417 lines
17 KiB
Bash
Executable File
417 lines
17 KiB
Bash
Executable File
#!/bin/bash
|
|
|
|
KVM_COMMIT=""
|
|
OVS_COMMIT=""
|
|
KEEP=no
|
|
for i
|
|
do
|
|
case $i in
|
|
|
|
-k) KEEP=yes
|
|
shift
|
|
;;
|
|
|
|
-c) KVM_COMMIT=$2
|
|
shift;shift
|
|
;;
|
|
|
|
-o) OVS_COMMIT=$2
|
|
shift;shift
|
|
;;
|
|
|
|
esac
|
|
done
|
|
|
|
SRC=${1:-/root}
|
|
CONFIG=${2:-arch/x86/configs/opnfv.config}
|
|
VERSION=${3:-1.0.OPNFV}
|
|
|
|
# Check for necessary build tools
|
|
if ! type git >/dev/null 2>/dev/null
|
|
then
|
|
echo "Build tools missing, run the command
|
|
|
|
apt-get install git fakeroot build-essential ncurses-dev xz-utils kernel-package
|
|
|
|
as root and try again"
|
|
exit 1
|
|
fi
|
|
|
|
# Make sure the source dir exists
|
|
if [ ! -d $SRC ]
|
|
then
|
|
echo "$SRC: no such directory"
|
|
exit 1
|
|
fi
|
|
|
|
(
|
|
cd $SRC
|
|
|
|
# Get the Open VSwitch sources
|
|
if [ ! -d ovs ]
|
|
then
|
|
git clone https://github.com/openvswitch/ovs.git
|
|
fi
|
|
|
|
# Get the KVM for NFV kernel sources
|
|
if [ ! -d kvmfornfv ]
|
|
then
|
|
git clone https://gerrit.opnfv.org/gerrit/kvmfornfv
|
|
fi
|
|
cd kvmfornfv
|
|
git pull
|
|
if [ x$KVM_COMMIT != x ]
|
|
then
|
|
git checkout $KVM_COMMIT
|
|
else
|
|
git reset --hard
|
|
fi
|
|
cd kernel
|
|
|
|
# Workaround build bug on Ubuntu 14.04
|
|
cat <<EOF > arch/x86/boot/install.sh
|
|
#!/bin/sh
|
|
cp -a -- "\$2" "\$4/vmlinuz-\$1"
|
|
EOF
|
|
|
|
# Configure the kernel
|
|
cp $CONFIG .config
|
|
echo "CONFIG_DM_CRYPT=m" >>.config
|
|
echo "CONFIG_DM_MULTIPATH=m" >>.config
|
|
echo "CONFIG_NET_IPGRE=m" >>.config
|
|
echo "CONFIG_NET_IPGRE_DEMUX=m" >>.config
|
|
echo "CONFIG_BONDING=m" >>.config
|
|
echo "CONFIG_VLAN_8021Q=m" >>.config
|
|
echo "CONFIG_NETFILTER_XTABLES=m" >>.config
|
|
echo "CONFIG_NF_TABLES_BRIDGE=m" >>.config
|
|
echo "CONFIG_NF_TABLES_IPV6=m" >>.config
|
|
echo "CONFIG_NF_TABLES=m" >>.config
|
|
echo "CONFIG_NF_DEFRAG_IPV4=m" >>.config
|
|
echo "CONFIG_NF_CONNTRACK_IPV4=m" >>.config
|
|
echo "CONFIG_NF_TABLES_IPV4=m" >>.config
|
|
echo "CONFIG_NFT_REJECT_IPV4=m" >>.config
|
|
echo "CONFIG_NFT_CHAIN_ROUTE_IPV4=m" >>.config
|
|
echo "CONFIG_NFT_CHAIN_NAT_IPV4=m" >>.config
|
|
echo "CONFIG_NF_TABLES_ARP=m" >>.config
|
|
echo "CONFIG_IP_NF_IPTABLES=m" >>.config
|
|
echo "CONFIG_IP_NF_MATCH_AH=m" >>.config
|
|
echo "CONFIG_IP_NF_MATCH_ECN=m" >>.config
