chore(core): build nftables

Signed-off-by: Daniil Antoshin <daniil.antoshin@flant.com>

Author: danilrwx

component_versions/version_map.yml

@@ -4,3 +4,4 @@ firmware:
   edk2: stable202411
 package:
   swtpm: 0.10.0
+  nftables: 1.1.3

images/packages/binaries/nftables/werf.inc.yaml

@@ -0,0 +1,75 @@
+---
+image: {{ $.ImageType }}/{{ $.ImageName }}
+final: false
+fromImage: builder/scratch
+import:
+- image: {{ $.ImageType }}/{{ $.ImageName }}-builder
+  add: /out
+  to: /nftables
+  before: setup
+
+---
+{{- $version := get $.Package $.ImageName }}
+{{- $gitRepoUrl := "nftables.git" }}
+
+{{- $name := print $.ImageName "-dependencies" -}}
+{{- define "$name" -}}
+packages:
+- gcc
+- git pkg-config trousers
+- automake autoconf make makeinfo libtool
+- flex bison asciidoc-a2x
+- tree
+{{- end -}}
+
+{{ $builderDependencies := include "$name" . | fromYaml }}
+
+image: {{ $.ImageType }}/{{ $.ImageName }}-builder
+final: false
+fromImage: builder/alt
+secrets:
+- id: SOURCE_REPO
+  value: {{ $.SOURCE_REPO_GIT }}
+shell:
+  beforeInstall:
+    - |
+      apt-get update && apt-get install -y \
+        {{ $builderDependencies.packages | join " " }}
+
+      # libtpms libtpms-devel requares version 0.10 that in sisyphus repo
+      cat >/etc/apt/sources.list.d/alt-sisyphus.list<<EOF
+      rpm [alt] http://ftp.altlinux.org/pub/distributions/ALTLinux/Sisyphus x86_64 classic
+      rpm [alt] http://ftp.altlinux.org/pub/distributions/ALTLinux/Sisyphus noarch classic
+      EOF
+      apt-get update
+      apt-get install -y libmnl-devel libnftnl-devel libgmp-devel libreadline-devel libjansson-devel libedit-devel
+      rm -f /etc/apt/sources.list.d/alt-sisyphus.list
+
+      apt-get update
+      apt-get clean
+      rm --recursive --force /var/lib/apt/lists/ftp.altlinux.org* /var/cache/apt/*.bin
+
+  install:
+    - |
+      OUTDIR=/out
+      mkdir -p ~/.ssh && echo "StrictHostKeyChecking accept-new" > ~/.ssh/config
+
+      git clone --depth=1 $(cat /run/secrets/SOURCE_REPO)/{{ $gitRepoUrl }} --branch v{{ $version }} /src
+      cd /src
+
+      ./autogen.sh
+
+      ./configure --prefix=/usr --libdir=/usr/lib64 --enable-python --with-python-bin=/usr/bin/python3 --with-json --with-cli=readline
+
+      make -j$(nproc)
+
+      make DESTDIR=$OUTDIR install
+
+      strip $OUTDIR/usr/sbin/nft
+
+      # We don't need man, test and samples files
+      rm -rf $OUTDIR/usr/include
+      rm -rf $OUTDIR/usr/share
+      rm -rf $OUTDIR/usr/lib64/pkgconfig
+
+      tree $OUTDIR

images/virt-launcher/werf.inc.yaml

@@ -125,7 +125,6 @@ packages:
   - hwclock
   - iptables
   - libffi8
-  - nftables
   - numactl
   - openssl
   - passt
@@ -242,6 +241,11 @@ import:
   to: /
   before: install
 
+- image: packages/binaries/nftables
+  add: /nftables
+  to: /nftables
+  before: install
+
 - image: tools/coreutils
   add: /
   to: /relocate
@@ -263,7 +267,7 @@ shell:
     apt-get update && apt-get install -y {{ $virtLauncherDependencies.libs | join " " }} {{ $virtLauncherDependencies.packages | join " " }}
 
     # libtpms libtpms-devel require version 0.10 that in sisyphus repo
-    cat >/etc/apt/sources.list.d/alt-sisyphus.list<<EOF 
+    cat >/etc/apt/sources.list.d/alt-sisyphus.list<<EOF
     rpm [alt] http://ftp.altlinux.org/pub/distributions/ALTLinux/Sisyphus x86_64 classic
     rpm [alt] http://ftp.altlinux.org/pub/distributions/ALTLinux/Sisyphus noarch classic
     EOF
@@ -289,20 +293,22 @@ shell:
     echo "find and copy additional libs"
     FILES=$(find /VBINS/usr/bin/ -type f)
     FILES+=" $(find /VBINS/usr/sbin/ -type f)"
-    
+
     LIBS="/usr/lib64/libbsd.so* /usr/lib64/libnbd.so* /usr/lib64/libfuse3.so*"
     LIBS+=" /usr/lib64/libjson-c.so* /usr/lib64/libssh.so* /usr/lib64/libssh2.so*"
     LIBS+=" /usr/lib64/libtpms* /usr/lib64/libjson* /usr/lib64/libfuse*"
     LIBS+=" /usr/lib64/libxml2.so* /usr/lib64/libgcc_s*"
 
     echo "Relocate additional libs for files in /VBINS"
     ./relocate_binaries.sh -i "$FILES" -o /VBINS
-    
+
     echo "Relocate additional libs to /VBINS"
     ./relocate_binaries.sh -i "$LIBS" -o /VBINS
 
     cp -a /VBINS/. /relocate
 
+    cp -a /nftables/. /
+
     echo "Show libs after relocation in /relocate/usr/lib64"
     ls -la /relocate/usr/lib64
     # Cleanup
@@ -382,7 +388,7 @@ shell:
 
     echo "List files in /relocate/usr/local/lib64"
     ls -la usr/local/lib64
-  
+
   - |
     cd /relocate
 
@@ -455,7 +461,7 @@ shell:
     apt-get update && apt-get install --yes gcc musl-dev musl-tools
     apt-get clean
   install:
-  - |    
+  - |
     echo "Building simple app that prints I'am temp pod"
     mkdir -p /bins
     musl-gcc -static -Os -o /bins/temp_pod temp_pod.c