summaryrefslogtreecommitdiff
path: root/debian/rules
diff options
context:
space:
mode:
Diffstat (limited to 'debian/rules')
-rwxr-xr-xdebian/rules351
1 files changed, 351 insertions, 0 deletions
diff --git a/debian/rules b/debian/rules
new file mode 100755
index 000000000..618525636
--- /dev/null
+++ b/debian/rules
@@ -0,0 +1,351 @@
1#!/usr/bin/make -f
2
3# Uncomment this to turn on verbose mode.
4# export DH_VERBOSE=1
5
6include /usr/share/hardening-includes/hardening.make
7
8# This has to be exported to make some magic below work.
9export DH_OPTIONS
10
11ifeq (,$(filter noopt,$(DEB_BUILD_OPTIONS)))
12OPTFLAGS := -O2
13else
14OPTFLAGS := -O0
15endif
16
17DEB_HOST_GNU_TYPE ?= $(shell dpkg-architecture -qDEB_HOST_GNU_TYPE)
18DEB_BUILD_GNU_TYPE ?= $(shell dpkg-architecture -qDEB_BUILD_GNU_TYPE)
19
20ifeq ($(DEB_BUILD_GNU_TYPE),$(DEB_HOST_GNU_TYPE))
21 confflags += --build=$(DEB_HOST_GNU_TYPE)
22 CC := gcc
23else
24 confflags += --build=$(DEB_BUILD_GNU_TYPE) --host=$(DEB_HOST_GNU_TYPE)
25 CC := $(DEB_HOST_GNU_TYPE)-gcc
26endif
27
28DEB_HOST_ARCH_OS := $(shell dpkg-architecture -qDEB_HOST_ARCH_OS 2>/dev/null)
29DEB_HOST_ARCH_CPU := $(shell dpkg-architecture -qDEB_HOST_ARCH_CPU 2>/dev/null)
30
31# Take account of old dpkg-architecture output.
32ifeq ($(DEB_HOST_ARCH_OS),)
33 DEB_HOST_ARCH_OS := $(subst -gnu,,$(shell dpkg-architecture -qDEB_HOST_GNU_SYSTEM))
34 ifeq ($(DEB_HOST_ARCH_OS),gnu)
35 DEB_HOST_ARCH_OS := hurd
36 endif
37endif
38ifeq ($(DEB_HOST_ARCH_CPU),)
39 DEB_HOST_ARCH_CPU := $(shell dpkg-architecture -qDEB_HOST_GNU_CPU)
40 ifeq ($(DEB_HOST_ARCH_CPU),x86_64)
41 DEB_HOST_ARCH_CPU := amd64
42 endif
43endif
44
45ifneq (,$(findstring :$(DEB_HOST_ARCH_OS):,:linux:knetbsd:))
46 ifneq (,$(findstring :$(DEB_HOST_ARCH_CPU):,:mips:mipsel:))
47 # Apparently this is not implied by -fPIE, at least on the mipsen.
48 PIC_CFLAGS := -fPIC
49 PIC_LDFLAGS := -fPIC
50 endif
51endif
52
53# Change the version string to include the Debian version
54SSH_EXTRAVERSION := Debian-$(shell dpkg-parsechangelog | sed -n -e '/^Version:/s/Version: //p' | sed -e 's/[^-]*-//')
55
56DISTRIBUTOR := $(shell lsb_release -is 2>/dev/null || echo Debian)
57ifeq ($(DISTRIBUTOR),Ubuntu)
58DEFAULT_PATH := /usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:/usr/bin/X11:/usr/games
59else
60DEFAULT_PATH := /usr/local/bin:/usr/bin:/bin:/usr/bin/X11:/usr/games
61endif
62SUPERUSER_PATH := /usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:/usr/bin/X11
63
64# Common path configuration.
65confflags += --prefix=/usr --sysconfdir=/etc/ssh --libexecdir=/usr/lib/openssh --mandir=/usr/share/man
66
67# Common build options.
68confflags += --disable-strip
69confflags += --with-mantype=doc
70confflags += --with-4in6
71confflags += --with-privsep-path=/var/run/sshd
72confflags += --without-rand-helper
73
74# The Hurd needs libcrypt for res_query et al.
75ifeq ($(DEB_HOST_ARCH_OS),hurd)
76confflags += --with-libs=-lcrypt
77endif
78
79# Everything above here is common to the deb and udeb builds.
80confflags_udeb := $(confflags)
81
82# Options specific to the deb build.
83confflags += --with-tcp-wrappers
84confflags += --with-pam
85confflags += --with-libedit
86confflags += --with-kerberos5=/usr
87confflags += --with-ssl-engine
88ifeq ($(DEB_HOST_ARCH_OS),linux)
89confflags += --with-selinux
90endif
91
92# The deb build wants xauth; the udeb build doesn't.
93confflags += --with-xauth=/usr/bin/X11/xauth
94confflags_udeb += --without-xauth
95
96# Default paths. The udeb build has /usr/bin/X11 and /usr/games removed.
97confflags += --with-default-path=$(DEFAULT_PATH) --with-superuser-path=$(SUPERUSER_PATH)
98confflags_udeb += --with-default-path=/usr/local/bin:/usr/bin:/bin --with-superuser-path=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin
99
100# Compiler flags.
101cflags := $(OPTFLAGS) $(PIC_CFLAGS) $(HARDENING_CFLAGS)
102cflags += -DLOGIN_PROGRAM=\"/bin/login\" -DLOGIN_NO_ENDOPT
103cflags += -DSSH_EXTRAVERSION=\"$(SSH_EXTRAVERSION)\"
104cflags_udeb := -Os
105cflags_udeb += -DSSH_EXTRAVERSION=\"$(SSH_EXTRAVERSION)\"
106confflags += --with-cflags='$(cflags)'
107confflags_udeb += --with-cflags='$(cflags_udeb)'
108
109# Linker flags.
110ifneq ($(PIC_LDFLAGS)$(HARDENING_LDFLAGS),)
111confflags += --with-ldflags='$(strip $(PIC_LDFLAGS) $(HARDENING_LDFLAGS))'
112endif
113
114build: build-deb build-udeb
115
116build-deb: build-deb-stamp
117build-deb-stamp:
118 dh_testdir
119 mkdir -p build-deb
120 cd build-deb && ../configure $(confflags)
121
122ifeq ($(DEB_HOST_ARCH_OS),linux)
123 # Some 2.2 kernels have trouble with setres[ug]id() (bug #239999).
124 perl -pi -e 's/.*#undef (BROKEN_SETRES[UG]ID).*/#define $$1 1/' build-deb/config.h
125endif
126 # Debian's /var/log/btmp has inappropriate permissions.
127 perl -pi -e 's,.*#define USE_BTMP .*,/* #undef USE_BTMP */,' build-deb/config.h
128
129 $(MAKE) -C build-deb -j 2 ASKPASS_PROGRAM='/usr/bin/ssh-askpass'
130 $(MAKE) -C contrib gnome-ssh-askpass2 CC='$(CC) $(OPTFLAGS) -g -Wall'
131ifeq ($(DEB_BUILD_GNU_TYPE),$(DEB_HOST_GNU_TYPE))
132 $(MAKE) -C debian/tests
133endif
134
135 touch build-deb-stamp
136
137build-udeb: build-udeb-stamp
138build-udeb-stamp:
139 dh_testdir
140 mkdir -p build-udeb
141 cd build-udeb && ../configure $(confflags_udeb)
142 # Debian's /var/log/btmp has inappropriate permissions.
143 perl -pi -e 's,.*#define USE_BTMP .*,/* #undef USE_BTMP */,' build-udeb/config.h
144 # Avoid libnsl linkage. Ugh.
145 perl -pi -e 's/ +-lnsl//' build-udeb/config.status
146 cd build-udeb && ./config.status
147 $(MAKE) -C build-udeb -j 2 ASKPASS_PROGRAM='/usr/bin/ssh-askpass' ssh scp sftp sshd ssh-keygen
148 touch build-udeb-stamp
149
150clean:
151 dh_testdir
152 rm -rf build-deb build-udeb
153ifeq ($(DEB_BUILD_GNU_TYPE),$(DEB_HOST_GNU_TYPE))
154 $(MAKE) -C debian/tests clean
155endif
156 $(MAKE) -C contrib clean
157 (cat debian/copyright.head; iconv -f ISO-8859-1 -t UTF-8 LICENCE) \
158 > debian/copyright
159 dh_clean
160
161install: DH_OPTIONS=-a
162install: build
163 dh_testdir
164 dh_testroot
165 dh_prep
166 dh_installdirs
167
168 $(MAKE) -C build-deb DESTDIR=`pwd`/debian/openssh-client install-nokeys
169
170 rm -f debian/openssh-client/etc/ssh/sshd_config
171 #Temporary hack: remove /usr/share/Ssh.bin, since we have no smartcard support anyway.
