Re: Porter roll call for Debian Stretch

[Balint Reczey]

On 08/22/2016 07:12 PM, Bálint Réczey wrote:
> Hi Guillem,
> 
> 2016-08-21 14:02 GMT+02:00 Guillem Jover :
>> Hi!
>>
>> On Sun, 2016-08-21 at 10:24:42 +0200, Bálint Réczey wrote:
>>> I'm testing a set of patches [2] for gcc and dpkg which enable bindnow for 
>>> all
>>> arches and PIE for amd64, ppc64el and s390x in sync with Ubuntu.
>>>
>>> My assumption was that this set of architectures need the least amount of
>>> additional work since they are tested already in Ubuntu, but I would be 
>>> happy
>>> if more ports would opt in for PIE.
>>>
>>> I plan filing wishlist bugs against dpkg and gcc with the patches
>>> after I rebuilt a
>>> few packages with the defaults.
>>
>> TBH I think PIE should in fact be safer to enable globally than
>> bindnow, because the latter changes the run-time behavior and things
>> might break (perhaps even silently) when failing to load plugins
>> or similar.
> 
> Yes, in that sense enabling PIE is safer indeed. Regarding bindnow
> I don't expect too many surprises either, since other distributions
> already tested enabling bindnow and probably they found
> most issues.
> 
>>
>> From dpkg PoV enabling both, would at least require a full-archive
>> rebuild, for bindnow ideally also a full autopkgtest run (as the
>> updated dpkg FAQ states now, after Lucas Nussbaum approached me some
>> weeks ago mentioning he was willing to do such archive-wide rebuild).
> 
> The patches at [2] seem to work well and since you expressed that you would
> prefer changing both toolchain and dpkg, too, I would like to suggest running
> the rebuild with those patches.
> 
> I think Matthias would be OK with the patch since it is very small and brings
> Debian's gcc closer to Ubuntu's.
> 
> Lucas, could you please run the rebuild with the three patches?
> 
> I'll attach the patches to the bug reports.

For the record I have opened #835146, #835148 and #835149 against dpkg
and gcc-6 with the patches.

> 
> [2] https://people.debian.org/~rbalint/ppa/pie-bindnow/
> 

Re: Porter roll call for Debian Stretch

[Breno Leitao]

Hello Mattia,

On Mon, Aug 22, 2016 at 03:51:17PM +, Mattia Rizzolo wrote:
> On Mon, Aug 22, 2016 at 12:00:50PM -0300, Breno Leitao wrote:
> > - maintain/provide hardware for automated tests on ci.d.n,
> >   jenkins.d.n (etc.)
> 
> At jenkins.d.n we don't have any ppc64el slave; I don't know whether you
> recently did private offers to Holger alone about this, but I was not
> informated.  Anyway "maintain" is for sure inappropriate.
> 
> Also, ci.d.n doesn't build for ppc64el currently, so I'm wary of that
> too.

You are correct and 'maintain' is not corrected used here. I should say:

 * Work to provide hardware for automated tests on ci.d.b and jenkins.d.n.


pgpJcqBRCrlFN.pgp
Description: PGP signature

Re: Porter roll call for Debian Stretch

[Bálint Réczey]

Hi Guillem,

2016-08-21 14:02 GMT+02:00 Guillem Jover :
> Hi!
>
> On Sun, 2016-08-21 at 10:24:42 +0200, Bálint Réczey wrote:
>> I'm testing a set of patches [2] for gcc and dpkg which enable bindnow for 
>> all
>> arches and PIE for amd64, ppc64el and s390x in sync with Ubuntu.
>>
>> My assumption was that this set of architectures need the least amount of
>> additional work since they are tested already in Ubuntu, but I would be happy
>> if more ports would opt in for PIE.
>>
>> I plan filing wishlist bugs against dpkg and gcc with the patches
>> after I rebuilt a
>> few packages with the defaults.
>
> TBH I think PIE should in fact be safer to enable globally than
> bindnow, because the latter changes the run-time behavior and things
> might break (perhaps even silently) when failing to load plugins
> or similar.

Yes, in that sense enabling PIE is safer indeed. Regarding bindnow
I don't expect too many surprises either, since other distributions
already tested enabling bindnow and probably they found
most issues.

>
> From dpkg PoV enabling both, would at least require a full-archive
> rebuild, for bindnow ideally also a full autopkgtest run (as the
> updated dpkg FAQ states now, after Lucas Nussbaum approached me some
> weeks ago mentioning he was willing to do such archive-wide rebuild).

The patches at [2] seem to work well and since you expressed that you would
prefer changing both toolchain and dpkg, too, I would like to suggest running
the rebuild with those patches.

I think Matthias would be OK with the patch since it is very small and brings
Debian's gcc closer to Ubuntu's.

Lucas, could you please run the rebuild with the three patches?

I'll attach the patches to the bug reports.

Cheers,
Balint

[2] https://people.debian.org/~rbalint/ppa/pie-bindnow/

Re: Porter roll call for Debian Stretch

[Mattia Rizzolo]

On Mon, Aug 22, 2016 at 12:00:50PM -0300, Breno Leitao wrote:
> - maintain/provide hardware for automated tests on ci.d.n,
>   jenkins.d.n (etc.)

At jenkins.d.n we don't have any ppc64el slave; I don't know whether you
recently did private offers to Holger alone about this, but I was not
informated.  Anyway "maintain" is for sure inappropriate.

Also, ci.d.n doesn't build for ppc64el currently, so I'm wary of that
too.

-- 
regards,
Mattia Rizzolo

GPG Key: 66AE 2B4A FCCF 3F52 DA18  4D18 4B04 3FCD B944 4540  .''`.
more about me:  https://mapreri.org : :'  :
Launchpad user: https://launchpad.net/~mapreri  `. `'`
Debian QA page: https://qa.debian.org/developer.php?login=mattia  `-


signature.asc
Description: PGP signature

Porter roll call for Debian Stretch

[Breno Leitao]

Hi,

I am an active porter for the following architectures and I intend
to continue this for the lifetime of the Stretch release (est. end
of 2020):

For ppc64el, I
- test most of the important packages on this architecture
- run a Debian testing or unstable system on port that I use regularly
- fix or address toolchain issues
- triage arch-specific bugs
- fix arch-related bugs
- triage d-i bugs
- test d-i regularly on Bare-metal and PowerVM hypervisor
  * http://ftp.unicamp.br/pub/ppc64el/DAT/
- fix d-i bugs/issues
- maintain/provide hardware for automated tests on ci.d.n,
  jenkins.d.n (etc.)

I am DD.

I believe the port is ready to have -fPIE/-pie enabled by default. Other
distros are using it without major issues.

Breno Leitao
lei...@debian.org


pgpcHOzYQIos8.pgp
Description: PGP signature