summaryrefslogtreecommitdiff
path: root/metadata/news
diff options
context:
space:
mode:
authorV3n3RiX <venerix@redcorelinux.org>2021-10-01 20:54:53 +0100
committerV3n3RiX <venerix@redcorelinux.org>2021-10-01 20:54:53 +0100
commit391b5b359a346aff490103da7dddc85047f83830 (patch)
tree29eea460a0bd7e1ff21d43b9d6df9af4d8a175e1 /metadata/news
parentc719fdcee603a5a706a45d10cb598762d56a727d (diff)
gentoo resync : 01.10.2021
Diffstat (limited to 'metadata/news')
-rw-r--r--metadata/news/2021-09-29-possible-failure-to-preserve-libraries/2021-09-29-possible-failure-to-preserve-libraries.en.txt104
-rw-r--r--metadata/news/Manifest30
-rw-r--r--metadata/news/Manifest.files.gzbin14592 -> 14793 bytes
-rw-r--r--metadata/news/timestamp.chk2
-rw-r--r--metadata/news/timestamp.commit2
5 files changed, 121 insertions, 17 deletions
diff --git a/metadata/news/2021-09-29-possible-failure-to-preserve-libraries/2021-09-29-possible-failure-to-preserve-libraries.en.txt b/metadata/news/2021-09-29-possible-failure-to-preserve-libraries/2021-09-29-possible-failure-to-preserve-libraries.en.txt
new file mode 100644
index 000000000000..bf66553d1fea
--- /dev/null
+++ b/metadata/news/2021-09-29-possible-failure-to-preserve-libraries/2021-09-29-possible-failure-to-preserve-libraries.en.txt
@@ -0,0 +1,104 @@
+Title: Possible failure to preserve libraries
+Author: Sam James <sam@gentoo.org>
+Author: Hank Leininger <hlein@korelogic.com>
+Posted: 2021-09-29
+Revision: 1
+News-Item-Format: 2.0
+Display-If-Installed: sys-apps/portage
+
+We have observed in some cases corruption of Portage's internal database
+(VDB), where the libraries provided by a package are not recorded. This
+can break the "preserve-libs" functionality, and thus in rare cases
+break your system during much later updates (even if you do not use
+"preseved-libs" now, but decide to switch it on later).
+
+The underlying problem occurs usually when glibc has been upgraded to a
+new major version, but pax-utils has not yet been upgraded to a version
+compatible with it (but at that moment stays undetected).
+
+The full technical details and investigation can be found on a Wiki page
+[0] and on Bugzilla [1]. Changes have been made to prevent this happening
+again both within Portage [7] (with possibly more to come [2]) and within the
+glibc and pax-utils ebuilds [3][4].
+
+To detect whether a system is affected, emerge the
+app-portage/recover-broken-vdb package:
+```
+$ emerge --ask --verbose --oneshot app-portage/recover-broken-vdb
+```
+which provides two tools: recover-broken-vdb-find-broken.sh and
+recover-broken-vdb.
+
+Then run recover-broken-vdb-find-broken.sh:
+```
+$ recover-broken-vdb-find-broken.sh | tee broken_vdb_packages
+```
+
+This check should be run on all Gentoo systems. It is only necessary
+to run this as a one-off, as changes have been made to prevent such
+problems occurring in future.
+
+If you have any output, read on.
+
+Fixing a broken system is not always straightforward. It is strongly
+recommended to take a backup of your full system before proceeding,
+as well as a copy of /var/db/pkg (the VDB):
+
+1. A tool has been developed [5] to attempt to fix the consistency
+ of the Portage database. Using this tool to modify the VDB is NOT
+ mandatory (read the full news item before proceeding) - you can skip
+ to Step 2 if you wish, but fixing the integrity of the VDB
+ makes it as safe as reasonably possible to proceed with
+ rebuilding packages.
+
+ Run:
+ ```
+ # Take a backup of /var/db/pkg before proceeding, such as by doing:
+ $ cp -a /var/db/pkg /var/db/pkg.orig
+
+ # And then:
+ $ emerge --ask --verbose --oneshot --noreplace \
+ app-portage/recover-broken-vdb
+
+ $ recover-broken-vdb
+
+ # The tool will output to a random temporary directory.
+ # Inspect the results, and then update the real /var/db/pkg/
+ # by doing either:
+
+ $ recover-broken-vdb --output /var/db/pkg
+
+ # Or, manually copying the new files from the temporary directory tree
+ # into your real /var/db/pkg/ directory tree.
+ ```
+
+2. Attempt to rebuild the affected packages, first upgrading
+ app-misc/pax-utils to the latest version:
+ ```
+ $ emerge --ask --verbose --oneshot ">=app-misc/pax-utils-1.3.3"
+ $ emerge --ask --verbose --oneshot --usepkg=n $(cat broken_vdb_packages)
+ ```
+
+Given that there are possible other side-effects of the corruption/bug,
+it is strongly recommended that if any corruption is detected, all
+packages on the system should be rebuilt, after following the above
+steps:
+```
+$ emerge --ask --emptytree --usepkg=n @world
+```
+
+Note that binary packages may need to be discarded given they may
+contain corrupt metadata.
+
+Please see the wiki [0] for a full description of the background
+of this problem and handling corner cases such as e.g. already
+being affected by system breakage [6] as a result of the bug.
