Gentoo Websites Logo
Go to: Gentoo Home Documentation Forums Lists Bugs Planet Store Wiki Get Gentoo!
Bug 480542 - install-amd64-minimal-20130801.iso: hardened, tmpfs, skype, paxmarking, xattr
Summary: install-amd64-minimal-20130801.iso: hardened, tmpfs, skype, paxmarking, xattr
Status: RESOLVED INVALID
Alias: None
Product: Gentoo Release Media
Classification: Unclassified
Component: InstallCD (show other bugs)
Hardware: All Linux
: Normal normal (vote)
Assignee: Gentoo Release Team
URL:
Whiteboard:
Keywords:
Depends on:
Blocks:
 
Reported: 2013-08-11 01:16 UTC by Alex Efros
Modified: 2013-12-24 23:01 UTC (History)
2 users (show)

See Also:
Package list:
Runtime testing required: ---


Attachments

Note You need to log in before you can comment on or make changes to this bug.
Description Alex Efros 2013-08-11 01:16:26 UTC
While installing Hardened Gentoo using install-amd64-minimal-20130801.iso and stage3-amd64-hardened-20130801.tar.bz2 I've mounted tmpfs to /var/tmp/portage to speedup installation. Also I'm using PAX_XATTR marking (I've PAX_MARKINGS="XT" in /etc/make.conf).

All packages was emerges successfully except skype - it failed with this error:

>>> Install skype-4.2.0.11-r1 into /var/tmp/portage/net-im/skype-4.2.0.11-r1/image/ category net-im
 * XT PaX marking -m with paxctl-ng
 *      /var/tmp/portage/net-im/skype-4.2.0.11-r1/image//opt/bin/skype
 * Failed to set XATTR_PAX markings -m for:
 *      /var/tmp/portage/net-im/skype-4.2.0.11-r1/image//opt/bin/skype
 * ERROR: net-im/skype-4.2.0.11-r1 failed (install phase):
 *   (no error message)
 * 
 * Call stack:
 *     ebuild.sh, line  93:  Called src_install
 *   environment, line 2562:  Called die
 * The specific snippet of code:
 *           pax-mark Cm "${ED}"/opt/bin/${PN} || die;

I've work around this issue by unmounting tmpfs from /var/tmp/portage/ … but it's very strange, because on my other up-to-date Hardened Gentoo skype installs just fine with tmpfs on /var/tmp/portage/ and I didn't see anything wrong with install.iso's kernel configuration (it have CONFIG_TMPFS_XATTR=y).
Comment 1 Anthony Basile gentoo-dev 2013-08-11 12:17:27 UTC
(In reply to Alex Efros from comment #0)
> While installing Hardened Gentoo using install-amd64-minimal-20130801.iso
> and stage3-amd64-hardened-20130801.tar.bz2 I've mounted tmpfs to
> /var/tmp/portage to speedup installation. Also I'm using PAX_XATTR marking
> (I've PAX_MARKINGS="XT" in /etc/make.conf).
> 
> All packages was emerges successfully except skype - it failed with this
> error:
> 
> >>> Install skype-4.2.0.11-r1 into /var/tmp/portage/net-im/skype-4.2.0.11-r1/image/ category net-im
>  * XT PaX marking -m with paxctl-ng
>  *      /var/tmp/portage/net-im/skype-4.2.0.11-r1/image//opt/bin/skype
>  * Failed to set XATTR_PAX markings -m for:
>  *      /var/tmp/portage/net-im/skype-4.2.0.11-r1/image//opt/bin/skype
>  * ERROR: net-im/skype-4.2.0.11-r1 failed (install phase):
>  *   (no error message)
>  * 
>  * Call stack:
>  *     ebuild.sh, line  93:  Called src_install
>  *   environment, line 2562:  Called die
>  * The specific snippet of code:
>  *           pax-mark Cm "${ED}"/opt/bin/${PN} || die;
> 
> I've work around this issue by unmounting tmpfs from /var/tmp/portage/ … but
> it's very strange, because on my other up-to-date Hardened Gentoo skype
> installs just fine with tmpfs on /var/tmp/portage/ and I didn't see anything
> wrong with install.iso's kernel configuration (it have CONFIG_TMPFS_XATTR=y).

xattr support for user.pax.flags namespace on tmpfs isn't working despite the fact that the kernel has support for it.  That's confusing.

Can you manually try:

  setfattr -n user.pax.flags -v "m" test-program

on the iso's tmpfs filesystem and see if you get an "Operation not supported"
Comment 2 Anthony Basile gentoo-dev 2013-08-15 18:28:30 UTC
@Alex ping.  can you let me know where we are with this?
Comment 3 Alex Efros 2013-08-15 19:03:46 UTC
(In reply to Anthony Basile from comment #2)
> @Alex ping.  can you let me know where we are with this?

I've already completed that installation, so to answer on your test-request I've to try to install it again, this time in some virtual machine because I don't have that notebook anymore. It's in my todo, but I don't think I'll have time for this in next several days.
Comment 4 Jorge Manuel B. S. Vicetto (RETIRED) Gentoo Infrastructure gentoo-dev 2013-12-23 19:13:15 UTC
@hardened:

Do you want this bug? Or shall we close it as NEEDINFO?
Comment 5 Jorge Manuel B. S. Vicetto (RETIRED) Gentoo Infrastructure gentoo-dev 2013-12-23 19:14:08 UTC
It's more likely it works now that I've CC'ed hardened.
Comment 6 Rick Farina (Zero_Chaos) gentoo-dev 2013-12-24 23:01:33 UTC
(In reply to Jorge Manuel B. S. Vicetto from comment #4)
> @hardened:
> 
> Do you want this bug? Or shall we close it as NEEDINFO?

Only the hardened kernel supports xattr in tmpfs last I checked. I'll let another member of hardened reopen this if they really need to.

Please use a hardened cd (admincd) if you are going to be compiling using the livecd kernel.  Or better yet, install a kernel and reboot into your system before building/updating.