diff options
Diffstat (limited to 'debian/rules')
| -rwxr-xr-x | debian/rules | 246 |
1 files changed, 246 insertions, 0 deletions
diff --git a/debian/rules b/debian/rules new file mode 100755 index 00000000..9660e502 --- /dev/null +++ b/debian/rules @@ -0,0 +1,246 @@ +#!/usr/bin/make -f + +# Enable Debian Hardening +# https://wiki.debian.org/Hardening +export DEB_BUILD_MAINT_OPTIONS = hardening=+all + +# Disable LTO on Ubuntu, see LP: #1970634 and https://jira.mariadb.org/browse/MDEV-25633 +ifeq ($(shell dpkg-vendor --derives-from Ubuntu && echo yes), yes) + export DEB_BUILD_MAINT_OPTIONS += optimize=-lto +endif + +DPKG_EXPORT_BUILDFLAGS = 1 +# Include all defaults, including buildflags.mk +include /usr/share/dpkg/default.mk +# CPPFLAGS are nor read by CMake, so copy them to CXXFLAGS +# See why at https://cmake.org/Bug/view.php?id=12928 +# This is needed for e.g. all automatic Debian hardening flags to apply on all cmake builds. +CFLAGS+=$(CPPFLAGS) +CXXFLAGS+=$(CPPFLAGS) + +# Only do a strict symbol checking on Linux +# https://manpages.debian.org/testing/dpkg-dev/dpkg-gensymbols.1.en.html +# Level 4: Fails if some libraries have been introduced. +ifneq (,$(filter linux,$(DEB_HOST_ARCH_OS))) + export DPKG_GENSYMBOLS_CHECK_LEVEL = 4 +endif + +BUILDDIR := builddir +DEB_VERSION_REVISION := $(shell echo $(DEB_VERSION) | sed -e 's/^.*-//') +DEB_VERSION_VERSION := $(shell echo $(DEB_VERSION) | sed -e 's/^.*:\(.*\)\(-\|+\).*/\1/') +DEB_VERSION_MAJOR := $(shell echo $(DEB_VERSION_VERSION) | sed -e 's/^\(.*\)\..*$$/\1/') +RELEASE := $(shell lsb_release -r -s) # Use changelog based DEB_DISTRIBUTION instead? +TMP := $(CURDIR)/debian/tmp +MTR_SKIP_TEST_LIST := $(shell mktemp) + +# According to Debian Policy version 4.2.0 builds should be as verbose as +# possible unless 'terse' is specifically passed. +ifeq (,$(filter terse,$(DEB_BUILD_OPTIONS))) + export DH_VERBOSE=1 +endif + +# Parallel build support as advised +# at https://www.debian.org/doc/debian-policy/ch-source.html#s-debianrules-options +ifneq (,$(filter parallel=%,$(DEB_BUILD_OPTIONS))) + NUMJOBS = $(patsubst parallel=%,%,$(filter parallel=%,$(DEB_BUILD_OPTIONS))) + MAKEFLAGS += -j$(NUMJOBS) +else + # NUMJOBS cannot be empty as it is used as a parameter to mtr, default to 'auto'. + NUMJOBS = auto +endif + +# RocksDB cannot build on 32-bit platforms +ifeq (32,$(DEB_HOST_ARCH_BITS)) + CMAKEFLAGS += -DPLUGIN_ROCKSDB=NO +endif + +# Only attempt to build with PMEM on archs that have package libpmem-dev available +# See https://packages.debian.org/search?searchon=names&keywords=libpmem-dev +ifneq (,$(filter $(DEB_HOST_ARCH),amd64 arm64 ppc64el riscv64)) + CMAKEFLAGS += -DWITH_PMEM=ON +endif + +# Fix compilation errors like "relocation truncated to fit: GPREL16 against symbol `wsrep_debug'" +ifeq ($(DEB_HOST_ARCH),alpha) + export DEB_LDFLAGS_MAINT_APPEND += -Wl,--no-relax +endif + +# Disable native IO and force regular fsync() on selected architectures which +# seem to sugger from random crashes that stem from Linux kernel incompatibility +# (Debian Bug#1030510 and perhaps also Bug#1031656, MariaDB MDEV-30728, +# https://lists.ozlabs.org/pipermail/linuxppc-dev/2023-March/256189.html) +ifneq (,$(filter $(DEB_HOST_ARCH),ppc64el s390x)) + export MTR_ARGUMENTS_APPEND += --mysqld=--loose-innodb-flush-method=fsync --mysqld=--loose-skip-innodb-use-native-aio +endif + +# Add support for verbose builds +MAKEFLAGS += VERBOSE=1 + +override_dh_auto_clean: + @echo "RULES.$@" + dh_testdir + dh_testroot + # Delete obsolete/unstable components and embedded source code copies + # to ensure they are not used in Debian and in general to keep MariaDB binaries + # secure and using only system libraries that can be updated quickly and easily + # in case security vulnerabilities are found in any of the libraries + rm -rf $(BUILDDIR) builddir-native extra/readline extra/wolfssl zlib libmariadb/external/zlib + # Remove columnstore as the source code is dirty and software not mature enough for Debian anyway + rm -rf storage/columnstore + # Delete precompiled binaries in upstream sources to ensure they are not used in Debian + rm -rf storage/connect/JavaWrappers.jar storage/columnstore/columnstore/utils/jemalloc/libjemalloc.so.2 + + debconf-updatepo # Update po-files when clean runs before each build + +override_dh_auto_configure: + @echo "RULES.$@" + dh_testdir + +ifneq ($(DEB_BUILD_ARCH),$(DEB_HOST_ARCH)) + dpkg-architecture -a$(DEB_BUILD_ARCH) -f -c dh_auto_configure --builddirectory=builddir-native + dh_auto_build --builddirectory=builddir-native -- import_executables +endif + + echo "server:Version=$(DEB_VERSION)" >> debian/substvars + + # As packages does not have major version any more in package name there is no + # way as it not set by dpkg to use this on postinst script. Use sed to + # determine major version instead. + # @TODO: Rewrite this to use the new upstream /var/lib/mysql_upgrade_info file + # instead of the legacy /var/lib/debian-XX.X.flag file + sed -i 's/__MARIADB_MAJOR_VER__/$(DEB_VERSION_MAJOR)/g' debian/mariadb-server.post* debian/mariadb-server.preinst + + # Don't build ColumnStore, not mature enough for Debian yet. + PATH=$${MYSQL_BUILD_PATH:-"/usr/lib/ccache:/usr/local/bin:/usr/bin:/bin"} \ + dh_auto_configure --builddirectory=$(BUILDDIR) -- \ + -DCMAKE_BUILD_TYPE=RelWithDebInfo \ + $(CMAKEFLAGS) \ + $(if $(filter $(DEB_BUILD_ARCH),$(DEB_HOST_ARCH)),,-DIMPORT_EXECUTABLES=$(CURDIR)/builddir-native/import_executables.cmake) \ + -DCOMPILATION_COMMENT="$(DEB_VENDOR) $(RELEASE)" \ + -DMYSQL_SERVER_SUFFIX="-$(DEB_VERSION_REVISION)" \ + -DSYSTEM_TYPE="debian-$(DEB_HOST_GNU_SYSTEM)" \ + -DCMAKE_SYSTEM_PROCESSOR=$(DEB_HOST_ARCH) \ + -DBUILD_CONFIG=mysql_release \ + -DCONC_DEFAULT_CHARSET=utf8mb4 \ + -DPLUGIN_AWS_KEY_MANAGEMENT=NO \ + -DPLUGIN_COLUMNSTORE=NO \ + -DWITH_NUMA=AUTO \ + -DIGNORE_AIO_CHECK=ON \ + -DWITH_URING=ON \ + -DWITH_INNODB_SNAPPY=ON \ + -DDEB=$(DEB_VENDOR) + +# This is needed, otherwise 'make test' will run before binaries have been built +override_dh_auto_build: + @echo "RULES.$@" + # Print build env info to help debug builds on different platforms + dpkg-architecture + cd $(BUILDDIR) && $(MAKE) + +override_dh_auto_test: + @echo "RULES.$@" + dh_testdir + # Skip running test suite after build if DEB_BUILD_OPTIONS contains 'nocheck' + @echo "DEB_BUILD_OPTIONS: $(DEB_BUILD_OPTIONS)" +ifeq (,$(filter nocheck,$(DEB_BUILD_OPTIONS))) + # Skip unstable tests if such are defined for arch + [ ! -f debian/unstable-tests.$(DEB_HOST_ARCH) ] || cat debian/unstable-tests.$(DEB_HOST_ARCH) >> $(MTR_SKIP_TEST_LIST) + # Show contents of skip list on this architecture + @echo "On arcitecture $(DEB_HOST_ARCH) skip tests:" + cat $(MTR_SKIP_TEST_LIST) + # Run testsuite + cd $(BUILDDIR)/mysql-test && \ + export MTR_PRINT_CORE=detailed && \ + ./mtr --force --testcase-timeout=120 --suite-timeout=540 --retry=3 \ + --verbose-restart --max-save-core=1 --max-save-datadir=1 \ + --parallel=$(NUMJOBS) --skip-rpl --suite=main \ + --skip-test-list=$(MTR_SKIP_TEST_LIST) \ + $(MTR_ARGUMENTS_APPEND) + # Don't use --mem here as official Debian builders and most Docker systems don't have a large mem device available and + # would fail with errors on lack of disk space. +endif + +override_dh_auto_install: + @echo "RULES.$@" + dh_testdir + dh_testroot + +ifneq (,$(filter linux,$(DEB_HOST_ARCH_OS))) + # Copy systemd files to a location available for dh_installinit + cp $(BUILDDIR)/support-files/mariadb.service debian/mariadb-server.mariadb.service + cp $(BUILDDIR)/support-files/mariadb.socket debian/mariadb-server.mariadb.socket + cp $(BUILDDIR)/support-files/mariadb-extra.socket debian/mariadb-server.mariadb-extra.socket + cp $(BUILDDIR)/support-files/mariadb@.service debian/mariadb-server.mariadb@.service + cp $(BUILDDIR)/support-files/mariadb@.socket debian/mariadb-server.mariadb@.socket + cp $(BUILDDIR)/support-files/mariadb-extra@.socket debian/mariadb-server.mariadb-extra@.socket +endif + + # Run 'make install' without output since it is uninteresting and + # silencing it helps to make overall build log shorter and more readable + @echo "Running $(MAKE) install DESTDIR=$(TMP) ..." + cd $(BUILDDIR) && $(MAKE) install DESTDIR=$(TMP) > /dev/null + + # If mariadb-test package is removed, also remove most of it's files + grep --quiet "Package: mariadb-test" debian/control || rm -rf $(TMP)/usr/share/mysql/mysql-test + + # Delete private files from libraries so they don't get shipped in the -dev packages + rm -r $(TMP)/usr/include/mariadb/server/private + + # Don't ship sql-bench at all, just delete it completely even though it builds + rm -r $(TMP)/usr/sql-bench + + # nm numeric soft is not enough, therefore extra sort in command + # to satisfy Debian reproducible build requirements + mkdir -p $(TMP)/usr/share/doc/mariadb-server + nm --defined-only $(BUILDDIR)/sql/mariadbd | LC_ALL=C sort | gzip -n -9 > $(TMP)/usr/share/doc/mariadb-server/mariadbd.sym.gz + + # Rename and install AppArmor profile + install -D -m 644 debian/apparmor-profile $(TMP)/etc/apparmor.d/usr.sbin.mariadbd + + # Install mariadb.pc as a symlink for the client library, + # use -f to override the existing server mariadb.pc file + ln -sf libmariadb.pc $(TMP)/usr/lib/$(DEB_HOST_MULTIARCH)/pkgconfig/mariadb.pc + + # Install libmariadbclient18 compatibility links + ln -s libmariadb.so.3 $(TMP)/usr/lib/$(DEB_HOST_MULTIARCH)/libmariadbclient.so + + # Install libmariadbclient.a compatibility link + ln -s libmariadb.a $(TMP)/usr/lib/$(DEB_HOST_MULTIARCH)/libmariadbclient.a + + # Symlink plugins that are used by both server and client and thus need to + # load from the libmariadb path as well + ln -s ../../../mysql/plugin/auth_test_plugin.so $(TMP)/usr/lib/$(DEB_HOST_MULTIARCH)/libmariadb3/plugin/auth_test_plugin.so + ln -s ../../../mysql/plugin/qa_auth_interface.so $(TMP)/usr/lib/$(DEB_HOST_MULTIARCH)/libmariadb3/plugin/qa_auth_interface.so + ln -s ../../../mysql/plugin/test_sql_service.so $(TMP)/usr/lib/$(DEB_HOST_MULTIARCH)/libmariadb3/plugin/test_sql_service.so + # Move test plugins that are only needed by the client to the libmariadb path + mv -v $(TMP)/usr/lib/mysql/plugin/qa_auth_client.so $(TMP)/usr/lib/$(DEB_HOST_MULTIARCH)/libmariadb3/plugin/ + +# Install mariadb.socket without enabling it, keep using mariadb.service by default +# @TODO: Temporarily disable extra and socket systemd file installation until +# a '--build=all' compatible mechanism is found +override_dh_systemd_enable: + dh_systemd_enable --name=mariadb + dh_systemd_enable --no-enable --name=mariadb@ # mariadb@.service +# dh_systemd_enable --no-enable --name=mariadb mariadb.socket +# dh_systemd_enable --no-enable --name=mariadb-extra mariadb-extra.socket +# dh_systemd_enable --no-enable --name=mariadb@ mariadb.socket +# dh_systemd_enable --no-enable --name=mariadb-extra@ mariadb-extra.socket + +# Start mysql at sequence number 19 before 20 where apache, proftpd etc gets +# started which might depend on a running database server. +override_dh_installinit-arch: + dh_installinit --name=mariadb --no-start -- defaults 19 21 + dh_systemd_start --restart-after-upgrade + +# Use custom server version string variable +override_dh_gencontrol: + dh_gencontrol -- -Tdebian/substvars + +# If a file is not supposed to be included anywhere, add it to the not-installed +# file and document the reason. Note that dh_install supports the above mentioned +# white list file only starting from Debian Stretch and Ubuntu Xenial. +# To find more, grep build logs for 'but is not installed to anywhere'. +%: + dh $@ --fail-missing + +# vim: ts=8 |