[pve-kernel.git] / debian / rules

#!/usr/bin/make -f
# -*- makefile -*-

# Uncomment this to turn on verbose mode.
#export DH_VERBOSE=1

# TODO: check for headers not being installed
BUILD_DIR=$(shell pwd)

include /usr/share/dpkg/default.mk
include debian/rules.d/env.mk
include debian/rules.d/${DEB_BUILD_ARCH}.mk

CHANGELOG_DATE:=$(shell dpkg-parsechangelog -SDate)
CHANGELOG_DATE_UTC_ISO := $(shell date -u -d '$(SOURCE_DATE)' +%Y-%m-%dT%H:%MZ)

PVE_KERNEL_PKG=pve-kernel-${KVNAME}
PVE_DEBUG_KERNEL_PKG=pve-kernel-${KVNAME}-dbgsym
PVE_HEADER_PKG=pve-headers-${KVNAME}
PVE_USR_HEADER_PKG=pve-kernel-libc-dev
LINUX_TOOLS_PKG=linux-tools-${KERNEL_MAJMIN}
KERNEL_SRC_COPY=${KERNEL_SRC}_tmp

# TODO: split for archs, move to files?
PVE_CONFIG_OPTS= \
-m INTEL_MEI_WDT \
-d CONFIG_SND_PCM_OSS \
-e CONFIG_TRANSPARENT_HUGEPAGE_MADVISE \
-d CONFIG_TRANSPARENT_HUGEPAGE_ALWAYS \
-m CONFIG_CEPH_FS \
-m CONFIG_BLK_DEV_NBD \
-m CONFIG_BLK_DEV_RBD \
-m CONFIG_BLK_DEV_UBLK \
-d CONFIG_SND_PCSP \
-m CONFIG_BCACHE \
-m CONFIG_JFS_FS \
-m CONFIG_HFS_FS \
-m CONFIG_HFSPLUS_FS \
-e CIFS_SMB_DIRECT \
-e CONFIG_SQUASHFS_DECOMP_MULTI_PERCPU \
-e CONFIG_BRIDGE \
-e CONFIG_BRIDGE_NETFILTER \
-e CONFIG_BLK_DEV_SD \
-e CONFIG_BLK_DEV_SR \
-e CONFIG_BLK_DEV_DM \
-m CONFIG_BLK_DEV_NVME \
-e CONFIG_NLS_ISO8859_1 \
-d CONFIG_INPUT_EVBUG \
-d CONFIG_CPU_FREQ_DEFAULT_GOV_ONDEMAND \
-d CONFIG_CPU_FREQ_DEFAULT_GOV_SCHEDUTIL \
-e CONFIG_CPU_FREQ_DEFAULT_GOV_PERFORMANCE \
-e CONFIG_SYSFB_SIMPLEFB \
-e CONFIG_DRM_SIMPLEDRM \
-d CONFIG_MODULE_SIG \
-d CONFIG_MEMCG_DISABLED \
-e CONFIG_MEMCG_SWAP_ENABLED \
-e CONFIG_HYPERV \
-m CONFIG_VFIO_IOMMU_TYPE1 \
-m CONFIG_VFIO_VIRQFD \
-m CONFIG_VFIO \
-m CONFIG_VFIO_PCI \
-m CONFIG_USB_XHCI_HCD \
-m CONFIG_USB_XHCI_PCI \
-m CONFIG_USB_EHCI_HCD \
-m CONFIG_USB_EHCI_PCI \
-m CONFIG_USB_EHCI_HCD_PLATFORM \
-m CONFIG_USB_OHCI_HCD \
-m CONFIG_USB_OHCI_HCD_PCI \
-m CONFIG_USB_OHCI_HCD_PLATFORM \
-d CONFIG_USB_OHCI_HCD_SSB \
-m CONFIG_USB_UHCI_HCD \
-d CONFIG_USB_SL811_HCD_ISO \
-e CONFIG_MEMCG_KMEM \
-d CONFIG_DEFAULT_CFQ \
-e CONFIG_DEFAULT_DEADLINE \
-e CONFIG_MODVERSIONS \
-e CONFIG_ZSTD_COMPRESS \
-d CONFIG_DEFAULT_SECURITY_DAC \
-e CONFIG_DEFAULT_SECURITY_APPARMOR \
--set-str CONFIG_DEFAULT_SECURITY apparmor \
-d CONFIG_UNWINDER_ORC \
-d CONFIG_UNWINDER_GUESS \
-e CONFIG_UNWINDER_FRAME_POINTER \
--set-str CONFIG_SYSTEM_TRUSTED_KEYS ""\
--set-str CONFIG_SYSTEM_REVOCATION_KEYS ""\
-d CONFIG_SECURITY_LOCKDOWN_LSM \
-d CONFIG_SECURITY_LOCKDOWN_LSM_EARLY \
--set-str CONFIG_LSM yama,integrity,apparmor \
-e CONFIG_PAGE_TABLE_ISOLATION

debian/control: $(wildcard debian/*.in)
	sed -e 's/@@KVNAME@@/${KVNAME}/g' < debian/pve-kernel.prerm.in > debian/${PVE_KERNEL_PKG}.prerm
	sed -e 's/@@KVNAME@@/${KVNAME}/g' < debian/pve-kernel.postrm.in > debian/${PVE_KERNEL_PKG}.postrm
	sed -e 's/@@KVNAME@@/${KVNAME}/g' < debian/pve-kernel.postinst.in > debian/${PVE_KERNEL_PKG}.postinst
	sed -e 's/@@KVNAME@@/${KVNAME}/g' < debian/pve-headers.postinst.in > debian/${PVE_HEADER_PKG}.postinst
	chmod +x debian/${PVE_KERNEL_PKG}.prerm
	chmod +x debian/${PVE_KERNEL_PKG}.postrm
	chmod +x debian/${PVE_KERNEL_PKG}.postinst
	chmod +x debian/${PVE_HEADER_PKG}.postinst
	sed -e 's/@KVNAME@/${KVNAME}/g' -e 's/@KVMAJMIN@/${KERNEL_MAJMIN}/g' < debian/control.in > debian/control

