|
[enable_seccomp=$enableval], [enable_seccomp=auto])
|
|
|
|
if test "x$enable_seccomp" = "xauto" ; then
|
|
AC_CHECK_LIB([seccomp],[seccomp_init],[enable_seccomp=yes],[enable_seccomp=no])
|
|
fi
|
|
AM_CONDITIONAL([ENABLE_SECCOMP], [test "x$enable_seccomp" = "xyes"])
|
|
|
|
AM_COND_IF([ENABLE_SECCOMP],
|
|
[PKG_CHECK_MODULES([SECCOMP],[libseccomp],[],[
|
|
AC_CHECK_HEADER([seccomp.h],[],[AC_MSG_ERROR([You must install the seccomp development package in order to compile lxc])])
|
|
AC_CHECK_LIB([seccomp], [seccomp_init],[],[AC_MSG_ERROR([You must install the seccomp development package in order to compile lxc])])
|
|
AC_SUBST([SECCOMP_LIBS], [-lseccomp])
|
|
])
|
|
# HAVE_SCMP_FILTER_CTX=1 will tell us we have libseccomp api >= 1.0.0
|
|
OLD_CFLAGS="$CFLAGS"
|
|
CFLAGS="$CFLAGS $SECCOMP_CFLAGS"
|
|
AC_CHECK_TYPES([scmp_filter_ctx], [], [], [[#include <seccomp.h>]])
|
|
AC_CHECK_DECLS([seccomp_notify_fd], [], [], [[#include <seccomp.h>]])
|
|
AC_CHECK_TYPES([struct seccomp_notif_sizes], [], [], [[#include <seccomp.h>]])
|
|
AC_CHECK_DECLS([seccomp_syscall_resolve_name_arch], [], [], [[#include <seccomp.h>]])
|
|
CFLAGS="$OLD_CFLAGS"
|
|
])
|
|
|
|
AC_MSG_CHECKING(for static libcap)
|
|
# Check for static libcap, make sure the function checked for differs from the
|
|
# the one checked below so the cache doesn't give a wrong answer
|
|
OLD_CFLAGS="$CFLAGS"
|
|
OLD_CPPFLAGS="$CPPFLAGS"
|
|
OLD_LDFLAGS="$LDFLAGS"
|
|
OLD_LIBS="$LIBS"
|
|
CFLAGS=""
|
|
CPPFLAGS=""
|
|
LDFLAGS="-static"
|
|
LIBS="-lcap"
|
|
AC_LINK_IFELSE([
|
|
AC_LANG_SOURCE(
|
|
[[int main() { return 0; }]]
|
|
)],[have_static_libcap=yes],[have_static_libcap=no])
|
|
AM_CONDITIONAL([HAVE_STATIC_LIBCAP], [test "x$have_static_libcap" = "xyes"])
|
|
if test "x$have_static_libcap" = "xyes"; then
|
|
AC_DEFINE([HAVE_STATIC_LIBCAP], 1, [Have static libcap])
|
|
AC_MSG_RESULT([yes])
|
|
else
|
|
AC_MSG_RESULT([no])
|
|
fi
|
|
CPPFLAGS="$OLD_CPPFLAGS"
|
|
CFLAGS="$OLD_CFLAGS"
|
|
LDFLAGS="$OLD_LDFLAGS"
|
|
LIBS="$OLD_LIBS"
|
|
|
|
|
|
# Linux capabilities
|
|
AC_ARG_ENABLE([capabilities],
|
|
[AS_HELP_STRING([--enable-capabilities], [enable kernel capabilities support [default=auto]])],
|
|
[enable_capabilities=$enableval], [enable_capabilities=auto])
|
|
|
|
if test "x$enable_capabilities" = "xauto"; then
|
|
AC_CHECK_LIB([cap],[cap_set_proc],[enable_capabilities=yes],[enable_capabilities=no])
|
|
fi
|
|
AM_CONDITIONAL([ENABLE_CAP], [test "x$enable_capabilities" = "xyes"])
|
|
|
|
AM_COND_IF([ENABLE_CAP],
|
|
[AC_CHECK_HEADER([sys/capability.h],[],[AC_MSG_ERROR([You must install the libcap development package in order to compile lxc])])
|
|
AC_CHECK_LIB(cap,cap_set_proc,[],[AC_MSG_ERROR([You must install the libcap development package in order to compile lxc])])
|
|
# Test whether we support getting file capabilities via cap_get_file().
|
|
AC_CHECK_LIB(cap,cap_get_file, AC_DEFINE(LIBCAP_SUPPORTS_FILE_CAPABILITIES,1,[Have cap_get_file]),[],[])
|
|
AC_SUBST([CAP_LIBS], [-lcap])])
|
|
|
|
# Configuration examples
|
|
AC_ARG_ENABLE([examples],
|
|
[AS_HELP_STRING([--enable-examples], [install examples [default=yes]])],
|
|
[enable_examples=$enableval], [enable_examples=yes])
|
|
AM_CONDITIONAL([ENABLE_EXAMPLES], [test "x$enable_examples" = "xyes"])
|
|
|
|
# Enable dumping stack traces
|
|
AC_ARG_ENABLE([mutex-debugging],
|
|
[AS_HELP_STRING([--enable-mutex-debugging], [Makes mutexes to report error and provide stack trace [default=no]])],
|
|
[enable_mutex_debugging=$enableval], [enable_mutex_debugging=no])
|
|
AM_CONDITIONAL([MUTEX_DEBUGGING], [test "x$enable_mutex_debugging" = "xyes"])
|
|
|
|
AM_COND_IF([MUTEX_DEBUGGING],
|
|
AC_DEFINE_UNQUOTED([MUTEX_DEBUGGING], 1, [Enabling mutex debugging]))
|
|
|
|
# Not in older autoconf versions
|
|
# AS_VAR_COPY(DEST, SOURCE)
|
|
# -------------------------
|
|
# Set the polymorphic shell variable DEST to the contents of the polymorphic
|
|
# shell variable SOURCE.
|
|
m4_ifdef([AS_VAR_COPY], [],
|
|
[AC_DEFUN([AS_VAR_COPY],
|
|
[AS_LITERAL_IF([$1[]$2], [$1=$$2], [eval $1=\$$2])])
|
|
])
|
|
|
|
dnl PKG_CHECK_VAR was introduced with pkg-config 0.28
|
|
m4_ifdef([PKG_CHECK_VAR], [],
|
|
[AC_DEFUN([PKG_CHECK_VAR],
|
|
[AC_REQUIRE([PKG_PROG_PKG_CONFIG])dnl
|
|
AC_ARG_VAR([$1], [value of $3 for $2, overriding pkg-config])dnl
|
|
_PKG_CONFIG([$1], [variable="][$3]["], [$2])
|
|
AS_VAR_COPY([$1], [pkg_cv_][$1])
|
|
AS_VAR_IF([$1], [""], [$5], [$4])dnl
|
|
])# PKG_CHECK_VAR
|
|
])
|
|
|
|
# Optional bash integration
|
|
AC_ARG_ENABLE([bash],
|
|
[AS_HELP_STRING([--enable-bash], [build bash integration [default=yes]])],
|
|
[enable_bash=$enableval], [enable_bash=yes])
|
|
AM_CONDITIONAL([ENABLE_BASH], [test "x$enable_bash" = "xyes"])
|
|
|
|
AM_COND_IF([ENABLE_BASH],
|
|
[AC_MSG_CHECKING([bash completion directory])
|
|
PKG_CHECK_VAR(bashcompdir, [bash-completion], [completionsdir], ,
|
|
bashcompdir="${sysconfdir}/bash_completion.d")
|
|
AC_MSG_RESULT([$bashcompdir])
|
|
AC_SUBST(bashcompdir)
|
|
])
|
|
|
|
# Build the command line tools
|
|
AC_ARG_ENABLE([tools],
|
|
[AS_HELP_STRING([--enable-tools], [build the command line tools [default=yes]])],
|
|
[enable_tools=$enableval], [enable_tools=yes])
|
|
AM_CONDITIONAL([ENABLE_TOOLS], [test "x$enable_tools" = "xyes"])
|
|
|
|
# Build the liblxc commands
|
|
AC_ARG_ENABLE([commands],
|
|
[AS_HELP_STRING([--enable-commands], [build the liblxc commands [default=yes]])],
|
|
[enable_commands=$enableval], [enable_commands=yes])
|
|
AM_CONDITIONAL([ENABLE_COMMANDS], [test "x$enable_commands" = "xyes"])
|
|
|
|
AC_ARG_ENABLE([static-binaries],
|
|
[AS_HELP_STRING([--enable-static-binaries], [build all binaries statically [default=no]])],
|
|
[enable_static_binaries=$enableval], [enable_static_binaries=no])
|
|
AM_CONDITIONAL([ENABLE_STATIC_BINARIES], [test "x$enable_static_binaries" = "xyes"])
|
|
|
|
AC_ARG_ENABLE([sanitizers],
|
|
[AS_HELP_STRING([--enable-sanitizers], [build with sanitizers enabled [default=no]])],
|
|
[enable_sanitizers=$enableval], [enable_sanitizers=no])
|
|
AM_CONDITIONAL([ENABLE_SANITIZERS], [test "x$enable_sanitizers" = "xyes"])
|
|
if test "x$enable_sanitizers" = "xyes"; then
|
|
AC_DEFINE([ENABLE_SANITIZERS], 1, [build with sanitizers enabled])
|
|
|
|
CC_CHECK_FLAGS_APPEND([AM_CFLAGS],[CFLAGS],[ \
|
|
-fsanitize=address \
|
|
-fsanitize=undefined \
|
|
-fno-optimize-sibling-calls \
|
|
-fno-omit-frame-pointer])
|
|
AC_SUBST(AM_CFLAGS)
|
|
|
|
CC_CHECK_FLAGS_APPEND([AM_LDFLAGS],[LDFLAGS],[ \
|
|
-fsanitize=address \
|
|
-fsanitize=undefined])
|
|
AC_SUBST(AM_LDFLAGS)
|
|
|
|
AC_MSG_RESULT([yes])
|
|
else
|
|
AC_MSG_RESULT([no])
|
|
fi
|
|
|
|
if test "x$enable_fuzzers" = "xyes"; then
|
|
if test "x$LIB_FUZZING_ENGINE" = x; then
|
|
CC_CHECK_FLAGS_APPEND([AM_CFLAGS],[CFLAGS],[ \
|
|
-DFUZZING_BUILD_MODE_UNSAFE_FOR_PRODUCTION \
|
|
-DRUN_ON_OSS_FUZZ=0 \
|
|
-fsanitize=fuzzer-no-link])
|
|
else
|
|
CC_CHECK_FLAGS_APPEND([AM_CFLAGS],[CFLAGS],[ \
|
|
-DRUN_ON_OSS_FUZZ=1])
|
|
fi
|
|
fi
|
|
|
|
if test "x$enable_fuzzers" = "xno" -a "x$enable_sanitizers" = "xno"; then
|
|
CC_CHECK_FLAGS_APPEND([AM_CFLAGS],[CFLAGS],[-flto=thin])
|
|
fi
|
|
AC_SUBST(AM_CFLAGS)
|
|
|
|
# Optional test binaries
|
|
AC_ARG_ENABLE([tests],
|
|
[AS_HELP_STRING([--enable-tests], [build test/example binaries [default=no]])],
|
|
[enable_tests=$enableval], [enable_tests=no])
|
|
AM_CONDITIONAL([ENABLE_TESTS], [test "x$enable_tests" = "xyes"])
|
|
|
|
# Allow overriding the default runtime dir (/run)
|
|
AC_ARG_WITH([runtime-path],
|
|
[AS_HELP_STRING([--with-runtime-path=dir], [runtime directory (default: /run)])],
|
|
[with_runtime_path=$withval], [with_runtime_path=['/run']])
|
|
|
|
# LXC container path, where the containers are actually stored
|
|
# This is overridden by an entry in the file called LXCCONF
|
|
# (i.e. /etc/lxc/lxc.conf)
|
|
AC_ARG_WITH([config-path],
|
|
[AS_HELP_STRING([--with-config-path=dir], [lxc configuration repository path])],
|
|
[with_config_path=$withval], [with_config_path=['${localstatedir}/lib/lxc']])
|
|
|
|
# The path of the global lxc configuration file.
|
|
AC_ARG_WITH([global-conf],
|
|
[AS_HELP_STRING([--with-global-conf=dir], [global lxc configuration file])],
|
|
[with_global_conf=$withval], [with_global_conf=['${sysconfdir}/lxc/lxc.conf']])
|
|
|
|
# The path of the userns network configuration file
|
|
AC_ARG_WITH([usernic-conf],
|
|
[AS_HELP_STRING([--with-usernic-conf], [user network interface configuration file])],
|
|
[with_usernic_conf=$withval], [with_usernic_conf=['${sysconfdir}/lxc/lxc-usernet']])
|
|
|
|
# The path of the runtime usernic database
|
|
AC_ARG_WITH([usernic-db],
|
|
[AS_HELP_STRING([--with-usernic-db], [lxc user nic database])],
|
|
[with_usernic_db=$withval], [with_usernic_db=['${with_runtime_path}/lxc/nics']])
|
|
|
|
# Rootfs path, where the container mount structure is assembled
|
|
AC_ARG_WITH([rootfs-path],
|
|
[AS_HELP_STRING([--with-rootfs-path=dir], [lxc rootfs mount point])],
|
|
[with_rootfs_path=$withval], [with_rootfs_path=['${libdir}/lxc/rootfs']])
|
|
|
|
# cgroup pattern specification
|
|
AC_ARG_WITH([cgroup-pattern],
|
|
[AS_HELP_STRING([--with-cgroup-pattern=pattern], [pattern for container cgroups])],
|
|
[with_cgroup_pattern=$withval], [with_cgroup_pattern=['']])
|
|
|
|
# The path for the apparmor_parser's cache for generated apparmor profiles
|
|
AC_ARG_WITH([apparmor-cache-dir],
|
|
[AS_HELP_STRING([--with-apparmor-cache-dir=dir],[path for apparmor_parser cache])],
|
|
[with_apparmor_cache_dir=$withval], [with_apparmor_cache_dir=['${localstatedir}/cache/lxc/apparmor']])
|
|
|
|
# Container log path. By default, use $lxcpath.
|
|
AC_MSG_CHECKING([Whether to place logfiles in container config path])
|
|
AC_ARG_ENABLE([configpath-log],
|
|
[AS_HELP_STRING([--enable-configpath-log], [use logfiles in config path [default=no]])],
|
|
[enable_configpath_log=$enableval], [enable_configpath_log=no])
|
|
AC_MSG_RESULT([$enable_configpath_log])
|
|
AM_CONDITIONAL([USE_CONFIGPATH_LOGS], [test "$enable_configpath_log" = "yes"])
|
|
|
|
if test "$enable_configpath_log" = "yes"; then
|
|
default_log_path="${with_config_path}"
|
|
else
|
|
default_log_path="${localstatedir}/log/lxc"
|
|
fi
|
|
|
|
AC_ARG_WITH([log-path],
|
|
[AS_HELP_STRING([--with-log-path=dir],[per container log path])],
|
|
[with_log_path=$withval], [with_log_path=['${default_log_path}']])
|
|
|
|
# Expand some useful variables
|
|
AS_AC_EXPAND(PREFIX, "$prefix")
|
|
AS_AC_EXPAND(LIBDIR, "$libdir")
|
|
AS_AC_EXPAND(BINDIR, "$bindir")
|
|
AS_AC_EXPAND(SBINDIR, "$sbindir")
|
|
AS_AC_EXPAND(LIBEXECDIR, "$libexecdir")
|
|
AS_AC_EXPAND(INCLUDEDIR, "$includedir")
|
|
AS_AC_EXPAND(SYSCONFDIR, "$sysconfdir")
|
|
AS_AC_EXPAND(LXC_DEFAULT_CONFIG, "$sysconfdir/lxc/default.conf")
|
|
AS_AC_EXPAND(DATADIR, "$datadir")
|
|
AS_AC_EXPAND(LOCALSTATEDIR, "$localstatedir")
|
|
AS_AC_EXPAND(DOCDIR, "$docdir")
|
|
AS_AC_EXPAND(LXC_GENERATE_DATE, "$(date --utc --date=@${SOURCE_DATE_EPOCH:-$(date +%s)} '+%Y-%m-%d')")
|
|
AS_AC_EXPAND(LXCPATH, "$with_config_path")
|
|
AS_AC_EXPAND(LXC_GLOBAL_CONF, "$with_global_conf")
|
|
AS_AC_EXPAND(LXC_USERNIC_CONF, "$with_usernic_conf")
|
|
AS_AC_EXPAND(LXC_USERNIC_DB, "$with_usernic_db")
|
|
AS_AC_EXPAND(LXC_DISTRO_SYSCONF, "$distrosysconf")
|
|
AS_AC_EXPAND(LXCROOTFSMOUNT, "$with_rootfs_path")
|
|
AS_AC_EXPAND(LXCTEMPLATEDIR, "$datadir/lxc/templates")
|
|
AS_AC_EXPAND(LXCTEMPLATECONFIG, "$datadir/lxc/config")
|
|
AS_AC_EXPAND(LXCHOOKDIR, "$datadir/lxc/hooks")
|
|
AS_AC_EXPAND(LXCBINHOOKDIR, "$libexecdir/lxc/hooks")
|
|
AS_AC_EXPAND(LXCINITDIR, "$libexecdir")
|
|
AS_AC_EXPAND(LOGPATH, "$with_log_path")
|
|
AS_AC_EXPAND(RUNTIME_PATH, "$with_runtime_path")
|
|
AS_AC_EXPAND(APPARMOR_CACHE_DIR, "$with_apparmor_cache_dir")
|
|
AC_SUBST(DEFAULT_CGROUP_PATTERN, ["$with_cgroup_pattern"])
|
|
|
|
# We need the install path so criu knows where to reference the hook scripts.
|
|
AC_DEFINE_UNQUOTED([DATADIR], "$DATADIR", ["Prefix for shared files."])
