From: Jeremy Sowden <jeremy@azazel.net>
To: Pablo Neira Ayuso <pablo@netfilter.org>
Cc: netfilter-devel@vger.kernel.org
Subject: Re: [PATCH nft] build: disable --with-unitdir by default
Date: Fri, 29 Aug 2025 16:43:50 +0100 [thread overview]
Message-ID: <20250829154350.GE3204340@azazel.net> (raw)
In-Reply-To: <aK8aN4h2XsLnTdT6@calendula>
[-- Attachment #1: Type: text/plain, Size: 3800 bytes --]
On 2025-08-27, at 16:46:15 +0200, Pablo Neira Ayuso wrote:
> Cc'ing Phil, Jan.
>
> Excuse me my terse proposal description.
>
> Extension: This is an alternative patch to disable --with-unitdir by
> default, to address distcheck issue.
>
> I wonder also if this is a more conservative approach, this should
> integrate more seamlessly into existing pipelines while allowing
> distributors to opt-in to use this.
>
> But maybe I'm worrying too much and it is just fine to change defaults
> for downstream packagers.
The upshot of this is that the service file is not installed by default, but
the related man-page and the example main.nft still are. Gueesing this is an
oversight? If so, I will send a patch.
J.
> On Wed, Aug 27, 2025 at 04:02:14PM +0200, Pablo Neira Ayuso wrote:
> > Same behaviour as in the original patch:
> >
> > --with-unitdir auto-detects the systemd unit path.
> > --with-unitdir=PATH uses the PATH
> >
> > no --with-unitdir does not install the systemd unit path.
> >
> > INSTALL description looks fine for what this does.
> >
> > While at this, extend tests/build/ to cover for this new option.
> >
> > Fixes: c4b17cf830510 ("tools: add a systemd unit for static rulesets")
> > Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
> > ---
> > configure.ac | 29 +++++++++++++++++++++--------
> > tests/build/run-tests.sh | 2 +-
> > 2 files changed, 22 insertions(+), 9 deletions(-)
> >
> > diff --git a/configure.ac b/configure.ac
> > index 42708c9f2470..3a751cb054b9 100644
> > --- a/configure.ac
> > +++ b/configure.ac
> > @@ -115,15 +115,22 @@ AC_CHECK_DECLS([getprotobyname_r, getprotobynumber_r, getservbyport_r], [], [],
> > ]])
> >
> > AC_ARG_WITH([unitdir],
> > - [AS_HELP_STRING([--with-unitdir=PATH], [Path to systemd service unit directory])],
> > - [unitdir="$withval"],
> > + [AS_HELP_STRING([--with-unitdir[=PATH]],
> > + [Path to systemd service unit directory, or omit PATH to auto-detect])],
> > [
> > - unitdir=$("$PKG_CONFIG" systemd --variable systemdsystemunitdir 2>/dev/null)
> > - AS_IF([test -z "$unitdir"], [unitdir='${prefix}/lib/systemd/system'])
> > - ])
> > + if test "x$withval" = "xyes"; then
> > + unitdir=$($PKG_CONFIG --variable=systemdsystemunitdir systemd 2>/dev/null)
> > + AS_IF([test -z "$unitdir"], [unitdir='${prefix}/lib/systemd/system'])
> > + elif test "x$withval" = "xno"; then
> > + unitdir=""
> > + else
> > + unitdir="$withval"
> > + fi
> > + ],
> > + [unitdir=""]
> > +)
> > AC_SUBST([unitdir])
> >
> > -
> > AC_CONFIG_FILES([ \
> > Makefile \
> > libnftables.pc \
> > @@ -137,5 +144,11 @@ nft configuration:
> > use mini-gmp: ${with_mini_gmp}
> > enable man page: ${enable_man_doc}
> > libxtables support: ${with_xtables}
> > - json output support: ${with_json}
> > - systemd unit: ${unitdir}"
> > + json output support: ${with_json}"
> > +
> > +if test "x$unitdir" != "x"; then
> > +AC_SUBST([unitdir])
> > +echo " systemd unit: ${unitdir}"
> > +else
> > +echo " systemd unit: no"
> > +fi
> > diff --git a/tests/build/run-tests.sh b/tests/build/run-tests.sh
> > index 916df2e2fa8e..1d32d5d8afcb 100755
> > --- a/tests/build/run-tests.sh
> > +++ b/tests/build/run-tests.sh
> > @@ -3,7 +3,7 @@
> > log_file="$(pwd)/tests.log"
> > dir=../..
> > argument=( --without-cli --with-cli=linenoise --with-cli=editline --enable-debug --with-mini-gmp
> > - --enable-man-doc --with-xtables --with-json)
> > + --enable-man-doc --with-xtables --with-json --with-unitdir --with-unidir=/lib/systemd/system)
> > ok=0
> > failed=0
> >
> > --
> > 2.30.2
> >
> >
>
[-- Attachment #2: signature.asc --]
[-- Type: application/pgp-signature, Size: 931 bytes --]
next prev parent reply other threads:[~2025-08-29 16:27 UTC|newest]
Thread overview: 6+ messages / expand[flat|nested] mbox.gz Atom feed top
2025-08-27 14:02 [PATCH nft] build: disable --with-unitdir by default Pablo Neira Ayuso
2025-08-27 14:46 ` Pablo Neira Ayuso
2025-08-27 20:36 ` Pablo Neira Ayuso
2025-08-27 20:38 ` Phil Sutter
2025-08-29 15:43 ` Jeremy Sowden [this message]
2025-09-25 21:43 ` Pablo Neira Ayuso
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=20250829154350.GE3204340@azazel.net \
--to=jeremy@azazel.net \
--cc=netfilter-devel@vger.kernel.org \
--cc=pablo@netfilter.org \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.