build: .compile_mark .tools_compile_mark .modules_compile_mark

install: .install_mark .tools_install_mark .headers_install_mark .usr_headers_install_mark
	dh_installdocs -A debian/copyright debian/SOURCE
	dh_installchangelogs
	dh_installman
	dh_strip_nondeterminism
	dh_compress
	dh_fixperms

binary: install
	debian/rules fwcheck abicheck
	dh_strip -N${PVE_HEADER_PKG} -N${PVE_USR_HEADER_PKG}
	dh_makeshlibs
	dh_shlibdeps
	dh_installdeb
	dh_gencontrol
	dh_md5sums
	dh_builddeb

.config_mark:
	cd ${KERNEL_SRC}; scripts/config ${PVE_CONFIG_OPTS}
	${MAKE} -C ${KERNEL_SRC} oldconfig
	# copy to allow building in parallel to kernel/module compilation without interference
	rm -rf ${KERNEL_SRC_COPY}
	cp -ar ${KERNEL_SRC} ${KERNEL_SRC_COPY}
	touch $@

.compile_mark: .config_mark
	${MAKE} -C ${KERNEL_SRC} KBUILD_BUILD_VERSION_TIMESTAMP="PVE ${DEB_VERSION} (${CHANGELOG_DATE_UTC_ISO})"
	touch $@

.install_mark: .compile_mark .modules_compile_mark
	rm -rf debian/${PVE_KERNEL_PKG}
	mkdir -p debian/${PVE_KERNEL_PKG}/lib/modules/${KVNAME}
	mkdir debian/${PVE_KERNEL_PKG}/boot
	install -m 644 ${KERNEL_SRC}/.config debian/${PVE_KERNEL_PKG}/boot/config-${KVNAME}
	install -m 644 ${KERNEL_SRC}/System.map debian/${PVE_KERNEL_PKG}/boot/System.map-${KVNAME}
	install -m 644 ${KERNEL_SRC}/${KERNEL_IMAGE_PATH} debian/${PVE_KERNEL_PKG}/boot/${KERNEL_INSTALL_FILE}-${KVNAME}
	${MAKE} -C ${KERNEL_SRC} INSTALL_MOD_PATH=${BUILD_DIR}/debian/${PVE_KERNEL_PKG}/ modules_install
	# install zfs drivers
	install -d -m 0755 debian/${PVE_KERNEL_PKG}/lib/modules/${KVNAME}/zfs
	install -m 644 $(addprefix ${MODULES}/,zfs.ko zavl.ko znvpair.ko zunicode.ko zcommon.ko icp.ko zlua.ko spl.ko zzstd.ko) debian/${PVE_KERNEL_PKG}/lib/modules/${KVNAME}/zfs
	# remove firmware
	rm -rf debian/${PVE_KERNEL_PKG}/lib/firmware

ifeq ($(filter pkg.pve-kernel.debug,$(DEB_BUILD_PROFILES)),)
	echo "'pkg.pve-kernel.debug' build profile disabled, skipping -dbgsym creation"
else
	echo "'pkg.pve-kernel.debug' build profile enabled, creating -dbgsym contents"
	mkdir -p debian/${PVE_DEBUG_KERNEL_PKG}/usr/lib/debug/lib/modules/${KVNAME}
	mkdir debian/${PVE_DEBUG_KERNEL_PKG}/usr/lib/debug/boot
	install -m 644 ${KERNEL_SRC}/vmlinux debian/${PVE_DEBUG_KERNEL_PKG}/usr/lib/debug/boot/vmlinux-${KVNAME}
	cp -r debian/${PVE_KERNEL_PKG}/lib/modules/${KVNAME} debian/${PVE_DEBUG_KERNEL_PKG}/usr/lib/debug/lib/modules/
	rm -f debian/${PVE_DEBUG_KERNEL_PKG}/usr/lib/debug/lib/modules/${KVNAME}/source
	rm -f debian/${PVE_DEBUG_KERNEL_PKG}/usr/lib/debug/lib/modules/${KVNAME}/build
	rm -f debian/${PVE_DEBUG_KERNEL_PKG}/usr/lib/debug/lib/modules/${KVNAME}/modules.*
endif

	# strip debug info
	find debian/${PVE_KERNEL_PKG}/lib/modules -name \*.ko -print | while read f ; do strip --strip-debug "$$f"; done
	# finalize
	/sbin/depmod -b debian/${PVE_KERNEL_PKG}/ ${KVNAME}
	# Autogenerate blacklist for watchdog devices (see README)
	install -m 0755 -d debian/${PVE_KERNEL_PKG}/lib/modprobe.d
	ls debian/${PVE_KERNEL_PKG}/lib/modules/${KVNAME}/kernel/drivers/watchdog/ > watchdog-blacklist.tmp
	echo ipmi_watchdog.ko >> watchdog-blacklist.tmp
	cat watchdog-blacklist.tmp|sed -e 's/^/blacklist /' -e 's/.ko$$//'|sort -u > debian/${PVE_KERNEL_PKG}/lib/modprobe.d/blacklist_${PVE_KERNEL_PKG}.conf
	rm -f debian/${PVE_KERNEL_PKG}/lib/modules/${KVNAME}/source
	rm -f debian/${PVE_KERNEL_PKG}/lib/modules/${KVNAME}/build
	touch $@

