Debian Bug report logs - #993249
wrong path on merged-/usr systems (ifconfig)

Toggle useless messages

Message #5 received at submit@bugs.debian.org (full text, mbox, reply):

From: Simon McVittie <smcv@debian.org>

To: Debian Bug Tracking System <submit@bugs.debian.org>

Subject: gnunet: stores wrong path to ifconfig if built on merged-/usr system

Date: Sun, 29 Aug 2021 11:46:57 +0100

[Message part 1 (text/plain, inline)]

Source: gnunet
Version: 0.13.1-2
Severity: important
Tags: patch bookworm sid
User: reproducible-builds@lists.alioth.debian.org
Usertags: usrmerge
X-Debbugs-Cc: reproducible-bugs@lists.alioth.debian.org

If gnunet is built on a merged-/usr system (as created by new
installations of Debian >= 10, debootstrap --merged-usr, or installing
the usrmerge package into an existing installation), the path to ifconfig
is recorded in the binary package as /usr/sbin/ifconfig, rather than the
canonical /sbin/ifconfig.

This can be seen on the reproducible-builds.org infra:
https://tests.reproducible-builds.org/debian/rb-pkg/unstable/i386/diffoscope-results/gnunet.html

If you have sbuild available, an easy way to reproduce this is to build
twice, once with --add-depends=usrmerge and once without.

I suspect the same thing would happen if ifconfig was built on a system
where /sbin and /usr/sbin had instead been unified via a symlink farm.

The problematic situation is if the package is *built* on a unified-/usr
system, but *used* on a non-unified-/usr system. In this situation,
/usr/sbin/ifconfig exists on the build system but not on the system where
the package will be used, resulting in the features that use this
executable not working correctly.

Technical Committee resolution #978636 mandates heading towards a
transition to merged-/usr, and this will become a non-issue at the end of
that transition; but variation between merged-/usr and non-merged-/usr
builds is a problem while that transition is taking place, because it
can lead to partial upgrades behaving incorrectly. It is likely that
this class of bugs will become release-critical later in the bookworm
development cycle.

The attached patch resolves this: with it applied, the package builds
identically with and without --add-depends=usrmerge. I was unable to verify
this on unstable due to #993247, but it works on bullseye.

Some developers advocate unifying /sbin with /usr/sbin via a symlink farm
in /bin instead of merged-/usr, but that strategy would have a similar
practical effect on this particular package, and the same solution would
be required.

A side benefit of fixing this is that this change seems likely to be
sufficient to make the package reproducible (as recommended by Policy
§4.15).

    smcv

[0001-d-rules-Specify-canonical-path-for-ifconfig.patch (text/x-diff, attachment)]

Message #14 received at 993249-close@bugs.debian.org (full text, mbox, reply):

From: Debian FTP Masters <ftpmaster@ftp-master.debian.org>

To: 993249-close@bugs.debian.org

Subject: Bug#993249: fixed in gnunet 0.15.3-1

Date: Thu, 23 Dec 2021 19:00:09 +0000

Source: gnunet
Source-Version: 0.15.3-1
Done: Daniel Baumann <daniel.baumann@progress-linux.org>

We believe that the bug you reported is fixed in the latest version of
gnunet, which is due to be installed in the Debian FTP archive.

A summary of the changes between this version and the previous one is
attached.

Thank you for reporting the bug, which will now be closed.  If you
have further comments please address them to 993249@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
pp.
Daniel Baumann <daniel.baumann@progress-linux.org> (supplier of updated gnunet package)

(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmaster@ftp-master.debian.org)


