summaryrefslogtreecommitdiffstats
path: root/rules/iptables.make
blob: 7d6620635dc60192d2d3c15948fb2a86c904ae36 (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
# -*-makefile-*-
#
# Copyright (C) 2004 by Robert Schwebel
#               2007 by Carsten Schlote, konzeptpark
#               2008 by Juergen Beisert
#               2009 by Marc Kleine-Budde <mkl@pengutronix.de>
#               2016 by Andreas Geisenhainer <andreas.geisenhainer@atsonline.de>
#
#
# See CREDITS for details about who has contributed to this project.
#
# For further information about the PTXdist project and license conditions
# see the README file.
#

#
# We provide this package
#
PACKAGES-$(PTXCONF_IPTABLES) += iptables

#
# Paths and names
#
IPTABLES_VERSION	:= 1.6.1
IPTABLES_MD5		:= ab38a33806b6182c6f53d6afb4619add
IPTABLES		:= iptables-$(IPTABLES_VERSION)
IPTABLES_SUFFIX		:= tar.bz2
IPTABLES_URL		:= http://ftp.netfilter.org/pub/iptables/$(IPTABLES).$(IPTABLES_SUFFIX)
IPTABLES_SOURCE		:= $(SRCDIR)/$(IPTABLES).$(IPTABLES_SUFFIX)
IPTABLES_DIR		:= $(BUILDDIR)/$(IPTABLES)
IPTABLES_LICENSE	:= GPL-2.0-only

# ----------------------------------------------------------------------------
# Prepare
# ----------------------------------------------------------------------------

#
# autoconf
#
IPTABLES_CONF_TOOL	:= autoconf
IPTABLES_CONF_OPT	:= \
	$(CROSS_AUTOCONF_USR) \
	--$(call ptx/endis, PTXCONF_IPTABLES_IPV4)-ipv4 \
	--$(call ptx/endis, PTXCONF_IPTABLES_IPV6)-ipv6 \
	$(GLOBAL_LARGE_FILE_OPTION) \
	--enable-devel \
	--$(call ptx/endis, PTXCONF_IPTABLES_LIBIPQ)-libipq \
	--disable-bpf-compiler \
	--disable-nfsynproxy \
	--$(call ptx/endis, PTXCONF_IPTABLES_NFTABLES_COMPAT)-nftables \
	--with-kernel=$(KERNEL_HEADERS_DIR) \
	--with-xtlibdir=/usr/lib

# ----------------------------------------------------------------------------
# Install
# ----------------------------------------------------------------------------

$(STATEDIR)/iptables.install:
	@$(call targetinfo)
	@$(call install, IPTABLES)
	install $(IPTABLES_DIR)/iptables/iptables-apply $(IPTABLES_PKGDIR)/usr/sbin
	@$(touch)


# ----------------------------------------------------------------------------
# Target-Install
# ----------------------------------------------------------------------------

$(STATEDIR)/iptables.targetinstall:
	@$(call targetinfo)

	@$(call install_init, iptables)
	@$(call install_fixup, iptables,PRIORITY,optional)
	@$(call install_fixup, iptables,SECTION,base)
	@$(call install_fixup, iptables,AUTHOR,"Robert Schwebel <r.schwebel@pengutronix.de>")
	@$(call install_fixup, iptables,DESCRIPTION,missing)

# 	# install the basic libraries
	@$(call install_lib, iptables, 0, 0, 0644, libxtables)

ifdef PTXCONF_IPTABLES_LIBIPQ
	@$(call install_lib, iptables, 0, 0, 0644, libipq)
endif

	@cd $(IPTABLES_PKGDIR)/usr/lib && \
		for file in libxt_*.so; do \
			$(call install_copy, iptables, 0, 0, 0644, -,\
				/usr/lib/$$file); \
		done

ifdef PTXCONF_IPTABLES_IPV6
#	# install the IPv6 relevant shared libraries
	@cd $(IPTABLES_PKGDIR)/usr/lib && \
		for file in libip6t_*.so; do \
			$(call install_copy, iptables, 0, 0, 0644, -, \
				/usr/lib/$$file); \
		done
	@$(call install_lib, iptables, 0, 0, 0644, libip6tc)
endif

