# Automagically pick clang or gcc, with preference for clang
# This is only done if we have not overridden these with an environment or CLI variable
i f e q ( $( origin CC ) , d e f a u l t )
CC:= $( shell if [ -e /usr/bin/clang ] ; then echo clang; else echo gcc; fi )
CC:= $( shell if [ -e /opt/intel/bin/icc ] ; then echo /opt/intel/bin/icc -ipo -ansi-alias; else echo $( CC) ; fi )
e n d i f
i f e q ( $( origin CXX ) , d e f a u l t )
CXX:= $( shell if [ -e /usr/bin/clang++ ] ; then echo clang++; else echo g++; fi )
CXX:= $( shell if [ -e /opt/intel/bin/icc ] ; then echo /opt/intel/bin/icc -ipo -ansi-alias; else echo $( CXX) ; fi )
e n d i f
INCLUDES ?=
DEFS ?=
LDLIBS ?=
DESTDIR ?=
i n c l u d e o b j e c t s . m k
ONE_OBJS += osdep/LinuxEthernetTap.o
ONE_OBJS += osdep/LinuxNetLink.o
NLTEST_OBJS += osdep/LinuxNetLink.o node/InetAddress.o node/Utils.o node/Salsa20.o
NLTEST_OBJS += nltest.o
# for central controller builds
TIMESTAMP = $( shell date +"%Y%m%d%H%M" )
# Auto-detect miniupnpc and nat-pmp as well and use system libs if present,
# otherwise build into binary as done on Mac and Windows.
ONE_OBJS += osdep/PortMapper.o
o v e r r i d e DEFS += -DZT_USE_MINIUPNPC
MINIUPNPC_IS_NEW_ENOUGH = $( shell grep -sqr '.*define.*MINIUPNPC_VERSION.*"2..*"' /usr/include/miniupnpc/miniupnpc.h && echo 1)
#MINIUPNPC_IS_NEW_ENOUGH=$(shell grep -sqr '.*define.*MINIUPNPC_VERSION.*"2.."' /usr/include/miniupnpc/miniupnpc.h && echo 1)
i f e q ( $( MINIUPNPC_IS_NEW_ENOUGH ) , 1 )
override DEFS += -DZT_USE_SYSTEM_MINIUPNPC
LDLIBS += -lminiupnpc
e l s e
override DEFS += -DMINIUPNP_STATICLIB -DMINIUPNPC_SET_SOCKET_TIMEOUT -DMINIUPNPC_GET_SRC_ADDR -D_BSD_SOURCE -D_DEFAULT_SOURCE -D_XOPEN_SOURCE= 600 -DOS_STRING= \" Linux\" -DMINIUPNPC_VERSION_STRING= \" 2.0\" -DUPNP_VERSION_STRING= \" UPnP/1.1\" -DENABLE_STRNATPMPERR
ONE_OBJS += ext/miniupnpc/connecthostport.o ext/miniupnpc/igd_desc_parse.o ext/miniupnpc/minisoap.o ext/miniupnpc/minissdpc.o ext/miniupnpc/miniupnpc.o ext/miniupnpc/miniwget.o ext/miniupnpc/minixml.o ext/miniupnpc/portlistingparse.o ext/miniupnpc/receivedata.o ext/miniupnpc/upnpcommands.o ext/miniupnpc/upnpdev.o ext/miniupnpc/upnperrors.o ext/miniupnpc/upnpreplyparse.o
e n d i f
i f e q ( $( wildcard /usr /include /natpmp .h ) , )
ONE_OBJS += ext/libnatpmp/natpmp.o ext/libnatpmp/getgateway.o
e l s e
LDLIBS += -lnatpmp
override DEFS += -DZT_USE_SYSTEM_NATPMP
e n d i f
# Use bundled http-parser since distribution versions are NOT API-stable or compatible!
# Trying to use dynamically linked libhttp-parser causes tons of compatibility problems.
ONE_OBJS += ext/http-parser/http_parser.o
# Build with address sanitization library for advanced debugging (clang)
i f e q ( $( ZT_SANITIZE ) , 1 )
DEFS += -fsanitize= address -DASAN_OPTIONS= symbolize = 1
e n d i f
i f e q ( $( ZT_DEBUG_TRACE ) , 1 )
DEFS += -DZT_DEBUG_TRACE
e n d i f
i f e q ( $( ZT_TRACE ) , 1 )
DEFS += -DZT_TRACE
e n d i f
i f e q ( $( ZT_RULES_ENGINE_DEBUGGING ) , 1 )
override DEFS += -DZT_RULES_ENGINE_DEBUGGING
e n d i f
# Build with address sanitization library for advanced debugging (clang)
i f e q ( $( ZT_SANITIZE ) , 1 )
SANFLAGS += -fsanitize= address -DASAN_OPTIONS= symbolize = 1
e n d i f
i f e q ( $( ZT_DEBUG ) , 1 )
override CFLAGS += -Wall -Wno-deprecated -g -pthread $( INCLUDES) $( DEFS)
override CXXFLAGS += -Wall -Wno-deprecated -g -std= c++11 -pthread $( INCLUDES) $( DEFS)
ZT_TRACE = 1
STRIP?= echo
# The following line enables optimization for the crypto code, since
# C25519 in particular is almost UNUSABLE in -O0 even on a 3ghz box!
node/Salsa20.o node/SHA512.o node/C25519.o node/Poly1305.o : CXXFLAGS =-Wall -O 2 -g -pthread $( INCLUDES ) $( DEFS )
e l s e
CFLAGS?= -O3 -fstack-protector -fPIE
override CFLAGS += -Wall -Wno-deprecated -pthread $( INCLUDES) -DNDEBUG $( DEFS)
CXXFLAGS?= -O3 -fstack-protector -fPIE
override CXXFLAGS += -Wall -Wno-deprecated -std= c++11 -pthread $( INCLUDES) -DNDEBUG $( DEFS)
LDFLAGS = -pie -Wl,-z,relro,-z,now
STRIP?= strip
STRIP += --strip-all
e n d i f
i f e q ( $( ZT_QNAP ) , 1 )
override DEFS += -D__QNAP__
e n d i f
i f e q ( $( ZT_SYNOLOGY ) , 1 )
override CFLAGS += -fPIC
override CXXFLAGS += -fPIC
override DEFS += -D__SYNOLOGY__
e n d i f
i f e q ( $( ZT_TRACE ) , 1 )
override DEFS += -DZT_TRACE
e n d i f
i f e q ( $( ZT_USE_TEST_TAP ) , 1 )
override DEFS += -DZT_USE_TEST_TAP
e n d i f
i f e q ( $( ZT_VAULT_SUPPORT ) , 1 )
override DEFS += -DZT_VAULT_SUPPORT= 1
override LDLIBS += -lcurl
e n d i f
# Uncomment for gprof profile build
#CFLAGS=-Wall -g -pg -pthread $(INCLUDES) $(DEFS)
#CXXFLAGS=-Wall -g -pg -pthread $(INCLUDES) $(DEFS)
#LDFLAGS=
#STRIP=echo
# Determine system build architecture from compiler target
CC_MACH = $( shell $( CC) -dumpmachine | cut -d '-' -f 1)
ZT_ARCHITECTURE = 999
i f e q ( $( CC_MACH ) , x 8 6 _ 6 4 )
ZT_ARCHITECTURE = 2
ZT_USE_X64_ASM_SALSA = 1
ZT_USE_X64_ASM_ED25519 = 1
e n d i f
i f e q ( $( CC_MACH ) , a m d 6 4 )
ZT_ARCHITECTURE = 2
ZT_USE_X64_ASM_SALSA = 1
ZT_USE_X64_ASM_ED25519 = 1
e n d i f
i f e q ( $( CC_MACH ) , p o w e r p c 6 4 l e )
ZT_ARCHITECTURE = 8
override DEFS += -DZT_NO_TYPE_PUNNING
e n d i f
i f e q ( $( CC_MACH ) , p o w e r p c )
ZT_ARCHITECTURE = 8
override DEFS += -DZT_NO_TYPE_PUNNING
override DEFS += -DZT_NO_CAPABILITIES
e n d i f
i f e q ( $( CC_MACH ) , p p c 6 4 l e )
ZT_ARCHITECTURE = 8
e n d i f
i f e q ( $( CC_MACH ) , p p c 6 4 e l )
ZT_ARCHITECTURE = 8
e n d i f
i f e q ( $( CC_MACH ) , i 3 8 6 )
ZT_ARCHITECTURE = 1
e n d i f
i f e q ( $( CC_MACH ) , i 4 8 6 )
ZT_ARCHITECTURE = 1
e n d i f
i f e q ( $( CC_MACH ) , i 5 8 6 )
ZT_ARCHITECTURE = 1
e n d i f
i f e q ( $( CC_MACH ) , i 6 8 6 )
ZT_ARCHITECTURE = 1
e n d i f
i f e q ( $( CC_MACH ) , a r m )
ZT_ARCHITECTURE = 3
override DEFS += -DZT_NO_TYPE_PUNNING
ZT_USE_ARM32_NEON_ASM_CRYPTO = 1
e n d i f
i f e q ( $( CC_MACH ) , a r m e l )
ZT_ARCHITECTURE = 3
override DEFS += -DZT_NO_TYPE_PUNNING
ZT_USE_ARM32_NEON_ASM_CRYPTO = 1
e n d i f
i f e q ( $( CC_MACH ) , a r m h f )
ZT_ARCHITECTURE = 3
override DEFS += -DZT_NO_TYPE_PUNNING
ZT_USE_ARM32_NEON_ASM_CRYPTO = 1
e n d i f
i f e q ( $( CC_MACH ) , a r m v 6 )
ZT_ARCHITECTURE = 3
override DEFS += -DZT_NO_TYPE_PUNNING
ZT_USE_ARM32_NEON_ASM_CRYPTO = 1
e n d i f
i f e q ( $( CC_MACH ) , a r m v 6 z k )
ZT_ARCHITECTURE = 3
override DEFS += -DZT_NO_TYPE_PUNNING
ZT_USE_ARM32_NEON_ASM_CRYPTO = 1
e n d i f
i f e q ( $( CC_MACH ) , a r m v 6 k z )
ZT_ARCHITECTURE = 3
override DEFS += -DZT_NO_TYPE_PUNNING
ZT_USE_ARM32_NEON_ASM_CRYPTO = 1
e n d i f
i f e q ( $( CC_MACH ) , a r m v 7 )
ZT_ARCHITECTURE = 3
override DEFS += -DZT_NO_TYPE_PUNNING
ZT_USE_ARM32_NEON_ASM_CRYPTO = 1
e n d i f
i f e q ( $( CC_MACH ) , a r m v 7 l )
ZT_ARCHITECTURE = 3
override DEFS += -DZT_NO_TYPE_PUNNING
ZT_USE_ARM32_NEON_ASM_CRYPTO = 1
e n d i f
i f e q ( $( CC_MACH ) , a r m v 7 l )
ZT_ARCHITECTURE = 3
override DEFS += -DZT_NO_TYPE_PUNNING
ZT_USE_ARM32_NEON_ASM_SALSA2012 = 1
e n d i f
i f e q ( $( CC_MACH ) , a r m 6 4 )
ZT_ARCHITECTURE = 4
override DEFS += -DZT_NO_TYPE_PUNNING
e n d i f
i f e q ( $( CC_MACH ) , a a r c h 6 4 )
ZT_ARCHITECTURE = 4
override DEFS += -DZT_NO_TYPE_PUNNING
e n d i f
i f e q ( $( CC_MACH ) , m i p s e l )
ZT_ARCHITECTURE = 5
override DEFS += -DZT_NO_TYPE_PUNNING
e n d i f
i f e q ( $( CC_MACH ) , m i p s )
ZT_ARCHITECTURE = 5
override DEFS += -DZT_NO_TYPE_PUNNING
e n d i f
i f e q ( $( CC_MACH ) , m i p s 6 4 )
ZT_ARCHITECTURE = 6
override DEFS += -DZT_NO_TYPE_PUNNING
e n d i f
i f e q ( $( CC_MACH ) , m i p s 6 4 e l )
ZT_ARCHITECTURE = 6
override DEFS += -DZT_NO_TYPE_PUNNING
e n d i f
# Fail if system architecture could not be determined
i f e q ( $( ZT_ARCHITECTURE ) , 9 9 9 )
ERR = $( error FATAL: architecture could not be determined from $( CC) -dumpmachine: $CC_MACH )
.PHONY : err
err : ; $( ERR )
e n d i f
# Disable software updates by default on Linux since that is normally done with package management
o v e r r i d e DEFS += -DZT_BUILD_PLATFORM= 1 -DZT_BUILD_ARCHITECTURE= $( ZT_ARCHITECTURE) -DZT_SOFTWARE_UPDATE_DEFAULT= "\"disable\""
# This forces libstdc++ not to include these abominations, especially mt and pool
o v e r r i d e DEFS += -D_MT_ALLOCATOR_H -D_POOL_ALLOCATOR_H -D_EXTPTR_ALLOCATOR_H -D_DEBUG_ALLOCATOR_H
# Static builds, which are currently done for a number of Linux targets
i f e q ( $( ZT_STATIC ) , 1 )
override LDFLAGS += -static
e n d i f
# For building an official semi-static binary on CentOS 7
i f e q ( $( ZT_OFFICIAL ) , 1 )
CORE_OBJS += ext/misc/linux-old-glibc-compat.o
override LDFLAGS += -Wl,--wrap= memcpy -static-libstdc++
e n d i f
# ARM32 hell -- use conservative CFLAGS
i f e q ( $( ZT_ARCHITECTURE ) , 3 )
ifeq ( $( shell if [ -e /usr/bin/dpkg ] ; then dpkg --print-architecture; fi ) ,armel)
override CFLAGS += -march= armv5 -mfloat-abi= soft -msoft-float -mno-unaligned-access -marm
override CXXFLAGS += -march= armv5 -mfloat-abi= soft -msoft-float -mno-unaligned-access -marm
ZT_USE_ARM32_NEON_ASM_CRYPTO = 0
else
override CFLAGS += -march= armv5 -mno-unaligned-access -marm
override CXXFLAGS += -march= armv5 -mno-unaligned-access -marm
ZT_USE_ARM32_NEON_ASM_CRYPTO = 0
endif
e n d i f
# Build faster crypto on some targets
i f e q ( $( ZT_USE_X 64_ASM_SALSA ) , 1 )
override DEFS += -DZT_USE_X64_ASM_SALSA2012
override CORE_OBJS += ext/x64-salsa2012-asm/salsa2012.o
e n d i f
i f e q ( $( ZT_USE_X 64_ASM_ED 25519) , 1 )
override DEFS += -DZT_USE_FAST_X64_ED25519
override CORE_OBJS += ext/ed25519-amd64-asm/choose_t.o ext/ed25519-amd64-asm/consts.o ext/ed25519-amd64-asm/fe25519_add.o ext/ed25519-amd64-asm/fe25519_freeze.o ext/ed25519-amd64-asm/fe25519_mul.o ext/ed25519-amd64-asm/fe25519_square.o ext/ed25519-amd64-asm/fe25519_sub.o ext/ed25519-amd64-asm/ge25519_add_p1p1.o ext/ed25519-amd64-asm/ge25519_dbl_p1p1.o ext/ed25519-amd64-asm/ge25519_nielsadd2.o ext/ed25519-amd64-asm/ge25519_nielsadd_p1p1.o ext/ed25519-amd64-asm/ge25519_p1p1_to_p2.o ext/ed25519-amd64-asm/ge25519_p1p1_to_p3.o ext/ed25519-amd64-asm/ge25519_pnielsadd_p1p1.o ext/ed25519-amd64-asm/heap_rootreplaced.o ext/ed25519-amd64-asm/heap_rootreplaced_1limb.o ext/ed25519-amd64-asm/heap_rootreplaced_2limbs.o ext/ed25519-amd64-asm/heap_rootreplaced_3limbs.o ext/ed25519-amd64-asm/sc25519_add.o ext/ed25519-amd64-asm/sc25519_barrett.o ext/ed25519-amd64-asm/sc25519_lt.o ext/ed25519-amd64-asm/sc25519_sub_nored.o ext/ed25519-amd64-asm/ull4_mul.o ext/ed25519-amd64-asm/fe25519_getparity.o ext/ed25519-amd64-asm/fe25519_invert.o ext/ed25519-amd64-asm/fe25519_iseq.o ext/ed25519-amd64-asm/fe25519_iszero.o ext/ed25519-amd64-asm/fe25519_neg.o ext/ed25519-amd64-asm/fe25519_pack.o ext/ed25519-amd64-asm/fe25519_pow2523.o ext/ed25519-amd64-asm/fe25519_setint.o ext/ed25519-amd64-asm/fe25519_unpack.o ext/ed25519-amd64-asm/ge25519_add.o ext/ed25519-amd64-asm/ge25519_base.o ext/ed25519-amd64-asm/ge25519_double.o ext/ed25519-amd64-asm/ge25519_double_scalarmult.o ext/ed25519-amd64-asm/ge25519_isneutral.o ext/ed25519-amd64-asm/ge25519_multi_scalarmult.o ext/ed25519-amd64-asm/ge25519_pack.o ext/ed25519-amd64-asm/ge25519_scalarmult_base.o ext/ed25519-amd64-asm/ge25519_unpackneg.o ext/ed25519-amd64-asm/hram.o ext/ed25519-amd64-asm/index_heap.o ext/ed25519-amd64-asm/sc25519_from32bytes.o ext/ed25519-amd64-asm/sc25519_from64bytes.o ext/ed25519-amd64-asm/sc25519_from_shortsc.o ext/ed25519-amd64-asm/sc25519_iszero.o ext/ed25519-amd64-asm/sc25519_mul.o ext/ed25519-amd64-asm/sc25519_mul_shortsc.o ext/ed25519-amd64-asm/sc25519_slide.o ext/ed25519-amd64-asm/sc25519_to32bytes.o ext/ed25519-amd64-asm/sc25519_window4.o ext/ed25519-amd64-asm/sign.o
e n d i f
i f e q ( $( ZT_USE_ARM 32_NEON_ASM_CRYPTO ) , 1 )
override DEFS += -DZT_USE_ARM32_NEON_ASM_SALSA2012
override CORE_OBJS += ext/arm32-neon-salsa2012-asm/salsa2012.o
e n d i f
all : one
one : $( CORE_OBJS ) $( ONE_OBJS ) one .o
$( CXX) $( CXXFLAGS) $( LDFLAGS) -o zerotier-one $( CORE_OBJS) $( ONE_OBJS) one.o $( LDLIBS)
$( STRIP) zerotier-one
ln -sf zerotier-one zerotier-idtool
ln -sf zerotier-one zerotier-cli
zerotier-one : one
zerotier-idtool : one
zerotier-cli : one
libzerotiercore.a : FORCE
make CFLAGS = "-O3 -fstack-protector -fPIC" CXXFLAGS = "-O3 -std=c++11 -fstack-protector -fPIC" $( CORE_OBJS)
ar rcs libzerotiercore.a $( CORE_OBJS)
ranlib libzerotiercore.a
core : libzerotiercore .a
selftest : $( CORE_OBJS ) $( ONE_OBJS ) selftest .o
$( CXX) $( CXXFLAGS) $( LDFLAGS) -o zerotier-selftest selftest.o $( CORE_OBJS) $( ONE_OBJS) $( LDLIBS)
$( STRIP) zerotier-selftest
zerotier-selftest : selftest
manpages : FORCE
cd doc ; ./build.sh
doc : manpages
clean : FORCE
rm -rf *.a *.so *.o node/*.o controller/*.o osdep/*.o service/*.o ext/http-parser/*.o ext/miniupnpc/*.o ext/libnatpmp/*.o $( CORE_OBJS) $( ONE_OBJS) zerotier-one zerotier-idtool zerotier-cli zerotier-selftest build-* ZeroTierOneInstaller-* *.deb *.rpm .depend debian/files debian/zerotier-one*.debhelper debian/zerotier-one.substvars debian/*.log debian/zerotier-one doc/node_modules ext/misc/*.o debian/.debhelper debian/debhelper-build-stamp
distclean : clean
realclean : distclean
official : FORCE
make -j4 ZT_OFFICIAL = 1 all
central-controller : FORCE
make -j4 LDLIBS = "-L/usr/pgsql-10/lib/ -lpq" CXXFLAGS = "-I/usr/pgsql-10/include -fPIC" DEFS = "-DZT_CONTROLLER_USE_LIBPQ" ZT_OFFICIAL = 1 ZT_USE_X64_ASM_ED25519 = 1 one
central-controller-docker : central -controller
docker build -t gcr.io/zerotier-central/ztcentral-controller:${ TIMESTAMP } -f docker/Dockerfile .
