-
Notifications
You must be signed in to change notification settings - Fork 723
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
issues when packaging on Debian #270
Comments
yuzibo
changed the title
Test failed when packaging on Debian
issues when packaging on Debian
Oct 24, 2024
As the title indicates, there are many issues found when packaging on Debian, so I record this one by one on here. |
libzlog1: file-references-package-build-path [usr/lib/x86_64-linux-gnu/libzlog.so.1.2.18] lintian's warning about lintian-explain-tags file-references-package-build-path
N:
I: file-references-package-build-path
N:
N: The listed file or maintainer script appears to reference the build path used to build the package as specified in the Build-Path
N: field of the .buildinfo file.
N:
N: This is likely to cause the package to be unreproducible, but it may also indicate that the package will not work correctly outside
N: of the maintainer's own system.
N:
N: Please note that this tag will not appear unless the .buildinfo file contains a Build-Path field. That field is optional. You may
N: have to set DEB_BUILD_OPTIONS=buildinfo=+path or use --buildinfo-option=--always-include-path with dpkg-buildpackage when building.
N:
N: Please refer to https://reproducible-builds.org/, https://wiki.debian.org/ReproducibleBuilds/BuildinfoFiles, and the
N: dpkg-genbuildinfo(1) manual page for details.
N:
N: Visibility: info
N: Show-Always: no
N: Check: files/contents I have tried many methods like the above mention but no good results, so I record this here. |
I: libzlog1: hardening-no-bindnow [usr/lib/x86_64-linux-gnu/libzlog.so.1.2.18] The lintian hits is below: $ lintian-explain-tags hardening-no-bindnow
N:
I: hardening-no-bindnow
N:
N: This package provides an ELF binary that lacks the "bindnow" linker flag.
N:
N: This is needed (together with "relro") to make the "Global Offset Table" (GOT) fully read-only. The bindnow feature trades startup
N: time for improved security. Please consider enabling this feature or consider overriding the tag (possibly with a comment about
N: why).
N:
N: If you use dpkg-buildflags, you may have to add hardening=+bindnow or hardening=+all to DEB_BUILD_MAINT_OPTIONS.
N:
N: The relevant compiler flags are set in LDFLAGS.
N:
N: Please refer to https://wiki.debian.org/Hardening for details.
N:
N: Visibility: info
N: Show-Always: no
N: Check: binaries/hardening
But the issue was always existed. |
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
hi,
Thanks for your work. Now I am packaging it on Debian, but when I enable the test running on Debian, I got the error:
Now I post this to here to remind me to look at this deeply when I have time. thanks.
The text was updated successfully, but these errors were encountered: