In the mk/defaults/linux.mk file, the following lines are specified by default:

USE_XFRM ?= true
USE_XFRM_HEADER_COPY ?= true
USE_DNSSEC ?= true
ifneq ($(HAVE_NFTABLES), true)
  HAVE_IPTABLES ?= true
endif
 

In the mk/config.mk file, the following lines are specified by default:

TRANSFORM_VARIABLES = sed \
...............................................................................................
            -e "s:@HAVE_IPTABLES@:$(HAVE_IPTABLES):g" \
            -e "s:@HAVE_NFTABLES@:$(HAVE_NFTABLES):g" \
            $(NULL)
...............................................................................................
# iptables for CAT, or NFLOG, look, barf, verify
HAVE_IPTABLES ?= false
ifeq ($(HAVE_IPTABLES),true)
USERLAND_CFLAGS += -DHAVE_IPTABLES
endif
 
# nft nflog-all(nflog not yet), look, barf, verify
HAVE_NFTABLES ?= false
ifeq ($(HAVE_NFTABLES),true)
USERLAND_CFLAGS += -DHAVE_NFTABLES
endif
 
 

I am building a deb package following the instructions: "## Building for DEB based systems The packaging/debian directory is used to build deb files. Simply issue the command: make deb."

The deb package is being built with iptables dependencies, and I have to install iptables even though I do not use it.

Is there any information in the documentation on how to build packages without iptables dependencies?

 
24.09.2023, 20:46, "Andrew Cagney" <[email protected]>:

On Sat, 23 Sept 2023 at 22:45, manfred <[email protected]> wrote:


 As a suggestion, it may be useful for config.mk to have a comment list
 of USE_* and HAVE_* variables that may be enabled in the right place.


 On 9/23/2023 10:50 AM, manfred wrote:
 > mk/defaults/linux.mk has this:
 >
 > ifneq ($(HAVE_NFTABLES), true)
 > HAVE_IPTABLES ?= true
 > endif
 >
 > So, most likely you have to define:
 >
 > HAVE_NFTABLES ?= true
 >
 > early in config.mk.


The preferred way to do this when building libreswan as part of a
package is to add it to the package file's build line vis:
  gmake HAVE_NFTABLES=true
The alternative, for when you're hacking on libreswan locally, is to
create the file Makefile.inc.local and add:
  HAVE_NFTABLES=true
Having to directly edit the sources should raise a red flag.
_______________________________________________
Swan mailing list
[email protected]
https://lists.libreswan.org/mailman/listinfo/swan

_______________________________________________
Swan mailing list
[email protected]
https://lists.libreswan.org/mailman/listinfo/swan

Reply via email to