Re: BIND 9.11.6-P1 build fails on Solaris
On Fri, 2019-04-26 at 10:41 +1000, Nick Edwards wrote:
> lots of things failing in recent times, even with CentOS, mostly
> because of openssl min version changes, and most recently even latest
> releases wont build now because of a change in min python versions
> *sigh*, i'm just going to leave it as is, thats all we can do.
openssl version needs to be equal or above 1.0.0. If your UNIX
or Linux openssl version is below 1.0.0, you can change/patch
lib/dns/openssl_link.c and change OPENSSL_VERSION_NUMBER >=
0x1000L into a lower openssl version. I used the following
patch to build 9.11.7 :
--- bind-9.11.7/lib/dns/openssl_link.c 2019-05-10 07:03:58.0 +0200
+++ bind-9.11.7.lock_callback/lib/dns/openssl_link.c2019-05-22 20:05:28.7479
62152 +0200
@@ -103,6 +103,18 @@
}
#endif
+#if OPENSSL_VERSION_NUMBER >= 0x00907000L && OPENSSL_VERSION_NUMBER < 0x100
0L || defined(LIBRESSL_VERSION_NUMBER)
+static void
+lock_callback(int mode, int type, const char *file, int line) {
+ UNUSED(file);
+ UNUSED(line);
+ if ((mode & CRYPTO_LOCK) != 0)
+ LOCK([type]);
+ else
+ UNLOCK([type]);
+}
+#endif
+
#if OPENSSL_VERSION_NUMBER >= 0x1000L && OPENSSL_VERSION_NUMBER < 0x101
0L || defined(LIBRESSL_VERSION_NUMBER)
static void
lock_callback(int mode, int type, const char *file, int line) {
However the question arises whether 9.11.6-P1 and 9.11.7 really
require openssl version 0x1000L or higher, and, when building
9.11.7 say using OpenSSL 0.9.8k and --without-python, might otherwise
some unexpected features of bind stop working correctly?
What i've experienced is that when going from 9.9.9P6 to 9.11.7, and
using bind in recursive mode, i.e. your workstation uses
bind-9.11.7 as a caching nameserver to browse the internet, my laptop
suddenly started to make al lot more noise and was heating up
substantially. After going back to 9.11.6-P1 the heating of my laptop
also went away.
--
Robert M. Stockmann - RHCE
Network Engineer - UNIX/Linux Specialist
crashrecovery.org st...@stokkie.net
___
Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe
from this list
bind-users mailing list
bind-users@lists.isc.org
https://lists.isc.org/mailman/listinfo/bind-users
Re: BIND 9.11.6-P1 build fails on Solaris
On 5/3/19 1:52 AM, Carl Byington via bind-users wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA512 On Fri, 2019-04-26 at 10:41 +1000, Nick Edwards wrote: lots of things failing in recent times, even with CentOS, mostly because of openssl min version changes, and most recently even latest releases wont build now because of a change in min python versions *sigh*, i'm just going to leave it as is, thats all we can do. On centos, you might try https://www.five-ten-sg.com/mapper/bind I have had no problems building solid ISC bind named services on Solaris 10 ( and earlier ) for a very long long time now. If there are problems they are most likely your build environment and nothing to do with the ISC release code. Having said that I still have production and up to date iscbind under smf running fine and I have no love for Solaris anymore. It runs fine but is very crusty and has no future really. -- Dennis Clarke RISC-V/SPARC/PPC/ARM/CISC UNIX and Linux spoken GreyBeard and suspenders optional ___ Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users
Re: BIND 9.11.6-P1 build fails on Solaris