172 rm -f debian/openssh-client/usr/share/Ssh.bin
173
174 # Split off the server.
175 mv debian/openssh-client/usr/sbin/sshd debian/openssh-server/usr/sbin/
176 mv debian/openssh-client/usr/lib/openssh/sftp-server debian/openssh-server/usr/lib/openssh/
177 mv debian/openssh-client/usr/share/man/man5/authorized_keys.5 debian/openssh-server/usr/share/man/man5/
178 mv debian/openssh-client/usr/share/man/man5/sshd_config.5 debian/openssh-server/usr/share/man/man5/
179 mv debian/openssh-client/usr/share/man/man8/sshd.8 debian/openssh-server/usr/share/man/man8/
180 mv debian/openssh-client/usr/share/man/man8/sftp-server.8 debian/openssh-server/usr/share/man/man8/
181 rmdir debian/openssh-client/usr/sbin debian/openssh-client/var/run/sshd
182
183 install -m 755 contrib/ssh-copy-id debian/openssh-client/usr/bin/ssh-copy-id
184 install -m 644 -c contrib/ssh-copy-id.1 debian/openssh-client/usr/share/man/man1/ssh-copy-id.1
185
186 install -s -o root -g root -m 755 contrib/gnome-ssh-askpass2 debian/ssh-askpass-gnome/usr/lib/openssh/gnome-ssh-askpass
187 install -m 644 debian/gnome-ssh-askpass.1 debian/ssh-askpass-gnome/usr/share/man/man1/gnome-ssh-askpass.1
188 uudecode -o debian/ssh-askpass-gnome/usr/share/pixmaps/ssh-askpass-gnome.png debian/ssh-askpass-gnome.png.uue
189
190 install -m 755 debian/ssh-argv0 debian/openssh-client/usr/bin/ssh-argv0
191 install -m 644 debian/ssh-argv0.1 debian/openssh-client/usr/share/man/man1/ssh-argv0.1
192
193 install -o root -g root debian/openssh-server.init debian/openssh-server/etc/init.d/ssh
194 install -o root -g root -m 644 debian/openssh-server.default debian/openssh-server/etc/default/ssh
195 install -o root -g root debian/openssh-server.if-up debian/openssh-server/etc/network/if-up.d/openssh-server
196 install -o root -g root -m 644 debian/openssh-server.ufw.profile debian/openssh-server/etc/ufw/applications.d/openssh-server
197
198 install -m 755 build-udeb/ssh debian/openssh-client-udeb/usr/bin/ssh
199 install -m 755 build-udeb/scp debian/openssh-client-udeb/usr/bin/scp
200 install -m 755 build-udeb/sftp debian/openssh-client-udeb/usr/bin/sftp
201 install -m 755 build-udeb/sshd debian/openssh-server-udeb/usr/sbin/sshd
202 install -m 755 build-udeb/ssh-keygen debian/openssh-server-udeb/usr/bin/ssh-keygen
203
204 # Remove version control tags to avoid unnecessary conffile
205 # resolution steps for administrators.
206 sed -i '/\$$OpenBSD:/d' \
207 debian/openssh-client/etc/ssh/moduli \
208 debian/openssh-client/etc/ssh/ssh_config
209
210# Build architecture-independent files here.
211binary-indep: binary-ssh binary-ssh-krb5
212
213# Build architecture-dependent files here.
214binary-arch: binary-openssh-client binary-openssh-server
215binary-arch: binary-ssh-askpass-gnome
216binary-arch: binary-openssh-client-udeb binary-openssh-server-udeb
217
218binary-openssh-client: DH_OPTIONS=-popenssh-client
219binary-openssh-client: build install
220 dh_testdir
221 dh_testroot
222 dh_installdebconf
223 dh_installdocs
224 dh_installchangelogs
225 install -m644 debian/openssh-client.lintian debian/openssh-client/usr/share/lintian/overrides/openssh-client
226 dh_strip
227 dh_compress
228 dh_fixperms
229 chmod u+s debian/openssh-client/usr/lib/openssh/ssh-keysign
230 dh_installdeb
231 test ! -e debian/ssh/etc/ssh/ssh_prng_cmds \
232 || echo "/etc/ssh/ssh_prng_cmds" >> debian/openssh-client/DEBIAN/conffiles
233 perl -i debian/substitute-conffile.pl \
234 ETC_SSH_MODULI debian/openssh-client/etc/ssh/moduli \
235 ETC_SSH_SSH_CONFIG debian/openssh-client/etc/ssh/ssh_config \
236 debian/openssh-client/DEBIAN/preinst
237 dh_shlibdeps
238 dh_gencontrol
239 dh_md5sums
240 dh_builddeb
241
242binary-openssh-server: DH_OPTIONS=-popenssh-server
243binary-openssh-server: build install
244 dh_testdir
245 dh_testroot
246 dh_installdebconf
247 dh_installdocs
248 mv debian/openssh-server/usr/share/doc/openssh-server debian/openssh-server/usr/share/doc/openssh-client
249 rm -f debian/openssh-server/usr/share/doc/openssh-client/copyright
250 install -m644 debian/openssh-server.lintian debian/openssh-server/usr/share/lintian/overrides/openssh-server
251 dh_installpam --name sshd
252 dh_link
253 dh_strip
254 dh_compress
255 dh_fixperms
256 dh_installdeb
257 perl -i debian/substitute-conffile.pl \
258 ETC_DEFAULT_SSH debian/openssh-server/etc/default/ssh \
259 ETC_INIT_D_SSH debian/openssh-server/etc/init.d/ssh \
260 ETC_PAM_D_SSH debian/openssh-server/etc/pam.d/ssh \
261 debian/openssh-server/DEBIAN/preinst
262 dh_shlibdeps
263 dh_gencontrol
264 dh_md5sums
265 dh_builddeb
266
267binary-ssh: DH_OPTIONS=-pssh
268binary-ssh: build install
269 dh_testdir
270 dh_testroot
271 dh_installdirs
272 dh_installdocs
273 mv debian/ssh/usr/share/doc/ssh debian/ssh/usr/share/doc/openssh-client
274 rm -f debian/ssh/usr/share/doc/openssh-client/copyright
275 install -m644 debian/ssh.lintian debian/ssh/usr/share/lintian/overrides/ssh
276 dh_link
277 dh_compress
278 dh_fixperms
279 dh_installdeb
280 dh_gencontrol
281 dh_md5sums
282 dh_builddeb
283
284binary-ssh-krb5: DH_OPTIONS=-pssh-krb5
285binary-ssh-krb5: build install
286 dh_testdir
287 dh_testroot
288 dh_installdocs
289 dh_installchangelogs
290 dh_link
291 dh_compress
292 dh_fixperms
293 dh_installdeb
294 dh_gencontrol
295 dh_md5sums
296 dh_builddeb
297
298binary-ssh-askpass-gnome: DH_OPTIONS=-pssh-askpass-gnome
299binary-ssh-askpass-gnome: build install
300 dh_testdir
301 dh_testroot
302 dh_installdocs
303 dh_installexamples
304 dh_installchangelogs
305 dh_strip
306 dh_compress
307 dh_fixperms
308 dh_installdeb
309 dh_shlibdeps
310 dh_gencontrol
311 dh_md5sums
312 dh_builddeb
313
314binary-openssh-client-udeb: DH_OPTIONS=-popenssh-client-udeb
315binary-openssh-client-udeb: build install
316 dh_testdir
317 dh_testroot
318 dh_strip
319 dh_compress
320 dh_fixperms
321 dh_installdeb
322 dh_shlibdeps
323 dh_gencontrol
324 dh_md5sums
325 dh_builddeb
326
327binary-openssh-server-udeb: DH_OPTIONS=-popenssh-server-udeb
328binary-openssh-server-udeb: build install
329 dh_testdir
330 dh_testroot
331 dh_strip
332 dh_compress
333 dh_fixperms
334 dh_installdeb
335 dh_shlibdeps
336 dh_gencontrol
337 dh_md5sums
338 dh_builddeb
339
340binary: binary-indep binary-arch
341
342debian/faq.html:
343 wget -O - http://www.openssh.org/faq.html | \
344 sed 's,\(href="\)\(txt/\|[^":]*\.html\),\1http://www.openssh.org/\2,g' \
345 > debian/faq.html
346
347.PHONY: build clean binary-indep binary-arch binary install
348.PHONY: build-deb build-udeb
349.PHONY: binary-openssh-client binary-openssh-server binary-ssh
350.PHONY: binary-ssh-krb5 binary-ssh-askpass-gnome
351.PHONY: binary-openssh-client-udeb binary-openssh-server-udeb
generated by cgit v1.2.3 (git 2.39.1) at 2024-11-13 07:54:41 +0000