Mathieu Benoit
0963698d4b
xz got past po4a and stopped on
../../../doxygen/update-doxygen: doxygen command not found
Two documentation toolchains in one package: po4a for the translated man pages,
doxygen for the liblzma API reference. --disable-doc is xz own switch, checked
present in configure before use.
libpsl stopped on
make: *** No rule to make target
/usr/share/publicsuffix/effective_tld_names.dat, needed by ...
publicsuffix-list is DATA. libpsl compiles the Public Suffix List into a lookup
table, so the list is an input to the build -- the first entry in this port whose
absence is neither a program nor a library, and it reads exactly like a broken
Makefile.
--- FR ---
xz a passe po4a et s est arrete sur
../../../doxygen/update-doxygen: doxygen command not found
Deux chaines de documentation dans un seul paquet : po4a pour les pages de manuel
traduites, doxygen pour la reference d API de liblzma. --disable-doc est son
propre interrupteur, verifie present dans configure avant usage.
libpsl s est arrete sur
make: *** No rule to make target
/usr/share/publicsuffix/effective_tld_names.dat, needed by ...
publicsuffix-list est une DONNEE. libpsl compile la Public Suffix List en table
de correspondance : la liste est une entree de la construction — premiere entree
de ce portage dont l absence n est ni un programme ni une bibliotheque, et elle se
lit exactement comme un Makefile casse.
Assisted-by: Claude Opus 5
333 lines
17 KiB
Bash
333 lines
17 KiB
Bash
#!/usr/bin/env bash
|
|
# The package list, and the ORDER, shared by both stages.
|
|
#
|
|
# It lived in build-stage1.sh until stage 2 needed it. Stage 2 rebuilds the
|
|
# same packages inside the chroot, and the order it needs is not a new
|
|
# question: this one is the actual dependency closure, arrived at over four
|
|
# rounds of resolver output (35 unsatisfied, then 19, then 2, then none) and
|
|
# then confirmed by a hundred and ninety builds that each found their
|
|
# dependencies already present. Deriving a second order for stage 2 would be
|
|
# re-deriving a fact this file already holds -- and getting it subtly wrong
|
|
# would show up as a build failure attributed to the package rather than to
|
|
# the ordering.
|
|
#
|
|
# Sourced, never executed. Both stages read STAGE1_PACKAGES from here.
|
|
|
|
STAGE1_PACKAGES=(
|
|
# Foundation: headers, then the C library, then the compiler chain.
|
|
linux-api-headers glibc binutils gcc
|
|
# Compression and crypto, needed by libarchive and curl further down.
|
|
zlib bzip2 xz zstd lz4 openssl
|
|
# Terminal handling: bash links against readline, readline against ncurses.
|
|
ncurses readline
|
|
# The shell, and the coreutils prerequisites Arch declares.
|
|
attr acl gmp mpfr libcap bash coreutils
|
|
# Text and file tools the build systems themselves call.
|
|
sed grep gawk findutils diffutils file which patch
|
|
# Archivers, then the library pacman reads packages with.
|
|
tar gzip expat libarchive
|
|
# Build systems.
|
|
m4 autoconf automake libtool make pkgconf
|
|
# pacman's network and signature stack.
|
|
libnghttp2 libpsl curl libgpg-error libassuan gnupg gpgme
|
|
# System skeleton: without these a rootfs has no /etc/passwd, no zones,
|
|
# no /etc/services -- and nothing boots to a usable shell.
|
|
filesystem iana-etc tzdata licenses shadow util-linux
|
|
# Named by the chroot test, not guessed. Installing the repo into a
|
|
# rootfs and entering it turned "does it work?" into a precise list:
|
|
# - libcap needs pam; openssl needs brotli; libarchive needs libxml2
|
|
# - pacman itself asks for systemd, pacman-mirrorlist and
|
|
# libmakepkg-dropins
|
|
# Sixty-eight successful builds proved none of this. One chroot did.
|
|
#
|
|
# The chroot also named libselinux, and libselinux is NOT on this line,
|
|
# because that reading of it was wrong. Arch has no libselinux package at
|
|
# all -- the clone 404s. What the chroot saw was a HOST artefact: Ubuntu
|
|
# carries libselinux1-dev, coreutils probes for selinux/selinux.h
|
|
# unconditionally, and ours came out linked to a library the target will
|
|
# never contain. The answer is --without-selinux per package, which is
|
|
# what Arch's own build chroot gets for free by not having the header.
|
|
pam brotli libxml2 systemd pacman-mirrorlist libmakepkg-dropins
|
|
# The closure, named by pacman's own resolver rather than guessed.
|
|
#
|
|
# Everything above was added because a BUILD stopped. These were added
|
|
# because scripts/test-chroot.sh ran `pacman -Syp` with --nodeps OFF --
|
|
# the check the whole bootstrap skips -- and the resolver listed exactly
|
|
# what the repository still owes. Nothing here is speculative.
|
|
#
|
|
# It is the MINIMAL closure, and two measurements shaped it. Dropping the
|
|
# python-brotli sub-package took the list from 70 unresolved names to 47
|
|
# and removed `python` outright, with libffi, mpdecimal and gdbm behind
|
|
# it. Dropping systemd-ukify and systemd-tests removed five more python
|
|
# packages, and ukify cannot run on s390x at all. Both are recorded in
|
|
# TODO.md rather than left implicit.
|
|
#
|
|
# An audit of the remaining names against the ARTEFACTS found two that
|
|
# were declared and never linked: guile by make, and libisl.so by gcc.
|
|
# Both get their declaration removed, because it should describe the
|
|
# binary we shipped.
|
|
#
|
|
# Building isl instead was the first plan, and it is recorded here because
|
|
# the reason it failed is the kind that wastes an afternoon: the Arch
|
|
# packaging repo for isl was last touched in 2017 and its only source URL
|
|
# is isl.gforge.inria.fr, which died with INRIA's GForge. There is nothing
|
|
# to build. That flipped the decision -- not a change of mind, new
|
|
# evidence.
|
|
#
|
|
# These will pull their own dependencies. That is expected: the resolver
|
|
# will name the next round as precisely as it named this one.
|
|
audit ca-certificates cryptsetup dbus elfutils gettext gnutls hwdata
|
|
icu jansson kbd kmod krb5 libcap-ng libgcrypt libidn2 libksba
|
|
libmpc libnsl libseccomp libssh2 libtirpc libunistring libusb libxcrypt
|
|
nettle npth openldap pambase pcre2 perl pinentry sqlite tpm2-tss
|
|
# Closure, second round. The first thirty-five pulled these in, exactly as
|
|
# the comment above predicted, and the resolver named them just as
|
|
# precisely.
|
|
#
|
|
# THE MEASUREMENT THAT MATTERS HERE IS THE ONE THAT CHANGED ITS ANSWER.
|
|
# Four of these were going to be avoided by dropping a sub-package --
|
|
# sqlite-tcl, sqlite-analyzer, the openldap server, debuginfod -- on the
|
|
# reasoning that had removed python-brotli earlier. Measured instead of
|
|
# assumed, tcl, unixodbc and libmicrohttpd each cost ZERO new packages:
|
|
# the closure had filled in around them. Building them is cheaper than
|
|
# four hooks, and it does not leave sqlite shipping an sqltclsh that
|
|
# cannot start.
|
|
#
|
|
# python still costs three (libffi, mpdecimal, gdbm) and is still avoided
|
|
# -- but for the ABI reason, not the cost one: python-audit and
|
|
# python-capng are cp313 wheels and Arch ships 3.14. Their hooks say so.
|
|
#
|
|
db5.3 gdbm e2fsprogs gnulib-l10n json-c keyutils p11-kit libsasl
|
|
libsodium libtasn1 libverto lmdb popt lvm2 tcl unixodbc libmicrohttpd
|
|
# ca-certificates-mozilla, which is the only thing here that is not a
|
|
# library. It is the LIST OF ROOT CERTIFICATES -- ca-certificates itself
|
|
# is only the trust machinery around it, so without this the target has a
|
|
# trust store containing nothing, and every HTTPS verification fails.
|
|
# curl declares ca-certificates, and pacman fetches through curl.
|
|
#
|
|
# It has no packaging repo of its own: the clone 404s, which
|
|
# gitlab.archlinux.org reports by asking for a login -- the same
|
|
# misleading shape that made libselinux look like a network problem. nss
|
|
# produces it as a sub-package, so nss is what gets built, and nspr comes
|
|
# with it.
|
|
#
|
|
# Measured before committing to it rather than estimated: nspr costs
|
|
# nothing new, nss needs only nspr plus mercurial on the host, and
|
|
# hg.mozilla.org answers from this build host (HTTP 302 in 0.3s -- worth
|
|
# checking, since dev.gnupg.org does not answer at all and libassuan
|
|
# needed a source change because of it).
|
|
nspr nss
|
|
# Closure, third round, and it is two packages. Both were pulled in by
|
|
# what the second round added, and both cost nothing further: libffi by
|
|
# libp11-kit, libevent by libverto.
|
|
#
|
|
# They are worth a line because of what they unblocked. p11-kit builds
|
|
# into three packages, and libp11-kit's dependency on libffi was holding
|
|
# up the whole chain ca-certificates -> ca-certificates-utils -> p11-kit
|
|
# -> libp11-kit. The resolver reported it as "ca-certificates required by
|
|
# curl" -- four links away from the missing name, and nothing in that
|
|
# message points at libffi.
|
|
libffi libevent
|
|
# Closure, fourth round -- and it closed to NOTHING, which is the point
|
|
# worth recording. It asked for libaio and thin-provisioning-tools, both
|
|
# wanted by lvm2 alone. thin-provisioning-tools is Rust now, so that was a
|
|
# language runtime arriving through a fourth-order dependency.
|
|
#
|
|
# Nothing in the repository wants `lvm2`. Checked across every .PKGINFO:
|
|
# cryptsetup wants device-mapper, and device-mapper is the OTHER package
|
|
# this same source produces. Dropping the lvm2 sub-package removed both
|
|
# entries and the Rust question with them -- see patches/pkgbuild/lvm2.sh.
|
|
#
|
|
# 35 packages, then 19, then 2, then 0. The closure has to be recomputed
|
|
# after each round rather than once: lvm2 DECLARED libaio all along, and
|
|
# the third round could not see it because lvm2 had not been built yet.
|
|
# What STAGE 2 needs in order to exist, which is a different question from
|
|
# what the repository needs to resolve.
|
|
#
|
|
# Stage 2 rebuilds everything INSIDE the stage-1 rootfs, so the tools that
|
|
