Gentoo Websites Logo
Go to: Gentoo Home Documentation Forums Lists Bugs Planet Store Wiki Get Gentoo!
Bug 219908 - glibc-2.6.1 fails configure on (unsupported) hardened/linux/amd64 profile
Summary: glibc-2.6.1 fails configure on (unsupported) hardened/linux/amd64 profile
Status: RESOLVED FIXED
Alias: None
Product: Gentoo Linux
Classification: Unclassified
Component: Eclasses (show other bugs)
Hardware: AMD64 Linux
: High normal with 1 vote (vote)
Assignee: Gentoo Release Team
URL:
Whiteboard:
Keywords:
Depends on:
Blocks:
 
Reported: 2008-05-01 09:17 UTC by Dan Johansson
Modified: 2009-05-29 13:52 UTC (History)
3 users (show)

See Also:
Package list:
Runtime testing required: ---


Attachments
config.log (config.log,30.34 KB, text/plain)
2008-05-01 09:18 UTC, Dan Johansson
Details
emerge log (sys-libs:glibc-2.6.1:20080501-090108.log,9.62 KB, text/plain)
2008-05-01 09:18 UTC, Dan Johansson
Details
/var/tmp/portage/sys-libs/glibc-2.8_p20080602/work/build-x86-x86_64-pc-linux-gnu-nptl/config.log (config.log,32.87 KB, text/plain)
2008-09-25 21:19 UTC, Martin Mokrejš
Details
build config of glibc-2.9_p20081201 (config.log,33.93 KB, text/plain)
2008-12-18 14:44 UTC, Javorksy Gleb
Details

Note You need to log in before you can comment on or make changes to this bug.
Description Dan Johansson 2008-05-01 09:17:23 UTC
After changing my profile from "hardened/amd64" to "hardened/linux/amd64" and doing an "emerge --update --deep --verbose --newuse world" the system wants to rebuild glibc (and some more).

This is the last few lines of the output:
----------------------8<------------------------
checking sysdep dirs... sysdeps/i386/elf nptl/sysdeps/unix/sysv/linux/i386/i686 nptl/sysdeps/unix/sysv/linux/i386 sysdeps/unix/sysv/linux/i386 nptl/sysdeps/unix/sysv/linux nptl/sysdeps/pthread sysdeps/pthread ports/sysdeps/unix/sysv/linux sysdeps/unix/sysv/linux sysdeps/gnu sysdeps/unix/common sysdeps/unix/mman sysdeps/unix/inet ports/sysdeps/unix/sysv/i386 sysdeps/unix/sysv/i386 nptl/sysdeps/unix/sysv ports/sysdeps/unix/sysv sysdeps/unix/sysv sysdeps/unix/i386 nptl/sysdeps/unix ports/sysdeps/unix sysdeps/unix sysdeps/posix sysdeps/i386/i686/fpu nptl/sysdeps/i386/i686 sysdeps/i386/i686 sysdeps/i386/i486 nptl/sysdeps/i386/i486 sysdeps/i386/fpu nptl/sysdeps/i386 sysdeps/i386 sysdeps/wordsize-32 sysdeps/ieee754/ldbl-96 sysdeps/ieee754/dbl-64 sysdeps/ieee754/flt-32 sysdeps/ieee754 sysdeps/generic/elf sysdeps/generic
checking for a BSD-compatible install... /usr/bin/install -c
checking whether ln -s works... yes
checking for i686-pc-linux-gnu-gcc... x86_64-pc-linux-gnu-gcc
checking for suffix of object files... o
checking whether we are using the GNU C compiler... yes
checking whether x86_64-pc-linux-gnu-gcc accepts -g... yes
checking for x86_64-pc-linux-gnu-gcc option to accept ANSI C... none needed
checking how to run the C preprocessor... /lib/cpp
configure: error: C preprocessor "/lib/cpp" fails sanity check
See `config.log' for more details.
 *
 * ERROR: sys-libs/glibc-2.6.1 failed.
 * Call stack:
 *               ebuild.sh, line   49:  Called src_compile
 *             environment, line 3388:  Called eblit-run 'src_compile'
 *             environment, line 1083:  Called eblit-glibc-src_compile
 *       src_compile.eblit, line  168:  Called src_compile
 *             environment, line 3388:  Called eblit-run 'src_compile'
 *             environment, line 1083:  Called eblit-glibc-src_compile
 *       src_compile.eblit, line  179:  Called toolchain-glibc_src_compile
 *       src_compile.eblit, line  120:  Called glibc_do_configure 'src_compile'
 *       src_compile.eblit, line   97:  Called die
 * The specific snippet of code:
 *      "${S}"/configure ${myconf} || die "failed to configure glibc"
 *  The die message:
 *   failed to configure glibc
 *
 * If you need support, post the topmost build error, and the call stack if relevant.
 * A complete build log is located at '/var/log/portage/sys-libs:glibc-2.6.1:20080501-090108.log'.
 * The ebuild environment file is located at '/var/tmp/portage/sys-libs/glibc-2.6.1/temp/environment'.
----------------------8<------------------------


Reproducible: Always

Steps to Reproduce:




# emerge --info
Portage 2.1.4.4 (hardened/linux/amd64, gcc-3.4.6-hardenednopiessp, glibc-2.6.1-r0, 2.6.23-hardened-r9 x86_64)
=================================================================
System uname: 2.6.23-hardened-r9 x86_64 AMD Athlon(tm) 64 Processor 3800+
Timestamp of tree: Thu, 01 May 2008 03:48:01 +0000
app-shells/bash:     3.2_p17-r1
dev-lang/python:     2.4.4-r9
dev-python/pycrypto: 2.0.1-r6
sys-apps/baselayout: 1.12.11.1
sys-apps/sandbox:    1.2.18.1-r2
sys-devel/autoconf:  2.61-r1
sys-devel/automake:  1.7.9-r1, 1.10.1
sys-devel/binutils:  2.18-r1
sys-devel/gcc-config: 1.4.0-r4
sys-devel/libtool:   1.5.26
virtual/os-headers:  2.6.23-r3
ACCEPT_KEYWORDS="amd64"
CBUILD="x86_64-pc-linux-gnu"
CFLAGS="-march=k8 -O2 -pipe"
CHOST="x86_64-pc-linux-gnu"
CONFIG_PROTECT="/etc"
CONFIG_PROTECT_MASK="/etc/env.d /etc/gconf /etc/revdep-rebuild /etc/terminfo /etc/udev/rules.d"
CXXFLAGS="-march=k8 -O2 -pipe"
DISTDIR="/usr/portage/distfiles"
FEATURES="distlocks fixpackages metadata-transfer sandbox sfperms strict unmerge-orphans userfetch"
GENTOO_MIRRORS="http://gentoo.osuosl.org/"
LDFLAGS="-Wl,-O1"
LINGUAS="de en sv en_GB en_US sv_SE"
MAKEOPTS="-j2"
PKGDIR="/usr/portage/packages"
PORTAGE_RSYNC_OPTS="--recursive --links --safe-links --perms --times --compress --force --whole-file --delete --stats --timeout=180 --exclude=/distfiles --exclude=/local --exclude=/packages"
PORTAGE_TMPDIR="/var/tmp"
PORTDIR="/usr/portage"
PORTDIR_OVERLAY="/usr/local/portage"
SYNC="rsync://rsync.europe.gentoo.org/gentoo-portage"
USE="amd64 bash-completion bzip2 cli cracklib crypt dri fam hardened iconv isdnlog justify metric minimal mmx mudflap multilib network-cron nls openmp pcre pic pppd readline reflection session spl sse sse2 ssl tcpd threads unicode urandom userlocales vim-syntax zlib" ALSA_CARDS="ali5451 als4000 atiixp atiixp-modem bt87x ca0106 cmipci emu10k1x ens1370 ens1371 es1938 es1968 fm801 hda-intel intel8x0 intel8x0m maestro3 trident usb-audio via82xx via82xx-modem ymfpci" ALSA_PCM_PLUGINS="adpcm alaw asym copy dmix dshare dsnoop empty extplug file hooks iec958 ioplug ladspa lfloat linear meter mulaw multi null plug rate route share shm softvol" APACHE2_MODULES="actions alias auth_basic authn_alias authn_anon authn_dbm authn_default authn_file authz_dbm authz_default authz_groupfile authz_host authz_owner authz_user autoindex cache dav dav_fs dav_lock deflate dir disk_cache env expires ext_filter file_cache filter headers include info log_config logio mem_cache mime mime_magic negotiation rewrite setenvif speling status unique_id userdir usertrack vhost_alias" ELIBC="glibc" INPUT_DEVICES="keyboard mouse evdev" KERNEL="linux" LCD_DEVICES="bayrad cfontz cfontz633 glk hd44780 lb216 lcdm001 mtxorb ncurses text" LINGUAS="de en sv en_GB en_US sv_SE" USERLAND="GNU" VIDEO_CARDS="fbdev glint i810 mach64 mga neomagic nv r128 radeon savage sis tdfx trident vesa vga via vmware voodoo"
Unset:  CPPFLAGS, CTARGET, EMERGE_DEFAULT_OPTS, INSTALL_MASK, LANG, LC_ALL, PORTAGE_COMPRESS, PORTAGE_COMPRESS_FLAGS, PORTAGE_RSYNC_EXTRA_OPTS

