add meson build system support

meson.build

@@ -0,0 +1,149 @@
+project(
+	'isolate',
+	['c'],
+	default_options: [
+		'c_std=gnu99',
+		'warning_level=3',
+		'buildtype=debugoptimized',
+	],
+	license: 'GPL2-or-later',
+	version: '2.0',
+	meson_version: '>= 1.1',
+)
+
+prefix = get_option('prefix')
+sbindir = prefix / get_option('sbindir')
+sysconfdir = prefix / get_option('sysconfdir')
+box_root = prefix / get_option('sharedstatedir') / get_option('box_root')
+
+conf_file = sysconfdir / 'isolate.conf'
+configure_file(
+	input: 'default.cf.in',
+	output: 'isolate.conf',
+	configuration: {
+		'BOXDIR': box_root,
+	},
+	install: true,
+	install_dir: sysconfdir,
+)
+
+install_emptydir(
+	box_root,
+	install_mode: ['rwxr-xr-x', 0, 0],
+)
+
+# compilation setup
+
+cc = meson.get_compiler('c')
+
+add_project_arguments(
+	cc.get_supported_arguments([
+		'-Wno-parentheses',
+		'-Wno-unused-result',
+		'-Wno-missing-field-initializers',
+		'-Wstrict-prototypes',
+		'-Wmissing-prototypes',
+		'-D_FORTIFY_SOURCE=3',
+		'-D_GNU_SOURCE',
+		'-fstack-protector-strong',
+		'-fstack-clash-protection',
+	]),
+	language: 'c',
+)
+
+common_c_args = [
+	'-DVERSION="@0@"'.format(meson.project_version()),
+	'-DYEAR="2024"',
+	'-DBUILD_DATE="@0@"'.format('?'),
+	'-DBUILD_COMMIT="@0@"'.format('<unknown>'),
+	'-DCONFIG_FILE="@0@"'.format(conf_file),
+]
+
+common_link_args = [
+	'-Wl,-z,nodlopen',
+	'-Wl,-z,noexecstack',
+	'-Wl,-z,relro',
+	'-Wl,-z,now',
+]
+
+# isolate
+
+libcap_dep = dependency('libcap')
+
+executable(
+	'isolate',
+	sources: [
+		'isolate.c',
+		'util.c',
+		'rules.c',
+		'cg.c',
+		'config.c',
+	],
+	dependencies: [
+		libcap_dep,
+	],
+	c_args: common_c_args,
+	link_args: common_link_args,
+	install: true,
+	install_mode: ['rwsr-xr-x', 0, 0],
+)
+
+# isolate-check-environment
+
+install_data(
+	'isolate-check-environment',
+	install_dir: get_option('bindir'),
+)
+
+# isolate-cg-keeper
+
+libsystemd_dep = dependency('libsystemd')
+
+isolate_cg_keeper = executable(
+	'isolate-cg-keeper',
+	sources: [
+		'isolate-cg-keeper.c',
+		'config.c',
+		'util.c',
+	],
+	dependencies: [
+		libsystemd_dep,
+	],
+	c_args: common_c_args,
+	link_args: common_link_args,
+	install: true,
+	install_dir: sbindir,
+)
+
+# docs
+
+a2x = find_program('a2x', required: false)
+if a2x.found()
+	man_page = custom_target(
+		'docs-man',
+		output: 'isolate.1',
+		input: 'isolate.1.txt',
+		command: [a2x, '-f', 'manpage', '-D', meson.current_build_dir(), '@INPUT@'],
+		install: true,
+		install_dir: get_option('mandir') / 'man1',
+		install_tag: 'man',
+	)
+
+	html_page = custom_target(
+		'docs-html',
+		output: 'isolate.1.html',
+		input: 'isolate.1.txt',
+		command: [a2x, '-f', 'xhtml', '-D', meson.current_build_dir(), '@INPUT@'],
+		install: true,
+		install_dir: get_option('sharedstatedir') / 'doc' / 'isolate',
+		install_tag: 'man',
+
+		# The dependency on isolate.1 is there to serialize both calls of asciidoc,
+		# which does not name temporary files safely.
+		depends: man_page,
+	)
+endif
+
+# ---
+
+subdir('systemd')

meson.options

@@ -0,0 +1,5 @@
+option(
+	'box_root',
+	type: 'string',
+	value: 'isolate',
+)

systemd/meson.build

@@ -0,0 +1,17 @@
+systemd_dep = dependency('systemd')
+systemd_system_unit_dir = systemd_dep.get_variable('systemdsystemunitdir')
+
+install_data(
+	'isolate.slice',
+	install_dir: systemd_system_unit_dir,
+)
+
+configure_file(
+	input: 'isolate.service.in',
+	output: 'isolate.service',
+	configuration: {
+		'SBINDIR': sbindir,
+	},
+	install: true,
+	install_dir: systemd_system_unit_dir,
+)