[pve-kernel.git] / Makefile

RELEASE=5.0

# also update proxmox-ve/changelog if you change KERNEL_VER or KREL
KERNEL_VER=4.10.15
PKGREL=12
# also include firmware of previous version into
# the fw package:  fwlist-2.6.32-PREV-pve
KREL=1

KERNEL_SRC=ubuntu-zesty
KERNEL_SRC_SUBMODULE=submodules/ubuntu-zesty

EXTRAVERSION=-${KREL}-pve
KVNAME=${KERNEL_VER}${EXTRAVERSION}
PACKAGE=pve-kernel-${KVNAME}
HDRPACKAGE=pve-headers-${KVNAME}

ARCH=$(shell dpkg-architecture -qDEB_BUILD_ARCH)

# amd64/x86_64/x86 share the arch subdirectory in the kernel, 'x86' so we need
# a mapping
KERNEL_ARCH=x86
ifneq (${ARCH}, amd64)
KERNEL_ARCH=${ARCH}
endif

GITVERSION:=$(shell cat .git/refs/heads/master)
CHANGELOG_DATE:=$(shell dpkg-parsechangelog -SDate -lchangelog.Debian)
export SOURCE_DATE_EPOCH ?= $(shell dpkg-parsechangelog -STimestamp -lchangelog.Debian)

SKIPABI=0

TOP=$(shell pwd)

KERNEL_CFG_ORG=config-${KERNEL_VER}.org

E1000EDIR=e1000e-3.3.5.3
E1000ESRC=${E1000EDIR}.tar.gz

IGBDIR=igb-5.3.5.4
IGBSRC=${IGBDIR}.tar.gz

IXGBEDIR=ixgbe-5.0.4
IXGBESRC=${IXGBEDIR}.tar.gz

SPLDIR=pkg-spl
SPLSRC=submodules/zfs/pkg-spl.tar.gz
ZFSDIR=pkg-zfs
ZFSSRC=submodules/zfs/pkg-zfs.tar.gz
ZFS_MODULES=zfs.ko zavl.ko znvpair.ko zunicode.ko zcommon.ko zpios.ko
SPL_MODULES=spl.ko splat.ko

DST_DEB=${PACKAGE}_${KERNEL_VER}-${PKGREL}_${ARCH}.deb
HDR_DEB=${HDRPACKAGE}_${KERNEL_VER}-${PKGREL}_${ARCH}.deb
PVEPKG=proxmox-ve
PVE_DEB=${PVEPKG}_${RELEASE}-${PKGREL}_all.deb
VIRTUALHDRPACKAGE=pve-headers
VIRTUAL_HDR_DEB=${VIRTUALHDRPACKAGE}_${RELEASE}-${PKGREL}_all.deb

LINUX_TOOLS_PKG=linux-tools-4.10
LINUX_TOOLS_DEB=${LINUX_TOOLS_PKG}_${KERNEL_VER}-${PKGREL}_${ARCH}.deb

DEBS=${DST_DEB} ${HDR_DEB} ${PVE_DEB} ${VIRTUAL_HDR_DEB} ${LINUX_TOOLS_DEB}

all: check_gcc ${DEBS}

${PVE_DEB} pve: proxmox-ve/control proxmox-ve/postinst ${PVE_RELEASE_KEYS}
	rm -rf proxmox-ve/data
	mkdir -p proxmox-ve/data/DEBIAN
	mkdir -p proxmox-ve/data/usr/share/doc/${PVEPKG}/
	mkdir -p proxmox-ve/data/etc/apt/trusted.gpg.d
	install -m 0644 proxmox-ve/proxmox-release-5.x.pubkey proxmox-ve/data/etc/apt/trusted.gpg.d/proxmox-ve-release-5.x.gpg
	sed -e 's/@KVNAME@/${KVNAME}/' -e 's/@KERNEL_VER@/${KERNEL_VER}/' -e 's/@RELEASE@/${RELEASE}/' -e 's/@PKGREL@/${PKGREL}/' <proxmox-ve/control >proxmox-ve/data/DEBIAN/control
	sed -e 's/@KVNAME@/${KVNAME}/' <proxmox-ve/postinst >proxmox-ve/data/DEBIAN/postinst
	chmod 0755 proxmox-ve/data/DEBIAN/postinst
	install -m 0755 proxmox-ve/postrm proxmox-ve/data/DEBIAN/postrm
	echo "git clone git://git.proxmox.com/git/pve-kernel.git\\ngit checkout ${GITVERSION}" > proxmox-ve/data/usr/share/doc/${PVEPKG}/SOURCE
	install -m 0644 proxmox-ve/copyright proxmox-ve/data/usr/share/doc/${PVEPKG}
	install -m 0644 proxmox-ve/changelog.Debian proxmox-ve/data/usr/share/doc/${PVEPKG}
	gzip -n --best proxmox-ve/data/usr/share/doc/${PVEPKG}/changelog.Debian
	dpkg-deb --build proxmox-ve/data ${PVE_DEB}

${VIRTUAL_HDR_DEB} pve-headers: proxmox-ve/pve-headers.control
	rm -rf proxmox-ve/data
	mkdir -p proxmox-ve/data/DEBIAN
	mkdir -p proxmox-ve/data/usr/share/doc/${VIRTUALHDRPACKAGE}/
	sed -e 's/@KVNAME@/${KVNAME}/' -e 's/@KERNEL_VER@/${KERNEL_VER}/' -e 's/@RELEASE@/${RELEASE}/' -e 's/@PKGREL@/${PKGREL}/' <proxmox-ve/pve-headers.control >proxmox-ve/data/DEBIAN/control
	echo "git clone git://git.proxmox.com/git/pve-kernel.git\\ngit checkout ${GITVERSION}" > proxmox-ve/data/usr/share/doc/${VIRTUALHDRPACKAGE}/SOURCE
	install -m 0644 proxmox-ve/copyright proxmox-ve/data/usr/share/doc/${VIRTUALHDRPACKAGE}
	install -m 0644 proxmox-ve/changelog.Debian proxmox-ve/data/usr/share/doc/${VIRTUALHDRPACKAGE}
	gzip -n --best proxmox-ve/data/usr/share/doc/${VIRTUALHDRPACKAGE}/changelog.Debian
	dpkg-deb --build proxmox-ve/data ${VIRTUAL_HDR_DEB}

check_gcc: 
ifeq    ($(CC), cc)
	gcc --version|grep "6\.3" || false
else
	$(CC) --version|grep "6\.3" || false
endif

${DST_DEB}: data control.in prerm.in postinst.in postrm.in copyright changelog.Debian | fwcheck abicheck
	mkdir -p data/DEBIAN
	sed -e 's/@KERNEL_VER@/${KERNEL_VER}/' -e 's/@KVNAME@/${KVNAME}/' -e 's/@PKGREL@/${PKGREL}/' -e 's/@ARCH@/${ARCH}/' <control.in >data/DEBIAN/control
	sed -e 's/@@KVNAME@@/${KVNAME}/g'  <prerm.in >data/DEBIAN/prerm
	chmod 0755 data/DEBIAN/prerm
	sed -e 's/@@KVNAME@@/${KVNAME}/g'  <postinst.in >data/DEBIAN/postinst
	chmod 0755 data/DEBIAN/postinst
	sed -e 's/@@KVNAME@@/${KVNAME}/g'  <postrm.in >data/DEBIAN/postrm
	chmod 0755 data/DEBIAN/postrm
	install -D -m 644 copyright data/usr/share/doc/${PACKAGE}/copyright
	install -D -m 644 changelog.Debian data/usr/share/doc/${PACKAGE}/changelog.Debian
	echo "git clone git://git.proxmox.com/git/pve-kernel.git\\ngit checkout ${GITVERSION}" > data/usr/share/doc/${PACKAGE}/SOURCE
	gzip -n -f --best data/usr/share/doc/${PACKAGE}/changelog.Debian
	rm -f data/lib/modules/${KVNAME}/source
	rm -f data/lib/modules/${KVNAME}/build
	dpkg-deb --build data ${DST_DEB}
	lintian ${DST_DEB}

LINUX_TOOLS_DH_LIST=strip installchangelogs installdocs compress shlibdeps gencontrol md5sums builddeb

${LINUX_TOOLS_DEB}: .compile_mark control.tools changelog.Debian copyright
	rm -rf linux-tools ${LINUX_TOOLS_DEB}
	mkdir -p linux-tools/debian
	cp control.tools linux-tools/debian/control
	echo 9 > linux-tools/debian/compat
	cp changelog.Debian linux-tools/debian/changelog
	cp copyright linux-tools/debian
	mkdir -p linux-tools/debian/linux-tools-4.10/usr/bin
	install -m 0755 ${KERNEL_SRC}/tools/perf/perf linux-tools/debian/linux-tools-4.10/usr/bin/perf_4.10
	cd linux-tools; for i in ${LINUX_TOOLS_DH_LIST}; do dh_$$i; done
	lintian ${LINUX_TOOLS_DEB}

fwlist-${KVNAME}: data
	./find-firmware.pl data/lib/modules/${KVNAME} >fwlist.tmp
	mv fwlist.tmp $@

.PHONY: fwcheck
fwcheck: fwlist-${KVNAME} fwlist-previous
	@echo "checking fwlist for changes since last built firmware package.."
	@echo "if this check fails, add fwlist-${KVNAME} to the pve-firmware repository and upload a new firmware package together with the ${KVNAME} kernel"
	bash -c "diff -up -N <(sort fwlist-previous | uniq) <(sort fwlist-${KVNAME} | uniq) > fwlist.diff"
	rm fwlist.diff
	@echo "done, no need to rebuild pve-firmware"


abi-${KVNAME}: .compile_mark
	sed -e 's/^\(.\+\)[[:space:]]\+\(.\+\)[[:space:]]\(.\+\)$$/\3 \2 \1/' ${KERNEL_SRC}/Module.symvers | sort > abi-${KVNAME}

.PHONY: abicheck
abicheck: abi-${KVNAME} abi-previous abi-blacklist
	./abi-check abi-${KVNAME} abi-previous ${SKIPABI}

data: .compile_mark igb.ko ixgbe.ko e1000e.ko ${SPL_MODULES} ${ZFS_MODULES}
	rm -rf data tmp; mkdir -p tmp/lib/modules/${KVNAME}
	mkdir tmp/boot
	install -m 644 ${KERNEL_SRC}/.config tmp/boot/config-${KVNAME}
	install -m 644 ${KERNEL_SRC}/System.map tmp/boot/System.map-${KVNAME}
	install -m 644 ${KERNEL_SRC}/arch/${KERNEL_ARCH}/boot/bzImage tmp/boot/vmlinuz-${KVNAME}
	cd ${KERNEL_SRC}; make INSTALL_MOD_PATH=../tmp/ modules_install
	## install latest ibg driver
	install -m 644 igb.ko tmp/lib/modules/${KVNAME}/kernel/drivers/net/ethernet/intel/igb/
	# install latest ixgbe driver
	install -m 644 ixgbe.ko tmp/lib/modules/${KVNAME}/kernel/drivers/net/ethernet/intel/ixgbe/
	# install latest e1000e driver
	install -m 644 e1000e.ko tmp/lib/modules/${KVNAME}/kernel/drivers/net/ethernet/intel/e1000e/
	# install zfs drivers
	install -d -m 0755 tmp/lib/modules/${KVNAME}/zfs
	install -m 644 ${SPL_MODULES} ${ZFS_MODULES} tmp/lib/modules/${KVNAME}/zfs
	# remove firmware
	rm -rf tmp/lib/firmware
	# strip debug info
	find tmp/lib/modules -name \*.ko -print | while read f ; do strip --strip-debug "$$f"; done
	# finalize
	/sbin/depmod -b tmp/ ${KVNAME}
	# Autogenerate blacklist for watchdog devices (see README)
	install -m 0755 -d tmp/lib/modprobe.d
	ls tmp/lib/modules/${KVNAME}/kernel/drivers/watchdog/ > watchdog-blacklist.tmp
	echo ipmi_watchdog.ko >> watchdog-blacklist.tmp
	cat watchdog-blacklist.tmp|sed -e 's/^/blacklist /' -e 's/.ko$$//'|sort -u > tmp/lib/modprobe.d/blacklist_${PACKAGE}.conf
	mv tmp data

PVE_CONFIG_OPTS= \
-m INTEL_MEI_WDT \
-d CONFIG_SND_PCM_OSS \
-e CONFIG_TRANSPARENT_HUGEPAGE_MADVISE \
-d CONFIG_TRANSPARENT_HUGEPAGE_ALWAYS \
-m CONFIG_CEPH_FS \
-m CONFIG_BLK_DEV_NBD \
-m CONFIG_BLK_DEV_RBD \
-m CONFIG_BCACHE \
-m CONFIG_JFS_FS \
-m CONFIG_HFS_FS \
-m CONFIG_HFSPLUS_FS \
-e CONFIG_BRIDGE \
-e CONFIG_BRIDGE_NETFILTER \
-e CONFIG_BLK_DEV_SD \
-e CONFIG_BLK_DEV_SR \
-e CONFIG_BLK_DEV_DM \
-e CONFIG_BLK_DEV_NVME \
-d CONFIG_INPUT_EVBUG \
-d CONFIG_CPU_FREQ_DEFAULT_GOV_ONDEMAND \
-e CONFIG_CPU_FREQ_DEFAULT_GOV_PERFORMANCE \
-d CONFIG_MODULE_SIG \
-d CONFIG_MEMCG_DISABLED \
-e CONFIG_MEMCG_SWAP_ENABLED \
-e CONFIG_MEMCG_KMEM \
-d CONFIG_DEFAULT_CFQ \
-e CONFIG_DEFAULT_DEADLINE \
-e CONFIG_MODVERSIONS \
-d CONFIG_DEFAULT_SECURITY_DAC \
-e CONFIG_DEFAULT_SECURITY_APPARMOR \
--set-str CONFIG_DEFAULT_SECURITY apparmor

.compile_mark: ${KERNEL_SRC}/README ${KERNEL_CFG_ORG}
	[ ! -e /lib/modules/${KVNAME}/build ] || (echo "please remove /lib/modules/${KVNAME}/build" && false)
	cp ${KERNEL_CFG_ORG} ${KERNEL_SRC}/.config
	cd ${KERNEL_SRC}; ./scripts/config ${PVE_CONFIG_OPTS}
	cd ${KERNEL_SRC}; make oldconfig
	cd ${KERNEL_SRC}; make KBUILD_BUILD_VERSION_TIMESTAMP="PVE ${KERNEL_VER}-${PKGREL} ($(CHANGELOG_DATE))" -j 8
	make -C ${KERNEL_SRC}/tools/perf prefix=/usr HAVE_CPLUS_DEMANGLE=1 NO_LIBPYTHON=1 NO_LIBPERL=1 NO_LIBCRYPTO=1 PYTHON=python2.7
	make -C ${KERNEL_SRC}/tools/perf man
	touch $@

${KERNEL_SRC}/README ${KERNEL_CFG_ORG}: ${KERNEL_SRC_SUBMODULE} | submodules
	rm -rf ${KERNEL_SRC}
	cp -a ${KERNEL_SRC_SUBMODULE} ${KERNEL_SRC}
	cat ${KERNEL_SRC}/debian.master/config/config.common.ubuntu ${KERNEL_SRC}/debian.master/config/${ARCH}/config.common.${ARCH} ${KERNEL_SRC}/debian.master/config/${ARCH}/config.flavour.generic > ${KERNEL_CFG_ORG}
	cd ${KERNEL_SRC}; patch -p1 < ../uname-version-timestamp.patch
	cd ${KERNEL_SRC}; patch -p1 <../bridge-patch.diff
	#cd ${KERNEL_SRC}; patch -p1 <../bridge-forward-ipv6-neighbor-solicitation.patch
	#cd ${KERNEL_SRC}; patch -p1 <../add-empty-ndo_poll_controller-to-veth.patch
	cd ${KERNEL_SRC}; patch -p1 <../override_for_missing_acs_capabilities.patch
	#cd ${KERNEL_SRC}; patch -p1 <../vhost-net-extend-device-allocation-to-vmalloc.patch
	cd ${KERNEL_SRC}; patch -p1 < ../kvm-dynamic-halt-polling-disable-default.patch
	cd ${KERNEL_SRC}; patch -p1 < ../cgroup-cpuset-add-cpuset.remap_cpus.patch
	cd ${KERNEL_SRC}; patch -p1 < ../openvswitch-Set-internal-device-max-mtu-to-ETH_MAX_M.patch
	cd ${KERNEL_SRC}; patch -p1 < ../0001-netfilter-nft_set_rbtree-handle-re-addition-element-.patch # DoS from within (unpriv) containers
	cd ${KERNEL_SRC}; patch -p1 < ../CVE-2017-8890-dccp-tcp-do-not-inherit-mc_list-from-parent.patch
	cd ${KERNEL_SRC}; patch -p1 < ../CVE-2017-9074-ipv6-Prevent-overrun-when-parsing-v6-header-options.patch
	cd ${KERNEL_SRC}; patch -p1 < ../CVE-2017-9074-2-ipv6-Check-ip6_find_1stfragopt-return-value-properly.patch
	cd ${KERNEL_SRC}; patch -p1 < ../CVE-2017-9075-sctp-do-not-inherit-ipv6_-mc-ac-fl-_list-from-parent.patch
	cd ${KERNEL_SRC}; patch -p1 < ../CVE-2017-9076_9077-ipv6-dccp-do-not-inherit-ipv6_mc_list-from-parent.patch
	cd ${KERNEL_SRC}; patch -p1 < ../CVE-2017-9242-ipv6-fix-out-of-bound-writes-in-__ip6_append_data.patch
	cd ${KERNEL_SRC}; patch -p1 < ../pinctl-amd-ryzen-01-make-use-of-raw_spinlock-variants.patch
	cd ${KERNEL_SRC}; patch -p1 < ../pinctl-amd-ryzen-02-Use-regular-interrupt-instead-of-chained.patch
	sed -i ${KERNEL_SRC}/Makefile -e 's/^EXTRAVERSION.*$$/EXTRAVERSION=${EXTRAVERSION}/'
	touch $@

e1000e.ko e1000e: .compile_mark ${E1000ESRC}
	rm -rf ${E1000EDIR}
	tar xf ${E1000ESRC}
	[ ! -e /lib/modules/${KVNAME}/build ] || (echo "please remove /lib/modules/${KVNAME}/build" && false)
	cd ${E1000EDIR}; patch -p1 < ../intel-module-gcc6-compat.patch
	cd ${E1000EDIR}; patch -p1 < ../e1000e_4.10_compat.patch
	cd ${E1000EDIR}; patch -p1 < ../e1000e_4.10_max-mtu.patch
	cd ${E1000EDIR}/src; make BUILD_KERNEL=${KVNAME} KSRC=${TOP}/${KERNEL_SRC}
	cp ${E1000EDIR}/src/e1000e.ko e1000e.ko

igb.ko igb: .compile_mark ${IGBSRC}
	rm -rf ${IGBDIR}
	tar xf ${IGBSRC}
	[ ! -e /lib/modules/${KVNAME}/build ] || (echo "please remove /lib/modules/${KVNAME}/build" && false)
	cd ${IGBDIR}; patch -p1 < ../intel-module-gcc6-compat.patch
	cd ${IGBDIR}; patch -p1 < ../igb_4.9_compat.patch
	cd ${IGBDIR}; patch -p1 < ../igb_4.10_compat.patch
	cd ${IGBDIR}; patch -p1 < ../igb_4.10_max-mtu.patch
	cd ${IGBDIR}/src; make BUILD_KERNEL=${KVNAME} KSRC=${TOP}/${KERNEL_SRC}
	cp ${IGBDIR}/src/igb.ko igb.ko

ixgbe.ko ixgbe: .compile_mark ${IXGBESRC}
	rm -rf ${IXGBEDIR}
	tar xf ${IXGBESRC}
	[ ! -e /lib/modules/${KVNAME}/build ] || (echo "please remove /lib/modules/${KVNAME}/build" && false)
	cd ${IXGBEDIR}; patch -p1 < ../ixgbe_4.10_compat.patch
	cd ${IXGBEDIR}; patch -p1 < ../ixgbe_4.10_max-mtu.patch
	cd ${IXGBEDIR}/src; make CFLAGS_EXTRA="-DIXGBE_NO_LRO" BUILD_KERNEL=${KVNAME} KSRC=${TOP}/${KERNEL_SRC}
	cp ${IXGBEDIR}/src/ixgbe.ko ixgbe.ko

${SPL_MODULES}: .compile_mark ${SPLSRC}
	rm -rf ${SPLDIR}
	tar xf ${SPLSRC}
	[ ! -e /lib/modules/${KVNAME}/build ] || (echo "please remove /lib/modules/${KVNAME}/build" && false)
	cd ${SPLDIR}; ./autogen.sh
	cd ${SPLDIR}; ./configure --with-config=kernel --with-linux=${TOP}/${KERNEL_SRC} --with-linux-obj=${TOP}/${KERNEL_SRC}
	cd ${SPLDIR}; make
	cp ${SPLDIR}/module/spl/spl.ko spl.ko
	cp ${SPLDIR}/module/splat/splat.ko splat.ko

${ZFS_MODULES}: .compile_mark ${ZFSSRC}
	rm -rf ${ZFSDIR}
	tar xf ${ZFSSRC}
	[ ! -e /lib/modules/${KVNAME}/build ] || (echo "please remove /lib/modules/${KVNAME}/build" && false)
	cd ${ZFSDIR}; ./autogen.sh
	cd ${ZFSDIR}; ./configure --with-spl=${TOP}/${SPLDIR} --with-spl-obj=${TOP}/${SPLDIR} --with-config=kernel --with-linux=${TOP}/${KERNEL_SRC} --with-linux-obj=${TOP}/${KERNEL_SRC}
	cd ${ZFSDIR}; make
	cp ${ZFSDIR}/module/zfs/zfs.ko zfs.ko
	cp ${ZFSDIR}/module/avl/zavl.ko zavl.ko
	cp ${ZFSDIR}/module/nvpair/znvpair.ko znvpair.ko
	cp ${ZFSDIR}/module/unicode/zunicode.ko zunicode.ko
	cp ${ZFSDIR}/module/zcommon/zcommon.ko zcommon.ko
	cp ${ZFSDIR}/module/zpios/zpios.ko zpios.ko

headers_tmp := $(CURDIR)/tmp-headers
headers_dir := $(headers_tmp)/usr/src/linux-headers-${KVNAME}

${HDR_DEB} hdr: .compile_mark headers-control.in headers-postinst.in
	rm -rf $(headers_tmp)
	install -d $(headers_tmp)/DEBIAN $(headers_dir)/include/
	sed -e 's/@KERNEL_VER@/${KERNEL_VER}/' -e 's/@KVNAME@/${KVNAME}/' -e 's/@PKGREL@/${PKGREL}/' -e 's/@ARCH@/${ARCH}/' <headers-control.in >$(headers_tmp)/DEBIAN/control
	sed -e 's/@@KVNAME@@/${KVNAME}/g'  <headers-postinst.in >$(headers_tmp)/DEBIAN/postinst
	chmod 0755 $(headers_tmp)/DEBIAN/postinst
	install -D -m 644 copyright $(headers_tmp)/usr/share/doc/${HDRPACKAGE}/copyright
	install -D -m 644 changelog.Debian $(headers_tmp)/usr/share/doc/${HDRPACKAGE}/changelog.Debian
	echo "git clone git://git.proxmox.com/git/pve-kernel.git\\ngit checkout ${GITVERSION}" > $(headers_tmp)/usr/share/doc/${HDRPACKAGE}/SOURCE
	gzip -n -f --best $(headers_tmp)/usr/share/doc/${HDRPACKAGE}/changelog.Debian
	install -m 0644 ${KERNEL_SRC}/.config $(headers_dir)
	install -m 0644 ${KERNEL_SRC}/Module.symvers $(headers_dir)
	cd ${KERNEL_SRC}; find . -path './debian/*' -prune -o -path './include/*' -prune -o -path './Documentation' -prune \
	  -o -path './scripts' -prune -o -type f \
	  \( -name 'Makefile*' -o -name 'Kconfig*' -o -name 'Kbuild*' -o \
	     -name '*.sh' -o -name '*.pl' \) \
	  -print | cpio -pd --preserve-modification-time $(headers_dir)
	cd ${KERNEL_SRC}; cp -a include scripts $(headers_dir)
	cd ${KERNEL_SRC}; (find arch/${KERNEL_ARCH} -name include -type d -print | \
		xargs -n1 -i: find : -type f) | \
		cpio -pd --preserve-modification-time $(headers_dir)
	mkdir -p ${headers_tmp}/lib/modules/${KVNAME}
	ln -sf /usr/src/linux-headers-${KVNAME} ${headers_tmp}/lib/modules/${KVNAME}/build
	dpkg-deb --build $(headers_tmp) ${HDR_DEB}
	#lintian ${HDR_DEB}

.PHONY: upload
upload: ${DEBS}
	tar cf - ${DEBS}|ssh repoman@repo.proxmox.com -- upload --product pve --dist stretch --arch ${ARCH}

.PHONY: distclean
distclean: clean
	rm -rf linux-firmware.git dvb-firmware.git ${KERNEL_SRC}.org 

# upgrade to current master
.PHONY: update_modules
update_modules: submodules
	git submodule foreach 'git pull --ff-only origin master'

# make sure submodules were initialized
.PHONY: submodules
submodules ${SPLSRC} ${ZFSSRC}:
	test -f "${KERNEL_SRC_SUBMODULE}/README" || git submodule update --init


.PHONY: clean
clean:
	rm -rf *~ .compile_mark watchdog-blacklist.tmp ${KERNEL_CFG_ORG} ${KERNEL_SRC} ${KERNEL_SRC}.tmp ${KERNEL_CFG_ORG} ${KERNEL_SRC}.org orig tmp data proxmox-ve/data *.deb ${headers_tmp} fwdata fwlist.tmp *.ko abi-${KVNAME} fwlist-${KVNAME} ${ZFSDIR} ${SPLDIR} ${SPL_MODULES} ${ZFS_MODULES} hpsa.ko ${HPSADIR} ${DRBDDIR} drbd-9.0 ${IGBDIR} igb.ko ${IXGBEDIR} ixgbe.ko ${E1000EDIR} e1000e.ko linux-tools ${LINUX_TOOLS_DEB}
Commit	Line	Data
ba2f1a67 FG	1	RELEASE=5.0
	2
	3	# also update proxmox-ve/changelog if you change KERNEL_VER or KREL
05806a84	4	KERNEL_VER=4.10.15
47d15038	5	PKGREL=12
ba2f1a67 FG	6	# also include firmware of previous version into
ba2f1a67 FG	7	# the fw package: fwlist-2.6.32-PREV-pve
4a6684df	8	KREL=1
ba2f1a67 FG	9
ba2f1a67 FG	10	KERNEL_SRC=ubuntu-zesty
32054ef4	11	KERNEL_SRC_SUBMODULE=submodules/ubuntu-zesty
ba2f1a67 FG	12
	13	EXTRAVERSION=-${KREL}-pve
	14	KVNAME=${KERNEL_VER}${EXTRAVERSION}
	15	PACKAGE=pve-kernel-${KVNAME}
	16	HDRPACKAGE=pve-headers-${KVNAME}
	17
37d1225d	18	ARCH=$(shell dpkg-architecture -qDEB_BUILD_ARCH)
6490543b TL	19
	20	# amd64/x86_64/x86 share the arch subdirectory in the kernel, 'x86' so we need
	21	# a mapping
	22	KERNEL_ARCH=x86
	23	ifneq (${ARCH}, amd64)
	24	KERNEL_ARCH=${ARCH}
	25	endif
	26
ba2f1a67 FG	27	GITVERSION:=$(shell cat .git/refs/heads/master)
ba2f1a67 FG	28	CHANGELOG_DATE:=$(shell dpkg-parsechangelog -SDate -lchangelog.Debian)
95cebd41	29	export SOURCE_DATE_EPOCH ?= $(shell dpkg-parsechangelog -STimestamp -lchangelog.Debian)
ba2f1a67	30
41f5ee98 FG	31	SKIPABI=0
41f5ee98 FG	32
ba2f1a67 FG	33	TOP=$(shell pwd)
	34
	35	KERNEL_CFG_ORG=config-${KERNEL_VER}.org
	36
ba2f1a67 FG	37	E1000EDIR=e1000e-3.3.5.3
	38	E1000ESRC=${E1000EDIR}.tar.gz
	39
	40	IGBDIR=igb-5.3.5.4
	41	IGBSRC=${IGBDIR}.tar.gz
	42
	43	IXGBEDIR=ixgbe-5.0.4
	44	IXGBESRC=${IXGBEDIR}.tar.gz
	45
ba2f1a67	46	SPLDIR=pkg-spl
32054ef4	47	SPLSRC=submodules/zfs/pkg-spl.tar.gz
ba2f1a67	48	ZFSDIR=pkg-zfs
32054ef4	49	ZFSSRC=submodules/zfs/pkg-zfs.tar.gz
ba2f1a67 FG	50	ZFS_MODULES=zfs.ko zavl.ko znvpair.ko zunicode.ko zcommon.ko zpios.ko
	51	SPL_MODULES=spl.ko splat.ko
	52
ba2f1a67 FG	53	DST_DEB=${PACKAGE}_${KERNEL_VER}-${PKGREL}_${ARCH}.deb
	54	HDR_DEB=${HDRPACKAGE}_${KERNEL_VER}-${PKGREL}_${ARCH}.deb
	55	PVEPKG=proxmox-ve
	56	PVE_DEB=${PVEPKG}_${RELEASE}-${PKGREL}_all.deb
	57	VIRTUALHDRPACKAGE=pve-headers
	58	VIRTUAL_HDR_DEB=${VIRTUALHDRPACKAGE}_${RELEASE}-${PKGREL}_all.deb
	59
	60	LINUX_TOOLS_PKG=linux-tools-4.10
37d1225d	61	LINUX_TOOLS_DEB=${LINUX_TOOLS_PKG}_${KERNEL_VER}-${PKGREL}_${ARCH}.deb
ba2f1a67	62
4627a236	63	DEBS=${DST_DEB} ${HDR_DEB} ${PVE_DEB} ${VIRTUAL_HDR_DEB} ${LINUX_TOOLS_DEB}
ba2f1a67 FG	64
	65	all: check_gcc ${DEBS}
	66
	67	${PVE_DEB} pve: proxmox-ve/control proxmox-ve/postinst ${PVE_RELEASE_KEYS}
	68	rm -rf proxmox-ve/data
	69	mkdir -p proxmox-ve/data/DEBIAN
	70	mkdir -p proxmox-ve/data/usr/share/doc/${PVEPKG}/
	71	mkdir -p proxmox-ve/data/etc/apt/trusted.gpg.d
ba2f1a67 FG	72	install -m 0644 proxmox-ve/proxmox-release-5.x.pubkey proxmox-ve/data/etc/apt/trusted.gpg.d/proxmox-ve-release-5.x.gpg
	73	sed -e 's/@KVNAME@/${KVNAME}/' -e 's/@KERNEL_VER@/${KERNEL_VER}/' -e 's/@RELEASE@/${RELEASE}/' -e 's/@PKGREL@/${PKGREL}/' <proxmox-ve/control >proxmox-ve/data/DEBIAN/control
	74	sed -e 's/@KVNAME@/${KVNAME}/' <proxmox-ve/postinst >proxmox-ve/data/DEBIAN/postinst
	75	chmod 0755 proxmox-ve/data/DEBIAN/postinst
	76	install -m 0755 proxmox-ve/postrm proxmox-ve/data/DEBIAN/postrm
	77	echo "git clone git://git.proxmox.com/git/pve-kernel.git\\ngit checkout ${GITVERSION}" > proxmox-ve/data/usr/share/doc/${PVEPKG}/SOURCE
	78	install -m 0644 proxmox-ve/copyright proxmox-ve/data/usr/share/doc/${PVEPKG}
	79	install -m 0644 proxmox-ve/changelog.Debian proxmox-ve/data/usr/share/doc/${PVEPKG}
	80	gzip -n --best proxmox-ve/data/usr/share/doc/${PVEPKG}/changelog.Debian
	81	dpkg-deb --build proxmox-ve/data ${PVE_DEB}
	82
	83	${VIRTUAL_HDR_DEB} pve-headers: proxmox-ve/pve-headers.control
	84	rm -rf proxmox-ve/data
	85	mkdir -p proxmox-ve/data/DEBIAN
	86	mkdir -p proxmox-ve/data/usr/share/doc/${VIRTUALHDRPACKAGE}/
	87	sed -e 's/@KVNAME@/${KVNAME}/' -e 's/@KERNEL_VER@/${KERNEL_VER}/' -e 's/@RELEASE@/${RELEASE}/' -e 's/@PKGREL@/${PKGREL}/' <proxmox-ve/pve-headers.control >proxmox-ve/data/DEBIAN/control
c5cbefc1	88	echo "git clone git://git.proxmox.com/git/pve-kernel.git\\ngit checkout ${GITVERSION}" > proxmox-ve/data/usr/share/doc/${VIRTUALHDRPACKAGE}/SOURCE
ba2f1a67 FG	89	install -m 0644 proxmox-ve/copyright proxmox-ve/data/usr/share/doc/${VIRTUALHDRPACKAGE}
	90	install -m 0644 proxmox-ve/changelog.Debian proxmox-ve/data/usr/share/doc/${VIRTUALHDRPACKAGE}
	91	gzip -n --best proxmox-ve/data/usr/share/doc/${VIRTUALHDRPACKAGE}/changelog.Debian
	92	dpkg-deb --build proxmox-ve/data ${VIRTUAL_HDR_DEB}
	93
ba2f1a67 FG	94	check_gcc:
	95	ifeq ($(CC), cc)
	96	gcc --version\|grep "6\.3" \|\| false
	97	else
