| 7 Oct 2025 |
Vladimír Čunát | It's the kind of thing that might make sense to keep upstream, as e.g. their CI will be known not to suffer from the hardening. But not suitable as a default in a distro. | 15:53:00 |
Willi Butz | just saw that it is part of the logs 🤦
https://gist.github.com/WilliButz/afd8ca68c45c5e6a96216f6b92658d23#file-build-log-L1012 | 15:53:59 |
dramforever | this is like a test-only problem right | 15:54:06 |
Vladimír Čunát | It certainly looks that way to me. | 15:54:32 |
dramforever | does it mean it's building two copies of everything just to test | 15:56:46 |
Vladimír Čunát | 🤔 right, it shouldn't have ASAN in the default build. | 15:57:41 |
Vladimír Čunát | * 🤔 right, it shouldn't have ASAN in the default build. (though I don't know audit in particular really) | 15:58:11 |
Grimmauld (any/all) | i believe it builds specific test binaries that are built with asan | 15:59:56 |
Vladimír Čunát | I don't reproduce the issue on normal 6.6 kernel. | 16:01:08 |
Grimmauld (any/all) | hydra doesn't run into this issue, but we should probably still skip the test for the sake of reproducibility | 16:02:11 |
Grimmauld (any/all) | give me a few minutes until the dependencies are built on my machine, then i'll do the skip and open a PR | 16:04:08 |
Grimmauld (any/all) | i'll target -next i guess, we don't have anything built. But this should be merged soon-ish, audit rebuilds systemd and pam and dbus and stuff iirc | 16:04:41 |
Grimmauld (any/all) | or should i target not-next and call hydra not running into it good enough? | 16:05:10 |
Vladimír Čunát | Yes, Hydra is about to start building stuff in minutes. | 16:05:16 |
Vladimír Čunát | Either is fine, I'd say. | 16:05:32 |
Vladimír Čunát | If staging-next, I'd prefer to merged that within one hour. | 16:06:18 |
Vladimír Čunát | * If staging-next, I'd prefer to merge that within one hour. | 16:06:24 |
Vladimír Čunát | Otherwise we'll be delaying the cycle and this error perhaps isn't that urgent. | 16:06:53 |
Vladimír Čunát | (audit hopefully won't be commonly rebuilt by users + combination with special kernel) | 16:07:38 |
Grimmauld (any/all) | Uh | 16:08:41 |
Grimmauld (any/all) | https://github.com/linux-audit/audit-userspace/blob/b83c84eb61e9bdaed6dc73ccde2dece154db5471/configure.ac#L304-L316 | 16:08:44 |
Grimmauld (any/all) | audit builds everything with asan | 16:08:53 |
Grimmauld (any/all) | sooo this is ugly | 16:08:58 |
Grimmauld (any/all) | and might occur at runtime on peoples systems? | 16:09:16 |
Grimmauld (any/all) | not sure | 16:09:19 |
Grimmauld (any/all) | tbh i am tempted to just force the have_asan check to fail, so it'll just build without asan and all the issues disappear | 16:11:46 |
Grimmauld (any/all) | not sure whether thats a good idea though | 16:11:53 |
Alyssa Ross | what does gentoo do? | 16:13:56 |
Vladimír Čunát | I'd expect that they have security reasons. | 16:16:44 |
Vladimír Čunát | Like, let asan crash some failures just to be safe. | 16:17:10 |