.tools_compile_mark: .compile_mark
	${MAKE} -C ${KERNEL_SRC}/tools/perf prefix=/usr HAVE_NO_LIBBFD=1 HAVE_CPLUS_DEMANGLE_SUPPORT=1 NO_LIBPYTHON=1 NO_LIBPERL=1 NO_LIBCRYPTO=1 PYTHON=python3
	echo "checking GPL-2 only perf binary for library linkage with incompatible licenses.."
	! ldd ${KERNEL_SRC}/tools/perf/perf | grep -q -E '\blibbfd'
	! ldd ${KERNEL_SRC}/tools/perf/perf | grep -q -E '\blibcrypto'
	${MAKE} -C ${KERNEL_SRC}/tools/perf man
	touch $@

.tools_install_mark: .tools_compile_mark
	rm -rf debian/${LINUX_TOOLS_PKG}
	mkdir -p debian/${LINUX_TOOLS_PKG}/usr/bin
	mkdir -p debian/${LINUX_TOOLS_PKG}/usr/share/man/man1
	install -m 755 ${BUILD_DIR}/${KERNEL_SRC}/tools/perf/perf debian/${LINUX_TOOLS_PKG}/usr/bin/perf_$(KERNEL_MAJMIN)
	for i in ${BUILD_DIR}/${KERNEL_SRC}/tools/perf/Documentation/*.1; do \
	    fname="$${i##*/}"; manname="$${fname%.1}"; \
	    install -m644 "$$i" "debian/${LINUX_TOOLS_PKG}/usr/share/man/man1/$${manname}_$(KERNEL_MAJMIN).1"; \
	done
	touch $@

.headers_prepare_mark: .config_mark
	rm -rf debian/${PVE_HEADER_PKG}
	mkdir -p debian/${PVE_HEADER_PKG}/usr/src/linux-headers-${KVNAME}
	install -m 0644 ${KERNEL_SRC}/.config debian/${PVE_HEADER_PKG}/usr/src/linux-headers-${KVNAME}
	make -C ${KERNEL_SRC_COPY} mrproper
	cd ${KERNEL_SRC_COPY}; find . -path './debian/*' -prune \
	    -o -path './include/*' -prune \
	    -o -path './Documentation' -prune \
	    -o -path './scripts' -prune \
	    -o -type f \
	    \( \
	        -name 'Makefile*' \
	        -o -name 'Kconfig*' \
	        -o -name 'Kbuild*' \
	        -o -name '*.sh' \
	        -o -name '*.pl' \
	    \) \
	    -print | cpio -pd --preserve-modification-time ${BUILD_DIR}/debian/${PVE_HEADER_PKG}/usr/src/linux-headers-${KVNAME}
	cd ${KERNEL_SRC_COPY}; \
	    ( \
	        find arch/${KERNEL_HEADER_ARCH} -name include -type d -print | \
	        xargs -n1 -i: find : -type f \
	    ) | \
	    cpio -pd --preserve-modification-time ${BUILD_DIR}/debian/${PVE_HEADER_PKG}/usr/src/linux-headers-${KVNAME}
	touch $@

.headers_compile_mark: .headers_prepare_mark
	# set output to subdir of source to reduce number of hardcoded paths in output files
	rm -rf ${BUILD_DIR}/${KERNEL_SRC_COPY}/${PVE_HEADER_PKG}
	mkdir -p ${BUILD_DIR}/${KERNEL_SRC_COPY}/${PVE_HEADER_PKG}
	cp ${KERNEL_SRC}/.config ${BUILD_DIR}/${KERNEL_SRC_COPY}/${PVE_HEADER_PKG}/.config
	${MAKE} -C ${KERNEL_SRC_COPY} O=${BUILD_DIR}/${KERNEL_SRC_COPY}/${PVE_HEADER_PKG} -j1 syncconfig modules_prepare prepare scripts
	cd ${KERNEL_SRC_COPY}; cp -a include scripts ${BUILD_DIR}/debian/${PVE_HEADER_PKG}/usr/src/linux-headers-${KVNAME}
	find ${BUILD_DIR}/${KERNEL_SRC_COPY}/${PVE_HEADER_PKG} -name \*.o.ur-\* -o -name '*.cmd' | xargs rm -f
	rsync --ignore-existing -r -v -a $(addprefix ${BUILD_DIR}/${KERNEL_SRC_COPY}/${PVE_HEADER_PKG}/,arch include kernel scripts tools) ${BUILD_DIR}/debian/${PVE_HEADER_PKG}/usr/src/linux-headers-${KVNAME}/
	rm -rf ${BUILD_DIR}/${KERNEL_SRC_COPY}
	touch $@

.headers_install_mark: .compile_mark .modules_compile_mark .headers_compile_mark
	cp ${KERNEL_SRC}/include/generated/compile.h debian/${PVE_HEADER_PKG}/usr/src/linux-headers-${KVNAME}/include/generated/compile.h
	install -m 0644 ${KERNEL_SRC}/Module.symvers debian/${PVE_HEADER_PKG}/usr/src/linux-headers-${KVNAME}
	mkdir -p debian/${PVE_HEADER_PKG}/lib/modules/${KVNAME}
	ln -sf /usr/src/linux-headers-${KVNAME} debian/${PVE_HEADER_PKG}/lib/modules/${KVNAME}/build
	touch $@

