espie 7d31773d38 next stage of PORTS_PRIVSEP: run most steps of the build under
BUILD_USER (aka _pbuild usually)

as far as I know, only _DEPFILE stuff is left out for now.

Tested on roughly 6000 ports without any ill effects

based on an initial remark by pirofti@
2017-12-05 17:46:43 +00:00

183 lines
5.0 KiB
Makefile

# $OpenBSD: pkgpath.mk,v 1.69 2017/12/05 17:46:43 espie Exp $
# ex:ts=4 sw=4 filetype=make:
# pkgpath.mk - 2003 Marc Espie
# This file is in the public domain.
# definitions common to bsd.port.mk and bsd.port.subdir.mk
PORTSDIR_PATH ?= ${PORTSDIR}:${PORTSDIR}/mystuff
TMPDIR ?= /tmp
DANGEROUS ?= No
_PERLSCRIPT = /usr/bin/perl ${PORTSDIR}/infrastructure/bin
.if !defined(PKGPATH)
PKGPATH != PORTSDIR_PATH=${PORTSDIR_PATH} \
${_PERLSCRIPT}/getpkgpath ${.CURDIR}
. if empty(PKGPATH)
ERRORS += "Fatal: can't figure out PKGPATH"
PKGPATH =${.CURDIR}
. endif
.endif
# Code to invoke to split dir,-multi,flavor
_pflavor_fragment = \
broken() { \
echo 1>&2 ">> Broken dependency: $$@ $$extra_msg"; \
reported=true; \
} ; \
multi=''; flavor=''; space=''; \
reported=false; found_dir=false; sawmulti=false; \
case "$$subdir" in \
"") \
broken "empty directory";; \
*,*) \
esubdir=$$subdir,; IFS=,; first=true; \
for i in $$esubdir; do \
if $$first; then \
dir=$$i; first=false; continue; \
fi; \
case X"$$i" in \
X-*) \
if $$sawmulti; then \
broken "several subpackages in $$subdir"; \
fi; \
multi="$$i"; sawmulti=true;; \
,) \
sawflavor=true;; \
*) \
sawflavor=true; \
flavor="$$flavor$$space$$i"; \
space=' ';; \
esac \
done; \
unset IFS;; \
*) \
dir=$$subdir;; \
esac; \
toset="PKGPATH=$$dir ARCH=${ARCH}"; \
case X"$$multi" in \
X) unset SUBPACKAGE || true;; \
*) toset="$$toset SUBPACKAGE=\"$$multi\"";; \
esac; \
case $$dir in \
*/) broken "$$dir ends with /";; \
*//*) broken "$$dir contains //";; \
esac; \
if $$sawflavor; then \
toset="$$toset FLAVOR=\"$$flavor\""; \
else \
unset FLAVOR||true; \
fi; \
if ! $$reported; then \
IFS=:; bases=${PORTSDIR_PATH}; \
for base in $$bases; do \
cd $$base 2>/dev/null || continue; \
if [ -L $$dir ]; then \
broken "$$base/$$dir is a symbolic link"; \
break; \
fi; \
if cd $$dir 2>/dev/null; then \
found_dir=true; \
break; \
fi; \
done; unset IFS; \
fi; \
$$found_dir || $$reported || broken "$$dir non existent"; \
$$found_dir
_flavor_fragment = sawflavor=false; ${_pflavor_fragment}
_depfile_fragment = \
case X$${_DEPENDS_FILE} in \
X) _DEPENDS_FILE=$$(mktemp ${TMPDIR}/depends.XXXXXXXXX|| exit 1); \
export _DEPENDS_FILE; \
trap "rm -f $${_DEPENDS_FILE}" 0; \
trap 'exit 1' 1 2 3 13 15;; \
esac
GLOBAL_DEPENDS_CACHE ?=
# XXX this is to speed up dpb builds beware of consequences !
.if !empty(GLOBAL_DEPENDS_CACHE)
_cache_fragment = \
${_PBUILD} mkdir -p ${GLOBAL_DEPENDS_CACHE}; \
${_MK_READABLE} ${GLOBAL_DEPENDS_CACHE}; \
_DEPENDS_CACHE=${GLOBAL_DEPENDS_CACHE}; \
PKG_PATH=${PKGPATH}; \
export _DEPENDS_CACHE PKGPATH
.else
_cache_fragment = \
case X$${_DEPENDS_CACHE} in \
X) _DEPENDS_CACHE=$$(${_PBUILD} mktemp -d ${TMPDIR}/dep_cache.XXXXXXXXX|| exit 1); \
${_MK_READABLE} $${_DEPENDS_CACHE}; \
export _DEPENDS_CACHE; \
trap "${_PBUILD} rm -rf 2>/dev/null $${_DEPENDS_CACHE}" 0; \
trap 'exit 1' 1 2 3 13 15;; \
esac; PKGPATH=${PKGPATH}; export PKGPATH
.endif
PORTS_PRIVSEP ?= No
FETCH_USER ?= _pfetch
BUILD_USER ?= _pbuild
.if ${PORTS_PRIVSEP:L} == "yes"
_PFETCH = ${SUDO} -u ${FETCH_USER}
_PBUILD = ${SUDO} -u ${BUILD_USER}
_MK_READABLE = ${_PBUILD} chmod a+rX
_PMAKE = cd ${.CURDIR} && PKGPATH=${PKGPATH} exec ${_PBUILD} ${MAKE}
_PREDIR = |${_PBUILD} tee >/dev/null
# Some operations will need sudo in privsep mode
_PSUDO = ${SUDO}
_pkgmode = ${BUILD_USER}:$$(id -g ${BUILD_USER})
_usermode = -o $$(id -u) -g $$(id -g)
.else
_PFETCH =
_PBUILD =
_PSUDO =
_PREDIR = >
_PMAKE = ${_MAKE}
_MK_READABLE = :
_pkgmode = $$(id -u):$$(id -g)
_usermode =
.endif
_SUDOMAKE = cd ${.CURDIR} && PKGPATH=${PKGPATH} exec ${SUDO} ${MAKE}
_MAKE = cd ${.CURDIR} && PKGPATH=${PKGPATH} exec ${MAKE}
_SUDOMAKESYS = cd ${.CURDIR} && umask 022 && PKGPATH=${PKGPATH} exec ${_FAKESUDO} ${MAKE}
REPORT_PROBLEM_LOGFILE ?=
.if !empty(REPORT_PROBLEM_LOGFILE)
REPORT_PROBLEM ?= echo "$$subdir ($@)">>${REPORT_PROBLEM_LOGFILE}
.else
REPORT_PROBLEM ?= exit 1
.endif
_recursive_targets = \
all build checksum configure deinstall distclean extract fake fetch \
fetch-all full-all-depends full-build-depends generate-readmes \
full-test-depends full-run-depends \
install install-all \
license-check manpages-check package patch \
prepare show-prepare-results repackage test regress reinstall \
update update-or-install update-or-install-all \
describe dump-vars print-plist print-plist-all \
print-plist-contents print-plist-libs \
show verbose-show show-size show-fake-size \
check-register check-register-all lock unlock show-prepare-test-results
_dangerous_recursive_targets = \
makesum plist update-patches update-plist
_recursive_depends_targets = \
all-dir-depends build-dir-depends test-dir-depends run-dir-depends
_recursive_cache_targets = \
print-plist-with-depends print-plist-libs-with-depends \
print-plist-all-with-depends print-package-signature \
print-update-signature port-lib-depends-check lib-depends-check \
all-lib-depends-args lib-depends-args run-depends-args \
port-wantlib-args print-package-args