summaryrefslogtreecommitdiff
path: root/main/lxc/APKBUILD
blob: 7f63f8198ac4472c08a5d9a2e01a81c870dccc19 (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
# Contributor: Łukasz Jendrysik <scadu@yandex.com>
# Contributor: Jakub Jirutka <jakub@jirutka.cz>
# Maintainer: Natanael Copa <ncopa@alpinelinux.org>
pkgname=lxc
pkgver=5.0.3
_pkgver=${pkgver/_rc/.rc}
pkgrel=0
pkgdesc="Userspace interface for the Linux kernel containment features"
url="https://linuxcontainers.org/lxc/"
arch="all"
license="LGPL-2.1-or-later"
makedepends="
	docbook2x
	libapparmor-dev
	libcap-dev
	libcap-static
	libseccomp-dev
	linux-headers
	linux-pam-dev
	meson
	"
subpackages="
	$pkgname-dbg
	$pkgname-dev
	$pkgname-doc
	$pkgname-openrc
	$pkgname-lvm::noarch
	$pkgname-test-utils:_test_utils
	$pkgname-libs
	$pkgname-bridge::noarch
	$pkgname-bash-completion:bashcomp:noarch
	$pkgname-pam
	$pkgname-download:_download:noarch
	$pkgname-templates-oci:templates_oci:noarch
	$pkgname-templates::noarch
	"
source="https://linuxcontainers.org/downloads/lxc/lxc-$_pkgver.tar.gz
	Add-loongarch64-support.patch
	lxc.initd
	lxc.confd
	"
# no buildtime tests
options="!check suid"

# secfixes:
#   5.0.1-r2:
#     - CVE-2022-47952
#   3.1.0-r1:
#     - CVE-2019-5736
#   2.1.1-r9:
#     - CVE-2018-6556

_tmpldir="usr/share/lxc/templates"

build() {
	case "$CARCH" in
	riscv64)
		local lto=false
		;;
	*)
		local lto=true
		;;
	esac
	abuild-meson \
		-Db_lto=$lto \
		-Ddistrosysconfdir=/etc/default \
		-Dpam-cgroup=true \
		-Dtests=true \
		-Dinit-script="[]" \
		. output

	meson compile -C output
}

package() {
	DESTDIR="$pkgdir" meson install --no-rebuild -C output

	install -Dm755 "$srcdir"/lxc.initd "$pkgdir"/etc/init.d/lxc
	install -Dm644 "$srcdir"/lxc.confd "$pkgdir"/etc/conf.d/lxc
	install -d "$pkgdir"/var/lib/lxc

	# Remove useless config for SysVinit.
	rm -r "$pkgdir"/etc/default

	# they install this to libdir, but the other things are in /usr/lib
	# so we can't change it
	mkdir -p "$pkgdir"/lib
	mv "$pkgdir"/usr/lib/security "$pkgdir"/lib
}

lvm() {
	pkgdesc="LVM support for LXC"
	depends="$pkgname=$pkgver-r$pkgrel lvm2 util-linux"
	install_if="$pkgname=$pkgver-r$pkgrel lvm2"
	mkdir "$subpkgdir"
}

_test_utils() {
	pkgdesc="Runtime testing utilities for LXC"

	amove usr/bin/lxc-test-*
}

_py3() {
	pkgdesc="Python3 module for LXC"
	depends="python3"

	amove usr/lib/python3*
}

_download() {
	pkgdesc="LXC container image downloader template"
	depends="$pkgname gpg gnupg-dirmngr tar wget"

	amove $_tmpldir/lxc-download
}

templates() {
	pkgdesc="Templates for LXC (except alpine and download)"
	depends="tar"

	amove $_tmpldir/*
}

templates_oci() {
	pkgdesc="OCI Template for LXC"
	depends="bash jq"

	amove $_tmpldir/lxc-oci
}

pam() {
	pkgdesc="PAM module for LXC"

	amove lib/security
}

dev() {
	default_dev
	# fix abuild smartness
	mv "$subpkgdir"/usr/bin/lxc-config "$pkgdir"/usr/bin/
	mv "$subpkgdir"/usr/bin/lxc-update-config "$pkgdir"/usr/bin/
}

bridge() {
	depends="dnsmasq"
	pkgdesc="Bridge interface for LXC with dhcp"
	mkdir -p "$subpkgdir"/etc/conf.d \
		"$subpkgdir"/etc/init.d \
		"$subpkgdir"/etc/lxc

	ln -s dnsmasq "$subpkgdir"/etc/init.d/dnsmasq.lxcbr0
	cat >>"$subpkgdir"/etc/conf.d/dnsmasq.lxcbr0 <<- EOF
		rc_before="lxc"
		BRIDGE_ADDR="10.0.3.1"
		BRIDGE_NETMASK="255.255.255.0"
		BRIDGE_NETWORK="10.0.3.0/24"
		BRIDGE_DHCP_RANGE="10.0.3.2,10.0.3.254"
		BRIDGE_DHCP_MAX="253"
		BRIDGE_MAC="00:16:3e:00:00:00"
		DNSMASQ_CONFFILE="/etc/lxc/dnsmasq.conf"
	EOF
	cat >>"$subpkgdir"/etc/lxc/dnsmasq.conf <<- EOF
		#dhcp-host=somehost,10.0.3.3
		#dhcp-host=otherhost,10.0.3.4
	EOF
}

sha512sums="
0553be317431ab7ec0c450c0f85724a53de1f251c39c9716168e17cda6a8daec70b8221228c4be64027df28a327e0f1fd508e6bb48348ab540bbfeaf2b9ac974  lxc-5.0.3.tar.gz
86149baace39cd96ddd7c664639cbcd0aed31c5eb8b210892d2471bf49be07ef034e0eb4528666cd36e0653a1e1596daabf6393541f3d84846f8fbb0e0c43481  Add-loongarch64-support.patch
db71783366277a68a5c8116604cf845da4780fe4aebdb5820ae2c4fe028cfe52a9c94246db362476f2f195be6a9c2b835edbe521423f116fc66eb50023d6daab  lxc.initd
91de43db5369a9e10102933514d674e9c875218a1ff2910dd882e5b9c308f9e430deacb13d1d7e0b2ed1ef682d0bb035aa6f8a6738f54fa2ca3a05acce04e467  lxc.confd
"