Hi, I am on a Gentoo Base System release 1.12.11.1, and I wanted to compile the l7-filter to add support for l7-filter on iptables. The ebuild don't compile, and I get this message : * Messages for package net-misc/l7-filter-2.17: * This may not work with all kernels. If it does not work please enter a bug at bugs.gentoo.org * This only patches the current kernel source code. (/usr/src/linux) * Its up to you to recompile the kernel with the l7 options * * You will also need to emerge iptables with the "extensions" or * "l7filter" USE flag (depend which version of iptables you emerge) * * ERROR: net-misc/l7-filter-2.17 failed. * Call stack: * ebuild.sh, line 49: Called src_unpack * environment, line 2836: Called which_patch * environment, line 3497: Called die * The specific snippet of code: * die "No L7-filter patch for Kernel version ${KV_FULL} - sorry not supported"; * The die message: * No L7-filter patch for Kernel version * ERROR: Kernel configuration is invalid. * include/linux/autoconf.h or include/config/auto.conf are missing. * Run 'make oldconfig && make prepare' on kernel src to fix it. * * 2. * ERROR: Kernel configuration is invalid. * include/linux/autoconf.h or include/config/auto.conf are missing. * Run 'make oldconfig && make prepare' on kernel src to fix it. * * 6. * ERROR: Kernel configuration is invalid. * include/linux/autoconf.h or include/config/auto.conf are missing. * Run 'make oldconfig && make prepare' on kernel src to fix it. * * 27 * ERROR: Kernel configuration is invalid. * include/linux/autoconf.h or include/config/auto.conf are missing. * Run 'make oldconfig && make prepare' on kernel src to fix it. * * -gentoo-r7 - sorry not supported * * If you need support, post the topmost build error, and the call stack if relevant. * A complete build log is located at '/var/tmp/portage/net-misc/l7-filter-2.17/temp/build.log'. * The ebuild environment file is located at '/var/tmp/portage/net-misc/l7-filter-2.17/temp/environment'. Reproducible: Always Steps to Reproduce: 1. cd /usr/src/linux 2. make oldconfig && make prepare 3. emerge -v l7-filter Actual Results: The l7-filter don't compile Expected Results: It should have installed the l7-filter Kernel gentoo-sources : 2.6.27 emerge --info : Portage 2.1.6.4 (default/linux/x86/2008.0, gcc-4.1.2, glibc-2.6.1-r0, 2.6.27-gentoo-r7-experimental i686) ================================================================= System uname: Linux-2.6.27-gentoo-r7-experimental-i686-Intel-R-_Celeron-R-_CPU_2.66GHz-with-glibc2.0 Timestamp of tree: Wed, 07 Jan 2009 10:00:02 +0000 ccache version 2.4 [enabled] app-shells/bash: 3.2_p39 dev-lang/python: 2.5.2-r7 dev-util/ccache: 2.4-r7 sys-apps/baselayout: 1.12.11.1 sys-apps/sandbox: 1.2.18.1-r2 sys-devel/autoconf: 2.63 sys-devel/automake: 1.9.6-r2, 1.10.2 sys-devel/binutils: 2.18-r3 sys-devel/gcc-config: 1.4.0-r4 sys-devel/libtool: 1.5.26 virtual/os-headers: 2.6.27-r2 ACCEPT_KEYWORDS="x86" CBUILD="i686-pc-linux-gnu" CFLAGS="-O2 -march=prescott -pipe -fomit-frame-pointer" CHOST="i686-pc-linux-gnu" CONFIG_PROTECT="/etc" CONFIG_PROTECT_MASK="/etc/ca-certificates.conf /etc/env.d /etc/fonts/fonts.conf /etc/gconf /etc/php/apache2-php5/ext-active/ /etc/php/cgi-php5/ext-active/ /etc/php/cli-php5/ext-active/ /etc/revdep-rebuild /etc/terminfo /etc/udev/rules.d" CXXFLAGS="-O2 -march=prescott -pipe -fomit-frame-pointer" DISTDIR="/usr/portage/distfiles" FEATURES="ccache distlocks fixpackages parallel-fetch protect-owned sfperms strict unmerge-orphans userfetch" GENTOO_MIRRORS="http://mirror.ovh.net/gentoo-distfiles/ ftp://mirror.ovh.net/gentoo-distfiles/" LANG="fr_FR.UTF-8" LC_ALL="fr_FR.UTF-8" LDFLAGS="-Wl,-O1" LINGUAS="fr" MAKEOPTS="-j3" PKGDIR="/usr/portage/packages" PORTAGE_RSYNC_OPTS="--recursive --links --safe-links --perms --times --compress --force --whole-file --delete --stats --timeout=180 --exclude=/distfiles --exclude=/local --exclude=/packages" PORTAGE_TMPDIR="/var/tmp" PORTDIR="/usr/portage" SYNC="rsync://rsync.gentoo.org/gentoo-portage" USE="acl apache2 bzip2 caps cli cracklib crypt cups dri fortran gpm iconv ipv6 isdnlog logrotate midi mmx mudflap ncurses nls nptl nptlonly openmp pam pcre perl pppd python readline reflection session spl sse sse2 ssl sysfs tcpd unicode x86 xorg zlib" ALSA_CARDS="ali5451 als4000 atiixp atiixp-modem bt87x ca0106 cmipci emu10k1 emu10k1x ens1370 ens1371 es1938 es1968 fm801 hda-intel intel8x0 intel8x0m maestro3 trident usb-audio via82xx via82xx-modem ymfpci" ALSA_PCM_PLUGINS="adpcm alaw asym copy dmix dshare dsnoop empty extplug file hooks iec958 ioplug ladspa lfloat linear meter mmap_emul mulaw multi null plug rate route share shm softvol" APACHE2_MODULES="actions alias auth_basic authn_alias authn_anon authn_dbm authn_default authn_file authz_dbm authz_default authz_groupfile authz_host authz_owner authz_user autoindex cache dav dav_fs dav_lock deflate dir disk_cache env expires ext_filter file_cache filter headers include info log_config logio mem_cache mime mime_magic negotiation rewrite setenvif speling status unique_id userdir usertrack vhost_alias" APACHE2_MPMS="peruser" ELIBC="glibc" INPUT_DEVICES="keyboard mouse evdev" KERNEL="linux" LCD_DEVICES="bayrad cfontz cfontz633 glk hd44780 lb216 lcdm001 mtxorb ncurses text" LINGUAS="fr" USERLAND="GNU" VIDEO_CARDS="fbdev glint i810 intel mach64 mga neomagic nv r128 radeon savage sis tdfx trident vesa vga via vmware voodoo" Unset: CPPFLAGS, CTARGET, EMERGE_DEFAULT_OPTS, FFLAGS, INSTALL_MASK, PORTAGE_COMPRESS, PORTAGE_COMPRESS_FLAGS, PORTAGE_RSYNC_EXTRA_OPTS, PORTDIR_OVERLAY
Created attachment 177675 [details] The build logfile
Created attachment 177676 [details] The environment file
Hi, To help narowing the problem: I've builded successfully l7filter v 2.18 for: gentoo-sources-2.6.25-r4 gentoo-sources-2.6.25-r9 on 28 Dec 2008, but after most recent emerge --sync I can NOT build any l7-filter ebuild against any gentoo-sources kernel and I've got exactly the same error output.
"Run 'make oldconfig && make prepare' on kernel src to fix it." failing that try net-misc/l7-filter-userspace in the meantime
take note of comment 4 and reopen if you still have problems.
In my comment, I've already done "make oldconfig && make prepare" but I still have the problem. Steps to Reproduce: 1. cd /usr/src/linux 2. make oldconfig && make prepare 3. emerge -v l7-filter
When I try to emerge l7-filter-userspace, it fails too * Messages for package net-misc/l7-filter-userspace-0.10: * * ERROR: net-misc/l7-filter-userspace-0.10 failed. * Call stack: * ebuild.sh, line 49: Called src_compile * environment, line 2029: Called _eapi0_src_compile * ebuild.sh, line 595: Called _eapi2_src_compile * ebuild.sh, line 629: Called die * The specific snippet of code: * emake || die "emake failed" * The die message: * emake failed * * If you need support, post the topmost build error, and the call stack if relevant. * A complete build log is located at '/var/tmp/portage/net-misc/l7-filter-userspace-0.10/temp/build.log'. * The ebuild environment file is located at '/var/tmp/portage/net-misc/l7-filter-userspace-0.10/temp/environment'.
