diff options
Diffstat (limited to 'debian/rules')
-rwxr-xr-x | debian/rules | 231 |
1 files changed, 231 insertions, 0 deletions
diff --git a/debian/rules b/debian/rules new file mode 100755 index 000000000..198e2b616 --- /dev/null +++ b/debian/rules | |||
@@ -0,0 +1,231 @@ | |||
1 | #!/usr/bin/make -f | ||
2 | |||
3 | # Uncomment this to turn on verbose mode. | ||
4 | # export DH_VERBOSE=1 | ||
5 | |||
6 | # This has to be exported to make some magic below work. | ||
7 | export DH_OPTIONS | ||
8 | |||
9 | ifeq (,$(filter nocheck,$(DEB_BUILD_OPTIONS))) | ||
10 | RUN_TESTS := yes | ||
11 | else | ||
12 | RUN_TESTS := | ||
13 | endif | ||
14 | |||
15 | ifeq (,$(filter parallel=%,$(DEB_BUILD_OPTIONS))) | ||
16 | PARALLEL := | ||
17 | else | ||
18 | PARALLEL := \ | ||
19 | -j$(patsubst parallel=%,%,$(filter parallel=%,$(DEB_BUILD_OPTIONS))) | ||
20 | endif | ||
21 | |||
22 | DEB_HOST_GNU_TYPE ?= $(shell dpkg-architecture -qDEB_HOST_GNU_TYPE) | ||
23 | DEB_BUILD_GNU_TYPE ?= $(shell dpkg-architecture -qDEB_BUILD_GNU_TYPE) | ||
24 | DEB_HOST_ARCH ?= $(shell dpkg-architecture -qDEB_HOST_ARCH) | ||
25 | |||
26 | ifeq ($(DEB_BUILD_GNU_TYPE),$(DEB_HOST_GNU_TYPE)) | ||
27 | CC := gcc | ||
28 | PKG_CONFIG = pkg-config | ||
29 | else | ||
30 | CC := $(DEB_HOST_GNU_TYPE)-gcc | ||
31 | PKG_CONFIG = $(DEB_HOST_GNU_TYPE)-pkg-config | ||
32 | RUN_TESTS := | ||
33 | endif | ||
34 | |||
35 | DEB_HOST_ARCH_OS := $(shell dpkg-architecture -qDEB_HOST_ARCH_OS 2>/dev/null) | ||
36 | |||
37 | # Take account of old dpkg-architecture output. | ||
38 | ifeq ($(DEB_HOST_ARCH_OS),) | ||
39 | DEB_HOST_ARCH_OS := $(subst -gnu,,$(shell dpkg-architecture -qDEB_HOST_GNU_SYSTEM)) | ||
40 | ifeq ($(DEB_HOST_ARCH_OS),gnu) | ||
41 | DEB_HOST_ARCH_OS := hurd | ||
42 | endif | ||
43 | endif | ||
44 | |||
45 | # Change the version string to reflect distribution | ||
46 | DISTRIBUTION := $(shell dpkg-vendor --query vendor) | ||
47 | SSH_EXTRAVERSION := $(DISTRIBUTION)-$(shell dpkg-parsechangelog | sed -n -e '/^Version:/s/Version: //p' | sed -e 's/[^-]*-//') | ||
48 | |||
49 | DISTRIBUTOR := $(shell if dpkg-vendor --derives-from Ubuntu 2>/dev/null; then echo Ubuntu; else echo Debian; fi) | ||
50 | ifeq ($(DISTRIBUTOR),Ubuntu) | ||
51 | DEFAULT_PATH := /usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:/usr/games | ||
52 | else | ||
53 | DEFAULT_PATH := /usr/local/bin:/usr/bin:/bin:/usr/games | ||
54 | endif | ||
55 | SUPERUSER_PATH := /usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin | ||
56 | |||
57 | ifeq ($(DISTRIBUTOR),Ubuntu) | ||
58 | server_recommends := ssh-import-id | ||
59 | else | ||
60 | server_recommends := | ||
61 | endif | ||
62 | |||
63 | # Common path configuration. | ||
64 | confflags += --sysconfdir=/etc/ssh | ||
65 | confflags += --libexecdir=\$${prefix}/lib/openssh | ||
66 | |||
67 | # Common build options. | ||
68 | confflags += --disable-strip | ||
69 | confflags += --with-mantype=doc | ||
70 | confflags += --with-4in6 | ||
71 | confflags += --with-privsep-path=/var/run/sshd | ||
72 | |||
73 | # The Hurd needs libcrypt for res_query et al. | ||
74 | ifeq ($(DEB_HOST_ARCH_OS),hurd) | ||
75 | confflags += --with-libs=-lcrypt | ||
76 | endif | ||
