2020-08-03 09:50:49 +03:00
option ( 'no_git' , type : 'boolean' , value : false , description : 'Disable git submodule update' )
2020-07-28 18:22:42 +03:00
option ( 'packager' , type : 'string' , value : '' , description : 'Extra packager name' )
option ( 'packager_version' , type : 'string' , value : '' , description : 'Extra packager version' )
2020-08-03 09:50:49 +03:00
option ( 'system' , type : 'boolean' , value : false , description : 'Set install paths to system ones' )
option ( 'runstatedir' , type : 'string' , value : '' , description : 'State directory for temporary sockets, pid files, etc' )
2023-04-29 19:13:56 +03:00
option ( 'initconfdir' , type : 'string' , value : '' , description : 'directory for init script configuration files' )
2024-06-06 14:57:08 +03:00
option ( 'unitdir' , type : 'string' , value : '' , description : 'directory for systemd unit files' )
2024-06-06 14:57:08 +03:00
option ( 'sysusersdir' , type : 'string' , value : '' , description : 'directory for sysusers files' )
2024-05-07 13:38:07 +03:00
# dep:tests
2020-09-22 14:41:49 +03:00
option ( 'expensive_tests' , type : 'feature' , value : 'auto' , description : 'set the default for enabling expensive tests (long timeouts)' )
2020-04-30 15:56:21 +03:00
option ( 'test_coverage' , type : 'boolean' , value : false , description : 'turn on code coverage instrumentation' )
2020-07-24 17:35:03 +03:00
option ( 'git_werror' , type : 'feature' , value : 'auto' , description : 'use -Werror if building from GIT' )
2020-08-19 12:15:35 +03:00
option ( 'rpath' , type : 'feature' , value : 'auto' , description : 'whether to include rpath information in installed binaries and libraries' )
2021-02-26 22:11:06 +03:00
option ( 'docdir' , type : 'string' , value : '' , description : 'documentation installation directory' )
2020-10-08 15:39:38 +03:00
option ( 'docs' , type : 'feature' , value : 'auto' , description : 'whether to generate documentation' )
2023-10-03 16:39:02 +03:00
option ( 'tests' , type : 'feature' , value : 'auto' , description : 'whether to build and run tests' )
2020-07-29 15:16:58 +03:00
2020-07-29 15:19:59 +03:00
# build dependencies options
option ( 'apparmor' , type : 'feature' , value : 'auto' , description : 'apparmor support' )
2020-07-29 15:20:15 +03:00
option ( 'attr' , type : 'feature' , value : 'auto' , description : 'attr support' )
2020-07-29 15:20:29 +03:00
option ( 'audit' , type : 'feature' , value : 'auto' , description : 'audit support' )
2024-05-07 13:38:07 +03:00
# dep:readline
2020-06-24 14:24:53 +03:00
option ( 'bash_completion' , type : 'feature' , value : 'auto' , description : 'bash-completion support' )
option ( 'bash_completion_dir' , type : 'string' , value : '' , description : 'directory containing bash completion scripts' )
2020-06-24 14:25:04 +03:00
option ( 'blkid' , type : 'feature' , value : 'auto' , description : 'blkid support' )
2020-06-24 14:25:16 +03:00
option ( 'capng' , type : 'feature' , value : 'auto' , description : 'cap-ng support' )
2020-06-24 14:25:26 +03:00
option ( 'curl' , type : 'feature' , value : 'auto' , description : 'curl support' )
2020-07-01 04:10:10 +03:00
option ( 'fuse' , type : 'feature' , value : 'auto' , description : 'fuse support' )
2020-06-24 14:26:27 +03:00
option ( 'glusterfs' , type : 'feature' , value : 'auto' , description : 'glusterfs support' )
2020-06-24 14:26:48 +03:00
option ( 'libiscsi' , type : 'feature' , value : 'auto' , description : 'libiscsi support' )
2020-10-08 14:01:29 +03:00
option ( 'libnl' , type : 'feature' , value : 'auto' , description : 'libnl support' )