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Sun, 19 Dec 2021 08:21:31 +0100
Source: gnunet
Binary: gnunet gnunet-dbgsym gnunet-dev libgnunet-dev libgnunet0.15 libgnunet0.15-dbgsym
Architecture: source amd64 all
Version: 0.15.3-1
Distribution: sid
Urgency: medium
Maintainer: Daniel Baumann <daniel.baumann@progress-linux.org>
Changed-By: Daniel Baumann <daniel.baumann@progress-linux.org>
Description:
 gnunet     - GNU's framework for secure peer-to-peer networking
 gnunet-dev - GNU's framework for secure peer-to-peer networking (transitional
 libgnunet-dev - GNU's framework for secure peer-to-peer networking (development)
 libgnunet0.15 - GNU's framework for secure peer-to-peer networking (libraries)
Closes: 986828 993247 993249 998290
Changes:
 gnunet (0.15.3-1) sid; urgency=medium
 .
   * Uploading to sid.
   * Merging upstream version 0.15.3 (Closes: #986828, #993247).
   * Updating packaging for libgnunet0.15.
   * Updating packaging for gnunet 0.15.
   * Updating to standards version 4.6.0.
   * Passing path to ifconfig for reproducibility reasons on merged-/usr
     systems, thanks to Simon McVittie <smcv@debian.org> (Closes: #993249).
   * Using mktemp instead of tempfile (Closes: #998290).
   * Adding GFDL license note for manpages in copyright.
Checksums-Sha1:
 de8628025dc54b55e85fdd25825bf99d8ad0d72b 2464 gnunet_0.15.3-1.dsc
 69d85a0cc28a9139cb55ad533dde32ed4573c450 4867768 gnunet_0.15.3.orig.tar.xz
 863859b6188c8f1c2e36addbac55ed37e0d7b27c 67596 gnunet_0.15.3-1.debian.tar.xz
 211f5f9bc12c46b82400516dac15247df29f1ba3 5405532 gnunet-dbgsym_0.15.3-1_amd64.deb
 bda10dd684dd4eaabfa0543b228b5caca1f6688c 45104 gnunet-dev_0.15.3-1_all.deb
 c462107b14ce740ae91a1906fe96d074ed98f105 15033 gnunet_0.15.3-1_amd64.buildinfo
 fe85a36461275827af70ef362910bb9d9c4312ef 2302216 gnunet_0.15.3-1_amd64.deb
 2411eb3027a3dc8ed0d028938b3d83fbdbb24cb3 280860 libgnunet-dev_0.15.3-1_amd64.deb
 65f0b033c62b42e344c177a794b22589c4721e3b 800040 libgnunet0.15-dbgsym_0.15.3-1_amd64.deb
 cfe9b3f94de5ccae8f1cce4a0f06a128fc33d5b8 372520 libgnunet0.15_0.15.3-1_amd64.deb
Checksums-Sha256:
 360184743e4160729c4afabe4b7b68c4168b58e8703ad20ccffe6fe3df3d11b5 2464 gnunet_0.15.3-1.dsc
 3a6c654b6c9c9caa37ee848c69c872f2a5679770a623d4eb15e016db3181fe42 4867768 gnunet_0.15.3.orig.tar.xz
 7c7890decccfd5c601bb47530943a11fd4993c7d0a4479b446cfc06a5d8cb498 67596 gnunet_0.15.3-1.debian.tar.xz
 4499b4657530689d42d3cb7d6201eaa77ccdb7c1baaab53d3e63b875486d2afa 5405532 gnunet-dbgsym_0.15.3-1_amd64.deb
 e540f10b1017783892cd81c55c82b935f3dff63f3b4b90de27ca7ccb0b949cd5 45104 gnunet-dev_0.15.3-1_all.deb
 067d99186341697dd26b6804cc770a7c8062121ae0a3218adc84929665a385c4 15033 gnunet_0.15.3-1_amd64.buildinfo
 2694601eb59c092b54b12c58e718756cc5cc784ed8b0f5f9ffa5ba3f092fd5c4 2302216 gnunet_0.15.3-1_amd64.deb
 38b9298d72232ddd2e5674acdbc702e15e3fa0dcff073a448a67704716d7243e 280860 libgnunet-dev_0.15.3-1_amd64.deb
 3e8453b2c167494972904eb285837682099dfb1124f7fbd7aca4a9b4edd07a31 800040 libgnunet0.15-dbgsym_0.15.3-1_amd64.deb
 b84cafd1d34d22bd948540e319f20a62c75f1aa76e05f3c17135d7565de3d487 372520 libgnunet0.15_0.15.3-1_amd64.deb
Files:
 0e1ee2a56e75d27a3b90b6c7e8d69361 2464 net optional gnunet_0.15.3-1.dsc
 320cec0876ff61a2e6add832ef1a68d7 4867768 net optional gnunet_0.15.3.orig.tar.xz
 8300c98abc0d9e772e4e588fe43f5f4e 67596 net optional gnunet_0.15.3-1.debian.tar.xz
 7b05812b56a6b82eb660043f4a6ee805 5405532 debug optional gnunet-dbgsym_0.15.3-1_amd64.deb
 fb1ee33b42000b6b859a0b945521c4c2 45104 net optional gnunet-dev_0.15.3-1_all.deb
 e9ec08de0d2d1dcf35eed98772d5c1da 15033 net optional gnunet_0.15.3-1_amd64.buildinfo
 7029728e2de550b65ababfd7b5b511e9 2302216 net optional gnunet_0.15.3-1_amd64.deb
 72fed14cda18082b5f35f1c444ea3ac8 280860 libdevel optional libgnunet-dev_0.15.3-1_amd64.deb
 cf6f92d4f68776e49d6284fab725ac56 800040 debug optional libgnunet0.15-dbgsym_0.15.3-1_amd64.deb
 1059c81df2c798add94f1c7aeb09b5c8 372520 libs optional libgnunet0.15_0.15.3-1_amd64.deb

-----BEGIN PGP SIGNATURE-----
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=WywQ
-----END PGP SIGNATURE-----

Send a report that this bug log contains spam.