debian/rules

   1 #!/usr/bin/make -f
   2 # -*- makefile -*-
   3
   4 # Uncomment this to turn on verbose mode.
   5 #export DH_VERBOSE=1
   6
   7 # TODO: check for headers not being installed
   8 BUILD_DIR=$(shell pwd)
   9
  10 include /usr/share/dpkg/default.mk
  11 include debian/rules.d/env.mk
  12 include debian/rules.d/${DEB_BUILD_ARCH}.mk
  13
  14 CHANGELOG_DATE:=$(shell dpkg-parsechangelog -SDate)
  15 CHANGELOG_DATE_UTC_ISO := $(shell date -u -d '$(SOURCE_DATE)' +%Y-%m-%dT%H:%MZ)
  16
  17 PVE_KERNEL_PKG=pve-kernel-${KVNAME}
  18 PVE_DEBUG_KERNEL_PKG=pve-kernel-${KVNAME}-dbgsym
  19 PVE_HEADER_PKG=pve-headers-${KVNAME}
  20 PVE_USR_HEADER_PKG=pve-kernel-libc-dev
  21 LINUX_TOOLS_PKG=linux-tools-${KERNEL_MAJMIN}
  22 KERNEL_SRC_COPY=${KERNEL_SRC}_tmp
  23
  24 # TODO: split for archs, move to files?
  25 PVE_CONFIG_OPTS= \
  26 -m INTEL_MEI_WDT \
  27 -d CONFIG_SND_PCM_OSS \
  28 -e CONFIG_TRANSPARENT_HUGEPAGE_MADVISE \
  29 -d CONFIG_TRANSPARENT_HUGEPAGE_ALWAYS \
  30 -m CONFIG_CEPH_FS \
  31 -m CONFIG_BLK_DEV_NBD \
  32 -m CONFIG_BLK_DEV_RBD \
  33 -m CONFIG_BLK_DEV_UBLK \
  34 -d CONFIG_SND_PCSP \
  35 -m CONFIG_BCACHE \
  36 -m CONFIG_JFS_FS \
  37 -m CONFIG_HFS_FS \
  38 -m CONFIG_HFSPLUS_FS \
  39 -e CIFS_SMB_DIRECT \
  40 -e CONFIG_SQUASHFS_DECOMP_MULTI_PERCPU \
  41 -e CONFIG_BRIDGE \
  42 -e CONFIG_BRIDGE_NETFILTER \
  43 -e CONFIG_BLK_DEV_SD \
  44 -e CONFIG_BLK_DEV_SR \
  45 -e CONFIG_BLK_DEV_DM \
  46 -m CONFIG_BLK_DEV_NVME \
  47 -e CONFIG_NLS_ISO8859_1 \
  48 -d CONFIG_INPUT_EVBUG \
  49 -d CONFIG_CPU_FREQ_DEFAULT_GOV_ONDEMAND \
  50 -d CONFIG_CPU_FREQ_DEFAULT_GOV_SCHEDUTIL \
  51 -e CONFIG_CPU_FREQ_DEFAULT_GOV_PERFORMANCE \
  52 -e CONFIG_SYSFB_SIMPLEFB \
  53 -e CONFIG_DRM_SIMPLEDRM \
  54 -d CONFIG_MODULE_SIG \
  55 -d CONFIG_MEMCG_DISABLED \
  56 -e CONFIG_MEMCG_SWAP_ENABLED \
  57 -e CONFIG_HYPERV \
  58 -m CONFIG_VFIO_IOMMU_TYPE1 \
  59 -m CONFIG_VFIO_VIRQFD \
  60 -m CONFIG_VFIO \
  61 -m CONFIG_VFIO_PCI \
  62 -m CONFIG_USB_XHCI_HCD \
  63 -m CONFIG_USB_XHCI_PCI \
  64 -m CONFIG_USB_EHCI_HCD \
  65 -m CONFIG_USB_EHCI_PCI \
  66 -m CONFIG_USB_EHCI_HCD_PLATFORM \
  67 -m CONFIG_USB_OHCI_HCD \
  68 -m CONFIG_USB_OHCI_HCD_PCI \
  69 -m CONFIG_USB_OHCI_HCD_PLATFORM \
  70 -d CONFIG_USB_OHCI_HCD_SSB \
  71 -m CONFIG_USB_UHCI_HCD \
  72 -d CONFIG_USB_SL811_HCD_ISO \
  73 -e CONFIG_MEMCG_KMEM \
  74 -d CONFIG_DEFAULT_CFQ \
  75 -e CONFIG_DEFAULT_DEADLINE \
  76 -e CONFIG_MODVERSIONS \
  77 -e CONFIG_ZSTD_COMPRESS \
  78 -d CONFIG_DEFAULT_SECURITY_DAC \
  79 -e CONFIG_DEFAULT_SECURITY_APPARMOR \
  80 --set-str CONFIG_DEFAULT_SECURITY apparmor \
  81 -e CONFIG_MODULE_ALLOW_BTF_MISMATCH \
  82 -d CONFIG_UNWINDER_ORC \
  83 -d CONFIG_UNWINDER_GUESS \
  84 -e CONFIG_UNWINDER_FRAME_POINTER \