# eselect profile list
Available profile symlink targets:
  [1]   default-linux/amd64/2006.1
  [2]   default-linux/amd64/2006.1/desktop
  [3]   default-linux/amd64/2006.0/no-symlinks
  [4]   default-linux/amd64/2006.1/no-multilib
  [5]   default-linux/amd64/2007.0
  [6]   default-linux/amd64/2007.0/desktop
  [7]   default-linux/amd64/2007.0/no-multilib
  [8]   default-linux/amd64/2007.0/server
  [9]   hardened/amd64
  [10]  hardened/amd64/multilib
  [11]  selinux/2007.0/amd64
  [12]  selinux/2007.0/amd64/hardened
  [13]  default/linux/amd64/2008.0
  [14]  default/linux/amd64/2008.0/desktop
  [15]  default/linux/amd64/2008.0/developer
  [16]  default/linux/amd64/2008.0/no-multilib
  [17]  default/linux/amd64/2008.0/server
  [18]  hardened/linux/amd64 *

# gcc-config -l
 [1] x86_64-pc-linux-gnu-3.4.6
 [2] x86_64-pc-linux-gnu-3.4.6-hardenednopie
 [3] x86_64-pc-linux-gnu-3.4.6-hardenednopiessp *
 [4] x86_64-pc-linux-gnu-3.4.6-hardenednossp
 [5] x86_64-pc-linux-gnu-3.4.6-vanilla
Comment 1 Dan Johansson 2008-05-01 09:18:12 UTC
Created attachment 151495 [details]
config.log
Comment 2 Dan Johansson 2008-05-01 09:18:33 UTC
Created attachment 151497 [details]
emerge log
Comment 3 solar (RETIRED) gentoo-dev 2008-05-02 04:01:10 UTC
Unsupported hardened profile. Chris.G maintains that one.
Comment 4 Chris Gianelloni (RETIRED) gentoo-dev 2008-05-03 00:46:25 UTC
All that I did was create them, though I do fix bugs that I find in them.  They've also been maintained/updated by phreak.

This is pretty simple, neither I nor Release Engineering want to maintain a set of hardened profiles.  If you guys aren't going to use/support them, then there's 0 reason for them to be in the tree, meaning that we need to remove them and redo everything we've done for hardened for the 2008.0 release to try to make it easier for developers to make sure their stuff works on hardened.

Let me know and we'll go with whatever you guys want to do.

Now, for this bug, the problem is actually quite simple.  You switched from a non-multilib profile to a multilib profile.  As such, you're missing all of the 32-bit headers and such that you need.  You should be using hardened/linux/amd64/2008.0/no-multilib, instead.  I'll be creating a hardened/linux/amd64/no-multilib profile soon, since the Hardened team has expressed interest in not using versioned profiles for releases.

The error is this:

configure:3306: x86_64-pc-linux-gnu-gcc -E -traditional-cpp  conftest.c
In file included from /usr/include/features.h:322,
                 from /usr/include/assert.h:37,
                 from conftest.c:15:
/usr/include/sys/cdefs.h:32: #error "You need a ISO C conforming compiler to use the glibc headers"
In file included from /usr/include/features.h:345,
                 from /usr/include/assert.h:37,
                 from conftest.c:15:
/usr/include/gnu/stubs.h:7: gnu/stubs-32.h: No such file or directory
configure:3312: $? = 1
Comment 5 Martin Mokrejš 2008-09-22 12:06:17 UTC
Have the same issue here: /var/tmp/portage/sys-libs/glibc-2.8_p20080602/work/build-x86-x86_64-pc-linux-gnu-nptl/config.log