# do the rebuilding have to be in that rootfs. The resolver never asked
|
|
# for these -- nothing in the repository depends on them -- so the closure
|
|
# rounds could not surface them. Enumerated instead from what makepkg and
|
|
# an autotools build actually invoke.
|
|
#
|
|
# fakeroot is the one that decides whether stage 2 can start at all:
|
|
# makepkg runs package() under it, and refuses to run as root. bison,
|
|
# flex, texinfo and groff are what the sources themselves call -- gcc,
|
|
# glibc and binutils all want makeinfo, and a great many configure scripts
|
|
# want bison.
|
|
#
|
|
# sudo is deliberately NOT here. makepkg needs it only for --syncdeps, and
|
|
# stage 2 passes --nodeps, so it would be a setuid binary in the chroot
|
|
# for no reason.
|
|
fakeroot bison flex texinfo groff
|
|
# git, and it is not optional: 51 of the 159 PKGBUILDs take their sources
|
|
# from a git+https URL, and makepkg re-validates that clone even with
|
|
# --noextract. Without git in the chroot, stage 2 can rebuild a third of
|
|
# the repository and no more.
|
|
#
|
|
# Its own three: perl-error, perl-mailtools (which brings perl-timedate)
|
|
# and zlib-ng. Measured, not guessed -- and read from the depends array
|
|
# rather than from my own tool, which had reported `zsh` as a dependency
|
|
# of git. It is not; the tool's regex was catching a neighbouring array.
|
|
perl-error perl-timedate perl-mailtools zlib-ng git
|
|
# meson and cmake, which is where python re-enters -- and the distinction
|
|
# matters, because dropping python earlier was not a mistake.
|
|
#
|
|
# At stage 1 the question was what the REPOSITORY must supply: python was
|
|
# wanted only by python-brotli and python-libseccomp, wheels that Arch's
|
|
# own python could not load anyway, so they went and python went with them.
|
|
# Here the question is what the BUILD ENVIRONMENT must contain, and meson
|
|
# is written in Python. Ten of the 159 PKGBUILDs call arch-meson; four call
|
|
# cmake. Different question, different answer.
|
|
#
|
|
# Measured: mpdecimal, python, ninja, python-tqdm and meson, then cmake
|
|
# with cppdap, jsoncpp, libuv, rhash and hicolor-icon-theme behind it.
|
|
# Nothing further.
|
|
mpdecimal python ninja python-tqdm meson
|
|
cppdap jsoncpp libuv rhash hicolor-icon-theme cmake
|
|
# And finally the package manager itself, built as an Arch package.
|
|
pacman
|
|
|
|
# Tools the STAGE-2 CHROOT needs, which the host supplied for free.
|
|
#
|
|
# Stage 1 never noticed these: install_host_deps put them there with apt,
|
|
# and a build that finds its tool does not mention it. Inside the chroot
|
|
# there is no apt and no host, so every one of them has to exist as a
|
|
# package -- and the first thing stage 2 tried to rebuild stopped on
|
|
#
|
|
# /bin/sh: line 1: rsync: command not found
|
|
# make[1]: *** [.../Makefile:1463: headers_install] Error 127
|
|
#
|
|
# from linux-api-headers, the first entry in this list. xxhash is here
|
|
# because rsync links it.
|
|
xxhash
|
|
rsync
|
|
# The rest of that same class, named by stage 2's first full pass rather
|
|
# than guessed. 77 packages rebuilt, 57 failed, and fourteen of the
|
|
# failures named the tool they wanted outright:
|
|
#
|
|
# gperf coreutils, diffutils, systemd, libseccomp
|
|
# wget sed, grep, findutils
|
|
# patchelf curl
|
|
# hostname gnupg (inetutils ships it)
|
|
# xsltproc shadow (libxslt ships it -- see below)
|
|
# swig audit
|
|
# help2man flex
|
|
#
|
|
# All small and self-contained. Three more tools were asked for and are NOT
|
|
# here -- po4a, asciidoc's a2x, and asciidoctor -- because each brings a
|
|
# language runtime (Perl module stack, Python, Ruby) to render
|
|
# documentation. Those three packages get a hook instead, the same
|
|
# arbitration as --auto-features auto.
|
|
gperf
|
|
wget
|
|
patchelf
|
|
inetutils
|
|
swig
|
|
help2man
|
|
# help2man's own closure. Stage 1 builds with --nodeps, so help2man built
|
|
# cleanly and was then UNINSTALLABLE -- populate stopped the whole of stage-2
|
|
# pass two on
|
|
#
|
|
# unable to satisfy dependency 'perl-locale-gettext' required by help2man
|
|
#
|
|
# which is the routine consequence of --nodeps and the reason RESOLVE exists
|
|
# in test-chroot.sh: a build succeeding says nothing about whether the
|
|
# repository is complete.
|
|
perl-locale-gettext
|
|
# Python packaging, which three stage-2 builds stopped on:
|
|
#
|
|
# /usr/bin/python: No module named build
|
|
#
|
|
# brotli, libseccomp and meson build their wheels with `python -m build`,
|
|
# and python-tqdm installs one. On the host these came from apt; in the
|
|
# chroot they have to be packages. Ordered by their own dependencies:
|
|
# flit-core bootstraps itself, then the two libraries build needs.
|
|
# Of these seven, only python-flit-core builds on the host. The other six
|
|
# compute their install paths from the running python, so the host bakes
|
|
# Debian's dist-packages into them -- three failed on a `rm` that found
|
|
# nothing, and three succeeded and shipped 180 unreachable module paths.
|
|
# They are built by stage 2 instead; a stage-1 run is expected to report
|
|
# them as failed, exactly like libxslt.
|
|
python-flit-core
|
|
python-packaging
|
|
python-pyproject-hooks
|
|
python-build
|
|
python-installer
|
|
python-setuptools
|
|
python-wheel
|
|
# scdoc: kmod's meson stopped on `Program 'scdoc' not found`. A man-page
|
|
# generator, but a tiny self-contained C one -- nothing like the language
|
|
# runtimes behind doxygen or asciidoctor, so it is cheaper to build than to
|
|
# hook around.
|
|
scdoc
|
|
# nlohmann-json: a real closure gap, not a documentation cut. BOTH cmake and
|
|
# cppdap stop on
|
|
#
|
|
# Could NOT find nlohmann_json (missing: nlohmann_json_DIR)
|
|
#
|
|
# It is a header-only C++ library -- one of the cheapest packages in this
|
|
# list -- and cmake is not optional here: the whole cmake/cppdap/jsoncpp/
|
|
# libuv group behind it is what several other packages build with.
|
|
nlohmann-json
|
|
# python-setuptools-scm: python-tqdm's build stops on
|
|
#
|
|
# setuptools-scm[toml]>=3.4
|
|
#
|
|
# which is a requirements line, not an error message -- pip printing what it
|
|
# could not find. Built by stage 2 with the rest of the Python set, for the
|
|
# same reason: its package() would take Debian's dist-packages from the
|
|
# host's python.
|
|
python-setuptools-scm
|
|
# systemd generates part of its source with jinja2 templates:
|
|
#
|
|
# meson.build:1620:15: ERROR: python3 is missing modules: jinja2
|
|
#
|
|
# Not documentation -- the build cannot proceed without it. python-markupsafe
|
|
# comes with it, as jinja's only dependency.
|
|
python-markupsafe
|
|
python-jinja
|
|
# Three more the chroot asked for by name, each a build tool:
|
|
#
|
|
# python-pkgconfig brotli: ERROR Missing dependencies: pkgconfig
|
|
# -- the python MODULE, not pkg-config the program,
|
|
# which has been there since the lib64 fix.
|
|
# cython libseccomp: ERROR Backend subprocess exited when
|
|
# trying to invoke get_requires_for_build_wheel
|
|
# -- its python bindings are Cython.
|
|
# autoconf-archive tpm2-tss: configure.ac:139: error: undefined or
|
|
# overquoted macro: AC_MSG_WARN
|
|
# -- an AX_* macro is missing, so autoconf misreads the
|
|
# line and blames one it does know.
|
|
python-pkgconfig
|
|
cython
|
|
autoconf-archive
|
|
# publicsuffix-list: DATA, not a tool. libpsl stops on
|
|
#
|
|
# make: *** No rule to make target
|
|
# '/usr/share/publicsuffix/effective_tld_names.dat', needed by ...
|
|
#
|
|
# It compiles the Public Suffix List into a lookup table, so the list itself
|
|
# is an input to the build. First entry in this port whose absence is neither
|
|
# a program nor a library.
|
|
publicsuffix-list
|
|
# libaio: a real closure gap. lvm2 stops on
|
|
#
|
|
# device/bcache.c:30:10: fatal error: libaio.h: No such file or directory
|
|
#
|
|
# A small C library for asynchronous I/O, and one this port had already met
|
|
# from the other side: Ubuntu renamed its runtime to libaio.so.1t64 for
|
|
# time64, which was noted as a divergence long before anything needed the
|
|
# headers.
|
|
libaio
|
|
# libxslt stays in the list because it is part of the distribution, but
|
|
# STAGE 1 CANNOT BUILD IT:
|
|
#
|
|
# configure: error: Version 2.14.5 found. You need at least libxml2
|
|
# 2.15.1 for this version of libxslt
|
|
#
|
|
# 2.14.5 is Ubuntu's. Ours is 2.15.3 and exists only inside the stage-2
|
|
# chroot, so that is the only place libxslt can come from -- it is in
|
|
# STAGE2_FIRST, and a stage-1 run is expected to report it as failed.
|
|
libxslt
|
|
)
|