4 # Uncomment this to turn on verbose mode.
7 # TODO: check for headers not being installed
10 include /usr
/share
/dpkg
/default.mk
11 include debian
/rules.d
/env.mk
12 include debian
/rules.d
/${DEB_BUILD_ARCH}.mk
14 CHANGELOG_DATE
:=$(shell dpkg-parsechangelog
-SDate
)
16 PVE_KERNEL_PKG
=pve-kernel-
${KVNAME}
17 PVE_DEBUG_KERNEL_PKG
=pve-kernel-
${KVNAME}-dbgsym
18 PVE_HEADER_PKG
=pve-headers-
${KVNAME}
19 PVE_USR_HEADER_PKG
=pve-kernel-libc-dev
20 LINUX_TOOLS_PKG
=linux-tools-
${KERNEL_MAJMIN}
21 KERNEL_SRC_COPY
=${KERNEL_SRC}_tmp
23 # TODO: split for archs, move to files?
26 -d CONFIG_SND_PCM_OSS \
27 -e CONFIG_TRANSPARENT_HUGEPAGE_MADVISE \
28 -d CONFIG_TRANSPARENT_HUGEPAGE_ALWAYS \
30 -m CONFIG_BLK_DEV_NBD \
31 -m CONFIG_BLK_DEV_RBD \
36 -m CONFIG_HFSPLUS_FS \
38 -e CONFIG_SQUASHFS_DECOMP_MULTI_PERCPU \
40 -e CONFIG_BRIDGE_NETFILTER \
41 -e CONFIG_BLK_DEV_SD \
42 -e CONFIG_BLK_DEV_SR \
43 -e CONFIG_BLK_DEV_DM \
44 -m CONFIG_BLK_DEV_NVME \
45 -e CONFIG_NLS_ISO8859_1 \
46 -d CONFIG_INPUT_EVBUG \
47 -d CONFIG_CPU_FREQ_DEFAULT_GOV_ONDEMAND \
48 -d CONFIG_CPU_FREQ_DEFAULT_GOV_SCHEDUTIL \
49 -e CONFIG_CPU_FREQ_DEFAULT_GOV_PERFORMANCE \
50 -e CONFIG_SYSFB_SIMPLEFB \
51 -e CONFIG_DRM_SIMPLEDRM \
52 -d CONFIG_MODULE_SIG \
53 -d CONFIG_MEMCG_DISABLED \
54 -e CONFIG_MEMCG_SWAP_ENABLED \
56 -m CONFIG_VFIO_IOMMU_TYPE1 \
57 -m CONFIG_VFIO_VIRQFD \
60 -m CONFIG_USB_XHCI_HCD \
61 -m CONFIG_USB_XHCI_PCI \
62 -m CONFIG_USB_EHCI_HCD \
63 -m CONFIG_USB_EHCI_PCI \
64 -m CONFIG_USB_EHCI_HCD_PLATFORM \
65 -m CONFIG_USB_OHCI_HCD \
66 -m CONFIG_USB_OHCI_HCD_PCI \
67 -m CONFIG_USB_OHCI_HCD_PLATFORM \
68 -d CONFIG_USB_OHCI_HCD_SSB \
69 -m CONFIG_USB_UHCI_HCD \
70 -d CONFIG_USB_SL811_HCD_ISO \
71 -e CONFIG_MEMCG_KMEM \
72 -d CONFIG_DEFAULT_CFQ \
73 -e CONFIG_DEFAULT_DEADLINE \
74 -e CONFIG_MODVERSIONS \
75 -d CONFIG_DEFAULT_SECURITY_DAC \
76 -e CONFIG_DEFAULT_SECURITY_APPARMOR \
77 --set-str CONFIG_DEFAULT_SECURITY apparmor \
78 -d CONFIG_UNWINDER_ORC \
79 -d CONFIG_UNWINDER_GUESS \
80 -e CONFIG_UNWINDER_FRAME_POINTER \
81 --set-str CONFIG_SYSTEM_TRUSTED_KEYS
""\
82 --set-str CONFIG_SYSTEM_REVOCATION_KEYS
""\
83 -d CONFIG_SECURITY_LOCKDOWN_LSM \
84 -d CONFIG_SECURITY_LOCKDOWN_LSM_EARLY \
85 --set-str CONFIG_LSM yama
,integrity
,apparmor \
86 -e CONFIG_PAGE_TABLE_ISOLATION
88 debian
/control
: $(wildcard debian
/*.in
)
89 sed
-e
's/@@KVNAME@@/${KVNAME}/g' < debian
/pve-kernel.prerm.in
> debian
/${PVE_KERNEL_PKG}.prerm
90 sed
-e
's/@@KVNAME@@/${KVNAME}/g' < debian
/pve-kernel.postrm.in
> debian
/${PVE_KERNEL_PKG}.postrm
91 sed
-e
's/@@KVNAME@@/${KVNAME}/g' < debian