77 | |||
78 | # http://gcc.gnu.org/bugzilla/show_bug.cgi?id=60155 | ||
79 | ifeq ($(DEB_HOST_ARCH),hppa) | ||
80 | confflags += --without-hardening | ||
81 | endif | ||
82 | |||
83 | # Everything above here is common to the deb and udeb builds. | ||
84 | confflags_udeb := $(confflags) | ||
85 | |||
86 | # Options specific to the deb build. | ||
87 | confflags += --with-tcp-wrappers | ||
88 | confflags += --with-pam | ||
89 | confflags += --with-libedit | ||
90 | confflags += --with-kerberos5=/usr | ||
91 | confflags += --with-ssl-engine | ||
92 | ifeq ($(DEB_HOST_ARCH_OS),linux) | ||
93 | confflags += --with-selinux | ||
94 | confflags += --with-audit=linux | ||
95 | endif | ||
96 | ifeq ($(DISTRIBUTOR),Ubuntu) | ||
97 | confflags += --with-consolekit | ||
98 | endif | ||
99 | |||
100 | # The deb build wants xauth; the udeb build doesn't. | ||
101 | confflags += --with-xauth=/usr/bin/xauth | ||
102 | confflags_udeb += --without-xauth | ||
103 | |||
104 | # Default paths. The udeb build has /usr/games removed. | ||
105 | confflags += --with-default-path=$(DEFAULT_PATH) --with-superuser-path=$(SUPERUSER_PATH) | ||
106 | confflags_udeb += --with-default-path=/usr/local/bin:/usr/bin:/bin --with-superuser-path=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin | ||
107 | |||
108 | # Compiler flags. | ||
109 | export DEB_BUILD_MAINT_OPTIONS := hardening=+all | ||
110 | include /usr/share/dpkg/buildflags.mk | ||
111 | cflags := $(CPPFLAGS) $(CFLAGS) | ||
112 | cflags += -DLOGIN_PROGRAM=\"/bin/login\" -DLOGIN_NO_ENDOPT | ||
113 | cflags += -DSSH_EXTRAVERSION=\"$(SSH_EXTRAVERSION)\" | ||
114 | cflags_udeb := -Os | ||
115 | cflags_udeb += -DSSH_EXTRAVERSION=\"$(SSH_EXTRAVERSION)\" | ||
116 | confflags += --with-cflags='$(cflags)' | ||
117 | confflags_udeb += --with-cflags='$(cflags_udeb)' | ||
118 | |||
119 | # Linker flags. | ||
120 | confflags += --with-ldflags='$(strip -Wl,--as-needed $(LDFLAGS))' | ||
121 | confflags_udeb += --with-ldflags='-Wl,--as-needed' | ||
122 | |||
123 | %: | ||
124 | dh $@ --with=autoreconf,systemd | ||
125 | |||
126 | autoreconf: | ||
127 | autoreconf -f -i | ||
128 | cp -f /usr/share/misc/config.guess /usr/share/misc/config.sub ./ | ||
129 | |||
130 | override_dh_autoreconf: | ||
131 | dh_autoreconf debian/rules -- autoreconf | ||
132 | |||
133 | override_dh_auto_configure: | ||
134 | dh_auto_configure -Bbuild-deb -- $(confflags) | ||
135 | dh_auto_configure -Bbuild-udeb -- $(confflags_udeb) | ||
136 | |||
137 | override_dh_auto_build: | ||
138 | # Avoid libnsl linkage. Ugh. | ||
139 | perl -pi -e 's/ +-lnsl//' build-udeb/config.status | ||
140 | cd build-udeb && ./config.status | ||
141 | |||
142 | $(MAKE) -C build-deb $(PARALLEL) ASKPASS_PROGRAM='/usr/bin/ssh-askpass' | ||
143 | $(MAKE) -C build-udeb $(PARALLEL) ASKPASS_PROGRAM='/usr/bin/ssh-askpass' ssh scp sftp sshd ssh-keygen | ||
144 | |||
145 | $(MAKE) -C contrib gnome-ssh-askpass2 CC='$(CC) $(CPPFLAGS) $(CFLAGS) -Wall -Wl,--as-needed $(LDFLAGS)' PKG_CONFIG=$(PKG_CONFIG) | ||
146 | |||
147 | override_dh_auto_test: | ||
148 | ifeq ($(RUN_TESTS),yes) | ||
149 | $(MAKE) -C build-deb regress-prep | ||
150 | $(MAKE) -C build-deb $(PARALLEL) \ | ||
