10 usage: configure [options] [settings]
12 --prefix=PREFIX installation prefix [/usr]
13 --exec-prefix=EPREFIX installation prefix for executable files [PREFIX]
14 --bindir=DIR user executables [PREFIX/bin]
15 --datadir=DIR architecture-independent data files [PREFIX/share]
16 --mandir=DIR manual pages [DATADIR/man]
17 --sysconfdir=DIR directory for configuration files [/etc]
18 --pamdir=DIR PAM directory [SYSCONFDIR/pam.d]
20 --build=build-alias a cpu-vendor-opsys for the system where the application will be built
21 --host=host-alias a cpu-vendor-opsys for the system where the application will run
22 --target=target-alias the machine that CC will produce code for
24 --enable-debug enable debugging
25 --enable-seccomp enable seccomp
26 --enable-static prepare for static build
28 --help, -h display this help and exit
37 --prefix) PREFIX=$var;;
38 --exec-prefix) EPREFIX=$var;;
39 --bindir) BINDIR=$var;;
40 --datadir) SHAREDIR=$var;;
41 --mandir) MANDIR=$var;;
42 --sysconfdir) SYSCONFDIR=$var;;
43 --pamdir) PAMDIR=$var;;
46 --target) TARGET=$var;;
47 --enable-debug) DEBUG=yes;;
48 --enable-seccomp) BUILD_SECCOMP=yes;;
49 --enable-static) BUILD_STATIC=yes;;
51 *) die "Error: unknown option $opt";;
58 : ${VERSION:="$(git describe --dirty --tags --long --always)"}
60 cat <<EOF >>$CONFIG_MK
62 PREFIX ?= ${PREFIX:="/usr"}
63 EPREFIX ?= ${EPREFIX:="${PREFIX}"}
64 BINDIR ?= ${BINDIR:="${PREFIX}/bin"}
65 SHAREDIR ?= ${SHAREDIR:="${PREFIX}/share"}
66 MANDIR ?= ${MANDIR:="${SHAREDIR}/man"}
67 SYSCONFDIR?= ${SYSCONFDIR:="/etc"}
68 PAMDIR ?= ${PAMDIR:="${SYSCONFDIR}/pam.d"}
69 CFLAGS += -DVERSION="\"${VERSION}\""
72 if [ -z "$BUILD" ]; then
73 BUILD="$(uname -m)-unknown-$(uname -s | tr '[:upper:]' '[:lower:]')"
75 if [ -z "$HOST" ]; then
76 [ -z "$TARGET" ] && TARGET=$BUILD
79 if [ -z "$TARGET" ]; then
80 [ -z "$HOST" ] && HOST=$BUILD
85 # Derive OS from cpu-manufacturer-os-kernel
97 OS_CFLAGS="-D_DEFAULT_SOURCE -D_GNU_SOURCE -DUID_MAX=60000 -DGID_MAX=60000"
98 printf 'CURDIR := .\n' >>$CONFIG_MK
99 printf 'PAM_DOAS = pam.d__doas__linux\n' >>$CONFIG_MK
103 [ -n "$OS_CFLAGS" ] && \
104 printf 'CFLAGS += %s\n' "$OS_CFLAGS" >>$CONFIG_MK
107 printf 'CFLAGS += -O0 -g\n' >>$CONFIG_MK
109 [ -n "$BUILD_STATIC" ] && \
110 printf 'CFLAGS += -static\n' >>$CONFIG_MK
112 # Add CPPFLAGS/CFLAGS/LDFLAGS to CC for testing features
113 XCC="${CC:=clang} $CFLAGS $OS_CFLAGS $CPPFLAGS $LDFLAGS"
114 # Make sure to disable --as-needed for CC tests.
115 XCC="$XCC -Wl,--no-as-needed"
118 func="$1"; src="$2"; shift 2
119 printf 'Checking for %-14s\t\t' "$func ..."
