To get this branch, use:
bzr branch
http://bzr.recompile.se/loggerhead/mandos/trunk
« back to all changes in this revision
Viewing changes to Makefile
- browse files at revision 1152
- compare with another revision
- download diff
- download tarball
- view history from revision 1152
- Committer: Teddy Hogeborn
- Date: 2019-08-05 21:14:05 UTC
- Revision ID: teddy@recompile.se-20190805211405-9m6hecekaihpttz9
Override lintian warnings about upgrading from old versions
There are some really things which are imperative that we fix in case
someone were to upgrade from a really old version. We want to keep
these fixes in the postinst maintainer scripts, even though lintian
complains about such old upgrades not being supported by Debian in
general. We prefer the code being there, for the sake of the users.
* debian/mandos-client.lintian-overrides
(maintainer-script-supports-ancient-package-version): New.
debian/mandos.lintian-overrides
(maintainer-script-supports-ancient-package-version): - '' -
There are some really things which are imperative that we fix in case
someone were to upgrade from a really old version. We want to keep
these fixes in the postinst maintainer scripts, even though lintian
complains about such old upgrades not being supported by Debian in
general. We prefer the code being there, for the sake of the users.
* debian/mandos-client.lintian-overrides
(maintainer-script-supports-ancient-package-version): New.
debian/mandos.lintian-overrides
(maintainer-script-supports-ancient-package-version): - '' -
- files added:
- .bzr-builddeb
- debian
- debian/po
- debian/source
- debian/tests
- debian/upstream
- dracut-module
- network-hooks.d
- plugin-helpers
- files removed:
- initramfs-tools-hook-conf
- files renamed:
- plugins.d/password-request.c => plugins.d/mandos-client.c
- plugins.d/password-request.xml => plugins.d/mandos-client.xml
- files modified:
- .bzrignore
added
removed
Makefile
1
WARN=-O -Wall -Wformat=2 -Winit-self -Wmissing-include-dirs \
2
-Wswitch-default -Wswitch-enum -Wunused-parameter \
3
-Wstrict-aliasing=2 -Wextra -Wfloat-equal -Wundef -Wshadow \
1
WARN:=-O -Wall -Wextra -Wdouble-promotion -Wformat=2 -Winit-self \
2
-Wmissing-include-dirs -Wswitch-default -Wswitch-enum \
3
-Wunused -Wuninitialized -Wstrict-overflow=5 \
4
-Wsuggest-attribute=pure -Wsuggest-attribute=const \
5
-Wsuggest-attribute=noreturn -Wfloat-equal -Wundef -Wshadow \
4
6
-Wunsafe-loop-optimizations -Wpointer-arith \
5
7
-Wbad-function-cast -Wcast-qual -Wcast-align -Wwrite-strings \
6
-Wconversion -Wstrict-prototypes -Wold-style-definition \
7
-Wpacked -Wnested-externs -Wunreachable-code -Winline \
8
-Wvolatile-register-var
9
DEBUG=-ggdb3
10
# For info about _FORTIFY_SOURCE, see
11
# <http://gcc.gnu.org/ml/gcc-patches/2004-09/msg02055.html>
12
FORTIFY=-D_FORTIFY_SOURCE=2 # -fstack-protector-all
8
-Wconversion -Wlogical-op -Waggregate-return \
9
-Wstrict-prototypes -Wold-style-definition \
10
-Wmissing-format-attribute -Wnormalized=nfc -Wpacked \
11
-Wredundant-decls -Wnested-externs -Winline -Wvla \
12
-Wvolatile-register-var -Woverlength-strings
13
14
#DEBUG:=-ggdb3 -fsanitize=address $(SANITIZE)