|
|
|
|
# Check for some standard kernel headers
|
|
AC_CHECK_HEADERS([linux/unistd.h linux/netlink.h linux/genetlink.h],
|
|
[],
|
|
AC_MSG_ERROR([Please install the Linux kernel headers.]),
|
|
[#include <sys/socket.h>])
|
|
|
|
# Check for alternate C libraries
|
|
AC_MSG_CHECKING(for bionic libc)
|
|
AC_COMPILE_IFELSE([AC_LANG_PROGRAM(
|
|
[[#ifndef __ANDROID__
|
|
error: Not bionic!
|
|
#endif]])],
|
|
[is_bionic=yes],
|
|
[is_bionic=no])
|
|
if test "x$is_bionic" = "xyes"; then
|
|
AC_DEFINE([IS_BIONIC], 1, [bionic libc])
|
|
AC_MSG_RESULT([yes])
|
|
else
|
|
AC_MSG_RESULT([no])
|
|
fi
|
|
AM_CONDITIONAL([IS_BIONIC], [test "x$is_bionic" = "xyes"])
|
|
|
|
# Configuration examples
|
|
AC_ARG_ENABLE([pam],
|
|
[AS_HELP_STRING([--enable-pam], [enable pam module [default=no]])],
|
|
[enable_pam=$enableval], [enable_pam=no])
|
|
AM_CONDITIONAL([ENABLE_PAM], [test "x$enable_pam" = "xyes"])
|
|
|
|
AM_COND_IF([ENABLE_PAM],
|
|
[AC_ARG_WITH(
|
|
[pamdir],
|
|
[AS_HELP_STRING([--with-pamdir=PATH],[Specify the directory where PAM modules are stored,
|
|
or "none" if PAM modules are not to be built])],
|
|
[exec_pamdir=$withval],
|
|
[
|
|
if test "${prefix}" = "/usr"; then
|
|
exec_pamdir="/lib${libdir##*/lib}/security"
|
|
else
|
|
exec_pamdir="\$(libdir)/security"
|
|
fi
|
|
]
|
|
)])
|
|
|
|
AM_CONDITIONAL([HAVE_PAM], [test x"$exec_pamdir" != "xnone"])
|
|
AM_COND_IF([ENABLE_PAM],
|
|
[if test "z$exec_pamdir" != "znone"; then
|
|
AC_ARG_VAR([PAM_CFLAGS], [C compiler flags for pam])
|
|
AC_ARG_VAR([PAM_LIBS], [linker flags for pam])
|
|
AC_CHECK_LIB(
|
|
[pam],
|
|
[pam_authenticate],
|
|
[PAM_LIBS="-lpam"],
|
|
[AC_MSG_ERROR([*** libpam not found.])
|
|
])
|
|
|
|
AC_SUBST(PAM_LIBS)
|
|
AC_SUBST([exec_pamdir])
|
|
fi])
|
|
|
|
# Some systems lack PR_CAPBSET_DROP definition => HAVE_DECL_PR_CAPBSET_DROP
|
|
AC_CHECK_DECLS([PR_CAPBSET_DROP], [], [], [#include <sys/prctl.h>])
|
|
|
|
# Some systems lack PR_{G,S}ET_NO_NEW_PRIVS definition => HAVE_DECL_PR_{G,S}ET_NO_NEW_PRIVS
|
|
AC_CHECK_DECLS([PR_SET_NO_NEW_PRIVS], [], [], [#include <sys/prctl.h>])
|
|
AC_CHECK_DECLS([PR_GET_NO_NEW_PRIVS], [], [], [#include <sys/prctl.h>])
|
|
|
|
# Check for some headers
|
|
AC_CHECK_HEADERS([pty.h sys/memfd.h sys/personality.h sys/resource.h sys/signalfd.h sys/timerfd.h utmpx.h])
|
|
|
|
AC_CHECK_HEADER([ifaddrs.h],
|
|
AM_CONDITIONAL(HAVE_IFADDRS_H, true)
|
|
AC_DEFINE(HAVE_IFADDRS_H, 1, [Have ifaddrs.h]),
|
|
AM_CONDITIONAL(HAVE_IFADDRS_H, false))
|
|
|
|
AC_ARG_ENABLE([liburing],
|
|
[AS_HELP_STRING([--enable-liburing], [enable liburing support [default=auto]])],
|
|
[enable_liburing=$enableval], [enable_liburing=auto])
|
|
|
|
if test "x$enable_liburing" = "auto"; then
|
|
AC_CHECK_LIB([uring],[__io_uring_sqring_wait],[enable_liburing=yes],[enable_liburing=no])
|
|
fi
|
|
|
|
AM_CONDITIONAL([ENABLE_LIBURING], [test "x$enable_liburing" = "xyes"])
|
|
|
|
AM_COND_IF([ENABLE_LIBURING],
|
|
[AC_CHECK_HEADER([liburing.h],[],[AC_MSG_ERROR([You must install the liburing development package in order to compile lxc])])
|
|
# We use __io_uring_sqring_wait as an indicator whether liburing is new enough to support poll.
|
|
AC_CHECK_LIB([uring],[__io_uring_sqring_wait],[],[AC_MSG_ERROR([The liburing development package in order to compile lxc])])
|
|
AC_SUBST([LIBURING_LIBS], [-luring])])
|
|
|
|
# lookup major()/minor()/makedev()
|
|
AC_HEADER_MAJOR
|
|
|
|
# Check for some syscalls functions
|
|
AC_CHECK_FUNCS([setns pivot_root sethostname unshare rand_r confstr faccessat gettid memfd_create move_mount open_tree execveat clone3 fsopen fspick fsconfig fsmount openat2 close_range statvfs mount_setattr sigdescr_np])
|
|
AC_CHECK_TYPES([__aligned_u64], [], [], [[#include <linux/types.h>]])
|
|
AC_CHECK_TYPES([struct mount_attr], [], [], [[#include <linux/mount.h>]])
|
|
AC_CHECK_TYPES([struct open_how], [], [], [[#include <linux/openat2.h>]])
|
|
AC_CHECK_TYPES([struct clone_args], [], [], [[#include <linux/sched.h>]])
|
|
AC_CHECK_MEMBERS([struct clone_args.set_tid],[],[],[[#include <linux/sched.h>]])
|
|
AC_CHECK_MEMBERS([struct clone_args.cgroup],[],[],[[#include <linux/sched.h>]])
|
|
|
|
# Check for strerror_r() support. Defines:
|
|
# - HAVE_STRERROR_R if available
|
|
# - HAVE_DECL_STRERROR_R if defined
|
|
# - STRERROR_R_CHAR_P if it returns char *
|
|
AC_FUNC_STRERROR_R
|
|
|
|
# Check for some functions
|
|
AC_CHECK_LIB(pthread, main)
|
|
AC_CHECK_LIB(util, openpty)
|
|
AC_CHECK_FUNCS([hasmntopt setmntent endmntent utmpxname])
|
|
AC_CHECK_FUNCS([getgrgid_r],
|
|
AM_CONDITIONAL(HAVE_GETGRGID_R, true)
|
|
AC_DEFINE(HAVE_GETGRGID_R,1,[Have getgrgid_r]),
|
|
AM_CONDITIONAL(HAVE_GETGRGID_R, false))
|
|
AC_CHECK_FUNCS([getline],
|
|
AM_CONDITIONAL(HAVE_GETLINE, true)
|
|
AC_DEFINE(HAVE_GETLINE,1,[Have getline]),
|
|
AM_CONDITIONAL(HAVE_GETLINE, false))
|
|
AC_CHECK_FUNCS([getsubopt],
|
|
AM_CONDITIONAL(HAVE_GETSUBOPT, true)
|
|
AC_DEFINE(HAVE_GETSUBOPT,1,[Have getsubopt]),
|
|
AM_CONDITIONAL(HAVE_GETSUBOPT, false))
|
|
AC_CHECK_FUNCS([fgetln],
|
|
AM_CONDITIONAL(HAVE_FGETLN, true)
|
|
AC_DEFINE(HAVE_FGETLN,1,[Have fgetln]),
|
|
AM_CONDITIONAL(HAVE_FGETLN, false))
|
|
AC_CHECK_FUNCS([keyctl],
|
|
AM_CONDITIONAL(HAVE_KEYCTL, true)
|
|
AC_DEFINE(HAVE_KEYCTL,1,[Have keyctl]),
|
|
AM_CONDITIONAL(HAVE_KEYCTL, false))
|
|
AC_CHECK_FUNCS([openpty],
|
|
AM_CONDITIONAL(HAVE_OPENPTY, true)
|
|
AC_DEFINE(HAVE_OPENPTY,1,[Have openpty]),
|
|
AM_CONDITIONAL(HAVE_OPENPTY, false))
|
|
AC_CHECK_FUNCS([prlimit],
|
|
AM_CONDITIONAL(HAVE_PRLIMIT, true)
|
|
AC_DEFINE(HAVE_PRLIMIT,1,[Have prlimit]),
|
|
AM_CONDITIONAL(HAVE_PRLIMIT, false))
|
|
AC_CHECK_FUNCS([prlimit64],
|
|
AM_CONDITIONAL(HAVE_PRLIMIT64, true)
|
|
AC_DEFINE(HAVE_PRLIMIT64,1,[Have prlimit64]),
|
|
AM_CONDITIONAL(HAVE_PRLIMIT64, false))
|
|
AC_CHECK_FUNCS([pthread_setcancelstate],
|
|
AM_CONDITIONAL(HAVE_PTHREAD_SETCANCELSTATE, true)
|
|
AC_DEFINE(HAVE_PTHREAD_SETCANCELSTATE,1,[Have pthread_setcancelstate]),
|
|
AM_CONDITIONAL(HAVE_PTHREAD_SETCANCELSTATE, false))
|
|
AC_CHECK_FUNCS([strlcpy],
|
|
AM_CONDITIONAL(HAVE_STRLCPY, true)
|
|
AC_DEFINE(HAVE_STRLCPY,1,[Have strlcpy]),
|
|
AM_CONDITIONAL(HAVE_STRLCPY, false))
|
|
AC_CHECK_FUNCS([strlcat],
|
|
AM_CONDITIONAL(HAVE_STRLCAT, true)
|
|
AC_DEFINE(HAVE_STRLCAT,1,[Have strlcat]),
|
|
AM_CONDITIONAL(HAVE_STRLCAT, false))
|
|
AC_CHECK_FUNCS([strchrnul],
|
|
AM_CONDITIONAL(HAVE_STRCHRNUL, true)
|
|
AC_DEFINE(HAVE_STRCHRNUL,1,[Have strchnul]),
|
|
AM_CONDITIONAL(HAVE_STRCHRNUL, false))
|
|
AC_CHECK_FUNCS([fmemopen],
|
|
AM_CONDITIONAL(HAVE_FMEMOPEN, true)
|
|
AC_DEFINE(HAVE_FMEMOPEN,1,[Have fmemopen]),
|
|
AM_CONDITIONAL(HAVE_FMEMOPEN, false))