	98	$(CC) --version\|grep "6\.3" \|\| false
	99	endif
	100
e01a4cb4	101	${DST_DEB}: data control.in prerm.in postinst.in postrm.in copyright changelog.Debian \| fwcheck abicheck
ba2f1a67	102	mkdir -p data/DEBIAN
37d1225d	103	sed -e 's/@KERNEL_VER@/${KERNEL_VER}/' -e 's/@KVNAME@/${KVNAME}/' -e 's/@PKGREL@/${PKGREL}/' -e 's/@ARCH@/${ARCH}/' <control.in >data/DEBIAN/control
ba2f1a67 FG	104	sed -e 's/@@KVNAME@@/${KVNAME}/g' <prerm.in >data/DEBIAN/prerm
	105	chmod 0755 data/DEBIAN/prerm
	106	sed -e 's/@@KVNAME@@/${KVNAME}/g' <postinst.in >data/DEBIAN/postinst
	107	chmod 0755 data/DEBIAN/postinst
	108	sed -e 's/@@KVNAME@@/${KVNAME}/g' <postrm.in >data/DEBIAN/postrm
	109	chmod 0755 data/DEBIAN/postrm
	110	install -D -m 644 copyright data/usr/share/doc/${PACKAGE}/copyright
	111	install -D -m 644 changelog.Debian data/usr/share/doc/${PACKAGE}/changelog.Debian
	112	echo "git clone git://git.proxmox.com/git/pve-kernel.git\\ngit checkout ${GITVERSION}" > data/usr/share/doc/${PACKAGE}/SOURCE
	113	gzip -n -f --best data/usr/share/doc/${PACKAGE}/changelog.Debian
	114	rm -f data/lib/modules/${KVNAME}/source
	115	rm -f data/lib/modules/${KVNAME}/build
	116	dpkg-deb --build data ${DST_DEB}
	117	lintian ${DST_DEB}
	118
	119	LINUX_TOOLS_DH_LIST=strip installchangelogs installdocs compress shlibdeps gencontrol md5sums builddeb
	120
	121	${LINUX_TOOLS_DEB}: .compile_mark control.tools changelog.Debian copyright
	122	rm -rf linux-tools ${LINUX_TOOLS_DEB}
	123	mkdir -p linux-tools/debian
	124	cp control.tools linux-tools/debian/control
	125	echo 9 > linux-tools/debian/compat
	126	cp changelog.Debian linux-tools/debian/changelog
	127	cp copyright linux-tools/debian
	128	mkdir -p linux-tools/debian/linux-tools-4.10/usr/bin
	129	install -m 0755 ${KERNEL_SRC}/tools/perf/perf linux-tools/debian/linux-tools-4.10/usr/bin/perf_4.10
	130	cd linux-tools; for i in ${LINUX_TOOLS_DH_LIST}; do dh_$$i; done
	131	lintian ${LINUX_TOOLS_DEB}
	132
	133	fwlist-${KVNAME}: data
	134	./find-firmware.pl data/lib/modules/${KVNAME} >fwlist.tmp
	135	mv fwlist.tmp $@
	136
e01a4cb4	137	.PHONY: fwcheck
4627a236	138	fwcheck: fwlist-${KVNAME} fwlist-previous
5ecce9d0 FG	139	@echo "checking fwlist for changes since last built firmware package.."
5ecce9d0 FG	140	@echo "if this check fails, add fwlist-${KVNAME} to the pve-firmware repository and upload a new firmware package together with the ${KVNAME} kernel"
4627a236 FG	141	bash -c "diff -up -N <(sort fwlist-previous \| uniq) <(sort fwlist-${KVNAME} \| uniq) > fwlist.diff"
4627a236 FG	142	rm fwlist.diff
5ecce9d0 FG	143	@echo "done, no need to rebuild pve-firmware"
5ecce9d0 FG	144
4627a236	145
1b29f8ed FG	146	abi-${KVNAME}: .compile_mark
	147	sed -e 's/^\(.\+\)[[:space:]]\+\(.\+\)[[:space:]]\(.\+\)$$/\3 \2 \1/' ${KERNEL_SRC}/Module.symvers \| sort > abi-${KVNAME}
	148
e01a4cb4	149	.PHONY: abicheck
bfb0dd28 FG	150	abicheck: abi-${KVNAME} abi-previous abi-blacklist
bfb0dd28 FG	151	./abi-check abi-${KVNAME} abi-previous ${SKIPABI}
41f5ee98	152
ba2f1a67 FG	153	data: .compile_mark igb.ko ixgbe.ko e1000e.ko ${SPL_MODULES} ${ZFS_MODULES}
	154	rm -rf data tmp; mkdir -p tmp/lib/modules/${KVNAME}
	155	mkdir tmp/boot
	156	install -m 644 ${KERNEL_SRC}/.config tmp/boot/config-${KVNAME}
	157	install -m 644 ${KERNEL_SRC}/System.map tmp/boot/System.map-${KVNAME}
6490543b	158	install -m 644 ${KERNEL_SRC}/arch/${KERNEL_ARCH}/boot/bzImage tmp/boot/vmlinuz-${KVNAME}
ba2f1a67 FG	159	cd ${KERNEL_SRC}; make INSTALL_MOD_PATH=../tmp/ modules_install
	160	## install latest ibg driver
	161	install -m 644 igb.ko tmp/lib/modules/${KVNAME}/kernel/drivers/net/ethernet/intel/igb/
	162	# install latest ixgbe driver
	163	install -m 644 ixgbe.ko tmp/lib/modules/${KVNAME}/kernel/drivers/net/ethernet/intel/ixgbe/
	164	# install latest e1000e driver
	165	install -m 644 e1000e.ko tmp/lib/modules/${KVNAME}/kernel/drivers/net/ethernet/intel/e1000e/
ba2f1a67 FG	166	# install zfs drivers
	167	install -d -m 0755 tmp/lib/modules/${KVNAME}/zfs
	168	install -m 644 ${SPL_MODULES} ${ZFS_MODULES} tmp/lib/modules/${KVNAME}/zfs
ba2f1a67 FG	169	# remove firmware
	170	rm -rf tmp/lib/firmware
	171	# strip debug info
	172	find tmp/lib/modules -name \*.ko -print \| while read f ; do strip --strip-debug "$$f"; done
	173	# finalize
	174	/sbin/depmod -b tmp/ ${KVNAME}
	175	# Autogenerate blacklist for watchdog devices (see README)
	176	install -m 0755 -d tmp/lib/modprobe.d
	177	ls tmp/lib/modules/${KVNAME}/kernel/drivers/watchdog/ > watchdog-blacklist.tmp
	178	echo ipmi_watchdog.ko >> watchdog-blacklist.tmp
	179	cat watchdog-blacklist.tmp\|sed -e 's/^/blacklist /' -e 's/.ko$$//'\|sort -u > tmp/lib/modprobe.d/blacklist_${PACKAGE}.conf
	180	mv tmp data
	181
	182	PVE_CONFIG_OPTS= \
	183	-m INTEL_MEI_WDT \
	184	-d CONFIG_SND_PCM_OSS \
	185	-e CONFIG_TRANSPARENT_HUGEPAGE_MADVISE \
	186	-d CONFIG_TRANSPARENT_HUGEPAGE_ALWAYS \
	187	-m CONFIG_CEPH_FS \
	188	-m CONFIG_BLK_DEV_NBD \
	189	-m CONFIG_BLK_DEV_RBD \
