[rudder-dev] rpath issues when building rudder-agent rpm

[Michael Gliwinski]

Hi all,

Just wanted to check, I'm running into issue with RPM check-rpaths complaining 
about CFEngine binaries and some perl libraries when building the rudder-agent 
RPM.  I'm attaching a file with the error output.

Have you ever run into that?

I tried to work around by running `QA_PATHS=$[ 0x0001|0x0020 ] rpmbuild -ba 
SPECS/rudder-agent.spec` as suggested, but it didn't help.  Wanted to check if 
this is a known issue or something with my environment.

Thanks,
Michael

**********************************************************************************************
The information in this email is confidential and may be legally privileged.  It is intended solely for the addressee and access to the email by anyone else is unauthorised.
If you are not the intended recipient, any disclosure, copying, distribution or any action taken or omitted to be taken in reliance on it, is prohibited and may be unlawful.
When addressed to our clients, any opinions or advice contained in this e-mail are subject to the terms and conditions expressed  in the governing client engagement leter or contract.
If you have received this email in error please notify support at henderson-group.com

John Henderson (Holdings) Ltd
Registered office: 9 Hightown Avenue, Mallusk, County Antrim, Northern Ireland, BT36 4RT.
Registered in Northern Ireland
Registration Number NI010588
Vat No.: 814 6399 12
*********************************************************************************

-------------- next part --------------
+ /usr/lib/rpm/check-rpaths /usr/lib/rpm/check-buildroot
*******************************************************************************
*
* WARNING: 'check-rpaths' detected a broken RPATH and will cause 'rpmbuild'
*          to fail. To ignore these errors, you can set the '$QA_RPATHS'
*          environment variable which is a bitmask allowing the values
*          below. The current value of QA_RPATHS is 0x0000.
*
*    0x0001 ... standard RPATHs (e.g. /usr/lib); such RPATHs are a minor
*               issue but are introducing redundant searchpaths without
*               providing a benefit. They can also cause errors in multilib
*               environments.
*    0x0002 ... invalid RPATHs; these are RPATHs which are neither absolute
*               nor relative filenames and can therefore be a SECURITY risk
*    0x0004 ... insecure RPATHs; these are relative RPATHs which are a
*               SECURITY risk
*    0x0008 ... the special '$ORIGIN' RPATHs are appearing after other
*               RPATHs; this is just a minor issue but usually unwanted
*    0x0010 ... the RPATH is empty; there is no reason for such RPATHs
*               and they cause unneeded work while loading libraries
*    0x0020 ... an RPATH references '..' of an absolute path; this will break
*               the functionality when the path before '..' is a symlink
*
*
* Examples:
* - to ignore standard and empty RPATHs, execute 'rpmbuild' like
*   $ QA_RPATHS=$[ 0x0001|0x0010 ] rpmbuild my-package.src.rpm
* - to check existing files, set $RPM_BUILD_ROOT and execute check-rpaths like
*   $ RPM_BUILD_ROOT=<top-dir> /usr/lib/rpm/check-rpaths
*
*******************************************************************************
ERROR   0001: file '/opt/rudder/bin/cf-serverd' contains a standard rpath '/lib' in [/lib]
ERROR   0001: file '/opt/rudder/bin/cf-know' contains a standard rpath '/lib' in [/lib]
ERROR   0001: file '/opt/rudder/bin/cf-key' contains a standard rpath '/lib' in [/lib]
ERROR   0001: file '/opt/rudder/bin/cf-agent' contains a standard rpath '/lib' in [/lib]
ERROR   0001: file '/opt/rudder/bin/cf-report' contains a standard rpath '/lib' in [/lib]
ERROR   0001: file '/opt/rudder/bin/cf-runagent' contains a standard rpath '/lib' in [/lib]
ERROR   0001: file '/opt/rudder/bin/cf-promises' contains a standard rpath '/lib' in [/lib]
ERROR   0001: file '/opt/rudder/bin/cf-monitord' contains a standard rpath '/lib' in [/lib]
ERROR   0001: file '/opt/rudder/bin/cf-execd' contains a standard rpath '/lib' in [/lib]
*******************************************************************************
*
* WARNING: 'check-rpaths' detected a broken RPATH and will cause 'rpmbuild'
*          to fail. To ignore these errors, you can set the '$QA_RPATHS'
*          environment variable which is a bitmask allowing the values
*          below. The current value of QA_RPATHS is 0x0000.
*
*    0x0001 ... standard RPATHs (e.g. /usr/lib); such RPATHs are a minor
*               issue but are introducing redundant searchpaths without
*               providing a benefit. They can also cause errors in multilib
*               environments.
*    0x0002 ... invalid RPATHs; these are RPATHs which are neither absolute
*               nor relative filenames and can therefore be a SECURITY risk
*    0x0004 ... insecure RPATHs; these are relative RPATHs which are a
*               SECURITY risk
*    0x0008 ... the special '$ORIGIN' RPATHs are appearing after other
*               RPATHs; this is just a minor issue but usually unwanted
*    0x0010 ... the RPATH is empty; there is no reason for such RPATHs
*               and they cause unneeded work while loading libraries
*    0x0020 ... an RPATH references '..' of an absolute path; this will break
*               the functionality when the path before '..' is a symlink
*
*
* Examples:
* - to ignore standard and empty RPATHs, execute 'rpmbuild' like
*   $ QA_RPATHS=$[ 0x0001|0x0010 ] rpmbuild my-package.src.rpm
* - to check existing files, set $RPM_BUILD_ROOT and execute check-rpaths like
*   $ RPM_BUILD_ROOT=<top-dir> /usr/lib/rpm/check-rpaths
*
*******************************************************************************
ERROR   0020: file '/opt/rudder/lib/perl5/x86_64-linux-thread-multi/auto/Crypt/SSLeay/SSLeay.so' contains an rpath referencing '..' of an absolute path [/usr/lib/../lib64]
*******************************************************************************
*
* WARNING: 'check-rpaths' detected a broken RPATH and will cause 'rpmbuild'
*          to fail. To ignore these errors, you can set the '$QA_RPATHS'
*          environment variable which is a bitmask allowing the values
*          below. The current value of QA_RPATHS is 0x0000.
*
*    0x0001 ... standard RPATHs (e.g. /usr/lib); such RPATHs are a minor
*               issue but are introducing redundant searchpaths without
*               providing a benefit. They can also cause errors in multilib
*               environments.
*    0x0002 ... invalid RPATHs; these are RPATHs which are neither absolute
*               nor relative filenames and can therefore be a SECURITY risk
*    0x0004 ... insecure RPATHs; these are relative RPATHs which are a
*               SECURITY risk
*    0x0008 ... the special '$ORIGIN' RPATHs are appearing after other
*               RPATHs; this is just a minor issue but usually unwanted
*    0x0010 ... the RPATH is empty; there is no reason for such RPATHs
*               and they cause unneeded work while loading libraries
*    0x0020 ... an RPATH references '..' of an absolute path; this will break
*               the functionality when the path before '..' is a symlink
*
*
* Examples:
* - to ignore standard and empty RPATHs, execute 'rpmbuild' like
*   $ QA_RPATHS=$[ 0x0001|0x0010 ] rpmbuild my-package.src.rpm
* - to check existing files, set $RPM_BUILD_ROOT and execute check-rpaths like
*   $ RPM_BUILD_ROOT=<top-dir> /usr/lib/rpm/check-rpaths
*
*******************************************************************************
ERROR   0020: file '/opt/rudder/lib/perl5/5.12.4/x86_64-linux-thread-multi/auto/DB_File/DB_File.so' contains an rpath referencing '..' of an absolute path [/usr/lib/../lib64]
ERROR   0020: file '/opt/rudder/lib/perl5/5.12.4/x86_64-linux-thread-multi/auto/Time/HiRes/HiRes.so' contains an rpath referencing '..' of an absolute path [/lib/../lib64]
error: Bad exit status from /var/tmp/rpm-tmp.XTwogb (%install)


RPM build errors:
    Bad exit status from /var/tmp/rpm-tmp.XTwogb (%install)