From owner-freebsd-hackers@freebsd.org Thu Aug 2 17:45:36 2018 Return-Path: Delivered-To: freebsd-hackers@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id D6899106DD43 for ; Thu, 2 Aug 2018 17:45:35 +0000 (UTC) (envelope-from eric@metricspace.net) Received: from mail.metricspace.net (mail.metricspace.net [IPv6:2001:470:1f11:617::107]) by mx1.freebsd.org (Postfix) with ESMTP id 6C8F5734F7; Thu, 2 Aug 2018 17:45:35 +0000 (UTC) (envelope-from eric@metricspace.net) Received: from [192.168.43.57] (mobile-166-171-184-77.mycingular.net [166.171.184.77]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (Client did not present a certificate) (Authenticated sender: eric) by mail.metricspace.net (Postfix) with ESMTPSA id 5FFB8604A; Thu, 2 Aug 2018 17:45:32 +0000 (UTC) Subject: Re: A few build system questions To: Warner Losh Cc: Brooks Davis , FreeBSD Hackers References: <20180802153357.GA25687@spindle.one-eyed-alien.net> <7f143985-2ebb-210a-e314-0deebd3d9f5b@metricspace.net> From: Eric McCorkle Openpgp: preference=signencrypt Autocrypt: addr=eric@metricspace.net; prefer-encrypt=mutual; keydata= mDMEWue2FBYJKwYBBAHaRw8BAQdAP/qVPlXodV6pYO5b1Jw0eFyMhyDD7B5y5eFsciutEfS0 JEVyaWMgTWNDb3JrbGUgPGVyaWNAbWV0cmljc3BhY2UubmV0PoiWBBMWCAA+FiEEDxi/0rkj zd6Uc6cFCN/CKRbBwmwFAlrnthQCGwMFCQHhM4AFCwkIBwIGFQoJCAsCBBYCAwECHgECF4AA CgkQCN/CKRbBwmyGKAD/XTSBOItCKcYCPTlsaS1aQYVEwWXXFgdjWE+WsNdZUS8A/AhYAbQZ kNZNimE2rQLoklkfTA74qF/V257NuQi4QDcLuDgEWue2FBIKKwYBBAGXVQEFAQEHQKpZVyCG ync/xqejm2C1HKGXLJTUu38RvnrR3UYECz9nAwEIB4h+BBgWCAAmFiEEDxi/0rkjzd6Uc6cF CN/CKRbBwmwFAlrnthQCGwwFCQHhM4AACgkQCN/CKRbBwmyi2wEAmvaGt8QMjGELzm27gP4c jJGUi7oigsLmTiFPkpJqPz0A+QFBSCvxJaxCMyoVru/xB6bunpJ+Wtsj8HD1EuJOn4EJ Message-ID: <7a14aee9-8205-4fc7-a7a0-a9ed2f33751d@metricspace.net> Date: Thu, 2 Aug 2018 13:45:25 -0400 User-Agent: Mozilla/5.0 (X11; FreeBSD amd64; rv:52.0) Gecko/20100101 Thunderbird/52.9.0 MIME-Version: 1.0 In-Reply-To: Content-Type: multipart/signed; micalg=pgp-sha256; protocol="application/pgp-signature"; boundary="fvchysnIemPOLSRGZ16pHlOlfFgu5o7mp" X-BeenThere: freebsd-hackers@freebsd.org X-Mailman-Version: 2.1.27 Precedence: list List-Id: Technical Discussions relating to FreeBSD List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 02 Aug 2018 17:45:36 -0000 This is an OpenPGP/MIME signed message (RFC 4880 and 3156) --fvchysnIemPOLSRGZ16pHlOlfFgu5o7mp Content-Type: multipart/mixed; boundary="uz9yhhPN9gGHDwqeYOlApfCe3gMZN2doh"; protected-headers="v1" From: Eric McCorkle To: Warner Losh Cc: Brooks Davis , FreeBSD Hackers Message-ID: <7a14aee9-8205-4fc7-a7a0-a9ed2f33751d@metricspace.net> Subject: Re: A few build system questions References: <20180802153357.GA25687@spindle.one-eyed-alien.net> <7f143985-2ebb-210a-e314-0deebd3d9f5b@metricspace.net> In-Reply-To: --uz9yhhPN9gGHDwqeYOlApfCe3gMZN2doh Content-Type: text/plain; charset=utf-8 Content-Language: en-US Content-Transfer-Encoding: quoted-printable On 08/02/2018 12:56, Warner Losh wrote: >=20 >=20 > On Thu, Aug 2, 2018, 5:19 PM Eric McCorkle > wrote: >=20 > On 08/02/2018 11:33, Brooks Davis wrote: > > On Thu, Aug 02, 2018 at 11:17:06AM -0400, Eric McCorkle wrote: > >> Hi, > >> > >> I have a few questions about how to accomplish some things with = the > >> build system. > >> > >> First, I want to create some libraries that exist only as static= > >> archives, meaning no shared object (ex. libsomething.a, but no > >> libsomething.so) > > > > If it's something for use by only the base system PRIVATELIB=3D w= ill > > do it (and change the name to libprivatesomethi.a).=C2=A0 If you = want to be > > broadly available outside the base system, NO_SHARED=3D should do= it > IIRC. >=20 > If loader and kernel are able to use private libraries, then that i= s > probably better, actually. >=20 >=20 > They aren't.=C2=A0 Src/stand depends on no objects in the system other = than > what is built in src/stand. What you are proposing is a non-starter. Th= e > loader I think you hit "send" too soon... Basically what I'm trying to do at this point is two things. First, I want to convert some certs into C declarations and embed them into a static library, which can in turn be used to embed them into applications. This is essentially the same thing that some drivers do, where they embed the firmware binaries directly into the driver. Second, and a (somewhat) separate thing, I'm trying to see if I can get a PoC of extracting the specific primitives out of OpenSSL and using them in place of the current software crypto implementations in kernel and loader. (objcopy ought to be able to do this to a static library in theory) --uz9yhhPN9gGHDwqeYOlApfCe3gMZN2doh-- --fvchysnIemPOLSRGZ16pHlOlfFgu5o7mp Content-Type: application/pgp-signature; name="signature.asc" Content-Description: OpenPGP digital signature Content-Disposition: attachment; filename="signature.asc" -----BEGIN PGP SIGNATURE----- iHUEARYIAB0WIQQPGL/SuSPN3pRzpwUI38IpFsHCbAUCW2NDNQAKCRAI38IpFsHC bLUsAP9RqMqt3vt6X/6zF/20tJbx7hyGqZCOFKVeFAHygXuvbAEAgss7TVeKjCak PghhRR7Ok7SS+Bcq8uFWQP3h2zSipQc= =885X -----END PGP SIGNATURE----- --fvchysnIemPOLSRGZ16pHlOlfFgu5o7mp--