+
+[0] https://wiki.gentoo.org/wiki/Project:Toolchain/Corrupt_VDB_ELF_files
+[1] https://bugs.gentoo.org/811462
+[2] https://github.com/gentoo/portage/pull/744
+[3] https://bugs.gentoo.org/811462#c6
+[4] https://bugs.gentoo.org/811462#c7
+[5] https://github.com/thesamesam/recover-broken-vdb
+[6] https://wiki.gentoo.org/wiki/Fix_my_Gentoo
+[7] https://gitweb.gentoo.org/proj/portage.git/commit/?id=83af7270fafbd7b1eed0031a5e06836ad1edf06d
diff --git a/metadata/news/Manifest b/metadata/news/Manifest
index 4c756060c0e0..8220b43a708e 100644
--- a/metadata/news/Manifest
+++ b/metadata/news/Manifest
@@ -1,23 +1,23 @@
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
-MANIFEST Manifest.files.gz 14592 BLAKE2B a7d806b5163e73c21c0227fc1f2adadc4859065455f0ced4449c36fcbdcb9ae961814f766ac8cafd8435efd9028ce5b7f9d92e7620fa0081688a267f9b7eeaff SHA512 0ce5a50a6ee16cb568824b8e674a08c7b6e11fcaba871e84d2348e4b517277aed553941d484a7e0f6c4360bc98e6b29879d2520de01fef227c387edf7bf0ecae
-TIMESTAMP 2021-09-25T18:39:22Z
+MANIFEST Manifest.files.gz 14793 BLAKE2B 63cc284f2ac18483698ea05b1c55258037eb17749b6d6c28fc951c5b5fe6503bcad78fddc6eef365513509da659366418f1f5e90ff7868df5cdd39fc63d27252 SHA512 e11f5a24d5bb12a423d4ccf0fed6d571075b5a2dc70bdfaf0d04987a042cb77040ec7a17c930fd4329b8bcd32eb8b8228599d7cd4d1297297b874c28d3647aa4
+TIMESTAMP 2021-10-01T19:09:07Z
-----BEGIN PGP SIGNATURE-----
-iQKTBAEBCgB9FiEE4dartjv8+0ugL98c7FkO6skYklAFAmFPbNpfFIAAAAAALgAo
+iQKTBAEBCgB9FiEE4dartjv8+0ugL98c7FkO6skYklAFAmFXXNNfFIAAAAAALgAo
aXNzdWVyLWZwckBub3RhdGlvbnMub3BlbnBncC5maWZ0aGhvcnNlbWFuLm5ldEUx
RDZBQkI2M0JGQ0ZCNEJBMDJGREYxQ0VDNTkwRUVBQzkxODkyNTAACgkQ7FkO6skY
-klABiA/+JI186oCzF2iYiNirAok4mYWuAtBQhYXABofJ3GqhNzPsIT02nh9Fb79/
-pKT+nJe8ZlF7ely02fFUcgPvQ9hqR7IV8f7pD2lqgY3bmGiz3tZZ58VMHxqxsCGJ
-f6+14zmOB1/6ivVVl2xCtJjLUOvAs60lWVueZYOTfEsoSCEBR1JUrb1HGQ4bGYSH
-ieFsoVib1wp3dKY7wBa6oWdoADQbiCBPJe6/IhYlid5pQ+RArePOqi88sR8QGEXu
-BpffRP+Sd2+g8tSwIBXAkwgEqwfHrTPDJj9tuDFk/0wZV65MEEftpxzvLkDqcZmD
-kWIeG9hrTzPUT1+N3W1rVFKNLcu5eWi6jmInE5HTnZiY6baWspQ0gZ4Hwva7EH+F
-oB3k4jgROnuLmHuYXCfmSp5t8ZaY0d0OT2kjDZgoE4OHHpazb3Htdl5jFpwOHB9M
-Fh2ek7xRFkS+AfdOvvgv/C/JKXNEIvq3VbNKp5iWYHriUjnaZcZRMHftMN+k/Su/
-Yp0Az+AWse1dgWvTOggVPOtTz+3lZtrQeypk+VqE8koG2xSCt28N573zyyG9qLLt
-xwaJCl+5XXjadTIIvTjffO1SN1sQ0wBIdwq8Yfallg3YHhAfvhguFA5oFcwolcW4
-lhrFNZqlQdD71Zl6vR17YVnjS5QQAWDAmkfujAQIW4v5b51wzMA=
-=DDkh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+=x5vY
-----END PGP SIGNATURE-----
diff --git a/metadata/news/Manifest.files.gz b/metadata/news/Manifest.files.gz
index 1ae8e377f316..d98d8076d98a 100644
--- a/metadata/news/Manifest.files.gz
+++ b/metadata/news/Manifest.files.gz
Binary files differ
diff --git a/metadata/news/timestamp.chk b/metadata/news/timestamp.chk
index 8fea7f448100..af47f195eb11 100644
--- a/metadata/news/timestamp.chk
+++ b/metadata/news/timestamp.chk
@@ -1 +1 @@
-Sat, 25 Sep 2021 18:39:19 +0000
+Fri, 01 Oct 2021 19:09:02 +0000
diff --git a/metadata/news/timestamp.commit b/metadata/news/timestamp.commit
index 95737b0ffb90..b654c98cae1b 100644
--- a/metadata/news/timestamp.commit
+++ b/metadata/news/timestamp.commit
@@ -1 +1 @@
-573532ce5b9b584936644777d8b5a1bbf342ad92 1632517072 2021-09-24T20:57:52+00:00
+4d715f694dba3bde1d7235b315d8ab3a654fc22d 1633022211 2021-09-30T17:16:51+00:00