|
|
echo "CONFIG_IP_NF_MATCH_RPFILTER=m" >>.config
|
|
echo "CONFIG_IP_NF_MATCH_TTL=m" >>.config
|
|
echo "CONFIG_IP_NF_FILTER=m" >>.config
|
|
echo "CONFIG_IP_NF_TARGET_REJECT=m" >>.config
|
|
echo "CONFIG_IP_NF_TARGET_SYNPROXY=m" >>.config
|
|
echo "CONFIG_IP_NF_TARGET_ULOG=m" >>.config
|
|
echo "CONFIG_NF_NAT_IPV4=m" >>.config
|
|
echo "CONFIG_IP_NF_TARGET_MASQUERADE=m" >>.config
|
|
echo "CONFIG_IP_NF_TARGET_NETMAP=m" >>.config
|
|
echo "CONFIG_IP_NF_TARGET_REDIRECT=m" >>.config
|
|
echo "CONFIG_NF_NAT_SNMP_BASIC=m" >>.config
|
|
echo "CONFIG_NF_NAT_PROTO_GRE=m" >>.config
|
|
echo "CONFIG_NF_NAT_PPTP=m" >>.config
|
|
echo "CONFIG_NF_NAT_H323=m" >>.config
|
|
echo "CONFIG_IP_NF_MANGLE=m" >>.config
|
|
echo "CONFIG_IP_NF_TARGET_CLUSTERIP=m" >>.config
|
|
echo "CONFIG_IP_NF_TARGET_ECN=m" >>.config
|
|
echo "CONFIG_IP_NF_TARGET_TTL=m" >>.config
|
|
echo "CONFIG_IP_NF_RAW=m" >>.config
|
|
echo "CONFIG_IP_NF_SECURITY=m" >>.config
|
|
echo "CONFIG_IP_NF_ARPTABLES=m" >>.config
|
|
echo "CONFIG_IP_NF_ARPFILTER=m" >>.config
|
|
echo "CONFIG_IP_NF_ARP_MANGLE=m" >>.config
|
|
echo "CONFIG_NETFILTER_XT_CONNMARK=m" >>.config
|
|
echo "CONFIG_NETFILTER_XT_SET=m" >>.config
|
|
echo "CONFIG_NETFILTER_XT_TARGET_AUDIT=m" >>.config
|
|
echo "CONFIG_NETFILTER_XT_TARGET_CHECKSUM=m" >>.config
|
|
echo "CONFIG_NETFILTER_XT_TARGET_CLASSIFY=m" >>.config
|
|
echo "CONFIG_NETFILTER_XT_TARGET_CONNMARK=m" >>.config
|
|
echo "CONFIG_NETFILTER_XT_TARGET_CONNSECMARK=m" >>.config
|
|
echo "CONFIG_NETFILTER_XT_TARGET_CT=m" >>.config
|
|
echo "CONFIG_NETFILTER_XT_TARGET_DSCP=m" >>.config
|
|
echo "CONFIG_NETFILTER_XT_TARGET_HL=m" >>.config
|
|
echo "CONFIG_NETFILTER_XT_TARGET_HMARK=m" >>.config
|
|
echo "CONFIG_NETFILTER_XT_TARGET_IDLETIMER=m" >>.config
|
|
echo "CONFIG_NETFILTER_XT_TARGET_LED=m" >>.config
|
|
echo "CONFIG_NETFILTER_XT_TARGET_LOG=m" >>.config
|
|
echo "CONFIG_NETFILTER_XT_TARGET_MARK=m" >>.config
|
|
echo "CONFIG_NETFILTER_XT_TARGET_NETMAP=m" >>.config
|
|
echo "CONFIG_NETFILTER_XT_TARGET_NFLOG=m" >>.config
|
|
echo "CONFIG_NETFILTER_XT_TARGET_NFQUEUE=m" >>.config
|
|
echo "CONFIG_NETFILTER_XT_TARGET_NOTRACK=m" >>.config
|
|
echo "CONFIG_NETFILTER_XT_TARGET_RATEEST=m" >>.config
|
|
echo "CONFIG_NETFILTER_XT_TARGET_REDIRECT=m" >>.config
|
|
echo "CONFIG_NETFILTER_XT_TARGET_TEE=m" >>.config
|
|
echo "CONFIG_NETFILTER_XT_TARGET_TPROXY=m" >>.config
|
|
echo "CONFIG_NETFILTER_XT_TARGET_TRACE=m" >>.config
|
|
echo "CONFIG_NETFILTER_XT_TARGET_SECMARK=m" >>.config
|
|
echo "CONFIG_NETFILTER_XT_TARGET_TCPMSS=m" >>.config
|
|
echo "CONFIG_NETFILTER_XT_TARGET_TCPOPTSTRIP=m" >>.config
|
|
echo "CONFIG_NETFILTER_XT_MATCH_ADDRTYPE=m" >>.config
|
|
echo "CONFIG_NETFILTER_XT_MATCH_BPF=m" >>.config
|
|
echo "CONFIG_NETFILTER_XT_MATCH_CLUSTER=m" >>.config
|
|
echo "CONFIG_NETFILTER_XT_MATCH_COMMENT=m" >>.config
|
|
echo "CONFIG_NETFILTER_XT_MATCH_CONNBYTES=m" >>.config
|
|
echo "CONFIG_NETFILTER_XT_MATCH_CONNLABEL=m" >>.config
|
|
echo "CONFIG_NETFILTER_XT_MATCH_CONNLIMIT=m" >>.config
|
|
echo "CONFIG_NETFILTER_XT_MATCH_CONNMARK=m" >>.config
|
|
echo "CONFIG_NETFILTER_XT_MATCH_CONNTRACK=m" >>.config
|
|
echo "CONFIG_NETFILTER_XT_MATCH_CPU=m" >>.config
|
|
echo "CONFIG_NETFILTER_XT_MATCH_DCCP=m" >>.config
|
|
echo "CONFIG_NETFILTER_XT_MATCH_DEVGROUP=m" >>.config
|
|
echo "CONFIG_NETFILTER_XT_MATCH_DSCP=m" >>.config
|
|
echo "CONFIG_NETFILTER_XT_MATCH_ECN=m" >>.config
|
|
echo "CONFIG_NETFILTER_XT_MATCH_ESP=m" >>.config
|
|
echo "CONFIG_NETFILTER_XT_MATCH_HASHLIMIT=m" >>.config
|
|
echo "CONFIG_NETFILTER_XT_MATCH_HELPER=m" >>.config
|
|
echo "CONFIG_NETFILTER_XT_MATCH_HL=m" >>.config
|
|
echo "CONFIG_NETFILTER_XT_MATCH_IPRANGE=m" >>.config
|
|
echo "CONFIG_NETFILTER_XT_MATCH_IPVS=m" >>.config
|
|
echo "CONFIG_NETFILTER_XT_MATCH_LENGTH=m" >>.config
|
|
echo "CONFIG_NETFILTER_XT_MATCH_LIMIT=m" >>.config
|
|
echo "CONFIG_NETFILTER_XT_MATCH_MAC=m" >>.config
|
|
echo "CONFIG_NETFILTER_XT_MATCH_MARK=m" >>.config
|
|
echo "CONFIG_NETFILTER_XT_MATCH_MULTIPORT=m" >>.config
|
|
echo "CONFIG_NETFILTER_XT_MATCH_NFACCT=m" >>.config
|
|
echo "CONFIG_NETFILTER_XT_MATCH_OSF=m" >>.config
|
|
echo "CONFIG_NETFILTER_XT_MATCH_OWNER=m" >>.config
|
|
echo "CONFIG_NETFILTER_XT_MATCH_POLICY=m" >>.config
|
|
echo "CONFIG_NETFILTER_XT_MATCH_PHYSDEV=m" >>.config
|
|
echo "CONFIG_NETFILTER_XT_MATCH_PKTTYPE=m" >>.config
|
|
echo "CONFIG_NETFILTER_XT_MATCH_QUOTA=m" >>.config
|
|
echo "CONFIG_NETFILTER_XT_MATCH_RATEEST=m" >>.config
|
|
echo "CONFIG_NETFILTER_XT_MATCH_REALM=m" >>.config
|
|
echo "CONFIG_NETFILTER_XT_MATCH_RECENT=m" >>.config
|
|
echo "CONFIG_NETFILTER_XT_MATCH_SCTP=m" >>.config
|
|
echo "CONFIG_NETFILTER_XT_MATCH_SOCKET=m" >>.config
|
|
echo "CONFIG_NETFILTER_XT_MATCH_STATE=m" >>.config
|
|
echo "CONFIG_NETFILTER_XT_MATCH_STATISTIC=m" >>.config
|
|
echo "CONFIG_NETFILTER_XT_MATCH_STRING=m" >>.config
|
|
echo "CONFIG_NETFILTER_XT_MATCH_TCPMSS=m" >>.config
|
|
echo "CONFIG_NETFILTER_XT_MATCH_TIME=m" >>.config
|
|
echo "CONFIG_NETFILTER_XT_MATCH_U32=m" >>.config
|
|
echo "CONFIG_IP_SET=m" >>.config
|
|
echo "CONFIG_IP_SET_MAX=256" >>.config
|
|
echo "CONFIG_IP_SET_BITMAP_IP=m" >>.config
|
|
echo "CONFIG_IP_SET_BITMAP_IPMAC=m" >>.config
|
|
echo "CONFIG_IP_SET_BITMAP_PORT=m" >>.config
|
|
echo "CONFIG_IP_SET_HASH_IP=m" >>.config
|
|
echo "CONFIG_IP_SET_HASH_IPPORT=m" >>.config
|
|
echo "CONFIG_IP_SET_HASH_IPPORTIP=m" >>.config
|
|
echo "CONFIG_IP_SET_HASH_IPPORTNET=m" >>.config
|
|
echo "CONFIG_IP_SET_HASH_NETPORTNET=m" >>.config
|
|
echo "CONFIG_IP_SET_HASH_NET=m" >>.config
|
|
echo "CONFIG_IP_SET_HASH_NETNET=m" >>.config
|
|
echo "CONFIG_IP_SET_HASH_NETPORT=m" >>.config
|
|
echo "CONFIG_IP_SET_HASH_NETIFACE=m" >>.config
|
|
echo "CONFIG_IP_SET_LIST_SET=m" >>.config
|
|
echo "CONFIG_IP_VS=m" >>.config
|
|
echo "CONFIG_IP_VS_IPV6=y" >>.config
|
|
echo "CONFIG_IP_VS_TAB_BITS=m" >>.config
|
|
echo "CONFIG_CRYPTO_AES_NI_INTEL=m" >>.config
|
|
echo "CONFIG_CRYPTO_AES_X86_64=m" >>.config
|
|
echo "CONFIG_ACPI_PROCESSOR_AGGREGATOR=m" >>.config
|
|
echo "CONFIG_SENSORS_ACPI_POWER=m" >>.config
|
|
echo "CONFIG_ASYNC_RAID6_RECOV=m" >>.config
|
|
echo "CONFIG_CONFIGFS_FS=m" >>.config
|
|
echo "CONFIG_SENSORS_CORETEMP=m" >>.config
|
|
echo "CONFIG_CRYPTO_CRC32_PCLMUL=m" >>.config
|
|
echo "CONFIG_CRYPTO_CRCT10DIF=m" >>.config
|
|
echo "CONFIG_CRYPTO_CRYPTD=m" >>.config
|
|
echo "CONFIG_DCA=m" >>.config
|
|
echo "CONFIG_INTEL_POWERCLAMP=m" >>.config
|
|
echo "CONFIG_INTEL_IOATDMA=m" >>.config
|
|
echo "CONFIG_INPUT_JOYDEV=m" >>.config
|
|
echo "CONFIG_MD_LINEAR=m" >>.config
|
|
echo "CONFIG_MD_RAID0=m" >>.config
|
|
echo "CONFIG_MD_RAID1=m" >>.config
|
|
echo "CONFIG_MD_RAID10=m" >>.config
|
|
echo "CONFIG_MD_RAID456=m" >>.config
|
|
echo "CONFIG_MD_MULTIPATH=m" >>.config
|
|
echo "CONFIG_MD_FAULTY=m" >>.config
|
|
echo "CONFIG_LPC_ICH=m" >>.config
|
|
echo "CONFIG_CRYPTO_LRW=m" >>.config
|
|
echo "CONFIG_BLK_DEV_NBD=m" >>.config
|
|
echo "CONFIG_SCSI_DH=m" >>.config
|
|
echo "CONFIG_HOTPLUG_PCI_SHPC=m" >>.config
|
|
echo "CONFIG_ACPI_WMI=m" >>.config
|
|
echo "CONFIG_NETFILTER_ADVANCED=y" >>.config
|
|
echo "CONFIG_NETFILTER_ADVANCED=y" >>.config
|
|
echo "CONFIG_BRIDGE_NETFILTER=m" >>.config
|
|
echo "# CONFIG_NETFILTER_NETLINK_ACCT is not set" >>.config
|
|
echo "# CONFIG_NETFILTER_NETLINK_QUEUE is not set" >>.config
|
|
echo "# CONFIG_NF_CONNTRACK_MARK is not set" >>.config
|
|
echo "# CONFIG_NF_CONNTRACK_EVENTS is not set" >>.config
|
|
echo "# CONFIG_NF_CONNTRACK_TIMEOUT is not set" >>.config
|
|
echo "# CONFIG_NF_CONNTRACK_TIMESTAMP is not set" >>.config
|
|
echo "# CONFIG_NF_CT_PROTO_DCCP is not set" >>.config
|
|
echo "CONFIG_NF_CT_PROTO_GRE=m" >>.config
|
|
echo "# CONFIG_NF_CT_PROTO_SCTP is not set" >>.config
|
|
echo "# CONFIG_NF_CT_PROTO_UDPLITE is not set" >>.config
|
|
echo "# CONFIG_NF_CONNTRACK_AMANDA is not set" >>.config
|
|
echo "# CONFIG_NF_CONNTRACK_H323 is not set" >>.config
|
|
echo "# CONFIG_NF_CONNTRACK_SNMP is not set" >>.config
|
|
echo "CONFIG_NF_CONNTRACK_PPTP=m" >>.config
|
|
echo "# CONFIG_NF_CONNTRACK_SANE is not set" >>.config
|
|
echo "# CONFIG_NF_CONNTRACK_TFTP is not set" >>.config
|
|
echo "# CONFIG_NF_CT_NETLINK_TIMEOUT is not set" >>.config
|
|
echo "# CONFIG_NETFILTER_XT_CONNMARK is not set" >>.config
|
|
echo "# CONFIG_NETFILTER_XT_SET is not set" >>.config
|
|
echo "# CONFIG_NETFILTER_XT_TARGET_CHECKSUM is not set" >>.config
|
|
echo "# CONFIG_NETFILTER_XT_TARGET_CLASSIFY is not set" >>.config
|
|
echo "# CONFIG_NETFILTER_XT_TARGET_CONNMARK is not set" >>.config
|
|
echo "# CONFIG_NETFILTER_XT_TARGET_DSCP is not set" >>.config
|
|
echo "# CONFIG_NETFILTER_XT_TARGET_HL is not set" >>.config
|
|
echo "# CONFIG_NETFILTER_XT_TARGET_HMARK is not set" >>.config
|
|
echo "# CONFIG_NETFILTER_XT_TARGET_IDLETIMER is not set" >>.config
|
|
echo "# CONFIG_NETFILTER_XT_TARGET_MARK is not set" >>.config
|
|
echo "# CONFIG_NETFILTER_XT_TARGET_NFQUEUE is not set" >>.config
|
|
echo "# CONFIG_NETFILTER_XT_TARGET_NOTRACK is not set" >>.config
|
|
echo "# CONFIG_NETFILTER_XT_TARGET_RATEEST is not set" >>.config
|
|
echo "# CONFIG_NETFILTER_XT_TARGET_TEE is not set" >>.config
|
|
echo "# CONFIG_NETFILTER_XT_TARGET_TPROXY is not set" >>.config
|
|
echo "# CONFIG_NETFILTER_XT_TARGET_TRACE is not set" >>.config
|
|
echo "# CONFIG_NETFILTER_XT_TARGET_TCPOPTSTRIP is not set" >>.config
|
|
echo "# CONFIG_NETFILTER_XT_MATCH_BPF is not set" >>.config
|
|
echo "# CONFIG_NETFILTER_XT_MATCH_CGROUP is not set" >>.config
|
|
