Debian Bug report logs - #837402
condor: FTBFS with bindnow and PIE enabled

Toggle useless messages

Message #5 received at submit@bugs.debian.org (full text, mbox, reply):

From: Balint Reczey <balint@balintreczey.hu>

To: submit@bugs.debian.org

Subject: condor: FTBFS with bindnow and PIE enabled

Date: Sun, 11 Sep 2016 12:53:31 +0200

Source: condor
Version: 8.4.8~dfsg.1-1
Severity: important
User: balint@balintreczey.hu
Usertags: pie-bindnow-20160906
Justification: FTBFS on amd64 with extra hardening

Hi,

During a rebuild of all packages in sid, your package failed to build on
amd64 with patched GCC and dpkg.

The rebuild tested if packages are ready for a transition
enabling PIE and bindnow for amd64.

For more information about the changes to sid's dpkg and GCC please
visit:
 https://wiki.debian.org/Hardening/PIEByDefaultTransition

Relevant part (hopefully):
...
[ 34%] Linking CXX executable condor_mips
cd "/<<PKGBUILDDIR>>/obj-x86_64-linux-gnu/src/condor_sysapi" &&
/usr/bin/cmake -E cmake_link_script CM
akeFiles/condor_mips.dir/link.txt --verbose=1
/usr/bin/c++   -g -O2 -fdebug-prefix-map=/<<PKGBUILDDIR>>=.
-fstack-protector-strong -Wformat -Werror=
format-security -Wdate-time -D_FORTIFY_SOURCE=2  -std=c++11 -DWITH_IPV6
-g -O2 -fdebug-prefix-map=/<<P
KGBUILDDIR>>=. -fstack-protector-strong -Wformat -Werror=format-security
-Wdate-time -D_FORTIFY_SOURCE
=2  -fPIC -Wall -W -Wextra -Wfloat-equal -Wendif-labels -Wpointer-arith
-Wcast-qual -Wcast-align -Wvol
atile-register-var -Wno-error=unused-local-typedefs
-Wdeprecated-declarations -Wno-error=deprecated-de
clarations -fstack-protector -rdynamic -g   -Wl,-z,relro -Wl,-z,now
-Wl,-z,relro -Wl,--warn-once -Wl,-
-warn-common -ldl -pthread CMakeFiles/condor_mips.dir/mips_main.cpp.o
CMakeFiles/condor_mips.dir/dhry21a.cpp.o
CMakeFiles/condor_mips.dir/__/condor_utils/utc_time.cpp.o
CMakeFiles/condor_mips.dir/__/condor_utils/condor_version.cpp.o  -o
condor_mips -rdynamic -Wl,-rpath,/usr/lib:/usr/lib/condor
/usr/bin/ld: CMakeFiles/condor_mips.dir/dhry21a.cpp.o: relocation
R_X86_64_32 against symbol `Arr_2_Glob' can not be used when making a
shared object; recompile with -fPIC
/usr/bin/ld: final link failed: Nonrepresentable section on output
collect2: error: ld returned 1 exit status
src/condor_sysapi/CMakeFiles/condor_mips.dir/build.make:172: recipe for
target 'src/condor_sysapi/condor_mips' failed

...

The full build log is available from:
 https://people.debian.org/~rbalint/build-logs/pie-bindnow-20160906/condor_8.4.8~dfsg.1-1_amd64.build.gz

Thanks,
Balint

Message #12 received at 837402@bugs.debian.org (full text, mbox, reply):

From: Adrian Bunk <bunk@stusta.de>

To: 837402@bugs.debian.org

Subject: Fix for the Condor PIE FTBFS

Date: Fri, 4 Nov 2016 13:14:10 +0200

[Message part 1 (text/plain, inline)]

Control: tags -1 patch

A fix for the Condor PIE FTBFS is attached.

cu
Adrian

-- 

       "Is there not promise of rain?" Ling Tan asked suddenly out
        of the darkness. There had been need of rain for many days.
       "Only a promise," Lao Er said.
                                       Pearl S. Buck - Dragon Seed

[fix-PIE.patch (text/x-diff, attachment)]

Message #19 received at 837402@bugs.debian.org (full text, mbox, reply):

From: Michael Hanke <mih@debian.org>

To: 837402@bugs.debian.org

Cc: Adrian Bunk <bunk@stusta.de>

Subject: Thanks

Date: Fri, 4 Nov 2016 16:32:51 +0100

Thanks Adrian!

Will upload when #828269 has been dealt with.

Michael

-- 
Michael Hanke
GPG: 4096R/C073D2287FFB9E9B
http://psychoinformatics.de

Message #24 received at 837402@bugs.debian.org (full text, mbox, reply):

From: Tim Theisen <tim@cs.wisc.edu>

To: Adrian Bunk <bunk@stusta.de>, 837402@bugs.debian.org

Subject: Re: [htcondor-debian] Bug#837402: Fix for the Condor PIE FTBFS

Date: Mon, 07 Nov 2016 14:23:48 -0600

[Message part 1 (text/plain, inline)]

Hello,

Thank you for this fix. We needed to add -fnoPIC because of the severe 
performance impact on the benchmarks. Adding the -fPIE as well has a 
minimal performance impact. I will apply this patch to our upstream sources.

...Tim

On 11/04/2016 06:14 AM, Adrian Bunk wrote:
> Control: tags -1 patch
>
> A fix for the Condor PIE FTBFS is attached.
>
> cu
> Adrian
>
>
>
> _______________________________________________
> htcondor-debian mailing list
> htcondor-debian@cs.wisc.edu
> https://lists.cs.wisc.edu/mailman/listinfo/htcondor-debian

-- 
Tim Theisen
Release Manager
HTCondor & Open Science Grid
Center for High Throughput Computing
Department of Computer Sciences
University of Wisconsin - Madison
4261 Computer Sciences and Statistics
1210 W Dayton St
Madison, WI 53706-1685
+1 608 265 5736

[Message part 2 (text/html, inline)]

Message #31 received at 837402-close@bugs.debian.org (full text, mbox, reply):

From: Michael Hanke <mih@debian.org>

To: 837402-close@bugs.debian.org

Subject: Bug#837402: fixed in condor 8.4.9~dfsg.1-2

Date: Sun, 27 Nov 2016 09:48:45 +0000

Source: condor
Source-Version: 8.4.9~dfsg.1-2

We believe that the bug you reported is fixed in the latest version of
condor, which is due to be installed in the Debian FTP archive.

A summary of the changes between this version and the previous one is
attached.

Thank you for reporting the bug, which will now be closed.  If you
have further comments please address them to 837402@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
pp.
Michael Hanke <mih@debian.org> (supplier of updated condor package)

(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmaster@ftp-master.debian.org)


