Bug#1089365: liblopsub: Supporting rootless builds by default

Niels Thykier Sat, 07 Dec 2024 11:36:28 -0800

Source: liblopsub
Version: 1.0.5-1
Severity: important
Tags: ftbfs
Justification: FTBFS
X-Debbugs-Cc: ni...@thykier.net
User: ni...@thykier.net
Usertags: rrr-no-as-default-issue


Dear maintainer,

During a test rebuild for building packages with
`Rules-Requires-Root: no` as the default in `dpkg`,
liblopsub failed to rebuild.

Log Summary:
-------------------------------------------------------------------------------
[...]
 dpkg-source --before-build .
dpkg-buildpackage: info: host architecture arm64
 debian/rules clean
rm -f debian/substvars
/usr/bin/make distclean
make[1]: Entering directory '/<<PKGBUILDDIR>>'
new git version: 1.0.5

rm -f lopsub-suite.5.gz lopsub.7.gz liblopsub.so.1.0.5 lopsubgen lopsubgen.1.gz lopsubex lopsubex.1.gz web/index.html web/lopsub-api.html web/lopsubgen.1.html web/lopsubex.1.html web/lopsub-suite.5.html web/lopsub.7.html *.o *.man

rm -f *.lsg.c *.lsg.h lopsubgen.c config_file.c lopsubgen-stage1 \
        lopsub.h lopsub.7 lopsub-suite.5 version.c
make[1]: Leaving directory '/<<PKGBUILDDIR>>'
dh_clean
 debian/rules binary
dh "build-indep"

/usr/bin/make ASFLAGS="" ASFLAGS_FOR_BUILD="" CFLAGS="-g -O2 -Werror=implicit-function-declaration -ffile-prefix-map=/<<PKGBUILDDIR>>=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -mbranch-protection=standard" CFLAGS_FOR_BUILD="-g -O2 -Werror=implicit-function-declaration -ffile-prefix-map=/<<PKGBUILDDIR>>=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -mbranch-protection=standard" CPPFLAGS="-Wdate-time -D_FORTIFY_SOURCE=2" CPPFLAGS_FOR_BUILD="-Wdate-time -D_FORTIFY_SOURCE=2" CXXFLAGS="-g -O2 -ffile-prefix-map=/<<PKGBUILDDIR>>=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -mbranch-protection=standard" CXXFLAGS_FOR_BUILD="-g -O2 -ffile-prefix-map=/<<PKGBUILDDIR>>=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -mbranch-protection=standard" DFLAGS="-frelease" DFLAGS_FOR_BUILD="-frelease" FCFLAGS="-g -O2 -ffile-prefix-map=/<<PKGBUILDDIR>>=. -fstack-protector-strong -fstack-clash-protection -mbranch-protection=standard" FCFLAGS_FOR_BUILD="-g -O2 -ffile-prefix-map=/<<PKGBUILDDIR>>=. -fstack-protector-strong -fstack-clash-protection -mbranch-protection=standard" FFLAGS="-g -O2 -ffile-prefix-map=/<<PKGBUILDDIR>>=. -fstack-protector-strong -fstack-clash-protection -mbranch-protection=standard" FFLAGS_FOR_BUILD="-g -O2 -ffile-prefix-map=/<<PKGBUILDDIR>>=. -fstack-protector-strong -fstack-clash-protection -mbranch-protection=standard" LDFLAGS="-Wl,-z,relro -Wl,-z,now" LDFLAGS_FOR_BUILD="-Wl,-z,relro -Wl,-z,now" OBJCFLAGS="-g -O2 -ffile-prefix-map=/<<PKGBUILDDIR>>=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -mbranch-protection=standard" OBJCFLAGS_FOR_BUILD="-g -O2 -ffile-prefix-map=/<<PKGBUILDDIR>>=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -mbranch-protection=standard" OBJCXXFLAGS="-g -O2 -ffile-prefix-map=/<<PKGBUILDDIR>>=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -mbranch-protection=standard" OBJCXXFLAGS_FOR_BUILD="-g -O2 -ffile-prefix-map=/<<PKGBUILDDIR>>=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -mbranch-protection=standard" make[1]: Entering directory '/<<PKGBUILDDIR>>'

new git version: 1.0.5

m4 -DGIT_VERSION=1.0.5 -DDATE="May 2024" lopsub-suite.5.m4 | gzip -fn9 > lopsub-suite.5.gz m4 -DGIT_VERSION=1.0.5 -DDATE="May 2024" lopsub.7.m4 | gzip -fn9 > lopsub.7.gz

m4 -DOUTPUT_MODE=C gendoc/gendoc.m4 lopsub.h.m4 > lopsub.h
lex -o config_file.c config_file.l

cc -ffile-prefix-map=/<<PKGBUILDDIR>>=. -Wdate-time -D_FORTIFY_SOURCE=2 -g -fPIC -g -O2 -Werror=implicit-function-declaration -ffile-prefix-map=/<<PKGBUILDDIR>>=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -mbranch-protection=standard -c -o config_file.o config_file.c cc -ffile-prefix-map=/<<PKGBUILDDIR>>=. -I. -Wdate-time -D_FORTIFY_SOURCE=2 -g -fPIC -Wall -Werror-implicit-function-declaration -g -O2 -Werror=implicit-function-declaration -ffile-prefix-map=/<<PKGBUILDDIR>>=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -mbranch-protection=standard -c -o lopsub.o lopsub.c cc -ffile-prefix-map=/<<PKGBUILDDIR>>=. -I. -Wdate-time -D_FORTIFY_SOURCE=2 -g -fPIC -Wall -Werror-implicit-function-declaration -g -O2 -Werror=implicit-function-declaration -ffile-prefix-map=/<<PKGBUILDDIR>>=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -mbranch-protection=standard -c -o version.o version.c cc -ffile-prefix-map=/<<PKGBUILDDIR>>=. --shared -Wl,-soname,liblopsub.so.1 \ -Wl,-z,relro -Wl,-z,now -o liblopsub.so.1.0.5 config_file.o lopsub.o version.o

lex -o lopsubgen.c lopsubgen.l

./lopsubgen-stage1 < lopsubgen.suite

cc -ffile-prefix-map=/<<PKGBUILDDIR>>=. -I. -Wdate-time -D_FORTIFY_SOURCE=2 -g -fPIC -Wall -Werror-implicit-function-declaration -g -O2 -Werror=implicit-function-declaration -ffile-prefix-map=/<<PKGBUILDDIR>>=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -mbranch-protection=standard -c -o lsg.o lsg.c cc -ffile-prefix-map=/<<PKGBUILDDIR>>=. -I. -Wdate-time -D_FORTIFY_SOURCE=2 -g -fPIC -Wall -Werror-implicit-function-declaration -g -O2 -Werror=implicit-function-declaration -ffile-prefix-map=/<<PKGBUILDDIR>>=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -mbranch-protection=standard -c -o lopsubgen.lsg.o lopsubgen.lsg.c cc -ffile-prefix-map=/<<PKGBUILDDIR>>=. -Wall -g -Wl,-z,relro -Wl,-z,now -o lopsubgen lopsubgen.o lsg.o lopsubgen.lsg.o lopsub.o version.o

./lopsubgen --gen-man=lopsubgen.1 --version-string 1.0.5 < lopsubgen.suite
gzip -fn9 lopsubgen.1
./lopsubgen --gen-header < lopsubex.suite

./lopsubgen --gen-c < lopsubex.suite

./lopsubgen --gen-man=lopsubex.1 --version-string 1.0.5 < lopsubex.suite
gzip -fn9 lopsubex.1
make[1]: Leaving directory '/<<PKGBUILDDIR>>'
/usr/bin/make PREFIX=/usr install DESTDIR=/<<PKGBUILDDIR>>/debian/tmp
make[1]: Entering directory '/<<PKGBUILDDIR>>'

install -d /<<PKGBUILDDIR>>/debian/tmp/usr/lib /<<PKGBUILDDIR>>/debian/tmp/usr/include \ /<<PKGBUILDDIR>>/debian/tmp/usr/share/man/man1 /<<PKGBUILDDIR>>/debian/tmp/usr/share/man/man5 \ /<<PKGBUILDDIR>>/debian/tmp/usr/share/man/man7 /<<PKGBUILDDIR>>/debian/tmp/usr/bin

install -m 644 liblopsub.so.1.0.5 /<<PKGBUILDDIR>>/debian/tmp/usr/lib

ln -f -s liblopsub.so.1.0.5 /<<PKGBUILDDIR>>/debian/tmp/usr/lib/liblopsub.so.1

ln -f -s liblopsub.so.1 /<<PKGBUILDDIR>>/debian/tmp/usr/lib/liblopsub.so
install -m 755 lopsubgen /<<PKGBUILDDIR>>/debian/tmp/usr/bin
install -m 644 lopsub.h /<<PKGBUILDDIR>>/debian/tmp/usr/include
install -m 644 lopsub-internal.h /<<PKGBUILDDIR>>/debian/tmp/usr/include
install -m 644 lopsubgen.1.gz /<<PKGBUILDDIR>>/debian/tmp/usr/share/man/man1

install -m 644 lopsub-suite.5.gz /<<PKGBUILDDIR>>/debian/tmp/usr/share/man/man5

install -m 644 lopsub.7.gz /<<PKGBUILDDIR>>/debian/tmp/usr/share/man/man7
make[1]: Leaving directory '/<<PKGBUILDDIR>>'

mv /<<PKGBUILDDIR>>/debian/tmp/usr/lib /<<PKGBUILDDIR>>/debian/tmp/usr/lib-aarch64-linux-gnu

install -p -d -o root -g root -m 755 /<<PKGBUILDDIR>>/debian/tmp/usr/lib

install: cannot change owner and permissions of ‘/<<PKGBUILDDIR>>/debian/tmp/usr/lib’: Operation not permitted

make: *** [debian/rules:46: binary] Error 1

dpkg-buildpackage: error: debian/rules binary subprocess returned exit status 2

--------------------------------------------------------------------------------
Build finished at 2024-11-17T02:04:56Z

-------------------------------------------------------------------------------


The above is just how the build ends and not necessarily the most
relevant part. If required, the full build log is available here:

https://people.debian.org/~nthykier/rrr-no-as-default/logs/1009822.gz

You can find common solutions at
https://people.debian.org/~nthykier/rrr-no-as-default/docs/solutions.md

If this is really a bug in one of the build-depends, please use
reassign and affects, so that this is still visible in the BTS web
page for this package.

If this package is listed in
https://people.debian.org/~nthykier/rrr-no-as-default/docs/static-ownership.list,
then please just set `Rules-Requires-Root: binary-targets` to the source
stanza of `debian/control` as a fix to this bug.

If this package is listed in
https://people.debian.org/~nthykier/rrr-no-as-default/docs/maybe-misbuilds.list,
then the package was deemed at risk for misbuilding (having wrong
ownership) but had a FTBFS problem we tested it. Please test whether the
package works with `Rules-Requires-Root: no` validating that the
resulting deb has the correct ownership for all paths in the deb.

The goal is to have the default changed in `dpkg` either in `Trixie` or
`Forky`, depending on progress and feasibility with the release schedule
for Trixie.

For more information on this bug filing, please see:
https://lists.debian.org/debian-dpkg/2024/11/msg00016.html

Thanks,


PS: The builds were performed in mid-November. If you fixed the problem
between between then and this bug being filed, then please just close
the bug with the version it was fixed in.

OpenPGP_signature.asc
Description: OpenPGP digital signature

Bug#1089365: liblopsub: Supporting rootless builds by default

Reply via email to