Previously, the glibc check section caused major failures for the builds. However, these no longer exisit. To enable these tests, address conflicting gcc flags and turn off the macro which prevents check section for glibc. Note there are still 3 tests which need to be invetigated for failures.
The patch prevents the error
c1: error: '-Wformat-security' ignored without '-Wformat' [-Werror=format-security]
The error occurs when glibc is compiled with -Wformat-security which requires -Wformat and thus conflicts with tests which use -Wno-format
The new results from the check section should be
Summary of test results:
3 FAIL : nptl/tst-cancel1, io/tst-lchmod, nptl/tst-mutex10
5040 PASS
152 UNSUPPORTED
12 XFAIL
8 XPASS
Issue was observed where syslog printouts were no longer being printed
with the latest glibc package.
Error signature was a blank entry in /var/log/messages output. For
example, when running glibc's basic syslog example -
http://www.gnu.org/software/libc/manual/html_node/Syslog-Example.html
2024-08-20T04:46:41.163860+00:00 chrco-dev-vm-3 exampleprog[1545]:
2024-08-20T04:46:41.163698+00:00 chrco-dev-vm-3 exampleprog[1545]:
when we would expect the text "A tree falls in a forest".
The behavior was caused by an incorrect set of backports for
the syslog CVEs CVE-2023-6246, CVE-2023-6779, CVE-2023-6780.
This change fixes the backport and pulls the individual fixes from the
upstream 2.38 stable release branch.
https://sourceware.org/git/?p=glibc.git;a=log;h=refs/heads/release/2.38/master
Signed-off-by: Chris Co <chrco@microsoft.com>
Introduce stress-ng into SPECS-EXTENDED. stress-ng is a stress testing tool to exercise the OS & HW and collect metrics. The packaging is initially from Fedora 41.
stress-ng will stress test a computer system in various selectable ways. It was designed to exercise various physical subsystems of a computer as well as the various operating system kernel interfaces.
Signed-off-by: Chris Co <chrco@microsoft.com>
Renaming package name argparse-manpage -> python-argparse-manpage
To be consistent, all python pypi modules are named python- the
package argparse-manpage does not follow this convention, updating base
package name to be consistent.
Azure Linux's primary supported container runtime is containerd. We will provide CRI-O as an option for users to try, but will be community maintained in the Extended repository.
Signed-off-by: Chris Co <chrco@microsoft.com>
Rasdaemon is a much improved RAS (Reliability, Availability, and Serviceability)
logging tool for hardware. Older alternatives like Mcelog are deprecated and
not as full featured.
Bring the rasdaemon package over from extended into core supported packages,
and update to the latest version v0.8.0.
Signed-off-by: Chris Co <chrco@microsoft.com>
Enabling frame pointers during compilation brings benefits to performance profiling and tracing. See https://www.brendangregg.com/blog/2024-03-17/the-return-of-the-frame-pointers.html for more details.
This change in particular adds a macro to add the -fno-omit-frame-pointer flag to CFLAGS when defining %define _include_frame_pointers 1 in the spec file. This way the packager can control enabling whether to build with frame pointers enabled or not. By default, building with frame pointers is disabled.
This change also enables frame pointers by default in our glibc build, which is one of the hot-spots where fast profiling with frame pointers would be beneficial.
Signed-off-by: Chris Co <chrco@microsoft.com>
TrouSerS project is to support 1.1 and 1.2 TSS specification, however our distro only
supports TPM TSS 2.0 via the tpm2-tss package. Remove the TPM 1.1/1.2 tools (TrouSerS,
tpm-tools, tpm-quote-tools) from our supported set of packages, and remove opencryptoki's
TPM 1.1/1.2 support
Signed-off-by: Chris Co <chrco@microsoft.com>