Date: Fri, 11 Aug 2023 17:11:54 -0700 From: Kevin Oberman <rkoberman@gmail.com> To: Jan Beich <jbeich@freebsd.org> Cc: freebsd-current@freebsd.org Subject: Re: problem with poudriere && port ftp/curl Message-ID: <CAN6yY1snYz6AR33Dsr9PY_EDHFiodj1MvOoGKHWTCPq_-XcjQg@mail.gmail.com> In-Reply-To: <fs4p-qlym-wny@FreeBSD.org> References: <ZNaGE1yNIdQgfdCn@c720-r368166> <fs4p-qlym-wny@FreeBSD.org>
index | next in thread | previous in thread | raw e-mail
[-- Attachment #1 --]
On Fri, Aug 11, 2023 at 3:00 PM Jan Beich <jbeich@freebsd.org> wrote:
> Matthias Apitz <guru@unixarea.de> writes:
>
> > I have the following problem with poudriere on 14-CURRENT and ports from
> > git head: every time when I start poudriere-bulk it removes a port
> > already compile fine (and all its dependent ports) with the message:
> >
> > ...
>
> > The difference seems to be +/-GSSAPI_BASE and +/-GSSAPI_NONE.
> > I have not set anything about
> > this in the port's options or jail's make.conf.
> >
> > What can I do to fix this?
>
> Maybe poudriere is confused by GSSAPI_${${SSL_DEFAULT} == base :?BASE
> :NONE}
> in OPTIONS_DEFAULT due ssl!=base in DEFAULT_VERSIONS via make.conf(5).
> Try filing a bug against ftp/curl.
>
> $ env -i __MAKE_CONF= PORT_DBDIR=/var/empty make -V
> '${OPTIONS_DEFAULT:M*GSS*}'
> GSSAPI_BASE
> $ env -i __MAKE_CONF= PORT_DBDIR=/var/empty DEFAULT_VERSIONS=ssl=openssl
> make -V '${OPTIONS_DEFAULT:M*GSS*}'
> GSSAPI_NONE
>
> See also
> https://cgit.freebsd.org/ports/diff/ftp/curl/Makefile?id=6d324c1f70c9
>
> I can't reproduce on -CURRENT when only using base OpenSSL 3.0.
>
There are several ports with this problem. Since VirtualBox (and
libvncserver) need openssl31, I now delete openssl31, upgrade ports as
required, and then "package add
/usr/ports/packages/All/openssl31-3.1.2.pkg" when finished.
Just today I hit openldap-client trying to use openssl31 even though
make.conf does not define it as default. Several other ports also don't
honor the fairly new USES=openssl and, if they find an openssl installed,
will use it. Since Aug. 1, I have had several other ports hit this issue.
You really, really don't want ports using openssl31 unless you are sure
that they or any port which they depend on are also using openssl31. If you
get shareable libraries with conflicts, it is a pain to clean them up.
Maybe a message to all committers that they need to be sure that
OPENSSLBASE is not used without USES=openssl. (At least I believe that is
the case.)
--
Kevin Oberman, Part time kid herder and retired Network Engineer
E-mail: rkoberman@gmail.com
PGP Fingerprint: D03FB98AFA78E3B78C1694B318AB39EF1B055683
[-- Attachment #2 --]
<div dir="ltr"><div dir="ltr"><div class="gmail_default" style="font-family:tahoma,sans-serif;font-size:small">On Fri, Aug 11, 2023 at 3:00 PM Jan Beich <<a href="mailto:jbeich@freebsd.org">jbeich@freebsd.org</a>> wrote:</div></div><div class="gmail_quote"><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex">Matthias Apitz <<a href="mailto:guru@unixarea.de" target="_blank">guru@unixarea.de</a>> writes:<br>
<br>
> I have the following problem with poudriere on 14-CURRENT and ports from<br>
> git head: every time when I start poudriere-bulk it removes a port<br>
> already compile fine (and all its dependent ports) with the message:<br>
><br>
> ...<br><br>
> The difference seems to be +/-GSSAPI_BASE and +/-GSSAPI_NONE.<br>
> I have not set anything about<br>
> this in the port's options or jail's make.conf. <br>
><br>
> What can I do to fix this?<br>
<br>
Maybe poudriere is confused by GSSAPI_${${SSL_DEFAULT} == base :?BASE :NONE}<br>
in OPTIONS_DEFAULT due ssl!=base in DEFAULT_VERSIONS via make.conf(5).<br>
Try filing a bug against ftp/curl.<br>
<br>
$ env -i __MAKE_CONF= PORT_DBDIR=/var/empty make -V '${OPTIONS_DEFAULT:M*GSS*}'<br>
GSSAPI_BASE<br>
$ env -i __MAKE_CONF= PORT_DBDIR=/var/empty DEFAULT_VERSIONS=ssl=openssl make -V '${OPTIONS_DEFAULT:M*GSS*}'<br>
GSSAPI_NONE<br>
<br>
See also <a href="https://cgit.freebsd.org/ports/diff/ftp/curl/Makefile?id=6d324c1f70c9" rel="noreferrer" target="_blank">https://cgit.freebsd.org/ports/diff/ftp/curl/Makefile?id=6d324c1f70c9</a><br>;
<br>
I can't reproduce on -CURRENT when only using base OpenSSL 3.0.<br></blockquote><div> </div></div><div style="font-family:tahoma,sans-serif;font-size:small" class="gmail_default">There are several ports with this problem. Since VirtualBox (and libvncserver) need openssl31, I now delete openssl31, upgrade ports as required, and then "package add /usr/ports/packages/All/openssl31-3.1.2.pkg" when finished.</div><div style="font-family:tahoma,sans-serif;font-size:small" class="gmail_default"><br></div><div style="font-family:tahoma,sans-serif;font-size:small" class="gmail_default">Just today I hit openldap-client trying to use openssl31 even though make.conf does not define it as default. Several other ports also don't honor the fairly new USES=openssl and, if they find an openssl installed, will use it. Since Aug. 1, I have had several other ports hit this issue. You really, really don't want ports using openssl31 unless you are sure that they or any port which they depend on are also using openssl31. If you get shareable libraries with conflicts, it is a pain to clean them up. Maybe a message to all committers that they need to be sure that OPENSSLBASE is not used without USES=openssl. (At least I believe that is the case.)<br></div><br clear="all"><br><span class="gmail_signature_prefix">-- </span><br><div dir="ltr" class="gmail_signature"><div dir="ltr"><div><div dir="ltr"><div><div dir="ltr"><div><div dir="ltr">Kevin Oberman, Part time kid herder and retired Network Engineer<br>E-mail: <a href="mailto:rkoberman@gmail.com" target="_blank">rkoberman@gmail.com</a><br></div><div>PGP Fingerprint: D03FB98AFA78E3B78C1694B318AB39EF1B055683</div></div></div></div></div></div></div></div></div>
help
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?CAN6yY1snYz6AR33Dsr9PY_EDHFiodj1MvOoGKHWTCPq_-XcjQg>