Linux Netfilter development
 help / color / mirror / Atom feed
From: Jeremy Sowden <jeremy@azazel.net>
To: Pablo Neira Ayuso <pablo@netfilter.org>
Cc: netfilter-devel@vger.kernel.org
Subject: Re: [PATCH nft] build: disable --with-unitdir by default
Date: Fri, 29 Aug 2025 16:43:50 +0100	[thread overview]
Message-ID: <20250829154350.GE3204340@azazel.net> (raw)
In-Reply-To: <aK8aN4h2XsLnTdT6@calendula>

[-- Attachment #1: Type: text/plain, Size: 3800 bytes --]

On 2025-08-27, at 16:46:15 +0200, Pablo Neira Ayuso wrote:
> Cc'ing Phil, Jan.
> 
> Excuse me my terse proposal description.
> 
> Extension: This is an alternative patch to disable --with-unitdir by
> default, to address distcheck issue.
> 
> I wonder also if this is a more conservative approach, this should
> integrate more seamlessly into existing pipelines while allowing
> distributors to opt-in to use this.
> 
> But maybe I'm worrying too much and it is just fine to change defaults
> for downstream packagers.

The upshot of this is that the service file is not installed by default, but
the related man-page and the example main.nft still are.  Gueesing this is an
oversight?  If so, I will send a patch.

J.

> On Wed, Aug 27, 2025 at 04:02:14PM +0200, Pablo Neira Ayuso wrote:
> > Same behaviour as in the original patch:
> > 
> >   --with-unitdir	auto-detects the systemd unit path.
> >   --with-unitdir=PATH	uses the PATH
> > 
> > no --with-unitdir does not install the systemd unit path.
> > 
> > INSTALL description looks fine for what this does.
> > 
> > While at this, extend tests/build/ to cover for this new option.
> > 
> > Fixes: c4b17cf830510 ("tools: add a systemd unit for static rulesets")
> > Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
> > ---
> >  configure.ac             | 29 +++++++++++++++++++++--------
> >  tests/build/run-tests.sh |  2 +-
> >  2 files changed, 22 insertions(+), 9 deletions(-)
> > 
> > diff --git a/configure.ac b/configure.ac
> > index 42708c9f2470..3a751cb054b9 100644
> > --- a/configure.ac
> > +++ b/configure.ac
> > @@ -115,15 +115,22 @@ AC_CHECK_DECLS([getprotobyname_r, getprotobynumber_r, getservbyport_r], [], [],
> >  ]])
> >  
> >  AC_ARG_WITH([unitdir],
> > -	[AS_HELP_STRING([--with-unitdir=PATH], [Path to systemd service unit directory])],
> > -	[unitdir="$withval"],
> > +	[AS_HELP_STRING([--with-unitdir[=PATH]],
> > +	[Path to systemd service unit directory, or omit PATH to auto-detect])],
> >  	[
> > -		unitdir=$("$PKG_CONFIG" systemd --variable systemdsystemunitdir 2>/dev/null)
> > -		AS_IF([test -z "$unitdir"], [unitdir='${prefix}/lib/systemd/system'])
> > -	])
> > +		if test "x$withval" = "xyes"; then
> > +			unitdir=$($PKG_CONFIG --variable=systemdsystemunitdir systemd 2>/dev/null)
> > +			AS_IF([test -z "$unitdir"], [unitdir='${prefix}/lib/systemd/system'])
> > +		elif test "x$withval" = "xno"; then
> > +			unitdir=""
> > +		else
> > +			unitdir="$withval"
> > +		fi
> > +	],
> > +	[unitdir=""]
> > +)
> >  AC_SUBST([unitdir])
> >  
> > -
> >  AC_CONFIG_FILES([					\
> >  		Makefile				\
> >  		libnftables.pc				\
> > @@ -137,5 +144,11 @@ nft configuration:
> >    use mini-gmp:			${with_mini_gmp}
> >    enable man page:              ${enable_man_doc}
> >    libxtables support:		${with_xtables}
> > -  json output support:          ${with_json}
> > -  systemd unit:			${unitdir}"
> > +  json output support:          ${with_json}"
> > +
> > +if test "x$unitdir" != "x"; then
> > +AC_SUBST([unitdir])
> > +echo "  systemd unit:                 ${unitdir}"
> > +else
> > +echo "  systemd unit:                 no"
> > +fi
> > diff --git a/tests/build/run-tests.sh b/tests/build/run-tests.sh
> > index 916df2e2fa8e..1d32d5d8afcb 100755
> > --- a/tests/build/run-tests.sh
> > +++ b/tests/build/run-tests.sh
> > @@ -3,7 +3,7 @@
> >  log_file="$(pwd)/tests.log"
> >  dir=../..
> >  argument=( --without-cli --with-cli=linenoise --with-cli=editline --enable-debug --with-mini-gmp
> > -	   --enable-man-doc --with-xtables --with-json)
> > +	   --enable-man-doc --with-xtables --with-json --with-unitdir --with-unidir=/lib/systemd/system)
> >  ok=0
> >  failed=0
> >  
> > -- 
> > 2.30.2
> > 
> > 
> 

[-- Attachment #2: signature.asc --]
[-- Type: application/pgp-signature, Size: 931 bytes --]

  parent reply	other threads:[~2025-08-29 16:27 UTC|newest]

Thread overview: 6+ messages / expand[flat|nested]  mbox.gz  Atom feed  top
2025-08-27 14:02 [PATCH nft] build: disable --with-unitdir by default Pablo Neira Ayuso
2025-08-27 14:46 ` Pablo Neira Ayuso
2025-08-27 20:36   ` Pablo Neira Ayuso
2025-08-27 20:38   ` Phil Sutter
2025-08-29 15:43   ` Jeremy Sowden [this message]
2025-09-25 21:43     ` Pablo Neira Ayuso

Reply instructions:

You may reply publicly to this message via plain-text email
using any one of the following methods:

* Save the following mbox file, import it into your mail client,
  and reply-to-all from there: mbox

  Avoid top-posting and favor interleaved quoting:
  https://en.wikipedia.org/wiki/Posting_style#Interleaved_style

* Reply using the --to, --cc, and --in-reply-to
  switches of git-send-email(1):

  git send-email \
    --in-reply-to=20250829154350.GE3204340@azazel.net \
    --to=jeremy@azazel.net \
    --cc=netfilter-devel@vger.kernel.org \
    --cc=pablo@netfilter.org \
    /path/to/YOUR_REPLY

  https://kernel.org/pub/software/scm/git/docs/git-send-email.html

* If your mail client supports setting the In-Reply-To header
  via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox