diff options
author | V3n3RiX <venerix@redcorelinux.org> | 2021-10-01 20:54:53 +0100 |
---|---|---|
committer | V3n3RiX <venerix@redcorelinux.org> | 2021-10-01 20:54:53 +0100 |
commit | 391b5b359a346aff490103da7dddc85047f83830 (patch) | |
tree | 29eea460a0bd7e1ff21d43b9d6df9af4d8a175e1 /metadata/news | |
parent | c719fdcee603a5a706a45d10cb598762d56a727d (diff) |
gentoo resync : 01.10.2021
Diffstat (limited to 'metadata/news')
-rw-r--r-- | metadata/news/2021-09-29-possible-failure-to-preserve-libraries/2021-09-29-possible-failure-to-preserve-libraries.en.txt | 104 | ||||
-rw-r--r-- | metadata/news/Manifest | 30 | ||||
-rw-r--r-- | metadata/news/Manifest.files.gz | bin | 14592 -> 14793 bytes | |||
-rw-r--r-- | metadata/news/timestamp.chk | 2 | ||||
-rw-r--r-- | metadata/news/timestamp.commit | 2 |
5 files changed, 121 insertions, 17 deletions
diff --git a/metadata/news/2021-09-29-possible-failure-to-preserve-libraries/2021-09-29-possible-failure-to-preserve-libraries.en.txt b/metadata/news/2021-09-29-possible-failure-to-preserve-libraries/2021-09-29-possible-failure-to-preserve-libraries.en.txt new file mode 100644 index 000000000000..bf66553d1fea --- /dev/null +++ b/metadata/news/2021-09-29-possible-failure-to-preserve-libraries/2021-09-29-possible-failure-to-preserve-libraries.en.txt @@ -0,0 +1,104 @@ +Title: Possible failure to preserve libraries +Author: Sam James <sam@gentoo.org> +Author: Hank Leininger <hlein@korelogic.com> +Posted: 2021-09-29 +Revision: 1 +News-Item-Format: 2.0 +Display-If-Installed: sys-apps/portage + +We have observed in some cases corruption of Portage's internal database +(VDB), where the libraries provided by a package are not recorded. This +can break the "preserve-libs" functionality, and thus in rare cases +break your system during much later updates (even if you do not use +"preseved-libs" now, but decide to switch it on later). + +The underlying problem occurs usually when glibc has been upgraded to a +new major version, but pax-utils has not yet been upgraded to a version +compatible with it (but at that moment stays undetected). + +The full technical details and investigation can be found on a Wiki page +[0] and on Bugzilla [1]. Changes have been made to prevent this happening +again both within Portage [7] (with possibly more to come [2]) and within the +glibc and pax-utils ebuilds [3][4]. + +To detect whether a system is affected, emerge the +app-portage/recover-broken-vdb package: +``` +$ emerge --ask --verbose --oneshot app-portage/recover-broken-vdb +``` +which provides two tools: recover-broken-vdb-find-broken.sh and +recover-broken-vdb. + +Then run recover-broken-vdb-find-broken.sh: +``` +$ recover-broken-vdb-find-broken.sh | tee broken_vdb_packages +``` + +This check should be run on all Gentoo systems. It is only necessary +to run this as a one-off, as changes have been made to prevent such +problems occurring in future. + +If you have any output, read