15
## Check which sanitizing options can be used
16
#SANITIZE:=$(foreach option,$(ALL_SANITIZE_OPTIONS),$(shell \
17
# echo 'int main(){}' | $(CC) --language=c $(option) \
18
# /dev/stdin -o /dev/null >/dev/null 2>&1 && echo $(option)))
19
# <https://developerblog.redhat.com/2014/10/16/gcc-undefined-behavior-sanitizer-ubsan/>
20
ALL_SANITIZE_OPTIONS:=-fsanitize=leak -fsanitize=undefined \
21
-fsanitize=shift -fsanitize=integer-divide-by-zero \
22
-fsanitize=unreachable -fsanitize=vla-bound -fsanitize=null \
23
-fsanitize=return -fsanitize=signed-integer-overflow \
24
-fsanitize=bounds -fsanitize=alignment \
25
-fsanitize=object-size -fsanitize=float-divide-by-zero \
26
-fsanitize=float-cast-overflow -fsanitize=nonnull-attribute \
27
-fsanitize=returns-nonnull-attribute -fsanitize=bool \
28
-fsanitize=enum -fsanitize-address-use-after-scope
29
30
# For info about _FORTIFY_SOURCE, see feature_test_macros(7)
31
# and <https://gcc.gnu.org/ml/gcc-patches/2004-09/msg02055.html>.
32
FORTIFY:=-D_FORTIFY_SOURCE=2 -fstack-protector-all -fPIC
33
LINK_FORTIFY_LD:=-z relro -z now
34
LINK_FORTIFY:=
35
36
# If BROKEN_PIE is set, do not build with -pie
37
ifndef BROKEN_PIE
38
FORTIFY += -fPIE
39
LINK_FORTIFY += -pie
40
endif
13
41
#COVERAGE=--coverage
14
OPTIMIZE=-Os
15
LANGUAGE=-std=gnu99
16
# PREFIX=/usr/local
17
PREFIX=$(DESTDIR)/usr
18
# CONFDIR=/usr/local/lib/mandos
19
CONFDIR=$(DESTDIR)/etc/mandos
20
# KEYDIR=/usr/local/lib/mandos/keys
21
KEYDIR=$(DESTDIR)/etc/keys/mandos
22
# MANDIR=/usr/local/man
23
MANDIR=$(DESTDIR)/usr/share/man
24
25
GNUTLS_CFLAGS=$(shell libgnutls-config --cflags)
26
GNUTLS_LIBS=$(shell libgnutls-config --libs)
27
AVAHI_CFLAGS=$(shell pkg-config --cflags-only-I avahi-core)
28
AVAHI_LIBS=$(shell pkg-config --libs avahi-core)
29
GPGME_CFLAGS=$(shell gpgme-config --cflags)
30
GPGME_LIBS=$(shell gpgme-config --libs)
42
OPTIMIZE:=-Os -fno-strict-aliasing
43
LANGUAGE:=-std=gnu11
44
FEATURES:=-D_FILE_OFFSET_BITS=64
45
htmldir:=man
46
version:=1.8.6
47
SED:=sed
48
PKG_CONFIG?=pkg-config
49
50
USER:=$(firstword $(subst :, ,$(shell getent passwd _mandos \
51
|| getent passwd nobody || echo 65534)))
52
GROUP:=$(firstword $(subst :, ,$(shell getent group _mandos \
53
|| getent group nogroup || echo 65534)))
54
55
LINUXVERSION:=$(shell uname --kernel-release)
56
57
## Use these settings for a traditional /usr/local install
58
# PREFIX:=$(DESTDIR)/usr/local
59
# CONFDIR:=$(DESTDIR)/etc/mandos
60
# KEYDIR:=$(DESTDIR)/etc/mandos/keys
61
# MANDIR:=$(PREFIX)/man
62
# INITRAMFSTOOLS:=$(DESTDIR)/etc/initramfs-tools
63
# DRACUTMODULE:=$(DESTDIR)/usr/lib/dracut/modules.d/90mandos
64
# STATEDIR:=$(DESTDIR)/var/lib/mandos
65
# LIBDIR:=$(PREFIX)/lib
66
##
67
68
## These settings are for a package-type install
69
PREFIX:=$(DESTDIR)/usr
70
CONFDIR:=$(DESTDIR)/etc/mandos
71
KEYDIR:=$(DESTDIR)/etc/keys/mandos
72
MANDIR:=$(PREFIX)/share/man
73
INITRAMFSTOOLS:=$(DESTDIR)/usr/share/initramfs-tools
74
DRACUTMODULE:=$(DESTDIR)/usr/lib/dracut/modules.d/90mandos
75
STATEDIR:=$(DESTDIR)/var/lib/mandos
76
LIBDIR:=$(shell \
77
for d in \
78
"/usr/lib/`dpkg-architecture \
79
-qDEB_HOST_MULTIARCH 2>/dev/null`" \
80
"`rpm --eval='%{_libdir}' 2>/dev/null`" /usr/lib; do \
81
if [ -d "$$d" -a "$$d" = "$${d%/}" ]; then \
82
echo "$(DESTDIR)$$d"; \
83
break; \
84
fi; \
85
done)
86
##
87
88
SYSTEMD:=$(DESTDIR)$(shell $(PKG_CONFIG) systemd \
89
--variable=systemdsystemunitdir)
90
TMPFILES:=$(DESTDIR)$(shell $(PKG_CONFIG) systemd \
91
--variable=tmpfilesdir)
92
93
GNUTLS_CFLAGS:=$(shell $(PKG_CONFIG) --cflags-only-I gnutls)
94
GNUTLS_LIBS:=$(shell $(PKG_CONFIG) --libs gnutls)
95
AVAHI_CFLAGS:=$(shell $(PKG_CONFIG) --cflags-only-I avahi-core)
96
AVAHI_LIBS:=$(shell $(PKG_CONFIG) --libs avahi-core)
97
GPGME_CFLAGS:=$(shell gpgme-config --cflags; getconf LFS_CFLAGS)
98
GPGME_LIBS:=$(shell gpgme-config --libs; getconf LFS_LIBS; \
99
getconf LFS_LDFLAGS)
100
LIBNL3_CFLAGS:=$(shell $(PKG_CONFIG) --cflags-only-I libnl-route-3.0)
101
LIBNL3_LIBS:=$(shell $(PKG_CONFIG) --libs libnl-route-3.0)
102
GLIB_CFLAGS:=$(shell $(PKG_CONFIG) --cflags glib-2.0)
103
GLIB_LIBS:=$(shell $(PKG_CONFIG) --libs glib-2.0)
31
104
32
105
# Do not change these two
33
CFLAGS=$(WARN) $(DEBUG) $(FORTIFY) $(COVERAGE) $(OPTIMIZE) \
34
$(LANGUAGE) $(GNUTLS_CFLAGS) $(AVAHI_CFLAGS) $(GPGME_CFLAGS)
35
LDFLAGS=$(COVERAGE)
106
CFLAGS+=$(WARN) $(DEBUG) $(FORTIFY) $(COVERAGE) $(OPTIMIZE) \
107
$(LANGUAGE) $(FEATURES) -DVERSION='"$(version)"'
108
LDFLAGS+=-Xlinker --as-needed $(COVERAGE) $(LINK_FORTIFY) $(strip \
109
) $(foreach flag,$(LINK_FORTIFY_LD),-Xlinker $(flag))
36
110
37
# Commands to format a DocBook refentry document into a manual page
38
DOCBOOKTOMAN=cd $(dir $<); xsltproc --nonet --xinclude \
111
# Commands to format a DocBook <refentry> document into a manual page
112
DOCBOOKTOMAN=$(strip cd $(dir $<); xsltproc --nonet --xinclude \
39
113
--param man.charmap.use.subset 0 \
40
114
--param make.year.ranges 1 \
41
115
--param make.single.year.ranges 1 \
42
116
--param man.output.quietly 1 \
43
117
--param man.authors.section.enabled 0 \
44
/usr/share/xml/docbook/stylesheet/nwalsh/manpages/docbook.xsl \
118
/usr/share/xml/docbook/stylesheet/nwalsh/manpages/docbook.xsl \
45
119
$(notdir $<); \
46
$(MANPOST) $(notdir $@)
47
# DocBook-to-man post-processing to fix a \n escape bug
48
MANPOST=sed --in-place --expression='s,\\\\en,\\en,g;s,\\n,\\en,g'
49
50
PLUGINS=plugins.d/password-prompt plugins.d/password-request
51
PROGS=plugin-runner $(PLUGINS)
52
DOCS=mandos.8 plugin-runner.8mandos mandos-keygen.8 \
53
plugins.d/password-request.8mandos \
54
plugins.d/password-prompt.8mandos mandos.conf.5 \
55
mandos-clients.conf.5
56
57
objects=$(addsuffix .o,$(PROGS))
58
59
all: $(PROGS)
120
if locale --all 2>/dev/null | grep --regexp='^en_US\.utf8$$' \
121
&& command -v man >/dev/null; then LANG=en_US.UTF-8 \
122
MANWIDTH=80 man --warnings --encoding=UTF-8 --local-file \
123
$(notdir $@); fi >/dev/null)
124
125
DOCBOOKTOHTML=$(strip xsltproc --nonet --xinclude \
126
--param make.year.ranges 1 \
127
--param make.single.year.ranges 1 \
128
--param man.output.quietly 1 \
129
--param man.authors.section.enabled 0 \
130
--param citerefentry.link 1 \
131
--output $@ \
132
/usr/share/xml/docbook/stylesheet/nwalsh/xhtml/docbook.xsl \
133
$<; $(HTMLPOST) $@)
134
# Fix citerefentry links
135
HTMLPOST:=$(SED) --in-place \
136
--expression='s/\(<a class="citerefentry" href="\)\("><span class="citerefentry"><span class="refentrytitle">\)\([^<]*\)\(<\/span>(\)\([^)]*\)\()<\/span><\/a>\)/\1\3.\5\2\3\4\5\6/g'
137
138
PLUGINS:=plugins.d/password-prompt plugins.d/mandos-client \
139
plugins.d/usplash plugins.d/splashy plugins.d/askpass-fifo \
140
plugins.d/plymouth
141
PLUGIN_HELPERS:=plugin-helpers/mandos-client-iprouteadddel
142
CPROGS:=plugin-runner dracut-module/password-agent $(PLUGINS) \
143
$(PLUGIN_HELPERS)
144
PROGS:=mandos mandos-keygen mandos-ctl mandos-monitor $(CPROGS)
145
DOCS:=mandos.8 mandos-keygen.8 mandos-monitor.8 mandos-ctl.8 \
146
mandos.conf.5 mandos-clients.conf.5 plugin-runner.8mandos \
147
dracut-module/password-agent.8mandos \
148
plugins.d/mandos-client.8mandos \
149
plugins.d/password-prompt.8mandos plugins.d/usplash.8mandos \
150
plugins.d/splashy.8mandos plugins.d/askpass-fifo.8mandos \
151
plugins.d/plymouth.8mandos intro.8mandos
152
153
htmldocs:=$(addsuffix .xhtml,$(DOCS))
154
155
objects:=$(addsuffix .o,$(CPROGS))
156
157
all: $(PROGS) mandos.lsm
60
158
61
159
doc: $(DOCS)
62
160
63
%.5: %.xml legalnotice.xml
64
$(DOCBOOKTOMAN)
65
66
%.8: %.xml legalnotice.xml
67
$(DOCBOOKTOMAN)
68
69
%.8mandos: %.xml legalnotice.xml
70
$(DOCBOOKTOMAN)
71
72
mandos.8: mandos.xml mandos-options.xml overview.xml legalnotice.xml