/pve-kernel.postinst.in
> debian
/${PVE_KERNEL_PKG}.postinst
92 sed
-e
's/@@KVNAME@@/${KVNAME}/g' < debian
/pve-headers.postinst.in
> debian
/${PVE_HEADER_PKG}.postinst
93 chmod
+x debian
/${PVE_KERNEL_PKG}.prerm
94 chmod
+x debian
/${PVE_KERNEL_PKG}.postrm
95 chmod
+x debian
/${PVE_KERNEL_PKG}.postinst
96 chmod
+x debian
/${PVE_HEADER_PKG}.postinst
97 sed
-e
's/@KVNAME@/${KVNAME}/g' -e
's/@KVMAJMIN@/${KERNEL_MAJMIN}/g' < debian
/control.in
> debian
/control
99 build
: .compile_mark .tools_compile_mark .modules_compile_mark
101 install: .install_mark .tools_install_mark .headers_install_mark .usr_headers_install_mark
102 dh_installdocs
-A debian
/copyright debian
/SOURCE
105 dh_strip_nondeterminism
110 debian
/rules fwcheck abicheck
111 dh_strip
-N
${PVE_HEADER_PKG} -N
${PVE_USR_HEADER_PKG}
120 cd
${KERNEL_SRC}; scripts
/config
${PVE_CONFIG_OPTS}
121 ${MAKE} -C
${KERNEL_SRC} oldconfig
122 # copy to allow building in parallel to kernel/module compilation without interference
123 rm -rf
${KERNEL_SRC_COPY}
124 cp
-ar ${KERNEL_SRC} ${KERNEL_SRC_COPY}
127 .compile_mark
: .config_mark
128 ${MAKE} -C
${KERNEL_SRC} KBUILD_BUILD_VERSION_TIMESTAMP
="PVE ${DEB_VERSION} (${CHANGELOG_DATE})"
131 .install_mark
: .compile_mark .modules_compile_mark
132 rm -rf debian
/${PVE_KERNEL_PKG}
133 mkdir
-p debian
/${PVE_KERNEL_PKG}/lib
/modules
/${KVNAME}
134 mkdir debian
/${PVE_KERNEL_PKG}/boot
135 install -m
644 ${KERNEL_SRC}/.config debian
/${PVE_KERNEL_PKG}/boot
/config-
${KVNAME}
136 install -m
644 ${KERNEL_SRC}/System.map debian
/${PVE_KERNEL_PKG}/boot
/System.map-
${KVNAME}
137 install -m
644 ${KERNEL_SRC}/${KERNEL_IMAGE_PATH} debian
/${PVE_KERNEL_PKG}/boot
/${KERNEL_INSTALL_FILE}-${KVNAME}
138 ${MAKE} -C
${KERNEL_SRC} INSTALL_MOD_PATH
=${BUILD_DIR}/debian
/${PVE_KERNEL_PKG}/ modules_install
139 # install zfs drivers
140 install -d
-m
0755 debian
/${PVE_KERNEL_PKG}/lib
/modules
/${KVNAME}/zfs
141 install -m
644 $(addprefix ${MODULES}/,zfs.ko zavl.ko znvpair.ko zunicode.ko zcommon.ko icp.ko zlua.ko spl.ko zzstd.ko
) debian
/${PVE_KERNEL_PKG}/lib
/modules
/${KVNAME}/zfs
143 rm -rf debian
/${PVE_KERNEL_PKG}/lib
/firmware
145 ifeq ($(filter pkg.pve-kernel.debug
,$(DEB_BUILD_PROFILES
)),)
146 echo
"'pkg.pve-kernel.debug' build profile disabled, skipping -dbgsym creation"
148 echo
"'pkg.pve-kernel.debug' build profile enabled, creating -dbgsym contents"
149 mkdir
-p debian
/${PVE_DEBUG_KERNEL_PKG}/usr
/lib
/debug
/lib
/modules
/${KVNAME}
150 mkdir debian
/${PVE_DEBUG_KERNEL_PKG}/usr
/lib
/debug
/boot
151 install -m
644 ${KERNEL_SRC}/vmlinux debian
