X-Git-Url: https://git.proxmox.com/?a=blobdiff_plain;f=debian%2Frules;h=365b4fa5ea1bb86397325399cf8ddcf1d44c821f;hb=2bebed59351ceefe53e7bca7a913fd6c549efed8;hp=48680f8dc0a3355534afa75ce800c85ae50d1da1;hpb=dd717c04b0736cb04384c991b9cdf8eea0aa4597;p=pve-kernel.git diff --git a/debian/rules b/debian/rules index 48680f8..365b4fa 100755 --- a/debian/rules +++ b/debian/rules @@ -14,6 +14,7 @@ include debian/rules.d/${DEB_BUILD_ARCH}.mk CHANGELOG_DATE:=$(shell dpkg-parsechangelog -SDate) PVE_KERNEL_PKG=pve-kernel-${KVNAME} +PVE_DEBUG_KERNEL_PKG=pve-kernel-${KVNAME}-dbgsym PVE_HEADER_PKG=pve-headers-${KVNAME} PVE_USR_HEADER_PKG=pve-kernel-libc-dev LINUX_TOOLS_PKG=linux-tools-${KERNEL_MAJMIN} @@ -34,16 +35,20 @@ PVE_CONFIG_OPTS= \ -m CONFIG_HFS_FS \ -m CONFIG_HFSPLUS_FS \ -e CIFS_SMB_DIRECT \ +-e CONFIG_SQUASHFS_DECOMP_MULTI_PERCPU \ -e CONFIG_BRIDGE \ -e CONFIG_BRIDGE_NETFILTER \ -e CONFIG_BLK_DEV_SD \ -e CONFIG_BLK_DEV_SR \ -e CONFIG_BLK_DEV_DM \ --e CONFIG_BLK_DEV_NVME \ +-m CONFIG_BLK_DEV_NVME \ -e CONFIG_NLS_ISO8859_1 \ -d CONFIG_INPUT_EVBUG \ -d CONFIG_CPU_FREQ_DEFAULT_GOV_ONDEMAND \ +-d CONFIG_CPU_FREQ_DEFAULT_GOV_SCHEDUTIL \ -e CONFIG_CPU_FREQ_DEFAULT_GOV_PERFORMANCE \ +-e CONFIG_SYSFB_SIMPLEFB \ +-e CONFIG_DRM_SIMPLEDRM \ -d CONFIG_MODULE_SIG \ -d CONFIG_MEMCG_DISABLED \ -e CONFIG_MEMCG_SWAP_ENABLED \ @@ -73,6 +78,8 @@ PVE_CONFIG_OPTS= \ -d CONFIG_UNWINDER_ORC \ -d CONFIG_UNWINDER_GUESS \ -e CONFIG_UNWINDER_FRAME_POINTER \ +--set-str CONFIG_SYSTEM_TRUSTED_KEYS ""\ +--set-str CONFIG_SYSTEM_REVOCATION_KEYS ""\ -d CONFIG_SECURITY_LOCKDOWN_LSM \ -d CONFIG_SECURITY_LOCKDOWN_LSM_EARLY \ --set-str CONFIG_LSM yama,integrity,apparmor \ @@ -112,6 +119,9 @@ binary: install .config_mark: cd ${KERNEL_SRC}; scripts/config ${PVE_CONFIG_OPTS} ${MAKE} -C ${KERNEL_SRC} oldconfig + # copy to allow building in parallel to kernel/module compilation without interference + rm -rf ${KERNEL_SRC_COPY} + cp -ar ${KERNEL_SRC} ${KERNEL_SRC_COPY} touch $@ .compile_mark: .config_mark @@ -131,6 +141,20 @@ binary: install install -m 644 $(addprefix ${MODULES}/,zfs.ko zavl.ko znvpair.ko zunicode.ko zcommon.ko icp.ko zlua.ko spl.ko zzstd.ko) debian/${PVE_KERNEL_PKG}/lib/modules/${KVNAME}/zfs # remove firmware rm -rf debian/${PVE_KERNEL_PKG}/lib/firmware + +ifeq ($(filter pkg.pve-kernel.debug,$(DEB_BUILD_PROFILES)),) + echo "'pkg.pve-kernel.debug' build profile disabled, skipping -dbgsym creation" +else + echo "'pkg.pve-kernel.debug' build profile enabled, creating -dbgsym contents" + mkdir -p debian/${PVE_DEBUG_KERNEL_PKG}/usr/lib/debug/lib/modules/${KVNAME} + mkdir debian/${PVE_DEBUG_KERNEL_PKG}/usr/lib/debug/boot + install -m 644 ${KERNEL_SRC}/vmlinux debian/${PVE_DEBUG_KERNEL_PKG}/usr/lib/debug/boot/vmlinux-${KVNAME} + cp -r debian/${PVE_KERNEL_PKG}/lib/modules/${KVNAME} debian/${PVE_DEBUG_KERNEL_PKG}/usr/lib/debug/lib/modules/ + rm -f debian/${PVE_DEBUG_KERNEL_PKG}/usr/lib/debug/lib/modules/${KVNAME}/source + rm -f debian/${PVE_DEBUG_KERNEL_PKG}/usr/lib/debug/lib/modules/${KVNAME}/build + rm -f debian/${PVE_DEBUG_KERNEL_PKG}/usr/lib/debug/lib/modules/${KVNAME}/modules.* +endif + # strip debug info find debian/${PVE_KERNEL_PKG}/lib/modules -name \*.ko -print | while read f ; do strip --strip-debug "$$f"; done # finalize @@ -145,7 +169,7 @@ binary: install touch $@ .tools_compile_mark: .compile_mark - ${MAKE} -C ${KERNEL_SRC}/tools/perf prefix=/usr HAVE_NO_LIBBFD=1 HAVE_CPLUS_DEMANGLE_SUPPORT=1 NO_LIBPYTHON=1 NO_LIBPERL=1 NO_LIBCRYPTO=1 PYTHON=python2.7 + ${MAKE} -C ${KERNEL_SRC}/tools/perf prefix=/usr HAVE_NO_LIBBFD=1 HAVE_CPLUS_DEMANGLE_SUPPORT=1 NO_LIBPYTHON=1 NO_LIBPERL=1 NO_LIBCRYPTO=1 PYTHON=python3 echo "checking GPL-2 only perf binary for library linkage with incompatible licenses.." ! ldd ${KERNEL_SRC}/tools/perf/perf | grep -q -E '\blibbfd' ! ldd ${KERNEL_SRC}/tools/perf/perf | grep -q -E '\blibcrypto' @@ -167,9 +191,6 @@ binary: install rm -rf debian/${PVE_HEADER_PKG} mkdir -p debian/${PVE_HEADER_PKG}/usr/src/linux-headers-${KVNAME} install -m 0644 ${KERNEL_SRC}/.config debian/${PVE_HEADER_PKG}/usr/src/linux-headers-${KVNAME} - # copy to allow building in parallel to kernel/module compilation without interference - rm -rf ${KERNEL_SRC_COPY} - cp -ar ${KERNEL_SRC} ${KERNEL_SRC_COPY} make -C ${KERNEL_SRC_COPY} mrproper cd ${KERNEL_SRC_COPY}; find . -path './debian/*' -prune \ -o -path './include/*' -prune \ @@ -184,7 +205,6 @@ binary: install -o -name '*.pl' \ \) \ -print | cpio -pd --preserve-modification-time ${BUILD_DIR}/debian/${PVE_HEADER_PKG}/usr/src/linux-headers-${KVNAME} - cd ${KERNEL_SRC_COPY}; cp -a include scripts ${BUILD_DIR}/debian/${PVE_HEADER_PKG}/usr/src/linux-headers-${KVNAME} cd ${KERNEL_SRC_COPY}; \ ( \ find arch/${KERNEL_HEADER_ARCH} -name include -type d -print | \ @@ -198,8 +218,9 @@ binary: install rm -rf ${BUILD_DIR}/${KERNEL_SRC_COPY}/${PVE_HEADER_PKG} mkdir -p ${BUILD_DIR}/${KERNEL_SRC_COPY}/${PVE_HEADER_PKG} cp ${KERNEL_SRC}/.config ${BUILD_DIR}/${KERNEL_SRC_COPY}/${PVE_HEADER_PKG}/.config - ${MAKE} -C ${KERNEL_SRC_COPY} O=${BUILD_DIR}/${KERNEL_SRC_COPY}/${PVE_HEADER_PKG} -j1 syncconfig prepare scripts - find ${BUILD_DIR}/${KERNEL_SRC_COPY}/${PVE_HEADER_PKG} -name \*.o.ur-\* | xargs rm -f + ${MAKE} -C ${KERNEL_SRC_COPY} O=${BUILD_DIR}/${KERNEL_SRC_COPY}/${PVE_HEADER_PKG} -j1 syncconfig modules_prepare prepare scripts + cd ${KERNEL_SRC_COPY}; cp -a include scripts ${BUILD_DIR}/debian/${PVE_HEADER_PKG}/usr/src/linux-headers-${KVNAME} + find ${BUILD_DIR}/${KERNEL_SRC_COPY}/${PVE_HEADER_PKG} -name \*.o.ur-\* -o -name '*.cmd' | xargs rm -f rsync --ignore-existing -r -v -a $(addprefix ${BUILD_DIR}/${KERNEL_SRC_COPY}/${PVE_HEADER_PKG}/,arch include kernel scripts tools) ${BUILD_DIR}/debian/${PVE_HEADER_PKG}/usr/src/linux-headers-${KVNAME}/ rm -rf ${BUILD_DIR}/${KERNEL_SRC_COPY} touch $@ @@ -216,7 +237,6 @@ binary: install .usr_headers_install_mark: .config_mark rm -rf '${PKG_DIR}' mkdir -p '${PKG_DIR}' - $(MAKE) -C ${KERNEL_SRC} headers_check ARCH=$(KERNEL_HEADER_ARCH) $(MAKE) -C ${KERNEL_SRC} headers_install ARCH=$(KERNEL_HEADER_ARCH) INSTALL_HDR_PATH='$(CURDIR)'/$(OUT_DIR) rm -rf $(OUT_DIR)/include/drm $(OUT_DIR)/include/scsi find $(OUT_DIR)/include \( -name .install -o -name ..install.cmd \) -execdir rm {} +