meson.build

# SPDX-License-Identifier: LGPL-2.1-or-later

project('systemd', 'c',
        version : files('meson.version'),
        license : 'LGPLv2+',
        default_options: [
                'c_std=gnu17',
                'prefix=/usr',
                'sysconfdir=/etc',
                'localstatedir=/var',
                'warning_level=2',
        ],
        meson_version : '>= 0.62.0',
)

add_test_setup(
        'default',
        exclude_suites : ['clang-tidy', 'coccinelle', 'unused-symbols', 'integration-tests'],
        exe_wrapper : find_program('tools/test-crash-trace.sh'),
        is_default : true,
)

project_major_version = meson.project_version().split('.')[0].split('~')[0]
if meson.project_version().contains('.')
        project_minor_version = meson.project_version().split('.')[-1].split('~')[0]
else
        project_minor_version = '0'
endif

libsystemd_version = '0.45.0'
libudev_version = '1.7.15'

conf = configuration_data()
conf.set_quoted('PROJECT_URL', 'https://systemd.io/')
conf.set('PROJECT_VERSION', project_major_version,
         description : 'Numerical project version (used where a simple number is expected)')
conf.set_quoted('PROJECT_VERSION_STR', project_major_version,
        description: 'Stringified project version (used where a simple string is expected)')
conf.set_quoted('PROJECT_VERSION_FULL', meson.project_version(), description : 'Full project version')

fs = import('fs')

if meson.version().version_compare('>=1.3.0')
        relative_source_path = fs.relative_to(meson.project_source_root(),
                                              meson.project_build_root())
else
        relative_source_path = run_command('realpath',
                                           '--relative-to=@0@'.format(meson.project_build_root()),
                                           meson.project_source_root(),
                                           check : true).stdout().strip()
endif
conf.set_quoted('RELATIVE_SOURCE_PATH', relative_source_path)

conf.set10('BUILD_MODE_DEVELOPER', get_option('mode') == 'developer',
           description : 'tailor build to development or release builds')

experimental = get_option('experimental')
if experimental == 'auto'
        experimental = conf.get('BUILD_MODE_DEVELOPER') == 1 ? 'enabled' : 'envvar'
endif
conf.set('EXPERIMENTAL', 'EXPERIMENTAL_@0@'.format(experimental.to_upper()))

feature = get_option('log-message-verification')
if feature.auto()
        have = conf.get('BUILD_MODE_DEVELOPER') == 1
else
        have = feature.enabled()
endif
conf.set10('LOG_MESSAGE_VERIFICATION', have)

want_ossfuzz = get_option('oss-fuzz')
want_libfuzzer = get_option('llvm-fuzz')
if want_ossfuzz and want_libfuzzer
        error('only one of oss-fuzz or llvm-fuzz can be specified')
endif

fuzzer_build = want_ossfuzz or want_libfuzzer

# If we're building *not* for actual fuzzing, allow input samples of any size
# (for testing and for reproduction of issues discovered with previously-higher
# limits).
conf.set10('FUZZ_USE_SIZE_LIMIT', fuzzer_build)

# We'll set this to '1' for EFI builds in a different place.
conf.set10('SD_BOOT', false)

conf.set10('SYSTEMD_MULTICALL_BINARY', get_option('systemd-multicall-binary'))

conf.set10('BUILD_STATIC', get_option('build-static'))

# Create a title-less summary section early, so it ends up first in the output.
# More items are added later after they have been detected.
summary({
        'libc'       : get_option('libc'),
        'build mode' : get_option('mode'),
})

#####################################################################

if get_option('split-bin') == 'auto'
        split_bin = not fs.is_symlink('/usr/sbin')
else
        split_bin = get_option('split-bin') == 'true'
endif
conf.set10('HAVE_SPLIT_BIN', split_bin,
           description : 'bin and sbin directories are separate')

standalone_binaries = get_option('standalone-binaries').split(',')
if standalone_binaries == ['']
        standalone_binaries = []
endif

conf.set10('CREATE_LOG_DIRS', get_option('create-log-dirs'))

if get_option('hibernate') and not get_option('initrd')
        error('hibernate depends on initrd')
endif

conf.set10('BUMP_PROC_SYS_FS_FILE_MAX', get_option('bump-proc-sys-fs-file-max'))
conf.set10('BUMP_PROC_SYS_FS_NR_OPEN',  get_option('bump-proc-sys-fs-nr-open'))
conf.set('HIGH_RLIMIT_NOFILE',          512*1024)

conf.set('JOURNAL_STORAGE_DEFAULT',     get_option('journal-storage-default'))
conf.set('JOURNAL_STORAGE_DEFAULT_VAL', 'STORAGE_' + get_option('journal-storage-default').to_upper())

# Meson ignores the preceding arguments when joining paths if an absolute
# component is encountered, so this should canonicalize various paths when they
# are absolute or relative.
prefixdir = get_option('prefix')
if not prefixdir.startswith('/')
        error(f'Prefix is not absolute: "@prefixdir@"')
endif

prefixdir_noslash = '/' + prefixdir.strip('/')
bindir = prefixdir / get_option('bindir')
sbindir = prefixdir / (split_bin ? 'sbin' : 'bin')
libdir = prefixdir / get_option('libdir')
sysconfdir = prefixdir / get_option('sysconfdir')
includedir = prefixdir / get_option('includedir')
datadir = prefixdir / get_option('datadir')
localstatedir = '/' / get_option('localstatedir')

libexecdir = prefixdir / 'lib/systemd'
libexecdir_to_bin = '../../bin/'
pkglibdir = libdir / 'systemd'

install_sysconfdir = get_option('install-sysconfdir') != 'false'
install_sysconfdir_samples = get_option('install-sysconfdir') == 'true'
# Dirs of external packages
pkgconfigdatadir = get_option('pkgconfigdatadir') != '' ? get_option('pkgconfigdatadir') : datadir / 'pkgconfig'
pkgconfiglibdir = get_option('pkgconfiglibdir') != '' ? get_option('pkgconfiglibdir') : libdir / 'pkgconfig'
polkitpolicydir = datadir / 'polkit-1/actions'
polkitrulesdir = datadir / 'polkit-1/rules.d'
polkitpkladir = localstatedir / 'lib/polkit-1/localauthority/10-vendor.d'
xinitrcdir = get_option('xinitrcdir') != '' ? get_option('xinitrcdir') : sysconfdir / 'X11/xinit/xinitrc.d'
rpmmacrosdir = get_option('rpmmacrosdir')
if rpmmacrosdir != 'no'
        rpmmacrosdir = prefixdir / rpmmacrosdir
endif
modprobedir = prefixdir / 'lib/modprobe.d'

# Our own paths
pkgdatadir = datadir / 'systemd'
environmentdir = prefixdir / 'lib/environment.d'
pkgsysconfdir = sysconfdir / 'systemd'
userunitdir = libexecdir / 'user'
userpresetdir = libexecdir / 'user-preset'
tmpfilesdir = prefixdir / 'lib/tmpfiles.d'
usertmpfilesdir = prefixdir / 'share/user-tmpfiles.d'
sysusersdir = prefixdir / 'lib/sysusers.d'
sysctldir = prefixdir / 'lib/sysctl.d'
binfmtdir = prefixdir / 'lib/binfmt.d'
modulesloaddir = prefixdir / 'lib/modules-load.d'
networkdir = libexecdir / 'network'
systemgeneratordir = libexecdir / 'system-generators'
usergeneratordir = libexecdir / 'user-generators'
systemenvgeneratordir = libexecdir / 'system-environment-generators'
userenvgeneratordir = libexecdir / 'user-environment-generators'
systemshutdowndir = libexecdir / 'system-shutdown'
systemsleepdir = libexecdir / 'system-sleep'
systemunitdir = libexecdir / 'system'
systempresetdir = libexecdir / 'system-preset'
initrdpresetdir = libexecdir / 'initrd-preset'
udevlibexecdir = prefixdir / 'lib/udev'
udevrulesdir = udevlibexecdir / 'rules.d'
udevhwdbdir = udevlibexecdir / 'hwdb.d'
catalogdir = libexecdir / 'catalog'
kerneldir = prefixdir / 'lib/kernel'
kernelinstalldir = kerneldir / 'install.d'
factorydir = datadir / 'factory'
bootlibdir = libexecdir / 'boot/efi'
testsdir = libexecdir / 'tests'
unittestsdir = testsdir / 'unit-tests'
testdata_dir = testsdir / 'testdata'
systemdstatedir = localstatedir / 'lib/systemd'
catalogstatedir = systemdstatedir / 'catalog'
randomseeddir = localstatedir / 'lib/systemd'
systemprofiledir = libexecdir / 'portable' / 'profile'
userprofiledir = libexecdir / 'user' / 'portable' / 'profile'
repartdefinitionsdir = libexecdir / 'repart/definitions'
ntpservicelistdir = libexecdir / 'ntp-units.d'
credstoredir = prefixdir / 'lib/credstore'
pcrlockdir = prefixdir / 'lib/pcrlock.d'
mimepackagesdir = prefixdir / 'share/mime/packages'
varlinkbridgesdir = libexecdir / 'varlink-bridges'

configfiledir = get_option('configfiledir')
if configfiledir == ''
        configfiledir = sysconfdir
endif
pkgconfigfiledir = configfiledir / 'systemd'

docdir = get_option('docdir')
if docdir == ''
        docdir = datadir / 'doc/systemd'
endif

pamlibdir = get_option('pamlibdir')
if pamlibdir == ''
        pamlibdir = libdir / 'security'
endif

pamconfdir = get_option('pamconfdir')
if pamconfdir == ''
        pamconfdir = prefixdir / 'lib/pam.d'
endif

sshconfdir = get_option('sshconfdir')
if sshconfdir == ''
        sshconfdir = sysconfdir / 'ssh/ssh_config.d'
endif
conf.set10('LINK_SSH_PROXY_DROPIN', sshconfdir != 'no' and not sshconfdir.startswith('/usr/'))

sshdconfdir = get_option('sshdconfdir')
if sshdconfdir == ''
        sshdconfdir = sysconfdir / 'ssh/sshd_config.d'
endif
conf.set10('LINK_SSHD_USERDB_DROPIN', sshdconfdir != 'no' and not sshdconfdir.startswith('/usr/'))

sshdprivsepdir = get_option('sshdprivsepdir')
conf.set10('CREATE_SSHDPRIVSEPDIR', sshdprivsepdir != 'no' and not sshdprivsepdir.startswith('/usr/'))
conf.set('SSHDPRIVSEPDIR', sshdprivsepdir, description : 'SSH privilege separation directory')

libcryptsetup_plugins_dir = get_option('libcryptsetup-plugins-dir')
if libcryptsetup_plugins_dir == ''
        libcryptsetup_plugins_dir = libdir / 'cryptsetup'
endif

shellprofiledir = get_option('shellprofiledir')
if shellprofiledir == ''
        shellprofiledir = sysconfdir / 'profile.d'
endif
conf.set10('LINK_SHELL_EXTRA_DROPIN', shellprofiledir != 'no' and not shellprofiledir.startswith('/usr/'))
conf.set10('LINK_OSC_CONTEXT_DROPIN', shellprofiledir != 'no' and not shellprofiledir.startswith('/usr/'))
conf.set('SHELLPROFILEDIR', shellprofiledir, description : 'shell profile directory')

memory_accounting_default = get_option('memory-accounting-default')
status_unit_format_default = get_option('status-unit-format-default')
if status_unit_format_default == 'auto'
        status_unit_format_default = conf.get('BUILD_MODE_DEVELOPER') == 1 ? 'name' : 'description'
endif

conf.set_quoted('BINDIR',                                     bindir)
conf.set_quoted('BINFMT_DIR',                                 binfmtdir)
conf.set_quoted('BOOTLIBDIR',                                 bootlibdir)
conf.set_quoted('CATALOG_DATABASE',                           catalogstatedir / 'database')
conf.set_quoted('CERTIFICATE_ROOT',                           get_option('certificate-root'))
conf.set_quoted('DOC_DIR',                                    docdir)
conf.set_quoted('DOCUMENT_ROOT',                              pkgdatadir / 'gatewayd')
conf.set_quoted('ENVIRONMENT_DIR',                            environmentdir)
conf.set_quoted('INCLUDE_DIR',                                includedir)
conf.set_quoted('LIBDIR',                                     libdir)
conf.set_quoted('LIBEXECDIR',                                 libexecdir)
conf.set_quoted('KERNEL_INSTALL_DIR',                         kernelinstalldir)
conf.set_quoted('MODPROBE_DIR',                               modprobedir)
conf.set_quoted('MODULESLOAD_DIR',                            modulesloaddir)
conf.set_quoted('PKGSYSCONFDIR',                              pkgsysconfdir)
conf.set_quoted('POLKIT_RULES_DIR',                           polkitrulesdir)
conf.set_quoted('PREFIX',                                     prefixdir)
conf.set_quoted('PREFIX_NOSLASH',                             prefixdir_noslash)
conf.set_quoted('RANDOM_SEED',                                randomseeddir / 'random-seed')
conf.set_quoted('RANDOM_SEED_DIR',                            randomseeddir)
conf.set_quoted('SSHCONFDIR',                                 sshconfdir)
conf.set_quoted('SSHDCONFDIR',                                sshdconfdir)
conf.set_quoted('SHELLPROFILEDIR',                            shellprofiledir)
conf.set_quoted('SYSCONF_DIR',                                sysconfdir)
conf.set_quoted('SYSCTL_DIR',                                 sysctldir)
conf.set_quoted('SYSTEMCTL_BINARY_PATH',                      bindir / 'systemctl')
conf.set_quoted('SYSTEMD_BINARY_PATH',                        libexecdir / 'systemd')
conf.set_quoted('SYSTEMD_EXECUTOR_BINARY_PATH',               libexecdir / 'systemd-executor')
conf.set_quoted('SYSTEMD_CATALOG_DIR',                        catalogdir)
conf.set_quoted('SYSTEMD_CRYPTSETUP_PATH',                    bindir / 'systemd-cryptsetup')
conf.set_quoted('SYSTEMD_EXPORT_PATH',                        libexecdir / 'systemd-export')
conf.set_quoted('SYSTEMD_FSCK_PATH',                          libexecdir / 'systemd-fsck')
conf.set_quoted('SYSTEMD_GROWFS_PATH',                        libexecdir / 'systemd-growfs')
conf.set_quoted('SYSTEMD_HOMEWORK_PATH',                      libexecdir / 'systemd-homework')
conf.set_quoted('SYSTEMD_IMPORT_FS_PATH',                     libexecdir / 'systemd-import-fs')
conf.set_quoted('SYSTEMD_IMPORT_PATH',                        libexecdir / 'systemd-import')
conf.set_quoted('SYSTEMD_INTEGRITYSETUP_PATH',                libexecdir / 'systemd-integritysetup')
conf.set_quoted('SYSTEMD_KBD_MODEL_MAP',                      pkgdatadir / 'kbd-model-map')
conf.set_quoted('SYSTEMD_LANGUAGE_FALLBACK_MAP',              pkgdatadir / 'language-fallback-map')
conf.set_quoted('SYSTEMD_MAKEFS_PATH',                        libexecdir / 'systemd-makefs')
conf.set_quoted('SYSTEMD_PULL_PATH',                          libexecdir / 'systemd-pull')
conf.set_quoted('SYSTEMD_SHUTDOWN_BINARY_PATH',               libexecdir / 'systemd-shutdown')
conf.set_quoted('SYSTEMD_SYSUPDATE_PATH',                     libexecdir / 'systemd-sysupdate')
conf.set_quoted('SYSTEMD_TEST_DATA',                          testdata_dir)
conf.set_quoted('SYSTEMD_TTY_ASK_PASSWORD_AGENT_BINARY_PATH', bindir / 'systemd-tty-ask-password-agent')
conf.set_quoted('SYSTEMD_UPDATE_HELPER_PATH',                 libexecdir / 'systemd-update-helper')
conf.set_quoted('SYSTEMD_USERWORK_PATH',                      libexecdir / 'systemd-userwork')
conf.set_quoted('SYSTEMD_MOUNTWORK_PATH',                     libexecdir / 'systemd-mountwork')
conf.set_quoted('SYSTEMD_NSRESOURCEWORK_PATH',                libexecdir / 'systemd-nsresourcework')
conf.set_quoted('SYSTEMD_VERITYSETUP_PATH',                   libexecdir / 'systemd-veritysetup')
conf.set_quoted('SYSTEMD_CLONESETUP_PATH',                    libexecdir / 'systemd-clonesetup')
conf.set_quoted('SYSTEM_CONFIG_UNIT_DIR',                     pkgsysconfdir / 'system')
conf.set_quoted('SYSTEM_DATA_UNIT_DIR',                       systemunitdir)
conf.set_quoted('SYSTEM_ENV_GENERATOR_DIR',                   systemenvgeneratordir)
conf.set_quoted('SYSTEM_GENERATOR_DIR',                       systemgeneratordir)
conf.set_quoted('SYSTEM_PRESET_DIR',                          systempresetdir)
conf.set_quoted('SYSTEM_SHUTDOWN_PATH',                       systemshutdowndir)
conf.set_quoted('SYSTEM_SLEEP_PATH',                          systemsleepdir)
conf.set_quoted('SYSUSERS_DIR',                               sysusersdir)
conf.set_quoted('TMPFILES_DIR',                               tmpfilesdir)
conf.set_quoted('USER_TMPFILES_DIR',                          usertmpfilesdir)
conf.set_quoted('UDEVLIBEXECDIR',                             udevlibexecdir)
conf.set_quoted('UDEV_HWDB_DIR',                              udevhwdbdir)
conf.set_quoted('UDEV_RULES_DIR',                             udevrulesdir)
conf.set_quoted('USER_CONFIG_UNIT_DIR',                       pkgsysconfdir / 'user')
conf.set_quoted('USER_DATA_UNIT_DIR',                         userunitdir)
conf.set_quoted('USER_ENV_GENERATOR_DIR',                     userenvgeneratordir)
conf.set_quoted('USER_GENERATOR_DIR',                         usergeneratordir)
conf.set_quoted('USER_KEYRING_PATH',                          pkgsysconfdir / 'import-pubring.pgp')
conf.set_quoted('USER_KEYRING_PATH_LEGACY',                   pkgsysconfdir / 'import-pubring.gpg')
conf.set_quoted('USER_PRESET_DIR',                            userpresetdir)
conf.set_quoted('VARLINK_BRIDGES_DIR',                        varlinkbridgesdir)
conf.set_quoted('VENDOR_KEYRING_PATH',                        libexecdir / 'import-pubring.pgp')

conf.set('ANSI_OK_COLOR',                                     'ANSI_' + get_option('ok-color').underscorify().to_upper())
conf.set10('ENABLE_URLIFY',                                   get_option('urlify'))
conf.set10('ENABLE_FEXECVE',                                  get_option('fexecve'))
conf.set10('MEMORY_ACCOUNTING_DEFAULT',                       memory_accounting_default)
conf.set('STATUS_UNIT_FORMAT_DEFAULT',                        'STATUS_UNIT_FORMAT_' + status_unit_format_default.to_upper())
conf.set_quoted('STATUS_UNIT_FORMAT_DEFAULT_STR',             status_unit_format_default)

conf.set('DEFAULT_TIMEOUT_SEC',                               get_option('default-timeout-sec'))
conf.set('DEFAULT_USER_TIMEOUT_SEC',                          get_option('default-user-timeout-sec'))
conf.set('UPDATE_HELPER_USER_TIMEOUT_SEC',                    get_option('update-helper-user-timeout-sec'))

conf.set10('ENABLE_FIRST_BOOT_FULL_PRESET',                   get_option('first-boot-full-preset'))

#####################################################################

cc = meson.get_compiler('c')
userspace_c_args = []
userspace_c_ld_args = []
userspace_sources = []

want_tests = get_option('tests')
want_dlopen_tests = want_tests != 'false' and get_option('dlopen-tests')
want_slow_tests = want_tests != 'false' and get_option('slow-tests')
want_fuzz_tests = want_tests != 'false' and get_option('fuzz-tests')
install_tests = want_tests != 'false' and get_option('install-tests')

if add_languages('cpp', native : false, required : fuzzer_build)
        #  Used only for tests
        cxx = meson.get_compiler('cpp')
        cxx_cmd = ' '.join(cxx.cmd_array())
else
        cxx_cmd = ''
endif

if want_libfuzzer
        if cc.has_argument('-fsanitize=fuzzer-no-link')
                userspace_c_args += '-fsanitize=fuzzer-no-link'
        else
                error('Looks like -fsanitize=fuzzer-no-link is not supported')
        endif
elif want_ossfuzz
        fuzzing_engine = meson.get_compiler('cpp').find_library('FuzzingEngine')
endif

# Those generate many false positives, and we do not want to change the code to
# avoid them.
basic_disabled_warnings = [
        '-Wno-missing-field-initializers',
        '-Wno-unknown-warning-option',
        '-Wno-unused-parameter',
        '-Wno-nonnull-compare',
]

possible_common_cc_flags = [
        '-Warray-bounds',     # clang
        '-Warray-bounds=2',
        '-Wdate-time',
        '-Wendif-labels',
        '-Werror=bool-compare',
        '-Werror=discarded-qualifiers',
        '-Werror=flex-array-member-not-at-end',
        '-Werror=format=2',
        '-Werror=format-signedness',
        '-Werror=implicit-function-declaration',
        '-Werror=implicit-int',
        '-Werror=incompatible-pointer-types',
        '-Werror=int-conversion',
        '-Werror=missing-declarations',
        '-Werror=missing-parameter-name',
        '-Werror=missing-prototypes',
        '-Werror=overflow',
        '-Werror=override-init',
        '-Werror=pointer-sign',
        '-Werror=return-type',
        '-Werror=sequence-point',
        '-Werror=shift-count-overflow',
        '-Werror=shift-overflow=2',
        '-Werror=strict-flex-arrays',
        '-Werror=undef',
        '-Wfloat-equal',
        # gperf prevents us from enabling this because it does not emit fallthrough
        # attribute with clang.
        #'-Wimplicit-fallthrough',
        '-Wimplicit-fallthrough=5',
        '-Winit-self',
        '-Wlogical-op',
        '-Wmissing-include-dirs',
        '-Wmissing-noreturn',
        '-Wnested-externs',
        '-Wold-style-definition',
        '-Wpointer-arith',
        '-Wredundant-decls',
        '-Wshadow',
        '-Wstrict-aliasing=2',
        '-Wstrict-prototypes',
        '-Wsuggest-attribute=noreturn',
        '-Wunterminated-string-initialization',
        '-Wunused-function',
        '-Wwrite-strings',
        '-Wzero-as-null-pointer-constant',
        '-Wzero-length-bounds',

        # negative arguments are correctly detected starting with meson 0.46.
        '-Wno-error=#warnings',  # clang
        '-Wno-string-plus-int',  # clang

        '-fdiagnostics-show-option',
        '-fdata-sections',
        '-fexcess-precision=standard',
        '-ffunction-sections',
        '-fno-common',
        '-fstack-protector',
        '-fstack-protector-strong',
        '-fstrict-flex-arrays=3',
        # We don't read errno from any libm call, and the math-errno fallback
        # forces a DT_NEEDED on libm via the cold error path even when the hot
        # path is a single hardware instruction (sqrtsd, etc.). Drop it so the
        # builtins lower to pure hardware instructions.
        '-fno-math-errno',
        '--param=ssp-buffer-size=4',
]

possible_common_link_flags = [
        '-fstack-protector',
]

c_args = get_option('c_args')

# Our json library does not support -ffinite-math-only, which is enabled by -Ofast or -ffast-math.
have = false
foreach arg : c_args
        if arg in ['-ffinite-math-only', '-ffast-math', '-Ofast']
                have = true
        elif arg in ['-fno-finite-math-only', '-fno-fast-math']
                have = false
        endif
endforeach
if have
        error('-ffinite-math-only is enabled (may be implied by -ffast-math or -Ofast) in c_args.')
endif

# Disable -Wmaybe-uninitialized when compiling with -Os/-O1/-O3/etc. There are
# too many false positives with gcc >= 8. Effectively, we only test with -O0
# and -O2; this should be enough to catch most important cases without too much
# busywork. See https://github.com/systemd/systemd/pull/19226.
if cc.get_id() == 'gcc' and (not '02'.contains(get_option('optimization')) or
                             cc.version().version_compare('<10') or
                             '-Os' in c_args or
                             '-O1' in c_args or
                             '-O3' in c_args or
                             '-Og' in c_args or
                             '-Ofast' in c_args)
        possible_common_cc_flags += '-Wno-maybe-uninitialized'
endif

# Disable -Wno-unused-result with gcc, see
# https://gcc.gnu.org/bugzilla/show_bug.cgi?id=66425.
if cc.get_id() == 'gcc'
        possible_common_cc_flags += '-Wno-unused-result'
endif

# --as-needed and --no-undefined are provided by meson by default,
# run 'meson configure' to see what is enabled
possible_link_flags = [
        '-Wl,--fatal-warnings',
        '-Wl,-z,now',
        '-Wl,-z,relro',
        '-Wl,-z,gcs-report-dynamic=none',
        '-Wl,--gc-sections',
]

if get_option('b_sanitize') == 'none'
        possible_link_flags += '-Wl,--warn-common'
endif

if get_option('mode') == 'release'
        # We could enable 'pattern' for developer mode, but that can interfere with
        # valgrind and sanitizer builds. Also, clang does not zero-initialize unions,
        # breaking some of our code (https://reviews.llvm.org/D68115).
        possible_common_cc_flags += '-ftrivial-auto-var-init=zero'
endif

if get_option('pack-relative-relocs')
        possible_link_flags += '-Wl,-z,pack-relative-relocs'
endif

possible_cc_flags = [
        '-fno-strict-aliasing',
        '-fstrict-flex-arrays=1',
        '-fvisibility=hidden',
]

if get_option('mode') == 'developer'
        possible_cc_flags += '-fno-omit-frame-pointer'
endif

# Work around stack alignment issues observed with musl + libucontext on i386.
if get_option('libc') == 'musl' and host_machine.cpu_family() == 'x86'
        possible_cc_flags += '-mstackrealign'
endif

add_project_arguments(
        cc.get_supported_arguments(
                basic_disabled_warnings,
                possible_common_cc_flags
        ),
        language : 'c')

add_project_link_arguments(
        cc.get_supported_link_arguments(possible_common_link_flags),
        language : 'c')

userspace_c_args += cc.get_supported_arguments(possible_cc_flags)
userspace_c_ld_args += cc.get_supported_link_arguments(possible_link_flags)

if cc.compiles('''
   #include <time.h>
   #include <inttypes.h>
   typedef uint64_t usec_t;
   usec_t now(clockid_t clock);
   int main(void) {
           struct timespec now;
           return 0;
   }
''', args: '-Werror=shadow', name : '-Werror=shadow with local shadowing')
        add_project_arguments('-Werror=shadow', language : 'c')
endif

if cxx_cmd != ''
        add_project_arguments(cxx.get_supported_arguments(basic_disabled_warnings), language : 'cpp')
endif

cpp = ' '.join(cc.cmd_array() + get_option('c_args')) + ' -E'

# new in GCC 10
have = cc.has_argument('-Wzero-length-bounds')
conf.set10('HAVE_WARNING_ZERO_LENGTH_BOUNDS', have)

# new in GCC 15
have = cc.has_argument('-Wzero-as-null-pointer-constant')
conf.set10('HAVE_WARNING_ZERO_AS_NULL_POINTER_CONSTANT', have)

possible_c_attributes = [
        'alloc_size',
        'fallthrough',
        'retain',
]

foreach attr : possible_c_attributes
        have = cc.has_function_attribute(attr)
        conf.set10('HAVE_ATTRIBUTE_' + attr.to_upper(), have)
endforeach

# TODO: drop this manual check when meson learns about this attribute
possible_c_attributes += ['no_reorder']

have = cc.compiles(
        '__attribute__((__no_reorder__)) int x;',
        args : '-Werror=attributes',
        name : '__attribute__((__no_reorder__))')
conf.set10('HAVE_ATTRIBUTE_NO_REORDER', have)

# The "R" (SHF_GNU_RETAIN) section flag is only understood by binutils >= 2.36.
# TODO: drop when support for CentOS 9 is dropped.
if cc.compiles(
        '__asm__(".pushsection .note.test, \\"aR\\", %note\\n.popsection\\n");',
        name : 'assembler supports the "R" (SHF_GNU_RETAIN) section flag')
        conf.set_quoted('_SD_ELF_NOTE_DLOPEN_SECTION_FLAGS', 'aGR')
else
        conf.set_quoted('_SD_ELF_NOTE_DLOPEN_SECTION_FLAGS', 'aG')
endif

#####################################################################
# compilation result tests

conf.set('_GNU_SOURCE', 1)
conf.set('__SANE_USERSPACE_TYPES__', true)

# glibc always defines _LARGEFILE64_SOURCE when _GNU_SOURCE is set, but musl does not do that,
# and it is necessary for making getdents64() and struct dirent64 exist.
conf.set('_LARGEFILE64_SOURCE', 1)

conf.set('SIZEOF_DEV_T', cc.sizeof('dev_t', prefix : '#include <sys/types.h>'))
conf.set('SIZEOF_INO_T', cc.sizeof('ino_t', prefix : '#include <sys/types.h>'))
conf.set('SIZEOF_RLIM_T', cc.sizeof('rlim_t', prefix : '#include <sys/resource.h>'))
conf.set('SIZEOF_TIME_T', cc.sizeof('time_t', prefix : '#include <sys/time.h>'))
conf.set('SIZEOF_TIMEX_MEMBER', cc.sizeof('typeof(((struct timex *)0)->freq)', prefix : '#include <sys/timex.h>'))

long_max = cc.compute_int(
        'LONG_MAX',
        prefix : '#include <limits.h>',
        guess : 0x7FFFFFFFFFFFFFFF,
        high : 0x7FFFFFFFFFFFFFFF)
assert(long_max > 100000)
conf.set_quoted('LONG_MAX_STR', f'@long_max@')

#####################################################################

awk    = find_program('awk')
diff   = find_program('diff')
echo   = find_program('echo')
env    = find_program('env')
find   = find_program('find')
getent = find_program('getent', required : false)
git    = find_program('git', required : false)
gperf  = find_program('gperf')
id     = find_program('id', required : false)
ln     = find_program('ln')
rsync  = find_program('rsync', required : false)
sed    = find_program('sed')
sh     = find_program('sh')
stat   = find_program('stat')

ln_s = ln.full_path() + ' -frsT -- "${DESTDIR:-}@0@" "${DESTDIR:-}@1@"'

