Bug 236887 - openssh from fc6 updates does not build on older distros without spec changes
Summary: openssh from fc6 updates does not build on older distros without spec changes
Alias: None
Product: Fedora
Classification: Fedora
Component: openssh   
(Show other bugs)
Version: 6
Hardware: All Linux
Target Milestone: ---
Assignee: Tomas Mraz
QA Contact: Brian Brock
Keywords: Reopened
Depends On:
TreeView+ depends on / blocked
Reported: 2007-04-18 09:30 UTC by Tarhon-Onu Victor
Modified: 2007-11-30 22:12 UTC (History)
0 users

Fixed In Version:
Doc Type: Bug Fix
Doc Text:
Story Points: ---
Clone Of:
Last Closed: 2007-07-25 16:22:25 UTC
Type: ---
Regression: ---
Mount Type: ---
Documentation: ---
Verified Versions:
Category: ---
oVirt Team: ---
RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: ---

Attachments (Terms of Use)

Description Tarhon-Onu Victor 2007-04-18 09:30:41 UTC
Description of problem:

When rebuilding the openssh source RPMs on older redhat distributions (like fc1,
rh9, rh73) there are some changes that have to be done in the RPM spec along
with the rpmbuild flag settings in order for the build to complete successfully.
I'll talk here about two examples: redhat 9 and redhat 7.3. Probably the
adnotations for rh9 may appply to FC1 as well.

1. first of all there is no build flag to set the availability of the selinux
(and audit) libraries. So the spec file has to be modified to change the first
line from:
%define WITH_SELINUX 1
%define WITH_SELINUX 0

Ideally we should be able to do that using a flag like:
--define 'with_selinux 1' (or 0), which if not defined then the
default/hardcoded value to be used.

2. same for kerberos5

3. when WITH_SELINUX is set to 0 the selinux patch is not applied, but the mls
and selinux-rolechg patches are not conditioned by this setting. So the patch
commands which apply these two additional selinux patches should be included in
an "if" command.

4. BuildRequires audit-libs-devel should be included in an "if" command as well.

5. for older distributions (older than FC4 I think, that's when the loginuid pam
module has been included if I remember well) the pam-stack patch should be skipped.

6. the distributions older than FC1 (and FC1 I think) should require
XFree86-xauth instead of xorg-x11-xauth. RedHat 7.3 has the xauth tool included
in the XFree86 package.

7. I can't give you an idea about how to approach this, but the following block
fails to evaluate the values for some reason in older RPM versions:
%if ! %{no_gnome_askpass}
%if %{gtk2}
BuildRequires: gtk2-devel
BuildRequires: libX11-devel
BuildRequires: gnome-libs-devel
...when both no_gnome_askpass and gtk2 are set to 0.

After the appropriate changes were done I could successfully build the openssh
package shipped in the FC6 updates on rh7.3 and rh9 like this:

bash# rpmbuild -bs --define 'dist .rh9' /usr/src/redhat/SPECS/openssh.spec 
--define 'skip_gnome_askpass 1' --define 'no_gtk2 1'
bash# rpmbuild --rebuild --target i686 --define 'dist .rh9' --define
'skip_gnome_askpass 1' --define 'no_gtk2 1'

Version-Release number of selected component (if applicable):

How reproducible:

Steps to Reproduce:
1. just try to rebuild an openssh package on an older distro, even setting the
appropriate build flags.
Actual results:

Expected results:

I should have been able to rebuild the package on an older distro just using the
appropriate build flag settings. Since the flags are there we should be able to
still use them...

Additional info:

Comment 1 Tarhon-Onu Victor 2007-04-18 09:32:50 UTC
This is more like a request for enchancement.

Comment 2 Tomas Mraz 2007-07-25 16:22:25 UTC
I'm sorry but such backwards compatibility is not our goal. It really
complicates the spec file. In fact I'd like to clean out some of the %ifs.

Note You need to log in before you can comment on or make changes to this bug.