[Buildroot] [PATCH 1/1] lxc: fix build with static libcap and shared gnutls

Fabrice Fontaine fontaine.fabrice at gmail.com
Thu May 3 21:47:17 UTC 2018

Dear Thomas,

2018-05-03 21:40 GMT+02:00 Thomas Petazzoni <thomas.petazzoni at bootlin.com>:

> Hello Fabrice,
> Sorry for the slow feedback on this one.
> On Sat,  7 Apr 2018 18:22:34 +0200, Fabrice Fontaine wrote:
> > Fixes:
> >  - http://autobuild.buildroot.net/results/b655d6853c25a195df28d91512b3ff
> b6c654fc90
> >
> > Signed-off-by: Fabrice Fontaine <fontaine.fabrice at gmail.com>
> So, this happens because when BR2_SHARED_LIBS=y, gnutls installs only a
> shared library, while libcap installs both a static library and a
> shared library.
> But really, the crux of the problem is that LXC shouldn't try to build
> a statically linked program when BR2_SHARED_LIBS=y. It doesn't make
> sense, because we don't guarantee to provide static libraries when
> BR2_SHARED_LIBS=y: some packages do build static libraries
> unconditionally, but for examples the autotools packages that obey to
> --disable-static will not build/install static libraries when
> And in fact, I'm wondering how your patch resolves that really. I guess
> it disables GnuTLS support in such a situation, but that isn't really
> the right fix IMO. I would rather disable the build of the static
> version of the LXC program.
> Do you think you could have a look into this ?
The issue was more subtle, init_lxc is a simple binary that LXC wants to be
statically linked if it founds a static version of the only library that it
needs: libcap. Indeed, this binary doesn't need gnutls or any other
dependencies such as selinux or seccomp that are needed for liblxc.
However, because AC_CHECK_LIB was added with its default behavior of adding
gnutls to the global LIBS variable, linking of init_lxc was failing because
gnutls was not static.
So, I think my patch is the right fix and it has been merged upstream:
Moreover, the issue was raised because when BR2_SHARED_LIBS is set, the
libcap package installs the static and the shared version of the library, I
made a patch to change this behavior but I've not send it as it didn't fix
the root cause of the issue.

> Thomas
> --
> Thomas Petazzoni, CTO, Bootlin (formerly Free Electrons)
> Embedded Linux and Kernel engineering
> https://bootlin.com
Best Regards,

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.busybox.net/pipermail/buildroot/attachments/20180503/f133527d/attachment-0002.html>

More information about the buildroot mailing list