iptables-1.4.0-r1 ebuild failed to compile with installed gentoo-sources-2.6.27-r8 Reproducible: Always Steps to Reproduce: > emerge -pv iptables [ebuild R ] net-firewall/iptables-1.4.0-r1 USE="extensions -imq -ipv6 -l7filter -static" 0 kB > emerge iptables Actual Results: i686-pc-linux-gnu-gcc -O2 -fomit-frame-pointer -pipe -Wall -Wunused -I"/lib/modules/2.6.27-gentoo-r7/build"/include -I/usr/src/linux/include -Iinclude/ -DIPTABLES_VERSION=\"1.4.0\" -fPIC -o extensions/libxt_string_sh.o -c extensions/libxt_string.c extensions/libxt_string.c: In function 'string_parse': extensions/libxt_string.c:204: error: 'struct xt_string_info' has no member named 'invert' extensions/libxt_string.c:217: error: 'struct xt_string_info' has no member named 'invert' extensions/libxt_string.c: In function 'string_print': extensions/libxt_string.c:293: error: 'const struct xt_string_info' has no member named 'invert' extensions/libxt_string.c:296: error: 'const struct xt_string_info' has no member named 'invert' extensions/libxt_string.c: In function 'string_save': extensions/libxt_string.c:314: error: 'const struct xt_string_info' has no member named 'invert' extensions/libxt_string.c:317: error: 'const struct xt_string_info' has no member named 'invert' make: *** [extensions/libxt_string_sh.o] Error 1 * * ERROR: net-firewall/iptables-1.4.0-r1 failed. Expected Results: clear build of iptables with extensions Compile clear with gentoo-sources-2.6.27-r7 Portage 2.1.6.4 (default/linux/x86/2008.0, gcc-4.3.2, glibc-2.7-r2, 2.6.27-gentoo-r8 i686) ================================================================= System uname: Linux-2.6.27-gentoo-r8-i686-Intel-R-_Celeron-R-_CPU_2.80GHz-with-glibc2.0 Timestamp of tree: Mon, 02 Feb 2009 04:45:01 +0000 app-shells/bash: 3.2_p39 dev-lang/python: 2.5.2-r7 dev-python/pycrypto: 2.0.1-r6 sys-apps/baselayout: 1.12.11.1 sys-apps/sandbox: 1.2.18.1-r2 sys-devel/autoconf: 2.13, 2.63 sys-devel/automake: 1.4_p6, 1.5, 1.6.3, 1.7.9-r1, 1.8.5-r3, 1.9.6-r2, 1.10.2 sys-devel/binutils: 2.18-r3 sys-devel/gcc-config: 1.4.0-r4 sys-devel/libtool: 1.5.26 virtual/os-headers: 2.6.27-r2 ACCEPT_KEYWORDS="x86" CBUILD="i686-pc-linux-gnu" CFLAGS="-O2 -fomit-frame-pointer -pipe" CHOST="i686-pc-linux-gnu" CONFIG_PROTECT="/etc" CONFIG_PROTECT_MASK="/etc/ca-certificates.conf /etc/env.d /etc/gconf /etc/revdep-rebuild /etc/terminfo /etc/udev/rules.d" CXXFLAGS="-O2 -fomit-frame-pointer -pipe" DISTDIR="/usr/portage/distfiles" FEATURES="distlocks fixpackages nodoc noinfo noman notitles parallel-fetch protect-owned sandbox sfperms strict unmerge-orphans userfetch" GENTOO_MIRRORS="http://distfiles.gentoo.org http://distro.ibiblio.org/pub/linux/distributions/gentoo" LDFLAGS="-Wl,-O1" PKGDIR="/usr/portage/packages/x86" PORTAGE_RSYNC_OPTS="--recursive --links --safe-links --perms --times --compress --force --whole-file --delete --stats --timeout=180 --exclude=/distfiles --exclude=/local --exclude=/packages" PORTAGE_TMPDIR="/var/tmp" PORTDIR="/usr/portage" PORTDIR_OVERLAY="/usr/local/portage" SYNC="rsync://rsync.gentoo.org/gentoo-portage" USE="acl berkdb bzip2 cli crypt cups dri gdbm iconv isdnlog midi mudflap ncurses nptl nptlonly openmp pam pcre perl pppd python readline reflection session spl ssl sysfs tcpd x86 xorg zlib" ALSA_CARDS="ali5451 als4000 atiixp atiixp-modem bt87x ca0106 cmipci emu10k1 emu10k1x ens1370 ens1371 es1938 es1968 fm801 hda-intel intel8x0 intel8x0m maestro3 trident usb-audio