mirror of
https://github.com/openembedded/meta-openembedded.git
synced 2026-05-31 01:10:08 +00:00
ulogd2: Add recipe
ulogd-2.x provides a flexible, almost universal logging daemon for netfilter logging. This encompasses both packet-based logging (logging of policy violations) and flow-based logging, e.g. for accounting purpose. Signed-off-by: Alex Kiernan <alex.kiernan@gmail.com> Signed-off-by: Alex Kiernan <alexk@zuma.ai> Signed-off-by: Khem Raj <raj.khem@gmail.com>
This commit is contained in:
@@ -0,0 +1,180 @@
|
|||||||
|
#! /bin/sh
|
||||||
|
### BEGIN INIT INFO
|
||||||
|
# Provides: ulogd2 ulogd
|
||||||
|
# Required-Start: $local_fs
|
||||||
|
# Should-Start:
|
||||||
|
# Required-Stop: $local_fs
|
||||||
|
# Should-Stop:
|
||||||
|
# Default-Start: 2 3 4 5
|
||||||
|
# Default-Stop: 0 1 6
|
||||||
|
# Short-Description: Userspace logging daemon for netfilter/iptables
|
||||||
|
### END INIT INFO
|
||||||
|
|
||||||
|
# The definition of actions: (From LSB 3.1.0)
|
||||||
|
# start start the service
|
||||||
|
# stop stop the service
|
||||||
|
# restart stop and restart the service if the service is already running,
|
||||||
|
# otherwise start the service
|
||||||
|
# try-restart restart the service if the service is already running
|
||||||
|
# reload cause the configuration of the service to be reloaded without
|
||||||
|
# actually stopping and restarting the service
|
||||||
|
# force-reload cause the configuration to be reloaded if the service supports
|
||||||
|
# this, otherwise restart the service if it is running
|
||||||
|
# status print the current status of the service
|
||||||
|
|
||||||
|
# The start, stop, restart, force-reload, and status actions shall be supported
|
||||||
|
# by all init scripts; the reload and the try-restart actions are optional
|
||||||
|
|
||||||
|
# PATH should only include /usr/* if it runs after the mountnfs.sh script
|
||||||
|
PATH=/sbin:/usr/sbin:/bin:/usr/bin
|
||||||
|
|
||||||
|
DESC="Userspace logging daemon for netfilter/iptables"
|
||||||
|
NAME="ulogd"
|
||||||
|
DAEMON=/usr/sbin/$NAME
|
||||||
|
DAEMON_ARGS="-d"
|
||||||
|
PIDFILE=/var/run/$NAME.pid
|
||||||
|
|
||||||
|
. /etc/init.d/functions || exit 1
|
||||||
|
|
||||||
|
# Exit if the package is not installed
|
||||||
|
[ -x "$DAEMON" ] || exit 0
|
||||||
|
|
||||||
|
# Read configuration variable file if it is present
|
||||||
|
[ -r /etc/default/$NAME ] && . /etc/default/$NAME
|
||||||
|
|
||||||
|
#
|
||||||
|
# Function that starts the daemon/service
|
||||||
|
#
|
||||||
|
do_start() {
|
||||||
|
local status pid
|
||||||
|
|
||||||
|
status=0
|
||||||
|
pid=`pidofproc $NAME` || status=$?
|
||||||
|
case $status in
|
||||||
|
0)
|
||||||
|
echo "$DESC already running ($pid)."
|
||||||
|
exit 1
|
||||||
|
;;
|
||||||
|
*)
|
||||||
|
echo "Starting $DESC ..."
|
||||||
|
exec $DAEMON $DAEMON_ARGS >/dev/null 2>&1 || status=$?
|
||||||
|
echo "ERROR: Failed to start $DESC."
|
||||||
|
exit $status
|
||||||
|
;;
|
||||||
|
esac
|
||||||
|
|
||||||
|
# Add code here, if necessary, that waits for the process to be ready
|
||||||
|
# to handle requests from services started subsequently which depend
|
||||||
|
# on this one. As a last resort, sleep for some time.
|
||||||
|
}
|
||||||
|
|
||||||
|
#
|
||||||
|
# Function that stops the daemon/service
|
||||||
|
#
|
||||||
|
do_stop() {
|
||||||
|
local pid status
|
||||||
|
|
||||||
|
status=0
|
||||||
|
pid=`pidofproc $NAME` || status=$?
|
||||||
|
case $status in
|
||||||
|
0)
|
||||||
|
# Exit when fail to stop, the kill would complain when fail
|
||||||
|
kill -s 15 $pid >/dev/null && rm -f $PIDFILE && \
|
||||||
|
echo "Stopped $DESC ($pid)." || exit $?
|
||||||
|
;;
|
||||||
|
*)
|
||||||
|
echo "$DESC is not running; none killed." >&2
|
||||||
|
;;
|
||||||
|
esac
|
||||||
|
|
||||||
|
# Wait for children to finish too if this is a daemon that forks
|
||||||
|
# and if the daemon is only ever run from this initscript.
|
||||||
|
# If the above conditions are not satisfied then add some other code
|
||||||
|
# that waits for the process to drop all resources that could be
|
||||||
|
# needed by services started subsequently. A last resort is to
|
||||||
|
# sleep for some time.
|
||||||
|
return $status
|
||||||
|
}
|
||||||
|
|
||||||
|
#
|
||||||
|
# Function that sends a SIGHUP to the daemon/service
|
||||||
|
#
|
||||||
|
do_reload() {
|
||||||
|
local pid status
|
||||||
|
|
||||||
|
status=0
|
||||||
|
# If the daemon can reload its configuration without
|
||||||
|
# restarting (for example, when it is sent a SIGHUP),
|
||||||
|
# then implement that here.
|
||||||
|
pid=`pidofproc $NAME` || status=$?
|
||||||
|
case $status in
|
||||||
|
0)
|
||||||
|
echo "Reloading $DESC ..."
|
||||||
|
kill -s 1 $pid || exit $?
|
||||||
|
;;
|
||||||
|
*)
|
||||||
|
echo "$DESC is not running; none reloaded." >&2
|
||||||
|
;;
|
||||||
|
esac
|
||||||
|
exit $status
|
||||||
|
}
|
||||||
|
|
||||||
|
|
||||||
|
#
|
||||||
|
# Function that shows the daemon/service status
|
||||||
|
#
|
||||||
|
status_of_proc () {
|
||||||
|
local pid status
|
||||||
|
|
||||||
|
status=0
|
||||||
|
# pidof output null when no program is running, so no "2>/dev/null".
|
||||||
|
pid=`pidofproc $NAME` || status=$?
|
||||||
|
case $status in
|
||||||
|
0)
|
||||||
|
echo "$DESC is running ($pid)."
|
||||||
|
exit 0
|
||||||
|
;;
|
||||||
|
*)
|
||||||
|
echo "$DESC is not running." >&2
|
||||||
|
exit $status
|
||||||
|
;;
|
||||||
|
esac
|
||||||
|
}
|
||||||
|
|
||||||
|
case "$1" in
|
||||||
|
start)
|
||||||
|
do_start
|
||||||
|
;;
|
||||||
|
stop)
|
||||||
|
do_stop || exit $?
|
||||||
|
;;
|
||||||
|
status)
|
||||||
|
status_of_proc
|
||||||
|
;;
|
||||||
|
restart)
|
||||||
|
# Always start the service regardless the status of do_stop
|
||||||
|
do_stop
|
||||||
|
do_start
|
||||||
|
;;
|
||||||
|
try-restart|force-reload)
|
||||||
|
# force-reload is the same as reload or try-restart according
|
||||||
|
# to its definition, the reload is not implemented here, so
|
||||||
|
# force-reload is the alias of try-restart here, but it should
|
||||||
|
# be the alias of reload if reload is implemented.
|
||||||
|
#
|
||||||
|
# Only start the service when do_stop succeeds
|
||||||
|
do_stop && do_start
|
||||||
|
;;
|
||||||
|
reload)
|
||||||
|
# If the "reload" action is implemented properly, then let the
|
||||||
|
# force-reload be the alias of reload, and remove it from
|
||||||
|
# try-restart|force-reload)
|
||||||
|
#
|
||||||
|
do_reload
|
||||||
|
;;
|
||||||
|
*)
|
||||||
|
echo "Usage: $0 {start|stop|status|restart|try-restart|force-reload}" >&2
|
||||||
|
exit 3
|
||||||
|
;;
|
||||||
|
esac
|
||||||
|
|
||||||
@@ -0,0 +1,11 @@
|
|||||||
|
[Unit]
|
||||||
|
Description=Netfilter Ulogd daemon
|
||||||
|
Before=network-pre.target
|
||||||
|
Wants=network-pre.target
|
||||||
|
|
||||||
|
[Service]
|
||||||
|
ExecStart=@SBINDIR@/ulogd
|
||||||
|
ExecReload=kill -HUP ${MAINPID}
|
||||||
|
|
||||||
|
[Install]
|
||||||
|
WantedBy=multi-user.target
|
||||||
@@ -0,0 +1,80 @@
|
|||||||
|
SUMMARY = "Userspace logging daemon for netfilter/iptables"
|
||||||
|
DESCRIPTION = "ulogd-2.x provides a flexible, almost universal logging daemon for \
|
||||||
|
netfilter logging. This encompasses both packet-based logging (logging of \
|
||||||
|
policy violations) and flow-based logging, e.g. for accounting purpose."
