contrib/fedora/bashrc_sssd - master - githubmirror/sssd

contrib/fedora/bashrc_sssd
126 строк4 KB
Alexey Tikhonov
CONTRIB:fedconfig: enable '--with-subid'
02 дек 2025, 13:17
02 дек 2025, 13:171d488d5
# For best results, add the following lines to ~/.bashrc:
# if [ -f /path/to/sssd-source/contrib/fedora/bashrc_sssd ]; then
#     . /path/to/sssd-source/contrib/fedora/bashrc_sssd
# fi

# Determine the architecture of the platform we're running on
SSS_ARCH=$(uname -m)

# Determine the lib and libdir locations
SSS_LIB=$(rpm --eval %{_lib})
SSS_LIBDIR=$(rpm --eval %{_libdir})

# Add the following line to your .bashrc if you want SSSD to throw errors on
# compiler warnings (recommended)
# SSS_WERROR=-Werror

# Determine the number of available processors on the system for parallel make
# invocation.
PROCESSORS=$(/usr/bin/getconf _NPROCESSORS_ONLN)

# Configure invocation for use on Fedora systems, based on the %configure RPM
# macro from the redhat-rpm-config package. This function assumes you are
# building in a parallel build directory beneath the source directory. All
# other functions in this script will assume that the location is
# /path/to/sssd-source/$SSS_ARCH
fedconfig()
{
    ../configure \
        --build=$SSS_ARCH-unknown-linux-gnu \
        --host=$SSS_ARCH-unknown-linux-gnu \
        --program-prefix= \
        --prefix=/usr \
        --exec-prefix=/usr \
        --bindir=/usr/bin \
        --sbindir=/usr/sbin \
        --sysconfdir=/etc \
        --datadir=/usr/share \
        --includedir=/usr/include \
        --libdir=$SSS_LIBDIR \
        --libexecdir=/usr/libexec \
        --localstatedir=/var \
        --sharedstatedir=/var/lib \
        --mandir=/usr/share/man \
        --infodir=/usr/share/info \
        --enable-nsslibdir=/$SSS_LIB \
        --enable-pammoddir=/$SSS_LIB/security \
        --enable-systemtap \
        --with-krb5-rcache-dir=/var/cache/krb5rcache \
        --with-initscript=systemd \
        --with-syslog=journald \
        --with-test-dir=/dev/shm \
        --cache-file=/tmp/fedconfig.cache \
        --with-passkey \
        --with-subid \
        --with-sssd-user=sssd \
        ${SSSD_NO_MANPAGES-} \
        "$@"
}

# Completely purge the current working directory, then recreate
# and reconfigure it. This is best used when you are making changes to the m4
# macros or the configure scripts.
reconfig()
{
    autoreconf -if \
        && rm -Rf $SSS_ARCH/ \
        && mkdir $SSS_ARCH/ \
        && cd $SSS_ARCH/ \
        && fedconfig "$@"
}

# Set the list of warnings that you want to detect (and in the case of remake
# and chmake want to treat as errors)
SSS_WARNINGS='-Wall \
              -Wextra \
              -Wno-unused-parameter \
              -Wno-sign-compare \
              -Wshadow \
              -Wunused-variable \
              -Wformat-security'

# Build (or finish building) all objects and then run the build-tests against
# them. This builds with optimizations turned off and GDB debugging symbols.
chmake()
{
    make V=0 \
         CFLAGS+="-ggdb3 $SSS_WARNINGS ${SSS_WERROR-} -O0 -Wp,-U_FORTIFY_SOURCE" \
         -j$PROCESSORS check "$@"
}

# Clean the build directory and rebuild all objects, then run the build-tests
# against them. This builds with optimizations turned off and GDB debugging
# symbols.
remake()
{
    make clean > /dev/null && chmake "$@"
}

# Clean the build directory and rebuild all objects, hiding most of the build
# output except for warnings and errors. This builds with default
# optimization and without debugging symbols.
warn()
{
    make clean >/dev/null \
        && make CFLAGS+="$SSS_WARNINGS" -j$PROCESSORS tests > /dev/null "$@"
}

# Install the built sources to the current system, cleaning up the LDB modules
# and making sure that the NSS and PAM modules have the right SELinux context.
sssinstall()
{
    # Force single-thread install to workaround concurrency issues
    sudo make -j1 install \
        && sudo rm -f $SSS_LIBDIR/ldb/modules/ldb/memberof.la \
        && sudo restorecon -v /$SSS_LIB/libnss_sss.so.2 \
                              /$SSS_LIB/security/pam_sss.so
}

# Alias to generate a patch or series of patches that meet SSSD submission
# guidelines.
# Usage:
# genpatch -N (where N is the number of patches to submit)
genpatch()
{
    git format-patch -M -C --patience --full-index "$@"
}