eve/mk/linuxkit.mk at 59e07b4868417c99acb019593026652fb0a561a8 · europaul/eve · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
# Copyright (c) 2026 Zededa, Inc.
# SPDX-License-Identifier: Apache-2.0
#
# mk/linuxkit.mk — linuxkit binary acquisition
#
# Priority (first match wins):
#   1. LINUXKIT_SRC=/path   build from local source tree, no network
#   2. LINUXKIT_GIT_URL set clone at LINUXKIT_GIT_REF (commit hash) and build
#   3. (neither)            download official release binary
#
# Set LINUXKIT_GIT_URL="" to use the release binary (case 3).
# LINUXKIT_VERSION must remain a published semver tag — it is used only for
# the release-download URL in case 3.

# linuxkit version. This **must** be a published semver version so it can be
# downloaded already compiled from the release page at
# https://github.com/linuxkit/linuxkit/releases
LINUXKIT_VERSION ?= v1.8.1
LINUXKIT_SOURCE  ?= https://github.com/linuxkit/linuxkit

# LINUXKIT_GIT_REF must be a commit hash (reproducible, no ls-remote needed).
# Update by running: git ls-remote https://github.com/linuxkit/linuxkit master
LINUXKIT_GIT_URL ?= https://github.com/europaul/linuxkit
LINUXKIT_GIT_REF ?= 420d550a9e0df323ce01e0324dfb6053468c4814
# Optional local source tree — takes priority over LINUXKIT_GIT_URL.
#   make LINUXKIT_SRC=/path/to/linuxkit <target>
LINUXKIT_SRC ?=

.PHONY: linuxkit
linuxkit: $(LINUXKIT)

ifneq ($(LINUXKIT_SRC),)
# ── Case 1: local source tree ────────────────────────────────────────────────
# Rebuild whenever Go sources change; no network access needed.
$(LINUXKIT): $(PARALLEL_BUILD_LOCK) | $(BUILDTOOLS_BIN)
	@echo "Building linuxkit from local source: $(LINUXKIT_SRC)"
	$(QUIET)$(MAKE) -C $(LINUXKIT_SRC) local-build LOCAL_TARGET=$(abspath $@)
	$(QUIET)docker stop linuxkit-builder >/dev/null 2>&1 || true
	$(QUIET)docker rm linuxkit-builder >/dev/null 2>&1 || true
	$(QUIET): $@: Succeeded

else ifneq ($(LINUXKIT_GIT_URL),)
# ── Case 2: commit hash from a git repo ──────────────────────────────────────
# The hash is used directly as the versioned binary name — no network call at
# parse time.  Make skips the recipe if the binary already exists (cached).
_LK_VERSION := $(shell printf '%s' '$(LINUXKIT_GIT_REF)' | cut -c1-12)

$(LINUXKIT): $(BUILDTOOLS_BIN)/linuxkit-$(_LK_VERSION) $(PARALLEL_BUILD_LOCK)
	$(QUIET)docker stop linuxkit-builder >/dev/null 2>&1 || true
	$(QUIET)docker rm linuxkit-builder >/dev/null 2>&1 || true
	$(QUIET)ln -sf $(notdir $<) $@
	$(QUIET): $@: Succeeded

$(BUILDTOOLS_BIN)/linuxkit-$(_LK_VERSION): | $(BUILDTOOLS_BIN)
	@echo "Building linuxkit from $(LINUXKIT_GIT_URL) at $(LINUXKIT_GIT_REF)"
	$(QUIET)tmp=$$(mktemp -d) && \
	  git clone --filter=blob:none $(LINUXKIT_GIT_URL) $$tmp && \
	  git -C $$tmp checkout $(LINUXKIT_GIT_REF) && \
	  $(MAKE) -C $$tmp local-build LOCAL_TARGET=$(abspath $@) && \
	  rm -rf $$tmp
	$(QUIET): $@: Succeeded

else
# ── Case 3: download upstream release binary ──────────────────────────────────
$(LINUXKIT): $(BUILDTOOLS_BIN)/linuxkit-$(LINUXKIT_VERSION) $(PARALLEL_BUILD_LOCK)
	$(QUIET)docker stop linuxkit-builder >/dev/null 2>&1 || true
	$(QUIET)docker rm linuxkit-builder >/dev/null 2>&1 || true
	$(QUIET)ln -sf $(notdir $<) $@
	$(QUIET): $@: Succeeded

$(BUILDTOOLS_BIN)/linuxkit-$(LINUXKIT_VERSION): | $(BUILDTOOLS_BIN)
	@echo "Downloading linuxkit release $(LINUXKIT_VERSION)"
	$(QUIET)curl -fsSL -o $@ \
	  $(LINUXKIT_SOURCE)/releases/download/$(LINUXKIT_VERSION)/linuxkit-$(LOCAL_GOOS)-$(HOSTARCH) \
	  && chmod +x $@
	$(QUIET): $@: Succeeded

endif