Gentoo Websites Logo
Go to: Gentoo Home Documentation Forums Lists Bugs Planet Store Wiki Get Gentoo!
Bug 548904 - dev-lang/php-5.5.24 compilation fails with sandbox error
Summary: dev-lang/php-5.5.24 compilation fails with sandbox error
Status: RESOLVED NEEDINFO
Alias: None
Product: Gentoo Linux
Classification: Unclassified
Component: [OLD] Development (show other bugs)
Hardware: All Linux
: Normal normal (vote)
Assignee: PHP Bugs
URL:
Whiteboard:
Keywords:
Depends on:
Blocks:
 
Reported: 2015-05-08 12:11 UTC by Thomas Stein
Modified: 2016-07-12 18:39 UTC (History)
1 user (show)

See Also:
Package list:
Runtime testing required: ---


Attachments
complete build.log (build.log.bz2,43.39 KB, application/x-bzip)
2015-05-10 07:55 UTC, Thomas Stein
Details

Note You need to log in before you can comment on or make changes to this bug.
Description Thomas Stein 2015-05-08 12:11:18 UTC
Hello.

I have problems compiling php-5.5.24. I get:

Build complete.
Don't forget to run 'make test'.

>>> Source compiled.
 * --------------------------- ACCESS VIOLATION SUMMARY ---------------------------
 * LOG FILE: "/var/log/sandbox/sandbox-30395.log"
 * 
VERSION 1.0
FORMAT: F - Function called
FORMAT: S - Access Status
FORMAT: P - Path as passed to function
FORMAT: A - Absolute Path (not canonical)
FORMAT: R - Canonical Path
FORMAT: C - Command Line

F: open_wr
S: deny
P: /var/log/nginx/php5.5-error.log
A: /var/log/nginx/php5.5-error.log
R: /var/log/nginx/php5.5-error.log
C: php -C -q -d include_path=/usr/share/php -d date.timezone=UTC -d output_buffering=1 -d memory_limit=32M -d variables_order=EGPCS -d open_basedir= -d safe_mode=0 -d register_argc_argv=On -d auto_prepend_file= -d auto_append_file= /usr/share/php/pearcmd.php -q info PHP_Archive

Even if i try to compile with FEATURES=-sandbox it fails with the very same error. I have no idea what "/var/log/nginx/php5.5-error.log" suppose to mean.

any hints are welcome.
thanks and cheers
t.



Reproducible: Always




Portage 2.2.18 (python 2.7.9-final-0, default/linux/amd64/13.0, gcc-4.8.3, glibc-2.19-r1, 2.6.32-042stab094.7 x86_64)
=================================================================
System uname: Linux-2.6.32-042stab094.7-x86_64-Intel-R-_Xeon-R-_CPU_E5-2690_v2_@_3.00GHz-with-gentoo-2.2
KiB Mem:     8388608 total,   1885536 free
KiB Swap:          0 total,         0 free
Timestamp of repository gentoo: Wed, 06 May 2015 13:15:01 +0000
sh bash 4.2_p53
ld GNU ld (Gentoo 2.24 p1.4) 2.24
app-shells/bash:          4.2_p53::gentoo
dev-lang/perl:            5.20.1-r4::gentoo
dev-lang/python:          2.7.9-r1::gentoo, 3.3.5-r1::gentoo, 3.4.1::gentoo
dev-util/cmake:           2.8.12.2-r1::gentoo
dev-util/pkgconfig:       0.28-r1::gentoo
sys-apps/baselayout:      2.2::gentoo
sys-apps/openrc:          0.13.9::gentoo
sys-apps/sandbox:         2.6-r1::gentoo
sys-devel/autoconf:       2.69::gentoo
sys-devel/automake:       1.11.6::gentoo, 1.12.6::gentoo, 1.13.4::gentoo
sys-devel/binutils:       2.24-r3::gentoo
sys-devel/gcc:            4.8.3::gentoo
sys-devel/gcc-config:     1.7.3::gentoo
sys-devel/libtool:        2.4.2-r1::gentoo
sys-devel/make:           4.0-r1::gentoo
sys-kernel/linux-headers: 3.13::gentoo (virtual/os-headers)
sys-libs/glibc:           2.19-r1::gentoo
Repositories:

gentoo
    location: /usr/portage
    sync-type: rsync
    sync-uri: rsync://rsync.syseleven.de/gentoo-portage
    priority: -1000

syseleven
    location: /var/lib/layman/sys11gitlab-portage-overlay
    masters: gentoo
    priority: 0

admin-amorelie
    location: /usr/local/portage_puppetfree
    masters: gentoo
    priority: 1

