attested-tls-proxy/Makefile at main · flashbots/attested-tls-proxy · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
# Heavily inspired by rbuilder: https://github.com/flashbots/rbuilder/blob/develop/Makefile
.DEFAULT_GOAL := help

GIT_VER ?= $(shell git describe --tags --always --dirty="-dev")
GIT_TAG ?= $(shell git describe --tags --abbrev=0)

FEATURES ?=
FEATURE_ARGS = $(if $(strip $(FEATURES)),--features "$(FEATURES)")

##@ Help

.PHONY: help
help: ## Display this help.
	@awk 'BEGIN {FS = ":.*##"; printf "Usage:\n  make \033[36m<target>\033[0m\n"} /^[a-zA-Z_0-9-]+:.*?##/ { printf "  \033[36m%-15s\033[0m %s\n", $$1, $$2 } /^##@/ { printf "\n\033[1m%s\033[0m\n", substr($$0, 5) } ' $(MAKEFILE_LIST)

.PHONY: v
v: ## Show the current version
	@echo "Version: ${GIT_VER}"

##@ Build

.PHONY: clean
clean: ## Clean up
	cargo clean

# Detect the current architecture
ARCH := $(shell uname -m)

# Determine if we're on x86_64
ifeq ($(ARCH),x86_64)
    IS_X86_64 = 1
else
    IS_X86_64 = 0
endif

# Set build profile and flags based on architecture
ifeq ($(IS_X86_64),1)
    # x86_64: Use reproducible profile with reproducible build flags
    BUILD_PROFILE = reproducible
    BUILD_TARGET = x86_64-unknown-linux-gnu

    # Environment variables for reproducible builds
    # Initialize RUSTFLAGS
    RUST_BUILD_FLAGS =
    # Optimize for modern CPUs
    RUST_BUILD_FLAGS += -C target-cpu=x86-64-v3
    # Remove build ID from the binary to ensure reproducibility across builds
    RUST_BUILD_FLAGS += -C link-arg=-Wl,--build-id=none
    # Remove metadata hash from symbol names to ensure reproducible builds
    RUST_BUILD_FLAGS += -C metadata=''
    # Remap paths to ensure reproducible builds
    RUST_BUILD_FLAGS += --remap-path-prefix $(shell pwd)=.
    # Set timestamp from last git commit for reproducible builds
    SOURCE_DATE ?= $(shell git log -1 --pretty=%ct)
    # Set C locale for consistent string handling and sorting
    LOCALE_VAL = C
    # Set UTC timezone for consistent time handling across builds
    TZ_VAL = UTC

    # Environment setup for reproducible builds
    BUILD_ENV = SOURCE_DATE_EPOCH=$(SOURCE_DATE) \
                RUSTFLAGS="${RUST_BUILD_FLAGS}" \
                LC_ALL=${LOCALE_VAL} \
                TZ=${TZ_VAL}
else
    # Non-x86_64: Use release profile without reproducible build flags
    BUILD_PROFILE = release
    BUILD_TARGET =
    RUST_BUILD_FLAGS =
    BUILD_ENV =
endif

.PHONY: build
build: ## Build (release version)
	$(BUILD_ENV) cargo build $(FEATURE_ARGS) --locked $(if $(BUILD_TARGET),--target $(BUILD_TARGET)) --profile $(BUILD_PROFILE)

.PHONY: build-dev
build-dev: ## Build (debug version)
	cargo build $(FEATURE_ARGS)

##@ Debian Packages

.PHONY: install-cargo-deb
install-cargo-deb:
	@command -v cargo-deb >/dev/null 2>&1 || cargo install cargo-deb@3.6.0 --locked

.PHONY: build-deb
build-deb: install-cargo-deb ## Build Debian package
	cargo deb --profile $(BUILD_PROFILE) --no-build --no-dbgsym --no-strip \
		-p attested-tls-proxy \
		$(if $(BUILD_TARGET),--target $(BUILD_TARGET)) \
		$(if $(VERSION),--deb-version "1~$(VERSION)")

##@ Dev

.PHONY: lint
lint: ## Run the linters
	cargo fmt -- --check
	cargo clippy --workspace $(FEATURE_ARGS) -- -D warnings

.PHONY: test
test:
	cargo test --verbose $(FEATURE_ARGS)

.PHONY: lt
lt: lint test ## Run "lint" and "test"

.PHONY: fmt
fmt: ## Format the code
	cargo fmt
	cargo fix --allow-staged
	cargo clippy $(FEATURE_ARGS) --fix --allow-staged