120 printf '%s\n' "$src" >"_$func.c"
121 $XCC "_$func.c" -o "_$func" 2>/dev/null
123 rm -f "_$func.c" "_$func"
124 if [ $ret -eq 0 ]; then
126 upperfunc="$(printf '%s\n' "$func" | tr '[[:lower:]]' '[[:upper:]]')"
127 printf 'CFLAGS += -DHAVE_%s\n' "$upperfunc" >>$CONFIG_MK
138 explicit_bzero(NULL, 0);
141 check_func "explicit_bzero" "$src" || {
142 printf 'OPENBSD += explicit_bzero.c\n' >>$CONFIG_MK
147 # Check for strlcat().
152 const char s1[] = "foo";
154 strlcat(s2, s1, sizeof(s2));
157 check_func "strlcat" "$src" || {
158 printf 'OPENBSD += strlcat.c\n' >>$CONFIG_MK
162 # Check for strlcpy().
167 const char s1[] = "foo";
169 strlcpy(s2, s1, sizeof(s2));
172 check_func "strlcpy" "$src" || {
173 printf 'OPENBSD += strlcpy.c\n' >>$CONFIG_MK
185 check_func "errc" "$src" || {
186 printf 'OPENBSD += errc.c\n' >>$CONFIG_MK
198 check_func "verrc" "$src" || {
199 printf 'OPENBSD += verrc.c\n' >>$CONFIG_MK
203 # Check for setprogname().
211 check_func "setprogname" "$src" || {
212 printf 'OPENBSD += progname.c\n' >>$CONFIG_MK
216 # Check for readpassphrase().
219 #include <readpassphrase.h>
222 readpassphrase("", buf, sizeof(buf), 0);
225 check_func "readpassphrase" "$src" || {
226 printf 'OPENBSD += readpassphrase.c\n' >>$CONFIG_MK
230 # Check for strtonum().
236 strtonum("", 1, 64, &errstr);
239 check_func "strtonum" "$src" || {
240 printf 'OPENBSD += strtonum.c\n' >>$CONFIG_MK
244 # Check for reallocarray().
249 reallocarray(NULL, 0, 0);
252 check_func "reallocarray" "$src" || {
253 printf 'OPENBSD += reallocarray.c\n' >>$CONFIG_MK
257 # Check for bsd_auth.h.
260 #include <bsd_auth.h>
264 check_func "bsd_auth_h" "$src" && \
268 # Check for pam_appl.h.
271 #include <security/pam_appl.h>
275 [ -z "$have_bsd_auth_h" ] && \
276 check_func "pam_appl_h" "$src" && {
277 printf 'SRCS += doas_pam.c\n' >>$CONFIG_MK
281 # Check for login_cap.h.
284 #include <login_cap.h>
288 check_func "login_cap_h" "$src" || {
289 printf 'OPENBSD += setusercontext.c\n' >>$CONFIG_MK
293 # Check for execvpe().
298 const char *p = { "", NULL };
302 check_func "execvpe" "$src" || {
303 printf 'OPENBSD += execvpe.c\n' >>$CONFIG_MK
307 # Check for setresuid().
315 check_func "setresuid" "$src" || {
316 printf 'OPENBSD += setresuid.c\n' >>$CONFIG_MK
320 # Check for pledge().
328 check_func "pledge" "$src" && {
333 # Check for seccomp.h
336 #include <linux/seccomp.h>
337 #include <sys/prctl.h>
340 prctl(PR_SET_SECCOMP, SECCOMP_MODE_FILTER, NULL);
343 [ -z "$have_pledge" -a -n "$BUILD_SECCOMP" ] && \
344 check_func "seccomp_h" "$src" && \
347 printf 'OPENBSD += pledge-seccomp.c\n' >>$CONFIG_MK
350 [ -z "$have_pledge" ] && \
351 printf 'OPENBSD += pledge-noop.c\n' >>$CONFIG_MK