From 1c4fd97318efa91c3da56e33116f528b0d7cec2b Mon Sep 17 00:00:00 2001
From: Clayton Craft <clayton@craftyguy.net>
Date: Thu, 5 Jun 2025 21:18:10 -0700
Subject: [PATCH] systemd: enable BPF support for unprivileged systemd-nspawn

Partially fixes #3746, kernel options are required for systemd to
correctly enable support for this in systemd-nsresourced at runtime.

Part-of: https://gitlab.postmarketos.org/postmarketOS/pmaports/-/merge_requests/6637
---
 extra-repos/systemd/systemd/APKBUILD | 7 ++++++-
 1 file changed, 6 insertions(+), 1 deletion(-)

diff --git a/extra-repos/systemd/systemd/APKBUILD b/extra-repos/systemd/systemd/APKBUILD
index 0c27dac71..866b836db 100644
--- a/extra-repos/systemd/systemd/APKBUILD
+++ b/extra-repos/systemd/systemd/APKBUILD
@@ -9,7 +9,7 @@
 pkgname=systemd
 pkgver=257.6
 _pkgver="musl-v${pkgver//_/-}-split-usr"
-pkgrel=0
+pkgrel=1
 pkgdesc="System and service manager"
 url="https://github.com/systemd/systemd"
 arch="all !ppc64le !s390x" # blocked by pmboostrap not supporting
@@ -35,6 +35,7 @@ makedepends="
 	audit-dev
 	bash
 	bash-completion
+	bpftool
 	clang
 	cmake
 	coreutils
@@ -59,6 +60,7 @@ makedepends="
 	libselinux-dev
 	libxkbcommon-dev
 	linux-pam-dev
+	linux-stable-dev
 	llvm15
 	lz4-dev
 	meson
@@ -203,6 +205,9 @@ build() {
 		\
 		-Didn=false \
 		-Dsysvinit-path="" \
+		-Dbpf-framework=enabled \
+		-Dvmlinux-h=provided \
+		-Dvmlinux-h-path="$(find /usr/src -path "/usr/src/linux-headers-*-stable/vmlinux.h" | sort -V | tail -n1)" \
 		build .
 	meson compile ${JOBS:+-j ${JOBS}} -C build
 }