ACCEPT_KEYWORDS="amd64"
ACCEPT_LICENSE="* -@EULA"
CBUILD="x86_64-pc-linux-gnu"
CFLAGS="-march=nocona -O2 -pipe"
CHOST="x86_64-pc-linux-gnu"
CONFIG_PROTECT="/etc /usr/share/gnupg/qualified.txt"
CONFIG_PROTECT_MASK="/etc/ca-certificates.conf /etc/env.d /etc/gconf /etc/gentoo-release /etc/php/apache2-php5.5/ext-active/ /etc/php/cgi-php5.5/ext-active/ /etc/php/cli-php5.5/ext-active/ /etc/revdep-rebuild /etc/sandbox.d /etc/terminfo"
CXXFLAGS="-march=nocona -O2 -pipe"
DISTDIR="/usr/portage/distfiles"
FCFLAGS="-O2 -pipe"
FEATURES="assume-digests binpkg-logs config-protect-if-modified distlocks ebuild-locks fixlafiles merge-sync news parallel-fetch preserve-libs protect-owned sandbox sfperms strict unknown-features-warn unmerge-logs unmerge-orphans userfetch userpriv usersandbox usersync"
FFLAGS="-O2 -pipe"
GENTOO_MIRRORS="http://distfiles.gentoo.org"
LANG="en_US.utf8"
LDFLAGS="-Wl,-O1 -Wl,--as-needed"
PKGDIR="/usr/portage/packages"
PORTAGE_CONFIGROOT="/"
PORTAGE_RSYNC_OPTS="--recursive --links --safe-links --perms --times --omit-dir-times --compress --force --whole-file --delete --stats --human-readable --timeout=180 --exclude=/distfiles --exclude=/local --exclude=/packages"
PORTAGE_TMPDIR="/var/tmp"
USE="acl amd64 berkdb bzip2 cli cracklib crypt cxx dri fortran gdbm iconv ipv6 mmx mmxext modules multilib ncurses nls nptl openmp pam pcre readline session sse sse2 ssl tcpd unicode zlib" ABI_X86="64" ALSA_CARDS="ali5451 als4000 atiixp atiixp-modem bt87x ca0106 cmipci emu10k1x ens1370 ens1371 es1938 es1968 fm801 hda-intel intel8x0 intel8x0m maestro3 trident usb-audio via82xx via82xx-modem ymfpci" APACHE2_MODULES="authn_core authz_core socache_shmcb unixd actions alias auth_basic authn_alias authn_anon authn_dbm authn_default authn_file authz_dbm authz_default authz_groupfile authz_host authz_owner authz_user autoindex cache cgi cgid dav dav_fs dav_lock deflate dir disk_cache env expires ext_filter file_cache filter headers include info log_config logio mem_cache mime mime_magic negotiation rewrite setenvif speling status unique_id userdir usertrack vhost_alias" CALLIGRA_FEATURES="kexi words flow plan sheets stage tables krita karbon braindump author" CAMERAS="ptp2" COLLECTD_PLUGINS="df interface irq load memory rrdtool swap syslog" CPU_FLAGS_X86="mmx mmxext sse sse2" ELIBC="glibc" GPSD_PROTOCOLS="ashtech aivdm earthmate evermore fv18 garmin garmintxt gpsclock itrax mtk3301 nmea ntrip navcom oceanserver oldstyle oncore rtcm104v2 rtcm104v3 sirf superstar2 timing tsip tripmate tnt ublox ubx" INPUT_DEVICES="keyboard mouse evdev" KERNEL="linux" LCD_DEVICES="bayrad cfontz cfontz633 glk hd44780 lb216 lcdm001 mtxorb ncurses text" LIBREOFFICE_EXTENSIONS="presenter-console presenter-minimizer" OFFICE_IMPLEMENTATION="libreoffice" PHP_TARGETS="php5-5" PYTHON_SINGLE_TARGET="python2_7" PYTHON_TARGETS="python2_7 python3_3" RUBY_TARGETS="ruby19 ruby20" USERLAND="GNU" VIDEO_CARDS="fbdev glint intel mach64 mga nouveau nv r128 radeon savage sis tdfx trident vesa via vmware dummy v4l" XTABLES_ADDONS="quota2 psd pknock lscan length2 ipv4options ipset ipp2p iface geoip fuzzy condition tee tarpit sysrq steal rawnat logmark ipmark dhcpmac delude chaos account"
Unset:  CPPFLAGS, CTARGET, EMERGE_DEFAULT_OPTS, INSTALL_MASK, LC_ALL, MAKEOPTS, PORTAGE_BUNZIP2_COMMAND, PORTAGE_COMPRESS, PORTAGE_COMPRESS_FLAGS, PORTAGE_RSYNC_EXTRA_OPTS, USE_PYTHON
Comment 1 Tomáš Mózes 2015-05-08 21:21:57 UTC
Please attach the full build log.
Comment 2 Thomas Stein 2015-05-08 21:46:52 UTC
Hello.