73
$(DOCBOOKTOMAN)
74
75
mandos-keygen.8: mandos-keygen.xml overview.xml legalnotice.xml
76
$(DOCBOOKTOMAN)
77
78
mandos.conf.5: mandos.conf.xml mandos-options.xml legalnotice.xml
79
$(DOCBOOKTOMAN)
80
81
plugin-runner.8mandos: plugin-runner.xml overview.xml legalnotice.xml
82
$(DOCBOOKTOMAN)
83
84
plugins.d/password-request.8mandos: plugins.d/password-request.xml \
85
mandos-options.xml \
86
overview.xml legalnotice.xml
87
$(DOCBOOKTOMAN)
88
89
plugins.d/password-request: plugins.d/password-request.o
90
$(LINK.o) $(GNUTLS_LIBS) $(AVAHI_LIBS) $(GPGME_LIBS) \
91
$(COMMON) $^ $(LOADLIBES) $(LDLIBS) -o $@
92
93
.PHONY : all doc clean distclean run-client run-server install \
94
install-server install-client uninstall uninstall-server \
95
uninstall-client purge purge-server purge-client
161
html: $(htmldocs)
162
163
%.5: %.xml common.ent legalnotice.xml
164
$(DOCBOOKTOMAN)
165
%.5.xhtml: %.xml common.ent legalnotice.xml
166
$(DOCBOOKTOHTML)
167
168
%.8: %.xml common.ent legalnotice.xml
169
$(DOCBOOKTOMAN)
170
%.8.xhtml: %.xml common.ent legalnotice.xml
171
$(DOCBOOKTOHTML)
172
173
%.8mandos: %.xml common.ent legalnotice.xml
174
$(DOCBOOKTOMAN)
175
%.8mandos.xhtml: %.xml common.ent legalnotice.xml
176
$(DOCBOOKTOHTML)
177
178
intro.8mandos: intro.xml common.ent legalnotice.xml
179
$(DOCBOOKTOMAN)
180
intro.8mandos.xhtml: intro.xml common.ent legalnotice.xml
181
$(DOCBOOKTOHTML)
182
183
mandos.8: mandos.xml common.ent mandos-options.xml overview.xml \
184
legalnotice.xml
185
$(DOCBOOKTOMAN)
186
mandos.8.xhtml: mandos.xml common.ent mandos-options.xml \
187
overview.xml legalnotice.xml
188
$(DOCBOOKTOHTML)
189
190
mandos-keygen.8: mandos-keygen.xml common.ent overview.xml \
191
legalnotice.xml
192
$(DOCBOOKTOMAN)
193
mandos-keygen.8.xhtml: mandos-keygen.xml common.ent overview.xml \
194
legalnotice.xml
195
$(DOCBOOKTOHTML)
196
197
mandos-monitor.8: mandos-monitor.xml common.ent overview.xml \
198
legalnotice.xml
199
$(DOCBOOKTOMAN)
200
mandos-monitor.8.xhtml: mandos-monitor.xml common.ent overview.xml \
201
legalnotice.xml
202
$(DOCBOOKTOHTML)
203
204
mandos-ctl.8: mandos-ctl.xml common.ent overview.xml \
205
legalnotice.xml
206
$(DOCBOOKTOMAN)
207
mandos-ctl.8.xhtml: mandos-ctl.xml common.ent overview.xml \
208
legalnotice.xml
209
$(DOCBOOKTOHTML)
210
211
mandos.conf.5: mandos.conf.xml common.ent mandos-options.xml \
212
legalnotice.xml
213
$(DOCBOOKTOMAN)
214
mandos.conf.5.xhtml: mandos.conf.xml common.ent mandos-options.xml \
215
legalnotice.xml
216
$(DOCBOOKTOHTML)
217
218
plugin-runner.8mandos: plugin-runner.xml common.ent overview.xml \
219
legalnotice.xml
220
$(DOCBOOKTOMAN)
221
plugin-runner.8mandos.xhtml: plugin-runner.xml common.ent \
222
overview.xml legalnotice.xml
223
$(DOCBOOKTOHTML)
224
225
dracut-module/password-agent.8mandos: \
226
dracut-module/password-agent.xml common.ent \
227
overview.xml legalnotice.xml
228
$(DOCBOOKTOMAN)
229
dracut-module/password-agent.8mandos.xhtml: \
230
dracut-module/password-agent.xml common.ent \
231
overview.xml legalnotice.xml
232
$(DOCBOOKTOHTML)
233
234
plugins.d/mandos-client.8mandos: plugins.d/mandos-client.xml \
235
common.ent \
236
mandos-options.xml \
237
overview.xml legalnotice.xml
238
$(DOCBOOKTOMAN)
239
plugins.d/mandos-client.8mandos.xhtml: plugins.d/mandos-client.xml \
240
common.ent \
241
mandos-options.xml \
242
overview.xml legalnotice.xml
243
$(DOCBOOKTOHTML)
244
245
# Update all these files with version number $(version)
246
common.ent: Makefile
247
$(strip $(SED) --in-place \
248
--expression='s/^\(<!ENTITY version "\)[^"]*">$$/\1$(version)">/' \
249
$@)
250
251
mandos: Makefile
252
$(strip $(SED) --in-place \
253
--expression='s/^\(version = "\)[^"]*"$$/\1$(version)"/' \
254
$@)
255
256
mandos-keygen: Makefile
257
$(strip $(SED) --in-place \
258
--expression='s/^\(VERSION="\)[^"]*"$$/\1$(version)"/' \
