1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
|
HOMEPAGE = "https://podman.io/"
SUMMARY = "A daemonless container engine"
DESCRIPTION = "Podman is a daemonless container engine for developing, \
managing, and running OCI Containers on your Linux System. Containers can \
either be run as root or in rootless mode. Simply put: \
`alias docker=podman`. \
"
inherit features_check
REQUIRED_DISTRO_FEATURES ?= "seccomp ipv6"
DEPENDS = " \
gpgme \
libseccomp \
${@bb.utils.filter('DISTRO_FEATURES', 'systemd', d)} \
gettext-native \
"
SRCREV = "227df90eb7c021097c9ba5f8000c83648a598028"
SRC_URI = " \
git://github.com/containers/libpod.git;branch=v5.4;protocol=https;destsuffix=${GO_SRCURI_DESTSUFFIX} \
${@bb.utils.contains('PACKAGECONFIG', 'rootless', 'file://50-podman-rootless.conf', '', d)} \
file://run-ptest \
"
LICENSE = "Apache-2.0"
LIC_FILES_CHKSUM = "file://src/import/LICENSE;md5=3d9b931fa23ab1cacd0087f9e2ee12c0"
GO_IMPORT = "import"
S = "${WORKDIR}/git"
PV = "v5.4.1"
CVE_STATUS[CVE-2022-2989] = "fixed-version: fixed since v4.3.0"
CVE_STATUS[CVE-2023-0778] = "fixed-version: fixed since v4.5.0"
PACKAGES =+ "${PN}-contrib"
PODMAN_PKG = "github.com/containers/libpod"
BUILDTAGS_EXTRA ?= "${@bb.utils.contains('VIRTUAL-RUNTIME_container_networking','cni','cni','',d)}"
BUILDTAGS ?= "seccomp varlink \
${@bb.utils.contains('DISTRO_FEATURES', 'systemd', 'systemd', '', d)} \
exclude_graphdriver_btrfs exclude_graphdriver_devicemapper ${BUILDTAGS_EXTRA}"
# overide LDFLAGS to allow podman to build without: "flag provided but not # defined: -Wl,-O1
export LDFLAGS = ""
# https://github.com/llvm/llvm-project/issues/53999
TOOLCHAIN = "gcc"
# podmans Makefile expects BUILDFLAGS to be set but go.bbclass defines them in GOBUILDFLAGS
export BUILDFLAGS = "${GOBUILDFLAGS}"
inherit go goarch
inherit container-host
inherit systemd pkgconfig ptest
do_configure[noexec] = "1"
EXTRA_OEMAKE = " \
PREFIX=${prefix} BINDIR=${bindir} LIBEXECDIR=${libexecdir} \
ETCDIR=${sysconfdir} TMPFILESDIR=${nonarch_libdir}/tmpfiles.d \
SYSTEMDDIR=${systemd_unitdir}/system USERSYSTEMDDIR=${systemd_user_unitdir} \
"
# remove 'docker' from the features if you don't want podman to
# build and install the docker wrapper. If docker is enabled in the
# variable, the podman package will rconfict with docker.
PODMAN_FEATURES ?= "docker"
PACKAGECONFIG ?= ""
PACKAGECONFIG[rootless] = ",,,fuse-overlayfs slirp4netns,,"
do_compile() {
cd ${S}/src
rm -rf .gopath
mkdir -p .gopath/src/"$(dirname "${PODMAN_PKG}")"
ln -sf ../../../../import/ .gopath/src/"${PODMAN_PKG}"
ln -sf "../../../import/vendor/github.com/varlink/" ".gopath/src/github.com/varlink"
export GOARCH="${BUILD_GOARCH}"
export GOPATH="${S}/src/.gopath"
export GOROOT="${STAGING_DIR_NATIVE}/${nonarch_libdir}/${HOST_SYS}/go"
cd ${S}/src/.gopath/src/"${PODMAN_PKG}"
# Pass the needed cflags/ldflags so that cgo
# can find the needed headers files and libraries
export GOARCH=${TARGET_GOARCH}
export CGO_ENABLED="1"
export CGO_CFLAGS="${CFLAGS} --sysroot=${STAGING_DIR_TARGET}"
export CGO_LDFLAGS="${LDFLAGS} --sysroot=${STAGING_DIR_TARGET}"
# podman now builds go-md2man and requires the host/build details
export NATIVE_GOOS=${BUILD_GOOS}
export NATIVE_GOARCH=${BUILD_GOARCH}
oe_runmake NATIVE_GOOS=${BUILD_GOOS} NATIVE_GOARCH=${BUILD_GOARCH} BUILDTAGS="${BUILDTAGS}"
}
do_install() {
cd ${S}/src/.gopath/src/"${PODMAN_PKG}"
export GOARCH="${BUILD_GOARCH}"
export GOPATH="${S}/src/.gopath"
export GOROOT="${STAGING_DIR_NATIVE}/${nonarch_libdir}/${HOST_SYS}/go"
oe_runmake install DESTDIR="${D}"
if ${@bb.utils.contains('PODMAN_FEATURES', 'docker', 'true', 'false', d)}; then
oe_runmake install.docker DESTDIR="${D}"
fi
# Silence docker emulation warnings.
mkdir -p ${D}/etc/containers
touch ${D}/etc/containers/nodocker
if ${@bb.utils.contains('PACKAGECONFIG', 'rootless', 'true', 'false', d)}; then
install -d "${D}${sysconfdir}/sysctl.d"
install -m 0644 "${UNPACKDIR}/50-podman-rootless.conf" "${D}${sysconfdir}/sysctl.d"
install -d "${D}${sysconfdir}/containers"
cat <<-EOF >> "${D}${sysconfdir}/containers/containers.conf"
[NETWORK]
default_rootless_network_cmd="slirp4netns"
EOF
fi
}
do_install_ptest () {
cp ${S}/src/import/Makefile ${D}${PTEST_PATH}
install -d ${D}${PTEST_PATH}/test
cp -r ${S}/src/import/test/system ${D}${PTEST_PATH}/test
# Some compatibility links for the Makefile assumptions.
install -d ${D}${PTEST_PATH}/bin
ln -s ${bindir}/podman ${D}${PTEST_PATH}/bin/podman
ln -s ${bindir}/podman-remote ${D}${PTEST_PATH}/bin/podman-remote
}
FILES:${PN} += " \
${systemd_unitdir}/system/* \
${nonarch_libdir}/systemd/* \
${systemd_user_unitdir}/* \
${nonarch_libdir}/tmpfiles.d/* \
${datadir}/user-tmpfiles.d/* \
${sysconfdir}/cni \
"
SYSTEMD_SERVICE:${PN} = "podman.service podman.socket"
# The other option for this is "busybox", since meta-virt ensures
# that busybox is configured with nsenter
VIRTUAL-RUNTIME_base-utils-nsenter ?= "util-linux-nsenter"
COMPATIBLE_HOST = "^(?!mips).*"
RDEPENDS:${PN} += "\
catatonit conmon ${VIRTUAL-RUNTIME_container_runtime} iptables libdevmapper \
${VIRTUAL-RUNTIME_container_dns} ${VIRTUAL-RUNTIME_container_networking} ${VIRTUAL-RUNTIME_base-utils-nsenter} \
"
RRECOMMENDS:${PN} += "slirp4netns \
kernel-module-xt-masquerade \
kernel-module-xt-comment \
kernel-module-xt-mark \
kernel-module-xt-addrtype \
kernel-module-xt-conntrack \
kernel-module-xt-tcpudp \
"
RCONFLICTS:${PN} = "${@bb.utils.contains('PACKAGECONFIG', 'docker', 'docker', '', d)}"
RDEPENDS:${PN}-ptest += " \
bash \
bats \
buildah \
coreutils \
file \
gnupg \
jq \
make \
skopeo \
tar \
"
|
