gentoo/net-firewall/iptables/iptables-9999.ebuild

111 lines
2.8 KiB
Bash
Raw Normal View History

# Copyright 1999-2016 Gentoo Foundation
# Distributed under the terms of the GNU General Public License v2
2015-08-21 15:17:46 +02:00
# $Id$
EAPI="5"
# Force users doing their own patches to install their own tools
AUTOTOOLS_AUTO_DEPEND=no
2015-08-21 15:17:46 +02:00
inherit eutils multilib systemd toolchain-funcs autotools flag-o-matic git-r3
2015-08-21 15:17:46 +02:00
DESCRIPTION="Linux kernel (2.4+) firewall, NAT and packet mangling tools"
HOMEPAGE="http://www.netfilter.org/projects/iptables/"
EGIT_REPO_URI="git://git.netfilter.org/iptables.git"
LICENSE="GPL-2"
2015-08-21 15:17:46 +02:00
# Subslot tracks libxtables as that's the one other packages generally link
# against and iptables changes. Will have to revisit if other sonames change.
SLOT="0/12"
KEYWORDS=""
IUSE="conntrack ipv6 netlink nftables pcap static-libs"
RDEPEND="
2015-08-21 15:17:46 +02:00
conntrack? ( net-libs/libnetfilter_conntrack )
netlink? ( net-libs/libnfnetlink )
nftables? (
>=net-libs/libmnl-1.0
>=net-libs/libnftnl-1.0.5
)
2015-08-21 15:17:46 +02:00
pcap? ( net-libs/libpcap )
"
DEPEND="${RDEPEND}
virtual/os-headers
virtual/pkgconfig
nftables? (
sys-devel/flex
virtual/yacc
)
"
src_prepare() {
# use the saner headers from the kernel
rm -f include/linux/{kernel,types}.h
eautoreconf
}
src_configure() {
# Some libs use $(AR) rather than libtool to build #444282
tc-export AR
2015-08-21 15:17:46 +02:00
# Hack around struct mismatches between userland & kernel for some ABIs. #472388
use amd64 && [[ ${ABI} == "x32" ]] && append-flags -fpack-struct
sed -i \
-e "/nfnetlink=[01]/s:=[01]:=$(usex netlink 1 0):" \
2015-08-21 15:17:46 +02:00
-e "/nfconntrack=[01]/s:=[01]:=$(usex conntrack 1 0):" \
configure || die
econf \
--sbindir="${EPREFIX}/sbin" \
--libexecdir="${EPREFIX}/$(get_libdir)" \
--enable-devel \
--enable-shared \
$(use_enable nftables) \
2015-08-21 15:17:46 +02:00
$(use_enable pcap bpf-compiler) \
2015-11-29 13:11:56 +01:00
$(use_enable pcap nfsynproxy) \
$(use_enable static-libs static) \
$(use_enable ipv6)
}
src_compile() {
emake V=1
}
src_install() {
default
dodoc INCOMPATIBILITIES iptables/iptables.xslt
# all the iptables binaries are in /sbin, so might as well
# put these small files in with them
into /
dosbin iptables/iptables-apply
dosym iptables-apply /sbin/ip6tables-apply
doman iptables/iptables-apply.8
insinto /usr/include
doins include/iptables.h $(use ipv6 && echo include/ip6tables.h)
insinto /usr/include/iptables
doins include/iptables/internal.h
keepdir /var/lib/iptables
2015-08-21 15:17:46 +02:00
newinitd "${FILESDIR}"/${PN}.init iptables
newconfd "${FILESDIR}"/${PN}-1.4.13.confd iptables
if use ipv6 ; then
keepdir /var/lib/ip6tables
2015-08-21 15:17:46 +02:00
newinitd "${FILESDIR}"/iptables.init ip6tables
newconfd "${FILESDIR}"/ip6tables-1.4.13.confd ip6tables
fi
systemd_dounit "${FILESDIR}"/systemd/iptables-{re,}store.service
if use ipv6 ; then
systemd_dounit "${FILESDIR}"/systemd/ip6tables-{re,}store.service
fi
2015-08-21 15:17:46 +02:00
# Move important libs to /lib #332175
gen_usr_ldscript -a ip{4,6}tc iptc xtables
prune_libtool_files
}