]> git.ipfire.org Git - people/teissler/ipfire-2.x.git/blob - lfs/linux
Merge branch 'next' of ssh://arne_f@git.ipfire.org/pub/git/ipfire-2.x into next
[people/teissler/ipfire-2.x.git] / lfs / linux
1 ###############################################################################
2 # #
3 # IPFire.org - A linux based firewall #
4 # Copyright (C) 2007-2011 IPFire Team <info@ipfire.org> #
5 # #
6 # This program is free software: you can redistribute it and/or modify #
7 # it under the terms of the GNU General Public License as published by #
8 # the Free Software Foundation, either version 3 of the License, or #
9 # (at your option) any later version. #
10 # #
11 # This program is distributed in the hope that it will be useful, #
12 # but WITHOUT ANY WARRANTY; without even the implied warranty of #
13 # MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the #
14 # GNU General Public License for more details. #
15 # #
16 # You should have received a copy of the GNU General Public License #
17 # along with this program. If not, see <http://www.gnu.org/licenses/>. #
18 # #
19 ###############################################################################
20
21 ###############################################################################
22 # Definitions
23 ###############################################################################
24
25 include Config
26
27 PATCHLEVEL = .43
28 VER = 2.6.32.43
29
30 THISAPP = linux-$(VER)
31 DL_FILE = $(THISAPP).tar.bz2
32 DL_FROM = $(URL_IPFIRE)
33 DIR_APP = $(DIR_SRC)/$(THISAPP)
34 CFLAGS =
35 CXXFLAGS =
36
37 PROG = linux-xen
38 PAK_VER = 17
39 DEPS = ""
40
41 # Normal build or XEN build.
42 #
43
44 ifeq "$(PAE)" "1"
45 VERSUFIX=ipfire-pae
46 else
47 ifeq "$(XEN)" "1"
48 VERSUFIX=ipfire-xen
49 else
50 VERSUFIX=ipfire
51 endif
52 endif
53
54 TARGET = $(DIR_INFO)/linux-$(VER)-$(VERSUFIX)
55
56 ###############################################################################
57 # Top-level Rules
58 ###############################################################################
59 objects =$(DL_FILE) \
60 netfilter-layer7-v2.22.tar.gz \
61 patch-2.6.16-nath323-1.3.bz2 \
62 reiser4-for-2.6.32.patch.bz2 \
63 xen-patches-2.6.32-2f.tar.bz2
64
65 $(DL_FILE) = $(URL_IPFIRE)/$(DL_FILE)
66 netfilter-layer7-v2.22.tar.gz = $(URL_IPFIRE)/netfilter-layer7-v2.22.tar.gz
67 patch-2.6.16-nath323-1.3.bz2 = $(URL_IPFIRE)/patch-2.6.16-nath323-1.3.bz2
68 reiser4-for-2.6.32.patch.bz2 = $(URL_IPFIRE)/reiser4-for-2.6.32.patch.bz2
69 xen-patches-2.6.32-2f.tar.bz2 = $(URL_IPFIRE)/xen-patches-2.6.32-2f.tar.bz2
70
71 $(DL_FILE)_MD5 = d6819da012da0d9772ac79da9dce3d63
72 netfilter-layer7-v2.22.tar.gz_MD5 = 98dff8a3d5a31885b73341633f69501f
73 patch-2.6.16-nath323-1.3.bz2_MD5 = f926409ff703a307baf54b57ab75d138
74 reiser4-for-2.6.32.patch.bz2_MD5 = 3246397973d9271eb8e6d7c97c5d2d91
