| #!/bin/sh -e |
| # |
| # Configuration for QEMU based on CentOS Stream 8 x86_64 builds |
| # |
| # The "configure" command line is based on: |
| # |
| # https://git.centos.org/rpms/qemu-kvm/blob/c8s-stream-rhel/f/SPECS/qemu-kvm.spec |
| # |
| # But, because the SPEC file contains a number of conditionals and |
| # variable and expansions only available at RPM build time, this version |
| # was initially generated from an actual RPM build on an x86_64 platform. |
| # |
| # From that initial version, options that are required or are a |
| # consequence of non-upstream patches have been adapted. One example |
| # is "--without-default-devices" which is *not* present here, given |
| # that patches adding downstream specific devices are not available. |
| # |
| ../configure \ |
| --python=/usr/bin/python3.8 \ |
| --prefix="/usr" \ |
| --libdir="/usr/lib64" \ |
| --datadir="/usr/share" \ |
| --sysconfdir="/etc" \ |
| --interp-prefix=/usr/qemu-%M \ |
| --localstatedir="/var" \ |
| --docdir="/usr/share/doc" \ |
| --libexecdir="/usr/libexec" \ |
| --extra-ldflags="-Wl,--build-id -Wl,-z,relro -Wl,-z,now" \ |
| --extra-cflags="-O2 -g -pipe -Wall -Werror=format-security -Wp,-D_FORTIFY_SOURCE=2 -Wp,-D_GLIBCXX_ASSERTIONS -fexceptions -fstack-protector-strong -grecord-gcc-switches -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -m64 -mtune=generic -fasynchronous-unwind-tables -fstack-clash-protection -fcf-protection" \ |
| --with-suffix="qemu-kvm" \ |
| --firmwarepath=/usr/share/qemu-firmware \ |
| --target-list="x86_64-softmmu" \ |
| --block-drv-rw-whitelist="qcow2,raw,file,host_device,nbd,iscsi,rbd,blkdebug,luks,null-co,nvme,copy-on-read,throttle,gluster" \ |
| --audio-drv-list="" \ |
| --block-drv-ro-whitelist="vmdk,vhdx,vpc,https,ssh" \ |
| --with-coroutine=ucontext \ |
| --tls-priority=@QEMU,SYSTEM \ |
| --disable-af-xdp \ |
| --disable-attr \ |
| --disable-auth-pam \ |
| --disable-avx2 \ |
| --disable-avx512f \ |
| --disable-bochs \ |
| --disable-bpf \ |
| --disable-brlapi \ |
| --disable-bsd-user \ |
| --disable-bzip2 \ |
| --disable-cap-ng \ |
| --disable-capstone \ |
| --disable-cfi \ |
| --disable-cfi-debug \ |
| --disable-cloop \ |
| --disable-cocoa \ |
| --disable-coroutine-pool \ |
| --disable-crypto-afalg \ |
| --disable-curl \ |
| --disable-curses \ |
| --disable-debug-info \ |
| --disable-debug-mutex \ |
| --disable-debug-tcg \ |
| --disable-dmg \ |
| --disable-docs \ |
| --disable-fuse \ |
| --disable-fuse-lseek \ |
| --disable-gcrypt \ |
| --disable-gio \ |
| --disable-glusterfs \ |
| --disable-gnutls \ |
| --disable-gtk \ |
| --disable-guest-agent \ |
| --disable-guest-agent-msi \ |
| --disable-hvf \ |
| --disable-iconv \ |
| --disable-kvm \ |
| --disable-libdaxctl \ |
| --disable-libiscsi \ |
| --disable-libnfs \ |
| --disable-libpmem \ |
| --disable-libssh \ |
| --disable-libudev \ |
| --disable-libusb \ |
| --disable-linux-aio \ |
| --disable-linux-io-uring \ |
| --disable-linux-user \ |
| --disable-live-block-migration \ |
| --disable-lto \ |
| --disable-lzfse \ |
| --disable-lzo \ |
| --disable-malloc-trim \ |
| --disable-membarrier \ |
| --disable-modules \ |
| --disable-module-upgrades \ |
| --disable-mpath \ |
| --disable-multiprocess \ |
| --disable-netmap \ |
| --disable-nettle \ |
| --disable-numa \ |
| --disable-nvmm \ |
| --disable-opengl \ |
| --disable-parallels \ |
| --disable-pie \ |
| --disable-pvrdma \ |
| --disable-qcow1 \ |
| --disable-qed \ |
| --disable-qom-cast-debug \ |
| --disable-rbd \ |
| --disable-rdma \ |
| --disable-replication \ |
| --disable-rng-none \ |
| --disable-safe-stack \ |
| --disable-sanitizers \ |
| --disable-sdl \ |
| --disable-sdl-image \ |
| --disable-seccomp \ |
| --disable-slirp-smbd \ |
| --disable-smartcard \ |
| --disable-snappy \ |
| --disable-sparse \ |
| --disable-spice \ |
| --disable-strip \ |
| --disable-system \ |
| --disable-tcg \ |
| --disable-tools \ |
| --disable-tpm \ |
| --disable-u2f \ |
| --disable-usb-redir \ |
| --disable-user \ |
| --disable-vde \ |
| --disable-vdi \ |
| --disable-vhost-crypto \ |
| --disable-vhost-kernel \ |
| --disable-vhost-net \ |
| --disable-vhost-user \ |
| --disable-vhost-user-blk-server \ |
| --disable-vhost-vdpa \ |
| --disable-virglrenderer \ |
| --disable-virtfs \ |
| --disable-vnc \ |
| --disable-vnc-jpeg \ |
| --disable-png \ |
| --disable-vnc-sasl \ |
| --disable-vte \ |
| --disable-vvfat \ |
| --disable-werror \ |
| --disable-whpx \ |
| --disable-xen \ |
| --disable-xen-pci-passthrough \ |
| --disable-xkbcommon \ |
| --disable-zstd \ |
| --enable-attr \ |
| --enable-avx2 \ |
| --enable-cap-ng \ |
| --enable-capstone \ |
| --enable-coroutine-pool \ |
| --enable-curl \ |
| --enable-debug-info \ |
| --enable-docs \ |
| --enable-fdt \ |
| --enable-gcrypt \ |
| --enable-glusterfs \ |
| --enable-gnutls \ |
| --enable-guest-agent \ |
| --enable-iconv \ |
| --enable-kvm \ |
| --enable-libiscsi \ |
| --enable-libpmem \ |
| --enable-libssh \ |
| --enable-libusb \ |
| --enable-libudev \ |
| --enable-linux-aio \ |
| --enable-lzo \ |
| --enable-malloc-trim \ |
| --enable-modules \ |
| --enable-mpath \ |
| --enable-numa \ |
| --enable-opengl \ |
| --enable-pie \ |
| --enable-rbd \ |
| --enable-rdma \ |
| --enable-seccomp \ |
| --enable-snappy \ |
| --enable-smartcard \ |
| --enable-spice \ |
| --enable-system \ |
| --enable-tcg \ |
| --enable-tools \ |
| --enable-tpm \ |
| --enable-trace-backends=dtrace \ |
| --enable-usb-redir \ |
| --enable-vhost-kernel \ |
| --enable-vhost-net \ |
| --enable-vhost-user \ |
| --enable-vhost-user-blk-server \ |
| --enable-vhost-vdpa \ |
| --enable-vnc \ |
| --enable-png \ |
| --enable-vnc-sasl \ |
| --enable-werror \ |
| --enable-xkbcommon |