To get this branch, use:
bzr branch
http://bzr.recompile.se/loggerhead/mandos/release
« back to all changes in this revision
Viewing changes to Makefile
- browse files at revision 237.7.842
- compare with another revision
- download diff
- download tarball
- view history from revision 237.7.842
- Committer: Teddy Hogeborn
- Date: 2024-09-09 01:36:41 UTC
- mto: This revision was merged to the branch mainline in revision 410.
- Revision ID: teddy@recompile.se-20240909013641-6zu6kx2f7meu134k
Make all required directories when installing
When installing into a normal system, one can assume that target
directories, such as /usr/bin, already exists. But when installing
into a subdirectory for the purpose of creating a package, one cannot
assume that all directories already exist. Therefore, when
installing, we must not check if any directories exist, and must
instead always create any directories we want to install into.
* Makefile (confdir/mandos.conf, confdir/clients.conf, install-html):
Use the "-D" option to "install" instead of creating the directory
separately.
(install-server): Move creation of $(CONFDIR) down to before it is
needed. Don't check if the $(TMPFILES) or $(SYSUSERS) directories
exist; instead create them by using the "-D" option to "install".
Create the $(PREFIX)/sbin directory. Always use
"--target-directory" if possible; i.e. if the file name is the same.
Create the $(DBUSPOLICYDIR) and $(DESTDIR)/etc/init.d directories by
using the "-D" option to "install". Don't check if the $(SYSTEMD)
directory exists; instead create it by using the "-D" option to
"install". Create the $(DESTDIR)/etc/default and $(MANDIR)/man8
directories by using the "-D" option to "install". Create the
$(MANDIR)/man5 directories explicitly.
(install-client-nokey): Remove unnecessary creation of the
$(CONFDIR) directory. Don't check if the $(SYSUSERS) directory
exists; instead create it by using the "-D" option to "install".
Move the "--directory" argument to be the first argument, for
clarity. Create the $(PREFIX)/sbin directory. Use the "-D"
argument to "install" when installing
$(INITRAMFSTOOLS)/hooks/mandos,
$(INITRAMFSTOOLS)/conf.d/mandos-conf,
$(INITRAMFSTOOLS)/conf-hooks.d/zz-mandos,
$(INITRAMFSTOOLS)/scripts/init-premount/mandos,
$(INITRAMFSTOOLS)/scripts/local-premount/mandos,
$(DRACUTMODULE)/ask-password-mandos.path, and
$(DRACUTMODULE)/dracut-module/ask-password-mandos.service. Create
the $(MANDIR)/man8 directory.
Reported-By: Erich Eckner <erich@eckner.net>
Thanks: Erich Eckner <erich@eckner.net> for analysis
When installing into a normal system, one can assume that target
directories, such as /usr/bin, already exists. But when installing
into a subdirectory for the purpose of creating a package, one cannot
assume that all directories already exist. Therefore, when
installing, we must not check if any directories exist, and must
instead always create any directories we want to install into.
* Makefile (confdir/mandos.conf, confdir/clients.conf, install-html):
Use the "-D" option to "install" instead of creating the directory
separately.
(install-server): Move creation of $(CONFDIR) down to before it is
needed. Don't check if the $(TMPFILES) or $(SYSUSERS) directories
exist; instead create them by using the "-D" option to "install".
Create the $(PREFIX)/sbin directory. Always use
"--target-directory" if possible; i.e. if the file name is the same.
Create the $(DBUSPOLICYDIR) and $(DESTDIR)/etc/init.d directories by
using the "-D" option to "install". Don't check if the $(SYSTEMD)
directory exists; instead create it by using the "-D" option to
"install". Create the $(DESTDIR)/etc/default and $(MANDIR)/man8
directories by using the "-D" option to "install". Create the
$(MANDIR)/man5 directories explicitly.
(install-client-nokey): Remove unnecessary creation of the
$(CONFDIR) directory. Don't check if the $(SYSUSERS) directory
exists; instead create it by using the "-D" option to "install".
Move the "--directory" argument to be the first argument, for
clarity. Create the $(PREFIX)/sbin directory. Use the "-D"
argument to "install" when installing
$(INITRAMFSTOOLS)/hooks/mandos,
$(INITRAMFSTOOLS)/conf.d/mandos-conf,
$(INITRAMFSTOOLS)/conf-hooks.d/zz-mandos,
$(INITRAMFSTOOLS)/scripts/init-premount/mandos,
$(INITRAMFSTOOLS)/scripts/local-premount/mandos,
$(DRACUTMODULE)/ask-password-mandos.path, and
$(DRACUTMODULE)/dracut-module/ask-password-mandos.service. Create
the $(MANDIR)/man8 directory.
Reported-By: Erich Eckner <erich@eckner.net>
Thanks: Erich Eckner <erich@eckner.net> for analysis
- files added:
- bugs.xml
- debian/tests
- debian/upstream
- dracut-module
- plugin-helpers
- files removed:
- initramfs-tools-hook-conf
- files modified:
- .bzrignore
added
removed
Makefile
1
WARN=-O -Wall -Wformat=2 -Winit-self -Wmissing-include-dirs \
2
-Wswitch-default -Wswitch-enum -Wunused-parameter \
3
-Wstrict-aliasing=1 -Wextra -Wfloat-equal -Wundef -Wshadow \
1
WARN:=-O -Wall -Wextra -Wdouble-promotion -Wformat=2 -Winit-self \
2
-Wmissing-include-dirs -Wswitch-default -Wswitch-enum \
3
-Wunused -Wuninitialized -Wstrict-overflow=5 \
4
-Wsuggest-attribute=pure -Wsuggest-attribute=const \
5
-Wsuggest-attribute=noreturn -Wfloat-equal -Wundef -Wshadow \
4
6
-Wunsafe-loop-optimizations -Wpointer-arith \
5
7
-Wbad-function-cast -Wcast-qual -Wcast-align -Wwrite-strings \
6
-Wconversion -Wstrict-prototypes -Wold-style-definition \
7
-Wpacked -Wnested-externs -Winline -Wvolatile-register-var
8
# -Wunreachable-code
9
#DEBUG=-ggdb3
10
# For info about _FORTIFY_SOURCE, see
11
# <http://www.kernel.org/doc/man-pages/online/pages/man7/feature_test_macros.7.html>
12
# and <http://gcc.gnu.org/ml/gcc-patches/2004-09/msg02055.html>.
13
FORTIFY=-D_FORTIFY_SOURCE=2 -fstack-protector-all -fPIC
14
LINK_FORTIFY_LD=-z relro -z now
15
LINK_FORTIFY=
8
-Wconversion -Wlogical-op -Waggregate-return \
9
-Wstrict-prototypes -Wold-style-definition \
10
-Wmissing-format-attribute -Wnormalized=nfc -Wpacked \
11
-Wredundant-decls -Wnested-externs -Winline -Wvla \
12
-Wvolatile-register-var -Woverlength-strings
13
14
#DEBUG:=-ggdb3 -fsanitize=address $(SANITIZE)
15
## Check which sanitizing options can be used
16
#SANITIZE:=$(foreach option,$(ALL_SANITIZE_OPTIONS),$(shell \
17
# echo 'int main(){}' | $(CC) --language=c $(option) \
18
# /dev/stdin -o /dev/null >/dev/null 2>&1 && echo $(option)))
19
# <https://developerblog.redhat.com/2014/10/16/gcc-undefined-behavior-sanitizer-ubsan/>
20
ALL_SANITIZE_OPTIONS:=-fsanitize=leak -fsanitize=undefined \
21
-fsanitize=shift -fsanitize=integer-divide-by-zero \
22
-fsanitize=unreachable -fsanitize=vla-bound -fsanitize=null \
23
-fsanitize=return -fsanitize=signed-integer-overflow \
24
-fsanitize=bounds -fsanitize=alignment \
25
-fsanitize=object-size -fsanitize=float-divide-by-zero \
26
-fsanitize=float-cast-overflow -fsanitize=nonnull-attribute \
27
-fsanitize=returns-nonnull-attribute -fsanitize=bool \
28
-fsanitize=enum -fsanitize-address-use-after-scope
29
30
# For info about _FORTIFY_SOURCE, see feature_test_macros(7)
31
# and <https://gcc.gnu.org/ml/gcc-patches/2004-09/msg02055.html>.
32
FORTIFY:=-fstack-protector-all -fPIC
33
CPPFLAGS+=-D_FORTIFY_SOURCE=3
34
LINK_FORTIFY_LD:=-z relro -z now
35
LINK_FORTIFY:=
16
36
17
37
# If BROKEN_PIE is set, do not build with -pie
18
38
ifndef BROKEN_PIE
20
40
LINK_FORTIFY += -pie
21
41
endif
22
42
#COVERAGE=--coverage
23
OPTIMIZE=-Os
24
LANGUAGE=-std=gnu99
25
htmldir=man
26
version=1.6.0
27
SED=sed
28
29
USER=$(firstword $(subst :, ,$(shell getent passwd _mandos || getent passwd nobody || echo 65534)))
30
GROUP=$(firstword $(subst :, ,$(shell getent group _mandos || getent group nobody || echo 65534)))
43
OPTIMIZE:=-Os -fno-strict-aliasing
44
LANGUAGE:=-std=gnu11
45
CPPFLAGS+=-D_FILE_OFFSET_BITS=64 -D_TIME_BITS=64
46
htmldir:=man
47
version:=1.8.16
48
SED:=sed
49
PKG_CONFIG?=pkg-config
50
51
USER:=$(firstword $(subst :, ,$(shell getent passwd _mandos \
52
|| getent passwd nobody || echo 65534)))
53
GROUP:=$(firstword $(subst :, ,$(shell getent group _mandos \
54
|| getent group nogroup || echo 65534)))
55
56
LINUXVERSION:=$(shell uname --kernel-release)
31
57
32
58
## Use these settings for a traditional /usr/local install
33
# PREFIX=$(DESTDIR)/usr/local
34
# CONFDIR=$(DESTDIR)/etc/mandos
35
# KEYDIR=$(DESTDIR)/etc/mandos/keys
36
# MANDIR=$(PREFIX)/man
37
# INITRAMFSTOOLS=$(DESTDIR)/etc/initramfs-tools
38
