246 lines
8.5 KiB
Bash
246 lines
8.5 KiB
Bash
#!/usr/bin/bash
|
|
# JOBoRun : Jwm OpenBox Obarun RUNit
|
|
# Maintainer : Joe Bo Run <joborun@disroot.org>
|
|
# PkgSource : url="https://gittea.disroot.org/joborun-pkg/jobcore/$pkgname"
|
|
# Website : https://pozol.eu
|
|
#-----------------------------------------| DESCRIPTION |---------------------------------------
|
|
|
|
# toolchain build order: linux-api-headers->glibc->binutils->gcc->libtool->glibc->binutils->gcc
|
|
# NOTE: valgrind requires rebuilt with each major glibc version
|
|
|
|
pkgbase=glibc
|
|
pkgname=(glibc lib32-glibc)
|
|
pkgver=2.37
|
|
_commit=a704fd9a133bfb10510e18702f48a6a9c88dbbd5
|
|
pkgrel=02
|
|
arch=(x86_64)
|
|
url='https://www.gnu.org/software/libc'
|
|
makedepends=(git gd lib32-gcc-libs python)
|
|
#optdepends=('perl: for mtrace')
|
|
#options=(debug staticlibs !lto)
|
|
options=(staticlibs !lto)
|
|
source=(git+https://sourceware.org/git/glibc.git#commit=${_commit}
|
|
locale.gen.txt
|
|
locale-gen
|
|
lib32-glibc.conf
|
|
sdt.h sdt-config.h
|
|
# disable-clone3.diff
|
|
reenable_DT_HASH.patch
|
|
cve-2023-25139.patch
|
|
)
|
|
|
|
prepare() {
|
|
mkdir -p glibc-build lib32-glibc-build
|
|
|
|
[[ -d glibc-$pkgver ]] && ln -s glibc-$pkgver glibc
|
|
cd glibc
|
|
|
|
# Re-enable `--hash-style=both` for building shared objects due to issues with EPIC's EAC
|
|
# which relies on DT_HASH to be present in these libs.
|
|
# reconsider 2023-01
|
|
patch -Np1 -i "${srcdir}"/reenable_DT_HASH.patch
|
|
|
|
# Add a temporary patch for cve 2023-25139 until a fix has been backported.
|
|
# Technical the fix itself is complete but the test cases aren't.
|
|
# See https://sourceware.org/bugzilla/show_bug.cgi?id=30068
|
|
patch -Np1 -i "${srcdir}"/cve-2023-25139.patch
|
|
}
|
|
|
|
build() {
|
|
local _configure_flags=(
|
|
--prefix=/usr
|
|
--with-headers=/usr/include
|
|
--with-bugurl=https://bugs.archlinux.org/
|
|
--enable-bind-now
|
|
--enable-cet
|
|
--enable-kernel=4.4
|
|
--enable-multi-arch
|
|
--enable-stack-protector=strong
|
|
--enable-systemtap
|
|
--disable-crypt
|
|
--disable-profile
|
|
--disable-werror
|
|
)
|
|
|
|
cd "$srcdir/glibc-build"
|
|
|
|
echo "slibdir=/usr/lib" >> configparms
|
|
echo "rtlddir=/usr/lib" >> configparms
|
|
echo "sbindir=/usr/bin" >> configparms
|
|
echo "rootsbindir=/usr/bin" >> configparms
|
|
|
|
# Credits @allanmcrae
|
|
# https://github.com/allanmcrae/toolchain/blob/f18604d70c5933c31b51a320978711e4e6791cf1/glibc/PKGBUILD
|
|
# remove fortify for building libraries
|
|
CFLAGS=${CFLAGS/-Wp,-D_FORTIFY_SOURCE=2/}
|
|
|
|
"$srcdir/glibc/configure" \
|
|
--libdir=/usr/lib \
|
|
--libexecdir=/usr/lib \
|
|
"${_configure_flags[@]}"
|
|
|
|
# build libraries with fortify disabled
|
|
echo "build-programs=no" >> configparms
|
|
make -O
|
|
|
|
# re-enable fortify for programs
|
|
sed -i "/build-programs=/s#no#yes#" configparms
|
|
echo "CFLAGS += -Wp,-D_FORTIFY_SOURCE=2" >> configparms
|
|
make -O
|
|
|
|
# build info pages manually for reproducibility
|
|
make info
|
|
|
|
cd "$srcdir/lib32-glibc-build"
|
|
export CC="gcc -m32 -mstackrealign"
|
|
export CXX="g++ -m32 -mstackrealign"
|
|
|
|
echo "slibdir=/usr/lib32" >> configparms
|
|
echo "rtlddir=/usr/lib32" >> configparms
|
|
echo "sbindir=/usr/bin" >> configparms
|
|
echo "rootsbindir=/usr/bin" >> configparms
|
|
|
|
"$srcdir/glibc/configure" \
|
|
--host=i686-pc-linux-gnu \
|
|
--libdir=/usr/lib32 \
|
|
--libexecdir=/usr/lib32 \
|
|
"${_configure_flags[@]}"
|
|
|
|
# build libraries with fortify disabled
|
|
echo "build-programs=no" >> configparms
|
|
make -O
|
|
|
|
# re-enable fortify for programs
|
|
sed -i "/build-programs=/s#no#yes#" configparms
|
|
echo "CFLAGS += -Wp,-D_FORTIFY_SOURCE=2" >> configparms
|
|
make -O
|
|
|
|
# pregenerate C.UTF-8 locale until it is built into glibc
|
|
# (https://sourceware.org/glibc/wiki/Proposals/C.UTF-8, FS#74864)-
|
|
elf/ld.so --library-path "$PWD" locale/localedef -c -f ../glibc/localedata/charmaps/UTF-8 -i ../glibc/localedata/locales/C ../C.UTF-8/
|
|
}
|
|
|
|
# Credits for skip_test() and check() @allanmcrae
|
|
# https://github.com/allanmcrae/toolchain/blob/f18604d70c5933c31b51a320978711e4e6791cf1/glibc/PKGBUILD
|
|
#skip_test() {
|
|
# test=${1}
|
|
# file=${2}
|
|
# sed -i "s/\b${test}\b//" "${srcdir}"/glibc/${file}
|
|
#}
|
|
#
|
|
#check() {
|
|
# cd glibc-build
|
|
#
|
|
# # adjust/remove buildflags that cause false-positive testsuite failures
|
|
# sed -i '/FORTIFY/d' configparms # failure to build testsuite
|
|
# sed -i 's/-Werror=format-security/-Wformat-security/' config.make # failure to build testsuite
|
|
# sed -i '/CFLAGS/s/-fno-plt//' config.make # 16 failures
|
|
# sed -i '/CFLAGS/s/-fexceptions//' config.make # 1 failure
|
|
# LDFLAGS=${LDFLAGS/,-z,now/} # 10 failures
|
|
#
|
|
# # The following tests fail due to restrictions in the Arch build system
|
|
# # The correct fix is to add the following to the systemd-nspawn call:
|
|
# # --system-call-filter="@clock @memlock @pkey"
|
|
# skip_test test-errno-linux sysdeps/unix/sysv/linux/Makefile
|
|
# skip_test tst-mlock2 sysdeps/unix/sysv/linux/Makefile
|
|
# skip_test tst-ntp_gettime sysdeps/unix/sysv/linux/Makefile
|
|
# skip_test tst-ntp_gettimex sysdeps/unix/sysv/linux/Makefile
|
|
# skip_test tst-pkey sysdeps/unix/sysv/linux/Makefile
|
|
# skip_test tst-process_mrelease sysdeps/unix/sysv/linux/Makefile
|
|
# skip_test tst-adjtime time/Makefile
|
|
# skip_test tst-clock2 time/Makefile
|
|
#
|
|
# make -O check
|
|
#}
|
|
#
|
|
|
|
package_glibc() {
|
|
pkgdesc='GNU C Library w/o systemd'
|
|
depends=('linux-api-headers>=5.10' tzdata filesystem)
|
|
optdepends=('gd: for memusagestat'
|
|
'perl: for mtrace')
|
|
install=glibc.install
|
|
backup=(etc/gai.conf
|
|
etc/locale.gen
|
|
etc/nscd.conf)
|
|
|
|
make -C glibc-build install_root="$pkgdir" install
|
|
rm -f "$pkgdir"/etc/ld.so.cache
|
|
|
|
# Shipped in tzdata
|
|
rm -f "$pkgdir"/usr/bin/{tzselect,zdump,zic}
|
|
|
|
cd glibc
|
|
|
|
install -dm755 "$pkgdir"/usr/lib/{locale,tmpfiles.d}
|
|
install -m644 nscd/nscd.conf "$pkgdir/etc/nscd.conf"
|
|
install -m644 nscd/nscd.tmpfiles "$pkgdir/usr/lib/tmpfiles.d/nscd.conf"
|
|
install -dm755 "$pkgdir/var/db/nscd"
|
|
|
|
install -m644 posix/gai.conf "$pkgdir"/etc/gai.conf
|
|
|
|
install -m755 "$srcdir/locale-gen" "$pkgdir/usr/bin"
|
|
|
|
# Create /etc/locale.gen
|
|
install -m644 "$srcdir/locale.gen.txt" "$pkgdir/etc/locale.gen"
|
|
sed -e '1,3d' -e 's|/| |g' -e 's|\\| |g' -e 's|^|#|g' \
|
|
"$srcdir/glibc/localedata/SUPPORTED" >> "$pkgdir/etc/locale.gen"
|
|
|
|
# Add SUPPORTED file to pkg
|
|
sed -e '1,3d' -e 's|/| |g' -e 's| \\||g' \
|
|
"${srcdir}"/glibc/localedata/SUPPORTED > "${pkgdir}"/usr/share/i18n/SUPPORTED
|
|
|
|
# install C.UTF-8 so that it is always available
|
|
install -dm755 "$pkgdir/usr/lib/locale"
|
|
cp -r "$srcdir/C.UTF-8" -t "$pkgdir/usr/lib/locale"
|
|
sed -i '/#C\.UTF-8 /d' "$pkgdir/etc/locale.gen"
|
|
|
|
# Provide tracing probes to libstdc++ for exceptions, possibly for other
|
|
# libraries too. Useful for gdb's catch command.
|
|
install -Dm644 "$srcdir/sdt.h" "$pkgdir/usr/include/sys/sdt.h"
|
|
install -Dm644 "$srcdir/sdt-config.h" "$pkgdir/usr/include/sys/sdt-config.h"
|
|
}
|
|
|
|
package_lib32-glibc() {
|
|
pkgdesc='GNU C Library (32-bit) w/o systemd'
|
|
depends=("glibc=$pkgver")
|
|
options+=('!emptydirs')
|
|
|
|
cd lib32-glibc-build
|
|
|
|
make install_root="$pkgdir" install
|
|
rm -rf "$pkgdir"/{etc,sbin,usr/{bin,sbin,share},var}
|
|
|
|
# We need to keep 32 bit specific header files
|
|
find "$pkgdir/usr/include" -type f -not -name '*-32.h' -delete
|
|
|
|
# Dynamic linker
|
|
install -d "$pkgdir/usr/lib"
|
|
ln -s ../lib32/ld-linux.so.2 "$pkgdir/usr/lib/"
|
|
|
|
# Add lib32 paths to the default library search path
|
|
install -Dm644 "$srcdir/lib32-glibc.conf" "$pkgdir/etc/ld.so.conf.d/lib32-glibc.conf"
|
|
|
|
# Symlink /usr/lib32/locale to /usr/lib/locale
|
|
ln -s ../lib/locale "$pkgdir/usr/lib32/locale"
|
|
}
|
|
|
|
#---- license gpg-key sha256sums ----
|
|
|
|
license=(GPL LGPL)
|
|
|
|
validpgpkeys=(7273542B39962DF7B299931416792B4EA25340F8 # Carlos O'Donell
|
|
BC7C7372637EC10C57D7AA6579C43DFBF1CF2187) # Siddhesh Poyarekar
|
|
|
|
sha256sums=(SKIP
|
|
2a7dd6c906b6c54a68f48a21898664a32fdb136cbd9ff7bfd48f01d1aaa649ae # locale.gen.txt
|
|
8c5cc09018cbd65e8570430f872e118caa2644e311d6200b7d5f0cba837fbba4 # locale-gen
|
|
c27424154a6096ae32c0824b785e05de6acef33d9224fd6147d1936be9b4962b # lib32-glibc.conf
|
|
774061aff612a377714a509918a9e0e0aafce708b87d2d7e06b1bd1f6542fe70 # sdt.h
|
|
cdc234959c6fdb43f000d3bb7d1080b0103f4080f5e67bcfe8ae1aaf477812f0 # sdt-config.h
|
|
bb2fc5a38158d339a51a4aaab3fe2d5cc496221f77cfce6f74768db91cb5ec1e # reenable_DT_HASH.patch
|
|
9627dc07059c808c410ccd386c3b2bfeeafc9de7660b847dd971d3133b57be78) # cve-2023-25139.patch
|
|
|
|
|
|
# ab3108a40447fc04bcaaace551c423d0929c05ad59c93026e92bcc4e68a793cc glibc-2.37-01-x86_64.pkg.tar.lz
|
|
# 4337f399d769d852a8046b267ba5940ad2442f63762d7ecde6ac0c90d5115613 lib32-glibc-2.37-01-x86_64.pkg.tar.lz
|