| # Copyright 1999-2016 Gentoo Foundation |
| # Distributed under the terms of the GNU General Public License v2 |
| |
| EAPI="5" |
| MODULES_OPTIONAL_USE=modules |
| inherit linux-info linux-mod |
| |
| DESCRIPTION="IPset tool for iptables, successor to ippool" |
| HOMEPAGE="http://ipset.netfilter.org/" |
| SRC_URI="http://ipset.netfilter.org/${P}.tar.bz2" |
| |
| LICENSE="GPL-2" |
| SLOT="0" |
| KEYWORDS="*" |
| |
| RDEPEND=">=net-firewall/iptables-1.4.7 |
| net-libs/libmnl" |
| DEPEND="${RDEPEND}" |
| |
| DOCS=( ChangeLog INSTALL README UPGRADE ) |
| |
| # configurable from outside, e.g. /etc/make.conf |
| IP_NF_SET_MAX=${IP_NF_SET_MAX:-256} |
| |
| BUILD_TARGETS="modules" |
| MODULE_NAMES_ARG="kernel/net/netfilter/ipset/:${S}/kernel/net/netfilter/ipset" |
| MODULE_NAMES="xt_set(kernel/net/netfilter/ipset/:${S}/kernel/net/netfilter/)" |
| for i in ip_set{,_bitmap_{ip{,mac},port},_hash_{ip{,port{,ip,net}},net{,port{,net},iface,net}},_list_set}; do |
| MODULE_NAMES+=" ${i}(${MODULE_NAMES_ARG})" |
| done |
| |
| pkg_setup() { |
| get_version |
| CONFIG_CHECK="NETFILTER" |
| ERROR_NETFILTER="ipset requires NETFILTER support in your kernel." |
| # It does still build without NET_NS, but it may be needed in future. |
| #CONFIG_CHECK="${CONFIG_CHECK} NET_NS" |
| #ERROR_NET_NS="ipset requires NET_NS (network namespace) support in your kernel." |
| |
| build_modules=0 |
| if use modules; then |
| kernel_is -lt 2 6 35 && die "${PN} requires kernel greater then 2.6.35." |
| if linux_config_src_exists && linux_chkconfig_builtin "MODULES" ; then |
| if linux_chkconfig_present "IP_NF_SET" || \ |
| linux_chkconfig_present "IP_SET"; then #274577 |
| eerror "There is IP{,_NF}_SET or NETFILTER_XT_SET support in your kernel." |
| eerror "Please either build ipset with modules USE flag disabled" |
| eerror "or rebuild kernel without IP_SET support and make sure" |
| eerror "there is NO kernel ip_set* modules in /lib/modules/<your_kernel>/... ." |
| die "USE=modules and in-kernel ipset support detected." |
| else |
| einfo "Modular kernel detected. Gonna build kernel modules..." |
| build_modules=1 |
| fi |
| else |
| eerror "Nonmodular kernel detected, but USE=modules. Either build" |
| eerror "modular kernel (without IP_SET) or disable USE=modules" |
| die "Nonmodular kernel detected, will not build kernel modules" |
| fi |
| fi |
| [[ ${build_modules} -eq 1 ]] && linux-mod_pkg_setup |
| } |
| |
| src_configure() { |
| econf \ |
| $(use_with modules kmod) \ |
| --disable-static \ |
| --with-maxsets=${IP_NF_SET_MAX} \ |
| --libdir="${EPREFIX}/$(get_libdir)" \ |
| --with-ksource="${KV_DIR}" \ |
| --with-kbuild="${KV_OUT_DIR}" |
| } |
| |
| src_compile() { |
| einfo "Building userspace" |
| emake |
| |
| if [[ ${build_modules} -eq 1 ]]; then |
| einfo "Building kernel modules" |
| set_arch_to_kernel |
| emake modules |
| fi |
| } |
| |
| src_install() { |
| einfo "Installing userspace" |
| default |
| prune_libtool_files |
| |
| newinitd "${FILESDIR}"/ipset.initd-r4 ${PN} |
| newconfd "${FILESDIR}"/ipset.confd ${PN} |
| keepdir /var/lib/ipset |
| |
| if [[ ${build_modules} -eq 1 ]]; then |
| einfo "Installing kernel modules" |
| linux-mod_src_install |
| fi |
| } |