# STATEDIR=$(DESTDIR)/var/lib/mandos
59
# PREFIX:=$(DESTDIR)/usr/local
60
# CONFDIR:=$(DESTDIR)/etc/mandos
61
# KEYDIR:=$(DESTDIR)/etc/mandos/keys
62
# MANDIR:=$(PREFIX)/man
63
# INITRAMFSTOOLS:=$(DESTDIR)/etc/initramfs-tools
64
# DRACUTMODULE:=$(DESTDIR)/usr/lib/dracut/modules.d/90mandos
65
# STATEDIR:=$(DESTDIR)/var/lib/mandos
66
# LIBDIR:=$(PREFIX)/lib
67
# DBUSPOLICYDIR:=$(DESTDIR)/etc/dbus-1/system.d
39
68
##
40
69
41
70
## These settings are for a package-type install
42
PREFIX=$(DESTDIR)/usr
43
CONFDIR=$(DESTDIR)/etc/mandos
44
KEYDIR=$(DESTDIR)/etc/keys/mandos
45
MANDIR=$(PREFIX)/share/man
46
INITRAMFSTOOLS=$(DESTDIR)/usr/share/initramfs-tools
47
STATEDIR=$(DESTDIR)/var/lib/mandos
71
PREFIX:=$(DESTDIR)/usr
72
CONFDIR:=$(DESTDIR)/etc/mandos
73
KEYDIR:=$(DESTDIR)/etc/keys/mandos
74
MANDIR:=$(PREFIX)/share/man
75
INITRAMFSTOOLS:=$(DESTDIR)/usr/share/initramfs-tools
76
DRACUTMODULE:=$(DESTDIR)/usr/lib/dracut/modules.d/90mandos
77
STATEDIR:=$(DESTDIR)/var/lib/mandos
78
LIBDIR:=$(shell \
79
for d in \
80
"/usr/lib/`dpkg-architecture \
81
-qDEB_HOST_MULTIARCH 2>/dev/null`" \
82
"`rpm --eval='%{_libdir}' 2>/dev/null`" /usr/lib; do \
83
if [ -d "$$d" -a "$$d" = "$${d%/}" ]; then \
84
echo "$(DESTDIR)$$d"; \
85
break; \
86
fi; \
87
done)
88
DBUSPOLICYDIR:=$(DESTDIR)/usr/share/dbus-1/system.d
48
89
##
49
90
50
GNUTLS_CFLAGS=$(shell pkg-config --cflags-only-I gnutls)
51
GNUTLS_LIBS=$(shell pkg-config --libs gnutls)
52
AVAHI_CFLAGS=$(shell pkg-config --cflags-only-I avahi-core)
53
AVAHI_LIBS=$(shell pkg-config --libs avahi-core)
54
GPGME_CFLAGS=$(shell gpgme-config --cflags; getconf LFS_CFLAGS)
55
GPGME_LIBS=$(shell gpgme-config --libs; getconf LFS_LIBS; \
91
SYSTEMD:=$(DESTDIR)$(shell $(PKG_CONFIG) systemd \
92
--variable=systemdsystemunitdir)
93
TMPFILES:=$(DESTDIR)$(shell $(PKG_CONFIG) systemd \
94
--variable=tmpfilesdir)
95
SYSUSERS:=$(DESTDIR)$(shell $(PKG_CONFIG) systemd \
96
--variable=sysusersdir)
97
98
GNUTLS_CFLAGS:=$(shell $(PKG_CONFIG) --cflags-only-I gnutls)
99
GNUTLS_LIBS:=$(shell $(PKG_CONFIG) --libs gnutls)
100
AVAHI_CFLAGS:=$(shell $(PKG_CONFIG) --cflags-only-I avahi-core)
101
AVAHI_LIBS:=$(shell $(PKG_CONFIG) --libs avahi-core)
102
GPGME_CFLAGS:=$(shell $(PKG_CONFIG) --cflags-only-I gpgme 2>/dev/null \
103
|| gpgme-config --cflags; getconf LFS_CFLAGS)
104
GPGME_LIBS:=$(shell $(PKG_CONFIG) --libs gpgme 2>/dev/null \
105
|| gpgme-config --libs; getconf LFS_LIBS; \
56
106
getconf LFS_LDFLAGS)
107
LIBNL3_CFLAGS:=$(shell $(PKG_CONFIG) --cflags-only-I libnl-route-3.0)
108
LIBNL3_LIBS:=$(shell $(PKG_CONFIG) --libs libnl-route-3.0)
109
GLIB_CFLAGS:=$(shell $(PKG_CONFIG) --cflags glib-2.0)
110
GLIB_LIBS:=$(shell $(PKG_CONFIG) --libs glib-2.0)
57
111
58
112
# Do not change these two
59
CFLAGS=$(WARN) $(DEBUG) $(FORTIFY) $(COVERAGE) $(OPTIMIZE) \
60
$(LANGUAGE) $(GNUTLS_CFLAGS) $(AVAHI_CFLAGS) $(GPGME_CFLAGS) \
61
-DVERSION='"$(version)"'
62
LDFLAGS=-Xlinker --as-needed $(COVERAGE) $(LINK_FORTIFY) $(foreach flag,$(LINK_FORTIFY_LD),-Xlinker $(flag))
113
CFLAGS+=$(WARN) $(DEBUG) $(FORTIFY) $(COVERAGE) $(OPTIMIZE) \
114
$(LANGUAGE) -DVERSION='"$(version)"'
115
LDFLAGS+=-Xlinker --as-needed $(COVERAGE) $(LINK_FORTIFY) $(strip \
116
) $(foreach flag,$(LINK_FORTIFY_LD),-Xlinker $(flag))
63
117
64
118
# Commands to format a DocBook <refentry> document into a manual page
65
119
DOCBOOKTOMAN=$(strip cd $(dir $<); xsltproc --nonet --xinclude \
70
124
--param man.authors.section.enabled 0 \
71
125
/usr/share/xml/docbook/stylesheet/nwalsh/manpages/docbook.xsl \
72
126
$(notdir $<); \
73
$(MANPOST) $(notdir $@);\
74
127
if locale --all 2>/dev/null | grep --regexp='^en_US\.utf8$$' \
75
&& type man 2>/dev/null; then LANG=en_US.UTF-8 MANWIDTH=80 \
76
man --warnings --encoding=UTF-8 --local-file $(notdir $@); \
77
fi >/dev/null)
78
# DocBook-to-man post-processing to fix a '\n' escape bug
79
MANPOST=$(SED) --in-place --expression='s,\\\\en,\\en,g;s,\\n,\\en,g'