  85 --set-str CONFIG_SYSTEM_TRUSTED_KEYS ""\
  86 --set-str CONFIG_SYSTEM_REVOCATION_KEYS ""\
  87 -d CONFIG_SECURITY_LOCKDOWN_LSM \
  88 -d CONFIG_SECURITY_LOCKDOWN_LSM_EARLY \
  89 --set-str CONFIG_LSM yama,integrity,apparmor \
  90 -e CONFIG_PAGE_TABLE_ISOLATION
  91
  92 debian/control: $(wildcard debian/*.in)
  93         sed -e 's/@@KVNAME@@/${KVNAME}/g' < debian/pve-kernel.prerm.in > debian/${PVE_KERNEL_PKG}.prerm
  94         sed -e 's/@@KVNAME@@/${KVNAME}/g' < debian/pve-kernel.postrm.in > debian/${PVE_KERNEL_PKG}.postrm
  95         sed -e 's/@@KVNAME@@/${KVNAME}/g' < debian/pve-kernel.postinst.in > debian/${PVE_KERNEL_PKG}.postinst
  96         sed -e 's/@@KVNAME@@/${KVNAME}/g' < debian/pve-headers.postinst.in > debian/${PVE_HEADER_PKG}.postinst
  97         chmod +x debian/${PVE_KERNEL_PKG}.prerm
  98         chmod +x debian/${PVE_KERNEL_PKG}.postrm
  99         chmod +x debian/${PVE_KERNEL_PKG}.postinst
 100         chmod +x debian/${PVE_HEADER_PKG}.postinst
 101         sed -e 's/@KVNAME@/${KVNAME}/g' -e 's/@KVMAJMIN@/${KERNEL_MAJMIN}/g' < debian/control.in > debian/control
 102
 103 build: .compile_mark .tools_compile_mark .modules_compile_mark
 104
 105 install: .install_mark .tools_install_mark .headers_install_mark .usr_headers_install_mark
 106         dh_installdocs -A debian/copyright debian/SOURCE
 107         dh_installchangelogs
 108         dh_installman
 109         dh_strip_nondeterminism
 110         dh_compress
 111         dh_fixperms
 112
 113 binary: install
 114         debian/rules fwcheck abicheck
 115         dh_strip -N${PVE_HEADER_PKG} -N${PVE_USR_HEADER_PKG}
 116         dh_makeshlibs
 117         dh_shlibdeps
 118         dh_installdeb
 119         dh_gencontrol
 120         dh_md5sums
 121         dh_builddeb
 122
 123 .config_mark:
 124         cd ${KERNEL_SRC}; scripts/config ${PVE_CONFIG_OPTS}
 125         ${MAKE} -C ${KERNEL_SRC} oldconfig
 126         # copy to allow building in parallel to kernel/module compilation without interference
 127         rm -rf ${KERNEL_SRC_COPY}
 128         cp -ar ${KERNEL_SRC} ${KERNEL_SRC_COPY}
 129         touch $@
 130
 131 .compile_mark: .config_mark
 132         ${MAKE} -C ${KERNEL_SRC} KBUILD_BUILD_VERSION_TIMESTAMP="PVE ${DEB_VERSION} (${CHANGELOG_DATE_UTC_ISO})"
 133         touch $@
 134
 135 .install_mark: .compile_mark .modules_compile_mark
 136         rm -rf debian/${PVE_KERNEL_PKG}
 137         mkdir -p debian/${PVE_KERNEL_PKG}/lib/modules/${KVNAME}
 138         mkdir debian/${PVE_KERNEL_PKG}/boot
 139         install -m 644 ${KERNEL_SRC}/.config debian/${PVE_KERNEL_PKG}/boot/config-${KVNAME}
 140         install -m 644 ${KERNEL_SRC}/System.map debian/${PVE_KERNEL_PKG}/boot/System.map-${KVNAME}