ifdef PTXCONF_IPTABLES_IPV4
#	# install the IPv4 relevant shared libraries
	@cd $(IPTABLES_PKGDIR)/usr/lib && \
		for file in libipt_*.so; do \
			$(call install_copy, iptables, 0, 0, 0644, -,\
				/usr/lib/$$file); \
		done
	@$(call install_lib, iptables, 0, 0, 0644, libip4tc)
endif

ifdef PTXCONF_IPTABLES_INSTALL_TOOLS
	@$(call install_copy, iptables, 0, 0, 0755, -, /usr/sbin/xtables-multi)
	@$(call install_link, iptables, ../sbin/xtables-multi, /usr/bin/iptables-xml)
ifdef PTXCONF_IPTABLES_LIBNFNETLINK
	@$(call install_copy, iptables, 0, 0, 0755, -, /usr/sbin/nfnl_osf)
endif
ifdef PTXCONF_IPTABLES_IPV6
# 	# IPv6 part
	@$(call install_link, iptables, xtables-multi, /usr/sbin/ip6tables)
	@$(call install_link, iptables, xtables-multi, /usr/sbin/ip6tables-restore)
	@$(call install_link, iptables, xtables-multi, /usr/sbin/ip6tables-save)
endif

ifdef PTXCONF_IPTABLES_IPV4
# 	# IPv4 part
	@$(call install_link, iptables, xtables-multi, /usr/sbin/iptables)
	@$(call install_link, iptables, xtables-multi, /usr/sbin/iptables-restore)
	@$(call install_link, iptables, xtables-multi, /usr/sbin/iptables-save)
endif

ifdef PTXCONF_IPTABLES_IPV6_SYSTEMD_UNIT
# 	# IPv6 systemd service unit part
	@$(call install_alternative, iptables, 0, 0, 0644, /etc/iptables/rules.v6)
	@$(call install_alternative, iptables, 0, 0, 0755, /usr/sbin/ip6tables-flush)
	@$(call install_alternative, iptables, 0, 0, 0644, \
		/usr/lib/systemd/system/ip6tables.service)
	@$(call install_link, iptables, ../ip6tables.service, \
		/usr/lib/systemd/system/multi-user.target.wants/ip6tables.service)
endif

ifdef PTXCONF_IPTABLES_IPV4_SYSTEMD_UNIT
# 	# IPv4 systemd service unit part
	@$(call install_alternative, iptables, 0, 0, 0644, /etc/iptables/rules.v4)
	@$(call install_alternative, iptables, 0, 0, 0755, /usr/sbin/iptables-flush)
	@$(call install_alternative, iptables, 0, 0, 0644, \
		/usr/lib/systemd/system/iptables.service)
	@$(call install_link, iptables, ../iptables.service, \
		/usr/lib/systemd/system/multi-user.target.wants/iptables.service)
endif

endif

ifdef PTXCONF_IPTABLES_INSTALL_IPTABLES_APPLY
	@$(call install_copy, iptables, 0, 0, 0755, -, /usr/sbin/iptables-apply)
endif

#	#  compability layer for nftables
ifdef PTXCONF_IPTABLES_NFTABLES_COMPAT
	@$(call install_copy, iptables, 0, 0, 0755, -, /usr/sbin/xtables-compat-multi)

ifdef PTXCONF_IPTABLES_IPV4
# 	# IPv4 part
	@$(call install_link, iptables, xtables-compat-multi, /usr/sbin/iptables-compat)
	@$(call install_link, iptables, xtables-compat-multi, /usr/sbin/iptables-compat-save)
	@$(call install_link, iptables, xtables-compat-multi, /usr/sbin/iptables-compat-restore)
endif

ifdef PTXCONF_IPTABLES_IPV6
# 	# IPv6 part
	@$(call install_link, iptables, xtables-compat-multi, /usr/sbin/ip6tables-compat)
	@$(call install_link, iptables, xtables-compat-multi, /usr/sbin/ip6tables-compat-save)
	@$(call install_link, iptables, xtables-compat-multi, /usr/sbin/ip6tables-compat-restore)
endif

	@$(call install_link, iptables, xtables-compat-multi, /usr/sbin/arptables-compat)
	@$(call install_link, iptables, xtables-compat-multi, /usr/sbin/ebtables-compat)
endif

	@$(call install_finish, iptables)

	@$(call touch)

# vim: syntax=make