2020-06-24 14:27:03 +03:00
option ( 'libpcap' , type : 'feature' , value : 'auto' , description : 'libpcap support' )
2020-06-24 14:27:12 +03:00
option ( 'libssh' , type : 'feature' , value : 'auto' , description : 'libssh support' )
2020-04-29 12:07:42 +03:00
option ( 'libssh2' , type : 'feature' , value : 'auto' , description : 'libssh2 support' )
2020-06-24 14:27:31 +03:00
option ( 'netcf' , type : 'feature' , value : 'auto' , description : 'netcf support' )
2020-06-24 14:27:40 +03:00
option ( 'nls' , type : 'feature' , value : 'auto' , description : 'nls support' )
2020-04-29 16:43:09 +03:00
option ( 'numactl' , type : 'feature' , value : 'auto' , description : 'numactl support' )
2020-04-29 11:18:37 +03:00
option ( 'openwsman' , type : 'feature' , value : 'auto' , description : 'openwsman support' )
2020-04-30 12:35:51 +03:00
option ( 'pciaccess' , type : 'feature' , value : 'auto' , description : 'pciaccess support' )
2020-04-29 12:32:41 +03:00
option ( 'polkit' , type : 'feature' , value : 'auto' , description : 'use PolicyKit for UNIX socket access checks' )
2020-07-29 15:20:43 +03:00
option ( 'readline' , type : 'feature' , value : 'auto' , description : 'readline support' )
2020-07-29 15:21:00 +03:00
option ( 'sanlock' , type : 'feature' , value : 'auto' , description : 'sanlock support' )
2020-08-19 00:20:19 +03:00
option ( 'sasl' , type : 'feature' , value : 'auto' , description : 'sasl support' )
2020-07-29 15:21:29 +03:00
option ( 'selinux' , type : 'feature' , value : 'auto' , description : 'selinux support' )
option ( 'selinux_mount' , type : 'string' , value : '' , description : 'set SELinux mount point' )
2024-04-16 17:32:26 +03:00
option ( 'sshconfdir' , type : 'string' , value : '' , description : 'directory for SSH client configuration' )
2024-05-07 13:38:07 +03:00
# dep:pciaccess
2020-07-29 15:21:43 +03:00
option ( 'udev' , type : 'feature' , value : 'auto' , description : 'udev support' )
2024-05-07 13:38:07 +03:00
# dep:driver_remote
2020-07-29 15:22:10 +03:00
option ( 'wireshark_dissector' , type : 'feature' , value : 'auto' , description : 'wireshark support' )
option ( 'wireshark_plugindir' , type : 'string' , value : '' , description : 'wireshark plugins directory for use when installing wireshark plugin' )
2020-07-29 15:22:23 +03:00
option ( 'yajl' , type : 'feature' , value : 'auto' , description : 'yajl support' )
2020-07-29 15:19:59 +03:00
2020-07-29 15:16:58 +03:00
# build driver options
2020-04-30 01:56:50 +03:00
option ( 'driver_bhyve' , type : 'feature' , value : 'auto' , description : 'bhyve driver' )
2024-05-07 13:38:07 +03:00
# dep:curl
2020-08-03 21:59:42 +03:00
option ( 'driver_esx' , type : 'feature' , value : 'auto' , description : 'esx driver' )
2024-05-07 13:38:07 +03:00
# dep:openwsman
2020-04-30 13:24:29 +03:00
option ( 'driver_hyperv' , type : 'feature' , value : 'auto' , description : 'Hyper-V driver' )
2024-05-07 13:38:07 +03:00
# dep:pciaccess dep:udev dep:driver_remote dep:driver_libvirtd
2020-04-28 23:52:30 +03:00
option ( 'driver_interface' , type : 'feature' , value : 'auto' , description : 'host interface driver' )
2024-05-07 13:38:07 +03:00
# dep:driver_remote
2020-06-17 00:47:29 +03:00
option ( 'driver_libvirtd' , type : 'feature' , value : 'auto' , description : 'libvirtd driver' )
2024-05-07 13:38:07 +03:00
# dep:driver_remote dep:driver_libvirtd
2020-04-30 12:30:11 +03:00
option ( 'driver_libxl' , type : 'feature' , value : 'auto' , description : 'libxenlight driver' )
2024-05-07 13:38:07 +03:00
# dep:driver_remote dep:driver_libvirtd
2020-04-30 12:30:32 +03:00