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 On Fri, 2019-04-26 at 10:41 +1000, Nick Edwards wrote: > lots of things failing in recent times, even with CentOS, mostly > because of openssl min version changes, and most recently even latest > releases wont build now because of a change in min python versions > *sigh*, i'm just going to leave it as is, thats all we can do. On centos, you might try https://www.five-ten-sg.com/mapper/bind -BEGIN PGP SIGNATURE- Version: GnuPG v2.0.14 (GNU/Linux) iEYEAREKAAYFAlzJ9CoACgkQL6j7milTFsE83gCff5EeY09QUCkVYhODAvMRtY8g R0AAoIlzg8ejExYucdtPZoUcuMJUrGJR =pjpX -END PGP SIGNATURE- ___ Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users
Re: BIND 9.11.6-P1 build fails on Solaris
lots of things failing in recent times, even with CentOS, mostly because of openssl min version changes, and most recently even latest releases wont build now because of a change in min python versions *sigh*, i'm just going to leave it as is, thats all we can do. On Fri, Apr 26, 2019 at 5:05 AM wrote: > BIND 9.11.5-P4 built fine on this Solaris 10 environment with same > configure settings: > > > > --enable-ipv6 \ > > --enable-filter- \ > > --enable-largefile \ > > --enable-fixed-rrset \ > > --enable-threads \ > > --disable-shared \ > > --with-dlopen=no \ > > --with-openssl=/opt/bind911/openssl \ > > --with-geoip=/opt/bind911/geoip \ > > --without-gssapi --without-python \ > > --prefix=/opt/bind911 > > > > However, now the build fails for BIND 9.11.6-P1 with the following: > > > > Undefined first referenced > > symbolin file > > isc_atomic_xadd client.o > > ld: fatal: symbol referencing errors. No output written to namedtmp0 > > *** Error code 1 > > make: Fatal error: Command failed for target `named' > > > > > > Thanks, > > Greg > ___ > Please visit https://lists.isc.org/mailman/listinfo/bind-users to > unsubscribe from this list > > bind-users mailing list > bind-users@lists.isc.org > https://lists.isc.org/mailman/listinfo/bind-users > ___ Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users
Re: BIND 9.11.6-P1 build fails on Solaris
-- Jeff Wieland, UNIX/Network Systems Administrator Purdue University IT Infrastructure Services UNIX Platforms Jaco Lesch via bind-users wrote: On 4/26/19 18:13, Wieland, Jeffrey J. wrote: Jaco Lesch via bind-users wrote: Both BIND 9.11.5-P4 and 9.11.6 build fine with the following configure settings: ./configure --prefix=/opt/local --libdir=/opt/local/lib/dns/sparcv9 \ --sysconfdir=/etc \ --localstatedir=/var \ --with-randomdev=/dev/random \ --with-tuning=large \ --with-gssapi=krb5-config \ --with-libtool \ --with-openssl \ --without-pkcs11 \ --without-dlopen \ --enable-full-report \ --with-python=/usr/bin/python3.5 \ --with-python-install-dir=/usr/lib/python3.5/vendor-packages \ --enable-threads --enable-ipv6 --enable-devpoll Compiled with both Studio 12.6 and GCC 7.3.0. Thanks -- --- Jaco Lesch SAIX HLS Email:ja...@saix.net Jaco, what version of Solaris did you build this on? Jeffrey The compile is on Solaris 11.4 Sparc, sorry for that slip of the fingers. Will have a look and see what X86-64 version of Solaris 11.4 does next week also. Regards -- --- Jaco Lesch SAIX HLS Email: ja...@saix.net I've got UltraSPARC II's to support, so Studio 12.4 is as new as I can go. Although I'm wondering if you can compile for UltraSPARC II's with Studio 12.5 on an UltraSPARC 3? I might have to try it. -- Jeff Wieland, UNIX/Network Systems Administrator Purdue University IT Infrastructure Services UNIX Platforms ___ Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users
Re: BIND 9.11.6-P1 build fails on Solaris