75 xen-patches-2.6.32-2f.tar.bz2_MD5 = b59d6f89e11accb9d40354418e13f31b
76
77 install : $(TARGET)
78
79 check : $(patsubst %,$(DIR_CHK)/%,$(objects))
80
81 download :$(patsubst %,$(DIR_DL)/%,$(objects))
82
83 md5 : $(subst %,%_MD5,$(objects))
84
85 dist:
86 @$(PAK)
87 ###############################################################################
88 # Downloading, checking, md5sum
89 ###############################################################################
90
91 $(patsubst %,$(DIR_CHK)/%,$(objects)) :
92 @$(CHECK)
93
94 $(patsubst %,$(DIR_DL)/%,$(objects)) :
95 @$(LOAD)
96
97 $(subst %,%_MD5,$(objects)) :
98 @$(MD5)
99
100 ###############################################################################
101 # Installation Details
102 ###############################################################################
103
104 $(TARGET) : $(patsubst %,$(DIR_DL)/%,$(objects))
105 @$(PREBUILD)
106 @rm -rf $(DIR_APP) $(DIR_SRC)/linux $(DIR_SRC)/linux-*-suse_xen_patches $(DIR_SRC)/xen-* && cd $(DIR_SRC) && tar jxf $(DIR_DL)/$(DL_FILE)
107
108 ln -s linux-$(VER) /usr/src/linux
109
110 ifeq "$(XEN)" "1"
111 # Apply gentoo Xen patches
112 mkdir -p $(DIR_SRC)/xen-patches
113 cd $(DIR_SRC)/xen-patches && tar jxf $(DIR_DL)/xen-patches-2.6.32-2f.tar.bz2
114
115 for x in `ls -1 $(DIR_SRC)/xen-patches/*.patch1`; do \
116 echo "*********** [Patch: $$x]"; \
117 cd $(DIR_APP) && pwd && patch -Np1 < $$x || exit 1; \
118 done
119 rm -rf $(DIR_SRC)/xen-patches
120
121 # Linux Intermediate Queueing Device
122 cd $(DIR_APP) && patch -Np1 < $(DIR_SRC)/src/patches/linux-2.6.32.8-xen-imq-test2.patch
123 else
124 # Linux Intermediate Queueing Device
125 cd $(DIR_APP) && patch -Np1 < $(DIR_SRC)/src/patches/linux-2.6.32-imq-test2.patch
126 endif
127
128 # Patch CVE 2011-1767 and 1768 dos hole
129 cd $(DIR_APP) && patch -Np1 < $(DIR_SRC)/src/patches/linux-2.6.32.43-cve_2011_1767+1768.patch
130
131 # Not report deprecated syscall 1.23 (for kudzu)
132 cd $(DIR_APP) && patch -Np1 < $(DIR_SRC)/src/patches/linux-2.6.25.18-not_report_sysctl_1.23.patch
133
134 # Reiser4 (don't check if fail (some patches are already in xen patchset)
135 -cd $(DIR_APP) && bzcat $(DIR_DL)/reiser4-for-2.6.32.patch.bz2 | patch -Np1
136
137 # ipp2p 0.8.2-pomng
138 cd $(DIR_APP) && patch -Np1 < $(DIR_SRC)/src/patches/linux-2.6.32.8-ipp2p-0.8.2-pomng.patch
139
140 # Layer7-patch
141 cd $(DIR_SRC) && rm -rf $(DIR_SRC)/netfilter-layer7-v2.22
142 cd $(DIR_SRC) && tar xzf $(DIR_DL)/netfilter-layer7-v2.22.tar.gz
143 cd $(DIR_APP) && patch -Np1 < $(DIR_SRC)/netfilter-layer7-v2.22/kernel-2.6.25-2.6.28-layer7-2.22.patch
144
145 # Add some more LED triggers
146 cd $(DIR_APP) && patch -Np1 < $(DIR_SRC)/src/patches/linux-2.6.32.11-netdev-1.patch
147
148 # Huawei Android Phones (Vodafone V845, T-Mobile Pulse/mini ...)
149 cd $(DIR_APP) && patch -Np1 < $(DIR_SRC)/src/patches/linux-2.6.32.15-option_add_huawei_android.patch
150
151 # Fix uevent PHYSDEVDRIVER
152 cd $(DIR_APP) && patch -Np1 < $(DIR_SRC)/src/patches/linux-2.6.32.27_ipg-fix-driver-name.patch
153 cd $(DIR_APP) && patch -Np1 < $(DIR_SRC)/src/patches/linux-2.6.32.27_mcs7830-fix-driver-name.patch
154
155 # Install ipfire logo
156 cd $(DIR_APP) && cp -vf $(DIR_SRC)/config/kernel/ipfire_logo.ppm \
157 drivers/video/logo/logo_linux_clut224.ppm
158
159 # Cleanup kernel source
160
161 cp $(DIR_SRC)/config/kernel/kernel.config.$(MACHINE)-$(VERSUFIX) $(DIR_APP)/.config
162 cd $(DIR_APP) && make CC="$(KGCC)" oldconfig
163 cd $(DIR_APP) && make CC="$(KGCC)" clean
164 cd $(DIR_APP) && sed -i -e 's/EXTRAVERSION\ =.*/EXTRAVERSION\ =\ $(PATCHLEVEL)-$(VERSUFIX)/' Makefile
165
166 ifeq "$(XEN)" "1"
167 cd $(DIR_APP) && make $(MAKETUNING) CC="$(KGCC)" vmlinuz
168 cd $(DIR_APP) && cp -v arch/i386/boot/vmlinuz /boot/vmlinuz-$(VER)-$(VERSUFIX)
169 else
170 cd $(DIR_APP) && make $(MAKETUNING) CC="$(KGCC)" bzImage
171 cd $(DIR_APP) && cp -v arch/i386/boot/bzImage /boot/vmlinuz-$(VER)-$(VERSUFIX)
172 endif
173 cd $(DIR_APP) && cp -v System.map /boot/System.map-$(VER)-$(VERSUFIX)
174 cd $(DIR_APP) && cp -v .config /boot/config-$(VER)-$(VERSUFIX)
175 ln -sf vmlinuz-$(VER)-$(VERSUFIX) /boot/vmlinuz-$(VERSUFIX)
176 ln -sf System.map-$(VER)-$(VERSUFIX) /boot/System.map-$(VERSUFIX)
177 cd $(DIR_APP) && make CC="$(KGCC)" $(MAKETUNING) modules
178 cd $(DIR_APP) && make CC="$(KGCC)" $(MAKETUNING) modules_install
179 cd $(DIR_APP) && make CC="$(KGCC)" $(MAKETUNING) firmware_install
180
181 ifneq "$(PAE)" "1"
182 ifneq "$(XEN)" "1"
183 # Only do this once on the standard kernel pass
184 cd $(DIR_APP) && install -m 755 usr/gen_init_cpio /sbin/
185
186 # Blacklist matroxfb_base
187 echo "blacklist matroxfb_base" >> /etc/modprobe.d/framebuffer
188 # Blacklist old framebuffer modules
189 for f in $$(find /lib/modules/$(VER)-$(VERSUFIX)/kernel/drivers/video -name *fb.ko); do \
190 echo "blacklist $$(basename $$f)" >> /etc/modprobe.d/framebuffer ; \
191 done
192 # Blacklist new drm framebuffer modules
193 for f in $$(ls -1 /lib/modules/$(VER)-$(VERSUFIX)/kernel/drivers/gpu/drm/*/*.ko); do \
194 echo "blacklist $$(basename $$f)" >> /etc/modprobe.d/framebuffer ; \
195 done
196 sed -i -e "s|.ko||g" /etc/modprobe.d/framebuffer
197
198 # Blacklist isdn modules
199 for f in $$(find /lib/modules/$(VER)-$(VERSUFIX)/kernel/drivers/isdn -name *.ko); do \
200 echo "blacklist $$(basename $$f)" >> /etc/modprobe.d/isdn ; \
201 done
202 sed -i -e "s|.ko||g" /etc/modprobe.d/isdn
203
204 # Disable ipv6 at runtime
205 echo "options ipv6 disable_ipv6=1" > /etc/modprobe.d/ipv6
206
207 endif
208 endif
209
210 # Remove mISDN modules
211 rm -rvf /lib/modules/$(VER)-$(VERSUFIX)/kernel/drivers/isdn/mISDN
212 rm -rvf /lib/modules/$(VER)-$(VERSUFIX)/kernel/drivers/isdn/hardware/mISDN
213
214 # Disable geode_aes modul
215 mv /lib/modules/$(VER)-$(VERSUFIX)/kernel/drivers/crypto/geode-aes.ko \
216 /lib/modules/$(VER)-$(VERSUFIX)/kernel/drivers/crypto/geode-aes.ko.off
217
218 @rm -rf $(DIR_SRC)/patch-o-matic* $(DIR_SRC)/iptables* $(DIR_SRC)/squashfs* $(DIR_SRC)/netfilter-layer7-*
219 @$(POSTBUILD)