diff options
| author | Oskari Rauta <oskari.rauta@gmail.com> | 2023-05-12 08:39:28 +0300 |
|---|---|---|
| committer | Tianling Shen <cnsztl@gmail.com> | 2023-05-14 08:56:45 +0800 |
| commit | f9639f0dae9781d066544b40eb0f625d65a40d54 (patch) | |
| tree | f26f2d20b488422ffacb6dcc1e4efb74b00ac6cf /net/netavark | |
| parent | 24beb46bbef9acfd04993228d80caed1568e9142 (diff) | |
netavark: add new package
podman is moving from cni to netavark. Netavark supports currently
only iptables, so I was in touch some time ago with mainstream
maintainer and provided a "none" firewall driver - to make it possible
to use netavark without firewalling features. Driver cannot be selected
at this time without environment variable that selects it, so I made
a config file for openwrt and a wrapper script that takes advantage of
it.
Available options are iptables, nftables and none - but selecting
nftables just tells user that nftables isn't yet supported.
firewall "none" driver is not yet included in release, so that's why
we use git version instead. I chose latest commit instead of commit
with none driver.
Description:
Netavark is a rust based network stack for containers.
It is being designed to work with Podman but is also applicable for other OCI container management applications.
Signed-off-by: Oskari Rauta <oskari.rauta@gmail.com>
Diffstat (limited to 'net/netavark')
| -rw-r--r-- | net/netavark/Makefile | 51 | ||||
| -rw-r--r-- | net/netavark/files/netavark-config | 3 | ||||
| -rwxr-xr-x | net/netavark/files/netavark-wrapper | 6 |
3 files changed, 60 insertions, 0 deletions
diff --git a/net/netavark/Makefile b/net/netavark/Makefile new file mode 100644 index 000000000..cf43a655e --- /dev/null +++ b/net/netavark/Makefile @@ -0,0 +1,51 @@ +include $(TOPDIR)/rules.mk + +PKG_NAME:=netavark +PKG_RELEASE:=1 + +PKG_SOURCE_PROTO:=git +PKG_SOURCE_URL:=https://github.com/containers/netavark.git +PKG_SOURCE_DATE:=2023-05-12 +PKG_SOURCE_VERSION:=07d63eadef1def977f2ece25b0f464f7e5d77be1 +PKG_MIRROR_HASH:=f7597d70528d039b984b2ecc6ef0e1f1c17aacfc7862907e5a79789ebe98aa89 + +PKG_MAINTAINER:=Oskari Rauta <oskari.rauta@gmail.com> +PKG_LICENSE:=Apache-2.0 +PKG_LICENSE_FILES:=LICENSE + +PKG_BUILD_DEPENDS:= \ + rust/host \ + protobuf/host + +include $(INCLUDE_DIR)/package.mk +include ../../lang/rust/rust-package.mk + +define Package/netavark + SECTION:=net + CATEGORY:=Network + DEPENDS:=$(RUST_ARCH_DEPENDS) + TITLE:=A container network stack + URL:=https://github.com/containers/netavark +endef + +define Package/netavark/description + Netavark is a rust based network stack for containers. It is being designed to work with Podman but is also + applicable for other OCI container management applications. +endef + +define Package/netavark/conffiles +/etc/config/netavark +endef + +CARGO_VARS += \ + PROTOC=$(STAGING_DIR_HOSTPKG)/bin/protoc + +define Package/netavark/install + $(INSTALL_DIR) $(1)/etc/config $(1)/usr/lib/podman + $(INSTALL_CONF) ./files/netavark-config $(1)/etc/config/netavark + $(INSTALL_BIN) ./files/netavark-wrapper $(1)/usr/lib/podman/netavark + $(INSTALL_BIN) $(PKG_INSTALL_DIR)/bin/netavark $(1)/usr/lib/podman/netavark-bin +endef + +$(eval $(call RustBinPackage,netavark)) +$(eval $(call BuildPackage,netavark)) diff --git a/net/netavark/files/netavark-config b/net/netavark/files/netavark-config new file mode 100644 index 000000000..c9c3796af --- /dev/null +++ b/net/netavark/files/netavark-config @@ -0,0 +1,3 @@ + +config firewall + option driver 'none' diff --git a/net/netavark/files/netavark-wrapper b/net/netavark/files/netavark-wrapper new file mode 100755 index 000000000..d072bb29b --- /dev/null +++ b/net/netavark/files/netavark-wrapper @@ -0,0 +1,6 @@ +#!/bin/sh + +FW_DRIVER=$(uci -q get 'netavark.@firewall[0].driver') +[ -z "$FW_DRIVER" ] && FW_DRIVER="none" + +NETAVARK_FW="$FW_DRIVER" /usr/lib/podman/netavark-bin $@ |