|
|
|
|
# HAVE_STRUCT_RTNL_LINK_STATS64={0,1}
|
|
AC_CHECK_TYPES([struct rtnl_link_stats64], [], [], [[#include <linux/if_link.h>]])
|
|
|
|
# Check for some libraries
|
|
AX_PTHREAD
|
|
AC_SEARCH_LIBS(clock_gettime, [rt])
|
|
|
|
# Hardening flags
|
|
CC_CHECK_FLAGS_APPEND([AM_CFLAGS],[CFLAGS],[ \
|
|
-fPIE \
|
|
-Wvla \
|
|
-std=gnu11 \
|
|
-fms-extensions \
|
|
-fdiagnostics-color \
|
|
-Wimplicit-fallthrough=5 \
|
|
-Wcast-align \
|
|
-Wstrict-prototypes \
|
|
-fno-strict-aliasing \
|
|
-fstack-clash-protection \
|
|
-fstack-protector-strong \
|
|
--param=ssp-buffer-size=4 \
|
|
-g \
|
|
--mcet -fcf-protection \
|
|
-Werror=implicit-function-declaration \
|
|
-Wlogical-op \
|
|
-Wmissing-include-dirs \
|
|
-Wold-style-definition \
|
|
-Winit-self \
|
|
-Wunused-but-set-variable \
|
|
-Wfloat-equal \
|
|
-Wsuggest-attribute=noreturn \
|
|
-Werror=return-type \
|
|
-Werror=incompatible-pointer-types \
|
|
-Wformat=2 \
|
|
-Wshadow \
|
|
-Wendif-labels \
|
|
-Werror=overflow \
|
|
-fdiagnostics-show-option \
|
|
-Werror=shift-count-overflow \
|
|
-Werror=shift-overflow=2 \
|
|
-Wdate-time \
|
|
-Wnested-externs \
|
|
-fasynchronous-unwind-tables \
|
|
-pipe \
|
|
-fexceptions \
|
|
-Warray-bounds \
|
|
-Wrestrict \
|
|
-Wreturn-local-addr \
|
|
-fsanitize=cfi \
|
|
-Wstringop-overflow])
|
|
AC_SUBST(AM_CFLAGS)
|
|
|
|
CC_CHECK_FLAGS_APPEND([AM_LDFLAGS],[LDFLAGS],[ \
|
|
-Wl,--as-needed \
|
|
-Wl,--gc-sections \
|
|
-Wl,-z,relro \
|
|
-Wl,-z,now \
|
|
-pie \
|
|
-Wl,-fuse-ld=gold])
|
|
|
|
AM_COND_IF([ENABLE_NO_UNDEFINED],
|
|
[CC_CHECK_FLAGS_APPEND([AM_LDFLAGS],[LDFLAGS],[-Wl,--no-undefined])])
|
|
|
|
AC_SUBST(AM_LDFLAGS)
|
|
|
|
CFLAGS="$CFLAGS -Wvla -std=gnu11 -fms-extensions"
|
|
if test "x$enable_werror" = "xyes"; then
|
|
CFLAGS="$CFLAGS -Werror"
|
|
fi
|
|
|
|
AC_ARG_ENABLE([thread-safety],
|
|
[AS_HELP_STRING([--enable-thread-safety], [enforce thread-safety otherwise fail the build [default=yes]])],
|
|
[enable_thread_safety=$enableval], [enable_thread_safety=yes])
|
|
AM_CONDITIONAL([ENFORCE_THREAD_SAFETY], [test "x$enable_thread_safety" = "xyes"])
|
|
if test "x$enable_thread_safety" = "xyes"; then
|
|
AC_DEFINE([ENFORCE_THREAD_SAFETY], 1, [enforce thread-safety otherwise fail the build])
|
|
AC_MSG_RESULT([yes])
|
|
else
|
|
AC_MSG_RESULT([no])
|
|
fi
|
|
|
|
AC_ARG_ENABLE([coverity-build],
|
|
[AS_HELP_STRING([--enable-coverity-build], [build for use with Coverity [default=no]])],
|
|
[enable_coverity_build=$enableval], [enable_coverity_build=no])
|
|
AM_CONDITIONAL([ENABLE_COVERITY_BUILD], [test "x$enable_coverity_build" = "xyes"])
|
|
if test "x$enable_coverity_build" = "xyes"; then
|
|
AC_DEFINE([ENABLE_COVERITY_BUILD], 1, [build for use with Coverity])
|
|
AC_MSG_RESULT([yes])
|
|
else
|
|
AC_MSG_RESULT([no])
|
|
fi
|
|
|
|
AC_ARG_ENABLE([dlog],
|
|
[AS_HELP_STRING([--enable-dlog], [enable dlog support [default=no]])],
|
|
[enable_dlog=$enableval], [enable_dlog=no])
|
|
AM_CONDITIONAL([ENABLE_DLOG], [test "x$enable_dlog" = "xyes"])
|
|
|
|
AM_COND_IF([ENABLE_DLOG],
|
|
[PKG_CHECK_MODULES([DLOG],[dlog],[],[
|
|
AC_CHECK_HEADER([dlog.h],[],[AC_MSG_ERROR([You must install the dlog development package in order to compile lxc])])
|
|
AC_CHECK_LIB([dlog], [dlog_print],[],[AC_MSG_ERROR([You must install the dlog development package in order to compile lxc])])
|
|
AC_SUBST([DLOG_LIBS], [-ldlog])
|
|
])
|
|
])
|
|
|
|
AC_ARG_ENABLE([memfd-rexec],
|
|
[AS_HELP_STRING([--enable-memfd-rexec], [enforce liblxc as a memfd to protect against certain symlink attacks [default=yes]])],
|
|
[enable_memfd_rexec=$enableval], [enable_memfd_rexec=yes])
|
|
AM_CONDITIONAL([ENFORCE_MEMFD_REXEC], [test "x$enable_memfd_rexec" = "xyes"])
|
|
if test "x$enable_memfd_rexec" = "xyes"; then
|
|
AC_DEFINE([ENFORCE_MEMFD_REXEC], 1, [Rexec liblxc as memfd])
|
|
AC_MSG_RESULT([yes])
|
|
else
|
|
AC_MSG_RESULT([no])
|
|
fi
|
|
|
|
# Files requiring some variable expansion
|
|
AC_CONFIG_FILES([
|
|
Makefile
|
|
lxc.pc
|
|
lxc.spec
|
|
|
|
coccinelle/Makefile
|
|
|
|
config/Makefile
|
|
config/apparmor/Makefile
|
|
config/apparmor/abstractions/start-container
|
|
config/selinux/Makefile
|
|
config/bash/Makefile
|
|
config/bash/lxc
|
|
config/init/Makefile
|
|
config/init/common/Makefile
|
|
config/init/common/lxc-containers
|
|
config/init/common/lxc-net
|
|
config/init/systemd/Makefile
|
|
config/init/systemd/lxc.service
|
|
config/init/systemd/lxc@.service
|
|
config/init/systemd/lxc-net.service
|
|
config/init/sysvinit/Makefile
|
|
config/init/sysvinit/lxc-containers
|
|
config/init/sysvinit/lxc-net
|
|
config/init/upstart/lxc.conf
|
|
config/init/upstart/lxc-net.conf
|
|
config/init/upstart/Makefile
|
|
config/etc/Makefile
|
|
config/templates/Makefile
|
|
config/templates/common.conf
|
|
config/templates/common.conf.d/Makefile
|
|
config/templates/nesting.conf
|
|
config/templates/oci.common.conf
|
|
config/templates/userns.conf
|
|
config/yum/Makefile
|
|
config/sysconfig/Makefile
|
|
config/sysconfig/lxc
|
|
|
|
doc/Makefile
|
|
doc/api/Makefile
|
|
doc/lxc-attach.sgml
|
|
doc/lxc-autostart.sgml
|
|
doc/lxc-cgroup.sgml
|
|
doc/lxc-checkconfig.sgml
|
|
doc/lxc-checkpoint.sgml
|
|
doc/lxc-config.sgml
|
|
doc/lxc-console.sgml
|
|
doc/lxc-copy.sgml
|
|
doc/lxc-create.sgml
|
|
doc/lxc-destroy.sgml
|
|
doc/lxc-device.sgml
|
|
doc/lxc-execute.sgml
|
|
doc/lxc-freeze.sgml
|
|
doc/lxc-info.sgml
|
|
doc/lxc-ls.sgml
|
|
doc/lxc-monitor.sgml
|
|
doc/lxc-snapshot.sgml
|
|
doc/lxc-start.sgml
|
|
doc/lxc-stop.sgml
|
|
doc/lxc-top.sgml
|
|
doc/lxc-unfreeze.sgml
|
|
doc/lxc-unshare.sgml
|
|
doc/lxc-update-config.sgml
|
|
doc/lxc-user-nic.sgml
|
|
doc/lxc-usernsexec.sgml
|
|
doc/lxc-wait.sgml
|
|
|
|
doc/pam_cgfs.sgml
|
|
|
|
doc/lxc.conf.sgml
|
|
doc/lxc.container.conf.sgml
|
|
doc/lxc.system.conf.sgml
|
|
doc/lxc-usernet.sgml
|
|
doc/lxc.sgml
|
|
doc/common_options.sgml
|
|
doc/see_also.sgml
|
|
|
|
doc/rootfs/Makefile
|
|
|
|
doc/examples/Makefile
|
|
doc/examples/lxc-macvlan.conf
|
|
doc/examples/lxc-vlan.conf
|
|
doc/examples/lxc-no-netns.conf
|
|
doc/examples/lxc-empty-netns.conf
|
|
doc/examples/lxc-phys.conf
|
|
doc/examples/lxc-veth.conf
|
|
doc/examples/lxc-complex.conf
|
|
|
|
doc/ja/Makefile
|
|
doc/ja/lxc-attach.sgml
|
|
doc/ja/lxc-autostart.sgml
|
|
doc/ja/lxc-cgroup.sgml
|
|
doc/ja/lxc-checkconfig.sgml
|
|
doc/ja/lxc-checkpoint.sgml
|
|
doc/ja/lxc-config.sgml
|
|
doc/ja/lxc-console.sgml
|
|
doc/ja/lxc-copy.sgml
|
|
doc/ja/lxc-create.sgml
|
|
doc/ja/lxc-destroy.sgml
|
|
doc/ja/lxc-device.sgml
|
|
doc/ja/lxc-execute.sgml
|
|
doc/ja/lxc-freeze.sgml
|
|
doc/ja/lxc-info.sgml
|
|
doc/ja/lxc-ls.sgml
|
|
doc/ja/lxc-monitor.sgml
|
|
doc/ja/lxc-snapshot.sgml
|
|
doc/ja/lxc-start.sgml
|
|
doc/ja/lxc-stop.sgml
|
|
doc/ja/lxc-top.sgml
|
|
doc/ja/lxc-unfreeze.sgml
|
|
doc/ja/lxc-unshare.sgml
|
|
doc/ja/lxc-update-config.sgml
|
|
doc/ja/lxc-user-nic.sgml
|
|
doc/ja/lxc-usernsexec.sgml
|
|
doc/ja/lxc-wait.sgml
|
|
|
|
doc/ja/pam_cgfs.sgml
|
|
|
|
doc/ja/lxc.conf.sgml
|
|
doc/ja/lxc.container.conf.sgml
|
|
doc/ja/lxc.system.conf.sgml
|
|
doc/ja/lxc-usernet.sgml
|
|
doc/ja/lxc.sgml
|
|
doc/ja/common_options.sgml
|
|
doc/ja/see_also.sgml
|
|
|
|