128
&& command -v man >/dev/null; then LANG=en_US.UTF-8 \
129
MANWIDTH=80 man --warnings --encoding=UTF-8 --local-file \
130
$(notdir $@); fi >/dev/null)
80
131
81
132
DOCBOOKTOHTML=$(strip xsltproc --nonet --xinclude \
82
133
--param make.year.ranges 1 \
88
139
/usr/share/xml/docbook/stylesheet/nwalsh/xhtml/docbook.xsl \
89
140
$<; $(HTMLPOST) $@)
90
141
# Fix citerefentry links
91
HTMLPOST=$(SED) --in-place \
142
HTMLPOST:=$(SED) --in-place \
92
143
--expression='s/\(<a class="citerefentry" href="\)\("><span class="citerefentry"><span class="refentrytitle">\)\([^<]*\)\(<\/span>(\)\([^)]*\)\()<\/span><\/a>\)/\1\3.\5\2\3\4\5\6/g'
93
144
94
PLUGINS=plugins.d/password-prompt plugins.d/mandos-client \
145
PLUGINS:=plugins.d/password-prompt plugins.d/mandos-client \
95
146
plugins.d/usplash plugins.d/splashy plugins.d/askpass-fifo \
96
147
plugins.d/plymouth
97
CPROGS=plugin-runner $(PLUGINS)
98
PROGS=mandos mandos-keygen mandos-ctl mandos-monitor $(CPROGS)
99
DOCS=mandos.8 mandos-keygen.8 mandos-monitor.8 mandos-ctl.8 \
148
PLUGIN_HELPERS:=plugin-helpers/mandos-client-iprouteadddel
149
CPROGS:=plugin-runner dracut-module/password-agent $(PLUGINS) \
150
$(PLUGIN_HELPERS)
151
PROGS:=mandos mandos-keygen mandos-ctl mandos-monitor $(CPROGS)
152
DOCS:=mandos.8 mandos-keygen.8 mandos-monitor.8 mandos-ctl.8 \
100
153
mandos.conf.5 mandos-clients.conf.5 plugin-runner.8mandos \
154
dracut-module/password-agent.8mandos \
101
155
plugins.d/mandos-client.8mandos \
102
156
plugins.d/password-prompt.8mandos plugins.d/usplash.8mandos \
103
157
plugins.d/splashy.8mandos plugins.d/askpass-fifo.8mandos \
104
158
plugins.d/plymouth.8mandos intro.8mandos
105
159
106
htmldocs=$(addsuffix .xhtml,$(DOCS))
107
108
objects=$(addsuffix .o,$(CPROGS))
109
160
htmldocs:=$(addsuffix .xhtml,$(DOCS))
161
162
objects:=$(addsuffix .o,$(CPROGS))
163
164
.PHONY: all
110
165
all: $(PROGS) mandos.lsm
111
166
167
.PHONY: doc
112
168
doc: $(DOCS)
113
169
170
.PHONY: html
114
171
html: $(htmldocs)
115
172
116
173
%.5: %.xml common.ent legalnotice.xml
175
232
overview.xml legalnotice.xml
176
233
$(DOCBOOKTOHTML)
177
234
235
dracut-module/password-agent.8mandos: \
236
dracut-module/password-agent.xml common.ent \
237
overview.xml legalnotice.xml
238
$(DOCBOOKTOMAN)
239
dracut-module/password-agent.8mandos.xhtml: \
240
dracut-module/password-agent.xml common.ent \
241
overview.xml legalnotice.xml
242
$(DOCBOOKTOHTML)
243
178
244
plugins.d/mandos-client.8mandos: plugins.d/mandos-client.xml \
179
245
common.ent \
180
246
mandos-options.xml \
223
289
--expression='s/\(mandos_\)[0-9.]\+\(\.orig\.tar\.gz\)/\1$(version)\2/' \
224
290
$@)
225
291
226
plugins.d/mandos-client: plugins.d/mandos-client.c
227
$(LINK.c) $^ -lrt $(GNUTLS_LIBS) $(AVAHI_LIBS) $(strip\
228
) $(GPGME_LIBS) $(LOADLIBES) $(LDLIBS) -o $@
229
230
.PHONY : all doc html clean distclean run-client run-server install \
231
install-server install-client uninstall uninstall-server \
232
uninstall-client purge purge-server purge-client
233
292
# Need to add the GnuTLS, Avahi and GPGME libraries
293
plugins.d/mandos-client: CFLAGS += $(GNUTLS_CFLAGS) $(strip \
294
) $(AVAHI_CFLAGS) $(GPGME_CFLAGS)
295
plugins.d/mandos-client: LDLIBS += $(GNUTLS_LIBS) $(strip \
296
) $(AVAHI_LIBS) $(GPGME_LIBS)
297
298
# Need to add the libnl-route library
299
plugin-helpers/mandos-client-iprouteadddel: CFLAGS += $(LIBNL3_CFLAGS)
300
plugin-helpers/mandos-client-iprouteadddel: LDLIBS += $(LIBNL3_LIBS)
301
302
# Need to add the GLib and pthread libraries
303
dracut-module/password-agent: CFLAGS += $(GLIB_CFLAGS)
304
# Note: -lpthread is unnecessary with the GNU C library 2.34 or later
305
dracut-module/password-agent: LDLIBS += $(GLIB_LIBS) -lpthread
306
307
.PHONY: clean
234
308
clean:
235
309
-rm --force $(CPROGS) $(objects) $(htmldocs) $(DOCS) core
236
310
311
.PHONY: distclean
237
312
distclean: clean
313
.PHONY: mostlyclean
238
314
mostlyclean: clean
