aboutsummaryrefslogtreecommitdiff
path: root/battering/packages/opensnitch.scm
diff options
context:
space:
mode:
authorHanketsu <hanketsu@egregore.fun>2025-02-01 00:34:13 +0100
committerHanketsu <hanketsu@egregore.fun>2025-06-13 00:04:26 +0200
commit85064cd6d142fb5da58af7fa621831aec5b07948 (patch)
treec9f2272a3851e7e30a21b82ac16f5b01216ff562 /battering/packages/opensnitch.scm
parent40ac535e378f19525335ed3d50bc519155552f61 (diff)
battering: Add opensnitch-ebpf-module.
* battering/packages/opensnitch.scm (opensnitch-ebpf-module): New variable.
Diffstat (limited to 'battering/packages/opensnitch.scm')
-rw-r--r--battering/packages/opensnitch.scm37
1 files changed, 37 insertions, 0 deletions
diff --git a/battering/packages/opensnitch.scm b/battering/packages/opensnitch.scm
index bcad57a..f607d14 100644
--- a/battering/packages/opensnitch.scm
+++ b/battering/packages/opensnitch.scm
@@ -100,3 +100,40 @@
(begin
(copy-recursively "." #$output))))))
((#:allowed-references _) #f)))))
+
+(define-public opensnitch-ebpf-module
+ (package
+ (name "opensnitch-ebpf-module")
+ (version "1.6.7")
+ (source (origin
+ (method git-fetch)
+ (uri (git-reference
+ (url "https://github.com/evilsocket/opensnitch/")
+ (commit (string-append "v" version))))
+ (file-name (git-file-name name version))
+ (sha256
+ (base32 "0990hdc3vn50axyz21v11gwkc2svlwf9wlnf03lwxgnm2q4ha76q"))))
+ (build-system gnu-build-system)
+ (inputs (list linux-libre linux-libre-headers))
+ (native-inputs (list clang tar zstd flex bison))
+ (arguments
+ (list
+ ;; TODO: make it buildable against any kernel?
+ #:make-flags #~(list (format #f "KERNEL_DIR=~a" #$linux-libre-headers-opensnitch))
+ #:tests? #f
+ #:phases #~(modify-phases %standard-phases
+ (add-after 'unpack 'chdir
+ (lambda _
+ (chdir "ebpf_prog/")))
+ (delete 'configure)
+ (replace 'install
+ (lambda _
+ (let ((lib (string-append #$output "/lib")))
+ (install-file "opensnitch-dns.o" lib)
+ (install-file "opensnitch-procs.o" lib)
+ (install-file "opensnitch.o" lib)))))))
+ (home-page "https://github.com/evilsocket/opensnitch/")
+ (synopsis "eBPF module for Opensnitch")
+ (description "This package provides an additional module that allows
+Opensnitch to monitor traffic via eBPF rules.")
+ (license license:gpl3+)))