# If -Dxxx-path option is found, use that. Otherwise, use the default from the
# middle column; a full path is used directly, a relative path is converted to
# /usr/bin/foo or /usr/sbin/foo, depending on whether split-bin is enabled.
progs = [['quotaon',    'quotaon'              ],
         ['quotacheck', 'quotacheck'           ],
         ['kmod',       '/usr/bin/kmod'        ],
         ['kexec',      'kexec'                ],
         ['sulogin',    'sulogin'              ],
         ['swapon',     'swapon'               ],
         ['swapoff',    'swapoff'              ],
         ['agetty',     'agetty'               ],
         ['mount',      '/usr/bin/mount',      'MOUNT_PATH'],
         ['umount',     '/usr/bin/umount',     'UMOUNT_PATH'],
         ['loadkeys',   '/usr/bin/loadkeys',   'KBD_LOADKEYS'],
         ['setfont',    '/usr/bin/setfont',    'KBD_SETFONT'],
         ['nologin',    'nologin',             ],
        ]
foreach prog : progs
        path = get_option(prog[0] + '-path')
        if path == ''
                if prog[1].startswith('/')
                        path = prog[1]
                else
                        path = '/usr' / (split_bin ? 'sbin' : 'bin') / prog[1]
                endif
        endif
        message('Using @1@ for @0@'.format(prog[0], path))

        name = prog.length() > 2 ? prog[2] : prog[0].to_upper()
        conf.set_quoted(name, path)
endforeach

#####################################################################

gperf_test_format = '''
#include <string.h>
const char* in_word_set(const char *, @0@);
@1@
'''
gperf_snippet = run_command(sh, '-c', 'echo foo,bar | "$1" -L ANSI-C', '_', gperf,
                            check : true)
gperf_test = gperf_test_format.format('size_t', gperf_snippet.stdout())
if cc.compiles(gperf_test)
        gperf_len_type = 'size_t'
else
        gperf_test = gperf_test_format.format('unsigned', gperf_snippet.stdout())
        if cc.compiles(gperf_test)
                gperf_len_type = 'unsigned'
        else
                error('unable to determine gperf len type')
        endif
endif
message(f'gperf len type is @gperf_len_type@')
conf.set('GPERF_LEN_TYPE', gperf_len_type,
         description : 'The type of gperf "len" parameter')

# The default gperf search leaves most slots of a large hash table empty, and every empty slot takes up space
# in the binary. More search iterations make the large tables about 25% smaller.
gperf_cmdline = [gperf, '--multiple-iterations=10']

#####################################################################

foreach header : [
        'sys/sdt.h',
        'threads.h',
        'valgrind/memcheck.h',
        'valgrind/valgrind.h',
]

        conf.set10('HAVE_' + header.underscorify().to_upper(),
                   cc.has_header(header))
endforeach

foreach ident : [
                ['NI_IDN', 'netdb.h']
        ]

        if meson.version().version_compare('>=1.3.0')
                have = cc.has_define(ident[0],
                                     prefix : '''#include <@0@>'''.format(ident[1]),
                                     args : '-D_GNU_SOURCE')
        else
                have = cc.has_header_symbol(ident[1], ident[0])
        endif
        conf.set10('HAVE_' + ident[0], have)
endforeach

#####################################################################

fallback_hostname = get_option('fallback-hostname')
if fallback_hostname == '' or fallback_hostname[0] == '.' or fallback_hostname[0] == '-'
        error('Invalid fallback-hostname configuration')
        # A more extensive test is done in test-hostname-util. Let's catch
        # the most obvious errors here so we don't fail with an assert later.
endif
conf.set_quoted('FALLBACK_HOSTNAME', fallback_hostname)

fallback_default_target = get_option('fallback-default-target')
conf.set_quoted('FALLBACK_DEFAULT_TARGET', fallback_default_target)

extra_net_naming_schemes = []
extra_net_naming_map = []
foreach scheme: get_option('extra-net-naming-schemes').split(',')
        if scheme != ''
                name = scheme.split('=')[0]
                value = scheme.split('=')[1]
                NAME = name.underscorify().to_upper()
                VALUE = []
                foreach field: value.split('+')
                        VALUE += 'NAMING_' + field.underscorify().to_upper()
                endforeach
                extra_net_naming_schemes += 'NAMING_@0@ = @1@,'.format(NAME, '|'.join(VALUE))
                extra_net_naming_map += '{ "@0@", NAMING_@1@ },'.format(name, NAME)
        endif
endforeach
conf.set('EXTRA_NET_NAMING_SCHEMES', ' '.join(extra_net_naming_schemes))
conf.set('EXTRA_NET_NAMING_MAP', ' '.join(extra_net_naming_map))

default_net_naming_scheme = get_option('default-net-naming-scheme')
conf.set_quoted('DEFAULT_NET_NAMING_SCHEME', default_net_naming_scheme,
                description : 'Default naming scheme as a string')
if default_net_naming_scheme != 'latest'
        conf.set('_DEFAULT_NET_NAMING_SCHEME',
                 'NAMING_' + default_net_naming_scheme.underscorify().to_upper(),
                 description : 'Default naming scheme as a constant')
endif

time_epoch = get_option('time-epoch')
if time_epoch <= 0
        time_epoch = run_command(sh, '-c', 'echo "$SOURCE_DATE_EPOCH"', check : true).stdout().strip()
        if time_epoch == '' and git.found() and fs.is_dir('.git')
                # If we're in a git repository, use the creation time of the latest git tag.
                latest_tag = run_command(git, 'describe', '--abbrev=0', '--tags',
                                         check : false)
                if latest_tag.returncode() == 0
                        time_epoch = run_command(
                                git, 'log', '--no-show-signature', '-1', '--format=%at',
                                     latest_tag.stdout().strip(),
                                check : false).stdout()
                endif
        endif
        if time_epoch == ''
                NEWS = files('NEWS')
                time_epoch = run_command(stat, '-c', '%Y', NEWS,
                                         check : false)
                if time_epoch.returncode() != 0
                        # If the above fails, maybe the stat(1) uses BSD-style syntax
                        time_epoch = run_command(stat, '-f', '%m', NEWS,
                                                 check : true)
                endif
                time_epoch = time_epoch.stdout()
        endif
        time_epoch = time_epoch.strip().to_int()
endif
conf.set('TIME_EPOCH', time_epoch)

conf.set('CLOCK_VALID_RANGE_USEC_MAX', get_option('clock-valid-range-usec-max'))

default_user_shell = get_option('default-user-shell')
conf.set_quoted('DEFAULT_USER_SHELL',      default_user_shell)
conf.set_quoted('DEFAULT_USER_SHELL_NAME', fs.name(default_user_shell))

foreach tuple : [['system-alloc-uid-min', 'SYS_UID_MIN', 1],  # Also see login.defs(5).
                 ['system-uid-max',       'SYS_UID_MAX', 999],
                 ['system-alloc-gid-min', 'SYS_GID_MIN', 1],
                 ['system-gid-max',       'SYS_GID_MAX', 999]]
        v = get_option(tuple[0])
        if v <= 0
                v = run_command(
                        awk,
                        '/^\s*@0@\s+/ { uid=$2 } END { print uid }'.format(tuple[1]),
                        '/etc/login.defs',
                        check : false).stdout().strip()
                if v == ''
                        v = tuple[2]
                else
                        v = v.to_int()
                endif
        endif
        conf.set(tuple[0].underscorify().to_upper(), v)
endforeach
if conf.get('SYSTEM_ALLOC_UID_MIN') >= conf.get('SYSTEM_UID_MAX')
        error('Invalid uid allocation range')
endif
if conf.get('SYSTEM_ALLOC_GID_MIN') >= conf.get('SYSTEM_GID_MAX')
        error('Invalid gid allocation range')
endif

greeter_uid_min = get_option('greeter-uid-min')
greeter_uid_max = get_option('greeter-uid-max')
conf.set('GREETER_UID_MIN', greeter_uid_min)
conf.set('GREETER_UID_MAX', greeter_uid_max)

dynamic_uid_min = get_option('dynamic-uid-min')
dynamic_uid_max = get_option('dynamic-uid-max')
conf.set('DYNAMIC_UID_MIN', dynamic_uid_min)
conf.set('DYNAMIC_UID_MAX', dynamic_uid_max)

container_uid_base_min = get_option('container-uid-base-min')
container_uid_base_max = get_option('container-uid-base-max')
conf.set('CONTAINER_UID_BASE_MIN', container_uid_base_min)
conf.set('CONTAINER_UID_BASE_MAX', container_uid_base_max)

foreign_uid_base = get_option('foreign-uid-base')
conf.set('FOREIGN_UID_BASE', foreign_uid_base)

nobody_user = get_option('nobody-user')
nobody_group = get_option('nobody-group')

if not meson.is_cross_build()
        if getent.found()
                ret = run_command(getent, 'passwd', '65534', check : false)
                if ret.returncode() == 0
                        name = ret.stdout().split(':')[0]
                        if name != nobody_user
                                warning('\n' +
                                        f'The local user with the UID 65534 does not match the configured user name "@nobody_user@" of the nobody user (its name is @name@).\n' +
                                        'Your build will result in an user table setup that is incompatible with the local system.')
                        endif
                endif
        endif
        if id.found()
                ret = run_command(id, '-u', nobody_user, check : false)
                if ret.returncode() == 0
                        uid = ret.stdout().strip().to_int()
                        if uid != 65534
                                warning('\n' +
                                        f'The local user with the configured user name "@nobody_user@" of the nobody user does not have UID 65534 (it has @uid@).\n' +
                                        'Your build will result in an user table setup that is incompatible with the local system.')
                        endif
                endif
        endif

        if getent.found()
                ret = run_command(getent, 'group', '65534', check : false)
                if ret.returncode() == 0
                        name = ret.stdout().split(':')[0]
                        if name != nobody_group
                                warning('\n' +
                                        f'The local group with the GID 65534 does not match the configured group name "@nobody_group@" of the nobody group (its name is @name@).\n' +
                                        'Your build will result in an group table setup that is incompatible with the local system.')
                        endif
                endif
        endif
        if id.found()
                ret = run_command(id, '-g', nobody_group, check : false)
                if ret.returncode() == 0
                        gid = ret.stdout().strip().to_int()
                        if gid != 65534
                                warning('\n' +
                                        f'The local group with the configured group name "@nobody_group@" of the nobody group does not have GID 65534 (it has @gid@).\n' +
                                        'Your build will result in an group table setup that is incompatible with the local system.')
                        endif
                endif
        endif
endif
if nobody_user != nobody_group and not (nobody_user == 'nobody' and nobody_group == 'nogroup')
        warning('\n' +
                f'The configured user name "@nobody_user@" and group name "@nobody_group@" of the nobody user/group are not equivalent.\n' +
                'Please re-check that both "nobody-user" and "nobody-group" options are correctly set.')
endif

conf.set_quoted('NOBODY_USER_NAME', nobody_user)
conf.set_quoted('NOBODY_GROUP_NAME', nobody_group)

static_ugids = []
foreach option : ['adm-gid',
                  'audio-gid',
                  'cdrom-gid',
                  'clock-gid',
                  'dialout-gid',
                  'disk-gid',
                  'empower-gid',
                  'input-gid',
                  'kmem-gid',
                  'kvm-gid',
                  'lp-gid',
                  'render-gid',
                  'sgx-gid',
                  'tape-gid',
                  'tty-gid',
                  'users-gid',
                  'utmp-gid',
                  'video-gid',
                  'wheel-gid',
                  'systemd-journal-gid',
                  'systemd-imds-uid',
                  'systemd-network-uid',
                  'systemd-resolve-uid',
                  'systemd-timesync-uid']
        name = option.underscorify().to_upper()
        val = get_option(option)

        # Ensure provided GID argument is positive, otherwise fall back to default assignment
        conf.set(name, val > 0 ? val : '-')
        if val > 0
                static_ugids += f'@option@:@val@'
        endif
endforeach

conf.set10('ENABLE_ADM_GROUP', get_option('adm-group'))
conf.set10('ENABLE_WHEEL_GROUP', get_option('wheel-group'))

dev_kvm_mode = get_option('dev-kvm-mode')
conf.set_quoted('DEV_KVM_MODE', dev_kvm_mode) # FIXME: convert to 0o… notation
conf.set10('DEV_KVM_UACCESS', dev_kvm_mode != '0666')
group_render_mode = get_option('group-render-mode')
conf.set_quoted('GROUP_RENDER_MODE', group_render_mode)
conf.set10('GROUP_RENDER_UACCESS', group_render_mode != '0666')
tty_mode = get_option('tty-mode')
# The setting is used as both octal integer and string through STRINGIFY().
# Here, only check if the value starts with '06', and further check will be done in terminal-util.h.
if not tty_mode.startswith('06')
        error(f'Unexpected access mode "@tty_mode@" is specified for TTY/PTS device nodes, it must be "06xx"')
elif tty_mode != '0600' and tty_mode != '0620'
        warning(f'Unexpected access mode "@tty_mode@" is specified for TTY/PTS device nodes, typically it should be "0600" or "0620", proceeding anyway')
endif
# Do not use set_quoted() here, so that the value is available as an integer.
conf.set('TTY_MODE', tty_mode)

var_log_mode = get_option('var-log-mode')
conf.set_quoted('VAR_LOG_MODE', var_log_mode)

kill_user_processes = get_option('default-kill-user-processes')
conf.set10('KILL_USER_PROCESSES', kill_user_processes)

dns_servers = get_option('dns-servers')
conf.set_quoted('DNS_SERVERS', dns_servers)

ntp_servers = get_option('ntp-servers')
conf.set_quoted('NTP_SERVERS', ntp_servers)

default_locale = get_option('default-locale')
conf.set_quoted('SYSTEMD_DEFAULT_LOCALE', default_locale)

nspawn_locale = get_option('nspawn-locale')
conf.set_quoted('SYSTEMD_NSPAWN_LOCALE', nspawn_locale)

default_keymap = get_option('default-keymap')
if default_keymap == ''
        # We canonicalize empty keymap to '@kernel', as it makes the default value
        # in the factory provided /etc/vconsole.conf more obvious.
        default_keymap = '@kernel'
endif
conf.set_quoted('SYSTEMD_DEFAULT_KEYMAP', default_keymap)

localegen_path = get_option('localegen-path')
if localegen_path != ''
        conf.set_quoted('LOCALEGEN_PATH', localegen_path)
endif
conf.set10('HAVE_LOCALEGEN', localegen_path != '')

conf.set_quoted('GETTEXT_PACKAGE', meson.project_name())

service_watchdog = get_option('service-watchdog')
watchdog_value = service_watchdog == '' ? '' : 'WatchdogSec=' + service_watchdog
conf.set_quoted('SERVICE_WATCHDOG', watchdog_value)

conf.set_quoted('SUSHELL', get_option('debug-shell'))
conf.set_quoted('DEBUGTTY', get_option('debug-tty'))

enable_debug_hashmap = false
enable_debug_mmap_cache = false
enable_debug_siphash = false
foreach name : get_option('debug-extra')
        if name == 'hashmap'
                enable_debug_hashmap = true
        elif name == 'mmap-cache'
                enable_debug_mmap_cache = true
        elif name == 'siphash'
                enable_debug_siphash = true
        else
                message(f'unknown debug option "@name@", ignoring')
        endif
endforeach
conf.set10('ENABLE_DEBUG_HASHMAP', enable_debug_hashmap)
conf.set10('ENABLE_DEBUG_MMAP_CACHE', enable_debug_mmap_cache)
conf.set10('ENABLE_DEBUG_SIPHASH', enable_debug_siphash)
conf.set10('LOG_TRACE', get_option('log-trace'))

default_user_path = get_option('user-path')
if default_user_path != ''
        conf.set_quoted('DEFAULT_USER_PATH', default_user_path)
endif

extra_exec_search_path = get_option('extra-exec-search-path')
if extra_exec_search_path != ''
        foreach p : extra_exec_search_path.split(':')
                if not p.startswith('/')
                        error(f'Extra exec search path is not absolute: "@p@"')
                endif
        endforeach
        extra_exec_search_path = f':@extra_exec_search_path@'
endif
conf.set_quoted('EXTRA_EXEC_SEARCH_PATH_SUFFIX', extra_exec_search_path)

#####################################################################

libm = cc.find_library('m')

# On some architectures, libatomic is required. But on some installations,
# it is found, but actual linking fails. So let's try to use it opportunistically.
# If it is installed, but not needed, it will be dropped because of --as-needed.
basic_c_prog = '''int main(int argc, char **argv) { return 0; }'''
if cc.links(basic_c_prog, args : '-latomic', name : 'libatomic')
        libatomic = declare_dependency(link_args : '-latomic')
else
        libatomic = []
endif

if get_option('libc') == 'musl'
        libcrypt = []
        libcrypt_cflags = declare_dependency(
                compile_args : '-DSYSTEMD_CFLAGS_MARKER_LIBCRYPT',
        )
        have = get_option('libcrypt').allowed()
else
        libcrypt = dependency('libcrypt', 'libxcrypt',
                              required : get_option('libcrypt'),
                              version : '>=4.4.0')
        libcrypt_cflags = declare_dependency(
                dependencies : libcrypt.partial_dependency(includes: true, compile_args: true),
                compile_args : '-DSYSTEMD_CFLAGS_MARKER_LIBCRYPT',
        )
        have = libcrypt.found()
endif
conf.set10('HAVE_LIBCRYPT', have)

# musl declares the ucontext.h functions but does not implement them; the fiber bootstrap in
# src/libsystemd/sd-future/fiber.c relies on them, so on musl we have to link to libucontext.
if get_option('libc') == 'musl'
        libucontext = dependency('libucontext')
else
        libucontext = []
endif

bpf_framework = get_option('bpf-framework')
bpf_compiler = get_option('bpf-compiler')
libbpf = dependency('libbpf',
                    required : bpf_framework,
                    version : bpf_compiler == 'gcc' ? '>= 1.4.0' : '>= 0.1.0')
libbpf_cflags = declare_dependency(
        dependencies : libbpf.partial_dependency(includes: true, compile_args: true),
        compile_args : '-DSYSTEMD_CFLAGS_MARKER_LIBBPF',
)
conf.set10('HAVE_LIBBPF', libbpf.found())

libmount = dependency('mount',
                      version : fuzzer_build ? '>= 0' : '>= 2.30',
                      required : get_option('libmount'))
have = libmount.found()
conf.set10('HAVE_LIBMOUNT', have)
libmount_cflags = declare_dependency(
        dependencies : libmount.partial_dependency(includes: true, compile_args: true),
        compile_args : '-DSYSTEMD_CFLAGS_MARKER_LIBMOUNT',
)

libfdisk = dependency('fdisk',
                      version : '>= 2.35',
                      required : get_option('fdisk'))
libfdisk_cflags = declare_dependency(
        dependencies : libfdisk.partial_dependency(includes: true, compile_args: true),
        compile_args : '-DSYSTEMD_CFLAGS_MARKER_LIBFDISK',
)
conf.set10('HAVE_LIBFDISK', libfdisk.found())

# This prefers pwquality if both are enabled or auto.
feature = get_option('pwquality').disable_auto_if(get_option('passwdqc').enabled())
libpwquality = dependency('pwquality',
                          version : '>= 1.4.1',
                          required : feature)
have = libpwquality.found()
if not have
        # libpwquality is used for both features for simplicity
        libpwquality = dependency('passwdqc',
                                  required : get_option('passwdqc'))
endif
libpwquality_cflags = declare_dependency(
        dependencies : libpwquality.partial_dependency(includes: true, compile_args: true),
        compile_args : '-DSYSTEMD_CFLAGS_MARKER_LIBPWQUALITY',
)
conf.set10('HAVE_PWQUALITY', have)
conf.set10('HAVE_PASSWDQC', not have and libpwquality.found())

libseccomp = dependency('libseccomp',
                        version : '>= 2.4.0',
                        required : get_option('seccomp'))
conf.set10('HAVE_SECCOMP', libseccomp.found())
libseccomp_cflags = declare_dependency(
        dependencies : libseccomp.partial_dependency(includes: true, compile_args: true),
        compile_args : '-DSYSTEMD_CFLAGS_MARKER_LIBSECCOMP',
)

libselinux = dependency('libselinux',
                        version : '>= 2.1.9',
                        required : get_option('selinux'))
conf.set10('HAVE_SELINUX', libselinux.found())
libselinux_cflags = declare_dependency(
        dependencies : libselinux.partial_dependency(includes: true, compile_args: true),
        compile_args : '-DSYSTEMD_CFLAGS_MARKER_LIBSELINUX',
)

libapparmor = dependency('libapparmor',
                         version : '>= 2.13',
                         required : get_option('apparmor'))
conf.set10('HAVE_APPARMOR', libapparmor.found())
libapparmor_cflags = declare_dependency(
        dependencies : libapparmor.partial_dependency(includes: true, compile_args: true),
        compile_args : '-DSYSTEMD_CFLAGS_MARKER_LIBAPPARMOR',
)

have = get_option('smack') and get_option('smack-run-label') != ''
conf.set10('HAVE_SMACK_RUN_LABEL', have)
if have
        conf.set_quoted('SMACK_RUN_LABEL', get_option('smack-run-label'))
endif

have = get_option('smack') and get_option('smack-default-process-label') != ''
if have
        conf.set_quoted('SMACK_DEFAULT_PROCESS_LABEL', get_option('smack-default-process-label'))
endif

feature = get_option('polkit')
libpolkit = dependency('polkit-gobject-1',
                       required : feature.disabled() ? feature : false)
install_polkit = feature.allowed()
install_polkit_pkla = libpolkit.found() and libpolkit.version().version_compare('< 0.106')
if install_polkit_pkla
        message('Old polkit detected, will install pkla files')
endif
conf.set10('ENABLE_POLKIT', install_polkit)

libacl = dependency('libacl',
                    required : get_option('acl'))
conf.set10('HAVE_ACL', libacl.found())
libacl_cflags = declare_dependency(
        dependencies : libacl.partial_dependency(includes: true, compile_args: true),
        compile_args : '-DSYSTEMD_CFLAGS_MARKER_LIBACL',
)

libaudit = dependency('audit',
                      required : get_option('audit'))
conf.set10('HAVE_AUDIT', libaudit.found())
libaudit_cflags = declare_dependency(
        dependencies : libaudit.partial_dependency(includes: true, compile_args: true),
        compile_args : '-DSYSTEMD_CFLAGS_MARKER_LIBAUDIT',
)

libblkid = dependency('blkid',
                      version : '>=2.37.0',
                      required : get_option('blkid'))
conf.set10('HAVE_BLKID', libblkid.found())
libblkid_cflags = declare_dependency(
        dependencies : libblkid.partial_dependency(includes: true, compile_args: true),
        compile_args : '-DSYSTEMD_CFLAGS_MARKER_LIBBLKID',
)

libkmod = dependency('libkmod',
                     version : '>= 15',
                     required : get_option('kmod'))
conf.set10('HAVE_KMOD', libkmod.found())
libkmod_cflags = declare_dependency(
        dependencies : libkmod.partial_dependency(includes: true, compile_args: true),
        compile_args : '-DSYSTEMD_CFLAGS_MARKER_LIBKMOD',
)

libxenctrl = dependency('xencontrol',
                        version : '>= 4.9',
                        required : get_option('xenctrl'))
conf.set10('HAVE_XENCTRL', libxenctrl.found())
libxenctrl_cflags = declare_dependency(
        dependencies : libxenctrl.partial_dependency(includes: true, compile_args: true),
        compile_args : '-DSYSTEMD_CFLAGS_MARKER_LIBXENCTRL',
)

feature = get_option('pam')
libpam = dependency('pam',
                    required : feature.disabled() ? feature : false)
if not libpam.found()
        # Debian older than bookworm and Ubuntu older than 22.10 do not provide the .pc file.
        libpam = cc.find_library('pam', required : feature)
endif
conf.set10('HAVE_PAM', libpam.found())
libpam_cflags = declare_dependency(
        dependencies : libpam.partial_dependency(includes: true, compile_args: true),
        compile_args : '-DSYSTEMD_CFLAGS_MARKER_LIBPAM',
)

libmicrohttpd = dependency('libmicrohttpd',
                           version : '>= 0.9.33',
                           required : get_option('microhttpd'))
conf.set10('HAVE_MICROHTTPD', libmicrohttpd.found())
libmicrohttpd_cflags = declare_dependency(
        dependencies : libmicrohttpd.partial_dependency(includes: true, compile_args: true),
        compile_args : '-DSYSTEMD_CFLAGS_MARKER_LIBMICROHTTPD',
)

libcryptsetup = get_option('libcryptsetup')
libcryptsetup_plugins = get_option('libcryptsetup-plugins')
if libcryptsetup_plugins.enabled()
        if libcryptsetup.disabled()
                error('libcryptsetup-plugins cannot be requested without libcryptsetup')
        endif
        libcryptsetup = libcryptsetup_plugins
endif

libcryptsetup = dependency('libcryptsetup',
                           version : '>= 2.4.0',
                           required : libcryptsetup)
libcryptsetup_cflags = declare_dependency(
        dependencies : libcryptsetup.partial_dependency(includes: true, compile_args: true),
        compile_args : '-DSYSTEMD_CFLAGS_MARKER_LIBCRYPTSETUP',
)

have = libcryptsetup.found()
conf.set10('HAVE_LIBCRYPTSETUP', have)
conf.set10('HAVE_LIBCRYPTSETUP_PLUGINS',
           libcryptsetup_plugins.allowed() and have)

libcurl = dependency('libcurl',
                     version : '>= 7.32.0',
                     required : get_option('libcurl'))
libcurl_cflags = declare_dependency(
        dependencies : libcurl.partial_dependency(includes: true, compile_args: true),
        compile_args : '-DSYSTEMD_CFLAGS_MARKER_LIBCURL',
)
conf.set10('HAVE_LIBCURL', libcurl.found())
conf.set10('CURL_NO_OLDIES', conf.get('BUILD_MODE_DEVELOPER') == 1)

libidn2 = dependency('libidn2',
                     required : get_option('libidn2'))
libidn2_cflags = declare_dependency(
        dependencies : libidn2.partial_dependency(includes: true, compile_args: true),
        compile_args : '-DSYSTEMD_CFLAGS_MARKER_LIBIDN2',
)
conf.set10('HAVE_LIBIDN2', libidn2.found())

libqrencode = dependency('libqrencode',
                         version : '>= 3',
                         required : get_option('qrencode'))
libqrencode_cflags = declare_dependency(
        dependencies : libqrencode.partial_dependency(includes: true, compile_args: true),
        compile_args : '-DSYSTEMD_CFLAGS_MARKER_LIBQRENCODE',
)
conf.set10('HAVE_QRENCODE', libqrencode.found())

feature = get_option('gcrypt')
libgcrypt = dependency('libgcrypt',
                       required : feature.disabled() ? feature : false)
conf.set10('HAVE_GCRYPT', libgcrypt.found())
if libgcrypt.found()
        libgcrypt_cflags = declare_dependency(
                dependencies : libgcrypt.partial_dependency(includes: true, compile_args: true),
                compile_args : '-DSYSTEMD_CFLAGS_MARKER_LIBGCRYPT',
        )
else
        libgcrypt_cflags = []
endif

libgnutls = dependency('gnutls',
                       version : '>= 3.1.4',
                       required : get_option('gnutls'))
conf.set10('HAVE_GNUTLS', libgnutls.found())
libgnutls_cflags = declare_dependency(
        dependencies : libgnutls.partial_dependency(includes: true, compile_args: true),
        compile_args : '-DSYSTEMD_CFLAGS_MARKER_LIBGNUTLS',
)

libopenssl = dependency('openssl',
                        version : '>= 3.0.0',
                        required : get_option('openssl'))
libopenssl_cflags = declare_dependency(
        dependencies : libopenssl.partial_dependency(includes: true, compile_args: true),
        compile_args : '-DSYSTEMD_CFLAGS_MARKER_LIBOPENSSL',
)
conf.set10('HAVE_OPENSSL', libopenssl.found())

libp11kit = dependency('p11-kit-1',
                       version : '>= 0.23.3',
                       required : get_option('p11kit'))
conf.set10('HAVE_P11KIT', libp11kit.found())
libp11kit_cflags = declare_dependency(
        dependencies : libp11kit.partial_dependency(includes: true, compile_args: true),
        compile_args : '-DSYSTEMD_CFLAGS_MARKER_LIBP11KIT',
)

feature = get_option('libfido2').require(
        conf.get('HAVE_OPENSSL') == 1,
        error_message : 'openssl required')
libfido2 = dependency('libfido2',
                      required : feature)
libfido2_cflags = declare_dependency(
        dependencies : libfido2.partial_dependency(includes: true, compile_args: true),
        compile_args : '-DSYSTEMD_CFLAGS_MARKER_LIBFIDO2',
)
conf.set10('HAVE_LIBFIDO2', libfido2.found())

tss2_esys = dependency('tss2-esys', required : get_option('tpm2'))
tss2_mu = dependency('tss2-mu', required : get_option('tpm2'))
tss2_rc = dependency('tss2-rc', required : get_option('tpm2'))
tss2_tcti_device = dependency('tss2-tcti-device', required : get_option('tpm2'))
tpm2_cflags = declare_dependency(
        dependencies : [
                tss2_esys.partial_dependency(includes: true, compile_args: true),
                tss2_mu.partial_dependency(includes: true, compile_args: true),
                tss2_rc.partial_dependency(includes: true, compile_args: true),
                tss2_tcti_device.partial_dependency(includes: true, compile_args: true),
        ],
        compile_args : '-DSYSTEMD_CFLAGS_MARKER_TPM2',
)
conf.set10('HAVE_TPM2', tss2_esys.found() and tss2_mu.found() and tss2_rc.found() and tss2_tcti_device.found())
conf.set10('HAVE_TSS2_ESYS3', tss2_esys.found() and tss2_esys.version().version_compare('>= 3.0.0'))
conf.set('TPM2_NVPCR_BASE', get_option('tpm2-nvpcr-base'))

libdw = dependency('libdw',
                   version : '>=0.177',
                   required : get_option('elfutils'))
libelf = dependency('libelf',
                    required : get_option('elfutils'))
libelf_cflags = declare_dependency(
        dependencies : [
                libelf.partial_dependency(includes: true, compile_args: true),
                libdw.partial_dependency(includes: true, compile_args: true),
        ],
        compile_args : '-DSYSTEMD_CFLAGS_MARKER_LIBELF',
)
conf.set10('HAVE_ELFUTILS', libdw.found() and libelf.found())

libz = dependency('zlib',
                  required : get_option('zlib'))
conf.set10('HAVE_ZLIB', libz.found())
libz_cflags = declare_dependency(
        dependencies : libz.partial_dependency(includes: true, compile_args: true),
        compile_args : '-DSYSTEMD_CFLAGS_MARKER_LIBZ',
)

feature = get_option('bzip2')
libbzip2 = dependency('bzip2',
                      required : feature.disabled() ? feature : false)
if not libbzip2.found()
        # Debian and Ubuntu do not provide the .pc file.
        libbzip2 = cc.find_library('bz2', required : feature)
endif
conf.set10('HAVE_BZIP2', libbzip2.found())
libbzip2_cflags = declare_dependency(
        dependencies : libbzip2.partial_dependency(includes: true, compile_args: true),
        compile_args : '-DSYSTEMD_CFLAGS_MARKER_LIBBZIP2',
)

libxz = dependency('liblzma',
                   required : get_option('xz'))
conf.set10('HAVE_XZ', libxz.found())
libxz_cflags = declare_dependency(
        dependencies : libxz.partial_dependency(includes: true, compile_args: true),
        compile_args : '-DSYSTEMD_CFLAGS_MARKER_LIBXZ',
)

liblz4 = dependency('liblz4',
                    version : '>= 1.3.0',
                    required : get_option('lz4'))
conf.set10('HAVE_LZ4', liblz4.found())
liblz4_cflags = declare_dependency(
        dependencies : liblz4.partial_dependency(includes: true, compile_args: true),
        compile_args : '-DSYSTEMD_CFLAGS_MARKER_LIBLZ4',
)

libzstd = dependency('libzstd',
                     version : '>= 1.4.0',
                     required : get_option('zstd'))
conf.set10('HAVE_ZSTD', libzstd.found())
libzstd_cflags = declare_dependency(
        dependencies : libzstd.partial_dependency(includes: true, compile_args: true),
        compile_args : '-DSYSTEMD_CFLAGS_MARKER_LIBZSTD',
)

conf.set10('HAVE_COMPRESSION', libxz.found() or liblz4.found() or libzstd.found())

compression = get_option('default-compression')
if compression == 'auto'
        if libzstd.found()
                compression = 'zstd'
        elif liblz4.found()
                compression = 'lz4'
        elif libxz.found()
                compression = 'xz'
        else
                compression = 'none'
        endif
elif compression == 'zstd' and not libzstd.found()
        error('default-compression=zstd requires zstd')
elif compression == 'lz4' and not liblz4.found()
        error('default-compression=lz4 requires lz4')
elif compression == 'xz' and not libxz.found()
        error('default-compression=xz requires xz')
endif
# In the dlopen ELF note we save the default compression library with a
# higher priority, so that packages can give it priority over the
# secondary libraries.
conf.set('COMPRESSION_PRIORITY_ZSTD',
                compression == 'zstd' ? 'recommended' : 'suggested')
conf.set('COMPRESSION_PRIORITY_LZ4',
                compression == 'lz4' ? 'recommended' : 'suggested')
conf.set('COMPRESSION_PRIORITY_XZ',
                compression == 'xz' ? 'recommended' : 'suggested')
conf.set('DEFAULT_COMPRESSION', 'COMPRESSION_@0@'.format(compression.to_upper()))

libarchive = dependency('libarchive',
                        version : '>= 3.0',
                        required : get_option('libarchive'))
libarchive_cflags = declare_dependency(
        dependencies : libarchive.partial_dependency(includes: true, compile_args: true),
        compile_args : '-DSYSTEMD_CFLAGS_MARKER_LIBARCHIVE',
)
conf.set10('HAVE_LIBARCHIVE', libarchive.found())

libxkbcommon = dependency('xkbcommon',
                          version : '>= 0.3.0',
                          required : get_option('xkbcommon'))
libxkbcommon_cflags = declare_dependency(
        dependencies : libxkbcommon.partial_dependency(includes: true, compile_args: true),
        compile_args : '-DSYSTEMD_CFLAGS_MARKER_LIBXKBCOMMON',
)
conf.set10('HAVE_XKBCOMMON', libxkbcommon.found())

libpcre2 = dependency('libpcre2-8',
                      required : get_option('pcre2'))
libpcre2_cflags = declare_dependency(
        dependencies : libpcre2.partial_dependency(includes: true, compile_args: true),
        compile_args : '-DSYSTEMD_CFLAGS_MARKER_LIBPCRE2',
)
conf.set10('HAVE_PCRE2', libpcre2.found())

libglib =    dependency('glib-2.0',
                        version : '>= 2.22.0',
                        required : get_option('glib'))
libgobject = dependency('gobject-2.0',
                        version : '>= 2.22.0',
                        required : get_option('glib'))
libgio =     dependency('gio-2.0',
                        required : get_option('glib'))
conf.set10('HAVE_GLIB', libglib.found() and libgobject.found() and libgio.found())
libglib_cflags = declare_dependency(
        dependencies : [
                libglib.partial_dependency(includes: true, compile_args: true),
                libgobject.partial_dependency(includes: true, compile_args: true),
                libgio.partial_dependency(includes: true, compile_args: true),
        ],
        compile_args : '-DSYSTEMD_CFLAGS_MARKER_LIBGLIB',
)

libdbus = dependency('dbus-1',
                     version : '>= 1.3.2',
                     required : get_option('dbus'))
conf.set10('HAVE_DBUS', libdbus.found())
libdbus_cflags = declare_dependency(
        dependencies : libdbus.partial_dependency(includes: true, compile_args: true),
        compile_args : '-DSYSTEMD_CFLAGS_MARKER_LIBDBUS',
)

dbusdatadir = libdbus.get_variable(pkgconfig: 'datadir', default_value: datadir) / 'dbus-1'

dbuspolicydir = get_option('dbuspolicydir')
if dbuspolicydir == ''
        dbuspolicydir = dbusdatadir / 'system.d'
endif

dbussessionservicedir = get_option('dbussessionservicedir')
if dbussessionservicedir == ''
        dbussessionservicedir = libdbus.get_variable(pkgconfig: 'session_bus_services_dir', default_value: dbusdatadir / 'services')
endif

dbussystemservicedir = get_option('dbussystemservicedir')
if dbussystemservicedir == ''
        dbussystemservicedir = libdbus.get_variable(pkgconfig: 'system_bus_services_dir', default_value: dbusdatadir / 'system-services')
endif

dbus_interfaces_dir = get_option('dbus-interfaces-dir')
if dbus_interfaces_dir == '' or dbus_interfaces_dir == 'yes'
        if meson.is_cross_build() and dbus_interfaces_dir != 'yes'
                dbus_interfaces_dir = 'no'
                warning('Exporting D-Bus interface XML files is disabled during cross build. Pass path or "yes" to force enable.')
        else
                dbus_interfaces_dir = libdbus.get_variable(pkgconfig: 'interfaces_dir', default_value: dbusdatadir / 'interfaces')
        endif
endif

dmi_arches = ['x86', 'x86_64', 'aarch64', 'arm', 'ia64', 'loongarch64', 'mips', 'riscv64']
conf.set10('HAVE_DMI', host_machine.cpu_family() in dmi_arches)

dns_over_tls = get_option('dns-over-tls')
have_openssl = conf.get('HAVE_OPENSSL') == 1
if dns_over_tls == 'false'
        have = false
elif dns_over_tls == 'auto'
        have = have_openssl
elif have_openssl
        have = true
else
        error('DNS-over-TLS support was requested, but OpenSSL support is disabled.')
endif
conf.set10('ENABLE_DNS_OVER_TLS', have)

default_dns_over_tls = get_option('default-dns-over-tls')
if default_dns_over_tls != 'no' and conf.get('ENABLE_DNS_OVER_TLS') == 0
        message('default-dns-over-tls cannot be enabled or set to opportunistic when DNS-over-TLS support is disabled. Setting default-dns-over-tls to no.')
        default_dns_over_tls = 'no'
endif
conf.set('DEFAULT_DNS_OVER_TLS_MODE',
         'DNS_OVER_TLS_' + default_dns_over_tls.underscorify().to_upper())
conf.set_quoted('DEFAULT_DNS_OVER_TLS_MODE_STR', default_dns_over_tls)

default_mdns = get_option('default-mdns')
conf.set('DEFAULT_MDNS_MODE',
         'RESOLVE_SUPPORT_' + default_mdns.to_upper())
conf.set_quoted('DEFAULT_MDNS_MODE_STR', default_mdns)

default_llmnr = get_option('default-llmnr')
conf.set('DEFAULT_LLMNR_MODE',
         'RESOLVE_SUPPORT_' + default_llmnr.to_upper())
conf.set_quoted('DEFAULT_LLMNR_MODE_STR', default_llmnr)

have = get_option('measure').require(
        conf.get('HAVE_BLKID') == 1 and
        conf.get('HAVE_OPENSSL') == 1 and
        conf.get('HAVE_TPM2') == 1,
        error_message : 'blkid, openssl, and tpm2 required for systemd-measure').allowed()
conf.set10('ENABLE_MEASURE', have)

have = get_option('repart').require(
        conf.get('HAVE_LIBFDISK') == 1,
        error_message : 'fdisk required').allowed()
conf.set10('ENABLE_REPART', have)

conf.set10('ENABLE_REPORT', get_option('report').allowed())

default_dnssec = get_option('default-dnssec')
if default_dnssec != 'no' and conf.get('HAVE_OPENSSL') == 0
        message('default-dnssec cannot be set to yes or allow-downgrade when openssl is disabled. Setting default-dnssec to no.')
        default_dnssec = 'no'
endif
conf.set('DEFAULT_DNSSEC_MODE',
         'DNSSEC_' + default_dnssec.underscorify().to_upper())
conf.set_quoted('DEFAULT_DNSSEC_MODE_STR', default_dnssec)

have = get_option('imds').require(
        conf.get('HAVE_LIBCURL') == 1,
        error_message : 'curl required').allowed()
conf.set10('ENABLE_IMDS', have)
conf.set('IMDS_NETWORK_DEFAULT', 'IMDS_NETWORK_@0@'.format(get_option('imds-network')).to_upper())

have = get_option('importd').require(
        conf.get('HAVE_LIBCURL') == 1 and
        conf.get('HAVE_OPENSSL') == 1 and
        conf.get('HAVE_ZLIB') == 1 and
        conf.get('HAVE_XZ') == 1,
        error_message : 'curl, openssl, zlib and xz required').allowed()
conf.set10('ENABLE_IMPORTD', have)

have = get_option('sysupdate').require(
        conf.get('ENABLE_IMPORTD') == 1 and
        conf.get('HAVE_OPENSSL') == 1 and
        conf.get('HAVE_LIBFDISK') == 1,
        error_message : 'systemd-importd, fdisk, and openssl required').allowed()
conf.set10('ENABLE_SYSUPDATE', have)

have2 = get_option('sysupdated')
if have2 == 'enabled'
        if have
                have2 = true
        else
                error('sysupdated requires sysupdate to be enabled')
        endif
elif have2 == 'auto'
        have2 = have and conf.get('BUILD_MODE_DEVELOPER') == 1
else
        have2 = false
endif
conf.set10('ENABLE_SYSUPDATED', have2)

conf.set10('ENABLE_STORAGETM', get_option('storagetm'))

have = get_option('homed').require(
        conf.get('HAVE_LIBCRYPT') == 1 and
        conf.get('HAVE_OPENSSL') == 1 and
        conf.get('HAVE_LIBFDISK') == 1 and
        conf.get('HAVE_LIBCRYPTSETUP') == 1,
        error_message : 'libcrypt, openssl, fdisk, and libcryptsetup required').allowed()
conf.set10('ENABLE_HOMED', have)

have = have and conf.get('HAVE_PAM') == 1
conf.set10('ENABLE_PAM_HOME', have)

feature = get_option('remote')
if feature.enabled()
        if conf.get('HAVE_MICROHTTPD') != 1
                error('remote support was requested, but microhttpd is not available')
        endif
        if conf.get('HAVE_LIBCURL') != 1
                error('remote support was requested, but libcurl is not available')
        endif
endif
# A more minimal version of systemd-journal-remote can always be built, even if neither
# libcurl nor microhttpd are available.
conf.set10('ENABLE_REMOTE', feature.allowed())

feature = get_option('vmspawn').disable_auto_if(conf.get('BUILD_MODE_DEVELOPER') == 0)
conf.set10('ENABLE_VMSPAWN', feature.allowed())

feature = get_option('nspawn')
conf.set10('ENABLE_NSPAWN', feature.allowed())

conf.set10('DEFAULT_MOUNTFSD_TRUSTED_DIRECTORIES', get_option('default-mountfsd-trusted-directories'))

foreach tuple : [
                ['analyze'],
                ['backlight'],
                ['binfmt'],
                ['compat-mutable-uid-boundaries'],
                ['compat-sysv-interfaces'],
                ['coredump'],
                ['efi'],
                ['environment-d'],
                ['firstboot'],
                ['gshadow',         get_option('libc') != 'musl', 'musl does not support it'],
                ['hibernate'],
                ['hostnamed'],
                ['hwdb'],
                ['idn',             conf.get('HAVE_NI_IDN') == 1, 'NI_IDN is not defined'],
                ['ima'],
                ['ipe'],
                ['initrd'],
                ['kernel-install'],
                ['ldconfig'],
                ['localed'],
                ['logind'],
                ['machined'],
                ['mountfsd'],
                ['networkd'],
                ['nsresourced'],
                ['nss-myhostname',  get_option('libc') != 'musl', 'musl does not support it'],
                ['nss-systemd',     get_option('libc') != 'musl', 'musl does not support it'],
                ['oomd'],
                ['portabled'],
                ['pstore'],
                ['quotacheck'],
                ['randomseed'],
                ['resolve'],
                ['rfkill'],
                ['smack'],
                ['sysext'],
                ['sysinstall'],
                ['sysusers'],
                ['timedated'],
                ['timesyncd'],
                ['tmpfiles'],
                ['tpm'],
                ['utmp',            get_option('libc') != 'musl', 'musl does not support it'],
                ['userdb'],
                ['vconsole'],
                ['xdg-autostart'],
        ]

        have = get_option(tuple[0])
        if have and tuple.length() >= 3 and not tuple[1]
                warning('@0@ support is requested but @1@, disabling it'.format(tuple[0], tuple[2]))
                have = false
        endif

        name = 'ENABLE_' + tuple[0].underscorify().to_upper()
        conf.set10(name, have)
endforeach

enable_sysusers = conf.get('ENABLE_SYSUSERS') == 1

foreach tuple : [['nss-mymachines', 'machined'],
                 ['nss-resolve',    'resolve']]
        want = get_option(tuple[0])
        if want.enabled()
                if get_option('libc') == 'musl'
                        error('@0@ is requested but musl does not support it'.format(tuple[0]))
                endif
                if not get_option(tuple[1])
                        error('@0@ is requested but @1@ is disabled'.format(tuple[0], tuple[1]))
                endif
                have = true
        elif want.allowed()
                have = get_option(tuple[1]) and get_option('libc') != 'musl'
        else
                have = false
        endif
        name = 'ENABLE_' + tuple[0].underscorify().to_upper()
        conf.set10(name, have)
endforeach

enable_nss = false
foreach term : ['ENABLE_NSS_MYHOSTNAME',
                'ENABLE_NSS_MYMACHINES',
                'ENABLE_NSS_RESOLVE',
                'ENABLE_NSS_SYSTEMD']
        if conf.get(term) == 1
                enable_nss = true
        endif
endforeach
conf.set10('ENABLE_NSS', enable_nss)

conf.set10('ENABLE_TIMEDATECTL', get_option('timedated') or get_option('timesyncd'))

conf.set10('ENABLE_SSH_PROXY_CONFIG', sshconfdir != 'no')
conf.set10('ENABLE_SSH_USERDB_CONFIG', conf.get('ENABLE_USERDB') == 1 and sshdconfdir != 'no')

conf.set10('SYSTEMD_SLOW_TESTS_DEFAULT', want_slow_tests)

#####################################################################

pymod = import('python')
python = pymod.find_installation('python3', required : true, modules : ['jinja2'])
if not python.language_version().version_compare('>=3.9')
        error('Python >= 3.9 is required')
endif

#####################################################################

efi_arch = {
        'aarch64'     : 'aa64',
        'arm'         : 'arm',
        'loongarch32' : 'loongarch32',
        'loongarch64' : 'loongarch64',
        'riscv32'     : 'riscv32',
        'riscv64'     : 'riscv64',
        'x86_64'      : 'x64',
        'x86'         : 'ia32',
}.get(host_machine.cpu_family(), '')

pyelftools = pymod.find_installation(
        'python3',
        required : get_option('bootloader').enabled() or want_dlopen_tests,
        modules : ['elftools'],
)

have = get_option('bootloader').require(
        pyelftools.found() and get_option('efi') and efi_arch != '',
        error_message : 'unsupported EFI arch or EFI support is disabled').allowed()
conf.set10('ENABLE_BOOTLOADER', have)
conf.set_quoted('EFI_MACHINE_TYPE_NAME', have ? efi_arch : '')

efi_arch_alt = ''
efi_cpu_family_alt = ''
if have and efi_arch == 'x64' and cc.links('''
                #include <limits.h>
                int main(int argc, char *argv[]) {
                        return __builtin_popcount(argc - CHAR_MAX);
                }''', args : ['-m32', '-march=i686'], name : '32bit build possible')
        efi_arch_alt = 'ia32'
        efi_cpu_family_alt = 'x86'
endif

want_ukify = get_option('ukify').allowed()
conf.set10('ENABLE_UKIFY', want_ukify)

#####################################################################

version_tag = get_option('version-tag')
if version_tag == ''
        version_tag = meson.project_version()
endif

conf.set_quoted('VERSION_TAG', version_tag)

generated_sources = []

subdir('tools')
subdir('src/version')
subdir('src/bpf')

shared_lib_tag = get_option('shared-lib-tag')
if shared_lib_tag == ''
        shared_lib_tag = project_major_version
endif

#####################################################################

subdir('src/coverage')

#####################################################################

config_h = configure_file(
        output : 'config.h',
        configuration : conf)

userspace_c_args += ['-include', 'config.h']

jinja2_cmdline = [meson_render_jinja2_py, config_h]

userspace = declare_dependency(
        compile_args : userspace_c_args,
        link_args : userspace_c_ld_args,
        sources : userspace_sources,
)

man_page_depends = []

#####################################################################

simple_tests = []
libsystemd_tests = []
simple_fuzzers = []
catalogs = []
modules = [] # nss, pam, and other plugins
executables = []
executables_by_name = {}
exported_by_name = {}
fuzzer_exes = []
sources = []

# binaries that have --help and are intended for use by humans,
# usually, but not always, installed in /usr/bin.
public_programs = []

# D-Bus introspection XML export
dbus_programs = []

# A list of boot stubs. Required for testing of ukify.
boot_stubs = []

# This is similar to system_includes below, but for passing custom_target().
system_include_args = [
        '-isystem', meson.project_build_root()  / 'src/include/override',
        '-isystem', meson.project_source_root() / 'src/include/override',
        '-isystem', meson.project_build_root()  / 'src/include/uapi',
        '-isystem', meson.project_source_root() / 'src/include/uapi',
]

system_includes = [
        include_directories(
                # gcc(1) says
                # "Directories specified with -isystem options are scanned in left-to-right order",
                # and meson puts the directories in the reversed order. Hence, a directory with a lower
                # priority must be listed earlier.
                'src/include/uapi',
                'src/include/override',
                is_system : true,
        ),
]

libc_include_dir = 'src/include' / get_option('libc')
system_include_args = [
        '-isystem', meson.project_build_root()  / libc_include_dir,
        '-isystem', meson.project_source_root() / libc_include_dir,
] + system_include_args

system_includes += include_directories(libc_include_dir, is_system : true)

basic_includes = [
        include_directories(
                'src/basic',
                'src/fundamental',
                'src/systemd',
        ),
        system_includes,
        version_include,
]

libsystemd_includes = [include_directories(
        'src/libsystemd',
        'src/libsystemd/sd-bus',
        'src/libsystemd/sd-device',
        'src/libsystemd/sd-event',
        'src/libsystemd/sd-future',
        'src/libsystemd/sd-hwdb',
        'src/libsystemd/sd-id128',
        'src/libsystemd/sd-journal',
        'src/libsystemd/sd-json',
        'src/libsystemd/sd-netlink',
        'src/libsystemd/sd-network',
        'src/libsystemd/sd-path',
        'src/libsystemd/sd-resolve',
        'src/libsystemd/sd-varlink'), basic_includes]

includes = [
        include_directories(
                'src/shared',
                'src/bpf',
        ),
        libsystemd_includes,
]

subdir('po')
subdir('catalog')
subdir('src/include')
subdir('src/libc')
subdir('src/fundamental')
subdir('src/basic')
subdir('src/libsystemd')
subdir('src/shared')
subdir('src/libudev')

libsystemd = shared_library(
        'systemd',
        version : libsystemd_version,
        include_directories : libsystemd_includes,
        implicit_include_directories : false,
        link_args : ['-shared',
                     # Make sure our library is never deleted from memory, so that our open logging fds don't leak on dlopen/dlclose cycles.
                     '-z', 'nodelete',
                     '-Wl,--version-script=' + libsystemd_sym_path],
        link_with : [libc_wrapper_static,
                     libbasic_static],
        link_whole : [libsystemd_static],
        dependencies : [libucontext, userspace],
        link_depends : libsystemd_sym,
        install : true,
        install_tag: 'libsystemd',
        install_dir : libdir)

if static_libsystemd != 'false'
        install_libsystemd_static = static_library(
                'systemd',
                libc_wrapper_sources,
                libsystemd_sources,
                basic_sources,
                fundamental_sources,
                include_directories : libsystemd_includes,
                implicit_include_directories : false,
                install : true,
                install_tag: 'libsystemd',
                install_dir : libdir,
                pic : static_libsystemd_pic,
                dependencies : [
                        libbzip2_cflags,
                        liblz4_cflags,
                        libm,
                        libucontext,
                        libxz_cflags,
                        libz_cflags,
                        libzstd_cflags,
                        userspace,
                ],
                c_args : libsystemd_c_args + (static_libsystemd_pic ? [] : ['-fno-PIC']))

        alias_target('libsystemd', libsystemd, install_libsystemd_static)
else
        alias_target('libsystemd', libsystemd)
endif

libudev = shared_library(
        'udev',
        version : libudev_version,
        include_directories : includes,
        implicit_include_directories : false,
        link_args : ['-shared',
                     '-Wl,--version-script=' + libudev_sym_path],
        link_with : [libsystemd_static],
        link_whole : libudev_basic,
        dependencies : [userspace],
        link_depends : libudev_sym,
        install : true,
        install_tag: 'libudev',
        install_dir : libdir)

if static_libudev != 'false'
        install_libudev_static = static_library(
                'udev',
                libc_wrapper_sources,
                basic_sources,
                fundamental_sources,
                shared_sources,
                libsystemd_sources,
                libudev_sources,
                include_directories : includes,
                implicit_include_directories : false,
                install : true,
                install_tag: 'libudev',
                install_dir : libdir,
                link_depends : libudev_sym,
                dependencies : [
                        libbzip2_cflags,
                        liblz4_cflags,
                        libshared_deps,
                        libxz_cflags,
                        libz_cflags,
                        libzstd_cflags,
                        userspace,
                ],
                c_args : static_libudev_pic ? [] : ['-fno-PIC'],
                pic : static_libudev_pic)

        alias_target('libudev', libudev, install_libudev_static)
else
        alias_target('libudev', libudev)
endif

#####################################################################

runtest_env = custom_target(
        output : 'systemd-runtest.env',
        command : ['printf',
                   'SYSTEMD_TEST_DATA=%q\nSYSTEMD_CATALOG_DIR=%q\n',
                   meson.project_source_root() / 'test',
                   meson.project_build_root() / 'catalog'],
        capture: true,
        depends : catalogs,
        build_by_default : true)

test_cflags = ['-DTEST_CODE=1']
# We intentionally do not do inline initializations with definitions for a
# bunch of _cleanup_ variables in tests, to ensure valgrind is triggered if we
# use the variable unexpectedly. This triggers a lot of maybe-uninitialized
# false positives when the combination of -O2 and -flto is used. Suppress them.
if '-O2' in c_args and '-flto=auto' in c_args
        test_cflags += cc.first_supported_argument('-Wno-maybe-uninitialized')
endif

#####################################################################

# The 'install' field is extended to also control whether the automatically
# added variant, which is statically linked with libsystemd-shared, is installed:
#   'yes'    : Mapped to true.
#   'no'     : Mapped to false.
#   'static' : Mapped to false, and its target name is suffixed with '.shared'.
#              The static variant will be installed instead using the original name
#              (without the '.standalone' suffix).
# Currently, test and fuzzer executables only support 'yes' or 'no'.
#
# For executables matched by the install-standalone list, a .standalone variant
# will be installed if install is true.
#
# The 'symlinks' field, if present, is a list of dictionaries, each describing an alias
# name for the executable (for multicall binaries dispatching on argv[0]):
#   'name'           : (required) the name of the symlink.
#   'install_dir'    : where to install the symlink. Defaults to the install directory
#                      of the executable.
#   'conditions'     : a list of config options that must all be enabled for the
#                      symlink to be created.
#   'dbus', 'public' : same meaning as for the executable itself, but for the alias.
# The symlinks are also created in the build directory, pointing to the executable in
# the build directory, so that the aliases can be invoked by tests and tools.
executable_template = {
        'include_directories' : includes,
        'link_with' : [libshared],
        'install_rpath' : pkglibdir,
        'install' : 'yes',
        'build_by_default' : true,
}

generator_template = executable_template + {
        'install_dir' : systemgeneratordir,
}

libexec_template = executable_template + {
        'install_dir' : libexecdir,
}

executable_additional_kwargs = {
        'dependencies' : userspace,
}

test_template = executable_template + {
        'build_by_default' : want_tests != 'false',
        'install' : install_tests ? 'yes' : 'no',
        'install_dir' : unittestsdir,
}

test_additional_kwargs = {
        'c_args' : test_cflags,
        'link_depends' : runtest_env,
}

fuzz_template = executable_template + {
        'build_by_default' : want_fuzz_tests,
        'install' : 'no',
}

if want_ossfuzz
        fuzz_additional_kwargs = {
                'dependencies' : fuzzing_engine,
        }
elif want_libfuzzer
        fuzz_additional_kwargs = {
                'link_args' : ['-fsanitize=fuzzer'],
        }
else
        fuzz_additional_kwargs = {
                'sources' : files('src/fuzz/fuzz-main.c'),
        }
endif
fuzz_additional_kwargs += {
        'c_args' : test_cflags,
}

nss_template = {
        'version' : '2',
        'include_directories' : includes,
        # Note that we link NSS modules with '-z nodelete' so that mempools never get orphaned
        'link_args' : ['-z', 'nodelete'],
        'link_with' : [
                libc_wrapper_static,
                libsystemd_static,
                libshared_static,
                libbasic_static,
        ],
        'install' : true,
        'install_tag' : 'nss',
        'install_dir' : libdir,
}

pam_template = {
        'name_prefix' : '',
        'include_directories' : includes,
        'link_with' : [
                libsystemd_static,
                libshared_static,
        ],
        'dependencies' : libpam_cflags,
        'install' : true,
        'install_tag' : 'pam',
        'install_dir' : pamlibdir,
}

module_additional_kwargs = {
        'link_args' : ['-shared'],
        'dependencies' : userspace,
}

#####################################################################

# 'src/core' embeds a built-in copy of some unit files, so the unit file list
# from 'units' must be defined first.
subdir('units')
# systemd-analyze requires 'libcore'
subdir('src/core')
# systemd-networkd requires 'libsystemd_network'
subdir('src/libsystemd-network')
# hwdb requires 'udev_link_with' and 'udev_rpath'
subdir('src/udev')

subdir('src/ac-power')
subdir('src/analyze')
subdir('src/ask-password')
subdir('src/backlight')
subdir('src/battery-check')
subdir('src/binfmt')
subdir('src/bless-boot')
subdir('src/boot')
subdir('src/bootctl')
subdir('src/busctl')
subdir('src/cgls')
subdir('src/cgtop')
subdir('src/clonesetup')
subdir('src/coredump')
subdir('src/creds')
subdir('src/cryptenroll')
subdir('src/cryptsetup')
subdir('src/debug-generator')
subdir('src/delta')
subdir('src/detect-virt')
subdir('src/dissect')
subdir('src/environment-d-generator')
subdir('src/escape')
subdir('src/factory-reset')
subdir('src/firstboot')
subdir('src/fsck')
subdir('src/fstab-generator')
subdir('src/getty-generator')
subdir('src/gpt-auto-generator')
subdir('src/growfs')
subdir('src/hibernate-resume')
subdir('src/home')
subdir('src/hostname')
subdir('src/hwdb')
subdir('src/id128')
subdir('src/import')
subdir('src/imds') # Note, we are not alphabetically here, since we want to use a variable from src/import/ here
subdir('src/integritysetup')
subdir('src/journal')
subdir('src/journal-remote')
subdir('src/kernel-install')
subdir('src/keyutil')
subdir('src/locale')
subdir('src/login')
subdir('src/machine')
subdir('src/machine-id-setup')
subdir('src/measure')
subdir('src/modules-load')
subdir('src/mount')
subdir('src/mountfsd')
subdir('src/mstack')
subdir('src/mute-console')
subdir('src/network')
subdir('src/notify')
subdir('src/nspawn')
subdir('src/nsresourced')
subdir('src/nss-myhostname')
subdir('src/nss-mymachines')
subdir('src/nss-resolve')
subdir('src/nss-systemd')
subdir('src/oom')
subdir('src/path')
subdir('src/pcrextend')
subdir('src/pcrlock')
subdir('src/portable')
subdir('src/pstore')
subdir('src/ptyfwd')
subdir('src/quotacheck')
subdir('src/random-seed')
subdir('src/remount-fs')
subdir('src/repart')
subdir('src/report')
subdir('src/reply-password')
subdir('src/resolve')
subdir('src/rfkill')
subdir('src/rpm')
subdir('src/run')
subdir('src/run-generator')
subdir('src/sbsign')
subdir('src/shutdown')
subdir('src/sleep')
subdir('src/socket-activate')
subdir('src/socket-proxy')
subdir('src/ssh-generator')
subdir('src/stdio-bridge')
subdir('src/storage')
subdir('src/storagetm')
subdir('src/sulogin-shell')
subdir('src/sysctl')
subdir('src/sysext')
subdir('src/sysinstall')
subdir('src/system-update-generator')
subdir('src/systemctl')
subdir('src/sysupdate')
subdir('src/sysusers')
subdir('src/timedate')
subdir('src/timesync')
subdir('src/tmpfiles')
subdir('src/tpm2-setup')
subdir('src/tty-ask-password-agent')
subdir('src/update-done')
subdir('src/update-helper')
subdir('src/update-utmp')
subdir('src/user-sessions')
subdir('src/userdb')
subdir('src/validatefs')
subdir('src/varlinkctl')
subdir('src/vconsole')
subdir('src/veritysetup')
subdir('src/vmspawn')
subdir('src/volatile-root')
subdir('src/vpick')
subdir('src/xdg-autostart-generator')

subdir('src/systemd')

subdir('src/test')
subdir('src/fuzz')
subdir('src/ukify/test')  # needs to be last for test_env variable
subdir('test/fuzz')

subdir('mime')

alias_target('devel', libsystemd_pc, libudev_pc, systemd_pc, udev_pc)

#####################################################################

foreach test : simple_tests
        executables += test_template + { 'sources' : [test] }
endforeach

foreach test : libsystemd_tests
        executables += test_template + test
endforeach

foreach fuzzer : simple_fuzzers
        executables += fuzz_template + { 'sources' : [fuzzer] }
endforeach

foreach dict : executables
        name = dict.get('name', '')
        if name == ''
                name = fs.stem(dict.get('sources')[0])
                assert(name.split('-')[0] in ['test', 'fuzz'])
        endif

        is_test = name.startswith('test-')
        is_fuzz = name.startswith('fuzz-')

        build = true
        foreach cond : dict.get('conditions', [])
                if conf.get(cond) != 1
                        build = false
                        break
                endif
        endforeach
        if not build
                continue
        endif

        symlinks = []
        foreach item : dict.get('symlinks', [])
                enabled = true
                foreach cond : item.get('conditions', [])
                        if conf.get(cond) != 1
                                enabled = false
                                break
                        endif
                endforeach
                if enabled
                        symlinks += [item]
                endif
        endforeach

        exe_sources = dict.get('sources', []) + dict.get('export', [])

        foreach bpf_name : dict.get('bpf_programs', [])
                if bpf_name in bpf_programs_by_name
                        exe_sources += bpf_programs_by_name[bpf_name]
                endif
        endforeach

        kwargs = {}
        foreach key, val : dict
                if key in ['name', 'dbus', 'public', 'conditions', 'type', 'suite',
                           'timeout', 'parallel', 'sources', 'import', 'export',
                           'include_directories', 'build_by_default', 'install',
                           'bpf_programs', 'link_args_static', 'symlinks']
                        continue
                endif

                kwargs += { key : val }
        endforeach

        foreach key, val : executable_additional_kwargs
                kwargs += { key : [ kwargs.get(key, []), val ]}
        endforeach

        include_directories = dict['include_directories']
        if not is_test and exe_sources.length() > 0
                include_directories += fs.parent(exe_sources[0])
        endif

        foreach val : dict.get('import', [])
                obj = exported_by_name[val]
                kwargs += { 'objects' : kwargs.get('objects', []) + obj['exported'] }
                include_directories += obj['include_directories']
        endforeach

        if is_test
                kwargs += { 'install_dir' : kwargs.get('install_dir') / dict.get('type', '') }
                foreach key, val : test_additional_kwargs
                        kwargs += { key : [ kwargs.get(key, []), val ] }
                endforeach
        endif

        if is_fuzz
                include_directories += include_directories('src/fuzz')
                foreach key, val : fuzz_additional_kwargs
                        if key == 'sources'
                                exe_sources += val
                        else
                                kwargs += { key : [ kwargs.get(key, []), val ] }
                        endif
                endforeach
        endif

        name_shared = name
        name_static = name + '.standalone'
        install = dict.get('install')
        build_by_default = dict.get('build_by_default')
        install_standalone = false
        if not (is_test or is_fuzz)
                foreach pattern : standalone_binaries
                        if name.contains(pattern)
                                install_standalone = true
                        endif
                endforeach
        endif

        if install in ['yes', 'no']
                install_shared = install == 'yes'
                install_static = install_shared and install_standalone
                build_by_default_shared = build_by_default
                build_by_default_static = build_by_default and (install_standalone or want_dlopen_tests)
        elif install == 'static'
                if is_test or is_fuzz
                        error('Install mode "@0@" is not supported for test or fuzzer target "@1@"'.format(install, name))
                endif
                name_shared = name + '.shared'
                name_static = name
                install_shared = false
                install_static = true
                build_by_default_shared = false
                build_by_default_static = build_by_default
        else
                error('Unknown install mode "@0@" for target "@1@"'.format(install, name))
        endif

        exe = executable(
                name_shared,
                sources : exe_sources,
                kwargs : kwargs,
                implicit_include_directories : false,
                include_directories : include_directories,
                build_by_default: build_by_default_shared,
                install: install_shared,
        )

        executables_by_name += { name_shared : exe }
        sources += exe_sources

        if 'export' in dict
                exported_by_name += {
                        name : {
                                'exported' : exe.extract_objects(dict['export']),
                                'include_directories' : fs.parent(dict['export'][0]),
                        }
                }
        endif

        if build_by_default_shared
                if dict.get('dbus', false)
                        dbus_programs += exe
                endif
                if dict.get('public', false)
                        public_programs += exe
                endif
        endif

        if not is_test and not is_fuzz
                link_with_static = []
                foreach obj : kwargs.get('link_with', [])
                        if obj.full_path() == libshared.full_path()
                                link_with_static += [
                                        libshared_static,
                                        libsystemd_static,
                                ]
                        elif obj.full_path() == libcore.full_path()
                                link_with_static += libcore_static
                        else
                                link_with_static += obj
                        endif
                endforeach

                kwargs_static = kwargs + {
                        # Always import all objects from the main executable.
                        'objects' : kwargs.get('objects', []) + exe.extract_objects(exe_sources),
                        'link_with' : link_with_static,
                        'link_args' : dict.get('link_args_static', kwargs.get('link_args', [])),
                }

                exe_static = executable(
                        name_static,
                        kwargs : kwargs_static,
                        implicit_include_directories : false,
                        include_directories : include_directories,
                        build_by_default: build_by_default_static,
                        install: install_static,
                )

                if build_by_default_static
                        executables_by_name += { name_static : exe_static }

                        if dict.get('dbus', false) and not build_by_default_shared
                                dbus_programs += exe_static
                        endif
                        if dict.get('public', false)
                                public_programs += exe_static
                        endif
                endif
        endif

        if symlinks.length() > 0
                if install == 'static'
                        exe_primary = exe_static
                        build_by_default_primary = build_by_default_static
                        install_primary = install_static
                else
                        exe_primary = exe
                        build_by_default_primary = build_by_default_shared
                        install_primary = install_shared
                endif

                exe_install_dir = kwargs.get('install_dir', bindir)
                # The symlinks get the same install tag of the executable: whatever was specified,
                # or 'runtime', which meson assigns to executables by default.
                symlink_kwargs = { 'install_tag' : kwargs.get('install_tag', 'runtime') }

                foreach symlink : symlinks
                        symlink_name = symlink['name']

                        # Build-directory alias, e.g. build/systemd-networkd → networkctl, allowing
                        # the alias to be run from the build tree. We only need (and can) this if
                        # the target name is different than the symlink name.
                        if symlink_name != name
                                link = custom_target(
                                        symlink_name,
                                        output : symlink_name,
                                        command : [ln, '-fs', name, '@OUTPUT@'],
                                        depends : exe_primary,
                                        build_by_default : build_by_default_primary)

                                if build_by_default_primary
                                        if symlink.get('dbus', false)
                                                dbus_programs += link
                                        endif
                                        if symlink.get('public', false)
                                                public_programs += link
                                        endif
                                endif
                        endif

                        if not install_primary
                                continue
                        endif

                        symlink_dir = symlink.get('install_dir', exe_install_dir)

                        if symlink_dir == exe_install_dir
                                install_symlink(symlink_name,
                                                pointing_to : name,
                                                install_dir : symlink_dir,
                                                kwargs : symlink_kwargs)
                        elif meson.version().version_compare('>=1.3.0')
                                install_symlink(symlink_name,
                                                pointing_to : fs.relative_to(exe_install_dir / name, symlink_dir),
                                                install_dir : symlink_dir,
                                                kwargs : symlink_kwargs)
                        else
                                # fs.relative_to() is not available before meson 1.3
                                install_emptydir(symlink_dir, kwargs : symlink_kwargs)
                                meson.add_install_script(sh, '-c',
                                                         ln_s.format(exe_install_dir / name,
                                                                     symlink_dir / symlink_name),
                                                         kwargs : symlink_kwargs)
                        endif
                endforeach
        endif

        if is_test
                type = dict.get('type', '')
                suite = dict.get('suite', '')
                if suite == ''
                        suite = fs.name(fs.parent(dict.get('sources')[0]))
                        if suite.startswith('sd-')
                                suite = 'libsystemd'
                        endif
                endif

                if type == 'manual'
                        message(f'@suite@/@name@ is a manual test')
                elif type == 'unsafe' and want_tests != 'unsafe'
                        message(f'@suite@/@name@ is an unsafe test')
                elif dict.get('build_by_default')
                        test(name, exe,
                             env : test_env,
                             timeout : dict.get('timeout', 30),
                             suite : suite,
                             is_parallel : dict.get('parallel', true))
                endif
        endif

        if is_fuzz
                fuzzer_exes += exe

                if want_tests != 'false' and want_fuzz_tests
                        fuzz_ins = fuzz_regression_tests.get(name, {})
                        foreach directive : fuzz_ins.get('directives', [])
                                tt = '@0@_@1@'.format(name, fs.name(directive.full_path()))
                                if tt.substring(45) != ''
                                        error('Directive sample name is too long:', directive.full_path())
                                endif

                                test(tt,
                                     exe,
                                     suite : 'fuzz',
                                     args : directive.full_path(),
                                     env : ['UBSAN_OPTIONS=print_stacktrace=1:print_summary=1:halt_on_error=1'],
                                     timeout : 60,
                                     depends : directive)
                        endforeach
                        foreach file : fuzz_ins.get('files', [])
                                tt = '@0@_@1@'.format(name, fs.name(file))
                                if tt.substring(45) != ''
                                        error('Fuzz sample name is too long:', fs.name(file))
                                endif

                                test(tt,
                                     exe,
                                     suite : 'fuzz',
                                     env : ['UBSAN_OPTIONS=print_stacktrace=1:print_summary=1:halt_on_error=1'],
                                     timeout : 60,
                                     args : file)
                        endforeach
                endif
        endif
endforeach

alias_target('fuzzers', fuzzer_exes)

#####################################################################

test_dlopen = executables_by_name.get('test-dlopen')

nss_targets = []
pam_targets = []
module_targets = []
modules_by_name = {}
foreach dict : modules
        name = dict.get('name')
        is_nss = name.startswith('nss_')
        is_pam = name.startswith('pam_')

        build = true
        foreach cond : dict.get('conditions', [])
                if conf.get(cond) != 1
                        build = false
                        break
                endif
        endforeach
        if not build
                continue
        endif

        kwargs = {}
        foreach key, val : dict
                if key in ['name', 'conditions', 'version-script']
                        continue
                endif
                kwargs += { key : val }
        endforeach

        kwargs += {
                'link_args' : [
                        kwargs.get('link_args', []),
                        '-Wl,--version-script=' + dict.get('version-script'),
                ],
                'link_depends' : [
                        kwargs.get('link_depends', []),
                        dict.get('version-script'),
                ],
        }
        foreach key, val : module_additional_kwargs
                kwargs += { key : [ kwargs.get(key, []), val ]}
        endforeach

        lib = shared_library(
                name,
                kwargs : kwargs,
                implicit_include_directories : false,
        )

        module_targets += lib
        modules_by_name += { name : lib }

        if not is_nss and not is_pam
                # Typically for cryptsetup token modules.

                name_static = name + '.standalone'

                link_with_static = []
                foreach obj : kwargs.get('link_with', [])
                        if obj.full_path() == libshared.full_path()
                                link_with_static += [
                                        libshared_static,
                                        libsystemd_static,
                                ]
                        else
                                link_with_static += obj
                        endif
                endforeach

                kwargs_static = kwargs + {
                        'sources' : [],
                        'objects' : kwargs.get('objects', []) + lib.extract_objects(dict.get('sources', [])),
                        'link_with' : link_with_static,
                        'install' : false,
                        'build_by_default' : false,
                }

                lib_static = shared_library(
                        name_static,
                        kwargs : kwargs_static,
                        implicit_include_directories : false,
                )

                modules_by_name += { name_static : lib_static }
        endif

        if is_nss
                # We cannot use shared_module because it does not support version suffix.
                # Unfortunately shared_library insists on creating the symlink…
                meson.add_install_script(sh, '-c', f'rm -f $DESTDIR@libdir@/lib@name@.so',
                                         install_tag : 'nss')
                nss_targets += lib
        endif

        if is_pam
                pam_targets += lib
        endif

        if want_tests != 'false' and (is_nss or is_pam)
                test('dlopen-' + name,
                     test_dlopen,
                     # path to dlopen must include a slash
                     args : lib.full_path(),
                     depends : lib,
                     suite : is_nss ? 'nss' : 'pam')
        endif
endforeach

# We need the actual targets to build aliases
if nss_targets.length() > 0
        alias_target('nss', nss_targets)
endif
if pam_targets.length() > 0
        alias_target('pam', pam_targets)
endif

#####################################################################

ukify_depends = []

foreach executable : ['systemd-measure', 'systemd-sbsign', 'systemd-keyutil']
        if executable in executables_by_name
                ukify_depends += [executables_by_name[executable]]
        endif
endforeach

ukify = custom_target(
        input : 'src/ukify/ukify.py',
        output : 'ukify',
        command : [jinja2_cmdline, '@INPUT@', '@OUTPUT@'],
        install : want_ukify,
        install_mode : 'rwxr-xr-x',
        depends : ukify_depends,
        install_dir : bindir)
if want_ukify
        public_programs += ukify

        # symlink for backwards compatibility after rename
        install_symlink('ukify',
                        pointing_to : libexecdir_to_bin / 'ukify',
                        install_dir : libexecdir)
endif

#####################################################################

mkosi = find_program('mkosi', required : false)
mkosi_depends = public_programs

foreach executable : ['systemd-journal-remote', 'systemd-sbsign', 'systemd-keyutil']
        if executable in executables_by_name
                mkosi_depends += [executables_by_name[executable]]
        endif
endforeach

if mkosi.found()
        custom_target(
                build_always_stale : true,
                build_by_default: false,
                console : true,
                output : 'mkosi',
                command : [
                        mkosi,
                        '--directory', meson.current_source_dir(),
                        '--output-dir', meson.current_build_dir() / 'mkosi.output',
                        '--cache-dir', meson.current_build_dir() / 'mkosi.cache',
                        '--build-dir', meson.current_build_dir() / 'mkosi.builddir',
                        '--extra-search-path', meson.current_build_dir(),
                        '--force',
                        'build',
                ],
                depends : mkosi_depends,
        )
endif

if install_tests
        install_subdir('mkosi',
                       install_dir : testsdir,
                       exclude_files : ['mkosi.local.conf', 'mkosi.key', 'mkosi.crt'],
                       exclude_directories : ['mkosi.local', 'mkosi.tools'])
endif

############################################################

subdir('rules.d')
subdir('test')

#####################################################################

subdir('docs/var-log')
subdir('hostname-wordlist')
subdir('hwdb.d')
subdir('man')
subdir('modprobe.d')
subdir('network')
subdir('presets')
subdir('profile.d')
subdir('shell-completion/bash')
subdir('shell-completion/zsh')
subdir('sysctl.d')
subdir('sysusers.d')
subdir('tmpfiles.d')

install_subdir('factory/etc',
               install_dir : factorydir)
subdir('factory/templates')

if install_sysconfdir
        install_data('xorg/50-systemd-user.sh',
                     install_dir : xinitrcdir)
endif
install_data('LICENSE.GPL2',
             'LICENSE.LGPL2.1',
             'NEWS',
             'README',
             'docs/ENVIRONMENT.md',
             'docs/TRANSIENT-SETTINGS.md',
             'docs/UIDS-GIDS.md',
             install_dir : docdir)

install_subdir('LICENSES',
               install_dir : docdir)

#####################################################################

# Ensure that changes to the docs/ directory do not break the
# basic Github pages build. But only run it in developer mode,
# as it might be fragile due to changes in the tooling, and it is
# not generally useful for users.
jekyll = find_program('jekyll', required : false)
if get_option('mode') == 'developer' and want_tests != 'false' and jekyll.found()
        test('github-pages',
             jekyll,
             suite : 'dist',
             args : ['build',
                     '--source', meson.project_source_root() / 'docs',
                     '--destination', meson.project_build_root() / '_site'])
endif

#####################################################################

foreach exec : public_programs
        name = fs.name(exec.full_path())
        if want_tests != 'false'
                test('check-version-' + name,
                     check_version_sh,
                     suite : 'dist',
                     args : [exec.full_path(),
                             project_major_version],
                     depends: exec)

                if not name.endswith('.standalone')
                        test('check-help-' + name,
                             check_help_sh,
                             suite : 'dist',
                             args : exec.full_path(),
                             depends: exec)
                endif
        endif
endforeach

#####################################################################

if git.found()
        all_files = run_command(
                env, '-u', 'GIT_WORK_TREE',
                git, '--git-dir=@0@/.git'.format(meson.project_source_root()),
                     'ls-files', ':/*.[ch]', ':/*.cc',
                check : false)
        if all_files.returncode() == 0
                existing_files = []
                foreach f : all_files.stdout().split()
                        if fs.exists(f)
                                existing_files += f
                        endif
                endforeach
                all_files = files(existing_files)

                custom_target(
                        output : 'tags',
                        command : [env, 'etags', '-o', '@0@/TAGS'.format(meson.project_source_root())] + all_files)
                run_target(
                        'ctags',
                        command : [env, 'ctags', '--tag-relative=never', '-o', '@0@/tags'.format(meson.project_source_root())] + all_files)
        endif

        ####################################################

        run_target(
                'git-contrib',
                command : git_contrib_sh)

        ####################################################

        git_head = run_command(
                git, '--git-dir=@0@/.git'.format(meson.project_source_root()),
                     'rev-parse', 'HEAD',
                check : false).stdout().strip()
        git_head_short = run_command(
                git, '--git-dir=@0@/.git'.format(meson.project_source_root()),
                     'rev-parse', '--short=7', 'HEAD',
                check : false).stdout().strip()

        run_target(
                'git-snapshot',
                command : [git, 'archive',
                           '-o', '@0@/systemd-@1@.tar.gz'.format(meson.project_source_root(),
                                                                 git_head_short),
                           '--prefix', f'systemd-@git_head@/',
                           'HEAD'])
endif

#####################################################################

alias_target('gensources', generated_sources)

clang_tidy = find_program('clang-tidy', required : false)
if meson.version().version_compare('>=1.4.0')
        uniq = {}

        foreach source : sources
                if source.full_path() in uniq
                        continue
                endif
                uniq += {source.full_path(): source}
        endforeach

        # TODO: Use uniq.values() when we can rely on meson 1.10.0.
        sources = []
        foreach path, file : uniq
                sources += [file]
        endforeach

        foreach source : sources
                if systemd_headers.contains(source)
                        continue
                endif

                if not source.full_path().endswith('.c') and not source.full_path().endswith('.h')
                        continue
                endif

                inputs = [source]

                header = source.full_path().replace('.c', '.h')
                if fs.exists(header) and header != source.full_path() and header != libudev_h_path
                        inputs += header
                endif

                foreach input : inputs
                        if clang_tidy.found()
                                test(
                                        'clang-tidy-@0@'.format(fs.name(input)),
                                        clang_tidy,
                                        args : ['-p', meson.project_build_root(), input],
                                        suite : 'clang-tidy',
                                        depends : generated_sources,
                                )
                        endif
                endforeach
        endforeach
endif

spatch = find_program('spatch', required : false)
if spatch.found()
        coccinelle_exclude = [
                # libc/ has no assert() or systemd-headers so leave it
                'src/libc/',
                # test/ has some deliberate wonky pointers, just leave excluded
                'src/test/',
        ]

        coccinelle_src_dirs = run_command(
                'sh', '-c', 'printf "%s\n" src/*/',
                check : true,
        ).stdout().strip().split('\n')

        foreach dir : coccinelle_src_dirs
                if dir not in coccinelle_exclude
                        test(
                                'coccinelle-@0@'.format(fs.name(dir.strip('/'))),
                                check_coccinelle_sh,
                                args : [meson.project_source_root() / dir,
                                        meson.project_source_root() / 'coccinelle'],
                                suite : 'coccinelle',
                                timeout : 300,
                        )
                endif
        endforeach
endif

symbol_analysis_exes = []
foreach name, exe : executables_by_name
        symbol_analysis_exes += exe
endforeach

test(
        'libshared-unused-symbols',
        find_unused_library_symbols_py,
        suite : 'unused-symbols',
        args : [libshared, libcore] + nss_targets + pam_targets + symbol_analysis_exes,
)

run_target(
        'check-api-docs',
        depends : [man, libsystemd, libudev],
        command : [check_api_docs_sh,
                   libsystemd.full_path(),
                   libudev.full_path()])

alias_target('man', man)
alias_target('html', html)
alias_target('update-dbus-docs', update_dbus_docs)
alias_target('update-man-rules', update_man_rules)

if not meson.is_cross_build()
        custom_target(
                'export-dbus-interfaces',
                output : fs.name(dbus_interfaces_dir),
                install : dbus_interfaces_dir != 'no',
                install_dir : fs.parent(dbus_interfaces_dir),
                command : [dbus_exporter_py, '@OUTPUT@', dbus_programs])
endif

custom_target(
        output : 'installed-unit-files.txt',
        capture : true,
        install : want_tests != 'no' and install_tests,
        install_dir : testdata_dir,
        command : [meson_extract_unit_files_py,
                   meson.project_build_root()])

#####################################################################

udev_targets = []
foreach bin : udev_binaries
        udev_targets += executables_by_name.get(bin, [])
endforeach
alias_target('udev', buildable_rules, udev_targets, udev_units)

if conf.get('ENABLE_HWDB') == 1
        alias_target('hwdb', auto_suspend_rules, executables_by_name.get('systemd-hwdb'), hwdb_units)
endif

alt_time_epoch = run_command('date', '-Is', '-u', '-d', f'@@time_epoch@', check : false)
if alt_time_epoch.returncode() != 0
        # If the above fails, maybe the date(1) uses BSD-style syntax
        alt_time_epoch = run_command('date', '-Iseconds', '-u', '-r', f'@time_epoch@', check : true)
endif
alt_time_epoch = alt_time_epoch.stdout().strip()

summary({
        'experimental features'                     : experimental,
        'split bin-sbin'                            : split_bin,
        'prefix directory'                          : prefixdir,
        'sysconf directory'                         : sysconfdir,
        'include directory'                         : includedir,
        'lib directory'                             : libdir,
        'PAM modules directory'                     : pamlibdir,
        'PAM configuration directory'               : pamconfdir,
        'ssh server configuration directory'        : sshdconfdir,
        'ssh server privilege separation directory' : sshdprivsepdir,
        'ssh client configuration directory'        : sshconfdir,
        'libcryptsetup plugins directory'           : libcryptsetup_plugins_dir,
        'Shell profile directory'                   : shellprofiledir,
        'RPM macros directory'                      : rpmmacrosdir,
        'modprobe.d directory'                      : modprobedir,
        'D-Bus policy directory'                    : dbuspolicydir,
        'D-Bus session directory'                   : dbussessionservicedir,
        'D-Bus system directory'                    : dbussystemservicedir,
        'D-Bus interfaces directory'                : dbus_interfaces_dir,
        'bash completions directory'                : bashcompletiondir,
        'zsh completions directory'                 : zshcompletiondir,
        'private shared lib version tag'            : shared_lib_tag,
        'debug shell'                               : '@0@ @ @1@'.format(get_option('debug-shell'),
                                                                         get_option('debug-tty')),
        'system UIDs'                               : '<=@0@ (alloc >=@1@)'.format(conf.get('SYSTEM_UID_MAX'),
                                                      conf.get('SYSTEM_ALLOC_UID_MIN')),
        'system GIDs'                               : '<=@0@ (alloc >=@1@)'.format(conf.get('SYSTEM_GID_MAX'),
                                                      conf.get('SYSTEM_ALLOC_GID_MIN')),
        'greeter UIDs'                              : f'@greeter_uid_min@…@greeter_uid_max@',
        'dynamic UIDs'                              : f'@dynamic_uid_min@…@dynamic_uid_max@',
        'container UID bases'                       : f'@container_uid_base_min@…@container_uid_base_max@',
        'foreign UID base'                          : f'@foreign_uid_base@',
        'static UID/GID allocations'                : ' '.join(static_ugids),
        '/dev/kvm access mode'                      : get_option('dev-kvm-mode'),
        'render group access mode'                  : get_option('group-render-mode'),
        'certificate root directory'                : get_option('certificate-root'),
        'support URL'                               : support_url,
        'nobody user name'                          : nobody_user,
        'nobody group name'                         : nobody_group,
        'fallback hostname'                         : get_option('fallback-hostname'),
        'fallback default target'                   : fallback_default_target,
        'default compression method'                : compression,
        'default DNSSEC mode'                       : default_dnssec,
        'default DNS-over-TLS mode'                 : default_dns_over_tls,
        'default mDNS mode'                         : default_mdns,
        'default LLMNR mode'                        : default_llmnr,
        'default DNS servers'                       : dns_servers.split(' '),
        'default NTP servers'                       : ntp_servers.split(' '),
        'default net.naming_scheme= value'          : default_net_naming_scheme,
        'default KillUserProcesses= value'          : kill_user_processes,
        'default locale'                            : default_locale,
        'default nspawn locale'                     : nspawn_locale,
        'default status unit format'                : status_unit_format_default,
        'default journal storage mode'              : conf.get('JOURNAL_STORAGE_DEFAULT'),
        'default user $PATH'                        : default_user_path != '' ? default_user_path : '(same as system services)',
        'systemd service watchdog'                  : service_watchdog == '' ? 'disabled' : service_watchdog,
        'time epoch'                                : f'@time_epoch@ (@alt_time_epoch@)',
        'TPM2 nvpcr base'                           : run_command(sh, '-c', 'printf 0x%x @0@'.format(get_option('tpm2-nvpcr-base')), check : true).stdout(),
        'IMDS networking'                           : get_option('imds-network'),
})

# TODO:
# CFLAGS:   ${OUR_CFLAGS} ${CFLAGS}
# CPPFLAGS: ${OUR_CPPFLAGS} ${CPPFLAGS}
# LDFLAGS:  ${OUR_LDFLAGS} ${LDFLAGS}

found = []
missing = []

foreach tuple : [
        # dependencies
        ['ACL'],
        ['AUDIT'],
        ['AppArmor'],
        ['IMA'],
        ['IPE'],
        ['PAM'],
        ['SECCOMP'],
        ['SELinux'],
        ['SMACK'],
        ['blkid'],
        ['elfutils'],
        ['gcrypt'],
        ['gnutls'],
        ['libarchive'],
        ['libbpf'],
        ['libcrypt'],
        ['libcryptsetup'],
        ['libcryptsetup-plugins'],
        ['libcurl'],
        ['libfdisk'],
        ['libfido2'],
        ['libidn2'],
        ['microhttpd'],
        ['openssl'],
        ['p11kit'],
        ['passwdqc'],
        ['pcre2'],
        ['pwquality'],
        ['qrencode'],
        ['tpm2'],
        ['xkbcommon'],

        # compression libs
        ['zstd'],
        ['lz4'],
        ['xz'],
        ['zlib'],
        ['bzip2'],

        # components
        ['backlight'],
        ['binfmt'],
        ['bootloader'],
        ['bpf-framework',          conf.get('BPF_FRAMEWORK') == 1],
        ['coredump'],
        ['efi'],
        ['environment.d'],
        ['firstboot'],
        ['hibernate'],
        ['homed'],
        ['hostnamed'],
        ['hwdb'],
        ['imds'],
        ['importd'],
        ['initrd'],
        ['kernel-install'],
        ['localed'],
        ['logind'],
        ['machined'],
        ['measure'],
        ['mountfsd'],
        ['networkd'],
        ['nspawn'],
        ['nsresourced'],
        ['nss-myhostname'],
        ['nss-mymachines'],
        ['nss-resolve'],
        ['nss-systemd'],
        ['oomd'],
        ['portabled'],
        ['pstore'],
        ['quotacheck'],
        ['randomseed'],
        ['repart'],
        ['report'],
        ['resolve'],
        ['rfkill'],
        ['sysext'],
        ['sysinstall'],
        ['systemd-analyze',        conf.get('ENABLE_ANALYZE') == 1],
        ['sysupdate'],
        ['sysupdated'],
        ['sysusers'],
        ['storagetm'],
        ['timedated'],
        ['timesyncd'],
        ['tmpfiles'],
        ['userdb'],
        ['vconsole'],
        ['vmspawn'],
        ['xdg-autostart'],

        # optional features
        ['dmi'],
        ['DNS-over-TLS'],
        ['idn'],
        ['polkit'],
        ['legacy-pkla',            install_polkit_pkla],
        ['kmod'],
        ['xenctrl'],
        ['dbus'],
        ['glib'],
        ['tpm'],
        ['man pages',              want_man],
        ['html pages',             want_html],
        ['man page indices',       want_man and have_lxml],
        ['compat-mutable-uid-boundaries'],
        ['compat-sysv-interfaces'],
        ['utmp'],
        ['ldconfig'],
        ['adm group',              get_option('adm-group')],
        ['wheel group',            get_option('wheel-group')],
        ['gshadow'],
        ['debug hashmap'],
        ['debug mmap cache'],
        ['debug siphash'],
        ['trace logging',          conf.get('LOG_TRACE') == 1],
        ['slow tests',             want_slow_tests],
        ['fuzz tests',             want_fuzz_tests],
        ['install tests',          install_tests],
        ['link-udev-shared',       get_option('link-udev-shared')],
        ['link-systemctl-shared',  get_option('link-systemctl-shared')],
        ['link-networkd-shared',   get_option('link-networkd-shared')],
        ['link-timesyncd-shared',  get_option('link-timesyncd-shared')],
        ['link-journalctl-shared', get_option('link-journalctl-shared')],
        ['link-boot-shared',       get_option('link-boot-shared')],
        ['link-portabled-shared',  get_option('link-portabled-shared')],
        ['first-boot-full-preset'],
        ['fexecve'],
        ['coverage',               get_option('b_coverage')],
]

        if tuple.length() >= 2
                cond = tuple[1]
        else
                ident1 = 'HAVE_' + tuple[0].underscorify().to_upper()
                ident2 = 'ENABLE_' + tuple[0].underscorify().to_upper()
                cond = conf.get(ident1, 0) == 1 or conf.get(ident2, 0) == 1
        endif
        if cond
                found += tuple[0]
        else
                missing += tuple[0]
        endif
endforeach

if static_libsystemd == 'false'
        missing += 'static-libsystemd'
else
        found += f'static-libsystemd(@static_libsystemd@)'
endif

if static_libudev == 'false'
        missing += 'static-libudev'
else
        found += f'static-libudev(@static_libudev@)'
endif

summary({
                'enabled'  : ', '.join(found),
                'disabled' : ', '.join(missing)
        },
        section : 'Features')