315
.PHONY: maintainer-clean
239
316
maintainer-clean: clean
240
317
-rm --force --recursive keydir confdir statedir
241
318
242
check: all
319
.PHONY: check
320
check: all
243
321
./mandos --check
244
322
./mandos-ctl --check
323
./mandos-keygen --version
324
./plugin-runner --version
325
./plugin-helpers/mandos-client-iprouteadddel --version
326
./dracut-module/password-agent --test
245
327
246
328
# Run the client with a local config and key
247
run-client: all keydir/seckey.txt keydir/pubkey.txt
248
@echo "###################################################################"
249
@echo "# The following error messages are harmless and can be safely #"
250
@echo "# ignored. The messages are caused by not running as root, but #"
251
@echo "# you should NOT run \"make run-client\" as root unless you also #"
252
@echo "# unpacked and compiled Mandos as root, which is NOT recommended. #"
253
@echo "# From plugin-runner: setuid: Operation not permitted #"
254
@echo "# From askpass-fifo: mkfifo: Permission denied #"
255
@echo "# From mandos-client: setuid: Operation not permitted #"
256
@echo "# seteuid: Operation not permitted #"
257
@echo "# klogctl: Operation not permitted #"
258
@echo "###################################################################"
329
.PHONY: run-client
330
run-client: all keydir/seckey.txt keydir/pubkey.txt \
331
keydir/tls-privkey.pem keydir/tls-pubkey.pem
332
@echo '######################################################'
333
@echo '# The following error messages are harmless and can #'
334
@echo '# be safely ignored: #'
335
@echo '## From plugin-runner: #'
336
@echo '# setgid: Operation not permitted #'
337
@echo '# setuid: Operation not permitted #'
338
@echo '## From askpass-fifo: #'
339
@echo '# mkfifo: Permission denied #'
340
@echo '## From mandos-client: #'
341
@echo '# Failed to raise privileges: Operation not permi... #'
342
@echo '# Warning: network hook "*" exited with status * #'
343
@echo '# ioctl SIOCSIFFLAGS +IFF_UP: Operation not permi... #'
344
@echo '# Failed to bring up interface "*": Operation not... #'
345
@echo '# #'
346
@echo '# (The messages are caused by not running as root, #'
347
@echo '# but you should NOT run "make run-client" as root #'
348
@echo '# unless you also unpacked and compiled Mandos as #'
349
@echo '# root, which is also NOT recommended.) #'
350
@echo '######################################################'
351
# We set GNOME_KEYRING_CONTROL to block pam_gnome_keyring
259
352
./plugin-runner --plugin-dir=plugins.d \
353
--plugin-helper-dir=plugin-helpers \
260
354
--config-file=plugin-runner.conf \
261
--options-for=mandos-client:--seckey=keydir/seckey.txt,--pubkey=keydir/pubkey.txt,--network-hook-dir=network-hooks.d \
355
--options-for=mandos-client:--seckey=keydir/seckey.txt,--pubkey=keydir/pubkey.txt,--tls-privkey=keydir/tls-privkey.pem,--tls-pubkey=keydir/tls-pubkey.pem,--network-hook-dir=network-hooks.d \
356
--env-for=mandos-client:GNOME_KEYRING_CONTROL= \
262
357
$(CLIENTARGS)
263
358
264
359
# Used by run-client
265
keydir/seckey.txt keydir/pubkey.txt: mandos-keygen
360
keydir/seckey.txt keydir/pubkey.txt keydir/tls-privkey.pem keydir/tls-pubkey.pem: mandos-keygen
266
361
install --directory keydir
267
362
./mandos-keygen --dir keydir --force
363
if ! [ -e keydir/tls-privkey.pem ]; then \
364
install --mode=u=rw /dev/null keydir/tls-privkey.pem; \
365
fi
366
if ! [ -e keydir/tls-pubkey.pem ]; then \
367
install --mode=u=rw /dev/null keydir/tls-pubkey.pem; \
368
fi
268
369
269
370
# Run the server with a local config
371
.PHONY: run-server
270
372
run-server: confdir/mandos.conf confdir/clients.conf statedir
271
373
./mandos --debug --no-dbus --configdir=confdir \
272
374
--statedir=statedir $(SERVERARGS)
273
375
274
376
# Used by run-server
275
377
confdir/mandos.conf: mandos.conf
276
install --directory confdir
277
install --mode=u=rw,go=r $^ $@
278
confdir/clients.conf: clients.conf keydir/seckey.txt
