To get this branch, use:
bzr branch
http://bzr.recompile.se/loggerhead/mandos/release
« back to all changes in this revision
Viewing changes to Makefile
- browse files at revision 237.7.842
- compare with another revision
- download diff
- download tarball
- view history from revision 237.7.842
- Committer: Teddy Hogeborn
- Date: 2024-09-09 01:36:41 UTC
- mto: This revision was merged to the branch mainline in revision 410.
- Revision ID: teddy@recompile.se-20240909013641-6zu6kx2f7meu134k
Make all required directories when installing
When installing into a normal system, one can assume that target
directories, such as /usr/bin, already exists. But when installing
into a subdirectory for the purpose of creating a package, one cannot
assume that all directories already exist. Therefore, when
installing, we must not check if any directories exist, and must
instead always create any directories we want to install into.
* Makefile (confdir/mandos.conf, confdir/clients.conf, install-html):
Use the "-D" option to "install" instead of creating the directory
separately.
(install-server): Move creation of $(CONFDIR) down to before it is
needed. Don't check if the $(TMPFILES) or $(SYSUSERS) directories
exist; instead create them by using the "-D" option to "install".
Create the $(PREFIX)/sbin directory. Always use
"--target-directory" if possible; i.e. if the file name is the same.
Create the $(DBUSPOLICYDIR) and $(DESTDIR)/etc/init.d directories by
using the "-D" option to "install". Don't check if the $(SYSTEMD)
directory exists; instead create it by using the "-D" option to
"install". Create the $(DESTDIR)/etc/default and $(MANDIR)/man8
directories by using the "-D" option to "install". Create the
$(MANDIR)/man5 directories explicitly.
(install-client-nokey): Remove unnecessary creation of the
$(CONFDIR) directory. Don't check if the $(SYSUSERS) directory
exists; instead create it by using the "-D" option to "install".
Move the "--directory" argument to be the first argument, for
clarity. Create the $(PREFIX)/sbin directory. Use the "-D"
argument to "install" when installing
$(INITRAMFSTOOLS)/hooks/mandos,
$(INITRAMFSTOOLS)/conf.d/mandos-conf,
$(INITRAMFSTOOLS)/conf-hooks.d/zz-mandos,
$(INITRAMFSTOOLS)/scripts/init-premount/mandos,
$(INITRAMFSTOOLS)/scripts/local-premount/mandos,
$(DRACUTMODULE)/ask-password-mandos.path, and
$(DRACUTMODULE)/dracut-module/ask-password-mandos.service. Create
the $(MANDIR)/man8 directory.
Reported-By: Erich Eckner <erich@eckner.net>
Thanks: Erich Eckner <erich@eckner.net> for analysis
When installing into a normal system, one can assume that target
directories, such as /usr/bin, already exists. But when installing
into a subdirectory for the purpose of creating a package, one cannot
assume that all directories already exist. Therefore, when
installing, we must not check if any directories exist, and must
instead always create any directories we want to install into.
* Makefile (confdir/mandos.conf, confdir/clients.conf, install-html):
Use the "-D" option to "install" instead of creating the directory
separately.
(install-server): Move creation of $(CONFDIR) down to before it is
needed. Don't check if the $(TMPFILES) or $(SYSUSERS) directories
exist; instead create them by using the "-D" option to "install".
Create the $(PREFIX)/sbin directory. Always use
"--target-directory" if possible; i.e. if the file name is the same.
Create the $(DBUSPOLICYDIR) and $(DESTDIR)/etc/init.d directories by
using the "-D" option to "install". Don't check if the $(SYSTEMD)
directory exists; instead create it by using the "-D" option to
"install". Create the $(DESTDIR)/etc/default and $(MANDIR)/man8
directories by using the "-D" option to "install". Create the
$(MANDIR)/man5 directories explicitly.
(install-client-nokey): Remove unnecessary creation of the
$(CONFDIR) directory. Don't check if the $(SYSUSERS) directory
exists; instead create it by using the "-D" option to "install".
Move the "--directory" argument to be the first argument, for
clarity. Create the $(PREFIX)/sbin directory. Use the "-D"
argument to "install" when installing
$(INITRAMFSTOOLS)/hooks/mandos,
$(INITRAMFSTOOLS)/conf.d/mandos-conf,
$(INITRAMFSTOOLS)/conf-hooks.d/zz-mandos,
$(INITRAMFSTOOLS)/scripts/init-premount/mandos,
$(INITRAMFSTOOLS)/scripts/local-premount/mandos,
$(DRACUTMODULE)/ask-password-mandos.path, and
$(DRACUTMODULE)/dracut-module/ask-password-mandos.service. Create
the $(MANDIR)/man8 directory.
Reported-By: Erich Eckner <erich@eckner.net>
Thanks: Erich Eckner <erich@eckner.net> for analysis
- files added:
- bugs.xml
- debian/tests
- dracut-module
- files removed:
- initramfs-tools-hook-conf
- files modified:
- .bzrignore
added
removed
Makefile
1
WARN=-O -Wall -Wextra -Wdouble-promotion -Wformat=2 -Winit-self \
1
WARN:=-O -Wall -Wextra -Wdouble-promotion -Wformat=2 -Winit-self \
2
2
-Wmissing-include-dirs -Wswitch-default -Wswitch-enum \
3
3
-Wunused -Wuninitialized -Wstrict-overflow=5 \
4
4
-Wsuggest-attribute=pure -Wsuggest-attribute=const \
10
10
-Wmissing-format-attribute -Wnormalized=nfc -Wpacked \
11
11
-Wredundant-decls -Wnested-externs -Winline -Wvla \
12
12
-Wvolatile-register-var -Woverlength-strings
13
#DEBUG=-ggdb3
13
14
#DEBUG:=-ggdb3 -fsanitize=address $(SANITIZE)
15
## Check which sanitizing options can be used
16
#SANITIZE:=$(foreach option,$(ALL_SANITIZE_OPTIONS),$(shell \
17
# echo 'int main(){}' | $(CC) --language=c $(option) \
18
# /dev/stdin -o /dev/null >/dev/null 2>&1 && echo $(option)))
19
# <https://developerblog.redhat.com/2014/10/16/gcc-undefined-behavior-sanitizer-ubsan/>
20
ALL_SANITIZE_OPTIONS:=-fsanitize=leak -fsanitize=undefined \
21
-fsanitize=shift -fsanitize=integer-divide-by-zero \
22
-fsanitize=unreachable -fsanitize=vla-bound -fsanitize=null \
23
-fsanitize=return -fsanitize=signed-integer-overflow \
24
-fsanitize=bounds -fsanitize=alignment \
25
-fsanitize=object-size -fsanitize=float-divide-by-zero \
26
-fsanitize=float-cast-overflow -fsanitize=nonnull-attribute \
27
-fsanitize=returns-nonnull-attribute -fsanitize=bool \
28
-fsanitize=enum -fsanitize-address-use-after-scope
29
14
30
# For info about _FORTIFY_SOURCE, see feature_test_macros(7)
15
# and <http://gcc.gnu.org/ml/gcc-patches/2004-09/msg02055.html>.
16
FORTIFY=-D_FORTIFY_SOURCE=2 -fstack-protector-all -fPIC
17
LINK_FORTIFY_LD=-z relro -z now
18
LINK_FORTIFY=
31
# and <https://gcc.gnu.org/ml/gcc-patches/2004-09/msg02055.html>.
32
FORTIFY:=-fstack-protector-all -fPIC
33
CPPFLAGS+=-D_FORTIFY_SOURCE=3
34
LINK_FORTIFY_LD:=-z relro -z now
35
LINK_FORTIFY:=
19
36
20
37
# If BROKEN_PIE is set, do not build with -pie
21
38
ifndef BROKEN_PIE
23
40
LINK_FORTIFY += -pie
24
41
endif
25
42
#COVERAGE=--coverage
26
OPTIMIZE=-Os -fno-strict-aliasing
27
LANGUAGE=-std=gnu11
28
htmldir=man
29
version=1.6.9
30
SED=sed
31
32
USER=$(firstword $(subst :, ,$(shell getent passwd _mandos || getent passwd nobody || echo 65534)))
33
GROUP=$(firstword $(subst :, ,$(shell getent group _mandos || getent group nobody || echo 65534)))
43
OPTIMIZE:=-Os -fno-strict-aliasing
44
LANGUAGE:=-std=gnu11
45
CPPFLAGS+=-D_FILE_OFFSET_BITS=64 -D_TIME_BITS=64
46
htmldir:=man
47
version:=1.8.16
48
SED:=sed
49
PKG_CONFIG?=pkg-config
50
51
USER:=$(firstword $(subst :, ,$(shell getent passwd _mandos \
52
|| getent passwd nobody || echo 65534)))
53
GROUP:=$(firstword $(subst :, ,$(shell getent group _mandos \
54
|| getent group nogroup || echo 65534)))
55
56
LINUXVERSION:=$(shell uname --kernel-release)
34
57
35
58
## Use these settings for a traditional /usr/local install
36
# PREFIX=$(DESTDIR)/usr/local
37
# CONFDIR=$(DESTDIR)/etc/mandos
38
# KEYDIR=$(DESTDIR)/etc/mandos/keys
39
# MANDIR=$(PREFIX)/man
40
# INITRAMFSTOOLS=$(DESTDIR)/etc/initramfs-tools
41
# STATEDIR=$(DESTDIR)/var/lib/mandos
42
# LIBDIR=$(PREFIX)/lib
59
# PREFIX:=$(DESTDIR)/usr/local
60
# CONFDIR:=$(DESTDIR)/etc/mandos
61
# KEYDIR:=$(DESTDIR)/etc/mandos/keys
62
# MANDIR:=$(PREFIX)/man
63
# INITRAMFSTOOLS:=$(DESTDIR)/etc/initramfs-tools
64
# DRACUTMODULE:=$(DESTDIR)/usr/lib/dracut/modules.d/90mandos
65
# STATEDIR:=$(DESTDIR)/var/lib/mandos
66
# LIBDIR:=$(PREFIX)/lib
67
# DBUSPOLICYDIR:=$(DESTDIR)/etc/dbus-1/system.d
43
68
##
44
69
45
70
## These settings are for a package-type install
46
PREFIX=$(DESTDIR)/usr
47
CONFDIR=$(DESTDIR)/etc/mandos
48
KEYDIR=$(DESTDIR)/etc/keys/mandos
49
MANDIR=$(PREFIX)/share/man
50
INITRAMFSTOOLS=$(DESTDIR)/usr/share/initramfs-tools
51
STATEDIR=$(DESTDIR)/var/lib/mandos
52
LIBDIR=$(shell \
71
PREFIX:=$(DESTDIR)/usr
72
CONFDIR:=$(DESTDIR)/etc/mandos
73
KEYDIR:=$(DESTDIR)/etc/keys/mandos
74
MANDIR:=$(PREFIX)/share/man
75
INITRAMFSTOOLS:=$(DESTDIR)/usr/share/initramfs-tools
76
DRACUTMODULE:=$(DESTDIR)/usr/lib/dracut/modules.d/90mandos
77
STATEDIR:=$(DESTDIR)/var/lib/mandos
78
LIBDIR:=$(shell \
53
79
for d in \
54
"/usr/lib/`dpkg-architecture -qDEB_HOST_MULTIARCH 2>/dev/null`" \
80
"/usr/lib/`dpkg-architecture \
81
-qDEB_HOST_MULTIARCH 2>/dev/null`" \
55
82
"`rpm --eval='%{_libdir}' 2>/dev/null`" /usr/lib; do \
56
83
if [ -d "$$d" -a "$$d" = "$${d%/}" ]; then \
57
84
echo "$(DESTDIR)$$d"; \
58
85
break; \
59
86
fi; \
60
87
done)
88
DBUSPOLICYDIR:=$(DESTDIR)/usr/share/dbus-1/system.d
61
89
##
62
90
63
SYSTEMD=$(DESTDIR)$(shell pkg-config systemd --variable=systemdsystemunitdir)
91
SYSTEMD:=$(DESTDIR)$(shell $(PKG_CONFIG) systemd \
92
--variable=systemdsystemunitdir)
93
TMPFILES:=$(DESTDIR)$(shell $(PKG_CONFIG) systemd \
94
--variable=tmpfilesdir)
95
SYSUSERS:=$(DESTDIR)$(shell $(PKG_CONFIG) systemd \
96
--variable=sysusersdir)
64
97
65
GNUTLS_CFLAGS=$(shell pkg-config --cflags-only-I gnutls)
66
GNUTLS_LIBS=$(shell pkg-config --libs gnutls)
67
AVAHI_CFLAGS=$(shell pkg-config --cflags-only-I avahi-core)
68
AVAHI_LIBS=$(shell pkg-config --libs avahi-core)
69
GPGME_CFLAGS=$(shell gpgme-config --cflags; getconf LFS_CFLAGS)
70
GPGME_LIBS=$(shell gpgme-config --libs; getconf LFS_LIBS; \
98
GNUTLS_CFLAGS:=$(shell $(PKG_CONFIG) --cflags-only-I gnutls)
99
GNUTLS_LIBS:=$(shell $(PKG_CONFIG) --libs gnutls)
100
AVAHI_CFLAGS:=$(shell $(PKG_CONFIG) --cflags-only-I avahi-core)
101
AVAHI_LIBS:=$(shell $(PKG_CONFIG) --libs avahi-core)
102
GPGME_CFLAGS:=$(shell $(PKG_CONFIG) --cflags-only-I gpgme 2>/dev/null \
103
|| gpgme-config --cflags; getconf LFS_CFLAGS)
104
GPGME_LIBS:=$(shell $(PKG_CONFIG) --libs gpgme 2>/dev/null \
105
|| gpgme-config --libs; getconf LFS_LIBS; \
71
106
getconf LFS_LDFLAGS)
72
LIBNL3_CFLAGS=$(shell pkg-config --cflags-only-I libnl-route-3.0)
73
LIBNL3_LIBS=$(shell pkg-config --libs libnl-route-3.0)
107
LIBNL3_CFLAGS:=$(shell $(PKG_CONFIG) --cflags-only-I libnl-route-3.0)
108
LIBNL3_LIBS:=$(shell $(PKG_CONFIG) --libs libnl-route-3.0)
109
GLIB_CFLAGS:=$(shell $(PKG_CONFIG) --cflags glib-2.0)
110
GLIB_LIBS:=$(shell $(PKG_CONFIG) --libs glib-2.0)
74
111
75
112
# Do not change these two
76
113
CFLAGS+=$(WARN) $(DEBUG) $(FORTIFY) $(COVERAGE) $(OPTIMIZE) \
77
$(LANGUAGE) $(GNUTLS_CFLAGS) $(AVAHI_CFLAGS) $(GPGME_CFLAGS) \
78
-DVERSION='"$(version)"'
79
LDFLAGS+=-Xlinker --as-needed $(COVERAGE) $(LINK_FORTIFY) $(foreach flag,$(LINK_FORTIFY_LD),-Xlinker $(flag))
114
$(LANGUAGE) -DVERSION='"$(version)"'
115
LDFLAGS+=-Xlinker --as-needed $(COVERAGE) $(LINK_FORTIFY) $(strip \
116
) $(foreach flag,$(LINK_FORTIFY_LD),-Xlinker $(flag))
80
117
81
118
# Commands to format a DocBook <refentry> document into a manual page
82
119
DOCBOOKTOMAN=$(strip cd $(dir $<); xsltproc --nonet --xinclude \
88
125
/usr/share/xml/docbook/stylesheet/nwalsh/manpages/docbook.xsl \
89
126
$(notdir $<); \
90
127
if locale --all 2>/dev/null | grep --regexp='^en_US\.utf8$$' \
91
&& type man 2>/dev/null; then LANG=en_US.UTF-8 MANWIDTH=80 \
92
man --warnings --encoding=UTF-8 --local-file $(notdir $@); \
93
fi >/dev/null)
128
&& command -v man >/dev/null; then LANG=en_US.UTF-8 \
129
MANWIDTH=80 man --warnings --encoding=UTF-8 --local-file \
130
$(notdir $@); fi >/dev/null)
94
131
95
132
DOCBOOKTOHTML=$(strip xsltproc --nonet --xinclude \
96
133
--param make.year.ranges 1 \
102
139
/usr/share/xml/docbook/stylesheet/nwalsh/xhtml/docbook.xsl \
103
140
$<; $(HTMLPOST) $@)
104
141
# Fix citerefentry links
105
HTMLPOST=$(SED) --in-place \
142
HTMLPOST:=$(SED) --in-place \
106
143
--expression='s/\(<a class="citerefentry" href="\)\("><span class="citerefentry"><span class="refentrytitle">\)\([^<]*\)\(<\/span>(\)\([^)]*\)\()<\/span><\/a>\)/\1\3.\5\2\3\4\5\6/g'
107
144
108
PLUGINS=plugins.d/password-prompt plugins.d/mandos-client \
145
PLUGINS:=plugins.d/password-prompt plugins.d/mandos-client \
109
146
plugins.d/usplash plugins.d/splashy plugins.d/askpass-fifo \
110
147
plugins.d/plymouth
111
PLUGIN_HELPERS=plugin-helpers/mandos-client-iprouteadddel
112
CPROGS=plugin-runner $(PLUGINS) $(PLUGIN_HELPERS)
113
PROGS=mandos mandos-keygen mandos-ctl mandos-monitor $(CPROGS)
114
DOCS=mandos.8 mandos-keygen.8 mandos-monitor.8 mandos-ctl.8 \
148
PLUGIN_HELPERS:=plugin-helpers/mandos-client-iprouteadddel
149
CPROGS:=plugin-runner dracut-module/password-agent $(PLUGINS) \
150
$(PLUGIN_HELPERS)
151
PROGS:=mandos mandos-keygen mandos-ctl mandos-monitor $(CPROGS)
152
DOCS:=mandos.8 mandos-keygen.8 mandos-monitor.8 mandos-ctl.8 \
115
153
mandos.conf.5 mandos-clients.conf.5 plugin-runner.8mandos \
154
dracut-module/password-agent.8mandos \
116
155
plugins.d/mandos-client.8mandos \
117
156
plugins.d/password-prompt.8mandos plugins.d/usplash.8mandos \
118
157
plugins.d/splashy.8mandos plugins.d/askpass-fifo.8mandos \
119
158
plugins.d/plymouth.8mandos intro.8mandos
120
159
121
htmldocs=$(addsuffix .xhtml,$(DOCS))
122
123
objects=$(addsuffix .o,$(CPROGS))
124
160
htmldocs:=$(addsuffix .xhtml,$(DOCS))
161
162
objects:=$(addsuffix .o,$(CPROGS))
163
164
.PHONY: all
125
165
all: $(PROGS) mandos.lsm
126
166
167
.PHONY: doc
127
168
doc: $(DOCS)
128
169
170
.PHONY: html
129
171
html: $(htmldocs)
130
172
131
173
%.5: %.xml common.ent legalnotice.xml
190
232
overview.xml legalnotice.xml
191
233
$(DOCBOOKTOHTML)
192
234
235
dracut-module/password-agent.8mandos: \
236
dracut-module/password-agent.xml common.ent \
237
overview.xml legalnotice.xml
238
$(DOCBOOKTOMAN)
239
dracut-module/password-agent.8mandos.xhtml: \
240
dracut-module/password-agent.xml common.ent \
241
overview.xml legalnotice.xml
242
$(DOCBOOKTOHTML)
243
193
244
plugins.d/mandos-client.8mandos: plugins.d/mandos-client.xml \
194
245
common.ent \
195
246
mandos-options.xml \
238
289
--expression='s/\(mandos_\)[0-9.]\+\(\.orig\.tar\.gz\)/\1$(version)\2/' \
239
290
$@)
240
291
241
plugins.d/mandos-client: plugins.d/mandos-client.c
242
$(LINK.c) $^ -lrt $(GNUTLS_LIBS) $(AVAHI_LIBS) $(strip\
243
) $(GPGME_LIBS) $(LOADLIBES) $(LDLIBS) -o $@
244
245
plugin-helpers/mandos-client-iprouteadddel: plugin-helpers/mandos-client-iprouteadddel.c
246
$(LINK.c) $(LIBNL3_CFLAGS) $^ $(LIBNL3_LIBS) $(strip\
247
) $(LOADLIBES) $(LDLIBS) -o $@
248
249
.PHONY : all doc html clean distclean mostlyclean maintainer-clean \
250
check run-client run-server install install-html \
251
install-server install-client-nokey install-client uninstall \
252
uninstall-server uninstall-client purge purge-server \
253
purge-client
254
292
# Need to add the GnuTLS, Avahi and GPGME libraries
293
plugins.d/mandos-client: CFLAGS += $(GNUTLS_CFLAGS) $(strip \
294
) $(AVAHI_CFLAGS) $(GPGME_CFLAGS)
295
plugins.d/mandos-client: LDLIBS += $(GNUTLS_LIBS) $(strip \
296
) $(AVAHI_LIBS) $(GPGME_LIBS)
297
298
# Need to add the libnl-route library
299
plugin-helpers/mandos-client-iprouteadddel: CFLAGS += $(LIBNL3_CFLAGS)
300
plugin-helpers/mandos-client-iprouteadddel: LDLIBS += $(LIBNL3_LIBS)
301
302
# Need to add the GLib and pthread libraries
303
dracut-module/password-agent: CFLAGS += $(GLIB_CFLAGS)
304
# Note: -lpthread is unnecessary with the GNU C library 2.34 or later
305
dracut-module/password-agent: LDLIBS += $(GLIB_LIBS) -lpthread
306
307
.PHONY: clean
255
308
clean:
256
309
-rm --force $(CPROGS) $(objects) $(htmldocs) $(DOCS) core
257
310
311
.PHONY: distclean
258
312
distclean: clean
313
.PHONY: mostlyclean
259
314
mostlyclean: clean
315
.PHONY: maintainer-clean
260
316
maintainer-clean: clean
261
317
-rm --force --recursive keydir confdir statedir
262
318
263
check: all
319
.PHONY: check
320
check: all
264
321
./mandos --check
265
322
./mandos-ctl --check
323
./mandos-keygen --version
324
./plugin-runner --version
325
./plugin-helpers/mandos-client-iprouteadddel --version
326
./dracut-module/password-agent --test
266
327
267
328
# Run the client with a local config and key
268
run-client: all keydir/seckey.txt keydir/pubkey.txt
269
@echo "###################################################################"
270
@echo "# The following error messages are harmless and can be safely #"
271
@echo "# ignored. The messages are caused by not running as root, but #"
272
@echo "# you should NOT run \"make run-client\" as root unless you also #"
273
@echo "# unpacked and compiled Mandos as root, which is NOT recommended. #"
274
@echo "# From plugin-runner: setgid: Operation not permitted #"
275
@echo "# setuid: Operation not permitted #"
276
@echo "# From askpass-fifo: mkfifo: Permission denied #"
277
@echo "# From mandos-client: #"
278
@echo "# Failed to raise privileges: Operation not permitted #"
279
@echo "# Warning: network hook \"*\" exited with status * #"
280
@echo "###################################################################"
329
.PHONY: run-client
330
run-client: all keydir/seckey.txt keydir/pubkey.txt \
331
keydir/tls-privkey.pem keydir/tls-pubkey.pem
332
@echo '######################################################'
333
@echo '# The following error messages are harmless and can #'
334
@echo '# be safely ignored: #'
335
@echo '## From plugin-runner: #'
336
@echo '# setgid: Operation not permitted #'
337
@echo '# setuid: Operation not permitted #'
338
@echo '## From askpass-fifo: #'
339
@echo '# mkfifo: Permission denied #'
340
@echo '## From mandos-client: #'
341
@echo '# Failed to raise privileges: Operation not permi... #'
342
@echo '# Warning: network hook "*" exited with status * #'
343
@echo '# ioctl SIOCSIFFLAGS +IFF_UP: Operation not permi... #'
344
@echo '# Failed to bring up interface "*": Operation not... #'
345
@echo '# #'
346
@echo '# (The messages are caused by not running as root, #'
347
@echo '# but you should NOT run "make run-client" as root #'
348
@echo '# unless you also unpacked and compiled Mandos as #'
349
@echo '# root, which is also NOT recommended.) #'
350
@echo '######################################################'
281
351
# We set GNOME_KEYRING_CONTROL to block pam_gnome_keyring
282
352
./plugin-runner --plugin-dir=plugins.d \
283
353
--plugin-helper-dir=plugin-helpers \
284
354
--config-file=plugin-runner.conf \
285
--options-for=mandos-client:--seckey=keydir/seckey.txt,--pubkey=keydir/pubkey.txt,--network-hook-dir=network-hooks.d \
355
--options-for=mandos-client:--seckey=keydir/seckey.txt,--pubkey=keydir/pubkey.txt,--tls-privkey=keydir/tls-privkey.pem,--tls-pubkey=keydir/tls-pubkey.pem,--network-hook-dir=network-hooks.d \
286
356
--env-for=mandos-client:GNOME_KEYRING_CONTROL= \
287
357
$(CLIENTARGS)
288
358
289
359
# Used by run-client
290
keydir/seckey.txt keydir/pubkey.txt: mandos-keygen
360
keydir/seckey.txt keydir/pubkey.txt keydir/tls-privkey.pem keydir/tls-pubkey.pem: mandos-keygen
291
361
install --directory keydir
292
362
./mandos-keygen --dir keydir --force
363
if ! [ -e keydir/tls-privkey.pem ]; then \
364
install --mode=u=rw /dev/null keydir/tls-privkey.pem; \
365
fi
366
if ! [ -e keydir/tls-pubkey.pem ]; then \
367
install --mode=u=rw /dev/null keydir/tls-pubkey.pem; \
368
fi
293
369
294
370
# Run the server with a local config
371
.PHONY: run-server
295
372
run-server: confdir/mandos.conf confdir/clients.conf statedir
296
373
./mandos --debug --no-dbus --configdir=confdir \
297
374
--statedir=statedir $(SERVERARGS)
298
375
299
376
# Used by run-server
300
377
confdir/mandos.conf: mandos.conf
301
install --directory confdir
302
install --mode=u=rw,go=r $^ $@
303
confdir/clients.conf: clients.conf keydir/seckey.txt
304
install --directory confdir
305
install --mode=u=rw $< $@
378
install -D --mode=u=rw,go=r $^ $@
379
confdir/clients.conf: clients.conf keydir/seckey.txt keydir/tls-pubkey.pem
380
install -D --mode=u=rw $< $@
306
381
# Add a client password
307
382
./mandos-keygen --dir keydir --password --no-ssh >> $@
308
383
statedir:
309
384
install --directory statedir
310
385
386
.PHONY: install
311
387
install: install-server install-client-nokey
312
388
389
.PHONY: install-html
313
390
install-html: html
314
install --directory $(htmldir)
315
install --mode=u=rw,go=r --target-directory=$(htmldir) \
391
install -D --mode=u=rw,go=r --target-directory=$(htmldir) \
316
392
$(htmldocs)
317
393
394
.PHONY: install-server
318
395
install-server: doc
319
install --directory $(CONFDIR)
320
396
if install --directory --mode=u=rwx --owner=$(USER) \
321
397
--group=$(GROUP) $(STATEDIR); then \
322
398
:; \
323
399
elif install --directory --mode=u=rwx $(STATEDIR); then \
324
400
chown -- $(USER):$(GROUP) $(STATEDIR) || :; \
325
401
fi
326
install --mode=u=rwx,go=rx mandos $(PREFIX)/sbin/mandos
402
if [ "$(TMPFILES)" != "$(DESTDIR)" ]; then \
403
install -D --mode=u=rw,go=r tmpfiles.d-mandos.conf \
404
$(TMPFILES)/mandos.conf; \
405
fi
406
if [ "$(SYSUSERS)" != "$(DESTDIR)" ]; then \
407
install -D --mode=u=rw,go=r sysusers.d-mandos.conf \
408
$(SYSUSERS)/mandos.conf; \
409
fi
410
install --directory $(PREFIX)/sbin
411
install --mode=u=rwx,go=rx --target-directory=$(PREFIX)/sbin \
412
mandos
327
413
install --mode=u=rwx,go=rx --target-directory=$(PREFIX)/sbin \
328
414
mandos-ctl
329
415
install --mode=u=rwx,go=rx --target-directory=$(PREFIX)/sbin \
330
416
mandos-monitor
417
install --directory $(CONFDIR)
331
418
install --mode=u=rw,go=r --target-directory=$(CONFDIR) \
332
419
mandos.conf
333
420
install --mode=u=rw --target-directory=$(CONFDIR) \
334
421
clients.conf
335
install --mode=u=rw,go=r dbus-mandos.conf \
336
$(DESTDIR)/etc/dbus-1/system.d/mandos.conf
337
install --mode=u=rwx,go=rx init.d-mandos \
422
install -D --mode=u=rw,go=r dbus-mandos.conf \
423
$(DBUSPOLICYDIR)/mandos.conf
424
install -D --mode=u=rwx,go=rx init.d-mandos \
338
425
$(DESTDIR)/etc/init.d/mandos
339
if [ "$(SYSTEMD)" != "$(DESTDIR)" -a -d "$(SYSTEMD)" ]; then \
340
install --mode=u=rw,go=r mandos.service $(SYSTEMD); \
426
if [ "$(SYSTEMD)" != "$(DESTDIR)" ]; then \
427
install -D --mode=u=rw,go=r mandos.service \
428
$(SYSTEMD); \
341
429
fi
342
install --mode=u=rw,go=r default-mandos \
430
install -D --mode=u=rw,go=r default-mandos \
343
431
$(DESTDIR)/etc/default/mandos
344
432
if [ -z $(DESTDIR) ]; then \
345
433
update-rc.d mandos defaults 25 15;\
346
434
fi
435
install --directory $(MANDIR)/man8 $(MANDIR)/man5
347
436
gzip --best --to-stdout mandos.8 \
348
437
> $(MANDIR)/man8/mandos.8.gz
349
438
gzip --best --to-stdout mandos-monitor.8 \
357
446
gzip --best --to-stdout intro.8mandos \
358
447
> $(MANDIR)/man8/intro.8mandos.gz
359
448
449
.PHONY: install-client-nokey
360
450
install-client-nokey: all doc
361
install --directory $(LIBDIR)/mandos $(CONFDIR)
362
451
install --directory --mode=u=rwx $(KEYDIR) \
363
452
$(LIBDIR)/mandos/plugins.d \
