sea: add --build-sea to generate SEA directly with Node.js binary

Instead of relying on a WASM build of postject to perform the
injection, add LIEF as dependency and generate the SEA directly
from core via a new CLI option --build-sea which takes the SEA
config. This simplifies SEA generation for users and makes it
easier to debug/maintain the SEA building process.

PR-URL: #61167
Reviewed-By: Anna Henningsen <anna@addaleax.net>
Reviewed-By: Chengzhong Wu <legendecas@gmail.com>

Author: joyeecheung

.github/CODEOWNERS

@@ -153,13 +153,15 @@
 /test/parallel/test-runner-* @nodejs/test_runner
 
 # Single Executable Applications
+/deps/LIEF @nodejs/single-executable
 /deps/postject @nodejs/single-executable
 /doc/api/single-executable-applications.md @nodejs/single-executable
 /doc/contributing/maintaining/maintaining-single-executable-application-support.md @nodejs/single-executable
 /src/node_sea* @nodejs/single-executable
 /test/fixtures/postject-copy @nodejs/single-executable
 /test/sea @nodejs/single-executable
 /tools/dep_updaters/update-postject.sh @nodejs/single-executable
+/tools/dep_updaters/update-lief.sh @nodejs/single-executable
 
 # Permission Model
 /doc/api/permissions.md @nodejs/security-wg

.gitignore

@@ -145,6 +145,8 @@ tools/*/*.i.tmp
 # Ignore dependencies fetched by tools/v8/fetch_deps.py
 /deps/.cipd
 !deps/LIEF/**
+deps/LIEF/*.vcxproj*
+deps/LIEF/*.sln
 
 # === Rules for Windows vcbuild.bat ===
 /temp-vcbuild

LICENSE

@@ -1254,7 +1254,8 @@ The externally maintained libraries used by Node.js are:
     SOFTWARE.
   """
 
-- postject, located at test/fixtures/postject-copy, is licensed as follows:
+- postject, located at test/fixtures/postject-copy and used as a basis for
+  src/node_sea_bin.cc, is licensed as follows:
   """
     Postject is licensed for use as follows:
 

configure.py

@@ -907,6 +907,12 @@
     default=None,
     help='do not install the bundled Amaro (TypeScript utils)')
 
+parser.add_argument('--without-lief',
+    action='store_true',
+    dest='without_lief',
+    default=None,
+    help='build without LIEF (Library for instrumenting executable formats)')
+
 parser.add_argument('--without-npm',
     action='store_true',
     dest='without_npm',
@@ -1782,6 +1788,14 @@ def configure_node(o):
   o['variables']['single_executable_application'] = b(not options.disable_single_executable_application)
   if options.disable_single_executable_application:
     o['defines'] += ['DISABLE_SINGLE_EXECUTABLE_APPLICATION']
+    o['variables']['node_use_lief'] = 'false'
+  else:
+    if (options.without_lief is not None):
+      o['variables']['node_use_lief'] = b(not options.without_lief)
+    elif flavor in ('mac', 'linux', 'win'):
+      o['variables']['node_use_lief'] = 'true'
+    else:
+      o['variables']['node_use_lief'] = 'false'
 
   o['variables']['node_with_ltcg'] = b(options.with_ltcg)
   if flavor != 'win' and options.with_ltcg: