Thursday, June 02, 2022

Fwd: broken Compress::Bzip2 module in OpenBSD 7.1

On 31/05/2022 14:59, Marc Espie wrote:
> And yet, the p5-Compress-Bzip2 package doesn't appear to have any issue.
You're correct, indeed it doesn't have any as far as I could check.
> Now, it doesn't contain that exact same symbol, but rather:
> XS_Compress__Bzip2_bzlibversion
>
> looking at things, I think your setup assumed bzip2 was present in the
> base
> system. Not so.
>
> The p5-Compress-Bzip2 port both has a dependency on the bzip2 library
> AND a config.in change to handle stuff under /usr/local.
>
> I would tend to assume you need to tell your home-grown setup to look
> in /usr/local... which is obviously disabled by default here.

In fact, there is some sort of manipulation of that on a Hashicorp
Packer configuration:

sed -i -e "s#libpth => '/usr/lib /usr/lib'#libpth => '/usr/lib
/usr/local/lib'#"
/usr/libdata/perl5/${var.openbsd_architecture}-openbsd/Config.pm
sed -i -e "s#libpth='/usr/lib /usr/lib'#libpth='/usr/lib
/usr/local/lib'#"
/usr/libdata/perl5/${var.openbsd_architecture}-openbsd/Config_heavy.pl

I had issues with libs under /usr/local to other Perl modules in the
past and that configuration changes always handled this case.

Which makes me wonder if there isn't some other places I need to change
that too.

Just to give context, all this trouble is to run CPAN Smokers, which
already present security concerns by it's own nature, so manipulations
like this are acceptable and required.

No comments:

Post a Comment