Cannot attach build.log because it is bigger than 1MB. I uploaded the file to my owncloud server. Selfsigned Cert.

https://fluffycloud.de/index.php/s/XZ0IWXNgralJ75N

thanks and cheers
Comment 3 Michael Palimaka (kensington) gentoo-dev 2015-05-09 19:37:10 UTC
If the log is too large to attach, you can compress it beforehand.
Comment 4 Thomas Stein 2015-05-10 07:55:36 UTC
Created attachment 402930 [details]
complete build.log

Hello.

Attached the compressed build.log.

cheers
t.
Comment 5 Thomas Stein 2015-08-21 13:06:43 UTC
Hello.

There error is reproducible buy just set a error_log in the php.ini for the CLI. As soon as i commented this setting php compiles fine. I think this is somehow an ebuild error. Emerge should not depend on writing to a file outside the build directory.

cheers
t.
Comment 6 Michael Orlitzky gentoo-dev 2015-11-20 17:33:37 UTC
That would be an ebuild bug if it's trying to log outside of the sandbox. I see we already have a workaround for a similar problem with session.save_path.

I wasn't able to get the sandbox violation with =dev-lang/php-5.6.15-r3, but getting PHP to log where I want it to has always been a problem. If it's still giving you sandbox violations, I'll try to disable the following settings (temporarily) in the ebuild:

  * error_log
  * mail.log
  * opcache.error_log

I tried setting all of those in /etc/php/cli-php5.6/php.ini but no luck causing a sandbox violation.

Can you please try with that version to see if it's me, or the version?
Comment 7 Thomas Stein 2015-11-20 19:38:30 UTC
Hi Michael.

I can't reproduce this everytime either. It happens now and then. I tried right now with 5.6.14 and 5.6.15-r3. Everything went well with the error log setting in the cli php.ini. I suppose there is another thing playing a role in this scenario. But /if/ the error occurs one can fixit with commenting the error_log option in the cli php.ini. It's a little bit strange i know.

thanks and cheers
t.
Comment 8 Michael Orlitzky gentoo-dev 2015-11-20 19:44:29 UTC
Huh. I don't suppose you still have /var/log/sandbox/sandbox-20894.log lying around?
Comment 9 Thomas Stein 2015-11-21 10:41:23 UTC
No i haven't. It's too long ago. But we run 2500 gentoo machines at work and as i said it happens now and then. Next time i will save the sandbox.log and attach it here.

thanks and cheers
t.
Comment 10 Michael Orlitzky gentoo-dev 2016-07-12 18:39:01 UTC
Well, I believe that this can happen. If we run the php-cli during installation and you have a php.ini with (say) error_reporting = E_ALL and it logs to /var, then something in the test suite could trigger it for example.

But, I've tried everything I can think of to reproduce it on my machine and I can't. So maybe it was fixed upstream? I dunno. If it happens again, let's track it down.