279
install --directory confdir
280
install --mode=u=rw $< $@
378
install -D --mode=u=rw,go=r $^ $@
379
confdir/clients.conf: clients.conf keydir/seckey.txt keydir/tls-pubkey.pem
380
install -D --mode=u=rw $< $@
281
381
# Add a client password
282
./mandos-keygen --dir keydir --password >> $@
382
./mandos-keygen --dir keydir --password --no-ssh >> $@
283
383
statedir:
284
384
install --directory statedir
285
385
386
.PHONY: install
286
387
install: install-server install-client-nokey
287
388
389
.PHONY: install-html
288
390
install-html: html
289
install --directory $(htmldir)
290
install --mode=u=rw,go=r --target-directory=$(htmldir) \
391
install -D --mode=u=rw,go=r --target-directory=$(htmldir) \
291
392
$(htmldocs)
292
393
394
.PHONY: install-server
293
395
install-server: doc
294
install --directory $(CONFDIR)
295
install --directory --mode=u=rwx --owner=$(USER) \
296
--group=$(GROUP) $(STATEDIR)
297
install --mode=u=rwx,go=rx mandos $(PREFIX)/sbin/mandos
396
if install --directory --mode=u=rwx --owner=$(USER) \
397
--group=$(GROUP) $(STATEDIR); then \
398
:; \
399
elif install --directory --mode=u=rwx $(STATEDIR); then \
400
chown -- $(USER):$(GROUP) $(STATEDIR) || :; \
401
fi
402
if [ "$(TMPFILES)" != "$(DESTDIR)" ]; then \
403
install -D --mode=u=rw,go=r tmpfiles.d-mandos.conf \
404
$(TMPFILES)/mandos.conf; \
405
fi
406
if [ "$(SYSUSERS)" != "$(DESTDIR)" ]; then \
407
install -D --mode=u=rw,go=r sysusers.d-mandos.conf \
408
$(SYSUSERS)/mandos.conf; \
409
fi
410
install --directory $(PREFIX)/sbin
411
install --mode=u=rwx,go=rx --target-directory=$(PREFIX)/sbin \
412
mandos
298
413
install --mode=u=rwx,go=rx --target-directory=$(PREFIX)/sbin \
299
414
mandos-ctl
300
415
install --mode=u=rwx,go=rx --target-directory=$(PREFIX)/sbin \
301
416
mandos-monitor
417
install --directory $(CONFDIR)
302
418
install --mode=u=rw,go=r --target-directory=$(CONFDIR) \
303
419
mandos.conf
304
420
install --mode=u=rw --target-directory=$(CONFDIR) \
305
421
clients.conf
306
install --mode=u=rw,go=r dbus-mandos.conf \
307
$(DESTDIR)/etc/dbus-1/system.d/mandos.conf
308
install --mode=u=rwx,go=rx init.d-mandos \
422
install -D --mode=u=rw,go=r dbus-mandos.conf \
423
$(DBUSPOLICYDIR)/mandos.conf
424
install -D --mode=u=rwx,go=rx init.d-mandos \
309
425
$(DESTDIR)/etc/init.d/mandos
310
install --mode=u=rw,go=r default-mandos \
426
if [ "$(SYSTEMD)" != "$(DESTDIR)" ]; then \
427
install -D --mode=u=rw,go=r mandos.service \
428
$(SYSTEMD); \
429
fi
430
install -D --mode=u=rw,go=r default-mandos \
311
431
$(DESTDIR)/etc/default/mandos
312
432
if [ -z $(DESTDIR) ]; then \
313
433
update-rc.d mandos defaults 25 15;\
314
434
fi
435
install --directory $(MANDIR)/man8 $(MANDIR)/man5
315
436
gzip --best --to-stdout mandos.8 \
316
437
> $(MANDIR)/man8/mandos.8.gz
317
438
gzip --best --to-stdout mandos-monitor.8 \
325
446
gzip --best --to-stdout intro.8mandos \
326
447
> $(MANDIR)/man8/intro.8mandos.gz
327
448
449
.PHONY: install-client-nokey
328
450
install-client-nokey: all doc
329
install --directory $(PREFIX)/lib/mandos $(CONFDIR)
330
451
install --directory --mode=u=rwx $(KEYDIR) \
331
$(PREFIX)/lib/mandos/plugins.d
332
if [ "$(CONFDIR)" != "$(PREFIX)/lib/mandos" ]; then \
333
install --mode=u=rwx \
334
--directory "$(CONFDIR)/plugins.d"; \
335
fi
336
install --mode=u=rwx,go=rx --directory \
452
$(LIBDIR)/mandos/plugins.d \
453
$(LIBDIR)/mandos/plugin-helpers
454
if [ "$(SYSUSERS)" != "$(DESTDIR)" ]; then \
455
install -D --mode=u=rw,go=r sysusers.d-mandos.conf \
456
$(SYSUSERS)/mandos-client.conf; \
457
fi
458
if [ "$(CONFDIR)" != "$(LIBDIR)/mandos" ]; then \
459
install --directory \
460
--mode=u=rwx "$(CONFDIR)/plugins.d" \
461
"$(CONFDIR)/plugin-helpers"; \
462
fi
463
install --directory --mode=u=rwx,go=rx \
337
464
"$(CONFDIR)/network-hooks.d"
338
465
install --mode=u=rwx,go=rx \
339
--target-directory=$(PREFIX)/lib/mandos plugin-runner
466