 141         install -m 644 ${KERNEL_SRC}/${KERNEL_IMAGE_PATH} debian/${PVE_KERNEL_PKG}/boot/${KERNEL_INSTALL_FILE}-${KVNAME}
 142         ${MAKE} -C ${KERNEL_SRC} INSTALL_MOD_PATH=${BUILD_DIR}/debian/${PVE_KERNEL_PKG}/ modules_install
 143         # install zfs drivers
 144         install -d -m 0755 debian/${PVE_KERNEL_PKG}/lib/modules/${KVNAME}/zfs
 145         install -m 644 $(addprefix ${MODULES}/,zfs.ko zavl.ko znvpair.ko zunicode.ko zcommon.ko icp.ko zlua.ko spl.ko zzstd.ko) debian/${PVE_KERNEL_PKG}/lib/modules/${KVNAME}/zfs
 146         # remove firmware
 147         rm -rf debian/${PVE_KERNEL_PKG}/lib/firmware
 148
 149 ifeq ($(filter pkg.pve-kernel.debug,$(DEB_BUILD_PROFILES)),)
 150         echo "'pkg.pve-kernel.debug' build profile disabled, skipping -dbgsym creation"
 151 else
 152         echo "'pkg.pve-kernel.debug' build profile enabled, creating -dbgsym contents"
 153         mkdir -p debian/${PVE_DEBUG_KERNEL_PKG}/usr/lib/debug/lib/modules/${KVNAME}
 154         mkdir debian/${PVE_DEBUG_KERNEL_PKG}/usr/lib/debug/boot
 155         install -m 644 ${KERNEL_SRC}/vmlinux debian/${PVE_DEBUG_KERNEL_PKG}/usr/lib/debug/boot/vmlinux-${KVNAME}
 156         cp -r debian/${PVE_KERNEL_PKG}/lib/modules/${KVNAME} debian/${PVE_DEBUG_KERNEL_PKG}/usr/lib/debug/lib/modules/
 157         rm -f debian/${PVE_DEBUG_KERNEL_PKG}/usr/lib/debug/lib/modules/${KVNAME}/source
 158         rm -f debian/${PVE_DEBUG_KERNEL_PKG}/usr/lib/debug/lib/modules/${KVNAME}/build
 159         rm -f debian/${PVE_DEBUG_KERNEL_PKG}/usr/lib/debug/lib/modules/${KVNAME}/modules.*
 160 endif
 161
 162         # strip debug info
 163         find debian/${PVE_KERNEL_PKG}/lib/modules -name \*.ko -print | while read f ; do strip --strip-debug "$$f"; done
 164         # finalize
 165         /sbin/depmod -b debian/${PVE_KERNEL_PKG}/ ${KVNAME}
 166         # Autogenerate blacklist for watchdog devices (see README)
 167         install -m 0755 -d debian/${PVE_KERNEL_PKG}/lib/modprobe.d
 168         ls debian/${PVE_KERNEL_PKG}/lib/modules/${KVNAME}/kernel/drivers/watchdog/ > watchdog-blacklist.tmp
 169         echo ipmi_watchdog.ko >> watchdog-blacklist.tmp
 170         cat watchdog-blacklist.tmp|sed -e 's/^/blacklist /' -e 's/.ko$$//'|sort -u > debian/${PVE_KERNEL_PKG}/lib/modprobe.d/blacklist_${PVE_KERNEL_PKG}.conf
 171         rm -f debian/${PVE_KERNEL_PKG}/lib/modules/${KVNAME}/source
 172         rm -f debian/${PVE_KERNEL_PKG}/lib/modules/${KVNAME}/build
 173         touch $@
 174
 175 .tools_compile_mark: .compile_mark
 176         ${MAKE} -C ${KERNEL_SRC}/tools/perf prefix=/usr HAVE_NO_LIBBFD=1 HAVE_CPLUS_DEMANGLE_SUPPORT=1 NO_LIBPYTHON=1 NO_LIBPERL=1 NO_LIBCRYPTO=1 PYTHON=python3
 177         echo "checking GPL-2 only perf binary for library linkage with incompatible licenses.."