.usr_headers_install_mark: PKG_DIR = debian/${PVE_USR_HEADER_PKG}
.usr_headers_install_mark: OUT_DIR = ${PKG_DIR}/usr
.usr_headers_install_mark: .config_mark
	rm -rf '${PKG_DIR}'
	mkdir -p  '${PKG_DIR}'
	$(MAKE) -C ${KERNEL_SRC} headers_install ARCH=$(KERNEL_HEADER_ARCH) INSTALL_HDR_PATH='$(CURDIR)'/$(OUT_DIR)
	rm -rf $(OUT_DIR)/include/drm $(OUT_DIR)/include/scsi
	find $(OUT_DIR)/include \( -name .install -o -name ..install.cmd \) -execdir rm {} +

# Move include/asm to arch-specific directory
	mkdir -p $(OUT_DIR)/include/$(DEB_HOST_MULTIARCH)
	mv $(OUT_DIR)/include/asm $(OUT_DIR)/include/$(DEB_HOST_MULTIARCH)/
	test ! -d $(OUT_DIR)/include/arch || \
		mv $(OUT_DIR)/include/arch $(OUT_DIR)/include/$(DEB_HOST_MULTIARCH)/
	touch $@

.modules_compile_mark: ${MODULES}/zfs.ko
	touch $@

${MODULES}/zfs.ko: .compile_mark
	cd ${MODULES}/${ZFSDIR}; ./autogen.sh
	cd ${MODULES}/${ZFSDIR}; ./configure --with-config=kernel --with-linux=${BUILD_DIR}/${KERNEL_SRC} --with-linux-obj=${BUILD_DIR}/${KERNEL_SRC}
	${MAKE} -C ${MODULES}/${ZFSDIR}
	cp ${MODULES}/${ZFSDIR}/module/avl/zavl.ko ${MODULES}/
	cp ${MODULES}/${ZFSDIR}/module/nvpair/znvpair.ko ${MODULES}/
	cp ${MODULES}/${ZFSDIR}/module/unicode/zunicode.ko ${MODULES}/
	cp ${MODULES}/${ZFSDIR}/module/zcommon/zcommon.ko ${MODULES}/
	cp ${MODULES}/${ZFSDIR}/module/icp/icp.ko ${MODULES}/
	cp ${MODULES}/${ZFSDIR}/module/zfs/zfs.ko ${MODULES}/
	cp ${MODULES}/${ZFSDIR}/module/lua/zlua.ko ${MODULES}/
	cp ${MODULES}/${ZFSDIR}/module/spl/spl.ko ${MODULES}/
	cp ${MODULES}/${ZFSDIR}/module/zstd/zzstd.ko ${MODULES}/

fwlist-${KVNAME}: .compile_mark .modules_compile_mark
	debian/scripts/find-firmware.pl debian/${PVE_KERNEL_PKG}/lib/modules/${KVNAME} >fwlist.tmp
	mv fwlist.tmp $@

.PHONY: fwcheck
fwcheck: fwlist-${KVNAME} fwlist-previous
	@echo "checking fwlist for changes since last built firmware package.."
	@echo "if this check fails, add fwlist-${KVNAME} to the pve-firmware repository and upload a new firmware package together with the ${KVNAME} kernel"
	sort fwlist-previous | uniq > fwlist-previous.sorted
	sort fwlist-${KVNAME} | uniq > fwlist-${KVNAME}.sorted
	diff -up -N fwlist-previous.sorted fwlist-${KVNAME}.sorted > fwlist.diff
	rm fwlist.diff fwlist-previous.sorted fwlist-${KVNAME}.sorted
	@echo "done, no need to rebuild pve-firmware"


abi-${KVNAME}: .compile_mark
	debian/scripts/abi-generate debian/${PVE_HEADER_PKG}/usr/src/linux-headers-${KVNAME}/Module.symvers abi-${KVNAME} ${KVNAME}

.PHONY: abicheck
abicheck: debian/scripts/abi-check abi-${KVNAME} abi-prev-* abi-blacklist
	debian/scripts/abi-check abi-${KVNAME} abi-prev-* ${SKIPABI}

