Sender: =?UTF-8?Q?Timo_Ter=C3=A4s?= <timo.teras@gmail.com>
Date: Sat, 19 Nov 2016 09:21:09 +0200
From: Timo Teras <timo.teras@iki.fi>
To: "Tuan M. Hoang" <tmhoang@flatglobe.org>
Cc: "alpine-devel" <alpine-devel@lists.alpinelinux.org>
Subject: Re: [alpine-devel] Porting Alpine scripts
Message-ID: <20161119092109.13567a93@vostro>
In-Reply-To: <20161119041548.765e6513.tmhoang@flatglobe.org>
References: <155a8e57d76.f37920c130996.6728092923369604578@flatglobe.org>
	<155b28d7dfa.ca28fe6d67425.5841089419777612642@flatglobe.org>
	<20160705172656.788ec089@vostro.util.wtbts.net>
	<20160706172836.74bab5d1@vostro>
	<155e6497a8e.11ad265cf269464.7355344611305011615@flatglobe.org>
	<155f440c618.129c9f0aa5155.5728200182511575692@flatglobe.org>
	<20160718084038.23773fca@vostro.util.wtbts.net>
	<1560fbd5a78.dbf5aa7b48820.4632348656468847927@flatglobe.org>
	<20160722084514.7c01123f@vostro.util.wtbts.net>
	<15614c77014.1200f0e697958.371787825394349914@flatglobe.org>
	<20160723092945.0680e7fd@vostro>
	<1562340dbde.12a594a5120275.3795912911296475631@flatglobe.org>
	<156260c81a5.f458ee7355285.6767768145040849925@flatglobe.org>
	<20160726194654.69b12731@vostro>
	<15635238f98.e963f442298215.3433654478481171006@flatglobe.org>
	<20161116023639.23b44cf1.tmhoang@flatglobe.org>
	<20161117082440.7f5e0fa0@vostro.util.wtbts.net>
	<20161119041548.765e6513.tmhoang@flatglobe.org>
Precedence: list
MIME-Version: 1.0
Content-Type: text/plain; charset=US-ASCII
Content-Transfer-Encoding: 7bit

On Sat, 19 Nov 2016 04:15:48 +0700
"Tuan M. Hoang" <tmhoang@flatglobe.org> wrote:

> On Thu, 17 Nov 2016 08:24:40 +0200
> Timo Teras <timo.teras@iki.fi> wrote:
>   
> > > > > b) Then I run crossbuild script, and I need remove paxmark
> > > > > lines in gcc's APKBUILD as it returns an unknown error (while
> > > > > creat-cross script runs just fine). AFAIK, it is about
> > > > > security concerns, not system's functionality, so for now I
> > > > > guess it is okay.       
> > > >  
> > > > Your kernel is probably built without XATTR support. paxmark
> > > > requires XATTR enabled kernel.       
> > > 
> > > I guess my x86_64 machine running grsec kernel (linux-grsec
> > > package) is XATTR-enabled. I looked a little bit closer on the
> > > build log and see this : http://sprunge.us/EIVE. When I try to
> > > run those $ paxctl manually (code from /usr/sbin/paxmark), they
> > > just pass alright with no output on stdout nor stderr. I also
> > > tried adding --enable-xattr-support to configure script in gcc
> > > APKBUILD, but it won't help. What do you think ?  
> > 
> > The kernel should be xattr enabled. What filesystem are you using?
> > Perhaps there's some filesystem level knob (kernel config) or
> > limitation.  
> 
> $ df -T | grep sda
> /dev/sda3            ext4        20473424   6217272  13196368  32% /
> /dev/sda1            ext4           95054     16460     71426
> 19% /boot $ cat /proc/fs/ext4/sda1/options | grep xattr
> user_xattr
> $ cat /proc/fs/ext4/sda3/options | grep xattr
> user_xattr

IIRC, if it's grsec kernel, you don't even need the user_xattr mount
option as grsec kernel treats those xattrs specially.

Of course grsec does not support s390x so the markings are not really
needed for vanilla kernel. However would be good to figure out so we
get the build right from beginning.

You could try strace the attr command and see where it fails.

> > > Another problem I am having is when cross-compiling linux-vanilla
> > > package using aports/scripts/bootstrap.sh :
> > > http://sprunge.us/AAcA. I am reading abuild source code to find
> > > the cause but still nothing new. It'd be nice if you help me to
> > > have a look.  
> > 
> > Bootstrap script was not yet updated for libressl change. I'll take
> > a look at this. I think the only change needed is to build libressl
> > instead of openssl. I'll push fix for this soon.  
> 
> Actually this occurred to me before libress was adopted. After
> libressl was introduced, I also changed Bootstrap script, libressl
> APKBUILD, kernel config to adop libressl too, but still the bug. So I
> guess it's more likely coming from abuild. Here are some of my
> patches, in case you might want to have a look.
> https://github.com/tmh1999/alpine-bootstrap-s390x/tree/master/patches/aports/scripts
> https://github.com/tmh1999/alpine-bootstrap-s390x/tree/master/patches/aports/main
 
I would be happy to pick up some of these patches already now. Would
you be able to give them exported with "git format-patch" so you get
annotated as author and the commit log is preserved.

I could try bootstrap s390 too then and see if the same problem happens
and analyze it a bit more.

In any case I recently fixed the bootstrap script and few aports. I was
able to bootstrap again git master for armv7.

Cheers,
Timo



---
Unsubscribe:  alpine-devel+unsubscribe@lists.alpinelinux.org
Help:         alpine-devel+help@lists.alpinelinux.org
---