 178         ! ldd ${KERNEL_SRC}/tools/perf/perf | grep -q -E '\blibbfd'
 179         ! ldd ${KERNEL_SRC}/tools/perf/perf | grep -q -E '\blibcrypto'
 180         ${MAKE} -C ${KERNEL_SRC}/tools/perf man
 181         touch $@
 182
 183 .tools_install_mark: .tools_compile_mark
 184         rm -rf debian/${LINUX_TOOLS_PKG}
 185         mkdir -p debian/${LINUX_TOOLS_PKG}/usr/bin
 186         mkdir -p debian/${LINUX_TOOLS_PKG}/usr/share/man/man1
 187         install -m 755 ${BUILD_DIR}/${KERNEL_SRC}/tools/perf/perf debian/${LINUX_TOOLS_PKG}/usr/bin/perf_$(KERNEL_MAJMIN)
 188         for i in ${BUILD_DIR}/${KERNEL_SRC}/tools/perf/Documentation/*.1; do \
 189             fname="$${i##*/}"; manname="$${fname%.1}"; \
 190             install -m644 "$$i" "debian/${LINUX_TOOLS_PKG}/usr/share/man/man1/$${manname}_$(KERNEL_MAJMIN).1"; \
 191         done
 192         touch $@
 193
 194 .headers_prepare_mark: .config_mark
 195         rm -rf debian/${PVE_HEADER_PKG}
 196         mkdir -p debian/${PVE_HEADER_PKG}/usr/src/linux-headers-${KVNAME}
 197         install -m 0644 ${KERNEL_SRC}/.config debian/${PVE_HEADER_PKG}/usr/src/linux-headers-${KVNAME}
 198         make -C ${KERNEL_SRC_COPY} mrproper
 199         cd ${KERNEL_SRC_COPY}; find . -path './debian/*' -prune \
 200             -o -path './include/*' -prune \
 201             -o -path './Documentation' -prune \
 202             -o -path './scripts' -prune \
 203             -o -type f \
 204             \( \
 205                 -name 'Makefile*' \
 206                 -o -name 'Kconfig*' \
 207                 -o -name 'Kbuild*' \
 208                 -o -name '*.sh' \
 209                 -o -name '*.pl' \
 210             \) \
 211             -print | cpio -pd --preserve-modification-time ${BUILD_DIR}/debian/${PVE_HEADER_PKG}/usr/src/linux-headers-${KVNAME}
 212         cd ${KERNEL_SRC_COPY}; \
 213             ( \
 214                 find arch/${KERNEL_HEADER_ARCH} -name include -type d -print | \
 215                 xargs -n1 -i: find : -type f \
 216             ) | \
 217             cpio -pd --preserve-modification-time ${BUILD_DIR}/debian/${PVE_HEADER_PKG}/usr/src/linux-headers-${KVNAME}
 218         touch $@
 219
 220 .headers_compile_mark: .headers_prepare_mark
 221         # set output to subdir of source to reduce number of hardcoded paths in output files
 222         rm -rf ${BUILD_DIR}/${KERNEL_SRC_COPY}/${PVE_HEADER_PKG}
 223         mkdir -p ${BUILD_DIR}/${KERNEL_SRC_COPY}/${PVE_HEADER_PKG}
 224         cp ${KERNEL_SRC}/.config ${BUILD_DIR}/${KERNEL_SRC_COPY}/${PVE_HEADER_PKG}/.config
 225         ${MAKE} -C ${KERNEL_SRC_COPY} O=${BUILD_DIR}/${KERNEL_SRC_COPY}/${PVE_HEADER_PKG} -j1 syncconfig modules_prepare prepare scripts
 226         cd ${KERNEL_SRC_COPY}; cp -a include scripts ${BUILD_DIR}/debian/${PVE_HEADER_PKG}/usr/src/linux-headers-${KVNAME}
 227         find ${BUILD_DIR}/${KERNEL_SRC_COPY}/${PVE_HEADER_PKG} -name \*.o.ur-\* -o -name '*.cmd' | xargs rm -f
 228         rsync --ignore-existing -r -v -a $(addprefix ${BUILD_DIR}/${KERNEL_SRC_COPY}/${PVE_HEADER_PKG}/,arch include kernel scripts tools) ${BUILD_DIR}/debian/${PVE_HEADER_PKG}/usr/src/linux-headers-${KVNAME}/
 229         rm -rf ${BUILD_DIR}/${KERNEL_SRC_COPY}
 230         touch $@
 231
 232 .headers_install_mark: .compile_mark .modules_compile_mark .headers_compile_mark
 233         cp ${KERNEL_SRC}/include/generated/compile.h debian/${PVE_HEADER_PKG}/usr/src/linux-headers-${KVNAME}/include/generated/compile.h
 234         install -m 0644 ${KERNEL_SRC}/Module.symvers debian/${PVE_HEADER_PKG}/usr/src/linux-headers-${KVNAME}
 235         mkdir -p debian/${PVE_HEADER_PKG}/lib/modules/${KVNAME}
 236         ln -sf /usr/src/linux-headers-${KVNAME} debian/${PVE_HEADER_PKG}/lib/modules/${KVNAME}/build
 237         touch $@
 238
 239 .usr_headers_install_mark: PKG_DIR = debian/${PVE_USR_HEADER_PKG}
 240 .usr_headers_install_mark: OUT_DIR = ${PKG_DIR}/usr
 241 .usr_headers_install_mark: .config_mark
 242         rm -rf '${PKG_DIR}'
 243         mkdir -p  '${PKG_DIR}'
 244         $(MAKE) -C ${KERNEL_SRC} headers_install ARCH=$(KERNEL_HEADER_ARCH) INSTALL_HDR_PATH='$(CURDIR)'/$(OUT_DIR)
 245         rm -rf $(OUT_DIR)/include/drm $(OUT_DIR)/include/scsi
 246         find $(OUT_DIR)/include \( -name .install -o -name ..install.cmd \) -execdir rm {} +
 247
 248 # Move include/asm to arch-specific directory
 249         mkdir -p $(OUT_DIR)/include/$(DEB_HOST_MULTIARCH)
 250         mv $(OUT_DIR)/include/asm $(OUT_DIR)/include/$(DEB_HOST_MULTIARCH)/
 251         test ! -d $(OUT_DIR)/include/arch || \
 252                 mv $(OUT_DIR)/include/arch $(OUT_DIR)/include/$(DEB_HOST_MULTIARCH)/
 253         touch $@
 254
 255 .modules_compile_mark: ${MODULES}/zfs.ko
 256         touch $@
 257
 258 ${MODULES}/zfs.ko: .compile_mark
 259         cd ${MODULES}/${ZFSDIR}; ./autogen.sh
 260         cd ${MODULES}/${ZFSDIR}; ./configure --with-config=kernel --with-linux=${BUILD_DIR}/${KERNEL_SRC} --with-linux-obj=${BUILD_DIR}/${KERNEL_SRC}
 261         ${MAKE} -C ${MODULES}/${ZFSDIR}
 262         cp ${MODULES}/${ZFSDIR}/module/avl/zavl.ko ${MODULES}/
 263         cp ${MODULES}/${ZFSDIR}/module/nvpair/znvpair.ko ${MODULES}/
 264         cp ${MODULES}/${ZFSDIR}/module/unicode/zunicode.ko ${MODULES}/
 265         cp ${MODULES}/${ZFSDIR}/module/zcommon/zcommon.ko ${MODULES}/
 266         cp ${MODULES}/${ZFSDIR}/module/icp/icp.ko ${MODULES}/
 267         cp ${MODULES}/${ZFSDIR}/module/zfs/zfs.ko ${MODULES}/
 268         cp ${MODULES}/${ZFSDIR}/module/lua/zlua.ko ${MODULES}/
 269         cp ${MODULES}/${ZFSDIR}/module/spl/spl.ko ${MODULES}/
 270         cp ${MODULES}/${ZFSDIR}/module/zstd/zzstd.ko ${MODULES}/
 271
 272 fwlist-${KVNAME}: .compile_mark .modules_compile_mark
 273         debian/scripts/find-firmware.pl debian/${PVE_KERNEL_PKG}/lib/modules/${KVNAME} >fwlist.tmp
 274         mv fwlist.tmp $@
 275
 276 .PHONY: fwcheck
 277 fwcheck: fwlist-${KVNAME} fwlist-previous
 278         @echo "checking fwlist for changes since last built firmware package.."
 279         @echo "if this check fails, add fwlist-${KVNAME} to the pve-firmware repository and upload a new firmware package together with the ${KVNAME} kernel"
 280         sort fwlist-previous | uniq > fwlist-previous.sorted
 281         sort fwlist-${KVNAME} | uniq > fwlist-${KVNAME}.sorted
 282         diff -up -N fwlist-previous.sorted fwlist-${KVNAME}.sorted > fwlist.diff
 283         rm fwlist.diff fwlist-previous.sorted fwlist-${KVNAME}.sorted
 284         @echo "done, no need to rebuild pve-firmware"
 285
 286
 287 abi-${KVNAME}: .compile_mark
 288         debian/scripts/abi-generate debian/${PVE_HEADER_PKG}/usr/src/linux-headers-${KVNAME}/Module.symvers abi-${KVNAME} ${KVNAME}
 289
 290 .PHONY: abicheck
 291 abicheck: debian/scripts/abi-check abi-${KVNAME} abi-prev-* abi-blacklist
 292         debian/scripts/abi-check abi-${KVNAME} abi-prev-* ${SKIPABI}
 293
 294 .PHONY: clean