Gentoo Websites Logo
Go to: Gentoo Home Documentation Forums Lists Bugs Planet Store Wiki Get Gentoo!
Bug 625364 - net-firewall/iptables-1.4.21-r4 will not build with USE static-libs and conntrack: ../extensions/libext.a(libxt_connlabel.o): In function `connlabel_open':
Summary: net-firewall/iptables-1.4.21-r4 will not build with USE static-libs and connt...
Alias: None
Product: Gentoo Linux
Classification: Unclassified
Component: Current packages (show other bugs)
Hardware: AMD64 Linux
: Normal normal (vote)
Assignee: Gentoo's Team for Core System packages
Depends on:
Reported: 2017-07-17 03:21 UTC by deference
Modified: 2017-07-28 00:10 UTC (History)
2 users (show)

See Also:
Package list:
Runtime testing required: ---

build.log (build-iptables.txt,120.70 KB, text/plain)
2017-07-17 03:22 UTC, deference
emerge --info (emergeinfo-iptables.txt,32.03 KB, text/plain)
2017-07-17 03:22 UTC, deference

Note You need to log in before you can comment on or make changes to this bug.
Description deference 2017-07-17 03:21:49 UTC
This and the other iptables-1.4.21-r1 are both affected.
I have not tested any others.

libtool: link: x86_64-pc-linux-gnu-gcc -Wall -Waggregate-return -Wmissing-declarations -Wmissing-prototypes -Wredundant-decls -Wshadow -Wstrict-prototypes -Winline -pipe -DALL_INCLUSIVE -DENABLE_IPV4 -DENABLE_IPV6 -pipe -O2 -march=amdfam10 -Wl,-O1 -o .libs/xtables-multi xtables_multi-xtables-multi.o xtables_multi-iptables-xml.o xtables_multi-iptables-save.o xtables_multi-iptables-restore.o xtables_multi-iptables-standalone.o xtables_multi-iptables.o xtables_multi-ip6tables-save.o xtables_multi-ip6tables-restore.o xtables_multi-ip6tables-standalone.o xtables_multi-ip6tables.o xtables_multi-xshared.o  -Wl,--as-needed ../extensions/libext.a ../libiptc/.libs/ ../extensions/libext4.a ../libiptc/.libs/ ../extensions/libext6.a ../libxtables/.libs/ -lm -lpcap
../extensions/libext.a(libxt_connlabel.o): In function `connlabel_open':
libxt_connlabel.c:(.text+0x34): undefined reference to `nfct_labelmap_new'
../extensions/libext.a(libxt_connlabel.o): In function `connlabel_get_name':
libxt_connlabel.c:(.text+0x92): undefined reference to `nfct_labelmap_get_name'
../extensions/libext.a(libxt_connlabel.o): In function `connlabel_mt_parse':
libxt_connlabel.c:(.text+0x1c3): undefined reference to `nfct_labelmap_get_bit'
collect2: error: ld returned 1 exit status
make[2]: *** [Makefile:416: xtables-multi] Error 1
make[2]: Leaving directory '/var/tmp/portage/net-firewall/iptables-1.4.21-r4/work/iptables-1.4.21/iptables'
make[1]: *** [Makefile:356: all-recursive] Error 1
make[1]: Leaving directory '/var/tmp/portage/net-firewall/iptables-1.4.21-r4/work/iptables-1.4.21'
make: *** [Makefile:283: all] Error 2

[ebuild  r  U ] net-firewall/iptables-1.4.21-r4 [1.4.21-r1] USE="conntrack ipv6 netlink pcap%* static-libs*" 
[ebuild  rR   ] sys-apps/iproute2-4.4.0  USE="atm berkdb iptables ipv6 -minimal (-selinux)" 
[ebuild  rR   ] net-misc/miniupnpd-2.0  USE="ipv6 leasefile -igd2 -pcp-peer -portinuse -strict" 
[ebuild  rR   ] app-admin/collectd-5.7.2  USE="contrib filecaps java static-libs udev xfs -debug -perl (-selinux)" COLLECTD_PLUGINS="aggregation amqp apache apcups ascent battery bind cgroups conntrack contextswitch cpu cpufreq cpusleep csv curl curl_json curl_xml dbi df disk dns drbd email entropy ethstat exec fhcount filecount fscache gmond hddtemp interface ipc ipmi iptables ipvs irq load log_logstash logfile lua lvm madwifi match_empty_counter match_hashed match_regex match_timediff match_value mbmon md memcached memory modbus multimeter mysql netlink network nfs nginx notify_desktop notify_email ntpd numa nut olsrd onewire openldap openvpn ping postgresql powerdns processes protocols python redis rrdcached rrdtool sensors serial smart snmp statsd swap syslog table tail tail_csv target_notification target_replace target_scale target_set tcpconns ted thermal threshold turbostat unixsock uptime users uuid varnish virt vmem vserver wireless write_graphite write_http write_kafka write_log write_redis write_sensu write_tsdb xencpu -ceph -chrony -gps -hugepages -java -memcachec -mqtt -notify_nagios -oracle -perl -routeros -sigrok -teamspeak2 -tokyotyrant -write_prometheus -zfs_arc -zookeeper" PYTHON_SINGLE_TARGET="python3_4 -python2_7 -python3_5 -python3_6" PYTHON_TARGETS="python2_7 python3_4 -python3_5 -python3_6" 

The following packages are causing rebuilds:

  (net-firewall/iptables-1.4.21-r4:0/10::gentoo, ebuild scheduled for merge) causes rebuilds for:
    (app-admin/collectd-5.7.2:0/0::gentoo, ebuild scheduled for merge)
    (sys-apps/iproute2-4.4.0:0/0::gentoo, ebuild scheduled for merge)
    (net-misc/miniupnpd-2.0:0/0::gentoo, ebuild scheduled for merge)
Comment 1 deference 2017-07-17 03:22:06 UTC
Created attachment 485238 [details]
Comment 2 deference 2017-07-17 03:22:17 UTC
Created attachment 485240 [details]
emerge --info
Comment 3 Thomas Deutschmann (RETIRED) gentoo-dev 2017-07-21 21:39:43 UTC
iptables-1.6.1-r1 is affected as well. Currently testing a patch...
Comment 4 Thomas Deutschmann (RETIRED) gentoo-dev 2017-07-23 11:27:30 UTC
This is a known bug and was fixed via

For 1.4.x, this patch must be backported, i.e. like

Why I haven't added the patch yet:

1) I don't understand why 1.6.x is failing for me with the same error.

2) Once I successfully managed to emerge any 1.4.x ebuild with the patch above, 1.6.x, which was failing before, is now magically fixed on the same box. Removing iptables doesn't bring back the problem...

Before I don't understand the problem, I don't want to push a fix.
Comment 5 deference 2017-07-28 00:10:35 UTC
Understandable, keep up the good work!