echo "# CONFIG_NETFILTER_XT_MATCH_CLUSTER is not set" >>.config
|
|
echo "# CONFIG_NETFILTER_XT_MATCH_CONNBYTES is not set" >>.config
|
|
echo "# CONFIG_NETFILTER_XT_MATCH_CONNLABEL is not set" >>.config
|
|
echo "# CONFIG_NETFILTER_XT_MATCH_CONNLIMIT is not set" >>.config
|
|
echo "# CONFIG_NETFILTER_XT_MATCH_CONNMARK is not set" >>.config
|
|
echo "# CONFIG_NETFILTER_XT_MATCH_CPU is not set" >>.config
|
|
echo "# CONFIG_NETFILTER_XT_MATCH_DCCP is not set" >>.config
|
|
echo "# CONFIG_NETFILTER_XT_MATCH_DEVGROUP is not set" >>.config
|
|
echo "# CONFIG_NETFILTER_XT_MATCH_DSCP is not set" >>.config
|
|
echo "# CONFIG_NETFILTER_XT_MATCH_ECN is not set" >>.config
|
|
echo "# CONFIG_NETFILTER_XT_MATCH_ESP is not set" >>.config
|
|
echo "# CONFIG_NETFILTER_XT_MATCH_HASHLIMIT is not set" >>.config
|
|
echo "# CONFIG_NETFILTER_XT_MATCH_HELPER is not set" >>.config
|
|
echo "# CONFIG_NETFILTER_XT_MATCH_HL is not set" >>.config
|
|
echo "# CONFIG_NETFILTER_XT_MATCH_IPCOMP is not set" >>.config
|
|
echo "# CONFIG_NETFILTER_XT_MATCH_IPRANGE is not set" >>.config
|
|
echo "# CONFIG_NETFILTER_XT_MATCH_IPVS is not set" >>.config
|
|
echo "# CONFIG_NETFILTER_XT_MATCH_L2TP is not set" >>.config
|
|
echo "# CONFIG_NETFILTER_XT_MATCH_LENGTH is not set" >>.config
|
|
echo "# CONFIG_NETFILTER_XT_MATCH_LIMIT is not set" >>.config
|
|
echo "# CONFIG_NETFILTER_XT_MATCH_MAC is not set" >>.config
|
|
echo "# CONFIG_NETFILTER_XT_MATCH_MARK is not set" >>.config
|
|
echo "# CONFIG_NETFILTER_XT_MATCH_NFACCT is not set" >>.config
|
|
echo "# CONFIG_NETFILTER_XT_MATCH_OSF is not set" >>.config
|
|
echo "# CONFIG_NETFILTER_XT_MATCH_OWNER is not set" >>.config
|
|
echo "# CONFIG_NETFILTER_XT_MATCH_PHYSDEV is not set" >>.config
|
|
echo "# CONFIG_NETFILTER_XT_MATCH_PKTTYPE is not set" >>.config
|
|
echo "# CONFIG_NETFILTER_XT_MATCH_QUOTA is not set" >>.config
|
|
echo "# CONFIG_NETFILTER_XT_MATCH_RATEEST is not set" >>.config
|
|
echo "# CONFIG_NETFILTER_XT_MATCH_REALM is not set" >>.config
|
|
echo "# CONFIG_NETFILTER_XT_MATCH_RECENT is not set" >>.config
|
|
echo "# CONFIG_NETFILTER_XT_MATCH_SCTP is not set" >>.config
|
|
echo "# CONFIG_NETFILTER_XT_MATCH_SOCKET is not set" >>.config
|
|
echo "# CONFIG_NETFILTER_XT_MATCH_STATISTIC is not set" >>.config
|
|
echo "# CONFIG_NETFILTER_XT_MATCH_STRING is not set" >>.config
|
|
echo "# CONFIG_NETFILTER_XT_MATCH_TCPMSS is not set" >>.config