On 4/26/19 18:13, Wieland, Jeffrey J. wrote: Jaco Lesch via bind-users wrote: Both BIND 9.11.5-P4 and 9.11.6 build fine with the following configure settings: ./configure --prefix=/opt/local --libdir=/opt/local/lib/dns/sparcv9 \ --sysconfdir=/etc \ --localstatedir=/var \ --with-randomdev=/dev/random \ --with-tuning=large \ --with-gssapi=krb5-config \ --with-libtool \ --with-openssl \ --without-pkcs11 \ --without-dlopen \ --enable-full-report \ --with-python=/usr/bin/python3.5 \ --with-python-install-dir=/usr/lib/python3.5/vendor-packages \ --enable-threads --enable-ipv6 --enable-devpoll Compiled with both Studio 12.6 and GCC 7.3.0. Thanks -- --- Jaco Lesch SAIX HLS Email:ja...@saix.net Jaco, what version of Solaris did you build this on? Jeffrey The compile is on Solaris 11.4 Sparc, sorry for that slip of the fingers. Will have a look and see what X86-64 version of Solaris 11.4 does next week also. Regards -- --- Jaco Lesch SAIX HLS Email: ja...@saix.net ___ Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users
Re: BIND 9.11.6-P1 build fails on Solaris
I'm struggling with this on Solaris 10 with Solaris Studio compiler. Seems to be a couple of issues, I'm still working through... For example configure is using -pthread option when testing OpenSSL which is not appropriate for Studio: ``` configure:17237: checking for OpenSSL AES support configure:17261: /ws/on10-patch-tools/SUNWspro/SS12/bin/cc -D_STDC_C99= -mt -pthread -o conftest -g -D_XPG4_2 -D__EXTENSIONS__ -L/builds2/smarshal/sfw10-patch/proto/root_sparc/usr/lib -L/builds2/smarshal/sfw10-patch/proto/root_sparc/usr/lib/dns conftest.c -lcrypto -lpthread >&5 ld: fatal: option -h and building a dynamic executable are incompatible ld: fatal: Flags processing errors configure:17261: $? = 1 configure: program exited with status 1 configure: failed program was: ``` 'pthread' option also needs patching out of ltmain.sh, I have raised that as an issue with libtool. ``` libtool should not pass option '-pthread' to Solaris link-editor. diff --git a/build-aux/ltmain.sh b/build-aux/ltmain.sh index 0f0a2da3f9..7c8bcfd9d2 100644 --- a/ltmain.sh +++ b/ltmain.sh @@ -7070,7 +7070,21 @@ func_mode_link () continue ;; - -mt|-mthreads|-kthread|-Kthread|-pthread|-pthreads|--thread-safe \ + # Solaris ld rejects as of 11.4. Refer to Oracle bug 22985199. + -pthread) + case $host in + *solaris2*) ;; + *) + case "$new_inherited_linker_flags " in + *" $arg "*) ;; + * ) func_append new_inherited_linker_flags " $arg" ;; + esac + ;; + esac + continue + ;; + + -mt|-mthreads|-kthread|-Kthread|-pthreads|--thread-safe \ |-threads|-fopenmp|-openmp|-mp|-xopenmp|-omp|-qsmp=*) func_append compiler_flags " $arg" func_append compile_command " $arg" ``` I'm running a GCC build now, with gcc from /usr/sfw/bin. I needed to tell gcc to not use /usr/sfw/include, where it was finding an older OpenSSL include file: ``` CC =/usr/sfw/bin/gcc CFLAGS =-g -Os -Wall,packed,padded,sign-compare,pointer-arith # override default gcc include search order (shown by 'gcc -v file.c') # as need openssl headers to come from /usr/include and not # /usr/sfw/include. Note, do not seem to need gcc include dir; commented out. # CFLAGS += -nostdinc # CFLAGS += -isystem /usr/sfw/lib/gcc/sparc-sun-solaris2.10/3.4.3/include CFLAGS += -isystem /usr/include/libxml2 CFLAGS += -isystem /usr/include CFLAGS += -isystem /usr/sfw/include ``` Also, needed patch that I posted to https://gitlab.isc.org/isc-projects/bind9/issues/935 -- Stacey ___ Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users
