From: "Sam James" <sam@gentoo.org>
To: gentoo-commits@lists.gentoo.org
Subject: [gentoo-commits] repo/gentoo:master commit in: net-firewall/iptables/
Date: Tue, 20 Feb 2024 05:24:58 +0000 (UTC) [thread overview]
Message-ID: <1708406460.3e7b22c10763d2352b5770266c755667549e94f9.sam@gentoo> (raw)
commit: 3e7b22c10763d2352b5770266c755667549e94f9
Author: Sam James <sam <AT> gentoo <DOT> org>
AuthorDate: Tue Feb 20 05:21:00 2024 +0000
Commit: Sam James <sam <AT> gentoo <DOT> org>
CommitDate: Tue Feb 20 05:21:00 2024 +0000
URL: https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=3e7b22c1
net-firewall/iptables: drop usr-ldscript
Per news item.
Bug: https://bugs.gentoo.org/332175
Signed-off-by: Sam James <sam <AT> gentoo.org>
net-firewall/iptables/iptables-1.8.10-r1.ebuild | 179 ++++++++++++++++++++++++
1 file changed, 179 insertions(+)
diff --git a/net-firewall/iptables/iptables-1.8.10-r1.ebuild b/net-firewall/iptables/iptables-1.8.10-r1.ebuild
new file mode 100644
index 000000000000..4dc9d9c412ed
--- /dev/null
+++ b/net-firewall/iptables/iptables-1.8.10-r1.ebuild
@@ -0,0 +1,179 @@
+# Copyright 1999-2024 Gentoo Authors
+# Distributed under the terms of the GNU General Public License v2
+
+EAPI=8
+
+inherit systemd toolchain-funcs autotools flag-o-matic
+
+DESCRIPTION="Linux kernel (2.4+) firewall, NAT and packet mangling tools"
+HOMEPAGE="https://www.netfilter.org/projects/iptables/"
+SRC_URI="https://www.netfilter.org/projects/iptables/files/${P}.tar.xz"
+
+LICENSE="GPL-2"
+# Subslot reflects PV when libxtables and/or libip*tc was changed
+# the last time.
+SLOT="0/1.8.3"
+KEYWORDS="~alpha ~amd64 ~arm ~arm64 ~hppa ~ia64 ~loong ~m68k ~mips ~ppc ~ppc64 ~riscv ~s390 ~sparc ~x86"
+IUSE="conntrack netlink nftables pcap static-libs test"
+RESTRICT="!test? ( test )"
+# TODO: skip tests needing nftables if no xtables-nft-multi (bug #890628)
+REQUIRED_USE="test? ( conntrack nftables )"
+
+COMMON_DEPEND="
+ conntrack? ( >=net-libs/libnetfilter_conntrack-1.0.6 )
+ netlink? ( net-libs/libnfnetlink )
+ nftables? (
+ >=net-libs/libmnl-1.0:=
+ >=net-libs/libnftnl-1.2.6:=
+ )
+ pcap? ( net-libs/libpcap )
+"
+DEPEND="
+ ${COMMON_DEPEND}
+ virtual/os-headers
+ >=sys-kernel/linux-headers-4.4:0
+"
+BDEPEND="
+ virtual/pkgconfig
+ nftables? (
+ app-alternatives/lex
+ app-alternatives/yacc
+ )
+"
+RDEPEND="
+ ${COMMON_DEPEND}
+ nftables? ( net-misc/ethertypes )
+ !<net-firewall/ebtables-2.0.11-r1
+ !<net-firewall/arptables-0.0.5-r1
+"
+IDEPEND=">=app-eselect/eselect-iptables-20220320"
+
+PATCHES=(
+ "${FILESDIR}"/${PN}-1.8.4-no-symlinks.patch
+)
+
+src_prepare() {
+ # Use the saner headers from the kernel
+ rm include/linux/{kernel,types}.h || die
+
+ default
+ eautoreconf
+}
+
+src_configure() {
+ # Some libs use $(AR) rather than libtool to build, bug #444282
+ tc-export AR
+
+ # Hack around struct mismatches between userland & kernel for some ABIs
+ # bug #472388
+ use amd64 && [[ ${ABI} == "x32" ]] && append-flags -fpack-struct
+
+ sed -i \
+ -e "/nfnetlink=[01]/s:=[01]:=$(usex netlink 1 0):" \
+ -e "/nfconntrack=[01]/s:=[01]:=$(usex conntrack 1 0):" \
+ configure || die
+
+ local myeconfargs=(
+ --sbindir="${EPREFIX}/sbin"
+ --libexecdir="${EPREFIX}/$(get_libdir)"
+ --enable-devel
+ --enable-ipv6
+ --enable-shared
+ $(use_enable nftables)
+ $(use_enable pcap bpf-compiler)
+ $(use_enable pcap nfsynproxy)
+ $(use_enable static-libs static)
