summarylogtreecommitdiffstats
diff options
context:
space:
mode:
authorStephan Eisvogel2017-05-28 14:02:42 +0200
committerStephan Eisvogel2017-05-28 14:02:42 +0200
commit660eeb459aa19f296e479954cd13175553b1e892 (patch)
treee4add7bc879daf975b745dcf9bd055eda0dc2b68
downloadaur-660eeb459aa19f296e479954cd13175553b1e892.tar.gz
Initial version, with protobuf-c-text disabled due to bugs
-rw-r--r--.SRCINFO19
-rw-r--r--PKGBUILD43
2 files changed, 62 insertions, 0 deletions
diff --git a/.SRCINFO b/.SRCINFO
new file mode 100644
index 000000000000..9cd971a158a0
--- /dev/null
+++ b/.SRCINFO
@@ -0,0 +1,19 @@
+pkgbase = nsjail-git
+ pkgdesc = A light-weight process isolation tool, making use of Linux namespaces and seccomp-bpf syscall filters (with help of the kafel bpf language)
+ pkgver = r426.0585f08
+ pkgrel = 1
+ url = http://nsjail.com
+ arch = x86_64
+ license = Apache
+ makedepends = git
+ makedepends = autoconf-archive>2016.03.20
+ makedepends = doxygen
+ makedepends = re2c
+ makedepends = check>=0.9.4
+ depends = libnl>=3
+ provides = nsjail
+ source = nsjail-git::git+git://github.com/google/nsjail.git
+ sha256sums = SKIP
+
+pkgname = nsjail-git
+
diff --git a/PKGBUILD b/PKGBUILD
new file mode 100644
index 000000000000..dbb8bd18afec
--- /dev/null
+++ b/PKGBUILD
@@ -0,0 +1,43 @@
+# Maintainer: Stephan Eisvogel <eisvogel at embinet dot de>
+pkgname=nsjail-git
+pkgver=r426.0585f08
+pkgrel=1
+pkgdesc="A light-weight process isolation tool, making use of Linux namespaces and seccomp-bpf syscall filters (with help of the kafel bpf language)"
+arch=('x86_64')
+url="http://nsjail.com"
+license=('Apache')
+makedepends=('git' 'autoconf-archive>2016.03.20' 'doxygen' 're2c' 'check>=0.9.4')
+#depends=('libnl>=3' 'protobuf-c')
+depends=('libnl>=3')
+source=("${pkgname}::git+git://github.com/google/nsjail.git")
+sha256sums=('SKIP')
+provides=('nsjail')
+
+pkgver() {
+ cd ${pkgname}
+ printf "r%s.%s" "$(git rev-list --count HEAD)" "$(git rev-parse --short HEAD)"
+}
+
+prepare() {
+ cd "${srcdir}/${pkgname}"
+ git submodule update --init
+ sed -i '/^include am\/aminclude_doxygen.am/c@DX_RULES@' protobuf-c-text/Makefile.am
+ sed -i 's/\$(GREP) \/libdata\//\$GREP \/libdata\//' protobuf-c-text/configure.ac
+ sed -i 's/-fstack-protector-all //' Makefile
+}
+
+package() {
+ cd "${srcdir}/${pkgname}"
+ # Build without protobuf-c-text support for now, because of build bugs
+ make USE_PROTOBUF=no
+
+ install -d "${pkgdir}/etc/nsjail"
+ install -d "${pkgdir}/usr/share/${pkgname}/examples"
+ install -Ds nsjail "${pkgdir}/usr/bin/nsjail"
+ install -m644 configs/*.cfg "${pkgdir}/usr/share/${pkgname}/examples"
+ install -m644 LICENSE CONTRIBUTING README.md "${pkgdir}/usr/share/${pkgname}/"
+ echo > "${pkgdir}/etc/nsjail/.placeholder"
+
+ echo -e "\nTip: Your kernel should have CONFIG_USER_NS=y to chroot as a normal user."
+ echo -e " Verify using e.g. this command: zgrep CONFIG_USER_NS /proc/config.gz\n"
+}