|
|
@@ -1,5 +1,15 @@ |
|
|
#!/usr/bin/make -f
|
|
|
# -*- makefile -*-
|
|
|
+#
|
|
|
+# These rules should work for any debian-ish distro that is *not*
|
|
|
+# systemd based but can use a tweaked, deputy systemd. This includes
|
|
|
+# just Ubuntu 14.04 ("trusty"), to our knowledge (let us know if
|
|
|
+# you're using this elsewhere!). The more general, systemd-based one
|
|
|
+# is the 16.04 rule.
|
|
|
+#
|
|
|
+# Please keep the diff between that and this relatively small, even if
|
|
|
+# it means having suboptimal code; these need to be kept in sync by
|
|
|
+# sentient bags of meat.
|
|
|
|
|
|
#export DH_VERBOSE=1
|
|
|
export DH_OPTIONS
|
|
|
@@ -14,21 +24,30 @@ export PATH:=/usr/lib/go-1.6/bin:${PATH} |
|
|
|
|
|
include /etc/os-release
|
|
|
|
|
|
-# We are relying on a deputy systemd setup for trusty,
|
|
|
-# in which systemd does not run as PID 1. To solve the
|
|
|
-# problem of services shipping systemd units and upstart jobs
|
|
|
-# being started twice, we altered systemd on trusty to ignore
|
|
|
-# /lib/systemd/system and instead consider only selected units from
|
|
|
-# /lib/systemd/upstart.
|
|
|
+# On trusty we are relying on a deputy systemd, which does not run as
|
|
|
+# PID 1. To solve the problem of services shipping systemd units and
|
|
|
+# upstart jobs being started twice, we altered systemd on trusty to
|
|
|
+# ignore /lib/systemd/system and instead consider only selected units
|
|
|
+# from /lib/systemd/upstart.
|
|
|
SYSTEMD_UNITS_DESTDIR="lib/systemd/upstart/"
|
|
|
+
|
|
|
# make sure that trusty's golang-1.6 is picked up correctly.
|
|
|
export PATH:=/usr/lib/go-1.6/bin:${PATH}
|
|
|
|
|
|
# The go tool does not fully support vendoring with gccgo, but we can
|
|
|
# work around that by constructing the appropriate -I flag by hand.
|
|
|
GCCGO := $(shell go tool dist env > /dev/null 2>&1 && echo no || echo yes)
|
|
|
|
|
|
-BUILDFLAGS:=-buildmode=pie -pkgdir=$(CURDIR)/_build/std
|
|
|
+# Disable -buildmode=pie mode on i386 as can panics in spectacular
|
|
|
+# ways (LP: #1711052).
|
|
|
+# See also https://forum.snapcraft.io/t/artful-i386-panics/
|
|
|
+# Note while the panic is only on artful, that's because artful
|
|
|
+# detects it; the issue potentially there on older things.
|
|
|
+BUILDFLAGS:=-pkgdir=$(CURDIR)/_build/std
|
|
|
+ifneq ($(shell dpkg-architecture -qDEB_HOST_ARCH),i386)
|
|
|
+BUILDFLAGS+= -buildmode=pie
|
|
|
+endif
|
|
|
+
|
|
|
GCCGOFLAGS=
|
|
|
ifeq ($(GCCGO),yes)
|
|
|
GOARCH := $(shell go env GOARCH)
|
|
|
@@ -53,7 +72,8 @@ BUILT_USING_PACKAGES= |
|
|
# because derivatives may have different kernels that don't support all the
|
|
|
# required confinement features and we don't to mislead anyone about the
|
|
|
# security of the system. Discuss a proper approach to this for downstreams
|
|
|
-# if and when they approach us
|
|
|
+# if and when they approach us.
|
|
|
+# NOTE this could be simpler for trusty, but this way keeps the diff down.
|
|
|
ifeq ($(shell dpkg-vendor --query Vendor),Ubuntu)
|
|
|
# On Ubuntu 16.04 we need to produce a build that can be used on wide
|
|
|
# variety of systems. As such we prefer static linking over dynamic linking
|
|
|
@@ -72,31 +92,14 @@ endif |
|
|
endif
|
|
|
BUILT_USING=$(shell dpkg-query -f '$${source:Package} (= $${source:Version}), ' -W $(BUILT_USING_PACKAGES))
|
|
|
|
|
|
-# export DEB_BUILD_MAINT_OPTIONS = hardening=+all
|
|
|
-# DPKG_EXPORT_BUILDFLAGS = 1
|
|
|
-# include /usr/share/dpkg/buildflags.mk
|
|
|
-
|
|
|
-# Currently, we enable confinement for Ubuntu only, not for derivatives,
|
|
|
-# because derivatives may have different kernels that don't support all the
|
|
|
-# required confinement features and we don't to mislead anyone about the
|
|
|
-# security of the system. Discuss a proper approach to this for downstreams
|
|
|
-# if and when they approach us
|
|
|
-ifeq ($(shell dpkg-vendor --query Vendor),Ubuntu)
|
|
|
- # On Ubuntu 14.04 snapd cannot add the libcap dependency because of a
|
|
|
- # feature/bug in apt where this would stop updates for some people (apt
|
|
|
- # tries not to install new packages unless `dist-upgrade' command is used).
|
|
|
- # As a work-around we link to libcap statically.
|
|
|
- VENDOR_ARGS=--enable-nvidia-ubuntu --enable-static-libcap
|
|
|
-else
|
|
|
- VENDOR_ARGS=--disable-apparmor
|
|
|
-endif
|
|
|
-
|
|
|
%:
|
|
|
dh $@ --buildsystem=golang --with=golang --fail-missing --builddirectory=_build
|
|
|
|
|
|
override_dh_fixperms:
|
|
|
dh_fixperms -Xusr/lib/snapd/snap-confine
|
|
|
|
|
|
+
|
|
|
+# trusty doesn't need the .real workaround
|
|
|
override_dh_installdeb:
|
|
|
dh_apparmor --profile-name=usr.lib.snapd.snap-confine -psnapd
|
|
|
dh_installdeb
|
|
|
@@ -114,9 +117,9 @@ ifneq (,$(TEST_GITHUB_AUTOPKGTEST)) |
|
|
)
|
|
|
endif
|
|
|
dh_clean
|
|
|
+ $(MAKE) -C data clean
|
|
|
# XXX: hacky
|
|
|
$(MAKE) -C cmd distclean || true
|
|
|
- $(MAKE) -C data/systemd clean
|
|
|
|
|
|
override_dh_auto_build:
|
|
|
# usually done via `go generate` but that is not supported on powerpc
|
|
|
@@ -130,6 +133,9 @@ override_dh_auto_build: |
|
|
cd cmd && ( ./configure --prefix=/usr --libexecdir=/usr/lib/snapd $(VENDOR_ARGS))
|
|
|
$(MAKE) -C cmd all
|
|
|
|
|
|
+ # Generate the real systemd/dbus/env config files
|
|
|
+ $(MAKE) -C data all
|
|
|
+
|
|
|
override_dh_auto_test:
|
|
|
dh_auto_test -- $(GCCGOFLAGS)
|
|
|
# a tested default (production) build should have no test keys
|
|
|
@@ -143,6 +149,8 @@ ifeq (,$(filter nocheck,$(DEB_BUILD_OPTIONS))) |
|
|
$(MAKE) -C cmd check
|
|
|
endif
|
|
|
|
|
|
+# no dh_systemd in trusty
|
|
|
+
|
|
|
override_dh_install:
|
|
|
# we do not need this in the package, its just needed during build
|
|
|
rm -rf ${CURDIR}/debian/tmp/usr/bin/xgettext-go
|
|
|
@@ -155,18 +163,22 @@ override_dh_install: |
|
|
if [ -d share/locale ]; then \
|
|
|
cp -R share/locale debian/snapd/usr/share; \
|
|
|
fi
|
|
|
- # we install snapd's systemd units
|
|
|
- mkdir -p debian/snapd/$(SYSTEMD_UNITS_DESTDIR)
|
|
|
- install --mode=0644 debian/snapd.refresh.timer debian/snapd/$(SYSTEMD_UNITS_DESTDIR)
|
|
|
- install --mode=0644 debian/snapd.refresh.service debian/snapd/$(SYSTEMD_UNITS_DESTDIR)
|
|
|
- install --mode=0644 debian/snapd.autoimport.service debian/snapd/$(SYSTEMD_UNITS_DESTDIR)
|
|
|
- install --mode=0644 debian/*.socket debian/snapd/$(SYSTEMD_UNITS_DESTDIR)
|
|
|
- install --mode=0644 debian/snapd.service debian/snapd/$(SYSTEMD_UNITS_DESTDIR)
|
|
|
+
|
|
|
+ # install snapd's systemd units / upstart jobs, done
|
|
|
+ # here instead of debian/snapd.install because the
|
|
|
+ # ubuntu/14.04 release branch adds/changes bits here
|
|
|
+ $(MAKE) -C data install DESTDIR=$(CURDIR)/debian/snapd/ \
|
|
|
+ SYSTEMDSYSTEMUNITDIR=$(SYSTEMD_UNITS_DESTDIR)
|
|
|
+ # we called this apps-bin-path.sh instead of snapd.sh, and
|
|
|
+ # it's a conf file so we're stuck with it
|
|
|
+ mv debian/snapd/etc/profile.d/snapd.sh debian/snapd/etc/profile.d/apps-bin-path.sh
|
|
|
+
|
|
|
install --mode=0644 debian/snap.mount.service debian/snapd/$(SYSTEMD_UNITS_DESTDIR)
|
|
|
- # and now the normal install rules
|
|
|
- install --mode=0644 debian/snapd.system-shutdown.service debian/snapd/$(SYSTEMD_UNITS_DESTDIR)
|
|
|
+
|
|
|
$(MAKE) -C cmd install DESTDIR=$(CURDIR)/debian/tmp
|
|
|
|
|
|
+ # trusty doesn't need the .real workaround
|
|
|
+
|
|
|
dh_install
|
|
|
|
|
|
override_dh_auto_install: snap.8
|
|
|
|
mvo5Aug 29, 2017
Collaborator