June 2024 - CRUX - lists.crux.nu

qt6-webengine, qt6-base, and cups interdependency issue
by Daryl F 19 Jul '24

19 Jul '24

Hi all, I use a docker snapshot environment to create accurate footprints for the ports in the df repo. Ports are built in isolation to ensure there is no parasitic interaction in dependencies. This has worked well for several years. It catches missing dependencies and generates footprints that may end up reporting NEW items but never MISSING items. This methodology is broken by this test in the qt6-webengine Pkgfile: if [[ ! -e /usr/lib/qt6/plugins/printsupport/libcupsprintersupport.so ]]; then printf '\e[31m%s\e[m\n' " opt/qt6-base is not build with opt/cups support, and opt/qt6-webeninge depends on it! Please make sure opt/cups is installed, then rebuild opt/qt6-base. After that, you can attempt to build opt/qt6-webengine again. " exit 1 fi Because qt6-base is never built when cups is installed since it is not a dependency listed in qt6-base the build of qt6-webengine always fails. This is not a problem in my desktop environment. I use cups so it is already installed when I build qt6-base. This kind of hidden requirement in qt6-webengine breaks my quality control methods. For now all I can do is maintain my own port of qt6-base with cups listed in the dependencies. However, I suggest that this kind of test in qt6-webengine violates the tried-and-true intent of the dependency list in a Pkgfile in subtle ways and precludes some automation tools. I understand that not everyone that wants qt6-base wants cups but almost everthing that uses qt6-webengine does else the Print function in apps like qutebrowser can print but can only save to disk. I don't think including cups in qt6-base is much of a hit. Anyone using qt6-*anything* is already taking a huge hit in resources. Just because cups is installed with qt6-base no one has to start the cups daemon unless they specifically choose to in the their rc.conf. Again, thanks to the dev team for their hard work providing the best distro around.o Any suggestions? Comments? -Daryl

4 15

qt6-webengine: controlling ninja resource usage
by Daryl F 19 Jul '24

19 Jul '24

Hi All! Based on the discussion on IRC and my own research I finally came up with a possible answer to memory depletion while compiling qt6-webengine. I added this to the Pkgfile: export NINJAFLAGS="-j $(( $(awk '/^MemAvailable:/ {print $2}' /proc/meminfo) / 3000000))" It determines the number of threads to use based on qt6-webengine using about 3GB per thread. It uses the memory available value rather than total memory to take into account memory used for desktop, etc. From the discussion on IRC it might be possible build without swapping with 2.5GB per thread but I haven't tested it. Interestingly not all invocations of ninja respect NINJAFLAGS. When building qt6-webengine with the above NINJAFLAGS I see one with -j8 (my machine has 8 threads with about 11GB available) and another with -j 4. I suspect it uses one ninja to parallel other ninja during the most memory intense part of the build there are only two ninja processes. I had been using a shim to compile qt6-webengine but it is cumbersome to use and affected all ninja builds so if I forgot to unshim I got slow builds. This solution might work for machines with widely varied resources but it will cause problems on very small machines. It can cause -j 0 in that case which will be bad since -j 0 means infinity. Probably not a good idea but I suspect a machine that small will not be used to build qt6-webengine anyway. Who has that that much time to wait? Because I use spinning disk for swap it is never a good idea to swap during builds. I've found that limiting the threads to never swap results in a faster compile (clock wise). I've read several complaints about ninja using nproc+2 for the default but the developers refuse to deal with it. I guess somewhere this an unwritten rule that REAL people have at least 4GB per thread. But I respect that, they probably have more than enough to do just to keep up with Qt without trying to get it to compile on every possible machine configuration. -Daryl

2 1

core: util-linux: could setpriv(1) be included, please?
by Steffen Nurpmeso 20 Jun '24

20 Jun '24

Hello. The last change brought its manual page, but the program as such is missing. It *could* be that -D build-setpriv=enable does it, but i do not really now. setpriv(1) seems to be a cool thing, much better than capsh (from libcap), it would be very nice to have it!! (Especially for newer kernels and especially shall https://lwn.net/ml/all/20240609104355.442002-1-jcalmels@3xx0.net/ make it into it.) Ciao! P.S.: for 3.8, perl now is at 5.40.0. --steffen | |Der Kragenbaer, The moon bear, |der holt sich munter he cheerfully and one by one |einen nach dem anderen runter wa.ks himself off |(By Robert Gernhardt)

1 0

ports/contrib (3.7): [notify] nginx: updated to version 1.27.0; security update, fixes multiple CVEs related to HTTP/3
by crux＠crux.nu 11 Jun '24

11 Jun '24

Commit hash: 449978fd18c980ae7644a34ea48868e83dfdffaa Author: Matt Housh <jaeger(a)crux.ninja> Date: Tue Jun 11 01:16:02 2024 UTC-05:00 URL: https://git.crux.nu/ports/contrib/commit/449978fd18c980ae7644a34ea48868e83d… Commit message: [notify] nginx: updated to version 1.27.0; security update, fixes multiple CVEs related to HTTP/3 See the following for details: http://nginx.org/en/security_advisories.html https://www.cve.org/CVERecord?id=CVE-2024-32760 https://www.cve.org/CVERecord?id=CVE-2024-31079 https://www.cve.org/CVERecord?id=CVE-2024-35200 https://www.cve.org/CVERecord?id=CVE-2024-34161

1 0

ports/opt (3.7): [notify] ffmpeg: 6.1.1 -> 7.0.1; check revdep after sysup
by crux＠crux.nu 10 Jun '24

10 Jun '24

Commit hash: 705f7384fd0756f74fca726a6305fee852f05a33 Author: Tim Biermann <tbier(a)posteo.de> Date: Mon Jun 10 11:37:15 2024 UTC+02:00 URL: https://git.crux.nu/ports/opt/commit/705f7384fd0756f74fca726a6305fee852f05a… Commit message: [notify] ffmpeg: 6.1.1 -> 7.0.1; check revdep after sysup

1 0

ports/contrib (3.7): [notify] vte3: updated to version 0.76.3; security update, fixes CVE-2024-37535
by crux＠crux.nu 10 Jun '24

10 Jun '24

Commit hash: ace504387d6f4aa1483ac500a8254af2fc6c985f Author: Matt Housh <jaeger(a)crux.ninja> Date: Mon Jun 10 10:59:31 2024 UTC-05:00 URL: https://git.crux.nu/ports/contrib/commit/ace504387d6f4aa1483ac500a8254af2fc… Commit message: [notify] vte3: updated to version 0.76.3; security update, fixes CVE-2024-37535 See the following for details: https://www.cve.org/CVERecord?id=CVE-2024-37535 https://gitlab.gnome.org/GNOME/vte/-/issues/2786

1 0

ports/contrib (3.7): [notify] go: updated to version 1.22.4; security update for CVE-2024-24789 and CVE-2024-24790
by crux＠crux.nu 04 Jun '24

04 Jun '24

Commit hash: 154c7b4d8eafcd6fcfc59d519822c3a91cb4fe64 Author: Matt Housh <jaeger(a)crux.ninja> Date: Tue Jun 04 05:28:59 2024 UTC-05:00 URL: https://git.crux.nu/ports/contrib/commit/154c7b4d8eafcd6fcfc59d519822c3a91c… Commit message: [notify] go: updated to version 1.22.4; security update for CVE-2024-24789 and CVE-2024-24790 See the following for details: https://go.dev/doc/devel/release#go1.22.4 https://github.com/golang/go/issues/66869 https://github.com/golang/go/issues/67680

1 0

clang: symlink missing
by Steffen Nurpmeso 03 Jun '24

03 Jun '24

Hi. For some time already (.4 at minimum), but i thought i report it ln -s /usr/lib/clang/ccc-analyzer /usr/bin/ ln -s /usr/lib/clang/c++-analyzer /usr/bin/ It is searched there by at least scan-build. (Let me praise Coverity.) --steffen | |Der Kragenbaer, The moon bear, |der holt sich munter he cheerfully and one by one |einen nach dem anderen runter wa.ks himself off |(By Robert Gernhardt)

1 0

ports/opt (3.7): [notify] ccache: 4.9.1 -> 4.10; new harddependencies: fmt, xxhash
by crux＠crux.nu 02 Jun '24

02 Jun '24

Commit hash: 10c166b5c8b5d0b579dc1bb4304ae7e0d6696449 Author: Tim Biermann <tbier(a)posteo.de> Date: Sun Jun 02 02:16:27 2024 UTC+02:00 URL: https://git.crux.nu/ports/opt/commit/10c166b5c8b5d0b579dc1bb4304ae7e0d66964… Commit message: [notify] ccache: 4.9.1 -> 4.10; new harddependencies: fmt, xxhash

1 0

ports/xorg (3.7): Revert "[notify] mesa: 24.0.8 -> 24.1.0; iris driver now depends on libclc"
by crux＠crux.nu 01 Jun '24

01 Jun '24

Commit hash: 81fc1f79812ecc3dad481254ed7e22553168f68e Author: Tim Biermann <tbier(a)posteo.de> Date: Sat Jun 01 01:18:23 2024 UTC+02:00 URL: https://git.crux.nu/ports/xorg/commit/81fc1f79812ecc3dad481254ed7e22553168f… Commit message: Revert "[notify] mesa: 24.0.8 -> 24.1.0; iris driver now depends on libclc" This reverts commit d77b2046c2094e8f63a4703eb5328008b1c8dbf9. 24.1.0 needs a bit more work around rust and libclc dependencies.

1 0