import shutil
import wafsamba, samba_dist, samba_git, samba_version, samba_utils
from waflib import Options, Scripting, Logs, Context, Errors
+from waflib.Tools import bison
samba_dist.DIST_DIRS('.')
samba_dist.DIST_BLACKLIST('.gitignore .bzrignore source4/selftest/provisions')
opt.RECURSE('packaging')
opt.RECURSE('lib/ldb')
opt.RECURSE('selftest')
- opt.RECURSE('source4/lib/tls')
opt.RECURSE('source4/dsdb/samdb/ldb_modules')
opt.RECURSE('pidl')
opt.RECURSE('source3')
opt.RECURSE('lib/crypto')
opt.RECURSE('ctdb')
+# Optional Libraries
+# ------------------
+#
+# Most of the calls to opt.add_option() use default=True for the --with case
+#
+# To assist users and distributors to build Samba with the full feature
+# set, the build system will abort if our dependent libraries and their
+# header files are not found on the target system. This will mean for
+# example, that xattr, acl and ldap headers must be installed for the
+# default build to complete. The configure system will check for these
+# headers, and the error message will indicate the option (such as
+# --without-acl-support) that can be specified to skip this requirement.
+#
+# This will assist users and in particular distributors in building fully
+# functional packages, while allowing those on systems truly without these
+# facilities to continue to build Samba after careful consideration.
+#
+# It also ensures our container image generation in bootstrap/ is correct
+# as otherwise a missing package there would just silently work
opt.samba_add_onoff_option('pthreadpool', with_name="enable", without_name="disable", default=True)
help='build Samba with system MIT Kerberos. ' +
'You may specify list of paths where Kerberos is installed (e.g. /usr/local /usr/kerberos) to search krb5-config',
action='callback', callback=system_mitkrb5_callback, dest='with_system_mitkrb5', default=False)
+
+ opt.add_option('--with-experimental-mit-ad-dc',
+ help='Enable the experimental MIT Kerberos-backed AD DC. ' +
+ 'Note that security patches are not issued for this configuration',
+ action='store_true',
+ dest='with_experimental_mit_ad_dc',
+ default=False)
+
opt.add_option('--with-system-mitkdc',
help=('Specify the path to the krb5kdc binary from MIT Kerberos'),
type="string",
help='disable AD DC functionality (enables only Samba FS (File Server, Winbind, NMBD) and client utilities.',
action='store_true', dest='without_ad_dc', default=False)
- opt.add_option('--with-ntvfs-fileserver',
- help='enable the deprecated NTVFS file server from the original Samba4 branch (default if --enable-selftest specified). Conflicts with --with-system-mitkrb5 and --without-ad-dc',
- action='store_true', dest='with_ntvfs_fileserver')
-
- opt.add_option('--without-ntvfs-fileserver',
- help='disable the deprecated NTVFS file server from the original Samba4 branch',
- action='store_false', dest='with_ntvfs_fileserver')
-
opt.add_option('--with-pie',
help=("Build Position Independent Executables " +
"(default if supported by compiler)"),
conf.env.DEVELOPER = True
# if we are in a git tree without a pre-commit hook, install a
# simple default.
- pre_commit_hook = os.path.join(Context.g_module.top, '.git/hooks/pre-commit')
- if (os.path.isdir(os.path.dirname(pre_commit_hook)) and
- not os.path.exists(pre_commit_hook)):
- shutil.copy(os.path.join(Context.g_module.top, 'script/git-hooks/pre-commit-hook'),
- pre_commit_hook)
+ # we need git for 'waf dist'
+ githooksdir = None
+ conf.find_program('git', var='GIT')
+ if 'GIT' in conf.env:
+ githooksdir = conf.CHECK_COMMAND('%s rev-parse --git-path hooks' % conf.env.GIT[0],
+ msg='Finding githooks directory',
+ define=None,
+ on_target=False)
+ if githooksdir and os.path.isdir(githooksdir):
+ pre_commit_hook = os.path.join(githooksdir, 'pre-commit')
+ if not os.path.exists(pre_commit_hook):
+ Logs.info("Installing script/git-hooks/pre-commit-hook as %s" %
+ pre_commit_hook)
+ shutil.copy(os.path.join(Context.g_module.top, 'script/git-hooks/pre-commit-hook'),
+ pre_commit_hook)
conf.ADD_EXTRA_INCLUDES('#include/public #source4 #lib #source4/lib #source4/include #include #lib/replace')
if not (Options.options.without_ad_dc):
raise Errors.WafError('--disable-python requires --without-ad-dc')
- conf.SAMBA_CHECK_PYTHON(mandatory=True, version=(2, 6, 0))
- conf.SAMBA_CHECK_PYTHON_HEADERS(mandatory=(not conf.env.disable_python))
+ conf.SAMBA_CHECK_PYTHON()
+ conf.SAMBA_CHECK_PYTHON_HEADERS()
if sys.platform == 'darwin' and not conf.env['HAVE_ENVIRON_DECL']:
# Mac OSX needs to have this and it's also needed that the python is compiled with this
if sys.platform == 'darwin':
conf.ADD_LDFLAGS('-framework CoreFoundation')
- if int(conf.env['PYTHON_VERSION'][0]) >= 3:
- raise Errors.WafError('Python version 3.x is not supported by Samba yet')
-
conf.RECURSE('dynconfig')
conf.RECURSE('selftest')
+ conf.CHECK_CFG(package='zlib', minversion='1.2.3',
+ args='--cflags --libs',
+ mandatory=True)
+ conf.CHECK_FUNCS_IN('inflateInit2', 'z')
+
if conf.CHECK_FOR_THIRD_PARTY():
conf.RECURSE('third_party')
else:
- if not conf.CHECK_ZLIB():
- raise Errors.WafError('zlib development packages have not been found.\nIf third_party is installed, check that it is in the proper place.')
- else:
- conf.define('USING_SYSTEM_ZLIB',1)
if not conf.CHECK_POPT():
raise Errors.WafError('popt development packages have not been found.\nIf third_party is installed, check that it is in the proper place.')
if not (Options.options.without_ad_dc):
conf.DEFINE('AD_DC_BUILD_IS_ENABLED', 1)
+ # Check for flex before doing the embedded heimdal checks so we can bail if we don't have it.
+ Logs.info("Checking for flex")
+ conf.find_program('flex', var='FLEX')
+ if conf.env['FLEX']:
+ conf.CHECK_COMMAND('%s --version' % conf.env.FLEX[0],
+ msg='Using flex version',
+ define=None,
+ on_target=False)
+ conf.env.FLEXFLAGS = ['-t']
+
+ # #line statements in these generated files cause issues for lcov
+ conf.env.FLEXFLAGS += ["--noline"]
+
+ Logs.info("Checking for bison")
+ bison.configure(conf)
+ if conf.env['BISON']:
+ conf.CHECK_COMMAND('%s --version | head -n1' % conf.env.BISON[0],
+ msg='Using bison version',
+ define=None,
+ on_target=False)
+
+ # #line statements in these generated files cause issues for lcov
+ conf.env.BISONFLAGS += ["--no-line"]
+
if Options.options.with_system_mitkrb5:
+ if not Options.options.with_experimental_mit_ad_dc and \
+ not Options.options.without_ad_dc:
+ raise Errors.WafError('The MIT Kerberos build of Samba as an AD DC ' +
+ 'is experimental. Therefore '
+ '--with-system-mitkrb5 requires either ' +
+ '--with-experimental-mit-ad-dc or ' +
+ '--without-ad-dc')
+
conf.PROCESS_SEPARATE_RULE('system_mitkrb5')
+
if not (Options.options.without_ad_dc or Options.options.with_system_mitkrb5):
conf.DEFINE('AD_DC_BUILD_IS_ENABLED', 1)
if Options.options.with_system_heimdalkrb5:
if Options.options.with_system_mitkrb5:
- raise Utils.WafError('--with-system-heimdalkrb5 conflicts with ' +
- '--with-system-mitkrb5')
+ raise Errors.WafError('--with-system-heimdalkrb5 conflicts with ' +
+ '--with-system-mitkrb5')
if not Options.options.without_ad_dc:
- raise Utils.WafError('--with-system-heimdalkrb5 requires ' +
- '--without-ad-dc')
+ raise Errors.WafError('--with-system-heimdalkrb5 requires ' +
+ '--without-ad-dc')
conf.env.SYSTEM_LIBS += ('heimdal', 'asn1', 'com_err', 'roken',
'hx509', 'wind', 'gssapi', 'hcrypto',
'krb5', 'heimbase', 'asn1_compile',
'compile_et', 'kdc', 'hdb', 'heimntlm')
+ conf.PROCESS_SEPARATE_RULE('system_heimdal')
+
+ if not conf.CONFIG_GET('KRB5_VENDOR'):
+ conf.PROCESS_SEPARATE_RULE('embedded_heimdal')
+
+ conf.PROCESS_SEPARATE_RULE('system_gnutls')
- # Only process heimdal_build for non-MIT KRB5 builds
- # When MIT KRB5 checks are done as above, conf.env.KRB5_VENDOR will be set
- # to the lowcased output of 'krb5-config --vendor'.
- # If it is not set or the output is 'heimdal', we are dealing with
- # system-provided or embedded Heimdal build
- if conf.CONFIG_GET('KRB5_VENDOR') in (None, 'heimdal'):
- conf.RECURSE('source4/heimdal_build')
- conf.RECURSE('source4/lib/tls')
conf.RECURSE('source4/dsdb/samdb/ldb_modules')
conf.RECURSE('source4/ntvfs/sysdep')
conf.RECURSE('lib/util')
conf.RECURSE('lib/crypto')
conf.RECURSE('pidl')
if conf.CONFIG_GET('ENABLE_SELFTEST'):
- if Options.options.with_ntvfs_fileserver != False:
- if not (Options.options.without_ad_dc):
- conf.DEFINE('WITH_NTVFS_FILESERVER', 1)
- if Options.options.with_ntvfs_fileserver == False:
- if not (Options.options.without_ad_dc):
- raise Errors.WafError('--without-ntvfs-fileserver conflicts with --enable-selftest while building the AD DC')
+ if not (Options.options.without_ad_dc):
+ conf.DEFINE('WITH_NTVFS_FILESERVER', 1)
conf.RECURSE('testsuite/unittests')
- if Options.options.with_ntvfs_fileserver == True:
- if Options.options.without_ad_dc:
- raise Errors.WafError('--with-ntvfs-fileserver conflicts with --without-ad-dc')
- conf.DEFINE('WITH_NTVFS_FILESERVER', 1)
-
if Options.options.with_pthreadpool:
- if conf.CONFIG_SET('HAVE_PTHREAD') and \
- conf.CONFIG_SET('HAVE___THREAD') and \
- conf.CONFIG_SET('HAVE_ATOMIC_THREAD_FENCE_SUPPORT'):
+ if conf.CONFIG_SET('HAVE_PTHREAD'):
conf.DEFINE('WITH_PTHREADPOOL', '1')
else:
- if not conf.CONFIG_SET('HAVE_PTHREAD'):
- Logs.warn("pthreadpool support cannot be enabled when pthread support was not found")
- if not conf.CONFIG_SET('HAVE_ATOMIC_THREAD_FENCE_SUPPORT'):
- Logs.warn("""pthreadpool support cannot be enabled when there is
- no support for atomic_thead_fence()""")
- if not conf.CONFIG_SET('HAVE___THREAD'):
- Logs.warn("pthreadpool support cannot be enabled when __thread support was not found")
+ Logs.warn("pthreadpool support cannot be enabled when pthread support was not found")
conf.undefine('WITH_PTHREADPOOL')
conf.SET_TARGET_TYPE('jansson', 'EMPTY')
# allows us to find problems on our development hosts faster.
# It also results in faster load time.
- conf.env.asneeded_ldflags = conf.ADD_LDFLAGS('-Wl,--as-needed', testflags=True)
+ if conf.CHECK_LDFLAGS('-Wl,--as-needed'):
+ conf.env.append_unique('LINKFLAGS', '-Wl,--as-needed')
if not conf.CHECK_NEED_LC("-lc not needed"):
conf.ADD_LDFLAGS('-lc', testflags=False)
msg="Checking compiler for full RELRO support"):
conf.env['ENABLE_RELRO'] = True
+ #
+ # FreeBSD is broken. It doesn't include 'extern char **environ'
+ # in any shared library, but statically inside crt0.o.
+ #
+ # If we're running on a FreeBSD with the GNU linker ld we
+ # can get around this by explicitly telling the linker to
+ # ignore 'environ' as an unresolved symbol in a shared library.
+ #
+ # However, the clang linker ld.lld-XX is broken in that it
+ # doesn't have that option.
+ #
+ # First try to see if have '-Wl,--ignore-unresolved-symbol,environ'
+ # and just use that if so.
+ #
+ # If not, we have to use '-Wl,--allow-shlib-undefined' instead
+ # and remove all instances of '-Wl,-no-undefined'.
+
+ if sys.platform.startswith('freebsd'):
+ # Do we have Wl,--ignore-unresolved-symbol,environ ?
+ flag_added = conf.ADD_LDFLAGS('-Wl,--ignore-unresolved-symbol,environ', testflags=True)
+ if not flag_added:
+ # No, fall back to -Wl,--allow-shlib-undefined.
+ conf.ADD_LDFLAGS('-Wl,--allow-shlib-undefined', testflags=True)
+ # Remove any uses of '-Wl,-no-undefined'
+ conf.env['EXTRA_LDFLAGS'] = list(filter(('-Wl,-no-undefined').__ne__, conf.env['EXTRA_LDFLAGS']))
+ # And make sure we don't try and remove it again when 'allow_undefined_symbols=true'
+ conf.env.undefined_ldflags = []
+
conf.SAMBA_CONFIG_H('include/config.h')
def etags(ctx):
os.system('pwd')
list = recursive_dirlist('../buildtools/wafsamba', '.', pattern='*.py')
- cmd='PYTHONPATH=bin/python pydoctor --project-name=wafsamba --project-url=http://www.samba.org --make-html --docformat=restructuredtext'
print(list)
- for f in list:
- cmd += ' --add-module %s' % f
+ cmd='PYTHONPATH=bin/python pydoctor --project-name=wafsamba --project-url=http://www.samba.org --make-html --docformat=restructuredtext' +\
+ "".join(' --add-module %s' % f for f in list)
print("Running: %s" % cmd)
status = os.system(cmd)
if os.WEXITSTATUS(status):