Build issues archlinux i686 about haka HOT 25 CLOSED

there seems to be something weird in the way libm is linked on i686

I have just checked and libhaka should normaly use libm (moreover it would fail on all architectures if that wasn't the case...)

did you build your compiler yourself ? did you use it to build other software ?

from haka.

Nope, my compiler is the standard archlinux toolchain.

from haka.

Yes I use the same compiler to build all of the software as well as the x86_64 builds.

from haka.

The glibc version is 2.20.

from haka.

It does look like hakactl is linking properly in the build dir:

ldd hakactl

linux-vdso.so.1 (0x00007fff01c00000)
libhaka.so.0 => /home/spirit/packages/haka/src/haka_0.2.1_source/make/lib/haka/libhaka.so.0 (0x00007f5bc9088000)
libpthread.so.0 => /usr/lib/libpthread.so.0 (0x00007f5bc8e68000)
libc.so.6 => /usr/lib/libc.so.6 (0x00007f5bc8ac0000)
libdl.so.2 => /usr/lib/libdl.so.2 (0x00007f5bc88b8000)
librt.so.1 => /usr/lib/librt.so.1 (0x00007f5bc86b0000)
libm.so.6 => /usr/lib/libm.so.6 (0x00007f5bc83a8000)
libedit.so.0 => /usr/lib/libedit.so.0 (0x00007f5bc8168000)
libgcc_s.so.1 => /usr/lib/libgcc_s.so.1 (0x00007f5bc7f50000)
/lib64/ld-linux-x86-64.so.2 (0x00007f5bc9370000)
libncursesw.so.5 => /usr/lib/libncursesw.so.5 (0x00007f5bc7ce8000)

from haka.

I'm going to see about submitting a bugreport upstream about this as well. I will let you know what I find out.

from haka.

Hi Arch3y,

Glad to see that you are going to package haka{,bana} for archassault. By the way, is the package compatible with a simple arch Linux distribution?

I'm installing an i386 arch Linux to see if I can reproduce your problem. I'll let you know if I found anything.

On 16 octobre 2014 20:14:28 UTC+02:00, arch3y [email protected] wrote:

I'm going to see about submitting a bugreport upstream about this as
well. I will let you know what I find out.

---

Reply to this email directly or view it on GitHub:
#12 (comment)

Envoyé de mon téléphone. Excusez la brièveté.

from haka.

Thanks we are looking into it as well, we dont want to go to the upstream for an issue with glibc if its something we can fix. We build all of our pkgs in a clean chroot per arch standards with flags:

CPPFLAGS="-D_FORTIFY_SOURCE=2"
CFLAGS="-march=i686 -mtune=generic -O3 -pipe -fstack-protector-all --param=ssp-buffer-size=4"
CXXFLAGS="-march=i686 -mtune=generic -O3 -pipe -fstack-protector-all --param=ssp-buffer-size=4"
LDFLAGS="-Wl,-O1,--sort-common,--as-needed,-z,relro"

These are standard arch flags except they use -02 and -fstack-protector-strong now it seems to build just fine on x86_64, but it blows up on i686. We have tried tweaking our flags, but we have not looked into it too much. FYI, we started to add haka at 0.1 but it was a pain to get working due to it pulling in all of its deps, however it seems like thats been sorted out in 2.0.1. We will be adding hakabanna as well once we get haka working. As welll as i686 and x86_64 we will be building haka on arm as well if we can.

from haka.

It seems to be quite compatible with the x86_64 builds to answer your question.

from haka.

you might want (at least for testing purpose) to let haka pull it's own lua/luajit

these two can be compiled with various options which might change stuff... worth testing

from haka.

We let it pull in its version of luajit and place it under /usr/share/haka/ if you would like I can provide the pkgbuild for you guys. I'd prefer to send that over email if possible.

Our build options are:

mkdir make && cd make
cmake -DCMAKE_INSTALL_PREFIX=/usr ..
make
then we run make DESTDIR-installdir install

from haka.

Hi archey,

I've just built haka successfully on arch linux i386 with the usual :

cmake ../haka
make
make tests

Is archassault really different from an Arch linux ?

from haka.

As I said we are using different build flags, but we are just a layer on top of archlinux. Our build flags are

CPPFLAGS="-D_FORTIFY_SOURCE=2"
CFLAGS="-march=i686 -mtune=generic -O3 -pipe -fstack-protector-all --param=ssp-buffer-size=4"
CXXFLAGS="-march=i686 -mtune=generic -O3 -pipe -fstack-protector-all --param=ssp-buffer-size=4"
LDFLAGS="-Wl,-O1,--sort-common,--as-needed,-z,relro"

This seems to work fine on x86_64 but it blows up on i686. Let me do some more testing on my end as well. We are also building this in a clean chroot with the latest haka release.

Here's our build options as well:

mkdir make && cd make
cmake -DCMAKE_INSTALL_PREFIX=/usr ..
make

from haka.

I can't reproduce even with the build flags you are using. Could you provide us the pkgbuild with some instruction on how to use it at haka-security at stormshield dot eu ?

from haka.

yep I can do that, I'll email it to you in a moment.

from haka.

Getting errors that the email addr does not exist and I replaced the dot with period and so forth, does the dash in haka-security exist? I added that as well just double checking.

from haka.

Strange. I've just tested and it work for me. Can you try with haka-security at arkoon dot net ?

from haka.

yeah it looks like the stormshield domain is not resolving for me

from haka.

Ok arkoon worked sent it out

from haka.

Ok I've reach a point where I can reproduce. And it seems that the --as-needed option is the one creating the issue.

from haka.

Thanks let us know, what we can do to help out.

from haka.

I may have a patch. Could you try it with the following commit paulfariello/haka@6398e9f ?

If it works it will be merged into haka/develop and it will be shipped into next release.

from haka.

Sure let me try it out.

from haka.

Ok that has fixed our issue, it builds in a clean chroot and all of the tests pass. Should the tests pass in a fakeroot as they fail on x86_64 in a fakeroot?

from haka.

Cool. As I said, the patch will be in the next release :)

Concerning the tests, they should pass on every architectures. I'll test on x86_64 to see which ones fails.

from haka.