Portage 2.2_rc8 (default/linux/amd64/2008.0, gcc-4.3.1, glibc-2.8_p20080602-r0, 2.6.24.7-default x86_64)
=================================================================
System uname: Linux-2.6.24.7-default-x86_64-Intel-R-_Core-TM-2_Quad_CPU_Q6600_@_2.40GHz-with-glibc2.2.5
Timestamp of tree: Wed, 13 Aug 2008 11:04:01 +0000
app-shells/bash:     3.2_p39
dev-java/java-config: 2.1.6-r1
dev-lang/python:     2.4.4-r9, 2.5.2-r7
dev-python/pycrypto: 2.0.1-r6
sys-apps/baselayout: 2.0.0
sys-apps/openrc:     0.2.5
sys-apps/sandbox:    1.2.18.1-r3
sys-devel/autoconf:  2.62-r1
sys-devel/automake:  1.8.5-r3, 1.9.6-r2, 1.10.1-r1
sys-devel/binutils:  2.18-r3
sys-devel/gcc-config: 1.4.0-r4
sys-devel/libtool:   2.2.4
virtual/os-headers:  2.6.25-r4
ACCEPT_KEYWORDS="amd64 ~amd64"
CBUILD="x86_64-pc-linux-gnu"
CFLAGS="-O2 -pipe -march=nocona"
CHOST="x86_64-pc-linux-gnu"
CONFIG_PROTECT="/etc /var/qmail/alias /var/qmail/control /var/spool/torque"
CONFIG_PROTECT_MASK="/etc/ca-certificates.conf /etc/env.d /etc/env.d/java/ /etc/fonts/fonts.conf /etc/gconf /etc/gentoo-release /etc/revdep-rebuild /etc/terminfo /etc/udev/rules.d"
CXXFLAGS="-O2 -pipe -march=nocona"
DISTDIR="/usr/portage/distfiles"
FEATURES="distlocks parallel-fetch preserve-libs sandbox sfperms strict unmerge-orphans userfetch"
GENTOO_MIRRORS="http://distfiles.gentoo.org http://distro.ibiblio.org/pub/linux/distributions/gentoo"
LDFLAGS="-Wl,-O1"
PKGDIR="/usr/portage/packages"
PORTAGE_RSYNC_OPTS="--recursive --links --safe-links --perms --times --compress --force --whole-file --delete --stats --timeout=180 --exclude=/distfiles --exclude=/local --exclude=/packages"
PORTAGE_TMPDIR="/var/tmp"
PORTDIR="/usr/portage"
PORTDIR_OVERLAY="/nfslarge/usr/portage"
SYNC="rsync://rsync.gentoo.org/gentoo-portage"
USE="X amd64 berkdb bzip2 crypt dri gdbm kerberos mmx mpich2 multilib ncurses nptl nptlonly pam python readline sse sse2 ssl sysfs syslog tcpd unicode xorg zlib" ALSA_CARDS="ali5451 als4000 atiixp atiixp-modem bt87x ca0106 cmipci emu10k1x ens1370 ens1371 es1938 es1968 fm801 hda-intel intel8x0 intel8x0m maestro3 trident usb-audio via82xx via82xx-modem ymfpci" ALSA_PCM_PLUGINS="adpcm alaw asym copy dmix dshare dsnoop empty extplug file hooks iec958 ioplug ladspa lfloat linear meter mmap_emul mulaw multi null plug rate route share shm softvol" APACHE2_MODULES="actions alias auth_basic authn_alias authn_anon authn_dbm authn_default authn_file authz_dbm authz_default authz_groupfile authz_host authz_owner authz_user autoindex cache dav dav_fs dav_lock deflate dir disk_cache env expires ext_filter file_cache filter headers include info log_config logio mem_cache mime mime_magic negotiation rewrite setenvif speling status unique_id userdir usertrack vhost_alias" ELIBC="glibc" INPUT_DEVICES="keyboard mouse evdev" KERNEL="linux" LCD_DEVICES="bayrad cfontz cfontz633 glk hd44780 lb216 lcdm001 mtxorb ncurses text" USERLAND="GNU" VIDEO_CARDS="vesa"
Unset:  CPPFLAGS, CTARGET, EMERGE_DEFAULT_OPTS, INSTALL_MASK, LANG, LC_ALL, LINGUAS, MAKEOPTS, PORTAGE_COMPRESS, PORTAGE_COMPRESS_FLAGS, PORTAGE_RSYNC_EXTRA_OPTS


