Re: combining fakeroot and distcc/SSH

2005-03-14 Thread Goswin von Brederlow
Daniel Schepler [EMAIL PROTECTED] writes:

 martin f krafft [EMAIL PROTECTED] writes:

 also sprach Petter Reinholdtsen [EMAIL PROTECTED] [2005.03.05.1225 +0100]:
  I am trying to use distcc to compile Debian packages and kernels,
  and am failing. The reason is that I need to use distcc-over-SSH,
  but the Debian compile process is run as (fake)root.
 
 Why isn't it enough to do 'make install' as root?  Is there something
 in the build process requiring root access?

 Weird; some packages have dh_testroot in the build target. I tried
 removing that and using fakeroot only for install. It seems like it
 works now, but we'll see... argh. It seems that some people
 (including myself when I wrote these scripts) think that `fakeroot
 dpkg-buildpackage` is the same as `dpkg-buildpackage -rfakeroot`).

 Any such packages are broken and should have a serious FTBFS bug filed
 against them.  That said, I haven't seen any such packages running
 pbuilder locally.  If you mean dh_testroot in the clean target, on the
 other hand, that's a different story; clean is allowed to require root
 access.  (IIRC, the reason is to be able to clean files created in the
 build directory during the make install phase.)
 -- 
 Daniel Schepler  Please don't disillusion me.  I
 [EMAIL PROTECTED]haven't had breakfast yet.
  -- Orson Scott Card

No, clean is not allowed to required root access. Policy only say
clean might need root rights to clean up a previous build (done as
root or sudo). It does not say clean will/must be called as root as it
says for other targets.

Imho dh_testroot in clean is wrong. Newly downloaded sources should
never ever need it and building with fakeroot avoids the need for root
in clean later too.


Maybe dh_testroot should create a stamp dir+file and clean target
should remove the stamp dir+file, e.g. with dh_testroot_clean,
ensuring clean has sufficient permissions to cleanup after a
build (otherwise removing the stamp file fails with permission denied).

MfG
Goswin


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



Re: combining fakeroot and distcc/SSH

2005-03-12 Thread Daniel Schepler
martin f krafft [EMAIL PROTECTED] writes:

 also sprach Petter Reinholdtsen [EMAIL PROTECTED] [2005.03.05.1225 +0100]:
  I am trying to use distcc to compile Debian packages and kernels,
  and am failing. The reason is that I need to use distcc-over-SSH,
  but the Debian compile process is run as (fake)root.
 
 Why isn't it enough to do 'make install' as root?  Is there something
 in the build process requiring root access?

 Weird; some packages have dh_testroot in the build target. I tried
 removing that and using fakeroot only for install. It seems like it
 works now, but we'll see... argh. It seems that some people
 (including myself when I wrote these scripts) think that `fakeroot
 dpkg-buildpackage` is the same as `dpkg-buildpackage -rfakeroot`).

Any such packages are broken and should have a serious FTBFS bug filed
against them.  That said, I haven't seen any such packages running
pbuilder locally.  If you mean dh_testroot in the clean target, on the
other hand, that's a different story; clean is allowed to require root
access.  (IIRC, the reason is to be able to clean files created in the
build directory during the make install phase.)
-- 
Daniel Schepler  Please don't disillusion me.  I
[EMAIL PROTECTED]haven't had breakfast yet.
 -- Orson Scott Card


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



Re: combining fakeroot and distcc/SSH

2005-03-08 Thread Wouter Verhelst
Op za, 05-03-2005 te 18:55 +0100, schreef martin f krafft:
 also sprach Goswin von Brederlow [EMAIL PROTECTED] [2005.03.05.1840 +0100]:
  ssh -i usualy helps.
 
 not if you cannot influence how SSH is called.

TTBOMK, distcc is free software.

-- 
 EARTH
 smog  |   bricks
 AIR  --  mud  -- FIRE
soda water |   tequila
 WATER
 -- with thanks to fortune


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



Re: combining fakeroot and distcc/SSH

2005-03-05 Thread Petter Reinholdtsen
[martin f krafft]
 I am trying to use distcc to compile Debian packages and kernels,
 and am failing. The reason is that I need to use distcc-over-SSH,
 but the Debian compile process is run as (fake)root.

