mirror of
https://github.com/google/sandboxed-api.git
synced 2024-03-22 13:11:30 +08:00
e21afae5a7
Add a new option `SAPI_ENABLE_CONTRIB_TESTS` that builds the sandboxes in `contrib/` if set. The new `contrib/CMakeLists.txt` should be extended each time we add a new sandbox to `contrib/`. This is in preparation of a follow-up change that should test the sandboxes using GitHub Actions. Drive-by: - Rename the tests in `jsonnet_tests.cc` to conform to the style guide. PiperOrigin-RevId: 425874289 Change-Id: I5b31546ccf84444c2480287220ef88abbd78a235
142 lines
4.3 KiB
CMake
142 lines
4.3 KiB
CMake
# Copyright 2019 Google LLC
|
|
#
|
|
# Licensed under the Apache License, Version 2.0 (the "License");
|
|
# you may not use this file except in compliance with the License.
|
|
# You may obtain a copy of the License at
|
|
#
|
|
# https://www.apache.org/licenses/LICENSE-2.0
|
|
#
|
|
# Unless required by applicable law or agreed to in writing, software
|
|
# distributed under the License is distributed on an "AS IS" BASIS,
|
|
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
|
# See the License for the specific language governing permissions and
|
|
# limitations under the License.
|
|
|
|
cmake_minimum_required(VERSION 3.13..3.22)
|
|
|
|
project(SandboxedAPI C CXX ASM)
|
|
|
|
# TODO(cblichmann): Enable for Android once support lands
|
|
if(NOT CMAKE_SYSTEM_NAME MATCHES "Linux")
|
|
message(FATAL_ERROR "Sandboxed API is only supported on Linux")
|
|
endif()
|
|
|
|
# SAPI-wide setting for the language level
|
|
set(SAPI_CXX_STANDARD 17)
|
|
|
|
if(NOT CMAKE_CXX_STANDARD)
|
|
set(CMAKE_CXX_STANDARD ${SAPI_CXX_STANDARD})
|
|
elseif(CMAKE_CXX_STANDARD LESS ${SAPI_CXX_STANDARD})
|
|
message(FATAL_ERROR
|
|
"Sandboxed API requires C++17. To ensure ABI compatibility"
|
|
" build and link all targets of the project with the same"
|
|
" version of C++."
|
|
)
|
|
endif()
|
|
|
|
set(SAPI_BINARY_DIR "${PROJECT_BINARY_DIR}" CACHE INTERNAL "" FORCE)
|
|
set(SAPI_SOURCE_DIR "${PROJECT_SOURCE_DIR}" CACHE INTERNAL "" FORCE)
|
|
|
|
get_directory_property(_sapi_has_parent PARENT_DIRECTORY)
|
|
if(PROJECT_IS_TOP_LEVEL OR NOT _sapi_has_parent)
|
|
set(SAPI_PROJECT_IS_TOP_LEVEL ON)
|
|
endif()
|
|
|
|
include(CheckCXXCompilerFlag)
|
|
|
|
# Sapi CMake modules, order matters
|
|
list(APPEND CMAKE_MODULE_PATH "${SAPI_SOURCE_DIR}/cmake"
|
|
"${SAPI_SOURCE_DIR}/cmake/modules")
|
|
include(SapiOptions)
|
|
include(SapiDeps)
|
|
include(SapiUtil)
|
|
include(SapiBuildDefs)
|
|
include(GNUInstallDirs)
|
|
|
|
# Allow the header generator to auto-configure include paths
|
|
set(CMAKE_EXPORT_COMPILE_COMMANDS ON)
|
|
|
|
if(SAPI_HARDENED_SOURCE)
|
|
add_compile_options(-fstack-protector -U_FORTIFY_SOURCE -D_FORTIFY_SOURCE=2)
|
|
add_link_options(-Wl,-z,relro -Wl,-z,now)
|
|
endif()
|
|
|
|
if(SAPI_FORCE_COLOR_OUTPUT)
|
|
if(CMAKE_CXX_COMPILER_ID STREQUAL "GNU") # GCC
|
|
add_compile_options(-fdiagnostics-color=always)
|
|
elseif(CMAKE_CXX_COMPILER_ID MATCHES "Clang") # Clang or Apple Clang
|
|
add_compile_options(-fcolor-diagnostics)
|
|
endif()
|
|
endif()
|
|
|
|
# Make Bazel-style includes work
|
|
configure_file(cmake/libcap_capability.h.in
|
|
libcap/include/sys/capability.h
|
|
@ONLY)
|
|
|
|
# Library with basic project settings. The empty file is there to be able to
|
|
# define header-only libraries without cumbersome target_sources() hacks.
|
|
file(WRITE ${SAPI_BINARY_DIR}/sapi_base_force_cxx_linkage.cc "")
|
|
add_library(sapi_base STATIC
|
|
"${SAPI_BINARY_DIR}/sapi_base_force_cxx_linkage.cc"
|
|
)
|
|
add_library(sapi::base ALIAS sapi_base)
|
|
target_compile_features(sapi_base PUBLIC
|
|
cxx_std_${SAPI_CXX_STANDARD}
|
|
)
|
|
set_target_properties(sapi_base PROPERTIES
|
|
SKIP_BUILD_RPATH ON
|
|
POSITION_INDEPENDENT_CODE ON
|
|
)
|
|
target_include_directories(sapi_base PUBLIC
|
|
"${SAPI_BINARY_DIR}"
|
|
"${SAPI_SOURCE_DIR}"
|
|
"${Protobuf_INCLUDE_DIR}"
|
|
)
|
|
target_compile_options(sapi_base PUBLIC -fno-exceptions)
|
|
set(_sapi_check_no_deprecated
|
|
-Wno-deprecated SAPI_HAS_W_NO_DEPRECATED
|
|
)
|
|
# For sandbox2/util.cc's CloneAndJump()
|
|
set(_sapi_check_frame_larger_than
|
|
-Wframe-larger-than=40960 SAPI_HAS_W_FRAME_LARGER_THAN
|
|
)
|
|
set(_sapi_check_no_deprecated_declarations
|
|
-Wno-deprecated-declarations SAPI_HAS_W_NO_DEPRECATED_DECLARATIONS
|
|
)
|
|
set(_sapi_check_no_psabi
|
|
-Wno-psabi SAPI_HAS_W_NO_PSABI
|
|
)
|
|
foreach(check IN ITEMS _sapi_check_no_deprecated
|
|
_sapi_check_frame_larger_than
|
|
_sapi_check_no_deprecated_declarations
|
|
_sapi_check_no_psabi)
|
|
list(GET ${check} 0 opt_value)
|
|
list(GET ${check} 1 var_name)
|
|
check_cxx_compiler_flag(${opt_value} ${var_name})
|
|
if(${var_name})
|
|
target_compile_options(sapi_base PUBLIC ${opt_value})
|
|
endif()
|
|
endforeach()
|
|
|
|
add_library(sapi_test_main INTERFACE)
|
|
add_library(sapi::test_main ALIAS sapi_test_main)
|
|
target_link_libraries(sapi_test_main INTERFACE
|
|
gtest_main
|
|
gmock
|
|
sapi::base
|
|
)
|
|
|
|
if(SAPI_ENABLE_TESTS)
|
|
include(GoogleTest)
|
|
# Setup tests to work like with Bazel
|
|
create_directory_symlink("${SAPI_BINARY_DIR}" com_google_sandboxed_api)
|
|
enable_testing()
|
|
endif()
|
|
|
|
add_subdirectory(sandboxed_api)
|
|
|
|
if(SAPI_ENABLE_TESTS AND SAPI_ENABLE_CONTRIB_TESTS)
|
|
add_subdirectory(contrib)
|
|
endif()
|