.PHONY: clean
Commit	Line	Data
2d62d8a4 FG	1	#!/usr/bin/make -f
	2	# -- makefile --
	3
	4	# Uncomment this to turn on verbose mode.
	5	#export DH_VERBOSE=1
	6
e96d2ab3	7	# TODO: check for headers not being installed
66aed5b8	8	BUILD_DIR=$(shell pwd)
2d62d8a4	9
e96d2ab3	10	include /usr/share/dpkg/default.mk
66aed5b8	11	include debian/rules.d/env.mk
e96d2ab3 FG	12	include debian/rules.d/${DEB_BUILD_ARCH}.mk
e96d2ab3 FG	13
e96d2ab3	14	CHANGELOG_DATE:=$(shell dpkg-parsechangelog -SDate)
71031b0b	15	CHANGELOG_DATE_UTC_ISO := $(shell date -u -d '$(SOURCE_DATE)' +%Y-%m-%dT%H:%MZ)
e96d2ab3 FG	16
e96d2ab3 FG	17	PVE_KERNEL_PKG=pve-kernel-${KVNAME}
bec10498	18	PVE_DEBUG_KERNEL_PKG=pve-kernel-${KVNAME}-dbgsym
e96d2ab3	19	PVE_HEADER_PKG=pve-headers-${KVNAME}
924ae54c	20	PVE_USR_HEADER_PKG=pve-kernel-libc-dev
5fd5ec0e	21	LINUX_TOOLS_PKG=linux-tools-${KERNEL_MAJMIN}
d7236300	22	KERNEL_SRC_COPY=${KERNEL_SRC}_tmp
e96d2ab3 FG	23
	24	# TODO: split for archs, move to files?
	25	PVE_CONFIG_OPTS= \
	26	-m INTEL_MEI_WDT \
	27	-d CONFIG_SND_PCM_OSS \
	28	-e CONFIG_TRANSPARENT_HUGEPAGE_MADVISE \
	29	-d CONFIG_TRANSPARENT_HUGEPAGE_ALWAYS \
	30	-m CONFIG_CEPH_FS \
	31	-m CONFIG_BLK_DEV_NBD \
	32	-m CONFIG_BLK_DEV_RBD \
23214d3d	33	-m CONFIG_BLK_DEV_UBLK \
b481f897	34	-d CONFIG_SND_PCSP \
e96d2ab3 FG	35	-m CONFIG_BCACHE \
	36	-m CONFIG_JFS_FS \
	37	-m CONFIG_HFS_FS \
	38	-m CONFIG_HFSPLUS_FS \
ee4a13ea	39	-e CIFS_SMB_DIRECT \
b77e82cc	40	-e CONFIG_SQUASHFS_DECOMP_MULTI_PERCPU \
e96d2ab3 FG	41	-e CONFIG_BRIDGE \
	42	-e CONFIG_BRIDGE_NETFILTER \
	43	-e CONFIG_BLK_DEV_SD \
	44	-e CONFIG_BLK_DEV_SR \
	45	-e CONFIG_BLK_DEV_DM \
f4ddb149	46	-m CONFIG_BLK_DEV_NVME \
eb6667c9	47	-e CONFIG_NLS_ISO8859_1 \
e96d2ab3 FG	48	-d CONFIG_INPUT_EVBUG \
e96d2ab3 FG	49	-d CONFIG_CPU_FREQ_DEFAULT_GOV_ONDEMAND \
56745647	50	-d CONFIG_CPU_FREQ_DEFAULT_GOV_SCHEDUTIL \
e96d2ab3	51	-e CONFIG_CPU_FREQ_DEFAULT_GOV_PERFORMANCE \
629d8797	52	-e CONFIG_SYSFB_SIMPLEFB \
15d10810	53	-e CONFIG_DRM_SIMPLEDRM \
e96d2ab3 FG	54	-d CONFIG_MODULE_SIG \
	55	-d CONFIG_MEMCG_DISABLED \
	56	-e CONFIG_MEMCG_SWAP_ENABLED \
ef257cb1	57	-e CONFIG_HYPERV \
bdeaa74c TL	58	-m CONFIG_VFIO_IOMMU_TYPE1 \
	59	-m CONFIG_VFIO_VIRQFD \
	60	-m CONFIG_VFIO \
	61	-m CONFIG_VFIO_PCI \
	62	-m CONFIG_USB_XHCI_HCD \
	63	-m CONFIG_USB_XHCI_PCI \
	64	-m CONFIG_USB_EHCI_HCD \
	65	-m CONFIG_USB_EHCI_PCI \
	66	-m CONFIG_USB_EHCI_HCD_PLATFORM \
	67	-m CONFIG_USB_OHCI_HCD \
	68	-m CONFIG_USB_OHCI_HCD_PCI \
	69	-m CONFIG_USB_OHCI_HCD_PLATFORM \
	70	-d CONFIG_USB_OHCI_HCD_SSB \
	71	-m CONFIG_USB_UHCI_HCD \
	72	-d CONFIG_USB_SL811_HCD_ISO \
e96d2ab3 FG	73	-e CONFIG_MEMCG_KMEM \
	74	-d CONFIG_DEFAULT_CFQ \
	75	-e CONFIG_DEFAULT_DEADLINE \
	76	-e CONFIG_MODVERSIONS \
4ce29271	77	-e CONFIG_ZSTD_COMPRESS \
e96d2ab3 FG	78	-d CONFIG_DEFAULT_SECURITY_DAC \
	79	-e CONFIG_DEFAULT_SECURITY_APPARMOR \
	80	--set-str CONFIG_DEFAULT_SECURITY apparmor \
	81	-d CONFIG_UNWINDER_ORC \
	82	-d CONFIG_UNWINDER_GUESS \
	83	-e CONFIG_UNWINDER_FRAME_POINTER \
68996764	84	--set-str CONFIG_SYSTEM_TRUSTED_KEYS ""\
85fafb9d	85	--set-str CONFIG_SYSTEM_REVOCATION_KEYS ""\
f6d3198e FG	86	-d CONFIG_SECURITY_LOCKDOWN_LSM \
	87	-d CONFIG_SECURITY_LOCKDOWN_LSM_EARLY \
	88	--set-str CONFIG_LSM yama,integrity,apparmor \
e96d2ab3 FG	89	-e CONFIG_PAGE_TABLE_ISOLATION
	90
	91	debian/control: $(wildcard debian/*.in)
	92	sed -e 's/@@KVNAME@@/${KVNAME}/g' < debian/pve-kernel.prerm.in > debian/${PVE_KERNEL_PKG}.prerm
	93	sed -e 's/@@KVNAME@@/${KVNAME}/g' < debian/pve-kernel.postrm.in > debian/${PVE_KERNEL_PKG}.postrm
	94	sed -e 's/@@KVNAME@@/${KVNAME}/g' < debian/pve-kernel.postinst.in > debian/${PVE_KERNEL_PKG}.postinst
	95	sed -e 's/@@KVNAME@@/${KVNAME}/g' < debian/pve-headers.postinst.in > debian/${PVE_HEADER_PKG}.postinst