doc/ko/Makefile
|
|
doc/ko/lxc-attach.sgml
|
|
doc/ko/lxc-autostart.sgml
|
|
doc/ko/lxc-cgroup.sgml
|
|
doc/ko/lxc-checkconfig.sgml
|
|
doc/ko/lxc-checkpoint.sgml
|
|
doc/ko/lxc-config.sgml
|
|
doc/ko/lxc-console.sgml
|
|
doc/ko/lxc-copy.sgml
|
|
doc/ko/lxc-create.sgml
|
|
doc/ko/lxc-destroy.sgml
|
|
doc/ko/lxc-device.sgml
|
|
doc/ko/lxc-execute.sgml
|
|
doc/ko/lxc-freeze.sgml
|
|
doc/ko/lxc-info.sgml
|
|
doc/ko/lxc-ls.sgml
|
|
doc/ko/lxc-monitor.sgml
|
|
doc/ko/lxc-snapshot.sgml
|
|
doc/ko/lxc-start.sgml
|
|
doc/ko/lxc-stop.sgml
|
|
doc/ko/lxc-top.sgml
|
|
doc/ko/lxc-unfreeze.sgml
|
|
doc/ko/lxc-unshare.sgml
|
|
doc/ko/lxc-user-nic.sgml
|
|
doc/ko/lxc-usernsexec.sgml
|
|
doc/ko/lxc-wait.sgml
|
|
|
|
doc/ko/lxc.conf.sgml
|
|
doc/ko/lxc.container.conf.sgml
|
|
doc/ko/lxc.system.conf.sgml
|
|
doc/ko/lxc-usernet.sgml
|
|
doc/ko/lxc.sgml
|
|
doc/ko/common_options.sgml
|
|
doc/ko/see_also.sgml
|
|
|
|
hooks/Makefile
|
|
hooks/dhclient
|
|
|
|
templates/Makefile
|
|
templates/lxc-busybox
|
|
templates/lxc-download
|
|
templates/lxc-local
|
|
templates/lxc-oci
|
|
|
|
src/Makefile
|
|
src/lxc/Makefile
|
|
src/lxc/lxc.functions
|
|
src/lxc/cmd/lxc-checkconfig
|
|
src/lxc/cmd/lxc-update-config
|
|
src/lxc/version.h
|
|
|
|
src/tests/Makefile
|
|
src/tests/lxc-test-usernic
|
|
])
|
|
AC_CONFIG_COMMANDS([default],[[]],[[]])
|
|
AC_OUTPUT
|
|
|
|
# Configuration overview
|
|
cat << EOF
|
|
|
|
----------------------------
|
|
Binaries
|
|
- Command Line Tools:
|
|
- lxc-attach: $enable_tools
|
|
- lxc-autostart: $enable_tools
|
|
- lxc-cgroup: $enable_tools
|
|
- lxc-checkpoint: $enable_tools
|
|
- lxc-config: $enable_tools
|
|
- lxc-console: $enable_tools
|
|
- lxc-copy: $enable_tools
|
|
- lxc-create: $enable_tools
|
|
- lxc-destroy: $enable_tools
|
|
- lxc-device: $enable_tools
|
|
- lxc-execute: $enable_tools
|
|
- lxc-freeze: $enable_tools
|
|
- lxc-info: $enable_tools
|
|
- lxc-ls: $enable_tools
|
|
- lxc-monitor: $enable_tools
|
|
- lxc-snapshot: $enable_tools
|
|
- lxc-start: $enable_tools
|
|
- lxc-stop: $enable_tools
|
|
- lxc-top: $enable_tools
|
|
- lxc-unfreeze: $enable_tools
|
|
- lxc-unshare: $enable_tools
|
|
- lxc-wait: $enable_tools
|
|
|
|
- liblxc Commands:
|
|
- lxc-checkconfig: $enable_commands
|
|
- lxc-update-config: $enable_commands
|
|
- lxc-init: $enable_commands
|
|
- lxc-monitord: $enable_commands
|
|
- lxc-user-nic: $enable_commands
|
|
- lxc-usernsexec: $enable_commands
|
|
|
|
- static binaries: $enable_static_binaries
|
|
|
|
Environment:
|
|
- compiler: $CC
|
|
- cflags: ${AM_CFLAGS} ${PTHREAD_CFLAGS}
|
|
- ldflags: ${AM_LDFLAGS} ${PTHREAD_LIBS}
|
|
- distribution: $with_distro
|
|
- init script type(s): $init_script
|
|
- rpath: $enable_rpath
|
|
- OpenSSL: $enable_openssl
|
|
- Bash integration: $enable_bash
|
|
|
|
Security features:
|
|
- Apparmor: $enable_apparmor
|
|
- Linux capabilities: $enable_capabilities
|
|
- seccomp: $enable_seccomp
|
|
- SELinux: $enable_selinux
|
|
- memfd rexec: $enable_memfd_rexec
|
|
|
|
PAM:
|
|
- PAM module: $enable_pam
|
|
- cgroup PAM module: $exec_pamdir
|
|
|
|
Documentation:
|
|
- examples: $enable_examples
|
|
- API documentation: $enable_api_docs
|
|
- user documentation: $enable_doc
|
|
|
|
Debugging:
|
|
- Sanitizers: $enable_sanitizers
|
|
- Coverity: $enable_coverity_build
|
|
- mutex debugging: $enable_mutex_debugging
|
|
- tests: $enable_tests
|
|
- fuzzers: $enable_fuzzers
|
|
|
|
Paths:
|
|
- Logs in configpath: $enable_configpath_log
|
|
|
|
Thread-safety:
|
|
- enforce: $enable_thread_safety
|
|
|
|
Dlog:
|
|
- enable: $enable_dlog
|
|
EOF
|