via82xx via82xx-modem ymfpci" ALSA_PCM_PLUGINS="adpcm alaw asym copy dmix dshare dsnoop empty extplug file hooks iec958 ioplug ladspa lfloat linear meter mmap_emul mulaw multi null plug rate route share shm softvol" APACHE2_MODULES="actions alias auth_basic authn_alias authn_anon authn_dbm authn_default authn_file authz_dbm authz_default authz_groupfile authz_host authz_owner authz_user autoindex cache dav dav_fs dav_lock deflate dir disk_cache env expires ext_filter file_cache filter headers include info log_config logio mem_cache mime mime_magic negotiation rewrite setenvif speling status unique_id userdir usertrack vhost_alias" ELIBC="glibc" INPUT_DEVICES="keyboard mouse evdev" KERNEL="linux" LCD_DEVICES="bayrad cfontz cfontz633 glk hd44780 lb216 lcdm001 mtxorb ncurses text" USERLAND="GNU" VIDEO_CARDS="fbdev glint i810 intel mach64 mga neomagic nv r128 radeon savage sis tdfx trident vesa vga via vmware voodoo" Unset: CPPFLAGS, CTARGET, EMERGE_DEFAULT_OPTS, FFLAGS, INSTALL_MASK, LANG, LC_ALL, LINGUAS, MAKEOPTS, PORTAGE_COMPRESS, PORTAGE_COMPRESS_FLAGS, PORTAGE_RSYNC_EXTRA_OPTS
can be confirmed for iptables-1.3.8-r3 with 2.6.27-gentoo-r8 without extensions as well USE="-extensions -imq -ipv6 -l7filter -static" emerge iptables ---------------------------------------------------------------- extensions/libipt_string.c: In function 'parse': extensions/libipt_string.c:208: error: 'struct xt_string_info' has no member named 'invert' extensions/libipt_string.c:221: error: 'struct xt_string_info' has no member named 'invert' extensions/libipt_string.c: In function 'print': extensions/libipt_string.c:300: error: 'const struct xt_string_info' has no member named 'invert' extensions/libipt_string.c:303: error: 'const struct xt_string_info' has no member named 'invert' extensions/libipt_string.c: In function 'save': extensions/libipt_string.c:322: error: 'const struct xt_string_info' has no member named 'invert' extensions/libipt_string.c:325: error: 'const struct xt_string_info' has no member named 'invert' make: *** [extensions/libipt_string_sh.o] Error 1 * * ERROR: net-firewall/iptables-1.3.8-r3 failed.
Michael, we dropped support for extensions. extensions USE flags was implemented after upstream added some additional extensions into iptables package. After that iptables upstream moved all extensions out of package and fixing (porting them back to iptables) is not an easy task. imq and l7-filters are dropped now too. The problem with this patches is that they require kernel to be patched in advance. For imq you have to patch kernel manually, for l7-filter we have package, but IMO we better drop it from the tree, since it requires collision-protection to be disabled and this is bad from QA point of view. In ~iptables-1.4.2 (which is stable on x86/amd64 and other archs will follow soon) we have different mechanism to apply patches. Just put patches into /etc/portage/patches/net-firewall/iptables/ and they'll be applied during emerge iptables. Note that you need to name patch appropriately that is described in $PORTDIR/eclass/eutils.eclass: # Bulk Patches should preferably have the form of: # # ??_${ARCH}_foo.${EPATCH_SUFFIX} # # For example: # # 01_all_misc-fix.patch.bz2 # 02_sparc_another-fix.patch.bz2 # # This ensures that there are a set order, and you can have ARCH # specific patches. To fix this problem you need to get patches for iptables from more recent l7-filter sources.