+ )
+
+ econf "${myeconfargs[@]}"
+}
+
+src_compile() {
+ emake V=1
+}
+
+src_install() {
+ default
+
+ # Managed by eselect-iptables
+ # https://bugs.gentoo.org/881295
+ rm "${ED}/usr/bin/iptables-xml" || die
+
+ dodoc iptables/iptables.xslt
+
+ # All the iptables binaries are in /sbin, so might as well
+ # put these small files in with them
+ into /
+ dosbin iptables/iptables-apply
+ dosym iptables-apply /sbin/ip6tables-apply
+ doman iptables/iptables-apply.8
+
+ insinto /usr/include
+ doins include/ip{,6}tables.h
+ insinto /usr/include/iptables
+ doins include/iptables/internal.h
+
+ keepdir /var/lib/ip{,6}tables
+ newinitd "${FILESDIR}"/${PN}-r3.init iptables
+ newconfd "${FILESDIR}"/${PN}-r1.confd iptables
+ dosym iptables /etc/init.d/ip6tables
+ newconfd "${FILESDIR}"/ip6tables-r1.confd ip6tables
+
+ if use nftables; then
+ # Bug #647458
+ rm "${ED}"/etc/ethertypes || die
+
+ # Bugs #660886 and #669894
+ rm "${ED}"/sbin/{arptables,ebtables}{,-{save,restore}} || die
+ fi
+
+ systemd_dounit "${FILESDIR}"/systemd/ip{,6}tables-{re,}store.service
+
+ find "${ED}" -type f -name "*.la" -delete || die
+}
+
+pkg_postinst() {
+ local default_iptables="xtables-legacy-multi"
+ if ! eselect iptables show &>/dev/null; then
+ elog "Current iptables implementation is unset, setting to ${default_iptables}"
+ eselect iptables set "${default_iptables}"
+ fi
+
+ if use nftables; then
+ local tables
+ for tables in {arp,eb}tables; do
+ if ! eselect ${tables} show &>/dev/null; then
+ elog "Current ${tables} implementation is unset, setting to ${default_iptables}"
+ eselect ${tables} set xtables-nft-multi
+ fi
+ done
+ fi
+
+ eselect iptables show
+}
+
+pkg_prerm() {
+ if [[ -z ${REPLACED_BY_VERSION} ]]; then
+ elog "Unsetting iptables symlinks before removal"
+ eselect iptables unset
+ fi
+
+ if ! has_version 'net-firewall/ebtables'; then
+ elog "Unsetting ebtables symlinks before removal"
+ eselect ebtables unset
+ elif [[ -z ${REPLACED_BY_VERSION} ]]; then
+ elog "Resetting ebtables symlinks to ebtables-legacy"
+ eselect ebtables set ebtables-legacy
+ fi
+
+ if ! has_version 'net-firewall/arptables'; then
+ elog "Unsetting arptables symlinks before removal"
+ eselect arptables unset
+ elif [[ -z ${REPLACED_BY_VERSION} ]]; then
+ elog "Resetting arptables symlinks to arptables-legacy"
+ eselect arptables set arptables-legacy
+ fi
+
+ # The eselect module failing should not be fatal
+ return 0
+}
next reply other threads:[~2024-02-20 5:25 UTC|newest]
Thread overview: 127+ messages / expand[flat|nested] mbox.gz Atom feed top
2024-02-20 5:24 Sam James [this message]
-- strict thread matches above, loose matches on Subject: below --
2025-03-07 17:28 [gentoo-commits] repo/gentoo:master commit in: net-firewall/iptables/ Sam James
2025-01-12 14:49 Sam James
2025-01-12 14:10 Sam James
2025-01-12 13:42 Sam James
2025-01-12 13:42 Sam James
2025-01-12 13:16 Sam James
2025-01-12 13:16 Sam James
2025-01-09 0:28 Sam James
2024-12-14 8:05 Sam James
2024-12-12 19:31 Arthur Zamarin
2024-12-12 19:31 Arthur Zamarin
2024-12-12 11:14 Sam James
2024-12-12 11:14 Sam James
2024-12-12 11:14 Sam James
2024-11-11 14:38 Sam James
2024-05-30 3:24 Sam James
2024-05-30 3:24 Sam James
2024-05-30 3:24 Sam James
2024-05-30 3:24 Sam James
2024-05-30 3:24 Sam James
2024-05-30 3:24 Sam James
2024-05-30 3:24 Sam James
2024-05-19 23:10 Ionen Wolkens
2024-03-16 12:50 Arthur Zamarin