--target-directory=$(LIBDIR)/mandos plugin-runner
467
install --mode=u=rwx,go=rx \
468
--target-directory=$(LIBDIR)/mandos \
469
mandos-to-cryptroot-unlock
470
install --directory $(PREFIX)/sbin
340
471
install --mode=u=rwx,go=rx --target-directory=$(PREFIX)/sbin \
341
472
mandos-keygen
342
473
install --mode=u=rwx,go=rx \
343
--target-directory=$(PREFIX)/lib/mandos/plugins.d \
474
--target-directory=$(LIBDIR)/mandos/plugins.d \
344
475
plugins.d/password-prompt
345
476
install --mode=u=rwxs,go=rx \
346
--target-directory=$(PREFIX)/lib/mandos/plugins.d \
477
--target-directory=$(LIBDIR)/mandos/plugins.d \
347
478
plugins.d/mandos-client
348
479
install --mode=u=rwxs,go=rx \
349
--target-directory=$(PREFIX)/lib/mandos/plugins.d \
480
--target-directory=$(LIBDIR)/mandos/plugins.d \
350
481
plugins.d/usplash
351
482
install --mode=u=rwxs,go=rx \
352
--target-directory=$(PREFIX)/lib/mandos/plugins.d \
483
--target-directory=$(LIBDIR)/mandos/plugins.d \
353
484
plugins.d/splashy
354
485
install --mode=u=rwxs,go=rx \
355
--target-directory=$(PREFIX)/lib/mandos/plugins.d \
486
--target-directory=$(LIBDIR)/mandos/plugins.d \
356
487
plugins.d/askpass-fifo
357
488
install --mode=u=rwxs,go=rx \
358
--target-directory=$(PREFIX)/lib/mandos/plugins.d \
489
--target-directory=$(LIBDIR)/mandos/plugins.d \
359
490
plugins.d/plymouth
360
install initramfs-tools-hook \
491
install --mode=u=rwx,go=rx \
492
--target-directory=$(LIBDIR)/mandos/plugin-helpers \
493
plugin-helpers/mandos-client-iprouteadddel
494
install -D initramfs-tools-hook \
361
495
$(INITRAMFSTOOLS)/hooks/mandos
362
install --mode=u=rw,go=r initramfs-tools-hook-conf \
363
$(INITRAMFSTOOLS)/conf-hooks.d/mandos
364
install initramfs-tools-script \
496
install -D --mode=u=rw,go=r initramfs-tools-conf \
497
$(INITRAMFSTOOLS)/conf.d/mandos-conf
498
install -D --mode=u=rw,go=r initramfs-tools-conf-hook \
499
$(INITRAMFSTOOLS)/conf-hooks.d/zz-mandos
500
install -D initramfs-tools-script \
365
501
$(INITRAMFSTOOLS)/scripts/init-premount/mandos
502
install -D initramfs-tools-script-stop \
503
$(INITRAMFSTOOLS)/scripts/local-premount/mandos
504
install -D --mode=u=rw,go=r \
505
--target-directory=$(DRACUTMODULE) \
506
dracut-module/ask-password-mandos.path \
507
dracut-module/ask-password-mandos.service
508
install --mode=u=rwxs,go=rx \
509
--target-directory=$(DRACUTMODULE) \
510
dracut-module/module-setup.sh \
511
dracut-module/cmdline-mandos.sh \
512
dracut-module/password-agent
366
513
install --mode=u=rw,go=r plugin-runner.conf $(CONFDIR)
514
install --directory $(MANDIR)/man8
367
515
gzip --best --to-stdout mandos-keygen.8 \
368
516
> $(MANDIR)/man8/mandos-keygen.8.gz
369
517
gzip --best --to-stdout plugin-runner.8mandos \
380
528
> $(MANDIR)/man8/askpass-fifo.8mandos.gz
381
529
gzip --best --to-stdout plugins.d/plymouth.8mandos \
382
530
> $(MANDIR)/man8/plymouth.8mandos.gz
531
gzip --best --to-stdout dracut-module/password-agent.8mandos \
532
> $(MANDIR)/man8/password-agent.8mandos.gz
383
533
534
.PHONY: install-client
384
535
install-client: install-client-nokey
385
536
# Post-installation stuff
386
537
-$(PREFIX)/sbin/mandos-keygen --dir "$(KEYDIR)"
387
update-initramfs -k all -u
538
if command -v update-initramfs >/dev/null; then \
539
update-initramfs -k all -u; \
540
elif command -v dracut >/dev/null; then \
541
for initrd in $(DESTDIR)/boot/initr*-$(LINUXVERSION); do \
542
if [ -w "$$initrd" ]; then \
543
chmod go-r "$$initrd"; \
544
dracut --force "$$initrd"; \
545
fi; \
546
done; \
547
fi
388
548
echo "Now run mandos-keygen --password --dir $(KEYDIR)"
389
549
550
.PHONY: uninstall
390
551
uninstall: uninstall-server uninstall-client
391
552
553
.PHONY: uninstall-server
392
554
uninstall-server:
393
555
-rm --force $(PREFIX)/sbin/mandos \
394
556
$(PREFIX)/sbin/mandos-ctl \
401
563
update-rc.d -f mandos remove
402
564
-rmdir $(CONFDIR)
403
565
566
.PHONY: uninstall-client
404
567
uninstall-client:
