forked from gravitational/teleport
-
Notifications
You must be signed in to change notification settings - Fork 0
Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
Move makefile BPF to common.mk (gravitational#22485)
Currently, a lot of makefile logic is copied between OSS end Ent repo. This PR moves BPF-related code to common.mk, so it doesn't need to be copied between reports. I'll move more code in the following PRs. I just want to keep diffs small.
- Loading branch information
Showing
2 changed files
with
57 additions
and
51 deletions.
There are no files selected for viewing
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,51 @@ | ||
| # Common makefile shared between Teleport OSS and Ent. | ||
|
|
||
| # libbpf version required by the build. | ||
| LIBBPF_VER := 1.0.1 | ||
|
|
||
| # Is this build targeting the same OS & architecture it is being compiled on, or | ||
| # will it require cross-compilation? We need to know this (especially for ARM) so we | ||
| # can set the cross-compiler path (and possibly feature flags) correctly. | ||
| IS_NATIVE_BUILD ?= $(if $(filter $(ARCH), $(shell go env GOARCH)),"yes","no") | ||
|
|
||
| # BPF support will only be built into Teleport if headers exist at build time. | ||
| BPF_MESSAGE := without-BPF-support | ||
|
|
||
| # We don't compile BPF for anything except regular non-FIPS linux/amd64 for now, as other builds | ||
| # have compilation issues that require fixing. | ||
| with_bpf := no | ||
| ifeq ("$(OS)","linux") | ||
| # True if $ARCH == amd64 || $ARCH == arm64 | ||
| ifneq (,$(filter "$(ARCH)","amd64" "arm64")) | ||
| # We only support BPF in native builds | ||
| ifeq ($(IS_NATIVE_BUILD),"yes") | ||
| ifneq ("$(wildcard /usr/libbpf-${LIBBPF_VER}/include/bpf/bpf.h)","") | ||
| with_bpf := yes | ||
| BPF_TAG := bpf | ||
| BPF_MESSAGE := with-BPF-support | ||
| CLANG ?= $(shell which clang || which clang-10) | ||
| LLVM_STRIP ?= $(shell which llvm-strip || which llvm-strip-10) | ||
| KERNEL_ARCH := $(shell uname -m | sed 's/x86_64/x86/g; s/aarch64/arm64/g') | ||
| INCLUDES := | ||
| ER_BPF_BUILDDIR := lib/bpf/bytecode | ||
| RS_BPF_BUILDDIR := lib/restrictedsession/bytecode | ||
|
|
||
| # Get Clang's default includes on this system. We'll explicitly add these dirs | ||
| # to the includes list when compiling with `-target bpf` because otherwise some | ||
| # architecture-specific dirs will be "missing" on some architectures/distros - | ||
| # headers such as asm/types.h, asm/byteorder.h, asm/socket.h, asm/sockios.h, | ||
| # sys/cdefs.h etc. might be missing. | ||
| # | ||
| # Use '-idirafter': Don't interfere with include mechanics except where the | ||
| # build would have failed anyways. | ||
| CLANG_BPF_SYS_INCLUDES = $(shell $(CLANG) -v -E - </dev/null 2>&1 \ | ||
| | sed -n '/<...> search starts here:/,/End of search list./{ s| \(/.*\)|-idirafter \1|p }') | ||
|
|
||
| STATIC_LIBS += -L/usr/libbpf-${LIBBPF_VER}/lib64/ -lbpf -lelf -lz | ||
| # Link static version of libraries required by Teleport (bpf, pcsc) to reduce system dependencies. Avoid dependencies on dynamic libraries if we already link the static version using --as-needed. | ||
| CGOFLAG = CGO_ENABLED=1 CGO_CFLAGS="-I/usr/libbpf-${LIBBPF_VER}/include" CGO_LDFLAGS="-Wl,-Bstatic $(STATIC_LIBS) -Wl,-Bdynamic -Wl,--as-needed" | ||
| CGOFLAG_TSH = CGO_ENABLED=1 CGO_LDFLAGS="-Wl,-Bstatic $(STATIC_LIBS_TSH) -Wl,-Bdynamic -Wl,--as-needed" | ||
| endif # bpf/bpf.h found | ||
| endif # IS_NATIVE_BUILD == yes | ||
| endif # ARCH == amd64 OR arm64 | ||
| endif # OS == linux |