259
$@)
260
261
mandos-ctl: Makefile
262
$(strip $(SED) --in-place \
263
--expression='s/^\(version = "\)[^"]*"$$/\1$(version)"/' \
264
$@)
265
266
mandos-monitor: Makefile
267
$(strip $(SED) --in-place \
268
--expression='s/^\(version = "\)[^"]*"$$/\1$(version)"/' \
269
$@)
270
271
mandos.lsm: Makefile
272
$(strip $(SED) --in-place \
273
--expression='s/^\(Version:\).*/\1\t$(version)/' \
274
$@)
275
$(strip $(SED) --in-place \
276
--expression='s/^\(Entered-date:\).*/\1\t$(shell date --rfc-3339=date --reference=Makefile)/' \
277
$@)
278
$(strip $(SED) --in-place \
279
--expression='s/\(mandos_\)[0-9.]\+\(\.orig\.tar\.gz\)/\1$(version)\2/' \
280
$@)
281
282
# Need to add the GnuTLS, Avahi and GPGME libraries
283
plugins.d/mandos-client: plugins.d/mandos-client.c
284
$(LINK.c) $^ $(GNUTLS_CFLAGS) $(AVAHI_CFLAGS) $(strip\
285
) $(GPGME_CFLAGS) $(GNUTLS_LIBS) $(strip\
286
) $(AVAHI_LIBS) $(GPGME_LIBS) $(LOADLIBES) $(strip\
287
) $(LDLIBS) -o $@
288
289
# Need to add the libnl-route library
290
plugin-helpers/mandos-client-iprouteadddel: plugin-helpers/mandos-client-iprouteadddel.c
291
$(LINK.c) $(LIBNL3_CFLAGS) $^ $(LIBNL3_LIBS) $(strip\
292
) $(LOADLIBES) $(LDLIBS) -o $@
293
294
# Need to add the GLib and pthread libraries
295
dracut-module/password-agent: dracut-module/password-agent.c
296
$(LINK.c) $(GLIB_CFLAGS) $^ $(GLIB_LIBS) -lpthread $(strip\
297
) $(LOADLIBES) $(LDLIBS) -o $@
298
299
.PHONY : all doc html clean distclean mostlyclean maintainer-clean \
300
check run-client run-server install install-html \
301
install-server install-client-nokey install-client uninstall \
302
uninstall-server uninstall-client purge purge-server \
303
purge-client
96
304
97
305
clean:
98
-rm --force $(PROGS) $(objects) $(DOCS) core
306
-rm --force $(CPROGS) $(objects) $(htmldocs) $(DOCS) core
99
307
100
308
distclean: clean
101
309
mostlyclean: clean
102
310
maintainer-clean: clean
103
-rm --force --recursive keydir confdir
311
-rm --force --recursive keydir confdir statedir
104
312
105
check:
313
check: all
106
314
./mandos --check
315
./mandos-ctl --check
316
./mandos-keygen --version
317
./plugin-runner --version
318
./plugin-helpers/mandos-client-iprouteadddel --version
319
./dracut-module/password-agent --test
107
320
108
321
# Run the client with a local config and key
109
run-client: all keydir/seckey.txt keydir/pubkey.txt
322
run-client: all keydir/seckey.txt keydir/pubkey.txt \
323
keydir/tls-privkey.pem keydir/tls-pubkey.pem
324
@echo '######################################################'
325
@echo '# The following error messages are harmless and can #'
326
@echo '# be safely ignored: #'
327
@echo '## From plugin-runner: #'
328
@echo '# setgid: Operation not permitted #'
329
@echo '# setuid: Operation not permitted #'
330
@echo '## From askpass-fifo: #'
331
@echo '# mkfifo: Permission denied #'
332
@echo '## From mandos-client: #'
333
@echo '# Failed to raise privileges: Operation not permi... #'
334
@echo '# Warning: network hook "*" exited with status * #'
335
@echo '# ioctl SIOCSIFFLAGS +IFF_UP: Operation not permi... #'
336
@echo '# Failed to bring up interface "*": Operation not... #'
337
@echo '# #'
338
@echo '# (The messages are caused by not running as root, #'
339
@echo '# but you should NOT run "make run-client" as root #'
340
@echo '# unless you also unpacked and compiled Mandos as #'
341
@echo '# root, which is also NOT recommended.) #'
342
@echo '######################################################'
343
# We set GNOME_KEYRING_CONTROL to block pam_gnome_keyring
110
344
./plugin-runner --plugin-dir=plugins.d \
345
--plugin-helper-dir=plugin-helpers \
111
346
--config-file=plugin-runner.conf \
112
--options-for=password-request:--seckey=keydir/seckey.txt,--pubkey=keydir/pubkey.txt
347
--options-for=mandos-client:--seckey=keydir/seckey.txt,--pubkey=keydir/pubkey.txt,--tls-privkey=keydir/tls-privkey.pem,--tls-pubkey=keydir/tls-pubkey.pem,--network-hook-dir=network-hooks.d \
348
--env-for=mandos-client:GNOME_KEYRING_CONTROL= \
349
$(CLIENTARGS)
113
350
114
351
# Used by run-client
115
keydir/seckey.txt keydir/pubkey.txt: mandos-keygen
352
keydir/seckey.txt keydir/pubkey.txt keydir/tls-privkey.pem keydir/tls-pubkey.pem: mandos-keygen
116
353
install --directory keydir
117
354
./mandos-keygen --dir keydir --force
118
355
119
356
# Run the server with a local config
120
run-server: confdir/mandos.conf confdir/clients.conf
121
./mandos --debug --configdir=confdir
357
run-server: confdir/mandos.conf confdir/clients.conf statedir
358
./mandos --debug --no-dbus --configdir=confdir \
359
--statedir=statedir $(SERVERARGS)
122
360
123
361
# Used by run-server
124
362
confdir/mandos.conf: mandos.conf
125
363
install --directory confdir
126
364
install --mode=u=rw,go=r $^ $@
127
confdir/clients.conf: clients.conf keydir/seckey.txt
365
confdir/clients.conf: clients.conf keydir/seckey.txt keydir/tls-pubkey.pem
128
366
install --directory confdir
129
install --mode=u=rw,g=r $< $@
367
install --mode=u=rw $< $@
130
368
# Add a client password
131
./mandos-keygen --dir keydir --password >> $@
132
133
install: install-server install-client
369
./mandos-keygen --dir keydir --password --no-ssh >> $@
370
statedir:
371
install --directory statedir
372
373
install: install-server install-client-nokey
374
375
install-html: html
376
install --directory $(htmldir)
377
install --mode=u=rw,go=r --target-directory=$(htmldir) \
378
$(htmldocs)
134
379
135
380
install-server: doc
136
install --directory $(CONFDIR) $(MANDIR)/man5 \
137
$(MANDIR)/man8
381
install --directory $(CONFDIR)
382
if install --directory --mode=u=rwx --owner=$(USER) \
383
--group=$(GROUP) $(STATEDIR); then \
384
:; \
385
elif install --directory --mode=u=rwx $(STATEDIR); then \
386
chown -- $(USER):$(GROUP) $(STATEDIR) || :; \
387
fi
388
if [ "$(TMPFILES)" != "$(DESTDIR)" \
389
-a -d "$(TMPFILES)" ]; then \
390
install --mode=u=rw,go=r tmpfiles.d-mandos.conf \
391
$(TMPFILES)/mandos.conf; \
392
fi
138
393
install --mode=u=rwx,go=rx mandos $(PREFIX)/sbin/mandos
394
install --mode=u=rwx,go=rx --target-directory=$(PREFIX)/sbin \
395
mandos-ctl
396
install --mode=u=rwx,go=rx --target-directory=$(PREFIX)/sbin \
397
mandos-monitor
139
398
install --mode=u=rw,go=r --target-directory=$(CONFDIR) \
140
399
mandos.conf
141
install --mode=u=rw,g=r --target-directory=$(CONFDIR) \
400
install --mode=u=rw --target-directory=$(CONFDIR) \
142
401
clients.conf
143
install --mode=u=rwx,go=rx init.d-mandos /etc/init.d/mandos
144
install --mode=u=rw,go=r default-mandos /etc/default/mandos
145
update-rc.d mandos defaults
402
install --mode=u=rw,go=r dbus-mandos.conf \
403
$(DESTDIR)/etc/dbus-1/system.d/mandos.conf
404
install --mode=u=rwx,go=rx init.d-mandos \
405
$(DESTDIR)/etc/init.d/mandos
406
if [ "$(SYSTEMD)" != "$(DESTDIR)" -a -d "$(SYSTEMD)" ]; then \
407
install --mode=u=rw,go=r mandos.service $(SYSTEMD); \
408
fi
409
install --mode=u=rw,go=r default-mandos \
410
$(DESTDIR)/etc/default/mandos
411
if [ -z $(DESTDIR) ]; then \
412
update-rc.d mandos defaults 25 15;\
413
fi
146
414
gzip --best --to-stdout mandos.8 \
147
415
> $(MANDIR)/man8/mandos.8.gz
416
gzip --best --to-stdout mandos-monitor.8 \
417
> $(MANDIR)/man8/mandos-monitor.8.gz
418
gzip --best --to-stdout mandos-ctl.8 \
419
> $(MANDIR)/man8/mandos-ctl.8.gz
148
420
gzip --best --to-stdout mandos.conf.5 \
149
421
> $(MANDIR)/man5/mandos.conf.5.gz
150
422
gzip --best --to-stdout mandos-clients.conf.5 \
151
423
> $(MANDIR)/man5/mandos-clients.conf.5.gz
424
gzip --best --to-stdout intro.8mandos \
425
> $(MANDIR)/man8/intro.8mandos.gz
152
426
153
install-client: all doc /usr/share/initramfs-tools/hooks/.
154
install --directory $(PREFIX)/lib/mandos $(CONFDIR) \
155
$(MANDIR)/man8
156
install --directory --mode=u=rwx $(KEYDIR)
157
install --directory --mode=u=rwx \
158
$(PREFIX)/lib/mandos/plugins.d
159
if [ "$(CONFDIR)/plugins.d" \
160
!= "$(PREFIX)/lib/mandos/plugins.d" ]; then \
161
install --directory "$(CONFDIR)/plugins.d"; \
162
fi
163
install --mode=u=rwx,go=rx \
164
--target-directory=$(PREFIX)/lib/mandos plugin-runner
427
install-client-nokey: all doc
428
install --directory $(LIBDIR)/mandos $(CONFDIR)
429
install --directory --mode=u=rwx $(KEYDIR) \
430
$(LIBDIR)/mandos/plugins.d \
431
$(LIBDIR)/mandos/plugin-helpers
432
if [ "$(CONFDIR)" != "$(LIBDIR)/mandos" ]; then \
433
install --mode=u=rwx \
434
--directory "$(CONFDIR)/plugins.d" \
435
"$(CONFDIR)/plugin-helpers"; \
436
fi
437
install --mode=u=rwx,go=rx --directory \
438
"$(CONFDIR)/network-hooks.d"
439
install --mode=u=rwx,go=rx \
440
--target-directory=$(LIBDIR)/mandos plugin-runner
441
install --mode=u=rwx,go=rx \
442
--target-directory=$(LIBDIR)/mandos \
443
mandos-to-cryptroot-unlock
165
444
install --mode=u=rwx,go=rx --target-directory=$(PREFIX)/sbin \
166
445
mandos-keygen
167
446
install --mode=u=rwx,go=rx \
168
--target-directory=$(PREFIX)/lib/mandos/plugins.d \
447
--target-directory=$(LIBDIR)/mandos/plugins.d \
169
448
plugins.d/password-prompt
170
449
install --mode=u=rwxs,go=rx \
171
--target-directory=$(PREFIX)/lib/mandos/plugins.d \
172
plugins.d/password-request
173
install --mode=u=rwx,go=rx \
174
--target-directory=$(PREFIX)/lib/mandos/plugins.d \
450
--target-directory=$(LIBDIR)/mandos/plugins.d \
451
plugins.d/mandos-client
452
install --mode=u=rwxs,go=rx \
453
--target-directory=$(LIBDIR)/mandos/plugins.d \
175
454
plugins.d/usplash
455
install --mode=u=rwxs,go=rx \
456
--target-directory=$(LIBDIR)/mandos/plugins.d \
457
plugins.d/splashy
458
install --mode=u=rwxs,go=rx \
459
--target-directory=$(LIBDIR)/mandos/plugins.d \
460
plugins.d/askpass-fifo
461
install --mode=u=rwxs,go=rx \
462
--target-directory=$(LIBDIR)/mandos/plugins.d \
463
plugins.d/plymouth
464
install --mode=u=rwx,go=rx \
465
--target-directory=$(LIBDIR)/mandos/plugin-helpers \
466
plugin-helpers/mandos-client-iprouteadddel
176
467
install initramfs-tools-hook \
177
/usr/share/initramfs-tools/hooks/mandos
178
install initramfs-tools-hook-conf \
179
/usr/share/initramfs-tools/conf-hooks.d/mandos
468
$(INITRAMFSTOOLS)/hooks/mandos
469
install --mode=u=rw,go=r initramfs-tools-conf \
470
$(INITRAMFSTOOLS)/conf.d/mandos-conf
471
install --mode=u=rw,go=r initramfs-tools-conf-hook \
472
$(INITRAMFSTOOLS)/conf-hooks.d/zz-mandos
180
473
install initramfs-tools-script \
181
/usr/share/initramfs-tools/scripts/local-top/mandos
474
$(INITRAMFSTOOLS)/scripts/init-premount/mandos
475
install initramfs-tools-script-stop \
476
$(INITRAMFSTOOLS)/scripts/local-premount/mandos
477
install --directory $(DRACUTMODULE)
478
install --mode=u=rw,go=r --target-directory=$(DRACUTMODULE) \
479
dracut-module/ask-password-mandos.path \
480
dracut-module/ask-password-mandos.service
481
install --mode=u=rwxs,go=rx \
482
--target-directory=$(DRACUTMODULE) \
483
dracut-module/module-setup.sh \
484
dracut-module/cmdline-mandos.sh \
485
dracut-module/password-agent
182
486
install --mode=u=rw,go=r plugin-runner.conf $(CONFDIR)
183
487
gzip --best --to-stdout mandos-keygen.8 \
184
488
> $(MANDIR)/man8/mandos-keygen.8.gz
185
489
gzip --best --to-stdout plugin-runner.8mandos \
186
490
> $(MANDIR)/man8/plugin-runner.8mandos.gz
491
gzip --best --to-stdout plugins.d/mandos-client.8mandos \
492
> $(MANDIR)/man8/mandos-client.8mandos.gz
187
493
gzip --best --to-stdout plugins.d/password-prompt.8mandos \
188
494
> $(MANDIR)/man8/password-prompt.8mandos.gz
189
gzip --best --to-stdout plugins.d/password-request.8mandos \
190
> $(MANDIR)/man8/password-request.8mandos.gz
495
gzip --best --to-stdout plugins.d/usplash.8mandos \
496
> $(MANDIR)/man8/usplash.8mandos.gz
497
gzip --best --to-stdout plugins.d/splashy.8mandos \
498
> $(MANDIR)/man8/splashy.8mandos.gz
499
gzip --best --to-stdout plugins.d/askpass-fifo.8mandos \
500
> $(MANDIR)/man8/askpass-fifo.8mandos.gz
501
gzip --best --to-stdout plugins.d/plymouth.8mandos \
502
> $(MANDIR)/man8/plymouth.8mandos.gz
503
gzip --best --to-stdout dracut-module/password-agent.8mandos \
504
> $(MANDIR)/man8/password-agent.8mandos.gz
505
506
install-client: install-client-nokey
507
# Post-installation stuff
191
508
-$(PREFIX)/sbin/mandos-keygen --dir "$(KEYDIR)"
192
update-initramfs -k all -u
509
if command -v update-initramfs >/dev/null; then \
510
update-initramfs -k all -u; \
511
elif command -v dracut >/dev/null; then \
512
for initrd in $(DESTDIR)/boot/initr*-$(LINUXVERSION); do \
513
if [ -w "$$initrd" ]; then \
514
chmod go-r "$$initrd"; \
515
dracut --force "$$initrd"; \
516
fi; \
517
done; \
518
fi
193
519
echo "Now run mandos-keygen --password --dir $(KEYDIR)"
194
520
195
521
uninstall: uninstall-server uninstall-client
196
522
197
523
uninstall-server:
198
524
-rm --force $(PREFIX)/sbin/mandos \
525
$(PREFIX)/sbin/mandos-ctl \
526
$(PREFIX)/sbin/mandos-monitor \
199
527
$(MANDIR)/man8/mandos.8.gz \
528
$(MANDIR)/man8/mandos-monitor.8.gz \
529
$(MANDIR)/man8/mandos-ctl.8.gz \
200
530
$(MANDIR)/man5/mandos.conf.5.gz \
201
531
$(MANDIR)/man5/mandos-clients.conf.5.gz
202
532
update-rc.d -f mandos remove
206
536
# Refuse to uninstall client if /etc/crypttab is explicitly configured
207
537
# to use it.
208
538
! grep --regexp='^ *[^ #].*keyscript=[^,=]*/mandos/' \
209
/etc/crypttab
539
$(DESTDIR)/etc/crypttab
210
540
-rm --force $(PREFIX)/sbin/mandos-keygen \
211
$(PREFIX)/lib/mandos/plugin-runner \
212
$(PREFIX)/lib/mandos/plugins.d/password-prompt \
213
$(PREFIX)/lib/mandos/plugins.d/password-request \
214
/usr/share/initramfs-tools/hooks/mandos \
215
/usr/share/initramfs-tools/conf-hooks.d/mandos \
541
$(LIBDIR)/mandos/plugin-runner \
542
$(LIBDIR)/mandos/plugins.d/password-prompt \
543
$(LIBDIR)/mandos/plugins.d/mandos-client \
544
$(LIBDIR)/mandos/plugins.d/usplash \
545
$(LIBDIR)/mandos/plugins.d/splashy \
546
$(LIBDIR)/mandos/plugins.d/askpass-fifo \
547
$(LIBDIR)/mandos/plugins.d/plymouth \
548
$(INITRAMFSTOOLS)/hooks/mandos \
549
$(INITRAMFSTOOLS)/conf-hooks.d/mandos \
550
$(INITRAMFSTOOLS)/scripts/init-premount/mandos \
551
$(INITRAMFSTOOLS)/scripts/local-premount/mandos \
552
$(DRACUTMODULE)/ask-password-mandos.path \
553
$(DRACUTMODULE)/ask-password-mandos.service \
554
$(DRACUTMODULE)/module-setup.sh \
555
$(DRACUTMODULE)/cmdline-mandos.sh \
556
$(DRACUTMODULE)/password-agent \
557
$(MANDIR)/man8/mandos-keygen.8.gz \
216
558
$(MANDIR)/man8/plugin-runner.8mandos.gz \
217
$(MANDIR)/man8/mandos-keygen.8.gz \
559
$(MANDIR)/man8/mandos-client.8mandos.gz
218
560
$(MANDIR)/man8/password-prompt.8mandos.gz \
219
$(MANDIR)/man8/password-request.8mandos.gz
220
-rmdir $(PREFIX)/lib/mandos/plugins.d $(CONFDIR)/plugins.d \
221
$(PREFIX)/lib/mandos $(CONFDIR)
222
update-initramfs -k all -u
561
$(MANDIR)/man8/usplash.8mandos.gz \
562
$(MANDIR)/man8/splashy.8mandos.gz \
563
$(MANDIR)/man8/askpass-fifo.8mandos.gz \
564
$(MANDIR)/man8/plymouth.8mandos.gz \
565
$(MANDIR)/man8/password-agent.8mandos.gz \
566
-rmdir $(LIBDIR)/mandos/plugins.d $(CONFDIR)/plugins.d \
567
$(LIBDIR)/mandos $(CONFDIR) $(KEYDIR) $(DRACUTMODULE)
568
if command -v update-initramfs >/dev/null; then \
569
update-initramfs -k all -u; \
570
elif command -v dracut >/dev/null; then \
571
for initrd in $(DESTDIR)/boot/initr*-$(LINUXVERSION); do \
572
test -w "$$initrd" && dracut --force "$$initrd"; \
573
done; \
574
fi
223
575
224
576
purge: purge-server purge-client
225
577
226
578
purge-server: uninstall-server
227
579
-rm --force $(CONFDIR)/mandos.conf $(CONFDIR)/clients.conf \
228
/etc/default/mandos /etc/init.d/mandos
580
$(DESTDIR)/etc/dbus-1/system.d/mandos.conf
581
$(DESTDIR)/etc/default/mandos \
582
$(DESTDIR)/etc/init.d/mandos \
583
$(SYSTEMD)/mandos.service \
584
$(DESTDIR)/run/mandos.pid \
585
$(DESTDIR)/var/run/mandos.pid
229
586
-rmdir $(CONFDIR)
230
587
231
588
purge-client: uninstall-client
232
-shred --remove $(KEYDIR)/seckey.txt
589
-shred --remove $(KEYDIR)/seckey.txt $(KEYDIR)/tls-privkey.pem
233
590
-rm --force $(CONFDIR)/plugin-runner.conf \
234
$(KEYDIR)/pubkey.txt $(KEYDIR)/seckey.txt
591
$(KEYDIR)/pubkey.txt $(KEYDIR)/seckey.txt \
592
$(KEYDIR)/tls-pubkey.txt $(KEYDIR)/tls-privkey.txt
235
593
-rmdir $(KEYDIR) $(CONFDIR)/plugins.d $(CONFDIR)
Loggerhead is a web-based interface for Breezy
Version: 2.0.2.dev0