	96	chmod +x debian/${PVE_KERNEL_PKG}.prerm
	97	chmod +x debian/${PVE_KERNEL_PKG}.postrm
	98	chmod +x debian/${PVE_KERNEL_PKG}.postinst
	99	chmod +x debian/${PVE_HEADER_PKG}.postinst
73cf4c7f	100	sed -e 's/@KVNAME@/${KVNAME}/g' -e 's/@KVMAJMIN@/${KERNEL_MAJMIN}/g' < debian/control.in > debian/control
e96d2ab3 FG	101
	102	build: .compile_mark .tools_compile_mark .modules_compile_mark
	103
924ae54c	104	install: .install_mark .tools_install_mark .headers_install_mark .usr_headers_install_mark
e96d2ab3 FG	105	dh_installdocs -A debian/copyright debian/SOURCE
	106	dh_installchangelogs
	107	dh_installman
	108	dh_strip_nondeterminism
	109	dh_compress
	110	dh_fixperms
	111
	112	binary: install
	113	debian/rules fwcheck abicheck
924ae54c	114	dh_strip -N${PVE_HEADER_PKG} -N${PVE_USR_HEADER_PKG}
e96d2ab3 FG	115	dh_makeshlibs
	116	dh_shlibdeps
	117	dh_installdeb
	118	dh_gencontrol
	119	dh_md5sums
	120	dh_builddeb
	121
d7236300	122	.config_mark:
e96d2ab3 FG	123	cd ${KERNEL_SRC}; scripts/config ${PVE_CONFIG_OPTS}
e96d2ab3 FG	124	${MAKE} -C ${KERNEL_SRC} oldconfig
5ca6d78d FG	125	# copy to allow building in parallel to kernel/module compilation without interference
	126	rm -rf ${KERNEL_SRC_COPY}
	127	cp -ar ${KERNEL_SRC} ${KERNEL_SRC_COPY}
d7236300 FG	128	touch $@
	129
	130	.compile_mark: .config_mark
71031b0b	131	${MAKE} -C ${KERNEL_SRC} KBUILD_BUILD_VERSION_TIMESTAMP="PVE ${DEB_VERSION} (${CHANGELOG_DATE_UTC_ISO})"
e96d2ab3 FG	132	touch $@
	133
	134	.install_mark: .compile_mark .modules_compile_mark
	135	rm -rf debian/${PVE_KERNEL_PKG}
	136	mkdir -p debian/${PVE_KERNEL_PKG}/lib/modules/${KVNAME}
	137	mkdir debian/${PVE_KERNEL_PKG}/boot
	138	install -m 644 ${KERNEL_SRC}/.config debian/${PVE_KERNEL_PKG}/boot/config-${KVNAME}
	139	install -m 644 ${KERNEL_SRC}/System.map debian/${PVE_KERNEL_PKG}/boot/System.map-${KVNAME}
	140	install -m 644 ${KERNEL_SRC}/${KERNEL_IMAGE_PATH} debian/${PVE_KERNEL_PKG}/boot/${KERNEL_INSTALL_FILE}-${KVNAME}
	141	${MAKE} -C ${KERNEL_SRC} INSTALL_MOD_PATH=${BUILD_DIR}/debian/${PVE_KERNEL_PKG}/ modules_install
e96d2ab3 FG	142	# install zfs drivers
e96d2ab3 FG	143	install -d -m 0755 debian/${PVE_KERNEL_PKG}/lib/modules/${KVNAME}/zfs
dd717c04	144	install -m 644 $(addprefix ${MODULES}/,zfs.ko zavl.ko znvpair.ko zunicode.ko zcommon.ko icp.ko zlua.ko spl.ko zzstd.ko) debian/${PVE_KERNEL_PKG}/lib/modules/${KVNAME}/zfs
e96d2ab3 FG	145	# remove firmware
e96d2ab3 FG	146	rm -rf debian/${PVE_KERNEL_PKG}/lib/firmware
bec10498	147
04f7144d FG	148	ifeq ($(filter pkg.pve-kernel.debug,$(DEB_BUILD_PROFILES)),)
	149	echo "'pkg.pve-kernel.debug' build profile disabled, skipping -dbgsym creation"
	150	else
	151	echo "'pkg.pve-kernel.debug' build profile enabled, creating -dbgsym contents"
bec10498 FG	152	mkdir -p debian/${PVE_DEBUG_KERNEL_PKG}/usr/lib/debug/lib/modules/${KVNAME}
	153	mkdir debian/${PVE_DEBUG_KERNEL_PKG}/usr/lib/debug/boot
	154	install -m 644 ${KERNEL_SRC}/vmlinux debian/${PVE_DEBUG_KERNEL_PKG}/usr/lib/debug/boot/vmlinux-${KVNAME}
	155	cp -r debian/${PVE_KERNEL_PKG}/lib/modules/${KVNAME} debian/${PVE_DEBUG_KERNEL_PKG}/usr/lib/debug/lib/modules/
	156	rm -f debian/${PVE_DEBUG_KERNEL_PKG}/usr/lib/debug/lib/modules/${KVNAME}/source
	157	rm -f debian/${PVE_DEBUG_KERNEL_PKG}/usr/lib/debug/lib/modules/${KVNAME}/build
	158	rm -f debian/${PVE_DEBUG_KERNEL_PKG}/usr/lib/debug/lib/modules/${KVNAME}/modules.*
04f7144d	159	endif
bec10498	160
e96d2ab3 FG	161	# strip debug info
	162	find debian/${PVE_KERNEL_PKG}/lib/modules -name \*.ko -print \| while read f ; do strip --strip-debug "$$f"; done
	163	# finalize
	164	/sbin/depmod -b debian/${PVE_KERNEL_PKG}/ ${KVNAME}
	165	# Autogenerate blacklist for watchdog devices (see README)