/${PVE_DEBUG_KERNEL_PKG}/usr
/lib
/debug
/boot
/vmlinux-
${KVNAME}
152 cp
-r debian
/${PVE_KERNEL_PKG}/lib
/modules
/${KVNAME} debian
/${PVE_DEBUG_KERNEL_PKG}/usr
/lib
/debug
/lib
/modules
/
153 rm -f debian
/${PVE_DEBUG_KERNEL_PKG}/usr
/lib
/debug
/lib
/modules
/${KVNAME}/source
154 rm -f debian
/${PVE_DEBUG_KERNEL_PKG}/usr
/lib
/debug
/lib
/modules
/${KVNAME}/build
155 rm -f debian
/${PVE_DEBUG_KERNEL_PKG}/usr
/lib
/debug
/lib
/modules
/${KVNAME}/modules.
*
159 find debian
/${PVE_KERNEL_PKG}/lib
/modules
-name \
*.ko
-print | while read f
; do
strip --strip-debug
"$$f"; done
161 /sbin
/depmod
-b debian
/${PVE_KERNEL_PKG}/ ${KVNAME}
162 # Autogenerate blacklist for watchdog devices (see README)
163 install -m
0755 -d debian
/${PVE_KERNEL_PKG}/lib
/modprobe.d
164 ls debian
/${PVE_KERNEL_PKG}/lib
/modules
/${KVNAME}/kernel
/drivers
/watchdog
/ > watchdog-blacklist.tmp
165 echo ipmi_watchdog.ko
>> watchdog-blacklist.tmp
166 cat watchdog-blacklist.tmp|sed
-e
's/^/blacklist /' -e
's/.ko$$//'|
sort -u
> debian
/${PVE_KERNEL_PKG}/lib
/modprobe.d
/blacklist_
${PVE_KERNEL_PKG}.conf
167 rm -f debian
/${PVE_KERNEL_PKG}/lib
/modules
/${KVNAME}/source
168 rm -f debian
/${PVE_KERNEL_PKG}/lib
/modules
/${KVNAME}/build
171 .tools_compile_mark
: .compile_mark
172 ${MAKE} -C
${KERNEL_SRC}/tools
/perf
prefix=/usr HAVE_NO_LIBBFD
=1 HAVE_CPLUS_DEMANGLE_SUPPORT
=1 NO_LIBPYTHON
=1 NO_LIBPERL
=1 NO_LIBCRYPTO
=1 PYTHON
=python3
173 echo
"checking GPL-2 only perf binary for library linkage with incompatible licenses.."
174 ! ldd
${KERNEL_SRC}/tools
/perf
/perf | grep
-q
-E
'\blibbfd'
175 ! ldd
${KERNEL_SRC}/tools
/perf
/perf | grep
-q
-E
'\blibcrypto'
176 ${MAKE} -C
${KERNEL_SRC}/tools
/perf man
179 .tools_install_mark
: .tools_compile_mark
180 rm -rf debian
/${LINUX_TOOLS_PKG}
181 mkdir
-p debian
/${LINUX_TOOLS_PKG}/usr
/bin
182 mkdir
-p debian
/${LINUX_TOOLS_PKG}/usr
/share
/man
/man1
183 install -m
755 ${BUILD_DIR}/${KERNEL_SRC}/tools
/perf
/perf debian
/${LINUX_TOOLS_PKG}/usr
/bin
/perf_
$(KERNEL_MAJMIN
)
184 for i in
${BUILD_DIR}/${KERNEL_SRC}/tools
/perf
/Documentation
/*.1; do \
185 fname
="$${i##*/}"; manname
="$${fname%.1}"; \
186 install -m644
"$$i" "debian/${LINUX_TOOLS_PKG}/usr/share/man/man1/$${manname}_$(KERNEL_MAJMIN).1"; \
190 .headers_prepare_mark
: .config_mark
191 rm -rf debian
/${PVE_HEADER_PKG}
192 mkdir
-p debian
/${PVE_HEADER_PKG}/usr
/src
/linux-headers-
${KVNAME}
193 install -m
0644 ${KERNEL_SRC}/.config debian
/${PVE_HEADER_PKG}/usr
/src
/linux-headers-
${KVNAME}
194 make
-C
${KERNEL_SRC_COPY} mrproper
195 cd
${KERNEL_SRC_COPY}; find .