Why isn't it enough to do 'make install' as root?  Is there something
in the build process requiring root access?


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



Re: combining fakeroot and distcc/SSH

2005-03-05 Thread martin f krafft
also sprach Petter Reinholdtsen [EMAIL PROTECTED] [2005.03.05.1225 +0100]:
  I am trying to use distcc to compile Debian packages and kernels,
  and am failing. The reason is that I need to use distcc-over-SSH,
  but the Debian compile process is run as (fake)root.
 
 Why isn't it enough to do 'make install' as root?  Is there something
 in the build process requiring root access?

Weird; some packages have dh_testroot in the build target. I tried
removing that and using fakeroot only for install. It seems like it
works now, but we'll see... argh. It seems that some people
(including myself when I wrote these scripts) think that `fakeroot
dpkg-buildpackage` is the same as `dpkg-buildpackage -rfakeroot`).

Thanks; it's too early in the day for me to have thought of this
myself. :)

-- 
Please do not send copies of list mail to me; I read the list!
 
 .''`. martin f. krafft [EMAIL PROTECTED]
: :'  :proud Debian developer, admin, user, and author
`. `'`
  `-  Debian - when you have better things to do than fixing a system
 
Invalid/expired PGP subkeys? Use subkeys.pgp.net as keyserver!


signature.asc
Description: Digital signature


Re: combining fakeroot and distcc/SSH

2005-03-05 Thread Goswin von Brederlow
martin f krafft [EMAIL PROTECTED] writes:

 Hi all,

 I am trying to use distcc to compile Debian packages and kernels,
 and am failing. The reason is that I need to use distcc-over-SSH,
 but the Debian compile process is run as (fake)root. Thus, it tries
 to use /root/.ssh for configuration and node verification, which is
 not accessible to the normal user.

 The reasons seems to be that OpenSSH uses getpwnam to obtain the
 real UID's home directory, rather than $HOME. This is probably
 a security measure.

 Has anyone else run into this problem? How could I work around it?

ssh -i usualy helps.

MfG
Goswin


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



Re: combining fakeroot and distcc/SSH

2005-03-05 Thread martin f krafft
also sprach Goswin von Brederlow [EMAIL PROTECTED] [2005.03.05.1840 +0100]:
 ssh -i usualy helps.

not if you cannot influence how SSH is called.

-- 
Please do not send copies of list mail to me; I read the list!
 
 .''`. martin f. krafft [EMAIL PROTECTED]
: :'  :proud Debian developer, admin, user, and author
`. `'`
  `-  Debian - when you have better things to do than fixing a system
 
Invalid/expired PGP subkeys? Use subkeys.pgp.net as keyserver!


signature.asc
Description: Digital signature


Re: combining fakeroot and distcc/SSH

2005-03-05 Thread Michael Tautschnig

also sprach Goswin von Brederlow [EMAIL PROTECTED] [2005.03.05.1840 +0100]:
ssh -i usualy helps.
not if you cannot influence how SSH is called.
Actually I don't really know, but maybe the environment-variable 
DISTCC_SSH could be helpful.

Regards,
Michael
--
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]


Re: combining fakeroot and distcc/SSH

2005-03-05 Thread Florian Weimer
* martin f. krafft:

 Has anyone else run into this problem? How could I work around it?

unset LD_PRELOAD and a wrapper script works with current fakeroot.


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



Re: combining fakeroot and distcc/SSH

2005-03-05 Thread martin f krafft
also sprach Michael Tautschnig [EMAIL PROTECTED] [2005.03.05.1901 +0100]:
 Actually I don't really know, but maybe the environment-variable
 DISTCC_SSH could be helpful.

... it was really too early in the day. Sorry to all.

-- 
Please do not send copies of list mail to me; I read the list!
 
 .''`. martin f. krafft [EMAIL PROTECTED]
: :'  :proud Debian developer, admin, user, and author
`. `'`
  `-  Debian - when you have better things to do than fixing a system
 
Invalid/expired PGP subkeys? Use subkeys.pgp.net as keyserver!


signature.asc
Description: Digital signature