	166	install -m 0755 -d debian/${PVE_KERNEL_PKG}/lib/modprobe.d
	167	ls debian/${PVE_KERNEL_PKG}/lib/modules/${KVNAME}/kernel/drivers/watchdog/ > watchdog-blacklist.tmp
	168	echo ipmi_watchdog.ko >> watchdog-blacklist.tmp
	169	cat watchdog-blacklist.tmp\|sed -e 's/^/blacklist /' -e 's/.ko$$//'\|sort -u > debian/${PVE_KERNEL_PKG}/lib/modprobe.d/blacklist_${PVE_KERNEL_PKG}.conf
	170	rm -f debian/${PVE_KERNEL_PKG}/lib/modules/${KVNAME}/source
	171	rm -f debian/${PVE_KERNEL_PKG}/lib/modules/${KVNAME}/build
	172	touch $@
	173
	174	.tools_compile_mark: .compile_mark
a32d7b96	175	${MAKE} -C ${KERNEL_SRC}/tools/perf prefix=/usr HAVE_NO_LIBBFD=1 HAVE_CPLUS_DEMANGLE_SUPPORT=1 NO_LIBPYTHON=1 NO_LIBPERL=1 NO_LIBCRYPTO=1 PYTHON=python3
7cbdd0b9 FG	176	echo "checking GPL-2 only perf binary for library linkage with incompatible licenses.."
	177	! ldd ${KERNEL_SRC}/tools/perf/perf \| grep -q -E '\blibbfd'
	178	! ldd ${KERNEL_SRC}/tools/perf/perf \| grep -q -E '\blibcrypto'
e96d2ab3 FG	179	${MAKE} -C ${KERNEL_SRC}/tools/perf man
	180	touch $@
	181
	182	.tools_install_mark: .tools_compile_mark
	183	rm -rf debian/${LINUX_TOOLS_PKG}
	184	mkdir -p debian/${LINUX_TOOLS_PKG}/usr/bin
29917645	185	mkdir -p debian/${LINUX_TOOLS_PKG}/usr/share/man/man1
5fd5ec0e	186	install -m 755 ${BUILD_DIR}/${KERNEL_SRC}/tools/perf/perf debian/${LINUX_TOOLS_PKG}/usr/bin/perf_$(KERNEL_MAJMIN)
86c0946a SI	187	for i in ${BUILD_DIR}/${KERNEL_SRC}/tools/perf/Documentation/*.1; do \
	188	fname="$${i##*/}"; manname="$${fname%.1}"; \
	189	install -m644 "$$i" "debian/${LINUX_TOOLS_PKG}/usr/share/man/man1/$${manname}_$(KERNEL_MAJMIN).1"; \
	190	done
e96d2ab3 FG	191	touch $@
e96d2ab3 FG	192
d7236300	193	.headers_prepare_mark: .config_mark
e96d2ab3 FG	194	rm -rf debian/${PVE_HEADER_PKG}
	195	mkdir -p debian/${PVE_HEADER_PKG}/usr/src/linux-headers-${KVNAME}
	196	install -m 0644 ${KERNEL_SRC}/.config debian/${PVE_HEADER_PKG}/usr/src/linux-headers-${KVNAME}
d7236300 FG	197	make -C ${KERNEL_SRC_COPY} mrproper
d7236300 FG	198	cd ${KERNEL_SRC_COPY}; find . -path './debian/*' -prune \
7a315510 FG	199	-o -path './include/*' -prune \
	200	-o -path './Documentation' -prune \
	201	-o -path './scripts' -prune \
	202	-o -type f \
	203	\( \
	204	-name 'Makefile*' \
	205	-o -name 'Kconfig*' \
	206	-o -name 'Kbuild*' \
	207	-o -name '*.sh' \
	208	-o -name '*.pl' \
	209	\) \
	210	-print \| cpio -pd --preserve-modification-time ${BUILD_DIR}/debian/${PVE_HEADER_PKG}/usr/src/linux-headers-${KVNAME}
d7236300	211	cd ${KERNEL_SRC_COPY}; \
7a315510 FG	212	( \
	213	find arch/${KERNEL_HEADER_ARCH} -name include -type d -print \| \
	214	xargs -n1 -i: find : -type f \
	215	) \| \
	216	cpio -pd --preserve-modification-time ${BUILD_DIR}/debian/${PVE_HEADER_PKG}/usr/src/linux-headers-${KVNAME}
d7236300 FG	217	touch $@
	218
	219	.headers_compile_mark: .headers_prepare_mark
	220	# set output to subdir of source to reduce number of hardcoded paths in output files
	221	rm -rf ${BUILD_DIR}/${KERNEL_SRC_COPY}/${PVE_HEADER_PKG}
	222	mkdir -p ${BUILD_DIR}/${KERNEL_SRC_COPY}/${PVE_HEADER_PKG}
	223	cp ${KERNEL_SRC}/.config ${BUILD_DIR}/${KERNEL_SRC_COPY}/${PVE_HEADER_PKG}/.config
ad955157 TL	224	${MAKE} -C ${KERNEL_SRC_COPY} O=${BUILD_DIR}/${KERNEL_SRC_COPY}/${PVE_HEADER_PKG} -j1 syncconfig modules_prepare prepare scripts
ad955157 TL	225	cd ${KERNEL_SRC_COPY}; cp -a include scripts ${BUILD_DIR}/debian/${PVE_HEADER_PKG}/usr/src/linux-headers-${KVNAME}
56ae0a75	226	find ${BUILD_DIR}/${KERNEL_SRC_COPY}/${PVE_HEADER_PKG} -name \.o.ur-\ -o -name '*.cmd' \| xargs rm -f
d7236300 FG	227	rsync --ignore-existing -r -v -a $(addprefix ${BUILD_DIR}/${KERNEL_SRC_COPY}/${PVE_HEADER_PKG}/,arch include kernel scripts tools) ${BUILD_DIR}/debian/${PVE_HEADER_PKG}/usr/src/linux-headers-${KVNAME}/
	228	rm -rf ${BUILD_DIR}/${KERNEL_SRC_COPY}
	229	touch $@
	230
	231	.headers_install_mark: .compile_mark .modules_compile_mark .headers_compile_mark
	232	cp ${KERNEL_SRC}/include/generated/compile.h debian/${PVE_HEADER_PKG}/usr/src/linux-headers-${KVNAME}/include/generated/compile.h
	233	install -m 0644 ${KERNEL_SRC}/Module.symvers debian/${PVE_HEADER_PKG}/usr/src/linux-headers-${KVNAME}
e96d2ab3 FG	234	mkdir -p debian/${PVE_HEADER_PKG}/lib/modules/${KVNAME}
	235	ln -sf /usr/src/linux-headers-${KVNAME} debian/${PVE_HEADER_PKG}/lib/modules/${KVNAME}/build
	236	touch $@
	237
924ae54c TL	238	.usr_headers_install_mark: PKG_DIR = debian/${PVE_USR_HEADER_PKG}
	239	.usr_headers_install_mark: OUT_DIR = ${PKG_DIR}/usr
	240	.usr_headers_install_mark: .config_mark
	241	rm -rf '${PKG_DIR}'
	242	mkdir -p '${PKG_DIR}'
924ae54c TL	243	$(MAKE) -C ${KERNEL_SRC} headers_install ARCH=$(KERNEL_HEADER_ARCH) INSTALL_HDR_PATH='$(CURDIR)'/$(OUT_DIR)
	244	rm -rf $(OUT_DIR)/include/drm $(OUT_DIR)/include/scsi
	245	find $(OUT_DIR)/include \( -name .install -o -name ..install.cmd \) -execdir rm {} +
	246
	247	# Move include/asm to arch-specific directory
	248	mkdir -p $(OUT_DIR)/include/$(DEB_HOST_MULTIARCH)
	249	mv $(OUT_DIR)/include/asm $(OUT_DIR)/include/$(DEB_HOST_MULTIARCH)/
	250	test ! -d $(OUT_DIR)/include/arch \|\| \
	251	mv $(OUT_DIR)/include/arch $(OUT_DIR)/include/$(DEB_HOST_MULTIARCH)/
	252	touch $@
	253
1de13531	254	.modules_compile_mark: ${MODULES}/zfs.ko
e96d2ab3 FG	255	touch $@
e96d2ab3 FG	256
1de13531	257	${MODULES}/zfs.ko: .compile_mark
e96d2ab3	258	cd ${MODULES}/${ZFSDIR}; ./autogen.sh
1de13531	259	cd ${MODULES}/${ZFSDIR}; ./configure --with-config=kernel --with-linux=${BUILD_DIR}/${KERNEL_SRC} --with-linux-obj=${BUILD_DIR}/${KERNEL_SRC}
e96d2ab3 FG	260	${MAKE} -C ${MODULES}/${ZFSDIR}
	261	cp ${MODULES}/${ZFSDIR}/module/avl/zavl.ko ${MODULES}/
	262	cp ${MODULES}/${ZFSDIR}/module/nvpair/znvpair.ko ${MODULES}/
	263	cp ${MODULES}/${ZFSDIR}/module/unicode/zunicode.ko ${MODULES}/
	264	cp ${MODULES}/${ZFSDIR}/module/zcommon/zcommon.ko ${MODULES}/
e96d2ab3 FG	265	cp ${MODULES}/${ZFSDIR}/module/icp/icp.ko ${MODULES}/
e96d2ab3 FG	266	cp ${MODULES}/${ZFSDIR}/module/zfs/zfs.ko ${MODULES}/
1de13531 SI	267	cp ${MODULES}/${ZFSDIR}/module/lua/zlua.ko ${MODULES}/
1de13531 SI	268	cp ${MODULES}/${ZFSDIR}/module/spl/spl.ko ${MODULES}/
dd717c04	269	cp ${MODULES}/${ZFSDIR}/module/zstd/zzstd.ko ${MODULES}/
e96d2ab3	270
e96d2ab3 FG	271	fwlist-${KVNAME}: .compile_mark .modules_compile_mark
	272	debian/scripts/find-firmware.pl debian/${PVE_KERNEL_PKG}/lib/modules/${KVNAME} >fwlist.tmp
	273	mv fwlist.tmp $@
	274
	275	.PHONY: fwcheck
	276	fwcheck: fwlist-${KVNAME} fwlist-previous
	277	@echo "checking fwlist for changes since last built firmware package.."
	278	@echo "if this check fails, add fwlist-${KVNAME} to the pve-firmware repository and upload a new firmware package together with the ${KVNAME} kernel"
	279	sort fwlist-previous \| uniq > fwlist-previous.sorted
	280	sort fwlist-${KVNAME} \| uniq > fwlist-${KVNAME}.sorted
	281	diff -up -N fwlist-previous.sorted fwlist-${KVNAME}.sorted > fwlist.diff
	282	rm fwlist.diff fwlist-previous.sorted fwlist-${KVNAME}.sorted
	283	@echo "done, no need to rebuild pve-firmware"
	284
	285
	286	abi-${KVNAME}: .compile_mark
40af2e3b	287	debian/scripts/abi-generate debian/${PVE_HEADER_PKG}/usr/src/linux-headers-${KVNAME}/Module.symvers abi-${KVNAME} ${KVNAME}
e96d2ab3 FG	288
e96d2ab3 FG	289	.PHONY: abicheck
4062c103 FG	290	abicheck: debian/scripts/abi-check abi-${KVNAME} abi-prev-* abi-blacklist
4062c103 FG	291	debian/scripts/abi-check abi-${KVNAME} abi-prev-* ${SKIPABI}
e96d2ab3 FG	292
e96d2ab3 FG	293	.PHONY: clean