Re: BIND 9.11.6-P1 build fails on Solaris
Jaco Lesch via bind-users wrote: > > > Both BIND 9.11.5-P4 and 9.11.6 build fine with the following configure > settings: > ./configure --prefix=/opt/local --libdir=/opt/local/lib/dns/sparcv9 \ > --sysconfdir=/etc \ > --localstatedir=/var \ > --with-randomdev=/dev/random \ > --with-tuning=large \ > --with-gssapi=krb5-config \ > --with-libtool \ > --with-openssl \ > --without-pkcs11 \ > --without-dlopen \ > --enable-full-report \ > --with-python=/usr/bin/python3.5 \ > --with-python-install-dir=/usr/lib/python3.5/vendor-packages \ > --enable-threads --enable-ipv6 --enable-devpoll > > Compiled with both Studio 12.6 and GCC 7.3.0. > > Thanks > > -- > --- > Jaco Lesch > SAIX HLS > Email:ja...@saix.net > Jaco, what version of Solaris did you build this on? -- Jeff Wieland, UNIX/Network Systems Administrator Purdue University IT Infrastructure Services UNIX Platforms ___ Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users
Re: BIND 9.11.6-P1 build fails on Solaris
Please, take a look at https://gitlab.isc.org/isc-projects/bind9/issues/999 and https://gitlab.isc.org/isc-projects/bind9/merge_requests/1864 Thank you. 26.04.2019 11:01, Jaco Lesch via bind-users пишет: > On 4/25/19 21:04, greg.ra...@bt.com wrote: >> >> BIND 9.11.5-P4 built fine on this Solaris 10 environment with same >> configure settings: >> >> >> >> --enable-ipv6 \ >> >> --enable-filter- \ >> >> --enable-largefile \ >> >> --enable-fixed-rrset \ >> >> --enable-threads \ >> >> --disable-shared \ >> >> --with-dlopen=no \ >> >> --with-openssl=/opt/bind911/openssl\ >> >> --with-geoip=/opt/bind911/geoip \ >> >> --without-gssapi --without-python \ >> >> --prefix=/opt/bind911 >> >> >> >> However, now the build fails for BIND 9.11.6-P1 with the following: >> >> >> >> Undefined first referenced >> >> symbol in file >> >> isc_atomic_xadd client.o >> >> ld: fatal: symbol referencing errors. No output written to namedtmp0 >> >> *** Error code 1 >> >> make: Fatal error: Command failed for target `named' >> >> >> >> >> >> Thanks, >> >> Greg >> >> >> ___ >> Please visit https://lists.isc.org/mailman/listinfo/bind-users to >> unsubscribe from this list >> >> bind-users mailing list >> bind-users@lists.isc.org >> https://lists.isc.org/mailman/listinfo/bind-users > Experiencing a similar issue with BIND 9.11.6-P1 on Solaris 11.4, the > build fails with the following: > > Undefined first referenced > symbol in file > isc_atomic_xadd .libs/client.o > ld: fatal: symbol referencing errors > collect2: error: ld returned 1 exit status > *** Error code 1 > make: Fatal error: Command failed for target `named' > Current working directory /usr/local/src/bind-9.11.6-P1/bin/named > *** Error code 1 > The following command caused the error: > for i in named rndc dig delv dnssec tools nsupdate check confgen > python tests nulldir; do \ > if [ "$i" != "nulldir" -a -d $i ]; then \ > echo "making all in `pwd`/$i"; \ > (cd $i; make DESTDIR="" all) || exit 1; \ > fi; \ > done > make: Fatal error: Command failed for target `subdirs' > Current working directory /usr/local/src/bind-9.11.6-P1/bin > *** Error code 1 > The following command caused the error: > for i in make lib bin doc nulldir; do \ > if [ "$i" != "nulldir" -a -d $i ]; then \ > echo "making all in `pwd`/$i"; \ > (cd $i; make DESTDIR="" all) || exit 1; \ > fi; \ > done > make: Fatal error: Command failed for target `subdirs' > > > Both BIND 