|
||||||
|
HOMEPAGE = "https://www.netfilter.org/projects/ulogd/index.html"
|
||||||
|
LICENSE = "GPL-2.0-only"
|
||||||
|
LIC_FILES_CHKSUM = "file://COPYING;md5=c93c0550bd3173f4504b2cbd8991e50b"
|
||||||
|
|
||||||
|
DEPENDS = "libnfnetlink"
|
||||||
|
PROVIDES = "ulogd"
|
||||||
|
|
||||||
|
PV .= "+git${SRCPV}"
|
||||||
|
|
||||||
|
SRC_URI = "git://git.netfilter.org/ulogd2;branch=master \
|
||||||
|
file://ulogd.init \
|
||||||
|
file://ulogd.service \
|
||||||
|
"
|
||||||
|
SRCREV = "5f9628c9273815b6e560603427fe86118e7cb5bb"
|
||||||
|
|
||||||
|
S = "${WORKDIR}/git"
|
||||||
|
|
||||||
|
inherit autotools manpages pkgconfig systemd update-rc.d
|
||||||
|
|
||||||
|
PACKAGECONFIG ?= "dbi json nfacct nfct nflog pcap sqlite3 ulog"
|
||||||
|
PACKAGECONFIG[dbi] = "--enable-dbi,--disable-dbi,libdbi"
|
||||||
|
PACKAGECONFIG[json] = "--enable-json,--disable-json,jansson"
|
||||||
|
PACKAGECONFIG[manpages] = ""
|
||||||
|
PACKAGECONFIG[mysql] = "--enable-mysql,--disable-mysql,mysql5"
|
||||||
|
PACKAGECONFIG[nfacct] = "--enable-nfacct,--disable-nfacct,libnetfilter-acct"
|
||||||
|
PACKAGECONFIG[nfct] = "--enable-nfct,--disable-nfct,libnetfilter-conntrack"
|
||||||
|
PACKAGECONFIG[nflog] = "--enable-nflog,--disable-nflog,libnetfilter-log"
|
||||||
|
PACKAGECONFIG[pcap] = "--enable-pcap,--disable-pcap,libpcap"
|
||||||
|
PACKAGECONFIG[pgsql] = "--enable-pgsql,--disable-pgsql,postgresql"
|
||||||
|
PACKAGECONFIG[sqlite3] = "--enable-sqlite3,--disable-sqlite3,sqlite3"
|
||||||
|
PACKAGECONFIG[ulog] = "--enable-ulog,--disable-ulog"
|
||||||
|
|
||||||
|
do_install:append () {
|
||||||
|
install -d ${D}${sysconfdir}
|
||||||
|
install -m 0644 ${B}/ulogd.conf ${D}${sysconfdir}/ulogd.conf
|
||||||
|
|
||||||
|
install -d ${D}${mandir}/man8
|
||||||
|
install -m 0644 ${S}/ulogd.8 ${D}${mandir}/man8/ulogd.8
|
||||||
|
|
||||||
|
install -d ${D}${systemd_system_unitdir}
|
||||||
|
install -m 0644 ${WORKDIR}/ulogd.service ${D}${systemd_system_unitdir}
|
||||||
|
sed -i -e 's,@SBINDIR@,${sbindir},g' ${D}${systemd_system_unitdir}/ulogd.service
|
||||||
|
|
||||||
|
install -d ${D}${sysconfdir}/init.d
|
||||||
|
install -m 755 ${WORKDIR}/ulogd.init ${D}${sysconfdir}/init.d/ulogd
|
||||||
|
}
|
||||||
|
|
||||||
|
PACKAGES += "${PN}-plugins"
|
||||||
|
ALLOW_EMPTY:${PN}-plugins = "1"
|
||||||
|
|
||||||
|
PACKAGES_DYNAMIC += "^${PN}-plugin-.*$"
|
||||||
|
NOAUTOPACKAGEDEBUG = "1"
|
||||||
|
|
||||||
|
CONFFILES:${PN} = "${sysconfdir}/ulogd.conf"
|
||||||
|
RRECOMMENDS:${PN} += "${PN}-plugins"
|
||||||
|
|
||||||
|
FILES:${PN}-dbg += "${sbindir}/.debug"
|
||||||
|
|
||||||
|
python split_ulogd_libs () {
|
||||||
|
libdir = d.expand('${libdir}/ulogd')
|
||||||
|
dbglibdir = os.path.join(libdir, '.debug')
|
||||||
|
|
||||||
|
split_packages = do_split_packages(d, libdir, r'^ulogd_.*\_([A-Z0-9]*).so', '${PN}-plugin-%s', 'ulogd2 %s plugin', prepend=True)
|
||||||
|
split_dbg_packages = do_split_packages(d, dbglibdir, r'^ulogd_.*\_([A-Z0-9]*).so', '${PN}-plugin-%s-dbg', 'ulogd2 %s plugin - Debugging files', prepend=True, extra_depends='${PN}-dbg')
|
||||||
|
|
||||||
|
if split_packages:
|
||||||
|
pn = d.getVar('PN')
|
||||||
|
d.setVar('RRECOMMENDS:' + pn + '-plugins', ' '.join(split_packages))
|
||||||
|
d.appendVar('RRECOMMENDS:' + pn + '-dbg', ' ' + ' '.join(split_dbg_packages))
|
||||||
|
}
|
||||||
|
PACKAGESPLITFUNCS:prepend = "split_ulogd_libs "
|
||||||
|
|
||||||
|
SYSTEMD_SERVICE:${PN} = "ulogd.service"
|
||||||
|
|
||||||
|
INITSCRIPT_NAME = "ulogd"
|
||||||
|
INITSCRIPT_PARAMS = "defaults"
|
||||||
Reference in New Issue
Block a user