Yes, I used to have no-multilib profile and had until few minutes ago USE=minimal set.
Comment 6 Martin Mokrejš 2008-09-25 21:15:54 UTC
Another package which dies due to the same cause is:

gcc -std=c99 -m32 -O2 -g -mtune=generic -o npviewer-npw-viewer.o -c /var/tmp/portage/net-www/nspluginwrapper-1.0.0/work/nspluginwrapper-1.0.0/src/npw-viewer.c -I. -I/var/tmp/portage/net-www/nspluginwrapper-1.0.0/work/nspluginwrapper-1.0.0 -m32 -O2 -g -mtune=generic -I/var/tmp/portage/net-www/nspluginwrapper-1.0.0/work/nspluginwrapper-1.0.0/lsb-build/headers -I/var/tmp/portage/net-www/nspluginwrapper-1.0.0/work/nspluginwrapper-1.0.0/lsb-build/headers/glib-2.0 -I/var/tmp/portage/net-www/nspluginwrapper-1.0.0/work/nspluginwrapper-1.0.0/lsb-build/headers/gtk-2.0 -I/var/tmp/portage/net-www/nspluginwrapper-1.0.0/work/nspluginwrapper-1.0.0/npapi -I/var/tmp/portage/net-www/nspluginwrapper-1.0.0/work/nspluginwrapper-1.0.0/npapi/nspr -DBUILD_VIEWER
In file included from /usr/include/features.h:354,
                 from /usr/include/stdint.h:26,
                 from /var/tmp/portage/net-www/nspluginwrapper-1.0.0/work/nspluginwrapper-1.0.0/src/sysdeps.h:35,
                 from /var/tmp/portage/net-www/nspluginwrapper-1.0.0/work/nspluginwrapper-1.0.0/src/npw-viewer.c:22:
/usr/include/gnu/stubs.h:7:27: error: gnu/stubs-32.h: No such file or directory
make: *** [npviewer-npw-viewer.o] Error 1
 *
 * ERROR: net-www/nspluginwrapper-1.0.0 failed.
Comment 7 Martin Mokrejš 2008-09-25 21:17:21 UTC
>>> Emerging (1 of 2) sys-libs/glibc-2.8_p20080602
...
>>> Source unpacked.
>>> Compiling source in /var/tmp/portage/sys-libs/glibc-2.8_p20080602/work/glibc-2.8-20080602 ...
 * Building multilib glibc for ABIs: x86 amd64

 * ABI:   x86
 * CBUILD:   x86_64-pc-linux-gnu
 * CHOST:   x86_64-pc-linux-gnu
 * CTARGET:   x86_64-pc-linux-gnu
 * CBUILD_OPT:   i686-pc-linux-gnu
 * CTARGET_OPT:   i686-pc-linux-gnu
 * CC:
 * CFLAGS:   -O2 -fno-strict-aliasing

