- Arch-general - lists.archlinux.org

[arch-general] nginx package compiled on testing?
by Damjan Georgievski 13 Jul '17

13 Jul '17

At this moment packages in core/extra are: nginx 1.12.1-1 pacman 5.0.2-1 nginx -V has --with-cc-opt='-march=x86-64 -mtune=generic -O2 -pipe -fstack-protector-strong -fno-plt -D_FORTIFY_SOURCE=2' but the pacman 5.0.2-1 version of /etc/makepkg.conf doesn't have the -fno-plt argument. I'd assume nginx 1.12.1-1 was compiled on a system with pacman 5.0.2-2 from testing? https://git.archlinux.org/svntogit/packages.git/diff/trunk/makepkg.conf?h=p… Is this allowed? I suspect this is one of the reasons I can't compile a dynamic module for nginx -- damjan

3 2

Re: [arch-general] Changing compilation flags
by Jordan Glover 13 Jul '17

13 Jul '17

I testes some rebuilded binaries and BINDNOW isn't always enabled: checksec -f /usr/bin/unrar RELRO Partial RELRO checksec -f /usr/bin/qml (qt5-declarative) RELRO Partial RELRO I don't know if -fno-plt was correctly passed but it's possible that build process doesn't work as intended. Maybe we need to patch binutils to enable z,now by default as Daniel advised? On Wed Jul 5 16:51:55 UTC 2017, Daniel Micay wrote: >There"s no loss of compatibility from only some code using it. The only >issue with it is that immediate binding *must* be used to support it, so >if CFLAGS is respected then LDFLAGS *must* be respected, or immediate >binding needs to be set as the default in the linker(s). On Wed Jul 5 19:04:51 UTC 2017 , Daniel Micay wrote: >So I think it would be a good idea to flip the default to -z,now in the linker >if we're going to use -fno-plt. I think they'd take a patch for that upstream. >Clang issue could be avoided with a 1 line patch adding another no-op flag >and they'd take that upstream. It's harmless to use the slower lazy linking >calling convention when -fno-plt is passed. -fno-plt code is fully compatible >with non -fno-plt code, the only requirement is that -fno-plt code is linked >with -Wl,-z,now which works fine for non -fno-plt code too and is desirable >for security either way.

2 1

Re: [arch-general] [arch-dev-public] Changing compilation flags
by Jordan Glover 12 Jul '17

12 Jul '17

FYI clang devs don't want to take 1 line patch adding another no-op flag upstream. https://lists.llvm.org/pipermail/cfe-dev/2017-July/054588.html > -------- Original Message -------- > Subject: Re: [arch-dev-public] Changing compilation flags > From: arch-dev-public(a)archlinux.org > To: Evangelos Foutras <evangelos(a)foutrelis.com> > Daniel Micay <danielmicay(a)gmail.com>, Public mailing list for Arch Linux development <arch-dev-public(a)archlinux.org> > On 5 July 2017 at 19:51, Daniel Micay <danielmicay(a)gmail.com> wrote: > So I think it would be a good idea to flip the default to -z,now in the > linker if we"re going to use -fno-plt. I think they"d take a patch for > that upstream. Clang issue could be avoided with a 1 line patch adding > another no-op flag and they"d take that upstream. It"s harmless to use > the slower lazy linking calling convention when -fno-plt is passed.

5 7

[arch-general] problems with systemd hooks and encrypted root partition
by Christian Rebischke 11 Jul '17

11 Jul '17

Hello, Does somebody else have problems with systemd hooks and an encrypted root partition? I want to use systemd-boot with systemd hooks for my whole boot process. Systemd-boot with the normal hooks works fine but when I try to use systemd hooks I can't get through the cryptsetup password prompt because it always jumps into emergency mode after 2 seconds. My hooks line looks like this: HOOKS="base systemd autodetect modconf block keyboard sd-vconsole sd-encrypt filesystems fsck" My boot entry for systemd-boot looks like this: title motoko-lts linux /vmlinuz-linux-lts initrd /initramfs-linux-lts.img options rd.luks.uuid=1aa50d23-d139-4367-b552-448a1b14b086 rd.luks.name=71f4088d-e06f-43b2-818f-7a34de921460 root=71f4088d-e06f-43b2-818f-7a34de921460 rw And my `sudo blkid` output is this one: /dev/sda1: UUID="DBC6-90A0" TYPE="vfat" PARTLABEL="EFI" PARTUUID="aad19313-36df-4433-98ec-3fc310181629" /dev/sda2: UUID="1aa50d23-d139-4367-b552-448a1b14b086" TYPE="crypto_LUKS" PARTLABEL="Root" PARTUUID="720f9c51-6861-418e-90d4-622295937c39" /dev/mapper/root: UUID="71f4088d-e06f-43b2-818f-7a34de921460" TYPE="ext4" Here is screenshot: https://paste.archlinux.de/HMZn/ Best regards, Chris

1 1

Re: [arch-general] Changing compilation flags
by Jordan Glover 10 Jul '17

10 Jul '17

I see [1] -fstack-check is dropped and -fstack-protector-strong kept while being redundant. Anyone know what happened? [1] https://git.archlinux.org/svntogit/packages.git/commit/trunk?h=packages/pac… On 2017-06-30 23:44, Allan McRae wrote: > On 30/06/17 19:07, Bartłomiej Piotrowski wrote: >> On 2016-10-24 05:56, Allan McRae wrote: >>> 1) building gcc to enable PIE by default >> >> I am in the middle of rebuilding gcc with --enable-default-pie. When it >> finishes, I will start a todo for rebuilding packages with static libraries. >> >> I also enabled --enable-default-ssp, which means that >> -fstack-protector-strong will be dropped from our CFLAGS (as it will be >> enforced by gcc) on the next opportunity. >> > > Are you adding full RELRO + no-plt at the same time? > > A > Yes, and -fstack-check=specific too, although I might drop no-plt if it will cause too many builders. Bartłomiej

1 0

[arch-general] [SOLVED] Re: Poor performance wifi BCM4331 - MacBookPro
by Maykel Franco 08 Jul '17

08 Jul '17

Bradley thanks for all. I install the broadcom-wl-dkms and later, pacman -Syu and add dkms module in the kernel. Now the wifi is more efficient, speed and stability. Thanks for all. T 2017-07-07 23:29 GMT+02:00 Bradley Klee via arch-general <arch-general(a)archlinux.org>: > Hi Maykel, > > Don't confuse me for an expert, but I have been dealing with Broadcom issue on a recycled dell laptop. > > According to the wiki, Broadcom devices have been historically difficult for Linux developers to work with. Replacement hardware could be a better option, but in the meantime wireless seems to work in my case using the "dkms" package. > > If Installing this you should read the following: > > https://wiki.archlinux.org/index.php/Dynamic_Kernel_Module_Support > > Adding a dkms package will change your update procedure, sometimes making additional work for pacman. > > In case you didn't find the MacBook-specific wiki page, which also mentions Broadcom issues, try looking around here: > > https://wiki.archlinux.org/index.php/MacBookPro11,x > https://wiki.archlinux.org/index.php/MacBookPro7,1 > > Also, this topic is on numerous BBS threads, so you may want to try a google search, such as: "broadcom macbook 4331 site:bbs.archlinux.org" . > > Hope this helps, > > Brad > > > > > On Jul 7, 2017, at 2:34 PM, Maykel Franco via arch-general <arch-general(a)archlinux.org> wrote: > >> Hi, I have install archlinux in my MacBookPro with this wifi hardware: >> >> Broadcom Limited BCM4331 802.11a/b/g/n >> >> In the wiki arch: >> >> https://wiki.archlinux.org/index.php/broadcom_wireless >> >> BCM4331 noticed to have problems with b43-firmware-classic. Use >> b43-firmware for this card instead. >> >> I probed with b43-firmware-classic community and b43-firmware yaourt >> and both poor performance... 900k bandwith and microcuts. >> >> I will try broadcom-wl because I see in this link: >> >> https://www.reddit.com/r/archlinux/comments/5qlyfm/cant_get_wifi_with_broad… >> >> Too I see broadcom-wl-dkms but I have the default kernel no dkms. >> >> Somebody with the same problem??

1 0

[arch-general] Poor performance wifi BCM4331 - MacBookPro
by Maykel Franco 07 Jul '17

07 Jul '17

Hi, I have install archlinux in my MacBookPro with this wifi hardware: Broadcom Limited BCM4331 802.11a/b/g/n In the wiki arch: https://wiki.archlinux.org/index.php/broadcom_wireless BCM4331 noticed to have problems with b43-firmware-classic. Use b43-firmware for this card instead. I probed with b43-firmware-classic community and b43-firmware yaourt and both poor performance... 900k bandwith and microcuts. I will try broadcom-wl because I see in this link: https://www.reddit.com/r/archlinux/comments/5qlyfm/cant_get_wifi_with_broad… Too I see broadcom-wl-dkms but I have the default kernel no dkms. Somebody with the same problem??

3 2

[arch-general] [PATCH]:[Clang] Add -fno-plt, -fplt to ignored flags
by Jordan Glover 06 Jul '17

06 Jul '17

In GCC there is a -fno-plt flag not implemented in Clang which results in compilation failure: clang-4.0: error: unknown argument: '-fno-plt' Proposed patch adds -fno-plt and -fplt to existing ignored flags list making it compatible with gcc for package building. You can see more info about those flags in gcc manual: https://gcc.gnu.org/onlinedocs/gcc-7.1.0/gcc/Code-Gen-Options.html#Code-Gen… Thank you for your attention. Jordan Glover

1 0

Re: [arch-general] Changing compilation flags
by Jordan Glover 06 Jul '17

06 Jul '17

I just looked into it and created simple patch. Anyone could test it and/or submit upstream? Index: include/clang/Driver/Options.td --- include/clang/Driver/Options.td +++ include/clang/Driver/Options.td @@ -2497,6 +2497,7 @@ defm non_call_exceptions : BooleanFFlag<"non-call-exceptions">, Group<clang_ignored_f_Group>; defm peel_loops : BooleanFFlag<"peel-loops">, Group<clang_ignored_gcc_optimization_f_Group>; defm permissive : BooleanFFlag<"permissive">, Group<clang_ignored_f_Group>; +defm plt : BooleanFFlag<"plt">, Group<clang_ignored_f_Group>; defm prefetch_loop_arrays : BooleanFFlag<"prefetch-loop-arrays">, Group<clang_ignored_gcc_optimization_f_Group>; defm printf : BooleanFFlag<"printf">, Group<clang_ignored_f_Group>; defm profile : BooleanFFlag<"profile">, Group<clang_ignored_f_Group>; Index: test/Driver/clang_f_opts.c --- test/Driver/clang_f_opts.c +++ test/Driver/clang_f_opts.c @@ -275,12 +275,14 @@ // RUN: -fno-fat-lto-objects -ffat-lto-objects \ // RUN: -fno-merge-constants -fmerge-constants \ // RUN: -fno-caller-saves -fcaller-saves \ +// RUN: -fno-plt \ // RUN: -fno-reorder-blocks -freorder-blocks \ // RUN: -fno-schedule-insns2 -fschedule-insns2 \ // RUN: -fno-stack-check \ // RUN: -fno-check-new -fcheck-new \ // RUN: -ffriend-injection \ // RUN: -fno-implement-inlines -fimplement-inlines \ +// RUN: -fplt \ // RUN: -fstack-check \ // RUN: -fforce-addr \ // RUN: -malign-functions=100 \ > -------- Original Message -------- > Subject: Re: [arch-dev-public] Changing compilation flags > From: arch-dev-public(a)archlinux.org > To: Evangelos Foutras <evangelos(a)foutrelis.com> > Daniel Micay <danielmicay(a)gmail.com>, Public mailing list for Arch Linux development <arch-dev-public(a)archlinux.org> >> So I think it would be a good idea to flip the default to -z,now in >> the >> linker if we"re going to use -fno-plt. I think they"d take a patch for >> that upstream. Clang issue could be avoided with a 1 line patch adding >> another no-op flag and they"d take that upstream. It"s harmless to use >> the slower lazy linking calling convention when -fno-plt is passed. > This is literally just +1 LOC for Clang b/c it has a system for adding > no-op flags already, which is mostly used for GCC compatibility. > It even uses it in cases that are quite dubious like making -fstack- > check into a no-op, despite it not just being an optional optimization / > code generation change like -fno-plt.

1 0

[arch-general] systemd on bios computer
by Jude DaShiell 06 Jul '17

06 Jul '17

When doing a systemd upgrade I get: (3/7) Upgrading systemd-boot... Couldn't find EFI system partition. It is recommended to mount it to /boot. Alternatively, use --path= to specify path to mount point. error: command failed to execute correctly Are either of the above alternatives even viable for a real bios machine? This one got built when efi was somewhere on the drawing board or maybe before efi ever got to the drawing board. --

5 7