	190	-m CONFIG_BCACHE \
	191	-m CONFIG_JFS_FS \
	192	-m CONFIG_HFS_FS \
	193	-m CONFIG_HFSPLUS_FS \
	194	-e CONFIG_BRIDGE \
	195	-e CONFIG_BRIDGE_NETFILTER \
	196	-e CONFIG_BLK_DEV_SD \
	197	-e CONFIG_BLK_DEV_SR \
	198	-e CONFIG_BLK_DEV_DM \
	199	-e CONFIG_BLK_DEV_NVME \
	200	-d CONFIG_INPUT_EVBUG \
	201	-d CONFIG_CPU_FREQ_DEFAULT_GOV_ONDEMAND \
	202	-e CONFIG_CPU_FREQ_DEFAULT_GOV_PERFORMANCE \
	203	-d CONFIG_MODULE_SIG \
	204	-d CONFIG_MEMCG_DISABLED \
	205	-e CONFIG_MEMCG_SWAP_ENABLED \
	206	-e CONFIG_MEMCG_KMEM \
	207	-d CONFIG_DEFAULT_CFQ \
e0f4973c	208	-e CONFIG_DEFAULT_DEADLINE \
1b29f8ed	209	-e CONFIG_MODVERSIONS \
ba2f1a67 FG	210	-d CONFIG_DEFAULT_SECURITY_DAC \
	211	-e CONFIG_DEFAULT_SECURITY_APPARMOR \
	212	--set-str CONFIG_DEFAULT_SECURITY apparmor
	213
	214	.compile_mark: ${KERNEL_SRC}/README ${KERNEL_CFG_ORG}
a6c22e7b	215	[ ! -e /lib/modules/${KVNAME}/build ] \|\| (echo "please remove /lib/modules/${KVNAME}/build" && false)
ba2f1a67 FG	216	cp ${KERNEL_CFG_ORG} ${KERNEL_SRC}/.config
	217	cd ${KERNEL_SRC}; ./scripts/config ${PVE_CONFIG_OPTS}
	218	cd ${KERNEL_SRC}; make oldconfig
	219	cd ${KERNEL_SRC}; make KBUILD_BUILD_VERSION_TIMESTAMP="PVE ${KERNEL_VER}-${PKGREL} ($(CHANGELOG_DATE))" -j 8
	220	make -C ${KERNEL_SRC}/tools/perf prefix=/usr HAVE_CPLUS_DEMANGLE=1 NO_LIBPYTHON=1 NO_LIBPERL=1 NO_LIBCRYPTO=1 PYTHON=python2.7
	221	make -C ${KERNEL_SRC}/tools/perf man
	222	touch $@
	223
32054ef4	224	${KERNEL_SRC}/README ${KERNEL_CFG_ORG}: ${KERNEL_SRC_SUBMODULE} \| submodules
ba2f1a67	225	rm -rf ${KERNEL_SRC}
32054ef4	226	cp -a ${KERNEL_SRC_SUBMODULE} ${KERNEL_SRC}
37d1225d	227	cat ${KERNEL_SRC}/debian.master/config/config.common.ubuntu ${KERNEL_SRC}/debian.master/config/${ARCH}/config.common.${ARCH} ${KERNEL_SRC}/debian.master/config/${ARCH}/config.flavour.generic > ${KERNEL_CFG_ORG}
ba2f1a67 FG	228	cd ${KERNEL_SRC}; patch -p1 < ../uname-version-timestamp.patch
	229	cd ${KERNEL_SRC}; patch -p1 <../bridge-patch.diff
	230	#cd ${KERNEL_SRC}; patch -p1 <../bridge-forward-ipv6-neighbor-solicitation.patch
	231	#cd ${KERNEL_SRC}; patch -p1 <../add-empty-ndo_poll_controller-to-veth.patch
	232	cd ${KERNEL_SRC}; patch -p1 <../override_for_missing_acs_capabilities.patch
	233	#cd ${KERNEL_SRC}; patch -p1 <../vhost-net-extend-device-allocation-to-vmalloc.patch
	234	cd ${KERNEL_SRC}; patch -p1 < ../kvm-dynamic-halt-polling-disable-default.patch
	235	cd ${KERNEL_SRC}; patch -p1 < ../cgroup-cpuset-add-cpuset.remap_cpus.patch
e513dc9e	236	cd ${KERNEL_SRC}; patch -p1 < ../openvswitch-Set-internal-device-max-mtu-to-ETH_MAX_M.patch
88582bb0	237	cd ${KERNEL_SRC}; patch -p1 < ../0001-netfilter-nft_set_rbtree-handle-re-addition-element-.patch # DoS from within (unpriv) containers
0f831b3c FG	238	cd ${KERNEL_SRC}; patch -p1 < ../CVE-2017-8890-dccp-tcp-do-not-inherit-mc_list-from-parent.patch
0f831b3c FG	239	cd ${KERNEL_SRC}; patch -p1 < ../CVE-2017-9074-ipv6-Prevent-overrun-when-parsing-v6-header-options.patch
c1f358be	240	cd ${KERNEL_SRC}; patch -p1 < ../CVE-2017-9074-2-ipv6-Check-ip6_find_1stfragopt-return-value-properly.patch
0f831b3c FG	241	cd ${KERNEL_SRC}; patch -p1 < ../CVE-2017-9075-sctp-do-not-inherit-ipv6_-mc-ac-fl-_list-from-parent.patch
	242	cd ${KERNEL_SRC}; patch -p1 < ../CVE-2017-9076_9077-ipv6-dccp-do-not-inherit-ipv6_mc_list-from-parent.patch
	243	cd ${KERNEL_SRC}; patch -p1 < ../CVE-2017-9242-ipv6-fix-out-of-bound-writes-in-__ip6_append_data.patch
5aa54b75 FG	244	cd ${KERNEL_SRC}; patch -p1 < ../pinctl-amd-ryzen-01-make-use-of-raw_spinlock-variants.patch
5aa54b75 FG	245	cd ${KERNEL_SRC}; patch -p1 < ../pinctl-amd-ryzen-02-Use-regular-interrupt-instead-of-chained.patch
ba2f1a67 FG	246	sed -i ${KERNEL_SRC}/Makefile -e 's/^EXTRAVERSION.*$$/EXTRAVERSION=${EXTRAVERSION}/'
	247	touch $@
	248
ba2f1a67 FG	249	e1000e.ko e1000e: .compile_mark ${E1000ESRC}
	250	rm -rf ${E1000EDIR}
	251	tar xf ${E1000ESRC}
a6c22e7b	252	[ ! -e /lib/modules/${KVNAME}/build ] \|\| (echo "please remove /lib/modules/${KVNAME}/build" && false)
ba2f1a67 FG	253	cd ${E1000EDIR}; patch -p1 < ../intel-module-gcc6-compat.patch
ba2f1a67 FG	254	cd ${E1000EDIR}; patch -p1 < ../e1000e_4.10_compat.patch
973ac1a4	255	cd ${E1000EDIR}; patch -p1 < ../e1000e_4.10_max-mtu.patch
ba2f1a67 FG	256	cd ${E1000EDIR}/src; make BUILD_KERNEL=${KVNAME} KSRC=${TOP}/${KERNEL_SRC}
	257	cp ${E1000EDIR}/src/e1000e.ko e1000e.ko
	258
	259	igb.ko igb: .compile_mark ${IGBSRC}
	260	rm -rf ${IGBDIR}
	261	tar xf ${IGBSRC}
a6c22e7b	262	[ ! -e /lib/modules/${KVNAME}/build ] \|\| (echo "please remove /lib/modules/${KVNAME}/build" && false)
ba2f1a67 FG	263	cd ${IGBDIR}; patch -p1 < ../intel-module-gcc6-compat.patch
	264	cd ${IGBDIR}; patch -p1 < ../igb_4.9_compat.patch
	265	cd ${IGBDIR}; patch -p1 < ../igb_4.10_compat.patch
973ac1a4	266	cd ${IGBDIR}; patch -p1 < ../igb_4.10_max-mtu.patch
ba2f1a67 FG	267	cd ${IGBDIR}/src; make BUILD_KERNEL=${KVNAME} KSRC=${TOP}/${KERNEL_SRC}
	268	cp ${IGBDIR}/src/igb.ko igb.ko
	269