151 | regress/unittests/sshbuf/test_sshbuf \ | ||
152 | regress/unittests/sshkey/test_sshkey \ | ||
153 | regress/unittests/bitmap/test_bitmap \ | ||
154 | regress/unittests/hostkeys/test_hostkeys \ | ||
155 | regress/unittests/kex/test_kex | ||
156 | $(MAKE) -C build-deb/regress \ | ||
157 | .OBJDIR="$(CURDIR)/build-deb/regress" \ | ||
158 | .CURDIR="$(CURDIR)/regress" \ | ||
159 | unit | ||
160 | $(MAKE) -C build-deb compat-tests | ||
161 | $(MAKE) -C debian/keygen-test | ||
162 | endif | ||
163 | |||
164 | override_dh_auto_clean: | ||
165 | rm -rf build-deb build-udeb | ||
166 | ifeq ($(RUN_TESTS),yes) | ||
167 | $(MAKE) -C debian/keygen-test clean | ||
168 | endif | ||
169 | $(MAKE) -C contrib clean | ||
170 | (cat debian/copyright.head; iconv -f ISO-8859-1 -t UTF-8 LICENCE) \ | ||
171 | > debian/copyright | ||
172 | |||
173 | override_dh_auto_install: | ||
174 | $(MAKE) -C build-deb DESTDIR=`pwd`/debian/tmp install-nokeys | ||
175 | |||
176 | override_dh_install: | ||
177 | rm -f debian/tmp/etc/ssh/sshd_config | ||
178 | |||
179 | dh_install -Nopenssh-client-udeb -Nopenssh-server-udeb --fail-missing | ||
180 | dh_install -popenssh-client-udeb -popenssh-server-udeb \ | ||
181 | --sourcedir=build-udeb | ||
182 | |||
183 | # Remove version control tags to avoid unnecessary conffile | ||
184 | # resolution steps for administrators. | ||
185 | sed -i '/\$$OpenBSD:/d' \ | ||
186 | debian/openssh-client/etc/ssh/moduli \ | ||
187 | debian/openssh-client/etc/ssh/ssh_config | ||
188 | |||
189 | override_dh_installdocs: | ||
190 | dh_installdocs -Nopenssh-server -Nopenssh-sftp-server | ||
191 | dh_installdocs -popenssh-server -popenssh-sftp-server \ | ||
192 | --link-doc=openssh-client | ||
193 | # Avoid breaking dh_installexamples later. | ||
194 | mkdir -p debian/openssh-server/usr/share/doc/openssh-client | ||
195 | |||
196 | override_dh_systemd_enable: | ||
197 | dh_systemd_enable -popenssh-server --name ssh ssh.service | ||
198 | dh_systemd_enable -popenssh-server --name ssh --no-enable ssh.socket | ||
199 | |||
200 | override_dh_installinit: | ||
201 | dh_installinit -R --name ssh | ||
202 | |||
203 | debian/openssh-server.sshd.pam: debian/openssh-server.sshd.pam.in | ||
204 | ifeq ($(DEB_HOST_ARCH_OS),linux) | ||
205 | sed 's/^@IF_KEYINIT@//' $< > $@ | ||
206 | else | ||
207 | sed '/^@IF_KEYINIT@/d' $< > $@ | ||
208 | endif | ||
209 | |||
210 | override_dh_installpam: debian/openssh-server.sshd.pam | ||
211 | dh_installpam --name sshd | ||
212 | |||
213 | override_dh_fixperms: | ||
214 | dh_fixperms | ||
215 | chmod u+s debian/openssh-client/usr/lib/openssh/ssh-keysign | ||
216 | |||
217 | # Tighten libssl dependencies to match the check in entropy.c. | ||
218 | override_dh_shlibdeps: | ||
219 | dh_shlibdeps | ||
220 | debian/adjust-openssl-dependencies | ||
221 | |||
222 | override_dh_gencontrol: | ||
223 | dh_gencontrol -- -V'openssh-server:Recommends=$(server_recommends)' | ||
224 | |||
225 | override_dh_builddeb: | ||
226 | dh_builddeb -- -Zxz | ||
227 | |||
228 | debian/faq.html: | ||
229 | wget -O - http://www.openssh.org/faq.html | \ | ||
230 | sed 's,\(href="\)\(txt/\|[^":]*\.html\),\1http://www.openssh.org/\2,g' \ | ||
231 | > debian/faq.html | ||