364
453
$(LIBDIR)/mandos/plugin-helpers
454
if [ "$(SYSUSERS)" != "$(DESTDIR)" ]; then \
455
install -D --mode=u=rw,go=r sysusers.d-mandos.conf \
456
$(SYSUSERS)/mandos-client.conf; \
457
fi
365
458
if [ "$(CONFDIR)" != "$(LIBDIR)/mandos" ]; then \
366
install --mode=u=rwx \
367
--directory "$(CONFDIR)/plugins.d"; \
368
install --directory "$(CONFDIR)/plugin-helpers"; \
459
install --directory \
460
--mode=u=rwx "$(CONFDIR)/plugins.d" \
461
"$(CONFDIR)/plugin-helpers"; \
369
462
fi
370
install --mode=u=rwx,go=rx --directory \
463
install --directory --mode=u=rwx,go=rx \
371
464
"$(CONFDIR)/network-hooks.d"
372
465
install --mode=u=rwx,go=rx \
373
466
--target-directory=$(LIBDIR)/mandos plugin-runner
467
install --mode=u=rwx,go=rx \
468
--target-directory=$(LIBDIR)/mandos \
469
mandos-to-cryptroot-unlock
470
install --directory $(PREFIX)/sbin
374
471
install --mode=u=rwx,go=rx --target-directory=$(PREFIX)/sbin \
375
472
mandos-keygen
376
473
install --mode=u=rwx,go=rx \
391
488
install --mode=u=rwxs,go=rx \
392
489
--target-directory=$(LIBDIR)/mandos/plugins.d \
393
490
plugins.d/plymouth
394
install --mode=u=rwxs,go=rx \
491
install --mode=u=rwx,go=rx \
395
492
--target-directory=$(LIBDIR)/mandos/plugin-helpers \
396
493
plugin-helpers/mandos-client-iprouteadddel
397
install initramfs-tools-hook \
494
install -D initramfs-tools-hook \
398
495
$(INITRAMFSTOOLS)/hooks/mandos
399
install --mode=u=rw,go=r initramfs-tools-hook-conf \
400
$(INITRAMFSTOOLS)/conf-hooks.d/mandos
401
install initramfs-tools-script \
496
install -D --mode=u=rw,go=r initramfs-tools-conf \
497
$(INITRAMFSTOOLS)/conf.d/mandos-conf
498
install -D --mode=u=rw,go=r initramfs-tools-conf-hook \
499
$(INITRAMFSTOOLS)/conf-hooks.d/zz-mandos
500
install -D initramfs-tools-script \
402
501
$(INITRAMFSTOOLS)/scripts/init-premount/mandos
502
install -D initramfs-tools-script-stop \
503
$(INITRAMFSTOOLS)/scripts/local-premount/mandos
504
install -D --mode=u=rw,go=r \
505
--target-directory=$(DRACUTMODULE) \
506
dracut-module/ask-password-mandos.path \
507
dracut-module/ask-password-mandos.service
508
install --mode=u=rwxs,go=rx \
509
--target-directory=$(DRACUTMODULE) \
510
dracut-module/module-setup.sh \
511
dracut-module/cmdline-mandos.sh \
512
dracut-module/password-agent
403
513
install --mode=u=rw,go=r plugin-runner.conf $(CONFDIR)
514
install --directory $(MANDIR)/man8
404
515
gzip --best --to-stdout mandos-keygen.8 \
405
516
> $(MANDIR)/man8/mandos-keygen.8.gz
406
517
gzip --best --to-stdout plugin-runner.8mandos \
417
528
> $(MANDIR)/man8/askpass-fifo.8mandos.gz
418
529
gzip --best --to-stdout plugins.d/plymouth.8mandos \
419
530
> $(MANDIR)/man8/plymouth.8mandos.gz
531
gzip --best --to-stdout dracut-module/password-agent.8mandos \
532
> $(MANDIR)/man8/password-agent.8mandos.gz
420
533
534
.PHONY: install-client
421
535
install-client: install-client-nokey
422
536
# Post-installation stuff
423
537
-$(PREFIX)/sbin/mandos-keygen --dir "$(KEYDIR)"
424
update-initramfs -k all -u
538
if command -v update-initramfs >/dev/null; then \
539
update-initramfs -k all -u; \
540
elif command -v dracut >/dev/null; then \
541
for initrd in $(DESTDIR)/boot/initr*-$(LINUXVERSION); do \
542
if [ -w "$$initrd" ]; then \
543
chmod go-r "$$initrd"; \
544
dracut --force "$$initrd"; \
545
fi; \
546
done; \
547
fi
425
548
echo "Now run mandos-keygen --password --dir $(KEYDIR)"
426
549
550
.PHONY: uninstall
427
551
uninstall: uninstall-server uninstall-client
428
552
553
.PHONY: uninstall-server
429
554
uninstall-server:
430
555
-rm --force $(PREFIX)/sbin/mandos \
431
556
$(PREFIX)/sbin/mandos-ctl \
438
563
update-rc.d -f mandos remove
439
564
-rmdir $(CONFDIR)
440
565
566
.PHONY: uninstall-client
441
567
uninstall-client:
442
568
# Refuse to uninstall client if /etc/crypttab is explicitly configured
443
569
# to use it.
454
580
$(INITRAMFSTOOLS)/hooks/mandos \
455
581
$(INITRAMFSTOOLS)/conf-hooks.d/mandos \
456
582
$(INITRAMFSTOOLS)/scripts/init-premount/mandos \
583
$(INITRAMFSTOOLS)/scripts/local-premount/mandos \
584
$(DRACUTMODULE)/ask-password-mandos.path \
585
$(DRACUTMODULE)/ask-password-mandos.service \
586
$(DRACUTMODULE)/module-setup.sh \
587
$(DRACUTMODULE)/cmdline-mandos.sh \
588
$(DRACUTMODULE)/password-agent \
457
589
$(MANDIR)/man8/mandos-keygen.8.gz \
458
590
$(MANDIR)/man8/plugin-runner.8mandos.gz \
459
591
$(MANDIR)/man8/mandos-client.8mandos.gz
462
594
$(MANDIR)/man8/splashy.8mandos.gz \
463
595
$(MANDIR)/man8/askpass-fifo.8mandos.gz \
464
596
$(MANDIR)/man8/plymouth.8mandos.gz \
597
$(MANDIR)/man8/password-agent.8mandos.gz \
465
598
-rmdir $(LIBDIR)/mandos/plugins.d $(CONFDIR)/plugins.d \
466
$(LIBDIR)/mandos $(CONFDIR) $(KEYDIR)
467
update-initramfs -k all -u
599
$(LIBDIR)/mandos $(CONFDIR) $(KEYDIR) $(DRACUTMODULE)
600
if command -v update-initramfs >/dev/null; then \
601
update-initramfs -k all -u; \
602
elif command -v dracut >/dev/null; then \
603
for initrd in $(DESTDIR)/boot/initr*-$(LINUXVERSION); do \
604
test -w "$$initrd" && dracut --force "$$initrd"; \
605
done; \
606
fi
468
607
608
.PHONY: purge
469
609
purge: purge-server purge-client
470
610
611
.PHONY: purge-server
471
612
purge-server: uninstall-server
472
613
-rm --force $(CONFDIR)/mandos.conf $(CONFDIR)/clients.conf \
473
614
$(DESTDIR)/etc/dbus-1/system.d/mandos.conf
474
615
$(DESTDIR)/etc/default/mandos \
475
616
$(DESTDIR)/etc/init.d/mandos \
476
$(SYSTEMD)/mandos.service \
477
617
$(DESTDIR)/run/mandos.pid \
478
618
$(DESTDIR)/var/run/mandos.pid
619
if [ "$(SYSTEMD)" != "$(DESTDIR)" -a -d "$(SYSTEMD)" ]; then \
620
-rm --force -- $(SYSTEMD)/mandos.service; \
621
fi
479
622
-rmdir $(CONFDIR)
480
623
624
.PHONY: purge-client
481
625
purge-client: uninstall-client
482
-shred --remove $(KEYDIR)/seckey.txt
626
-shred --remove $(KEYDIR)/seckey.txt $(KEYDIR)/tls-privkey.pem
483
627
-rm --force $(CONFDIR)/plugin-runner.conf \
484
$(KEYDIR)/pubkey.txt $(KEYDIR)/seckey.txt
628
$(KEYDIR)/pubkey.txt $(KEYDIR)/seckey.txt \
629
$(KEYDIR)/tls-pubkey.txt $(KEYDIR)/tls-privkey.txt
485
630
-rmdir $(KEYDIR) $(CONFDIR)/plugins.d $(CONFDIR)
Loggerhead is a web-based interface for Breezy
Version: 2.0.2.dev0