|
|
echo "# CONFIG_NETFILTER_XT_MATCH_TIME is not set" >>.config
|
|
echo "# CONFIG_NETFILTER_XT_MATCH_U32 is not set" >>.config
|
|
echo "CONFIG_NF_NAT_PROTO_GRE=m" >>.config
|
|
echo "CONFIG_NF_NAT_PPTP=m" >>.config
|
|
echo "# CONFIG_IP_NF_MATCH_AH is not set" >>.config
|
|
echo "# CONFIG_IP_NF_MATCH_ECN is not set" >>.config
|
|
echo "# CONFIG_IP_NF_MATCH_RPFILTER is not set" >>.config
|
|
echo "# CONFIG_IP_NF_MATCH_TTL is not set" >>.config
|
|
echo "# CONFIG_IP_NF_TARGET_SYNPROXY is not set" >>.config
|
|
echo "# CONFIG_IP_NF_TARGET_NETMAP is not set" >>.config
|
|
echo "# CONFIG_IP_NF_TARGET_REDIRECT is not set" >>.config
|
|
echo "# CONFIG_IP_NF_TARGET_CLUSTERIP is not set" >>.config
|
|
echo "# CONFIG_IP_NF_TARGET_ECN is not set" >>.config
|
|
echo "# CONFIG_IP_NF_TARGET_TTL is not set" >>.config
|
|
echo "# CONFIG_IP_NF_SECURITY is not set" >>.config
|
|
echo "# CONFIG_IP_NF_ARPTABLES is not set" >>.config
|
|
echo "# CONFIG_NF_NAT_IPV6 is not set" >>.config
|
|
echo "# CONFIG_IP6_NF_MATCH_AH is not set" >>.config
|
|
echo "# CONFIG_IP6_NF_MATCH_EUI64 is not set" >>.config
|
|
echo "# CONFIG_IP6_NF_MATCH_FRAG is not set" >>.config
|
|
echo "# CONFIG_IP6_NF_MATCH_OPTS is not set" >>.config
|
|
echo "# CONFIG_IP6_NF_MATCH_HL is not set" >>.config
|
|
echo "# CONFIG_IP6_NF_MATCH_MH is not set" >>.config
|
|
echo "# CONFIG_IP6_NF_MATCH_RPFILTER is not set" >>.config
|
|
echo "# CONFIG_IP6_NF_MATCH_RT is not set" >>.config
|
|
echo "# CONFIG_IP6_NF_TARGET_HL is not set" >>.config
|
|
echo "# CONFIG_IP6_NF_TARGET_SYNPROXY is not set" >>.config
|
|
echo "# CONFIG_IP6_NF_SECURITY is not set" >>.config
|
|
echo "# CONFIG_IP6_NF_NAT is not set" >>.config
|
|
echo "CONFIG_INTEL_MEI=m" >>.config
|
|
echo "CONFIG_INTEL_MEI_ME=m" >>.config
|
|
echo "# CONFIG_INTEL_MEI_TXE is not set" >>.config
|
|
echo "CONFIG_WATCHDOG_CORE=y" >>.config
|
|
echo "CONFIG_KVM_AMD=y" >>.config
|
|
echo "CONFIG_SECURITY_APPARMOR=m" >>.config
|
|
echo "CONFIG_AUDIT=y" >>.config
|
|
echo "CONFIG_AUDITSYSCALL=y" >>.config
|
|
echo "CONFIG_AUDIT_WATCH=y" >>.config
|
|
echo "CONFIG_AUDIT_TREE=y" >>.config
|
|
echo "CONFIG_NETFILTER_XT_TARGET_AUDIT=m" >>.config
|
|
echo "CONFIG_SECURITYFS=y" >>.config
|
|
echo "CONFIG_SECURITY_PATH=y" >>.config
|
|
echo "CONFIG_LSM_MMAP_MIN_ADDR=0" >>.config
|
|
echo "CONFIG_SECURITY_SELINUX=y" >>.config