option ( 'driver_lxc' , type : 'feature' , value : 'auto' , description : 'Linux Container driver' )
2024-05-07 13:38:07 +03:00
# dep:curl dep:yajl dep:driver_remote dep:driver_libvirtd
2021-05-12 20:01:31 +03:00
option ( 'driver_ch' , type : 'feature' , value : 'auto' , description : 'Cloud-Hypervisor driver' )
option ( 'ch_user' , type : 'string' , value : '' , description : 'username to run Cloud-Hypervisor system instance as' )
option ( 'ch_group' , type : 'string' , value : '' , description : 'groupname to run Cloud-Hypervisor system instance as' )
2024-05-07 13:38:07 +03:00
# dep:driver_remote dep:driver_libvirtd
2020-04-30 14:35:50 +03:00
option ( 'driver_network' , type : 'feature' , value : 'auto' , description : 'virtual network driver' )
2020-04-30 02:03:08 +03:00
option ( 'driver_openvz' , type : 'feature' , value : 'auto' , description : 'OpenVZ driver' )
2024-05-07 13:38:07 +03:00
# dep:yajl dep:driver_remote dep:driver_libvirtd
2020-07-01 04:07:00 +03:00
option ( 'driver_qemu' , type : 'feature' , value : 'auto' , description : 'QEMU/KVM driver' )
option ( 'qemu_user' , type : 'string' , value : '' , description : 'username to run QEMU system instance as' )
option ( 'qemu_group' , type : 'string' , value : '' , description : 'groupname to run QEMU system instance as' )
2020-08-21 00:52:17 +03:00
option ( 'qemu_moddir' , type : 'string' , value : '' , description : 'set the directory where QEMU modules are located' )
2021-11-15 20:13:56 +03:00
option ( 'qemu_datadir' , type : 'string' , value : '' , description : 'set the directory where QEMU shared data is located' )
2021-05-26 17:06:40 +03:00
option ( 'driver_remote' , type : 'feature' , value : 'auto' , description : 'remote driver' )
2021-05-24 13:36:28 +03:00
option ( 'remote_default_mode' , type : 'combo' , choices : [ 'legacy' , 'direct' ] , value : 'direct' , description : 'remote driver default mode' )
2020-03-27 20:14:18 +03:00
option ( 'driver_secrets' , type : 'feature' , value : 'auto' , description : 'local secrets management driver' )
2021-05-26 18:46:26 +03:00
option ( 'driver_test' , type : 'feature' , value : 'auto' , description : 'test driver' )
2020-10-08 15:23:52 +03:00
option ( 'driver_vbox' , type : 'feature' , value : 'auto' , description : 'VirtualBox XPCOMC driver' )
2020-06-17 00:47:58 +03:00
option ( 'vbox_xpcomc_dir' , type : 'string' , value : '' , description : 'Location of directory containing VirtualBox XPCOMC library' )
2020-10-08 13:55:30 +03:00
option ( 'driver_vmware' , type : 'feature' , value : 'auto' , description : 'VMware driver' )
2020-06-19 12:57:23 +03:00
option ( 'driver_vz' , type : 'feature' , value : 'auto' , description : 'Virtuozzo driver' )
2020-06-24 12:01:08 +03:00
option ( 'secdriver_apparmor' , type : 'feature' , value : 'auto' , description : 'use AppArmor security driver' )
2024-05-07 13:38:07 +03:00
# dep:secdriver_apparmor
2021-05-27 16:20:43 +03:00
option ( 'apparmor_profiles' , type : 'feature' , value : 'auto' , description : 'install apparmor profiles' )
2024-05-07 13:38:07 +03:00
# dep:selinux
2020-06-24 12:01:08 +03:00
option ( 'secdriver_selinux' , type : 'feature' , value : 'auto' , description : 'use SELinux security driver' )
2020-04-30 11:43:08 +03:00
# storage driver options
2020-08-18 22:01:15 +03:00
option ( 'storage_dir' , type : 'feature' , value : 'auto' , description : 'directory backend for the storage driver' )
2020-06-24 12:53:47 +03:00
option ( 'storage_disk' , type : 'feature' , value : 'auto' , description : 'GPartd Disk backend for the storage driver' )
2020-04-30 11:55:52 +03:00
option ( 'storage_fs' , type : 'feature' , value : 'auto' , description : 'FileSystem backend for the storage driver' )
2020-04-30 12:07:59 +03:00
option ( 'storage_gluster' , type : 'feature' , value : 'auto' , description : 'Gluster backend for the storage driver' )
2020-04-30 12:09:45 +03:00
option ( 'storage_iscsi' , type : 'feature' , value : 'auto' , description : 'iscsi backend for the storage driver' )
2020-04-30 11:59:58 +03:00
option ( 'storage_iscsi_direct' , type : 'feature' , value : 'auto' , description : 'iscsi-direct backend for the storage driver' )
2020-04-30 12:00:49 +03:00
option ( 'storage_lvm' , type : 'feature' , value : 'auto' , description : 'LVM backend for the storage driver' )
2020-04-30 12:01:46 +03:00
option ( 'storage_mpath' , type : 'feature' , value : 'auto' , description : 'mpath backend for the storage driver' )
2020-06-19 18:09:22 +03:00
option ( 'storage_rbd' , type : 'feature' , value : 'auto' , description : 'RADOS Block Device backend for the storage driver' )
2020-04-30 12:31:33 +03:00
option ( 'storage_scsi' , type : 'feature' , value : 'auto' , description : 'SCSI backend for the storage driver' )
2020-04-30 12:11:21 +03:00
option ( 'storage_vstorage' , type : 'feature' , value : 'auto' , description : 'Virtuozzo storage backend for the storage driver' )
2020-04-30 12:12:03 +03:00
option ( 'storage_zfs' , type : 'feature' , value : 'auto' , description : 'ZFS backend for the storage driver' )
2020-07-24 17:43:48 +03:00
# build feature options
option ( 'chrdev_lock_files' , type : 'string' , value : '' , description : 'location for UUCP style lock files for character devices (leave empty for default paths on some platforms)' )
2020-07-24 17:44:59 +03:00
option ( 'dtrace' , type : 'feature' , value : 'auto' , description : 'use dtrace for static probing' )
2020-10-08 15:10:07 +03:00
option ( 'firewalld' , type : 'feature' , value : 'auto' , description : 'firewalld support' )
2024-05-07 13:38:07 +03:00
# dep:firewalld
2020-10-08 15:10:07 +03:00
option ( 'firewalld_zone' , type : 'feature' , value : 'auto' , description : 'whether to install firewalld libvirt zone' )
network: introduce a "none" firewall backend type
There are two scenarios identified after the recent firewall backend
selection was introduced, which result in libvirtd failing to startup
due to an inability to find either iptables/nftables
- On Linux if running unprivileged with $PATH lacking the dir
containing iptables/nftables
- On non-Linux where iptables/nftables never existed
In the former case, it is preferrable to restore the behaviour whereby
the driver starts successfully. Users will get an error reported when
attempting to start any virtual network, due to the lack of permissions
needed to create bridge devices. This makes the missing firewall backend
irrelevant.
In the latter case, the network driver calls the 'nop' platform
implementation which does not attempt to implement any firewall logic,
just allowing the network to start without firewall rules.
To solve this are number of changes are required
* Introduce VIR_FIREWALL_BACKEND_NONE, which does nothing except
report a fatal error from virFirewallApply(). This code path
is unreachable, since we'll never create a virFirewall
object with with VIR_FIREWALL_BACKEND_NONE, so the error reporting
is just a sanity check.
* Ignore the compile time backend defaults and assume use of
the 'none' backend if running unprivileged.
This fixes the first regression, avoiding the failure to start
libvirtd on Linux in unprivileged context, instead allowing use
of the driver and expecting a permission denied when creating a
bridge.
