chore(core): build nftables

Signed-off-by: Daniil Antoshin <daniil.antoshin@flant.com>

Author: danilrwx

component_versions/version_map.yml

@@ -6,3 +6,4 @@ package:
   swtpm: 0.10.0
   xorriso: 1.5.6
   numactl: 2.0.19
+  nftables: 1.1.3

images/packages/binaries/nftables/werf.inc.yaml

@@ -0,0 +1,75 @@
+---
+image: {{ $.ImageType }}/{{ $.ImageName }}
+final: false
+fromImage: builder/scratch
+import:
+- image: {{ $.ImageType }}/{{ $.ImageName }}-builder
+  add: /out
+  to: /nftables
+  before: setup
+
+---
+{{- $version := get $.Package $.ImageName }}
+{{- $gitRepoUrl := "nftables.git" }}
+
+{{- $name := print $.ImageName "-dependencies" -}}
+{{- define "$name" -}}
+packages:
+- gcc
+- git pkg-config trousers
+- automake autoconf make makeinfo libtool
+- flex bison asciidoc-a2x
+- tree
+{{- end -}}
+
+{{ $builderDependencies := include "$name" . | fromYaml }}
+
+image: {{ $.ImageType }}/{{ $.ImageName }}-builder
+final: false
+fromImage: builder/alt
+secrets:
+- id: SOURCE_REPO
+  value: {{ $.SOURCE_REPO_GIT }}
+shell:
+  beforeInstall:
+    - |
+      apt-get update && apt-get install -y \
+        {{ $builderDependencies.packages | join " " }}
+
+      # libtpms libtpms-devel requares version 0.10 that in sisyphus repo
+      cat >/etc/apt/sources.list.d/alt-sisyphus.list<<EOF
+      rpm [alt] http://ftp.altlinux.org/pub/distributions/ALTLinux/Sisyphus x86_64 classic
+      rpm [alt] http://ftp.altlinux.org/pub/distributions/ALTLinux/Sisyphus noarch classic
+      EOF
+      apt-get update
+      apt-get install -y libmnl-devel libnftnl-devel libgmp-devel libreadline-devel libjansson-devel libedit-devel
+      rm -f /etc/apt/sources.list.d/alt-sisyphus.list
+
+      apt-get update
+      apt-get clean
+      rm --recursive --force /var/lib/apt/lists/ftp.altlinux.org* /var/cache/apt/*.bin
+
+  install:
+    - |
+      OUTDIR=/out
+      mkdir -p ~/.ssh && echo "StrictHostKeyChecking accept-new" > ~/.ssh/config
+
+      git clone --depth=1 $(cat /run/secrets/SOURCE_REPO)/{{ $gitRepoUrl }} --branch v{{ $version }} /src
+      cd /src
+
+      ./autogen.sh
+
+      ./configure --prefix=/usr --libdir=/usr/lib64 --enable-python --with-python-bin=/usr/bin/python3 --with-json --with-cli=readline
+
+      make -j$(nproc)
+
+      make DESTDIR=$OUTDIR install
+
+      strip $OUTDIR/usr/sbin/nft
+
+      # We don't need man, test and samples files
+      rm -rf $OUTDIR/usr/include
+      rm -rf $OUTDIR/usr/share
+      rm -rf $OUTDIR/usr/lib64/pkgconfig
+
+      tree $OUTDIR

images/virt-launcher/werf.inc.yaml

@@ -127,6 +127,7 @@ packages:
   - iptables
   - libffi8
   - nftables
+  - numactl
   - openssl
   - passt
   - pcre
@@ -252,6 +253,11 @@ import:
   to: /xorriso
   before: install
 
+- image: packages/binaries/nftables
+  add: /nftables
+  to: /nftables
+  before: install
+
 - image: tools/coreutils
   add: /
   to: /relocate
@@ -316,6 +322,7 @@ shell:
     cp -a /xorriso/. /
     cp -a /swtpm/. /
     cp -a /numactl/. /
+    cp -a /nftables/. /
 
     echo "Show libs after relocation in /relocate/usr/lib64"
     ls -la /relocate/usr/lib64