	270	ixgbe.ko ixgbe: .compile_mark ${IXGBESRC}
	271	rm -rf ${IXGBEDIR}
	272	tar xf ${IXGBESRC}
a6c22e7b	273	[ ! -e /lib/modules/${KVNAME}/build ] \|\| (echo "please remove /lib/modules/${KVNAME}/build" && false)
ba2f1a67	274	cd ${IXGBEDIR}; patch -p1 < ../ixgbe_4.10_compat.patch
973ac1a4	275	cd ${IXGBEDIR}; patch -p1 < ../ixgbe_4.10_max-mtu.patch
ba2f1a67 FG	276	cd ${IXGBEDIR}/src; make CFLAGS_EXTRA="-DIXGBE_NO_LRO" BUILD_KERNEL=${KVNAME} KSRC=${TOP}/${KERNEL_SRC}
	277	cp ${IXGBEDIR}/src/ixgbe.ko ixgbe.ko
	278
ba2f1a67 FG	279	${SPL_MODULES}: .compile_mark ${SPLSRC}
	280	rm -rf ${SPLDIR}
	281	tar xf ${SPLSRC}
a6c22e7b	282	[ ! -e /lib/modules/${KVNAME}/build ] \|\| (echo "please remove /lib/modules/${KVNAME}/build" && false)
ba2f1a67 FG	283	cd ${SPLDIR}; ./autogen.sh
	284	cd ${SPLDIR}; ./configure --with-config=kernel --with-linux=${TOP}/${KERNEL_SRC} --with-linux-obj=${TOP}/${KERNEL_SRC}
	285	cd ${SPLDIR}; make
	286	cp ${SPLDIR}/module/spl/spl.ko spl.ko
	287	cp ${SPLDIR}/module/splat/splat.ko splat.ko
	288
	289	${ZFS_MODULES}: .compile_mark ${ZFSSRC}
	290	rm -rf ${ZFSDIR}
	291	tar xf ${ZFSSRC}
a6c22e7b	292	[ ! -e /lib/modules/${KVNAME}/build ] \|\| (echo "please remove /lib/modules/${KVNAME}/build" && false)
ba2f1a67 FG	293	cd ${ZFSDIR}; ./autogen.sh
	294	cd ${ZFSDIR}; ./configure --with-spl=${TOP}/${SPLDIR} --with-spl-obj=${TOP}/${SPLDIR} --with-config=kernel --with-linux=${TOP}/${KERNEL_SRC} --with-linux-obj=${TOP}/${KERNEL_SRC}
	295	cd ${ZFSDIR}; make
	296	cp ${ZFSDIR}/module/zfs/zfs.ko zfs.ko
	297	cp ${ZFSDIR}/module/avl/zavl.ko zavl.ko
	298	cp ${ZFSDIR}/module/nvpair/znvpair.ko znvpair.ko
	299	cp ${ZFSDIR}/module/unicode/zunicode.ko zunicode.ko
	300	cp ${ZFSDIR}/module/zcommon/zcommon.ko zcommon.ko
	301	cp ${ZFSDIR}/module/zpios/zpios.ko zpios.ko
	302
ba2f1a67 FG	303	headers_tmp := $(CURDIR)/tmp-headers
	304	headers_dir := $(headers_tmp)/usr/src/linux-headers-${KVNAME}
	305
	306	${HDR_DEB} hdr: .compile_mark headers-control.in headers-postinst.in
	307	rm -rf $(headers_tmp)
	308	install -d $(headers_tmp)/DEBIAN $(headers_dir)/include/
37d1225d	309	sed -e 's/@KERNEL_VER@/${KERNEL_VER}/' -e 's/@KVNAME@/${KVNAME}/' -e 's/@PKGREL@/${PKGREL}/' -e 's/@ARCH@/${ARCH}/' <headers-control.in >$(headers_tmp)/DEBIAN/control
ba2f1a67 FG	310	sed -e 's/@@KVNAME@@/${KVNAME}/g' <headers-postinst.in >$(headers_tmp)/DEBIAN/postinst
	311	chmod 0755 $(headers_tmp)/DEBIAN/postinst
	312	install -D -m 644 copyright $(headers_tmp)/usr/share/doc/${HDRPACKAGE}/copyright
	313	install -D -m 644 changelog.Debian $(headers_tmp)/usr/share/doc/${HDRPACKAGE}/changelog.Debian
	314	echo "git clone git://git.proxmox.com/git/pve-kernel.git\\ngit checkout ${GITVERSION}" > $(headers_tmp)/usr/share/doc/${HDRPACKAGE}/SOURCE
	315	gzip -n -f --best $(headers_tmp)/usr/share/doc/${HDRPACKAGE}/changelog.Debian
	316	install -m 0644 ${KERNEL_SRC}/.config $(headers_dir)
	317	install -m 0644 ${KERNEL_SRC}/Module.symvers $(headers_dir)
	318	cd ${KERNEL_SRC}; find . -path './debian/' -prune -o -path './include/' -prune -o -path './Documentation' -prune \
	319	-o -path './scripts' -prune -o -type f \
	320	\( -name 'Makefile' -o -name 'Kconfig' -o -name 'Kbuild*' -o \
	321	-name '.sh' -o -name '.pl' \) \
	322	-print \| cpio -pd --preserve-modification-time $(headers_dir)
	323	cd ${KERNEL_SRC}; cp -a include scripts $(headers_dir)
6490543b	324	cd ${KERNEL_SRC}; (find arch/${KERNEL_ARCH} -name include -type d -print \| \
ba2f1a67 FG	325	xargs -n1 -i: find : -type f) \| \
	326	cpio -pd --preserve-modification-time $(headers_dir)
	327	mkdir -p ${headers_tmp}/lib/modules/${KVNAME}
	328	ln -sf /usr/src/linux-headers-${KVNAME} ${headers_tmp}/lib/modules/${KVNAME}/build
	329	dpkg-deb --build $(headers_tmp) ${HDR_DEB}
	330	#lintian ${HDR_DEB}
	331
ba2f1a67 FG	332	.PHONY: upload
	333	upload: ${DEBS}
	334	tar cf - ${DEBS}\|ssh repoman@repo.proxmox.com -- upload --product pve --dist stretch --arch ${ARCH}
	335
	336	.PHONY: distclean
	337	distclean: clean
	338	rm -rf linux-firmware.git dvb-firmware.git ${KERNEL_SRC}.org
	339
32054ef4 FG	340	# upgrade to current master
	341	.PHONY: update_modules
	342	update_modules: submodules
	343	git submodule foreach 'git pull --ff-only origin master'
	344
	345	# make sure submodules were initialized
	346	.PHONY: submodules
	347	submodules ${SPLSRC} ${ZFSSRC}:
	348	test -f "${KERNEL_SRC_SUBMODULE}/README" \|\| git submodule update --init
	349
	350
ba2f1a67 FG	351	.PHONY: clean
ba2f1a67 FG	352	clean:
e96c6ad1	353	rm -rf ~ .compile_mark watchdog-blacklist.tmp ${KERNEL_CFG_ORG} ${KERNEL_SRC} ${KERNEL_SRC}.tmp ${KERNEL_CFG_ORG} ${KERNEL_SRC}.org orig tmp data proxmox-ve/data .deb ${headers_tmp} fwdata fwlist.tmp *.ko abi-${KVNAME} fwlist-${KVNAME} ${ZFSDIR} ${SPLDIR} ${SPL_MODULES} ${ZFS_MODULES} hpsa.ko ${HPSADIR} ${DRBDDIR} drbd-9.0 ${IGBDIR} igb.ko ${IXGBEDIR} ixgbe.ko ${E1000EDIR} e1000e.ko linux-tools ${LINUX_TOOLS_DEB}
ba2f1a67 FG	354
	355
	356
	357
	358