Date: Sat, 19 Nov 2016 04:15:48 +0700
From: "Tuan M. Hoang" <tmhoang@flatglobe.org>
To: Timo Teras <timo.teras@iki.fi>
Cc: "alpine-devel" <alpine-devel@lists.alpinelinux.org>
Subject: Re: [alpine-devel] Porting Alpine scripts
Message-ID: <20161119041548.765e6513.tmhoang@flatglobe.org>
In-Reply-To: <20161117082440.7f5e0fa0@vostro.util.wtbts.net>
References: <155a8e57d76.f37920c130996.6728092923369604578@flatglobe.org>
	<20160703225319.0ce46f62@vostro>
	<155b28d7dfa.ca28fe6d67425.5841089419777612642@flatglobe.org>
	<20160705172656.788ec089@vostro.util.wtbts.net>
	<20160706172836.74bab5d1@vostro>
	<155e6497a8e.11ad265cf269464.7355344611305011615@flatglobe.org>
	<155f440c618.129c9f0aa5155.5728200182511575692@flatglobe.org>
	<20160718084038.23773fca@vostro.util.wtbts.net>
	<1560fbd5a78.dbf5aa7b48820.4632348656468847927@flatglobe.org>
	<20160722084514.7c01123f@vostro.util.wtbts.net>
	<15614c77014.1200f0e697958.371787825394349914@flatglobe.org>
	<20160723092945.0680e7fd@vostro>
	<1562340dbde.12a594a5120275.3795912911296475631@flatglobe.org>
	<156260c81a5.f458ee7355285.6767768145040849925@flatglobe.org>
	<20160726194654.69b12731@vostro>
	<15635238f98.e963f442298215.3433654478481171006@flatglobe.org>
	<20161116023639.23b44cf1.tmhoang@flatglobe.org>
	<20161117082440.7f5e0fa0@vostro.util.wtbts.net>
Precedence: list
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: quoted-printable

On Thu, 17 Nov 2016 08:24:40 +0200
Timo Teras <timo.teras@iki.fi> wrote:
 =20
> > > > b) Then I run crossbuild script, and I need remove paxmark lines
> > > > in gcc's APKBUILD as it returns an unknown error (while
> > > > creat-cross script runs just fine). AFAIK, it is about security
> > > > concerns, not system's functionality, so for now I guess it is
> > > > okay.    =20
> > > =20
> > > Your kernel is probably built without XATTR support. paxmark
> > > requires XATTR enabled kernel.    =20
> >=20
> > I guess my x86_64 machine running grsec kernel (linux-grsec package)
> > is XATTR-enabled. I looked a little bit closer on the build log and
> > see this : http://sprunge.us/EIVE. When I try to run those $ paxctl
> > manually (code from /usr/sbin/paxmark), they just pass alright
> > with no output on stdout nor stderr. I also tried adding
> > --enable-xattr-support to configure script in gcc APKBUILD, but it
> > won't help. What do you think ?
>=20
> The kernel should be xattr enabled. What filesystem are you using?
> Perhaps there's some filesystem level knob (kernel config) or
> limitation.

$ df -T | grep sda
/dev/sda3            ext4        20473424   6217272  13196368  32% /
/dev/sda1            ext4           95054     16460     71426  19% /boot
$ cat /proc/fs/ext4/sda1/options | grep xattr
user_xattr
$ cat /proc/fs/ext4/sda3/options | grep xattr
user_xattr

> > Another problem I am having is when cross-compiling linux-vanilla
> > package using aports/scripts/bootstrap.sh : http://sprunge.us/AAcA.
> > I am reading abuild source code to find the cause but still nothing
> > new. It'd be nice if you help me to have a look.
>=20
> Bootstrap script was not yet updated for libressl change. I'll take a
> look at this. I think the only change needed is to build libressl
> instead of openssl. I'll push fix for this soon.

Actually this occurred to me before libress was adopted. After libressl
was introduced, I also changed Bootstrap script, libressl APKBUILD,
kernel config to adop libressl too, but still the bug. So I guess it's
more likely coming from abuild. Here are some of my patches, in case
you might want to have a look.
https://github.com/tmh1999/alpine-bootstrap-s390x/tree/master/patches/aport=
s/scripts
https://github.com/tmh1999/alpine-bootstrap-s390x/tree/master/patches/aport=
s/main



---
Unsubscribe:  alpine-devel+unsubscribe@lists.alpinelinux.org
Help:         alpine-devel+help@lists.alpinelinux.org
---