[opensuse-factory] Re: commit pcre for openSUSE:Factory
Why? pcre is notorious for security problems and a single shared library is required so we do not need to rebuild lots of pavkages. Ciao, Marcus On Fri, May 11, 2012 at 08:48:01PM +0200, h_root wrote:
Hello community,
here is the log from the commit of package pcre for openSUSE:Factory checked in at 2012-05-11 20:47:37 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/pcre (Old) and /work/SRC/openSUSE:Factory/.pcre.new (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "pcre", Maintainer is "coolo@suse.com"
Changes: -------- --- /work/SRC/openSUSE:Factory/pcre/pcre.changes 2012-02-10 17:18:38.000000000 +0100 +++ /work/SRC/openSUSE:Factory/.pcre.new/pcre.changes 2012-05-11 20:48:00.000000000 +0200 @@ -1,0 +2,5 @@ +Thu May 10 15:59:21 UTC 2012 - afaerber@suse.de + +- Add devel-static package + +-------------------------------------------------------------------
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Other differences: ------------------ ++++++ pcre.spec ++++++ --- /var/tmp/diff_new_pack.168pkR/_old 2012-05-11 20:48:01.000000000 +0200 +++ /var/tmp/diff_new_pack.168pkR/_new 2012-05-11 20:48:01.000000000 +0200 @@ -45,10 +45,10 @@ %package devel Summary: A library for Perl-compatible regular expressions Group: System/Libraries -Requires: libstdc++-devel Requires: libpcre1 = %{version} -Requires: libpcreposix0 = %{version} Requires: libpcrecpp0 = %{version} +Requires: libpcreposix0 = %{version} +Requires: libstdc++-devel # bug437293 %ifarch ppc64 Obsoletes: pcre-devel-64bit @@ -60,6 +60,17 @@ expression pattern matching using the same syntax and semantics as Perl 5.
+%package devel-static +Summary: A library for Perl-compatible regular expressions +Group: System/Libraries +Requires: pcre-devel = %version + +%description devel-static +The PCRE library is a set of functions that implement regular +expression pattern matching using the same syntax and semantics +as Perl 5. +This package contains static versions of the PCRE libraries. + %package -n libpcre1 Summary: A library for Perl-compatible regular expressions Group: System/Libraries @@ -117,7 +128,7 @@
%build autoreconf -fiv -%configure --enable-jit --disable-static \ +%configure --enable-jit --enable-static \ --with-link-size=2 \ --with-match-limit=10000000 \ --enable-newline-is-lf \ @@ -199,4 +210,8 @@ %{_mandir}/man1/pcre-config.* %{_mandir}/man3/*.gz
+%files devel-static +%defattr(-,root,root) +%{_libdir}/*.a + %changelog
-- To unsubscribe, e-mail: opensuse-commit+unsubscribe@opensuse.org For additional commands, e-mail: opensuse-commit+help@opensuse.org
-- Working, but not speaking, for the following german company: SUSE LINUX Products GmbH, HRB 16746 (AG Nuernberg) Geschaeftsfuehrer: Jeff Hawn, Jennifer Guild, Felix Imendoerffer -- To unsubscribe, e-mail: opensuse-factory+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse-factory+owner@opensuse.org
Am 13.05.2012 20:59, schrieb Marcus Meissner:
Why?
Because, according to my submit request, in Factory glib2 has a dependency on -lpcre in the pkg-config file, but only for the static library. qemu is built twice, once dynamically (for qemu-system-* and tools), once statically for linux-user (qemu-*). -lpcre caused the static build to fail. This and another weird glib2 issue on 11.4 (clock_gettime undefined) is what's keeping us from updating qemu (and in turn kvm) to 1.1-rc1 in Factory for 12.2.
pcre is notorious for security problems and a single shared library is required so we do not need to rebuild lots of pavkages.