 * Configuring GLIBC for nptl with: ntt--disable-nlsntt--disable-stackguard-randomizationntt--enable-old-ssp-compatntt--enable-add-ons=nptl,c_stubs,libidn,portsntt--enable-kernel=2.6.9ntt--without-selinux
 * --without-cvs
 * --enable-bind-now
 * --build=i686-pc-linux-gnu
 * --host=i686-pc-linux-gnu
 * --disable-profile
 * --without-gd
 * --with-headers=/usr/include
 * --prefix=/usr
 * --libdir=/usr/lib32
 * --mandir=/usr/share/man
 * --infodir=/usr/share/info
 * --libexecdir=/usr/lib32/misc/glibc
 * 
checking build system type... i686-pc-linux-gnu
checking host system type... i686-pc-linux-gnu
configure: running configure fragment for add-on nptl
configure: running configure fragment for add-on c_stubs
configure: running configure fragment for add-on libidn
checking add-on ports for preconfigure fragments... am33 arm hppa m68k mips 
checking sysdep dirs... sysdeps/i386/elf nptl/sysdeps/unix/sysv/linux/i386/i686 nptl/sysdeps/unix/sysv/linux/i386 sysdeps/unix/sysv/linux/i386 nptl/sysdeps/unix/sysv/linux nptl/sysdeps/pthread sysdeps/pthread ports/sysdeps/unix/sysv/linux sysdeps/unix/sysv/linux sysdeps/gnu sysdeps/unix/common sysdeps/unix/mman sysdeps/unix/inet ports/sysdeps/unix/sysv/i386 sysdeps/unix/sysv/i386 nptl/sysdeps/unix/sysv ports/sysdeps/unix/sysv sysdeps/unix/sysv sysdeps/unix/i386 nptl/sysdeps/unix ports/sysdeps/unix sysdeps/unix sysdeps/posix sysdeps/i386/i686/fpu nptl/sysdeps/i386/i686 sysdeps/i386/i686 sysdeps/i386/i486 nptl/sysdeps/i386/i486 sysdeps/i386/fpu nptl/sysdeps/i386 sysdeps/i386 sysdeps/wordsize-32 sysdeps/ieee754/ldbl-96 sysdeps/ieee754/dbl-64 sysdeps/ieee754/flt-32 sysdeps/ieee754 sysdeps/generic/elf sysdeps/generic
checking for a BSD-compatible install... /usr/bin/install -c
checking whether ln -s works... yes
checking for i686-pc-linux-gnu-gcc... x86_64-pc-linux-gnu-gcc
checking for suffix of object files... o
checking whether we are using the GNU C compiler... yes
checking whether x86_64-pc-linux-gnu-gcc accepts -g... yes
checking for x86_64-pc-linux-gnu-gcc option to accept ISO C89... unsupported
checking how to run the C preprocessor... /lib/cpp
configure: error: C preprocessor "/lib/cpp" fails sanity check
See `config.log' for more details.
 * 
 * ERROR: sys-libs/glibc-2.8_p20080602 failed.
 * Call stack:
 * ebuild.sh, line   49:  Called src_compile
 * environment, line 3448:  Called eblit-run 'src_compile'
 * environment, line 1111:  Called eblit-glibc-src_compile
 * src_compile.eblit, line  173:  Called src_compile
 * environment, line 3448:  Called eblit-run 'src_compile'
 * environment, line 1111:  Called eblit-glibc-src_compile
 * src_compile.eblit, line  181:  Called toolchain-glibc_src_compile
 * src_compile.eblit, line  120:  Called glibc_do_configure 'nptl'
 * src_compile.eblit, line   97:  Called die
 * The specific snippet of code:
 * "${S}"/configure ${myconf} || die "failed to configure glibc"
 * The die message:
 * failed to configure glibc
 * 
 * If you need support, post the topmost build error, and the call stack if relevant.
Comment 8 Martin Mokrejš 2008-09-25 21:19:33 UTC
Created attachment 166416 [details]
/var/tmp/portage/sys-libs/glibc-2.8_p20080602/work/build-x86-x86_64-pc-linux-gnu-nptl/config.log
Comment 9 Javorksy Gleb 2008-12-18 14:44:26 UTC
Created attachment 175728 [details]
build config of glibc-2.9_p20081201

/var/tmp/portage/sys-libs/glibc-2.9_p20081201/work/build-x86-x86_64-pc-linux-gnu-nptl/config.log
Comment 10 Javorksy Gleb 2008-12-18 14:46:56 UTC
Comment on attachment 175728 [details]
build config of glibc-2.9_p20081201

same here.
amd64
I can't compile glibc and gcc with use-flag multilib
Comment 11 Johan Bergström 2009-01-05 21:33:56 UTC
I have this too on a couple of boxes. amd64 default 2008.0 profile, emerging gcc and glibc with multilib crashes and burns..
Comment 12 Javorksy Gleb 2009-01-05 22:29:49 UTC
I fixed this by compiling binary package glibc with use-flag multilib in chroot. Then I installed this glibc in actual system and emerged gcc with use multilib without problems.
Comment 13 SpanKY gentoo-dev 2009-02-15 21:59:53 UTC
glibc-2.8 is stable now
Comment 14 Martin Mokrejš 2009-05-29 13:52:37 UTC
I fixed my issue also by compiling glibc and gcc elsewhere (chroot woudl probably suffice as well). See bug #254164 comment #7.