blob: bf088433a488406368533ea06bde391119e70728 [file] [log] [blame]
Brad Bishop19323692019-04-05 15:28:33 -04001SUMMARY = "The Suricata Engine is an Open Source Next Generation Intrusion Detection and Prevention Engine"
2
3require suricata.inc
4
5LIC_FILES_CHKSUM = "file://LICENSE;beginline=1;endline=2;md5=c70d8d3310941dcdfcd1e02800a1f548"
6
Brad Bishop19323692019-04-05 15:28:33 -04007SRC_URI += " \
Brad Bishop1fdf4aa2019-09-09 14:56:41 -04008 file://volatiles.03_suricata \
Brad Bishop95dbbac2019-12-02 13:55:25 -05009 file://tmpfiles.suricata \
Brad Bishop1fdf4aa2019-09-09 14:56:41 -040010 file://suricata.yaml \
11 file://suricata.service \
12 file://run-ptest \
Brad Bishop1fdf4aa2019-09-09 14:56:41 -040013 "
Brad Bishop19323692019-04-05 15:28:33 -040014
William A. Kennington IIIee32beb2021-06-02 12:48:35 -070015UPSTREAM_CHECK_URI = "www.openinfosecfoundation.org/download"
16
Brad Bishop19323692019-04-05 15:28:33 -040017inherit autotools-brokensep pkgconfig python3-dir systemd ptest
18
Andrew Geisslerd1d22e62020-10-16 10:14:32 -050019CFLAGS += "-D_DEFAULT_SOURCE -fcommon"
Brad Bishop19323692019-04-05 15:28:33 -040020
21CACHED_CONFIGUREVARS = "ac_cv_header_htp_htp_h=yes ac_cv_lib_htp_htp_conn_create=yes \
22 ac_cv_path_HAVE_WGET=no ac_cv_path_HAVE_CURL=no "
23
24EXTRA_OECONF += " --disable-debug \
25 --enable-non-bundled-htp \
26 --disable-gccmarch-native \
27 --disable-suricata-update \
28 "
29
30PACKAGECONFIG ??= "htp jansson file pcre yaml pcap cap-ng net nfnetlink nss nspr"
31PACKAGECONFIG_append = " ${@bb.utils.contains('DISTRO_FEATURES', 'ptest', 'unittests', '', d)}"
32
33PACKAGECONFIG[htp] = "--with-libhtp-includes=${STAGING_INCDIR} --with-libhtp-libraries=${STAGING_LIBDIR}, ,libhtp,"
34PACKAGECONFIG[pcre] = "--with-libpcre-includes=${STAGING_INCDIR} --with-libpcre-libraries=${STAGING_LIBDIR}, ,libpcre ,"
35PACKAGECONFIG[yaml] = "--with-libyaml-includes=${STAGING_INCDIR} --with-libyaml-libraries=${STAGING_LIBDIR}, ,libyaml ,"
36PACKAGECONFIG[pcap] = "--with-libpcap-includes=${STAGING_INCDIR} --with-libpcap-libraries=${STAGING_LIBDIR}, ,libpcap ,"
37PACKAGECONFIG[cap-ng] = "--with-libcap_ng-includes=${STAGING_INCDIR} --with-libcap_ng-libraries=${STAGING_LIBDIR}, ,libcap-ng , "
38PACKAGECONFIG[net] = "--with-libnet-includes=${STAGING_INCDIR} --with-libnet-libraries=${STAGING_LIBDIR}, , libnet,"
39PACKAGECONFIG[nfnetlink] = "--with-libnfnetlink-includes=${STAGING_INCDIR} --with-libnfnetlink-libraries=${STAGING_LIBDIR}, ,libnfnetlink ,"
40PACKAGECONFIG[nfq] = "--enable-nfqueue, --disable-nfqueue,libnetfilter-queue,"
41
42PACKAGECONFIG[jansson] = "--with-libjansson-includes=${STAGING_INCDIR} --with-libjansson-libraries=${STAGING_LIBDIR},,jansson, jansson"
43PACKAGECONFIG[file] = ",,file, file"
44PACKAGECONFIG[nss] = "--with-libnss-includes=${STAGING_INCDIR} --with-libnss-libraries=${STAGING_LIBDIR}, nss, nss,"
45PACKAGECONFIG[nspr] = "--with-libnspr-includes=${STAGING_INCDIR} --with-libnspr-libraries=${STAGING_LIBDIR}, nspr, nspr,"
46PACKAGECONFIG[python] = "--enable-python, --disable-python, python3, python3"
47PACKAGECONFIG[unittests] = "--enable-unittests, --disable-unittests,"
48
49export logdir = "${localstatedir}/log"
50
51do_install_append () {
52
53 install -d ${D}${sysconfdir}/suricata
54
55 oe_runmake install-conf DESTDIR=${D}
56
Brad Bishop19323692019-04-05 15:28:33 -040057 oe_runmake install-rules DESTDIR=${D}
58
59 install -d ${D}${sysconfdir}/suricata ${D}${sysconfdir}/default/volatiles
Andrew Geisslerf31b8bd2020-11-30 19:54:56 -060060 install -m 0644 ${WORKDIR}/volatiles.03_suricata ${D}${sysconfdir}/default/volatiles/03_suricata
Brad Bishop19323692019-04-05 15:28:33 -040061
62 install -m 0644 ${S}/threshold.config ${D}${sysconfdir}/suricata
63
Brad Bishop95dbbac2019-12-02 13:55:25 -050064 if ${@bb.utils.contains('DISTRO_FEATURES', 'systemd', 'true', 'false', d)}; then
65 install -d ${D}${sysconfdir}/tmpfiles.d
66 install -m 0644 ${WORKDIR}/tmpfiles.suricata ${D}${sysconfdir}/tmpfiles.d/suricata.conf
67
68 install -d ${D}${systemd_unitdir}/system
69 sed -e s:/etc:${sysconfdir}:g \
70 -e s:/var/run:/run:g \
71 -e s:/var:${localstatedir}:g \
72 -e s:/usr/bin:${bindir}:g \
73 -e s:/bin/kill:${base_bindir}/kill:g \
74 -e s:/usr/lib:${libdir}:g \
75 ${WORKDIR}/suricata.service > ${D}${systemd_unitdir}/system/suricata.service
76 fi
Brad Bishop19323692019-04-05 15:28:33 -040077
78 # Remove /var/run as it is created on startup
79 rm -rf ${D}${localstatedir}/run
80
81}
82
83pkg_postinst_ontarget_${PN} () {
Brad Bishop95dbbac2019-12-02 13:55:25 -050084if command -v systemd-tmpfiles >/dev/null; then
85 systemd-tmpfiles --create ${sysconfdir}/tmpfiles.d/suricata.conf
86elif [ -e ${sysconfdir}/init.d/populate-volatile.sh ]; then
Brad Bishop19323692019-04-05 15:28:33 -040087 ${sysconfdir}/init.d/populate-volatile.sh update
88fi
89}
90
91SYSTEMD_PACKAGES = "${PN}"
92
93PACKAGES =+ "${PN}-socketcontrol"
Brad Bishop95dbbac2019-12-02 13:55:25 -050094FILES_${PN} += "${systemd_unitdir} ${sysconfdir}/tmpfiles.d"
Brad Bishop19323692019-04-05 15:28:33 -040095FILES_${PN}-socketcontrol = "${bindir}/suricatasc ${PYTHON_SITEPACKAGES_DIR}"
96
97CONFFILES_${PN} = "${sysconfdir}/suricata/suricata.yaml"
98
99RDEPENDS_${PN}-python = "python"