9.11.5-P4 and 9.11.6 build fine with the following configure > settings: > ./configure --prefix=/opt/local --libdir=/opt/local/lib/dns/sparcv9 \ > --sysconfdir=/etc \ > --localstatedir=/var \ > --with-randomdev=/dev/random \ > --with-tuning=large \ > --with-gssapi=krb5-config \ > --with-libtool \ > --with-openssl \ > --without-pkcs11 \ > --without-dlopen \ > --enable-full-report \ > --with-python=/usr/bin/python3.5 \ > --with-python-install-dir=/usr/lib/python3.5/vendor-packages \ > --enable-threads --enable-ipv6 --enable-devpoll > > Compiled with both Studio 12.6 and GCC 7.3.0. > > Thanks > > -- > --- > Jaco Lesch > SAIX HLS > Email: ja...@saix.net > > > > ___ > Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe > from this list > > bind-users mailing list > bind-users@lists.isc.org > https://lists.isc.org/mailman/listinfo/bind-users signature.asc Description: OpenPGP digital signature ___ Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users
Re: BIND 9.11.6-P1 build fails on Solaris
On 4/25/19 21:04, greg.ra...@bt.com wrote: BIND 9.11.5-P4 built fine on this Solaris 10 environment with same configure settings: --enable-ipv6 \ --enable-filter- \ --enable-largefile \ --enable-fixed-rrset \ --enable-threads \ --disable-shared \ --with-dlopen=no \ --with-openssl=/opt/bind911/openssl\ --with-geoip=/opt/bind911/geoip \ --without-gssapi --without-python \ --prefix=/opt/bind911 However, now the build fails for BIND 9.11.6-P1 with the following: Undefined first referenced symbol in file isc_atomic_xadd client.o ld: fatal: symbol referencing errors. No output written to namedtmp0 *** Error code 1 make: Fatal error: Command failed for target `named' Thanks, Greg ___ Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users Experiencing a similar issue with BIND 9.11.6-P1 on Solaris 11.4, the build fails with the following: Undefined first referenced symbol in file isc_atomic_xadd .libs/client.o ld: fatal: symbol referencing errors collect2: error: ld returned 1 exit status *** Error code 1 make: Fatal error: Command failed for target `named' Current working directory /usr/local/src/bind-9.11.6-P1/bin/named *** Error code 1 The following command caused the error: for i in named rndc dig delv dnssec tools nsupdate check confgen python tests nulldir; do \ if [ "$i" != "nulldir" -a -d $i ]; then \ echo "making all in `pwd`/$i"; \ (cd $i; make DESTDIR="" all) || exit 1; \ fi; \ done make: Fatal error: Command failed for target `subdirs' Current working directory /usr/local/src/bind-9.11.6-P1/bin *** Error code 1 The following command caused the error: for i in make lib bin doc nulldir; do \ if [ "$i" != "nulldir" -a -d $i ]; then \ echo "making all in `pwd`/$i"; \ (cd $i; make DESTDIR="" all) || exit 1; \ fi; \ done make: Fatal error: Command failed for target `subdirs' Both BIND 9.11.5-P4 and 9.11.6 build fine with the following configure settings: ./configure --prefix=/opt/local --libdir=/opt/local/lib/dns/sparcv9 \ --sysconfdir=/etc \ --localstatedir=/var \ --with-randomdev=/dev/random \ --with-tuning=large \ --with-gssapi=krb5-config \ --with-libtool \ --with-openssl \ --without-pkcs11 \ --without-dlopen \ --enable-full-report \ --with-python=/usr/bin/python3.5 \ --with-python-install-dir=/usr/lib/python3.5/vendor-packages \ --enable-threads --enable-ipv6 --enable-devpoll Compiled with both Studio 12.6 and GCC 7.3.0. Thanks -- --- Jaco Lesch SAIX HLS Email: ja...@saix.net ___ Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users