2024-03-13 23:57 Sam James
2024-03-13 20:58 Sam James
2024-03-13 0:54 Sam James
2024-03-12 21:24 Sam James
2024-03-12 21:24 Arthur Zamarin
2024-03-12 8:13 Arthur Zamarin
2024-02-06 22:49 Sam James
2024-01-30 9:18 Sam James
2023-10-11 5:21 Sam James
2023-04-29 8:22 Arthur Zamarin
2023-04-03 18:38 Arthur Zamarin
2023-04-03 18:38 Arthur Zamarin
2023-04-03 18:38 Arthur Zamarin
2023-03-07 16:36 Arthur Zamarin
2023-03-07 16:36 Arthur Zamarin
2023-03-07 16:36 Arthur Zamarin
2023-03-04 13:51 Arthur Zamarin
2022-11-14 20:35 Mike Gilbert
2022-09-17 5:38 Arthur Zamarin
2022-09-16 7:57 Arthur Zamarin
2022-09-15 16:57 Arthur Zamarin
2022-09-07 1:50 Sam James
2022-09-06 21:49 Jakov Smolić
2022-09-06 21:44 Jakov Smolić
2022-09-06 21:28 Sam James
2022-09-06 21:28 Sam James
2022-07-04 17:14 Sam James
2022-06-17 20:50 Sam James
2022-04-29 10:21 Sam James
2022-04-09 19:43 Arthur Zamarin
2022-04-09 19:27 Arthur Zamarin
2022-04-05 2:37 Sam James
2022-04-02 12:35 Arthur Zamarin
2022-04-02 8:17 Agostino Sarubbo
2022-04-02 8:03 Agostino Sarubbo
2022-04-02 7:59 Agostino Sarubbo
2022-04-02 7:33 Arthur Zamarin
2022-03-20 21:28 Sam James
2022-02-18 2:44 Sam James
2022-02-13 14:58 Sam James
2021-07-23 15:57 Mike Gilbert
2021-05-09 1:29 Sam James
2021-05-08 18:58 Sam James
2021-05-08 18:55 Sam James
2021-05-08 18:55 Sam James
2021-05-08 18:49 Sam James
2021-05-08 18:44 Sam James
2021-05-08 18:41 Sam James
2021-01-16 13:09 Lars Wendler
2020-11-01 23:41 Thomas Deutschmann
2020-09-07 8:47 Sergei Trofimovich
2020-09-06 7:49 Sergei Trofimovich
2020-08-29 23:50 Sam James
2020-08-21 1:00 Patrick McLean
2020-08-18 16:52 Agostino Sarubbo
2020-08-18 11:22 Agostino Sarubbo
2020-08-18 11:18 Agostino Sarubbo
2020-08-18 11:16 Agostino Sarubbo
2020-08-17 14:52 Agostino Sarubbo
2020-08-17 12:20 Sam James
2020-06-04 17:45 Lars Wendler
2020-06-04 17:45 Lars Wendler
2020-05-09 2:55 Patrick McLean
2020-03-02 18:25 Thomas Deutschmann
2019-12-03 7:09 Lars Wendler
2019-06-02 22:18 Thomas Deutschmann
2019-05-28 0:41 Lars Wendler
2019-05-04 19:32 Andreas K. Hüttel
2018-11-28 22:30 Matt Turner
2018-11-14 10:13 Lars Wendler
2018-10-29 22:11 Thomas Deutschmann
2018-10-24 7:35 Lars Wendler
2018-09-28 14:40 Mikle Kolyada
2018-09-17 23:10 Matt Turner
2018-09-17 23:10 Matt Turner
2018-09-02 11:12 Sergei Trofimovich
2018-07-09 22:06 Thomas Deutschmann
2018-07-09 9:04 Lars Wendler
2018-07-09 9:04 Lars Wendler
2018-06-27 22:26 Mart Raudsepp
2018-05-19 18:53 Robin H. Johnson
2018-04-22 1:33 Aaron Bauman
2018-03-07 19:26 Mike Gilbert
2018-02-03 11:47 Lars Wendler
2018-02-03 11:47 Lars Wendler
2018-01-10 6:19 Markus Meier
2018-01-04 20:40 Mikle Kolyada
2017-12-25 9:28 Sergei Trofimovich
2017-12-21 8:48 Sergei Trofimovich
2017-12-19 15:46 Thomas Deutschmann
2017-11-26 23:11 David Seifert
2017-10-18 6:11 Sergei Trofimovich
2017-01-30 9:33 Lars Wendler
2017-01-28 14:24 Lars Wendler
2016-08-19 1:50 Mike Gilbert
2015-11-28 20:26 Mike Frysinger
2015-08-20 17:31 Mike Frysinger
2015-08-14 9:28 Mike Frysinger
2015-08-14 9:28 Mike Frysinger
2015-08-14 9:28 Mike Frysinger
2015-08-14 9:28 Mike Frysinger
2015-08-14 9:28 Mike Frysinger
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=1708406460.3e7b22c10763d2352b5770266c755667549e94f9.sam@gentoo \
--to=sam@gentoo.org \
--cc=gentoo-commits@lists.gentoo.org \
--cc=gentoo-dev@lists.gentoo.org \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox