ouroboros/cmake, branch testing

irmd: Allow direct rbuff between local processes

2026-02-22T15:02:16+00:00

This allows bypassing the IPCP for local processes that share the same packet pool, lowering latency between processes to comparable levels as Unix sockets (RTT in the order of a microsecond). For local processes, no IPCPs are needed: $ irm b prog oping n oping $ oping -l Ouroboros ping server started. New flow 64. Received 64 bytes on fd 64. The direct IPC can be disabled with the DISABLE_DIRECT_IPC build flag. Note that this is needed for rumba 'local' experiments to emulate network topologies. Without this flag all processes will just communicate directly. Signed-off-by: Dimitri Staessens Signed-off-by: Sander Vrijders

build: Automatically parse version from tag

2026-02-18T07:02:26+00:00

The build will now parse tags so the git tag is now the single source of truth for a version. We do not need to manually maintain the version header. The VERSION file uses git's export-subst feature. When git archive creates a snapshot (e.g. cgit), git substitutes the $Format:...$ placeholder with the output of git describe, embedding the version string directly in the archive. This requires the export-subst attribute to be set for the VERSION file in the repository's .gitattributes. The version is resolved in the following order: - git describe (inside a git repository with tags) - the VERSION file (archives/snapshots) - 0.0.0 (fallback) The build system will warn when it can't set a correct version, such as in a git repo without tags, or an archive without VERSION. Signed-off-by: Dimitri Staessens Signed-off-by: Sander Vrijders

build: Add a version target

2026-02-18T07:02:21+00:00

This adds a make version target, that will print the version from the build directory without having to compile and run irmd --version. [100%] Updating git hash in version.h [100%] Built target version_header Ouroboros 0.22.0-37-ga3a5da14-dirty [100%] Built target version Signed-off-by: Dimitri Staessens Signed-off-by: Sander Vrijders

build: Add git hash to version string

2026-02-18T07:02:16+00:00

Embed git commit hash into version.h and irmd --version output using git describe. Regenerated at build time to stay current across commits. Ouroboros version MAJOR.MINOR.PATCH (TAG-COMMITS-GHASH-dirty) Example for dirty work tree (uncommitted changes): $ irmd --version Ouroboros version 0.22.0 (0.22.0-36-g86dba544-dirty) Example after commit: $ sudo irmd --version Ouroboros version 0.22.0-37-g55fa9445 Officical release (on tag): Ouroboros version 0.22.0 Signed-off-by: Dimitri Staessens Signed-off-by: Sander Vrijders

build: Set FUSE_PREFIX in fuse.cmake

2026-02-18T06:55:59+00:00

The FUSE_PREFIX was set in global.cmake, but before HAVE_FUSE was defined. The FUSE_PREFIX should be set in fuse.cmake. Signed-off-by: Dimitri Staessens Signed-off-by: Sander Vrijders

lib: Add SLH-DSA tests and per-algorithm PQC gating

2026-02-18T06:53:35+00:00

This replaces the single HAVE_OPENSSL_PQC/DISABLE_PQC with per-algorithm CMake variables (ML-KEM, ML-DSA, SLH-DSA), gated by the OpenSSL versions: ML-KEM and ML-DSA require >= 3.4, SLH-DSA >= 3.5. SLH-DSA was already working, but now added explicit authentication tests for it with a full certificate chain (root CA, intermediate CA, server) to show full support. Rename PQC test files and cert headers to use algorithm-specific names (ml_kem, ml_dsa, slh_dsa) and move cert headers to include/test/certs/. Signed-off-by: Dimitri Staessens Signed-off-by: Sander Vrijders

build: Fix invisible IPCP_TARGET variables

2026-02-13T08:22:29+00:00

The IPCP_*_TARGET variables (e.g., set(IPCP_LOCAL_TARGET ipcpd-local)) were defined locally in each IPCP's CMakeLists.txt (e.g., CMakeLists.txt), but the configure_file() that substitutes @IPCP_LOCAL_TARGET@ into config.h.in runs in a sibling scope that is processed before ipcpd. Since CMake variables don't propagate between sibling directory scopes, all @IPCP_*_TARGET@ substituted to empty strings, resulting in IPCP_LOCAL_EXEC "". Moved the IPCP_*_TARGET definitions into the cmake/config/ipcp/*.cmake files so they are known when generating config.h. Signed-off-by: Dimitri Staessens Signed-off-by: Sander Vrijders

build: Fix clobbering of FUSE_PREFIX

2026-02-13T08:22:29+00:00

pkg_check_modules(FUSE ...) in fuse.cmake tells CMake's pkg-config module to use FUSE as the variable prefix. pkg-config then populates FUSE_PREFIX with the install prefix of libfuse (i.e., usr). This overwrote the FUSE_PREFIX cache variable set to /tmp/ouroboros in global.cmake. IRMd was calling mkdir("/usr", 0777) on startup and rmdir("/usr") on shutdown. The rmdir only fails because usr isn't empty — if it ever were (e.g., in a minimal container), it would deleted /usr. The fix renames the pkg-config prefix from FUSE to FUSE_PKG, so pkg-config populates FUSE_PKG_PREFIX (harmless) instead of clobbering FUSE_PREFIX. Signed-off-by: Dimitri Staessens Signed-off-by: Sander Vrijders

build: Fix assertion tests core dump state message

2026-02-13T08:22:29+00:00

The message for enabled/disabled state of the assertion tests core dumping was reversed. Signed-off-by: Dimitri Staessens Signed-off-by: Sander Vrijders

build: Refactor CMake back to in-tree CMakeLists

2026-02-13T08:22:29+00:00

This moves the build definitions back to src/ subdirectories (CMakeLists.txt per component). Configuration and dependencies are kept out of tree. Configuration options are bundled into cmake/config/ modules. Dependencies are grouped by component (system/, crypt/, eth/, coverage/, etc.). It now consistently uses target-based commands (target_include_directories, target_link_libraries) instead of global include_directories(). Proper PRIVATE/PUBLIC visibility for executable link libraries. CONFIG_OUROBOROS_DEBUG now properly set based on being a valid debug config (not just checking the string name). It also adds OuroborosTargets export for find_package() support and CMake package config files (OuroborosConfig.cmake) for easier integration with CMake projects. The build logic now follows more idiomatic CMake practices with configuration separated from target definitions. Signed-off-by: Dimitri Staessens Signed-off-by: Sander Vrijders