* Reject the use of compile time backend defaults no non-Linux
and hardcode the 'none' backend. The non-Linux platforms have
no firewall implementation at all currently, so there's no
reason to permit the use of 'firewall_backend_priority'
meson option.
This fixes the second regression, avoiding the failure to start
libvirtd on non-Linux hosts due to non-existant Linux binaries.
* Change the Linux platform backend to raise an error if the
firewall backend is 'none'. Again this code path is unreachable
by default since we'll fail to create the bridge before getting
here, but if someone modified network.conf to request the 'none'
backend, this will stop further progress.
* Change the nop platform backend to raise an error if the
firewall backend is 'iptables' or 'nftables'. Again this code
path is unreachable, since we should already have failed to
find the iptables/nftables binaries on non-Linux hosts, so
this is just a sanity check.
* 'none' is not permited as a value in 'firewall_backend_priority'
meson option, since it is conceptually meaningless to ask for
that on Linux.
NB, 'firewall_backend_priority' allows repeated options temporarily,
which we don't want. Meson intends to turn this into a hard error
DEPRECATION: Duplicated values in array option is deprecated. This will become a hard error in the future.
and we can live with the reduced error checking until that happens.
Reviewed-by: Andrea Bolognani <abologna@redhat.com>
Signed-off-by: Daniel P. Berrangé <berrange@redhat.com>
2024-06-13 20:16:48 +03:00
option ( 'firewall_backend_priority' , type : 'array' , choices : [ 'nftables' , 'iptables' ] , value : [ ] , description : 'order in which to try firewall backends' )
2020-07-24 17:45:36 +03:00
option ( 'host_validate' , type : 'feature' , value : 'auto' , description : 'build virt-host-validate' )
2020-07-16 18:36:03 +03:00
option ( 'init_script' , type : 'combo' , choices : [ 'systemd' , 'openrc' , 'check' , 'none' ] , value : 'check' , description : 'Style of init script to install' )
2020-07-24 17:45:58 +03:00
option ( 'loader_nvram' , type : 'string' , value : '' , description : 'Pass list of pairs of <loader>:<nvram> paths. Both pairs and list items are separated by a colon.' )
2020-07-16 19:09:20 +03:00
option ( 'login_shell' , type : 'feature' , value : 'auto' , description : 'build virt-login-shell' )
2024-05-07 13:38:07 +03:00
# dep:yajl dep:driver_network dep:libvirtd
2020-06-24 14:27:59 +03:00
option ( 'nss' , type : 'feature' , value : 'auto' , description : 'enable Name Service Switch plugin for resolving guest IP addresses' )
2024-05-07 13:38:07 +03:00
# dep:numactl
2020-07-01 03:47:06 +03:00
option ( 'numad' , type : 'feature' , value : 'auto' , description : 'use numad to manage CPU placement dynamically' )
2023-11-08 22:14:50 +03:00
option ( 'nbdkit' , type : 'feature' , value : 'auto' , description : 'Build nbdkit storage backend' )
2024-05-07 13:38:07 +03:00
# dep:nbdkit
2023-11-08 22:14:50 +03:00
option ( 'nbdkit_config_default' , type : 'feature' , value : 'auto' , description : 'Whether to use nbdkit storage backend for network disks by default (configurable)' )
2020-07-01 03:58:23 +03:00
option ( 'pm_utils' , type : 'feature' , value : 'auto' , description : 'use pm-utils for power management' )
2024-04-16 17:32:26 +03:00
option ( 'ssh_proxy' , type : 'feature' , value : 'auto' , description : 'Build ssh-proxy for ssh over vsock' )
2020-04-30 01:43:59 +03:00
option ( 'sysctl_config' , type : 'feature' , value : 'auto' , description : 'Whether to install sysctl configs' )
2024-05-07 13:38:07 +03:00
# dep:sysctl_config
2024-02-09 17:20:58 +03:00
option ( 'userfaultfd_sysctl' , type : 'feature' , value : 'auto' , description : 'Whether to install sysctl config for enabling unprivileged userfaultfd' )
2020-07-01 04:07:37 +03:00
option ( 'tls_priority' , type : 'string' , value : 'NORMAL' , description : 'set the default TLS session priority string' )