|
|
echo "CONFIG_SECURITY_SELINUX_BOOTPARAM=y" >>.config
|
|
echo "CONFIG_SECURITY_SELINUX_BOOTPARAM_VALUE=0" >>.config
|
|
echo "CONFIG_SECURITY_SELINUX_DISABLE=y" >>.config
|
|
echo "CONFIG_SECURITY_SELINUX_DEVELOP=y" >>.config
|
|
echo "CONFIG_SECURITY_SELINUX_AVC_STATS=y" >>.config
|
|
echo "CONFIG_SECURITY_SELINUX_CHECKREQPROT_VALUE=1" >>.config
|
|
echo "# CONFIG_SECURITY_SELINUX_POLICYDB_VERSION_MAX is not set" >>.config
|
|
echo "CONFIG_SECURITY_APPARMOR=y" >>.config
|
|
echo "CONFIG_SECURITY_APPARMOR_BOOTPARAM_VALUE=1" >>.config
|
|
echo "CONFIG_SECURITY_APPARMOR_HASH=y" >>.config
|
|
echo "CONFIG_INTEGRITY_AUDIT=y" >>.config
|
|
echo "# CONFIG_DEFAULT_SECURITY_SELINUX is not set" >>.config
|
|
echo "CONFIG_DEFAULT_SECURITY_APPARMOR=y" >>.config
|
|
echo "# CONFIG_DEFAULT_SECURITY_DAC is not set" >>.config
|
|
echo "CONFIG_DEFAULT_SECURITY=\"apparmor\"" >>.config
|
|
echo "CONFIG_IP6_NF_RAW=m" >>.config
|
|
echo "CONFIG_NETFILTER_XT_MATCH_MAC=m" >>.config
|
|
echo "CONFIG_NETFILTER_XT_MATCH_PHYSDEV=m" >>.config
|
|
echo "CONFIG_NETFILTER_XT_SET=m" >>.config
|
|
echo "CONFIG_VETH=m" >>.config
|
|
echo "CONFIG_GARP=m" >>.config
|
|
echo "CONFIG_MRP=m" >>.config
|
|
echo "CONFIG_VLAN_8021Q_GVRP=y" >>.config
|
|
echo "CONFIG_VLAN_8021Q_MVRP=y" >>.config
|
|
echo "CONFIG_CRYPTO_CRC32C_INTEL=m" >>.config
|
|
echo "CONFIG_CRYPTO_CRC32=m" >>.config
|
|
echo "CONFIG_CRYPTO_CRCT10DIF_PCLMUL=m" >>.config
|
|
echo "CONFIG_CRC_T10DIF=m" >>.config
|
|
|
|
make oldconfig </dev/null
|
|
|
|
# Build the kernel debs
|
|
if [ $KEEP = no ]
|
|
then
|
|
make-kpkg clean
|
|
fi
|
|
fakeroot make-kpkg --initrd --revision=$VERSION kernel_image kernel_headers
|
|
git checkout arch/x86/boot/install.sh
|
|
|
|
# Build OVS kernel modules
|
|
cd ../../ovs
|
|
if [ x$OVS_COMMIT != x ]
|
|
then
|
|
git checkout $OVS_COMMIT
|
|
else
|
|
git reset --hard
|
|
fi
|
|
./boot.sh
|
|
./configure --with-linux=$SRC/kvmfornfv/kernel
|
|
make
|
|
|
|
# Add OVS kernel modules to kernel deb
|
|
dpkg-deb -x $SRC/kvmfornfv/linux-image*.deb ovs.$$
|
|
dpkg-deb --control $SRC/kvmfornfv/linux-image*.deb ovs.$$/DEBIAN
|
|
cp datapath/linux/*.ko ovs.$$/lib/modules/*/kernel/net/openvswitch
|
|
depmod -b ovs.$$ -a `ls ovs.$$/lib/modules`
|
|
dpkg-deb -b ovs.$$ $SRC/kvmfornfv/linux-image*.deb
|
|
rm -rf ovs.$$
|
|
)
|
|
|
|
mv $SRC/kvmfornfv/*.deb .
|