on. + +Fixing a broken system is not always straightforward. It is strongly +recommended to take a backup of your full system before proceeding, +as well as a copy of /var/db/pkg (the VDB): + +1. A tool has been developed [5] to attempt to fix the consistency + of the Portage database. Using this tool to modify the VDB is NOT + mandatory (read the full news item before proceeding) - you can skip + to Step 2 if you wish, but fixing the integrity of the VDB + makes it as safe as reasonably possible to proceed with + rebuilding packages. + + Run: + ``` + # Take a backup of /var/db/pkg before proceeding, such as by doing: + $ cp -a /var/db/pkg /var/db/pkg.orig + + # And then: + $ emerge --ask --verbose --oneshot --noreplace \ + app-portage/recover-broken-vdb + + $ recover-broken-vdb + + # The tool will output to a random temporary directory. + # Inspect the results, and then update the real /var/db/pkg/ + # by doing either: + + $ recover-broken-vdb --output /var/db/pkg + + # Or, manually copying the new files from the temporary directory tree + # into your real /var/db/pkg/ directory tree. + ``` + +2. Attempt to rebuild the affected packages, first upgrading + app-misc/pax-utils to the latest version: + ``` + $ emerge --ask --verbose --oneshot ">=app-misc/pax-utils-1.3.3" + $ emerge --ask --verbose --oneshot --usepkg=n $(cat broken_vdb_packages) + ``` + +Given that there are possible other side-effects of the corruption/bug, +it is strongly recommended that if any corruption is detected, all +packages on the system should be rebuilt, after following the above +steps: +``` +$ emerge --ask --emptytree --usepkg=n @world +``` + +Note that binary packages may need to be discarded given they may +contain corrupt metadata. + +Please see the wiki [0] for a full description of the background +of this problem and handling corner cases such as e.g. already +being affected by system breakage [6] as a result of the bug. + +[0] https://wiki.gentoo.org/wiki/Project:Toolchain/Corrupt_VDB_ELF_files +[1] https://bugs.gentoo.org/811462 +[2] https://github.com/gentoo/portage/pull/744 +[3] https://bugs.gentoo.org/811462#c6 +[4] https://bugs.gentoo.org/811462#c7 +[5] https://github.com/thesamesam/recover-broken-vdb +[6] https://wiki.gentoo.org/wiki/Fix_my_Gentoo +[7] https://gitweb.gentoo.org/proj/portage.git/commit/?id=83af7270fafbd7b1eed0031a5e06836ad1edf06d diff --git a/metadata/news/Manifest b/metadata/news/Manifest index 4c756060c0e0..8220b43a708e 100644 --- a/metadata/news/Manifest +++ b/metadata/news/Manifest @@ -1,23 +1,23 @@ -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 -MANIFEST Manifest.files.gz 14592 BLAKE2B a7d806b5163e73c21c0227fc1f2adadc4859065455f0ced4449c36fcbdcb9ae961814f766ac8cafd8435efd9028ce5b7f9d92e7620fa0081688a267f9b7eeaff SHA512 0ce5a50a6ee16cb568824b8e674a08c7b6e11fcaba871e84d2348e4b517277aed553941d484a7e0f6c4360bc98e6b29879d2520de01fef227c387edf7bf0ecae -TIMESTAMP 2021-09-25T18:39:22Z +MANIFEST Manifest.files.gz 14793 BLAKE2B 63cc284f2ac18483698ea05b1c55258037eb17749b6d6c28fc951c5b5fe6503bcad78fddc6eef365513509da659366418f1f5e90ff7868df5cdd39fc63d27252 SHA512 e11f5a24d5bb12a423d4ccf0fed6d571075b5a2dc70bdfaf0d04987a042cb77040ec7a17c930fd4329b8bcd32eb8b8228599d7cd4d1297297b874c28d3647aa4 +TIMESTAMP 2021-10-01T19:09:07Z -----BEGIN PGP SIGNATURE----- -iQKTBAEBCgB9FiEE4dartjv8+0ugL98c7FkO6skYklAFAmFPbNpfFIAAAAAALgAo +iQKTBAEBCgB9FiEE4dartjv8+0ugL98c7FkO6skYklAFAmFXXNNfFIAAAAAALgAo aXNzdWVyLWZwckBub3RhdGlvbnMub3BlbnBncC5maWZ0aGhvcnNlbWFuLm5ldEUx RDZBQkI2M0JGQ0ZCNEJBMDJGREYxQ0VDNTkwRUVBQzkxODkyNTAACgkQ7FkO6skY -klABiA/+JI186oCzF2iYiNirAok4mYWuAtBQhYXABofJ3GqhNzPsIT02nh9Fb79/ -pKT+nJe8ZlF7ely02fFUcgPvQ9hqR7IV8f7pD2lqgY3bmGiz3tZZ58VMHxqxsCGJ -f6+14zmOB1/6ivVVl2xCtJjLUOvAs60lWVueZYOTfEsoSCEBR1JUrb1HGQ4bGYSH -ieFsoVib1wp3dKY7wBa6oWdoADQbiCBPJe6/IhYlid5pQ+RArePOqi88sR8QGEXu -BpffRP+Sd2+g8tSwIBXAkwgEqwfHrTPDJj9tuDFk/0wZV65MEEftpxzvLkDqcZmD -kWIeG9hrTzPUT1+N3W1rVFKNLcu5eWi6jmInE5HTnZiY6baWspQ0gZ4Hwva7EH+F -oB3k4jgROnuLmHuYXCfmSp5t8ZaY0d0OT2kjDZgoE4OHHpazb3Htdl5jFpwOHB9M -Fh2ek7xRFkS+AfdOvvgv/C/JKXNEIvq3VbNKp5iWYHriUjnaZcZRMHftMN+k/Su/ -Yp0Az+AWse1dgWvTOggVPOtTz+3lZtrQeypk+VqE8koG2xSCt28N573zyyG9qLLt -xwaJCl+5XXjadTIIvTjffO1SN1sQ0wBIdwq8Yfallg3YHhAfvhguFA5oFcwolcW4 -lhrFNZqlQdD71Zl6vR17YVnjS5QQAWDAmkfujAQIW4v5b51wzMA= -=DDkh +klAUEBAAlwQ+LS0yVNzAbDjRIqg+yGLqBNyU8KiaGvvYqaaxXexjNDmqOVJYms5w +lCMEj/TQqqnxtzh/WpyTgMdWObAWXjMLJx8jPTInmZUPlVKHqeVmB0h4qxFe8HLU +rnlLysQVW7+TitpjKl4XmQ2K7p8U3rQxO4RMAhoYFYu+WRTzFhXGc195ObmOfZJT +fCKNbJL9WiCQWB4Uaaus4g+azEU/eWLo5t3tJp0VyCPp2J+sodLrNBzjj9QfV9Is +G4PN8q9/SW+1pI2p8sRk712Qztt1ZKDvS7M5QzAUQJcUpHsnFe5UgHUnW8zyHxhv +kunN4QuSR7scbbbl9cMfWkTWnTwWhvL8o1L8C3oC8Dulvo8UEqQen6BcsoE1cY9Q +W0YMENy33IA2IQ4hPE6WMQn1+jKrwyqrRv+6NI9s8+xHNTEL8nQ1VWfQxu/3fYFA +Y6nN9vSg7FfGQU7ZctnpsNMZwpf//9PxyWiP24MppdkqAT8LDsJ21F8h807mmGuM +WawGkDwe3szRgi2kIDhHOBm26UuJ2Jilpl8LUkbwNTQivvwxUv9WSWNmEA+gll7b +LHtCAToxXyBNFXCb0y/HrSFBXEFM02ITm1XN82CXDouvn6KWxFNyZsp0qfju+sTN +UPSSdI5L5SAEQ2cuBIfUHctrPaGlrVZEY5yQMi4FLZlv2n3Zcv0= +=x5vY -----END PGP SIGNATURE----- diff --git a/metadata/news/Manifest.files.gz b/metadata/news/Manifest.files.gz Binary files differindex 1ae8e377f316..d98d8076d98a 100644 --- a/metadata/news/Manifest.files.gz +++ b/metadata/news/Manifest.files.gz diff --git a/metadata/news/timestamp.chk b/metadata/news/timestamp.chk index 8fea7f448100..af47f195eb11 100644 --- a/metadata/news/timestamp.chk +++ b/metadata/news/timestamp.chk @@ -1 +1 @@ -Sat, 25 Sep 2021 18:39:19 +0000 +Fri, 01 Oct 2021 19:09:02 +0000 diff --git a/metadata/news/timestamp.commit b/metadata/news/timestamp.commit index 95737b0ffb90..b654c98cae1b 100644 --- a/metadata/news/timestamp.commit +++ b/metadata/news/timestamp.commit @@ -1 +1 @@ -573532ce5b9b584936644777d8b5a1bbf342ad92 1632517072 2021-09-24T20:57:52+00:00 +4d715f694dba3bde1d7235b315d8ab3a654fc22d 1633022211 2021-09-30T17:16:51+00:00 |