-path
'./debian/*' -prune \
196 -o
-path
'./include/*' -prune \
197 -o
-path
'./Documentation' -prune \
198 -o
-path
'./scripts' -prune \
202 -o
-name
'Kconfig*' \
207 -print | cpio
-pd
--preserve-modification-time
${BUILD_DIR}/debian
/${PVE_HEADER_PKG}/usr
/src
/linux-headers-
${KVNAME}
208 cd
${KERNEL_SRC_COPY}; \
210 find arch
/${KERNEL_HEADER_ARCH} -name
include -type d
-print | \
211 xargs
-n1
-i
: find
: -type f \
213 cpio
-pd
--preserve-modification-time
${BUILD_DIR}/debian
/${PVE_HEADER_PKG}/usr
/src
/linux-headers-
${KVNAME}
216 .headers_compile_mark
: .headers_prepare_mark
217 # set output to subdir of source to reduce number of hardcoded paths in output files
218 rm -rf
${BUILD_DIR}/${KERNEL_SRC_COPY}/${PVE_HEADER_PKG}
219 mkdir
-p
${BUILD_DIR}/${KERNEL_SRC_COPY}/${PVE_HEADER_PKG}
220 cp
${KERNEL_SRC}/.config
${BUILD_DIR}/${KERNEL_SRC_COPY}/${PVE_HEADER_PKG}/.config
221 ${MAKE} -C
${KERNEL_SRC_COPY} O
=${BUILD_DIR}/${KERNEL_SRC_COPY}/${PVE_HEADER_PKG} -j1 syncconfig modules_prepare prepare scripts
222 cd
${KERNEL_SRC_COPY}; cp
-a
include scripts
${BUILD_DIR}/debian
/${PVE_HEADER_PKG}/usr
/src
/linux-headers-
${KVNAME}
223 find
${BUILD_DIR}/${KERNEL_SRC_COPY}/${PVE_HEADER_PKG} -name \
*.o.ur-\
* -o
-name
'*.cmd' | xargs
rm -f
224 rsync
--ignore-existing
-r
-v
-a
$(addprefix ${BUILD_DIR}/${KERNEL_SRC_COPY}/${PVE_HEADER_PKG}/,arch
include kernel scripts tools
) ${BUILD_DIR}/debian
/${PVE_HEADER_PKG}/usr
/src
/linux-headers-
${KVNAME}/
225 rm -rf
${BUILD_DIR}/${KERNEL_SRC_COPY}
228 .headers_install_mark
: .compile_mark .modules_compile_mark .headers_compile_mark
229 cp
${KERNEL_SRC}/include/generated
/compile.h debian
/${PVE_HEADER_PKG}/usr
/src
/linux-headers-
${KVNAME}/include/generated
/compile.h
230 install -m
0644 ${KERNEL_SRC}/Module.symvers debian
/${PVE_HEADER_PKG}/usr
/src
/linux-headers-
${KVNAME}
231 mkdir
-p debian
/${PVE_HEADER_PKG}/lib
/modules
/${KVNAME}
232 ln
-sf
/usr
/src
/linux-headers-
${KVNAME} debian
/${PVE_HEADER_PKG}/lib
/modules
/${KVNAME}/build
235 .usr_headers_install_mark
: PKG_DIR
= debian
/${PVE_USR_HEADER_PKG}
236 .usr_headers_install_mark
: OUT_DIR
= ${PKG_DIR}/usr
237 .usr_headers_install_mark
: .config_mark
239 mkdir
-p
'${PKG_DIR}'
240 $(MAKE
) -C
${KERNEL_SRC} headers_install ARCH
=$(KERNEL_HEADER_ARCH
) INSTALL_HDR_PATH
='$(CURDIR)'/$(OUT_DIR
)
241 rm -rf
$(OUT_DIR
)/include/drm
$(OUT_DIR
)/include/scsi
242 find
$(OUT_DIR
)/include \
( -name .
install -o
-name ..
install.cmd \
) -execdir
rm {} +
244 # Move include/asm to arch-specific directory
245 mkdir
-p
$(OUT_DIR
)/include/$(DEB_HOST_MULTIARCH
)
246 mv
$(OUT_DIR
)/include/asm
$(OUT_DIR
)/include/$(DEB_HOST_MULTIARCH
)/
247 test ! -d
$(OUT_DIR
)/include/arch || \
248 mv
$(OUT_DIR
)/include/arch
$(OUT_DIR
)/include/$(DEB_HOST_MULTIARCH
)/
251 .modules_compile_mark
: ${MODULES}/zfs.ko
254 ${MODULES}/zfs.ko
: .compile_mark
255 cd
${MODULES}/${ZFSDIR}; .
/autogen.sh
256 cd
${MODULES}/${ZFSDIR}; .
/configure
--with-config
=kernel
--with-linux
=${BUILD_DIR}/${KERNEL_SRC} --with-linux-obj
=${BUILD_DIR}/${KERNEL_SRC}
257 ${MAKE} -C
${MODULES}/${ZFSDIR}
258 cp
${MODULES}/${ZFSDIR}/module
/avl
/zavl.ko
${MODULES}/
259 cp
${MODULES}/${ZFSDIR}/module
/nvpair
/znvpair.ko
${MODULES}/
260 cp
${MODULES}/${ZFSDIR}/module
/unicode
/zunicode.ko
${MODULES}/
261 cp
${MODULES}/${ZFSDIR}/module
/zcommon
/zcommon.ko
${MODULES}/
262 cp
${MODULES}/${ZFSDIR}/module
/icp
/icp.ko
${MODULES}/
263 cp
${MODULES}/${ZFSDIR}/module
/zfs
/zfs.ko
${MODULES}/
264 cp
${MODULES}/${ZFSDIR}/module
/lua
/zlua.ko
${MODULES}/
265 cp
${MODULES}/${ZFSDIR}/module
/spl
/spl.ko
${MODULES}/
266 cp
${MODULES}/${ZFSDIR}/module
/zstd
/zzstd.ko
${MODULES}/
268 fwlist-
${KVNAME}: .compile_mark .modules_compile_mark
269 debian
/scripts
/find-firmware.pl debian
/${PVE_KERNEL_PKG}/lib
/modules
/${KVNAME} >fwlist.tmp
273 fwcheck
: fwlist-
${KVNAME} fwlist-previous
274 @echo
"checking fwlist for changes since last built firmware package.."
275 @echo
"if this check fails, add fwlist-${KVNAME} to the pve-firmware repository and upload a new firmware package together with the ${KVNAME} kernel"
276 sort fwlist-previous | uniq
> fwlist-previous.sorted
277 sort fwlist-
${KVNAME} | uniq
> fwlist-
${KVNAME}.sorted
278 diff
-up
-N fwlist-previous.sorted fwlist-
${KVNAME}.sorted
> fwlist.diff
279 rm fwlist.diff fwlist-previous.sorted fwlist-
${KVNAME}.sorted
280 @echo
"done, no need to rebuild pve-firmware"
283 abi-
${KVNAME}: .compile_mark
284 debian
/scripts
/abi-generate debian
/${PVE_HEADER_PKG}/usr
/src
/linux-headers-
${KVNAME}/Module.symvers abi-
${KVNAME} ${KVNAME}
287 abicheck
: debian
/scripts
/abi-check abi-
${KVNAME} abi-prev-
* abi-blacklist
288 debian
/scripts
/abi-check abi-
${KVNAME} abi-prev-
* ${SKIPABI}