debug : FORCE
make ZT_DEBUG = 1 one
make ZT_DEBUG = 1 selftest
nltest : $( NLTEST_OBJS )
$( CXX) $( CXXFLAGS) $( LDFLAGS) -o nltest $( NLTEST_OBJS) $( LDLIBS)
# Note: keep the symlinks in /var/lib/zerotier-one to the binaries since these
# provide backward compatibility with old releases where the binaries actually
# lived here. Folks got scripts.
install : FORCE
mkdir -p $( DESTDIR) /usr/sbin
rm -f $( DESTDIR) /usr/sbin/zerotier-one
cp -f zerotier-one $( DESTDIR) /usr/sbin/zerotier-one
rm -f $( DESTDIR) /usr/sbin/zerotier-cli
rm -f $( DESTDIR) /usr/sbin/zerotier-idtool
ln -s zerotier-one $( DESTDIR) /usr/sbin/zerotier-cli
ln -s zerotier-one $( DESTDIR) /usr/sbin/zerotier-idtool
mkdir -p $( DESTDIR) /var/lib/zerotier-one
rm -f $( DESTDIR) /var/lib/zerotier-one/zerotier-one
rm -f $( DESTDIR) /var/lib/zerotier-one/zerotier-cli
rm -f $( DESTDIR) /var/lib/zerotier-one/zerotier-idtool
ln -s ../../../usr/sbin/zerotier-one $( DESTDIR) /var/lib/zerotier-one/zerotier-one
ln -s ../../../usr/sbin/zerotier-one $( DESTDIR) /var/lib/zerotier-one/zerotier-cli
ln -s ../../../usr/sbin/zerotier-one $( DESTDIR) /var/lib/zerotier-one/zerotier-idtool
mkdir -p $( DESTDIR) /usr/share/man/man8
rm -f $( DESTDIR) /usr/share/man/man8/zerotier-one.8.gz
cat doc/zerotier-one.8 | gzip -9 >$( DESTDIR) /usr/share/man/man8/zerotier-one.8.gz
mkdir -p $( DESTDIR) /usr/share/man/man1
rm -f $( DESTDIR) /usr/share/man/man1/zerotier-idtool.1.gz
rm -f $( DESTDIR) /usr/share/man/man1/zerotier-cli.1.gz
cat doc/zerotier-cli.1 | gzip -9 >$( DESTDIR) /usr/share/man/man1/zerotier-cli.1.gz
cat doc/zerotier-idtool.1 | gzip -9 >$( DESTDIR) /usr/share/man/man1/zerotier-idtool.1.gz
# Uninstall preserves identity.public and identity.secret since the user might
# want to save these. These are your ZeroTier address.
uninstall : FORCE
rm -f $( DESTDIR) /var/lib/zerotier-one/zerotier-one
rm -f $( DESTDIR) /var/lib/zerotier-one/zerotier-cli
rm -f $( DESTDIR) /var/lib/zerotier-one/zerotier-idtool
rm -f $( DESTDIR) /usr/sbin/zerotier-cli
rm -f $( DESTDIR) /usr/sbin/zerotier-idtool
rm -f $( DESTDIR) /usr/sbin/zerotier-one
rm -rf $( DESTDIR) /var/lib/zerotier-one/iddb.d
rm -rf $( DESTDIR) /var/lib/zerotier-one/updates.d
rm -rf $( DESTDIR) /var/lib/zerotier-one/networks.d
rm -f $( DESTDIR) /var/lib/zerotier-one/zerotier-one.port
rm -f $( DESTDIR) /usr/share/man/man8/zerotier-one.8.gz
rm -f $( DESTDIR) /usr/share/man/man1/zerotier-idtool.1.gz
rm -f $( DESTDIR) /usr/share/man/man1/zerotier-cli.1.gz
# These are just for convenience for building Linux packages
debian : FORCE
debuild -I -i -us -uc -nc -b
debian-clean : FORCE
rm -rf debian/files debian/zerotier-one*.debhelper debian/zerotier-one.substvars debian/*.log debian/zerotier-one debian/.debhelper debian/debhelper-build-stamp
redhat : FORCE
rpmbuild -ba zerotier-one.spec
FORCE :
