diff mbox series

hosttools: force a --no-rosegment option if host ld supports it

Message ID 20260206132811.100628-1-alex.kanavin@gmail.com
State New
Headers show
Series hosttools: force a --no-rosegment option if host ld supports it | expand

Commit Message

Alexander Kanavin Feb. 6, 2026, 1:28 p.m. UTC
From: Alexander Kanavin <alex@linutronix.de>

Please see https://bugzilla.yoctoproject.org/show_bug.cgi?id=16087
for the tricky, unpleasant details. This is addressing an issue with
recent Fedora distributions where they can contaminate sstate with
native executables that don't work when transferred onto alma/rocky 8/9.

[YOCTO #16087]

Signed-off-by: Alexander Kanavin <alex@linutronix.de>
---
 meta/classes-global/base.bbclass | 21 ++++++++++++++++++++-
 1 file changed, 20 insertions(+), 1 deletion(-)

Comments

Paul Barker Feb. 6, 2026, 1:46 p.m. UTC | #1
On Fri, 2026-02-06 at 14:28 +0100, Alexander Kanavin via
lists.openembedded.org wrote:
> From: Alexander Kanavin <alex@linutronix.de>
> 
> Please see https://bugzilla.yoctoproject.org/show_bug.cgi?id=16087
> for the tricky, unpleasant details. This is addressing an issue with
> recent Fedora distributions where they can contaminate sstate with
> native executables that don't work when transferred onto alma/rocky 8/9.
> 
> [YOCTO #16087]

Hi Alex,

Thanks for working on this, we really appreciate the time is has taken
to investigate!

I think we need a little more detail in the commit message so that it is
understandable if the bugzilla data is ever not accessible. Perhaps just
something along the lines of:

  From Fedora 42 onwards, the --rosegment argument is passed to the
  linker by default when building native binaries. This triggers
  re-arrangement of sections by patchelf, resulting in binaries which
  are loaded incorrectly by older kernel versions. These "contaminated"
  native binaries end up in sstate and cause build failures when they
  are used on older distros such as AlmaLinux 8 & 9 or Rocky Linux 8 &
  9.

Best regards,
diff mbox series

Patch

diff --git a/meta/classes-global/base.bbclass b/meta/classes-global/base.bbclass
index cf303c237a..22b427a521 100644
--- a/meta/classes-global/base.bbclass
+++ b/meta/classes-global/base.bbclass
@@ -111,6 +111,22 @@  def get_lic_checksum_file_list(d):
             bb.fatal(d.getVar('PN') + ": LIC_FILES_CHKSUM contains an invalid URL: " + url)
     return " ".join(filelist)
 
+# Please see https://bugzilla.yoctoproject.org/show_bug.cgi?id=16087 for details
+# This can be removed after host distributions with kernels < 5.18
+# (e.g. rhel 8/9 and derivatives) are taken out of testing and support.
+def write_ld_wrapper(srctool, desttool):
+    wrapper = "#!/bin/sh\n{} --no-rosegment $@".format(srctool)
+
+    stdout, _ = bb.process.run("{} --help".format(srctool))
+    if "--no-rosegment" in stdout:
+        with open(desttool, 'w') as f:
+            f.write(wrapper)
+        import stat
+        st = os.stat(desttool)
+        os.chmod(desttool, st.st_mode | stat.S_IEXEC)
+    else:
+        os.symlink(srctool, desttool)
+
 def setup_hosttools_dir(dest, toolsvar, d, fatal=True):
     tools = d.getVar(toolsvar).split()
     origbbenv = d.getVar("BB_ORIGENV", False)
@@ -139,7 +155,10 @@  def setup_hosttools_dir(dest, toolsvar, d, fatal=True):
             if os.path.islink(srctool) and os.path.basename(os.readlink(srctool)) == 'ccache':
                 srctool = bb.utils.which(path, tool, executable=True, direction=1)
             if srctool:
-                os.symlink(srctool, desttool)
+                if tool == "ld" or tool.startswith("ld."):
+                    write_ld_wrapper(srctool, desttool)
+                else:
+                    os.symlink(srctool, desttool)
             else:
                 notfound.append(tool)