Bug 274753
| Summary: | security/sudo fails to build on poudriere due to OpenSSL linker error | ||||||
|---|---|---|---|---|---|---|---|
| Product: | Ports & Packages | Reporter: | tburns | ||||
| Component: | Individual Port(s) | Assignee: | Renato Botelho <garga> | ||||
| Status: | Closed FIXED | ||||||
| Severity: | Affects Some People | CC: | chris | ||||
| Priority: | --- | Flags: | bugzilla:
maintainer-feedback?
(garga) |
||||
| Version: | Latest | ||||||
| Hardware: | amd64 | ||||||
| OS: | Any | ||||||
| Attachments: |
|
||||||
|
Description
tburns
2023-10-27 10:57:22 UTC
(In reply to tburns from comment #0) Are you building sudo 1.9.14p3? I tried the OPTIONS combination you mentioned and it built fine without installing openssl as a dependency https://idaho.arrakis.com.br/build.html?mastername=13-amd64-default&build=2023-10-27_08h22m36s (In reply to Renato Botelho from comment #1) WOW! Thanks for the fast response! Yes 1.9.14p3. Here is the poudriere build environment: [00:00:18] =>> Building security/sudo [00:00:18] build started at Thu Oct 26 10:28:25 EDT 2023 [00:00:18] port directory: /usr/ports/security/sudo [00:00:18] package name: sudo-1.9.14p3 [00:00:18] building for: FreeBSD repo2.hrsd.com 13.2-RELEASE-p4 FreeBSD 13.2-RELEASE-p4 amd64 [00:00:18] maintained by: garga@FreeBSD.org [00:00:18] Makefile ident: [00:00:18] Poudriere version: 3.3.7_4 [00:00:18] Host OSVERSION: 1302001 [00:00:18] Jail OSVERSION: 1302001 [00:00:18] Job Id: 02 [00:00:18] [00:00:18] ---Begin Environment--- [00:00:18] SHELL=/bin/csh [00:00:18] OSVERSION=1302001 [00:00:18] UNAME_v=FreeBSD 13.2-RELEASE-p4 [00:00:18] UNAME_r=13.2-RELEASE-p4 [00:00:18] BLOCKSIZE=K [00:00:18] MAIL=/var/mail/root [00:00:18] MM_CHARSET=UTF-8 [00:00:18] LANG=C.UTF-8 [00:00:18] STATUS=1 [00:00:18] HOME=/root [00:00:18] PATH=/sbin:/bin:/usr/sbin:/usr/bin:/usr/local/sbin:/usr/local/bin:/root/bin [00:00:18] LOCALBASE=/usr/local [00:00:18] USER=root [00:00:18] LIBEXECPREFIX=/usr/local/libexec/poudriere [00:00:18] POUDRIERE_VERSION=3.3.7_4 [00:00:18] MASTERMNT=/repos/poudriere/data/.m/132-default/ref [00:00:18] POUDRIERE_BUILD_TYPE=bulk [00:00:18] PACKAGE_BUILDING=yes [00:00:18] SAVED_TERM=xterm-256color [00:00:18] GID=0 [00:00:18] UID=0 [00:00:18] PWD=/repos/poudriere/data/.m/132-default/ref/.p/pool [00:00:18] P_PORTS_FEATURES=FLAVORS SELECTED_OPTIONS [00:00:18] MASTERNAME=132-default [00:00:18] SCRIPTPREFIX=/usr/local/share/poudriere [00:00:18] OLDPWD=/repos/poudriere/data/.m/132-default/ref/.p [00:00:18] SCRIPTPATH=/usr/local/share/poudriere/bulk.sh [00:00:18] POUDRIEREPATH=/usr/local/bin/poudriere [00:00:18] ---End Environment--- [00:00:18] [00:00:18] ---Begin Poudriere Port Flags/Env--- [00:00:18] PORT_FLAGS= [00:00:18] PKGENV= [00:00:18] FLAVOR= [00:00:18] DEPENDS_ARGS= [00:00:18] MAKE_ARGS= [00:00:18] ---End Poudriere Port Flags/Env--- Here is my make.conf: DEFAULT_VERSIONS= ssl=openssl pgsql=14 php=8.2 samba=4.13 python=3.9 python3=3.9 mysql=10.5m ruby=3.2 DEFAULT_SSL=openssl SUDO_LDAP_CONF=sudo-ldap.conf PYTHON_EXEC_PREFIX=/usr/local DEFAULT_OPENLDAP_VER=26 ALLOW_UNSUPPORTED_SYSTEM=yes (In reply to tburns from comment #2) I managed to reproduce the problem. sudo build scripts are linking binaries against openssl from base (1.1.1) instead of 3.x. I started a discussion upstream about it Created attachment 246031 [details]
Fix build with ports openssl
Can you please try attached patch? It seems to work on my tests
(In reply to Renato Botelho from comment #4) [00:00:06] [01] [00:00:00] Building security/sudo | sudo-1.9.14p3_1 [00:01:22] [01] [00:01:16] Finished security/sudo | sudo-1.9.14p3_1: Success That worked. It seems to be integrating with sssd/ldap as expected too. Thanks! A commit in branch main references this bug: URL: https://cgit.FreeBSD.org/ports/commit/?id=dbc4e4daf752173acb868fc595ae9fa42f972aef commit dbc4e4daf752173acb868fc595ae9fa42f972aef Author: Renato Botelho <garga@FreeBSD.org> AuthorDate: 2023-10-31 22:07:56 +0000 Commit: Renato Botelho <garga@FreeBSD.org> CommitDate: 2023-11-01 12:00:24 +0000 security/sudo: Fix build with openssl from ports Since SSL support is being changed and sudo can be built without it, add a new SSL option, on by default. When option is enabled, use --enable-openssl=${OPENSSLBASE} to make sure it consumes desired OpenSSL implementation. Also add pkgconfig dependency because configure script rely on it to detect openssl details. PR: 274753 Reported by: tburns@hrsd.com Sponsored by: Rubicon Communications, LLC ("Netgate") security/sudo/Makefile | 11 ++++++++--- 1 file changed, 8 insertions(+), 3 deletions(-) A commit in branch 2023Q4 references this bug: URL: https://cgit.FreeBSD.org/ports/commit/?id=005d8c15b8027330dd27d66caaf97dc8a85f034a commit 005d8c15b8027330dd27d66caaf97dc8a85f034a Author: Renato Botelho <garga@FreeBSD.org> AuthorDate: 2023-10-31 22:07:56 +0000 Commit: Renato Botelho <garga@FreeBSD.org> CommitDate: 2023-11-01 12:08:44 +0000 security/sudo: Fix build with openssl from ports Since SSL support is being changed and sudo can be built without it, add a new SSL option, on by default. When option is enabled, use --enable-openssl=${OPENSSLBASE} to make sure it consumes desired OpenSSL implementation. Also add pkgconfig dependency because configure script rely on it to detect openssl details. PR: 274753 Reported by: tburns@hrsd.com Sponsored by: Rubicon Communications, LLC ("Netgate") (cherry picked from commit dbc4e4daf752173acb868fc595ae9fa42f972aef) security/sudo/Makefile | 11 ++++++++--- 1 file changed, 8 insertions(+), 3 deletions(-) |