So if you want to fix this differently in glib2, fine with me, but we need a fix and we need it quickly since we're already behind the 12.2 roadmap. Any insights into what's going wrong on 11.4 would also be nice, so that we can upgrade Virtualization and in turn openSUSE:Factory. Thanks, Andreas https://build.opensuse.org/package/show?package=qemu&project=home%3Aa_faerber%3Abranches%3AVirtualization
On Fri, May 11, 2012 at 08:48:01PM +0200, h_root wrote:
Hello community,
here is the log from the commit of package pcre for openSUSE:Factory checked in at 2012-05-11 20:47:37 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/pcre (Old) and /work/SRC/openSUSE:Factory/.pcre.new (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "pcre", Maintainer is "coolo@suse.com"
Changes: -------- --- /work/SRC/openSUSE:Factory/pcre/pcre.changes 2012-02-10 17:18:38.000000000 +0100 +++ /work/SRC/openSUSE:Factory/.pcre.new/pcre.changes 2012-05-11 20:48:00.000000000 +0200 @@ -1,0 +2,5 @@ +Thu May 10 15:59:21 UTC 2012 - afaerber@suse.de + +- Add devel-static package + +-------------------------------------------------------------------
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Other differences: ------------------ ++++++ pcre.spec ++++++ --- /var/tmp/diff_new_pack.168pkR/_old 2012-05-11 20:48:01.000000000 +0200 +++ /var/tmp/diff_new_pack.168pkR/_new 2012-05-11 20:48:01.000000000 +0200 @@ -45,10 +45,10 @@ %package devel Summary: A library for Perl-compatible regular expressions Group: System/Libraries -Requires: libstdc++-devel Requires: libpcre1 = %{version} -Requires: libpcreposix0 = %{version} Requires: libpcrecpp0 = %{version} +Requires: libpcreposix0 = %{version} +Requires: libstdc++-devel # bug437293 %ifarch ppc64 Obsoletes: pcre-devel-64bit @@ -60,6 +60,17 @@ expression pattern matching using the same syntax and semantics as Perl 5.
+%package devel-static +Summary: A library for Perl-compatible regular expressions +Group: System/Libraries +Requires: pcre-devel = %version + +%description devel-static +The PCRE library is a set of functions that implement regular +expression pattern matching using the same syntax and semantics +as Perl 5. +This package contains static versions of the PCRE libraries. + %package -n libpcre1 Summary: A library for Perl-compatible regular expressions Group: System/Libraries @@ -117,7 +128,7 @@
%build autoreconf -fiv -%configure --enable-jit --disable-static \ +%configure --enable-jit --enable-static \ --with-link-size=2 \ --with-match-limit=10000000 \ --enable-newline-is-lf \ @@ -199,4 +210,8 @@ %{_mandir}/man1/pcre-config.* %{_mandir}/man3/*.gz
+%files devel-static +%defattr(-,root,root) +%{_libdir}/*.a + %changelog
-- To unsubscribe, e-mail: opensuse-commit+unsubscribe@opensuse.org For additional commands, e-mail: opensuse-commit+help@opensuse.org
-- SUSE LINUX Products GmbH, Maxfeldstr. 5, 90409 Nürnberg, Germany GF: Jeff Hawn, Jennifer Guild, Felix Imendörffer; HRB 16746 AG Nürnberg -- To unsubscribe, e-mail: opensuse-factory+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse-factory+owner@opensuse.org
On Sun, May 13, 2012 at 09:29:21PM +0200, Andreas Färber wrote:
Am 13.05.2012 20:59, schrieb Marcus Meissner:
Why?
Because, according to my submit request, in Factory glib2 has a dependency on -lpcre in the pkg-config file, but only for the static library.
qemu is built twice, once dynamically (for qemu-system-* and tools), once statically for linux-user (qemu-*).
-lpcre caused the static build to fail. This and another weird glib2 issue on 11.4 (clock_gettime undefined) is what's keeping us from updating qemu (and in turn kvm) to 1.1-rc1 in Factory for 12.2.
Why do you need qemu built statically? Is it really necessary?
pcre is notorious for security problems and a single shared library is required so we do not need to rebuild lots of pavkages.
So if you want to fix this differently in glib2, fine with me, but we need a fix and we need it quickly since we're already behind the 12.2 roadmap.
Any insights into what's going wrong on 11.4 would also be nice, so that we can upgrade Virtualization and in turn openSUSE:Factory.
static makes funny things happening :/
Thanks, Andreas
Ciao, Marcus -- To unsubscribe, e-mail: opensuse-factory+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse-factory+owner@opensuse.org
El 13/05/12 15:29, Andreas Färber escribió:
Am 13.05.2012 20:59, schrieb Marcus Meissner:
Why?
Because, according to my submit request, in Factory glib2 has a dependency on -lpcre in the pkg-config file, but only for the static library.
Huh, that's worse then.. -lpcre should not be in the glib2 pkconfig file, at all, not for the shared library not for the static one (I guess it is placed in Requires.private or libs.Private) you have sed out those variables from the pkgconfig file.
-lpcre caused the static build to fail. This and another weird glib2 issue on 11.4 (clock_gettime undefined)
clock_gettime undefined ..you need to link against librt... -- To unsubscribe, e-mail: opensuse-factory+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse-factory+owner@opensuse.org
Am 13.05.2012 21:36, schrieb Marcus Meissner:
On Sun, May 13, 2012 at 09:29:21PM +0200, Andreas Färber wrote:
Am 13.05.2012 20:59, schrieb Marcus Meissner:
Why?
Because, according to my submit request, in Factory glib2 has a dependency on -lpcre in the pkg-config file, but only for the static library.
qemu is built twice, once dynamically (for qemu-system-* and tools), once statically for linux-user (qemu-*).
-lpcre caused the static build to fail. This and another weird glib2 issue on 11.4 (clock_gettime undefined) is what's keeping us from updating qemu (and in turn kvm) to 1.1-rc1 in Factory for 12.2.
Why do you need qemu built statically? Is it really necessary?
linux-user emulation is used in chroot'ed environments such as our ARM builds. I'm still new to SUSE so don't ask me why it's been like that, I'm just trying to get the upstream code we've been working on into our 12.2 release. Cc'ing Adrian, Alex and Uli, maybe they can explain. Andreas
pcre is notorious for security problems and a single shared library is required so we do not need to rebuild lots of pavkages.
So if you want to fix this differently in glib2, fine with me, but we need a fix and we need it quickly since we're already behind the 12.2 roadmap.
Any insights into what's going wrong on 11.4 would also be nice, so that we can upgrade Virtualization and in turn openSUSE:Factory.
static makes funny things happening :/
Thanks, Andreas
Ciao, Marcus
-- SUSE LINUX Products GmbH, Maxfeldstr. 5, 90409 Nürnberg, Germany GF: Jeff Hawn, Jennifer Guild, Felix Imendörffer; HRB 16746 AG Nürnberg -- To unsubscribe, e-mail: opensuse-factory+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse-factory+owner@opensuse.org
On 13.05.2012, at 21:46, Andreas Färber wrote:
Am 13.05.2012 21:36, schrieb Marcus Meissner:
On Sun, May 13, 2012 at 09:29:21PM +0200, Andreas Färber wrote:
Am 13.05.2012 20:59, schrieb Marcus Meissner:
Why?
Because, according to my submit request, in Factory glib2 has a dependency on -lpcre in the pkg-config file, but only for the static library.
qemu is built twice, once dynamically (for qemu-system-* and tools), once statically for linux-user (qemu-*).
-lpcre caused the static build to fail. This and another weird glib2 issue on 11.4 (clock_gettime undefined) is what's keeping us from updating qemu (and in turn kvm) to 1.1-rc1 in Factory for 12.2.
Why do you need qemu built statically? Is it really necessary?
linux-user emulation is used in chroot'ed environments such as our ARM builds. I'm still new to SUSE so don't ask me why it's been like that, I'm just trying to get the upstream code we've been working on into our 12.2 release.
Cc'ing Adrian, Alex and Uli, maybe they can explain.
Qemu's linux-user code is usually running in a chroot of a different architecture. /lib and friends are all of a different architecture than the QEMU binary itself. So we have 2 choices: * rewrite all library path resolutions of the QEMU binary to a different path and somehow teach users to copy host libraries into that directory for a chroot environment * use a static QEMU binary The latter is a lot easier for users :) Alex -- To unsubscribe, e-mail: opensuse-factory+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse-factory+owner@opensuse.org
Le dimanche 13 mai 2012, à 15:39 -0400, Cristian Rodríguez a écrit :
El 13/05/12 15:29, Andreas Färber escribió:
Am 13.05.2012 20:59, schrieb Marcus Meissner:
Why?
Because, according to my submit request, in Factory glib2 has a dependency on -lpcre in the pkg-config file, but only for the static library.
Huh, that's worse then.. -lpcre should not be in the glib2 pkconfig file, at all, not for the shared library not for the static one (I guess it is placed in Requires.private or libs.Private) you have sed out those variables from the pkgconfig file.
Why? It should be in Libs.private, otherwise you can't do static linking with glib2. Or how is static linking supposed to work otherwise since pcre is ised in glib2? Vincent -- Les gens heureux ne sont pas pressés. -- To unsubscribe, e-mail: opensuse-factory+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse-factory+owner@opensuse.org
Le lundi 14 mai 2012, à 12:40 -0400, Cristian Rodríguez a écrit :
El 14/05/12 03:20, Vincent Untz escribió:
Why?
Because pkgconfig handling of Libs.private and Requires.private is still broken.
Now please answer the second question in my mail :-) Vincent -- Les gens heureux ne sont pas pressés. -- To unsubscribe, e-mail: opensuse-factory+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse-factory+owner@opensuse.org
On Sun, May 13, 2012 at 10:05:38PM +0200, Alexander Graf wrote:
On 13.05.2012, at 21:46, Andreas Färber wrote:
Am 13.05.2012 21:36, schrieb Marcus Meissner:
On Sun, May 13, 2012 at 09:29:21PM +0200, Andreas Färber wrote:
Am 13.05.2012 20:59, schrieb Marcus Meissner:
Why?
Because, according to my submit request, in Factory glib2 has a dependency on -lpcre in the pkg-config file, but only for the static library.
qemu is built twice, once dynamically (for qemu-system-* and tools), once statically for linux-user (qemu-*).
-lpcre caused the static build to fail. This and another weird glib2 issue on 11.4 (clock_gettime undefined) is what's keeping us from updating qemu (and in turn kvm) to 1.1-rc1 in Factory for 12.2.
Why do you need qemu built statically? Is it really necessary?
linux-user emulation is used in chroot'ed environments such as our ARM builds. I'm still new to SUSE so don't ask me why it's been like that, I'm just trying to get the upstream code we've been working on into our 12.2 release.
Cc'ing Adrian, Alex and Uli, maybe they can explain.
Qemu's linux-user code is usually running in a chroot of a different architecture. /lib and friends are all of a different architecture than the QEMU binary itself. So we have 2 choices:
* rewrite all library path resolutions of the QEMU binary to a different path and somehow teach users to copy host libraries into that directory for a chroot environment * use a static QEMU binary
The latter is a lot easier for users :)
If it is really necessary, do this static split ... but we should watch that no one misuses it ;) Ciao, Marcus -- To unsubscribe, e-mail: opensuse-factory+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse-factory+owner@opensuse.org
El 14/05/12 12:54, Vincent Untz escribió:
Le lundi 14 mai 2012, à 12:40 -0400, Cristian Rodríguez a écrit :
El 14/05/12 03:20, Vincent Untz escribió:
Why?
Because pkgconfig handling of Libs.private and Requires.private is still broken.
Now please answer the second question in my mail :-)
Vincent
I can give you my opinion, though one might disagree.. applications known to require static linking should explicitly request those libraries without relying on a third party to provide them. -- To unsubscribe, e-mail: opensuse-factory+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse-factory+owner@opensuse.org
Am Sonntag, 13. Mai 2012, 21:46:01 schrieb Andreas Färber:
Am 13.05.2012 21:36, schrieb Marcus Meissner:
On Sun, May 13, 2012 at 09:29:21PM +0200, Andreas Färber wrote:
Am 13.05.2012 20:59, schrieb Marcus Meissner:
Why?
Because, according to my submit request, in Factory glib2 has a dependency on -lpcre in the pkg-config file, but only for the static library.
qemu is built twice, once dynamically (for qemu-system-* and tools), once statically for linux-user (qemu-*).
-lpcre caused the static build to fail. This and another weird glib2 issue on 11.4 (clock_gettime undefined) is what's keeping us from updating qemu (and in turn kvm) to 1.1-rc1 in Factory for 12.2.
Why do you need qemu built statically? Is it really necessary?
Yes for the qemu-linux-user binaries or it will break ARM (and possible other future cross arch builds).
linux-user emulation is used in chroot'ed environments such as our ARM builds. I'm still new to SUSE so don't ask me why it's been like that, I'm just trying to get the upstream code we've been working on into our 12.2 release.
Cc'ing Adrian, Alex and Uli, maybe they can explain.
If it would be dynamically linked, we would need to install also the libs in pre-installation phase on arm builds. And they must not conflict with the native libs of arm. So the static bins make it much more easy for us. bye adrian
Andreas
pcre is notorious for security problems and a single shared library is required so we do not need to rebuild lots of pavkages.
So if you want to fix this differently in glib2, fine with me, but we need a fix and we need it quickly since we're already behind the 12.2 roadmap.
Any insights into what's going wrong on 11.4 would also be nice, so that we can upgrade Virtualization and in turn openSUSE:Factory.
static makes funny things happening :/
Thanks, Andreas
Ciao, Marcus
-- Adrian Schroeter SUSE Linux Products GmbH email: adrian@suse.de -- To unsubscribe, e-mail: opensuse-factory+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse-factory+owner@opensuse.org
participants (6)
-
Adrian Schröter
-
Alexander Graf
-
Andreas Färber
-
Cristian Rodríguez
-
Marcus Meissner
-
Vincent Untz