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

Format: 1.8
Date: Sun, 27 Nov 2016 08:45:09 +0100
Source: condor
Binary: htcondor htcondor-dev htcondor-doc htcondor-dbg libclassad-dev libclassad7 condor condor-doc condor-dev condor-dbg
Architecture: source all amd64
Version: 8.4.9~dfsg.1-2
Distribution: unstable
Urgency: medium
Maintainer: HTCondor Developers <condor-debian@cs.wisc.edu>
Changed-By: Michael Hanke <mih@debian.org>
Description:
 condor     - transitional dummy package
 condor-dbg - transitional dummy package
 condor-dev - transitional dummy package
 condor-doc - transitional dummy package
 htcondor   - distributed workload management system
 htcondor-dbg - distributed workload management system - debugging symbols
 htcondor-dev - distributed workload management system - development files
 htcondor-doc - distributed workload management system - documentation
 libclassad-dev - HTCondor classads expression language - development library
 libclassad7 - HTCondor classads expression language - runtime library
Closes: 828269 837402
Changes:
 condor (8.4.9~dfsg.1-2) unstable; urgency=medium
 .
   * Add patch to fix FTBFS due to -fPIE being default now. Thanks
     to Adrian Bunk <bunk@stusta.de> for the patch (Closes: #837402).
   * Disable VOMS support for now to workaround VOMS not being ready for
     OpenSSL 1.1.0 (Closes: #828269). To be re-enabled once #844877
     was addressed.
   * Add upstream patch for OpenSSL 1.1 compatibility (to be released with
     8.4.10).
Checksums-Sha1:
 82aefed84f2ed60c6d230398028b5893de1ed782 3038 condor_8.4.9~dfsg.1-2.dsc
 6a9887f9cb7e06b26454a3ef2b0bf1157e0b69b4 76476 condor_8.4.9~dfsg.1-2.debian.tar.xz
 e001c6c2d43ae84d1bdfcaf6af31337dc4897be5 16034 condor-dbg_8.4.9~dfsg.1-2_all.deb
 ea12e361d7466410070e8bb0c713ee1a2e400eaa 16034 condor-dev_8.4.9~dfsg.1-2_all.deb
 a7e250e46bde09233abe8a0f872babedeb9acc57 16030 condor-doc_8.4.9~dfsg.1-2_all.deb
 073bfe5e57ebc621df6356a7e38698312e95a267 16020 condor_8.4.9~dfsg.1-2_all.deb
 2915c422cfc1266e42dd9e41b32a8ced96ad29da 18878 condor_8.4.9~dfsg.1-2_amd64.buildinfo
 fd54d72ad26931a3aedce16168d2c8e5b3472192 35280946 htcondor-dbg_8.4.9~dfsg.1-2_amd64.deb
 29dde2d8ff55872435ab6d4a728321909d268423 301594 htcondor-dev_8.4.9~dfsg.1-2_amd64.deb
 7d20c2cfe2661aac68fca9a44f2a8c723114e372 1067610 htcondor-doc_8.4.9~dfsg.1-2_all.deb
 327127d5e9f2dc3437a6e3553be7ddc5cd1aac6b 3674968 htcondor_8.4.9~dfsg.1-2_amd64.deb
 f9c3ea6eb3f4469c16a4113783b19c0938b43389 243902 libclassad-dev_8.4.9~dfsg.1-2_amd64.deb
 55ec554537a1e8333d01827b35c26ac4fd1e2243 194066 libclassad7_8.4.9~dfsg.1-2_amd64.deb
Checksums-Sha256:
 4f32b879a1759ca03f60a866b2107d5c5236703eb26042b20d44a3fdbd26ce7b 3038 condor_8.4.9~dfsg.1-2.dsc
 e9f32ec29295517f31e3088dd3cf30952c8090958aa420c6c7c4909df56ac082 76476 condor_8.4.9~dfsg.1-2.debian.tar.xz
 dce4b60cc995debb845962fa48f33478808790de1915f4ff8e9720882fc00ac5 16034 condor-dbg_8.4.9~dfsg.1-2_all.deb
 79d3c9f9c8f3922113a327d3351a68cd9136470e28c9c35cc12fe29af3148213 16034 condor-dev_8.4.9~dfsg.1-2_all.deb
 e18ee8fe90454094b333410d57ee149d55f9e8ec8b28d0cf67f741304d7b5904 16030 condor-doc_8.4.9~dfsg.1-2_all.deb
 fa1cd3e75d27560ab53e6dd2f9452e2ca5c81f48220a04ac2515d9df51a5c597 16020 condor_8.4.9~dfsg.1-2_all.deb
 f74d4e23af468ea590f9085b5e9480994d65ce2d936a8e5893352e7255155a4a 18878 condor_8.4.9~dfsg.1-2_amd64.buildinfo
 4ec470ff9d89bbdd80d3c57cf88f7106ee45ea9f12ec2f54690e0ad9a7ecdac6 35280946 htcondor-dbg_8.4.9~dfsg.1-2_amd64.deb
 82cee8ab053db72c5109e03399b698cc6ab66bb60716b349c5aeb4cee2a17df1 301594 htcondor-dev_8.4.9~dfsg.1-2_amd64.deb
 eff25e88405661a2fbdb1646750df3fbbd93ed1008a15c5955b5f49cba1f589f 1067610 htcondor-doc_8.4.9~dfsg.1-2_all.deb
 dfd8fb0024ad5c1e275d847638933d02411c1581d1e3aa3342afb5b68115eb8c 3674968 htcondor_8.4.9~dfsg.1-2_amd64.deb
 e2c3e7ec04c722825191379344341a9184d5a3eee0545d01b9c19f9f14db0620 243902 libclassad-dev_8.4.9~dfsg.1-2_amd64.deb
 e9c7da0d1c8b048525c1f8abf172274f42764e4feea1820010976fd6d4091c4e 194066 libclassad7_8.4.9~dfsg.1-2_amd64.deb
Files:
 7171b4d5193c2547af051ff00082f691 3038 science extra condor_8.4.9~dfsg.1-2.dsc
 891716462b3a0314b59c66639535cfd8 76476 science extra condor_8.4.9~dfsg.1-2.debian.tar.xz
 283df3988fbe1bd6b32c3144d1ae13ea 16034 oldlibs extra condor-dbg_8.4.9~dfsg.1-2_all.deb
 a21716467ee9b4e19be67c3b0b55f78d 16034 oldlibs extra condor-dev_8.4.9~dfsg.1-2_all.deb
 8b58702a789b383004f707105cb8407a 16030 oldlibs extra condor-doc_8.4.9~dfsg.1-2_all.deb
 5ecce5c8625e88adb03605133e8e0825 16020 oldlibs extra condor_8.4.9~dfsg.1-2_all.deb
 f1d992ca25cc174e150a286e4c735acf 18878 science extra condor_8.4.9~dfsg.1-2_amd64.buildinfo
 be25d3342ad44c753b018b8b4077ede4 35280946 debug extra htcondor-dbg_8.4.9~dfsg.1-2_amd64.deb
 986a59996ffe7ebcd430ce2f5043f8d1 301594 libdevel extra htcondor-dev_8.4.9~dfsg.1-2_amd64.deb
 fa9a0e36eec604998ba9e9b2f6a0eb21 1067610 doc extra htcondor-doc_8.4.9~dfsg.1-2_all.deb
 e2bd3d87155da70814e4623b20c82ccd 3674968 science extra htcondor_8.4.9~dfsg.1-2_amd64.deb
 e11079216e94aea906706ce239d5f9b6 243902 libdevel extra libclassad-dev_8.4.9~dfsg.1-2_amd64.deb
 8ce25bc7a0594c4eb26fe014b6e24eb8 194066 libs extra libclassad7_8.4.9~dfsg.1-2_amd64.deb

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1
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=5V0w
-----END PGP SIGNATURE-----

Send a report that this bug log contains spam.