Ok, sorry folks, but previous version of those ebuild was OK to instal on already build kernel, this one sudenly crashes if you try to apply it on kernel that is in any other stage than "make prepare", aditionally even when going with ebuild that way it will bang about collision files ( in my case will NOT install ). What if somebody is making emerge -e, or emerge -tvpuN --deep world ? he will have to do it manually all the way ;X If you are not going to do anything about it, can you post old ebuilds ( maybe month old ), so we can make our own working overlay ?
(In reply to comment #7) > When I try to emerge l7-filter-userspace, it fails too please create this as a separate bug. I'd much rather fix l7-filter-userspace than this dodgy hack of a "package". (In reply to comment #8) > Ok, sorry folks, but previous version of those ebuild was OK to instal on > already build kernel, this one sudenly crashes if you try to apply it on kernel > that is in any other stage than "make prepare", thats a little odd - i'll check that sometime. > aditionally even when going > with ebuild that way it will bang about collision files ( in my case will NOT > install ). hopefully you saw this warning: if has collision-protect ${FEATURES}; then ewarn ewarn "Collisions are expected as this patches kernel code. Use" ewarn "FEATURES=-collision-protect emerge ...... for this package" die 'incompatible FEATURES=collision-protect' fi > What if somebody is making emerge -e, or emerge -tvpuN --deep world > ? he will have to do it manually all the way ;X Because of the the way this packages is distributed there is no other way. if there are package specific features implemented this could help. > If you are not going to do anything about it, can you post old ebuilds ( maybe > month old ), so we can make our own working overlay ? http://sources.gentoo.org/viewcvs.py/gentoo-x86/net-misc/l7-filter/?hideattic=0
I see this: " >>> Failed to install net-misc/l7-filter-2.21, Log file: >>> '/var/tmp/portage/net-misc/l7-filter-2.21/temp/build.log' * Messages for package net-misc/l7-filter-2.21: * This may not work with all kernels. If it does not work please enter a bug at bugs.gentoo.org * This only patches the current kernel source code. (/usr/src/linux) * Its up to you to recompile the kernel with the l7 options * * You will also need to emerge iptables with the "extensions" or * "l7filter" USE flag (depend which version of iptables you emerge) * This package will overwrite one or more files that may belong to other * packages (see list below). You can use a command such as `portageq * owners / <filename>` to identify the installed package that owns a * file. If portageq reports that only one package owns a file then do * NOT file a bug report. A bug report is only useful if it identifies at * least two or more packages that are known to install the same file(s). * If a collision occurs and you can not explain where the file came from * then you should simply ignore the collision since there is not enough * information to determine if a real problem exists. Please do NOT file * a bug report at http://bugs.gentoo.org unless you report exactly which * two packages install the same file(s). Once again, please do NOT file * a bug report unless you have completely understood the above message. * * Detected file collision(s): * * /usr/src/linux-2.6.25-gentoo-r9/include/net/netfilter/nf_conntrack.h * /usr/src/linux-2.6.25-gentoo-r9/net/netfilter/nf_conntrack_standalone.c * /usr/src/linux-2.6.25-gentoo-r9/net/netfilter/Kconfig * /usr/src/linux-2.6.25-gentoo-r9/net/netfilter/Makefile * /usr/src/linux-2.6.25-gentoo-r9/net/netfilter/nf_conntrack_core.c * * Searching all installed packages for file collisions... * * Press Ctrl-C to Stop * * sys-kernel/gentoo-sources-2.6.25-r9 * /usr/src/linux-2.6.25-gentoo-r9/include/net/netfilter/nf_conntrack.h * /usr/src/linux-2.6.25-gentoo-r9/net/netfilter/Kconfig * /usr/src/linux-2.6.25-gentoo-r9/net/netfilter/Makefile * /usr/src/linux-2.6.25-gentoo-r9/net/netfilter/nf_conntrack_core.c * /usr/src/linux-2.6.25-gentoo-r9/net/netfilter/nf_conntrack_standalone.c * * Package 'net-misc/l7-filter-2.21' NOT merged due to file collisions. * If necessary, refer to your elog messages for the whole content of the * above message. " I'll try with your "features" switch
Sorry, full one is " >>> Emerging (1 of 1) net-misc/l7-filter-2.21 * netfilter-layer7-v2.21.tar.gz RMD160 SHA1 SHA256 size ;-) ... [ ok ] * additional_patch_for_2.6.13.diff RMD160 SHA1 SHA256 size ;-) ... [ ok ] * checking ebuild checksums ;-) ... [ ok ] * checking auxfile checksums ;-) ... [ ok ] * checking miscfile checksums ;-) ... [ ok ] * Determining the location of the kernel source code * Found kernel source directory: * /usr/src/linux * Found sources for kernel version: * 2.6.25-gentoo-r9 * This may not work with all kernels. If it does not work please enter a bug at bugs.gentoo.org * This only patches the current kernel source code. (/usr/src/linux) * Its up to you to recompile the kernel with the l7 options * * You will also need to emerge iptables with the "extensions" or * "l7filter" USE flag (depend which version of iptables you emerge) >>> Unpacking source... >>> Unpacking netfilter-layer7-v2.21.tar.gz to /var/tmp/portage/net-misc/l7-filter-2.21/work * Applying kernel-2.6.25-2.6.28-layer7-2.21.patch ... [ ok ] >>> Source unpacked. >>> Compiling source in /var/tmp/portage/net-misc/l7-filter-2.21/work/netfilter-layer7-v2.21 ... * no compiling - just patching source >>> Source compiled. >>> Test phase [not enabled]: net-misc/l7-filter-2.21 >>> Install l7-filter-2.21 into /var/tmp/portage/net-misc/l7-filter-2.21/image/ category net-misc >>> Completed installing l7-filter-2.21 into /var/tmp/portage/net-misc/l7-filter-2.21/image/ >>> Installing net-misc/l7-filter-2.21 * This package will overwrite one or more files that may belong to other * packages (see list below). You can use a command such as `portageq * owners / <filename>` to identify the installed package that owns a * file. If portageq reports that only one package owns a file then do * NOT file a bug report. A bug report is only useful if it identifies at * least two or more packages that are known to install the same file(s). * If a collision occurs and you can not explain where the file came from * then you should simply ignore the collision since there is not enough * information to determine if a real problem exists. Please do NOT file * a bug report at http://bugs.gentoo.org unless you report exactly which * two packages install the same file(s). Once again, please do NOT file * a bug report unless you have completely understood the above message. * * Detected file collision(s): * * /usr/src/linux-2.6.25-gentoo-r9/include/net/netfilter/nf_conntrack.h * /usr/src/linux-2.6.25-gentoo-r9/net/netfilter/nf_conntrack_standalone.c * /usr/src/linux-2.6.25-gentoo-r9/net/netfilter/Kconfig * /usr/src/linux-2.6.25-gentoo-r9/net/netfilter/Makefile * /usr/src/linux-2.6.25-gentoo-r9/net/netfilter/nf_conntrack_core.c * * Searching all installed packages for file collisions... * * Press Ctrl-C to Stop * * sys-kernel/gentoo-sources-2.6.25-r9 * /usr/src/linux-2.6.25-gentoo-r9/include/net/netfilter/nf_conntrack.h * /usr/src/linux-2.6.25-gentoo-r9/net/netfilter/Kconfig * /usr/src/linux-2.6.25-gentoo-r9/net/netfilter/Makefile * /usr/src/linux-2.6.25-gentoo-r9/net/netfilter/nf_conntrack_core.c * /usr/src/linux-2.6.25-gentoo-r9/net/netfilter/nf_conntrack_standalone.c * * Package 'net-misc/l7-filter-2.21' NOT merged due to file collisions. * If necessary, refer to your elog messages for the whole content of the * above message. >>> Failed to install