netfilter buglog - Apr 2014 - [Bug 914] New: nft configure does not use --prefix as include/lib search path

https://bugzilla.netfilter.org/show_bug.cgi?id=914

           Summary: nft configure does not use --prefix as include/lib
                    search path
           Product: nftables
           Version: unspecified
          Platform: x86_64
        OS/Version: All
            Status: NEW
          Severity: enhancement
          Priority: P5
         Component: nft
        AssignedTo: pablo at netfilter.org
        ReportedBy: laurent at guerby.net
   Estimated Hours: 0.0


After compiling and installing libmnl and libnftnl in /root/test I tried nft :

$ ./configure --prefix=/root/test
checking for gcc... gcc
checking whether the C compiler works... yes
checking for C compiler default output file name... a.out
checking for suffix of executables... 
checking whether we are cross compiling... no
checking for suffix of object files... o
checking whether we are using the GNU C compiler... yes
checking whether gcc accepts -g... yes
checking for gcc option to accept ISO C89... none needed
checking for a thread-safe mkdir -p... /bin/mkdir -p
checking for a BSD-compatible install... /usr/bin/install -c
checking for a sed that does not truncate output... /bin/sed
checking for docbook2x-man... n
configure: WARNING: docbookx2-man not found, no manpages will be built
checking for db2pdf... n
configure: WARNING: db2pdf not found, no PDF manpages will be built
checking for flex... /usr/bin/flex
checking for bison... /usr/bin/bison
checking for mnl_socket_open in -lmnl... yes
checking for nft_rule_alloc in -lnftnl... no
configure: error: No suitable version of libnftnl found

$ ls -l /root/test/lib
total 592
-rwxr-xr-x 1 root root    919 Apr 13 03:01 libmnl.la
lrwxrwxrwx 1 root root     15 Apr 13 03:01 libmnl.so -> libmnl.so.0.1.0
lrwxrwxrwx 1 root root     15 Apr 13 03:01 libmnl.so.0 -> libmnl.so.0.1.0
-rwxr-xr-x 1 root root  65436 Apr 13 03:01 libmnl.so.0.1.0
-rwxr-xr-x 1 root root    937 Apr 13 03:07 libnftnl.la
lrwxrwxrwx 1 root root     17 Apr 13 03:07 libnftnl.so -> libnftnl.so.0.1.0
lrwxrwxrwx 1 root root     17 Apr 13 03:07 libnftnl.so.0 -> libnftnl.so.0.1.0
-rwxr-xr-x 1 root root 525452 Apr 13 03:07 libnftnl.so.0.1.0
drwxr-xr-x 2 root root   4096 Apr 13 03:07 pkgconfig

I had to explicitely define CFLAGS and LDFLAGS to make it work:

$ export CFLAGS=-I/root/test/include
$ export LDFLAGS=-L/root/test/lib
$ ./configure --prefix=/root/test
...
configure: creating ./config.status
config.status: creating Makefile
....
$ make
...

-- 
Configure bugmail: https://bugzilla.netfilter.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are watching all bug changes.

https://bugzilla.netfilter.org/show_bug.cgi?id=914

Pablo Neira Ayuso <pablo at netfilter.org> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
             Status|NEW                         |ASSIGNED

--- Comment #1 from Pablo Neira Ayuso <pablo at netfilter.org> ---
Is this problem still happening after the conversion to the autotools? Could
you confirm current git snapshop resolves this problem? Thanks

-- 
You are receiving this mail because:
You are watching all bug changes.
-------------- next part --------------
An HTML attachment was scrubbed...
URL:
<http://lists.netfilter.org/pipermail/netfilter-buglog/attachments/20150107/53fee870/attachment.html>

https://bugzilla.netfilter.org/show_bug.cgi?id=914

--- Comment #2 from Pablo Neira Ayuso <pablo at netfilter.org> ---
Laurent, could you check if you can still reproduce this with current nft git
HEAD?

So we can close this entry, thanks.

-- 
You are receiving this mail because:
You are watching all bug changes.
-------------- next part --------------
An HTML attachment was scrubbed...
URL:
<http://lists.netfilter.org/pipermail/netfilter-buglog/attachments/20160309/b08b7936/attachment.html>

https://bugzilla.netfilter.org/show_bug.cgi?id=914

Phil Sutter <phil at nwl.cc> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
                 CC|                            |phil at nwl.cc

--- Comment #3 from Phil Sutter <phil at nwl.cc> ---
AFAICT, '--prefix' option is not even meant for that. It just alters
DESTDIR
variable used for installing. In order to build nftables against a specific
libnftnl installed at $libpath (via '--prefix=$libpath' in
libnftnl's
configure), one has to call nftables configure like so:

./configure LIBNFTNL_LIBS="-L${libpath}/lib -lnftnl" \
            LIBNFTNL_CFLAGS="-I${libpath}/include"

But this will cause the resulting nft binary to be dynamically linked. So upon
execution, ${libpath}/lib has to be added to LD_LIBRARY_PATH.

I personally build libnftnl static to overcome this, then I can build nftables
like so:

./configure LIBNFTNL_LIBS="${libpath}/lib/libnftnl.a" \
            LIBNFTNL_CFLAGS="-I${libpath}/include"

This causes the resulting nft binary to be statically linked against libnftnl
and therefore I don't have to adjust LD_LIBRARY_PATH upon execution.

-- 
You are receiving this mail because:
You are watching all bug changes.
-------------- next part --------------
An HTML attachment was scrubbed...
URL:
<http://lists.netfilter.org/pipermail/netfilter-buglog/attachments/20170213/bda74737/attachment.html>

https://bugzilla.netfilter.org/show_bug.cgi?id=914

Phil Sutter <phil at nwl.cc> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
         Resolution|---                         |INVALID
             Status|ASSIGNED                    |RESOLVED

--- Comment #4 from Phil Sutter <phil at nwl.cc> ---
Closing this ticket due to lack of feedback from reporter - also, a working
solution has been presented in comment 3.

-- 
You are receiving this mail because:
You are watching all bug changes.
-------------- next part --------------
An HTML attachment was scrubbed...
URL:
<http://lists.netfilter.org/pipermail/netfilter-buglog/attachments/20170727/811a437f/attachment.html>