feat: bump ocserv to 1.5.0 and migrate build to meson#38
Merged
Conversation
ocserv 1.5.0 (cumulative over 1.4.1/1.4.2) replaced the autotools build system with meson upstream (1.4.2, #699); the release tarball no longer ships a configure script. - ARG OCSERV_VERSION 1.4.0 -> 1.5.0 - add meson + ninja-build to the builder stage - replace ./configure && make && make install with meson setup/compile/install - oidc-auth is disabled by default in meson, so pass -Doidc-auth=enabled explicitly to preserve OIDC support Build verified locally: meson detects all deps (gnutls/nettle/talloc/ protobuf-c/pam/radcli/krb5/liboath/libnl/lz4/seccomp/curl/cjose/jansson), oidc-auth enabled, GPG signature valid. 'ocserv --version' reports 1.5.0 with seccomp, oath, radius, gssapi, PAM, AnyConnect, oidc_auth. Integration suite passes 6/6.
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Bumps ocserv 1.4.0 → 1.5.0 (cumulative over 1.4.1/1.4.2, includes their security fixes).
Breaking upstream change
ocserv 1.4.2 replaced autotools with meson (#699). The 1.5.0 release tarball ships only
meson.build— noconfigure— so the old./configure && make && make installno longer works.Dockerfile changes (
ocserv-builderstage)ARG OCSERV_VERSION1.4.0 → 1.5.0meson+ninja-buildto build deps./configure --enable-oidc-auth && make && make install→meson setup build --buildtype=release -Doidc-auth=enabled && meson compile -C build && meson install -C buildoidc-authdefaults todisabledin meson, so it is enabled explicitly to preserve OIDC supportVerification (local)
oidc-auth: enabled96865171(unchanged)ocserv --version→OpenConnect VPN Server 1.5.0— seccomp, oath, radius, gssapi, PAM, PKCS#11, AnyConnect, oidc_authFeature set unchanged vs 1.4.0. No config-option migration needed (removed
cgroup/ renamedmin-reauth-timeare not used in our configs).