Gentoo Websites Logo
Go to: Gentoo Home Documentation Forums Lists Bugs Planet Store Wiki Get Gentoo!
Bug 917228 - sys-apps/systemd: wire up USE=bpf
Summary: sys-apps/systemd: wire up USE=bpf
Status: CONFIRMED
Alias: None
Product: Gentoo Linux
Classification: Unclassified
Component: Current packages (show other bugs)
Hardware: All Linux
: Normal normal (vote)
Assignee: Gentoo systemd Team
URL:
Whiteboard:
Keywords:
Depends on:
Blocks:
 
Reported: 2023-11-12 07:18 UTC by Sam James
Modified: 2023-11-12 07:19 UTC (History)
4 users (show)

See Also:
Package list:
Runtime testing required: ---


Attachments

Note You need to log in before you can comment on or make changes to this bug.
Description Sam James archtester Gentoo Infrastructure gentoo-dev Security 2023-11-12 07:18:40 UTC
systemd supports BPF (this came up in bug 890004 but I completely forgot about it) via dev-util/bpftool for network filters like restricting services to specific interfaces.

There's two relevant meson options (https://github.com/systemd/systemd/blob/620788da173d354994eeae8211d276bcf9af602c/meson_options.txt#L513):
* bpf-compiler
* bpf-framework

I dunno if we're going to need a BPF compiler when building with GCC, I assume we will. Arsen and I may be working on something which will need a dev-util/mingw64-toolchain-style drop-in package for bpf so that might work out.

Both Fedora (https://src.fedoraproject.org/rpms/systemd/blob/rawhide/f/systemd.spec#_593) and opensuse (https://build.opensuse.org/package/view_file/openSUSE:Factory/systemd/systemd.spec?expand=1) seem to be enabling these bits.

We probably shouldn't do it unconditionally given it may have heavy dependencies wrt toolchain and I don't think all arches even have BPF yet.