Note: This is a public test instance of Red Hat Bugzilla. The data contained within is a snapshot of the live data so any changes you make will not be reflected in the production Bugzilla. Email is disabled so feel free to test any aspect of the site that you want. File any problems you find or give feedback at bugzilla.redhat.com.

Bug 1603811

Summary: dnssec-tools: FTBFS in Fedora rawhide
Product: [Fedora] Fedora Reporter: Mohan Boddu <mboddu>
Component: dnssec-toolsAssignee: Wes Hardaker <wjhns174>
Status: CLOSED DUPLICATE QA Contact: Fedora Extras Quality Assurance <extras-qa>
Severity: unspecified Docs Contact:
Priority: unspecified    
Version: rawhideCC: awilliam, wjhns174
Target Milestone: ---   
Target Release: ---   
Hardware: Unspecified   
OS: Unspecified   
Whiteboard:
Fixed In Version: Doc Type: If docs needed, set a value
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2018-07-26 19:30:15 UTC Type: ---
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:
Bug Depends On:    
Bug Blocks: 1602938    
Attachments:
Description Flags
build.log
none
root.log
none
state.log none

Description Mohan Boddu 2018-07-19 18:59:40 UTC
dnssec-tools failed to build from source in Fedora rawhide

https://koji.fedoraproject.org/koji/taskinfo?taskID=28174606


For details on the mass rebuild see:

https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild
Please fix dnssec-tools at your earliest convenience and set the bug's status to
ASSIGNED when you start fixing it. If the bug remains in NEW state for 8 weeks,
dnssec-tools will be orphaned. Before branching of Fedora 30,
dnssec-tools will be retired, if it still fails to build.

For more details on the FTBFS policy, please visit:
https://fedoraproject.org/wiki/Fails_to_build_from_source

Comment 1 Mohan Boddu 2018-07-19 18:59:47 UTC
Created attachment 1461467 [details]
build.log

Comment 2 Mohan Boddu 2018-07-19 18:59:51 UTC
Created attachment 1461468 [details]
root.log

file root.log too big, will only attach last 32768 bytes

Comment 3 Mohan Boddu 2018-07-19 18:59:55 UTC
Created attachment 1461469 [details]
state.log

Comment 4 Igor Raits 2018-07-23 15:33:25 UTC
Matches:
configure: error: no acceptable C compiler found in $PATH

Suggested fix:
BuildRequires:  gcc

Comment 5 Adam Williamson 2018-07-26 19:07:58 UTC
Looks like Igor added the buildrequire and tried a rebuild, but it still fails:

/bin/sh ../libtool --mode=compile gcc -O2 -g -pipe -Wall -Werror=format-security -Wp,-D_FORTIFY_SOURCE=2 -Wp,-D_GLIBCXX_ASSERTIONS -fexceptions -fstack-protector-strong -grecord-gcc-switches -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -m64 -mtune=generic -fasynchronous-unwind-tables -fstack-clash-protection -fcf-protection -Ulinux -Dlinux=linux -Ulinux -Dlinux=linux -DLIBVAL_CONFIGURED=1  -I../include   -c -o res_debug.lo res_debug.c
libtool: compile:  gcc -O2 -g -pipe -Wall -Werror=format-security -Wp,-D_FORTIFY_SOURCE=2 -Wp,-D_GLIBCXX_ASSERTIONS -fexceptions -fstack-protector-strong -grecord-gcc-switches -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -m64 -mtune=generic -fasynchronous-unwind-tables -fstack-clash-protection -fcf-protection -Ulinux -Dlinux=linux -Ulinux -Dlinux=linux -DLIBVAL_CONFIGURED=1 -I../include -c res_debug.c  -fPIC -DPIC -o .libs/res_debug.o
res_debug.c:367:6: error: 'NS_ALG_MD5RSA' undeclared here (not in a function); did you mean 'NS_ALG_DSA'?
     {NS_ALG_MD5RSA, "RSA", "RSA KEY with MD5 hash"},
      ^~~~~~~~~~~~~
      NS_ALG_DSA
res_debug.c:370:6: error: 'NS_ALG_EXPIRE_ONLY' undeclared here (not in a function)
     {NS_ALG_EXPIRE_ONLY, "EXPIREONLY", "No algorithm"},
      ^~~~~~~~~~~~~~~~~~
res_debug.c:371:6: error: 'NS_ALG_PRIVATE_OID' undeclared here (not in a function); did you mean 'NS_UPDATE_OP'?
     {NS_ALG_PRIVATE_OID, "PRIVATE", "Algorithm obtained from OID"},
      ^~~~~~~~~~~~~~~~~~
      NS_UPDATE_OP
res_debug.c:438:6: error: 'ns_t_zxfr' undeclared here (not in a function); did you mean 'ns_t_axfr'?
     {ns_t_zxfr, "ZXFR", "compressed zone transfer"},
      ^~~~~~~~~
      ns_t_axfr
res_debug.c:438:6: warning: initialization of 'int' from 'const struct res_sym *' makes integer from pointer without a cast [-Wint-conversion]
res_debug.c:438:6: note: (near initialization for '__p_type_sres_syms[47].number')
res_debug.c:438:6: error: initializer element is not constant
res_debug.c:438:6: note: (near initialization for '__p_type_sres_syms[47].number')
make[2]: Leaving directory '/builddir/build/BUILD/dnssec-tools-2.2/validator/libsres'
make[2]: *** [Makefile:157: res_debug.lo] Error 1
make[1]: Leaving directory '/builddir/build/BUILD/dnssec-tools-2.2/validator'
make[1]: *** [Makefile:135: subdirmake] Error 1
make: *** [Makefile:67: subdirmake] Error 1

Comment 6 Adam Williamson 2018-07-26 19:14:32 UTC
There's a guy called 'hardaker' on github who has a dnssec-tools tree with a bunch of fixes for recent openssl:

https://github.com/hardaker/dnssec-tools

I have no idea who is and whether we can or should trust his tree, but hey, there it is. He also has a couple of commits on another tree with a more official-looking name:

https://github.com/DNSSEC-Tools/DNSSEC-Tools

but there's notably little indication that this really *is* official on the organization page:

https://github.com/DNSSEC-Tools

The upstream SVN repository referred to on the official site seems to have disappeared, so there's no canonical repo I can find - https://www.dnssec-tools.org/svn/dnssec-tools/ is 404.

Comment 7 Adam Williamson 2018-07-26 19:15:42 UTC
Oh, haha, I just saw the assignee for this bug :P So I'm guessing that guy is...that guy...:P

Comment 8 Adam Williamson 2018-07-26 19:30:15 UTC
This is now a dupe of https://bugzilla.redhat.com/show_bug.cgi?id=1381613 .

*** This bug has been marked as a duplicate of bug 1381613 ***