When I install app-misc/paxutils-1.1.1 multiple packages fail while installing inside the sandbox with the error message "unable to read SONAME from somelib.so" This occurs for the following packages: xz-utils zlib bzip2 lzo tcp-wrappers libaio libmnl libusb libusb-compat iptables keyutils attr acl e2fsprogs-libs libcap cracklib pam readline libpcre gpm util-linux procps Other libraries (multilib or not) compile and install fine (glibc, curl, kdelibs et al.) A downgrade to pax-utils-1.0.5 fixes this problem (1.1 does not work either). This occurs on two different AMD64 systems (both multilib, one VM, one laptop). When I manually check the library file in question with scanelf it shows the expected SONAME. # scanelf -S ./pcre-8.37-abi_x86_64.amd64/.libs/libpcre.so TYPE SONAME FILE ET_DYN libpcre.so.1 ./pcre-8.37-abi_x86_64.amd64/.libs/libpcre.so Reproducible: Always Steps to Reproduce: 1. emerge =pax-utils-1.1.1 2. emerge zlib 3. zlib fails with the aforementioned error message Actual Results: Installation fails with "unable to read SONAME" Expected Results: The installation should work. # emerge --info Portage 2.2.20.1 (python 2.7.10-final-0, default/linux/amd64/13.0/desktop/plasma, gcc-5.2.0, glibc-2.21-r1, 4.1.3-gentoo x86_64) ================================================================= System uname: Linux-4.1.3-gentoo-x86_64-Intel-R-_Core-TM-_i3_CPU_M_370_@_2.40GHz-with-gentoo-2.2 KiB Mem: 3904396 total, 430560 free KiB Swap: 8289276 total, 7750992 free Timestamp of repository gentoo: Wed, 26 Aug 2015 14:00:02 +0000 sh bash 4.3_p42 ld GNU ld (Gentoo 2.25.1 p1.0) 2.25.1 app-shells/bash: 4.3_p42::gentoo dev-java/java-config: 2.2.0::gentoo dev-lang/perl: 5.22.0::gentoo dev-lang/python: 2.7.10::gentoo, 3.3.5-r1::gentoo, 3.4.3::gentoo dev-util/cmake: 3.3.1::gentoo dev-util/pkgconfig: 0.28-r3::gentoo sys-apps/baselayout: 2.2::gentoo sys-apps/openrc: 0.17::gentoo sys-apps/sandbox: 2.6-r1::gentoo sys-devel/autoconf: 2.13::gentoo, 2.69-r1::gentoo sys-devel/automake: 1.11.6-r1::gentoo, 1.13.4::gentoo, 1.14.1::gentoo, 1.15::gentoo sys-devel/binutils: 2.25.1::gentoo sys-devel/gcc: 4.9.3::gentoo, 5.2.0::gentoo sys-devel/gcc-config: 1.8::gentoo sys-devel/libtool: 2.4.6-r1::gentoo sys-devel/make: 4.1-r1::gentoo sys-kernel/linux-headers: 4.1::gentoo (virtual/os-headers) sys-libs/glibc: 2.21-r1::gentoo Repositories: gentoo location: /usr/portage sync-type: rsync sync-uri: rsync://rsync.gentoo.org/gentoo-portage priority: -1000 lokal location: /usr/local/myportage masters: gentoo foo-overlay location: /var/lib/layman/foo-overlay sync-type: laymansync sync-uri: git://github.com/slashbeast/foo-overlay.git masters: gentoo priority: 50 java location: /var/lib/layman/java sync-type: laymansync sync-uri: git://anongit.gentoo.org/proj/java.git masters: gentoo priority: 50 science location: /var/lib/layman/science sync-type: laymansync sync-uri: git://github.com/gentoo-science/sci.git masters: gentoo priority: 50 steam-overlay location: /var/lib/layman/steam-overlay sync-type: laymansync sync-uri: git://github.com/anyc/steam-overlay.git masters: gentoo priority: 50 ACCEPT_KEYWORDS="amd64 ~amd64" ACCEPT_LICENSE="*" CBUILD="x86_64-pc-linux-gnu" CFLAGS="-O2 -pipe -march=native -fno-ident -ggdb -fopenmp" CHOST="x86_64-pc-linux-gnu" CONFIG_PROTECT="/etc /usr/lib64/libreoffice/program/sofficerc /usr/share/config /usr/share/gnupg/qualified.txt /var/lib/hsqldb" CONFIG_PROTECT_MASK="/etc/ca-certificates.conf /etc/dconf /etc/env.d /etc/fonts/fonts.conf /etc/gconf /etc/gentoo-release /etc/revdep-rebuild /etc/sandbox.d /etc/terminfo /etc/texmf/language.dat.d /etc/texmf/language.def.d /etc/texmf/updmap.d /etc/texmf/web2c" CXXFLAGS="-O2 -pipe -march=native -fno-ident -ggdb -fopenmp" DISTDIR="/usr/portage/distfiles" FCFLAGS="-O2 -pipe" FEATURES="assume-digests binpkg-logs config-protect-if-modified distlocks ebuild-locks fixlafiles merge-sync news parallel-fetch preserve-libs protect-owned sandbox sfperms splitdebug strict unknown-features-warn unmerge-logs unmerge-orphans userfetch userpriv usersandbox usersync" FFLAGS="-O2 -pipe" GENTOO_MIRRORS="http://ftp.uni-erlangen.de/pub/mirrors/gentoo http://mirror.netcologne.de/gentoo/ http://ftp.spline.inf.fu-berlin.de/mirrors/gentoo/" LANG="de_DE.UTF-8" LDFLAGS="-Wl,-O1 -Wl,--as-needed -Wl,--sort-common -Wl,--hash-style=gnu -fopenmp" MAKEOPTS="-j3" PKGDIR="/usr/portage/packages" PORTAGE_CONFIGROOT="/" PORTAGE_RSYNC_OPTS="--recursive --links --safe-links --perms --times --omit-dir-times --compress --force --whole-file --delete --stats --human-readable --timeout=180 --exclude=/distfiles --exclude=/local --exclude=/packages" PORTAGE_TMPDIR="/var/tmp" USE="X a52 aac acl acpi alsa amd64 apng archive branding bzip2 cairo cdda cdr cli consolekit corefonts cracklib crypt cups cxx dbus declarative dga dhcpcd dri dts dvd dvdr emboss encode exif fam fat ffmpeg firefox flac fortran gallium gconf gif gimp glibc-omitfp gmp gnome-keyring gpm graphite gs gstreamer gtk gtkstyle iconv icu imlib ipv6 java jpeg kde kipi lame lcms libkms libnotify lto lxde mad mikmod mmap mmx mmxext mng modules mp3 mp4 mpeg multilib nautilus ncurses nls nptl nsplugin offensive ogg okular opencl opengl openmp optimization optimized-qmake pam pango pcre pdf pgo phonon plasma png policykit postscript ppds printsupport python3 qml qt3support qt4 qt5 rar readline samba sdl seccomp semantic-desktop session smp spell sqlite sse sse2 sse3 sse4 sse4_1 sse4_2 ssl ssse3 startup-notification strong-optimization svg symlink system-cairo system-icu system-jpeg system-libvpx tcpd theora threads tiff timidity truetype udev udisks unicode upower usb vorbis widgets wifi wmf wxwidgets x264 xcb xcomposite xinerama xml xorg xrandr xscreensaver xv xvid zlib" ABI_X86="32 64" ALSA_CARDS="ali5451 als4000 atiixp atiixp-modem bt87x ca0106 cmipci emu10k1x ens1370 ens1371 es1938 es1968 fm801 hda-intel intel8x0 intel8x0m maestro3 trident usb-audio via82xx via82xx-modem ymfpci" APACHE2_MODULES="authn_core authz_core socache_shmcb unixd actions alias auth_basic authn_alias authn_anon authn_dbm authn_default authn_file authz_dbm authz_default authz_groupfile authz_host authz_owner authz_user autoindex cache cgi cgid dav dav_fs dav_lock deflate dir disk_cache env expires ext_filter file_cache filter headers include info log_config logio mem_cache mime mime_magic negotiation rewrite setenvif speling status unique_id userdir usertrack vhost_alias" CALLIGRA_FEATURES="kexi words flow plan sheets stage tables krita karbon braindump author" CAMERAS="ptp2" COLLECTD_PLUGINS="df interface irq load memory rrdtool swap syslog" CPU_FLAGS_X86="mmx mmxext popcnt sse sse2 sse3 sse4_1 sse4_2 ssse3" ELIBC="glibc" GPSD_PROTOCOLS="ashtech aivdm earthmate evermore fv18 garmin garmintxt gpsclock itrax mtk3301 nmea ntrip navcom oceanserver oldstyle oncore rtcm104v2 rtcm104v3 sirf superstar2 timing tsip tripmate tnt ublox ubx" INPUT_DEVICES="keyboard mouse evdev synaptics" KERNEL="linux" LCD_DEVICES="bayrad cfontz cfontz633 glk hd44780 lb216 lcdm001 mtxorb ncurses text" LIBREOFFICE_EXTENSIONS="presenter-console presenter-minimizer" LINGUAS="de" OFFICE_IMPLEMENTATION="libreoffice" PHP_TARGETS="php5-5" PYTHON_SINGLE_TARGET="python2_7" PYTHON_TARGETS="python2_7 python3_4" RUBY_TARGETS="ruby22" USERLAND="GNU" VIDEO_CARDS="vesa radeon" XTABLES_ADDONS="quota2 psd pknock lscan length2 ipv4options ipset ipp2p iface geoip fuzzy condition tee tarpit sysrq steal rawnat logmark ipmark dhcpmac delude chaos account" Unset: CC, CPPFLAGS, CTARGET, CXX, EMERGE_DEFAULT_OPTS, INSTALL_MASK, LC_ALL, PORTAGE_BUNZIP2_COMMAND, PORTAGE_COMPRESS, PORTAGE_COMPRESS_FLAGS, PORTAGE_RSYNC_EXTRA_OPTS, USE_PYTHON
Created attachment 411206 [details] Build.log of app-arch/bzip2 with pax-utils-1.1.1
Created attachment 411208 [details] Build.log of dev-libs/libpcre with pax-utils-1.1.1
please run `emerge --debug bzip2` and attach that log here
Created attachment 411702 [details] Debug log of app-arch/bzip2
please run this by hand: strace -o log scanelf -qF%S#F /var/tmp/portage/app-arch/bzip2-1.0.6-r7/image//usr/lib64/libbz2.so and then attach the log file here
Created attachment 411734 [details] strace logfile of scanelf Here you go
annoyingly, that log shows scanelf working :/ if you rebuild pax-utils with USE=-seccomp, can you emerge bzip2 ? if so, can you try building pax-utils with USE=debug and see if the failing bzip2 log contains a bit more info ?
Created attachment 411996 [details] Build.log with debug enabled pax-utils Hah, good idea. Without seccomp it actually works and with the debug flag it actually shows an error message.
that is weird. i cannot explain why it's using futex() :(.
it's probably due to building pax-utils w/-fopenmp which often implicitly links in libpthread which means many basic operations can invoke locks which glibc in turn bases on top of futex in some cases. can you try building pax-utils w/USE=seccomp but not -fopenmp and see if it still works ? i tried over here and i can't get it to trigger (which isn't unexpected when you're talking about parallel threads).
Btw., I've had the exact same behaviour with pax-utils-1.1.2, recently added to the tree.
Created attachment 412088 [details, diff] pax-utils-futex.patch please try building pax-utils w/this patch and see if it works also try building pax-utils w/this patch and CFLAGS=-O2 and see if it works
Building pax-utils without the -openmp flag is not enough to get it working again and the error message remains the same. Because of that the patch also only helps when -fopenmp is given as a CFLAG when building pax-utils. Probably some dependency has to be built without it.
(In reply to florianmey from comment #13) hmm, probably also have to rebuild libseccomp & libcap w/out openmp. and maybe glibc ? start with the first two :).
fixed in 1.1.3 with: http://gitweb.gentoo.org/proj/pax-utils.git/commit/?id=1f7a936b5cd7673275540ef73fdeb29fba821a15