405
568
# Refuse to uninstall client if /etc/crypttab is explicitly configured
406
569
# to use it.
407
570
! grep --regexp='^ *[^ #].*keyscript=[^,=]*/mandos/' \
408
571
$(DESTDIR)/etc/crypttab
409
572
-rm --force $(PREFIX)/sbin/mandos-keygen \
410
$(PREFIX)/lib/mandos/plugin-runner \
411
$(PREFIX)/lib/mandos/plugins.d/password-prompt \
412
$(PREFIX)/lib/mandos/plugins.d/mandos-client \
413
$(PREFIX)/lib/mandos/plugins.d/usplash \
414
$(PREFIX)/lib/mandos/plugins.d/splashy \
415
$(PREFIX)/lib/mandos/plugins.d/askpass-fifo \
416
$(PREFIX)/lib/mandos/plugins.d/plymouth \
573
$(LIBDIR)/mandos/plugin-runner \
574
$(LIBDIR)/mandos/plugins.d/password-prompt \
575
$(LIBDIR)/mandos/plugins.d/mandos-client \
576
$(LIBDIR)/mandos/plugins.d/usplash \
577
$(LIBDIR)/mandos/plugins.d/splashy \
578
$(LIBDIR)/mandos/plugins.d/askpass-fifo \
579
$(LIBDIR)/mandos/plugins.d/plymouth \
417
580
$(INITRAMFSTOOLS)/hooks/mandos \
418
581
$(INITRAMFSTOOLS)/conf-hooks.d/mandos \
419
582
$(INITRAMFSTOOLS)/scripts/init-premount/mandos \
583
$(INITRAMFSTOOLS)/scripts/local-premount/mandos \
584
$(DRACUTMODULE)/ask-password-mandos.path \
585
$(DRACUTMODULE)/ask-password-mandos.service \
586
$(DRACUTMODULE)/module-setup.sh \
587
$(DRACUTMODULE)/cmdline-mandos.sh \
588
$(DRACUTMODULE)/password-agent \
420
589
$(MANDIR)/man8/mandos-keygen.8.gz \
421
590
$(MANDIR)/man8/plugin-runner.8mandos.gz \
422
591
$(MANDIR)/man8/mandos-client.8mandos.gz
425
594
$(MANDIR)/man8/splashy.8mandos.gz \
426
595
$(MANDIR)/man8/askpass-fifo.8mandos.gz \
427
596
$(MANDIR)/man8/plymouth.8mandos.gz \
428
-rmdir $(PREFIX)/lib/mandos/plugins.d $(CONFDIR)/plugins.d \
429
$(PREFIX)/lib/mandos $(CONFDIR) $(KEYDIR)
430
update-initramfs -k all -u
597
$(MANDIR)/man8/password-agent.8mandos.gz \
598
-rmdir $(LIBDIR)/mandos/plugins.d $(CONFDIR)/plugins.d \
599
$(LIBDIR)/mandos $(CONFDIR) $(KEYDIR) $(DRACUTMODULE)
600
if command -v update-initramfs >/dev/null; then \
601
update-initramfs -k all -u; \
602
elif command -v dracut >/dev/null; then \
603
for initrd in $(DESTDIR)/boot/initr*-$(LINUXVERSION); do \
604
test -w "$$initrd" && dracut --force "$$initrd"; \
605
done; \
606
fi
431
607
608
.PHONY: purge
432
609
purge: purge-server purge-client
433
610
611
.PHONY: purge-server
434
612
purge-server: uninstall-server
435
613
-rm --force $(CONFDIR)/mandos.conf $(CONFDIR)/clients.conf \
436
614
$(DESTDIR)/etc/dbus-1/system.d/mandos.conf
437
615
$(DESTDIR)/etc/default/mandos \
438
616
$(DESTDIR)/etc/init.d/mandos \
617
$(DESTDIR)/run/mandos.pid \
439
618
$(DESTDIR)/var/run/mandos.pid
619
if [ "$(SYSTEMD)" != "$(DESTDIR)" -a -d "$(SYSTEMD)" ]; then \
620
-rm --force -- $(SYSTEMD)/mandos.service; \
621
fi
440
622
-rmdir $(CONFDIR)
441
623
624
.PHONY: purge-client
442
625
purge-client: uninstall-client
443
-shred --remove $(KEYDIR)/seckey.txt
626
-shred --remove $(KEYDIR)/seckey.txt $(KEYDIR)/tls-privkey.pem
444
627
-rm --force $(CONFDIR)/plugin-runner.conf \
445
$(KEYDIR)/pubkey.txt $(KEYDIR)/seckey.txt
628
$(KEYDIR)/pubkey.txt $(KEYDIR)/seckey.txt \
629
$(KEYDIR)/tls-pubkey.txt $(KEYDIR)/tls-privkey.txt
446
630
-rmdir $(KEYDIR) $(CONFDIR)/plugins.d $(CONFDIR)
Loggerhead is a web-based interface for Breezy
Version: 2.0.2.dev0