net-misc/l7-filter-2.21, Log file: >>> '/var/tmp/portage/net-misc/l7-filter-2.21/temp/build.log' * Messages for package net-misc/l7-filter-2.21: * This may not work with all kernels. If it does not work please enter a bug at bugs.gentoo.org * This only patches the current kernel source code. (/usr/src/linux) * Its up to you to recompile the kernel with the l7 options * * You will also need to emerge iptables with the "extensions" or * "l7filter" USE flag (depend which version of iptables you emerge) * This package will overwrite one or more files that may belong to other * packages (see list below). You can use a command such as `portageq * owners / <filename>` to identify the installed package that owns a * file. If portageq reports that only one package owns a file then do * NOT file a bug report. A bug report is only useful if it identifies at * least two or more packages that are known to install the same file(s). * If a collision occurs and you can not explain where the file came from * then you should simply ignore the collision since there is not enough * information to determine if a real problem exists. Please do NOT file * a bug report at http://bugs.gentoo.org unless you report exactly which * two packages install the same file(s). Once again, please do NOT file * a bug report unless you have completely understood the above message. * * Detected file collision(s): * * /usr/src/linux-2.6.25-gentoo-r9/include/net/netfilter/nf_conntrack.h * /usr/src/linux-2.6.25-gentoo-r9/net/netfilter/nf_conntrack_standalone.c * /usr/src/linux-2.6.25-gentoo-r9/net/netfilter/Kconfig * /usr/src/linux-2.6.25-gentoo-r9/net/netfilter/Makefile * /usr/src/linux-2.6.25-gentoo-r9/net/netfilter/nf_conntrack_core.c * * Searching all installed packages for file collisions... * * Press Ctrl-C to Stop * * sys-kernel/gentoo-sources-2.6.25-r9 * /usr/src/linux-2.6.25-gentoo-r9/include/net/netfilter/nf_conntrack.h * /usr/src/linux-2.6.25-gentoo-r9/net/netfilter/Kconfig * /usr/src/linux-2.6.25-gentoo-r9/net/netfilter/Makefile * /usr/src/linux-2.6.25-gentoo-r9/net/netfilter/nf_conntrack_core.c * /usr/src/linux-2.6.25-gentoo-r9/net/netfilter/nf_conntrack_standalone.c * * Package 'net-misc/l7-filter-2.21' NOT merged due to file collisions. * If necessary, refer to your elog messages for the whole content of the * above message. "
2.21 is a coppy of 2.20 ebuild, with 2.20 and 2.18 acts exactly the same, with "FEATURES=-collision-protect" produces exactly same output.
(In reply to comment #12) > 2.21 is a coppy of 2.20 ebuild, with 2.20 and 2.18 acts exactly the same, with > "FEATURES=-collision-protect" produces exactly same output. > yep portage must have changed somehow to not respect this feature anymore
I've managed to ovveride this by adding COLLISION_IGNORE="/usr/src/" to my make.conf, but it is just a very cruel way to achive goal ... can portage guys come up with proper solution ?
@portage: This looks like bug in portage, or why FEATURES=-collision-protect are not respected? Is there any way to ignore collisions from ebuild? Thank you in advance for any suggestions.
(In reply to comment #15) > @portage: This looks like bug in portage, or why FEATURES=-collision-protect > are not respected? FEATURES="protect-owned" is enabled by default.
FEATURES=-collision-protect is respected, but in this case you also need FEATURES=-protect-owned since the files are owned by an installed package (sys-kernel/gentoo-sources-2.6.25-r9 in this case).
So, esentially person have to disable whole portage security to install one packet ? Or can it be done on ebouild basis ?
(In reply to comment #18) > So, esentially person have to disable whole portage security to install one > packet ? Or can it be done on ebouild basis ? I'm quite willing to remove the package to make this problem go away.
posted removal notice to gentoo-dev-announce.
