netfilter buglog - Nov 2020 - [Bug 1483] New: v0.9.7 does not compile for arm-linux-gnueabihf

https://bugzilla.netfilter.org/show_bug.cgi?id=1483

            Bug ID: 1483
           Summary: v0.9.7 does not compile for arm-linux-gnueabihf
           Product: nftables
           Version: unspecified
          Hardware: arm
                OS: Debian GNU/Linux
            Status: NEW
          Severity: blocker
          Priority: P5
         Component: nft
          Assignee: pablo at netfilter.org
          Reporter: vtolkm at gmail.com

Created attachment 613
  --> https://bugzilla.netfilter.org/attachment.cgi?id=613&action=edit
build log

build node:
* x86_64-pc-linux-gnu with kernel 5.9.7
* gcc 10.2.0 (Debian 10.2.0-16)
* bison (GNU Bison) 3.7.3
* Python 3.8.6

Enclosed the build log. Tried a few times with a fresh/clean git work-tree but
the issue reproduced repeatedly.

-- 
You are receiving this mail because:
You are watching all bug changes.
-------------- next part --------------
An HTML attachment was scrubbed...
URL:
<http://lists.netfilter.org/pipermail/netfilter-buglog/attachments/20201115/f90d15dd/attachment.html>

https://bugzilla.netfilter.org/show_bug.cgi?id=1483

Pablo Neira Ayuso <pablo at netfilter.org> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
         Resolution|---                         |WONTFIX
             Status|NEW                         |RESOLVED

--- Comment #1 from Pablo Neira Ayuso <pablo at netfilter.org> ---
It looks like you are not using libnftnl 1.1.8 to compile nftables 0.9.7.

Looking at the build log:

  CC       netlink.lo                                                           
netlink.c: In function ‘chain_parse_udata_cb’:                                  
netlink.c:483:8: error: ‘NFTNL_UDATA_CHAIN_COMMENT’ undeclared (first use in
this function); did you mean ‘NFTNL_UDATA_RULE_COMMENT’?
  483 |   case NFTNL_UDATA_CHAIN_COMMENT:                                       
      |        ^~~~~~~~~~~~~~~~~~~~~~~~~                                        
      |        NFTNL_UDATA_RULE_COMMENT

This is strange.

Did you manipulate the configure.ac file in nftables?

There is a check that is done via pkgconfig that makes sure you can only
compile this with libnftnl-1.1.8

-- 
You are receiving this mail because:
You are watching all bug changes.
-------------- next part --------------
An HTML attachment was scrubbed...
URL:
<http://lists.netfilter.org/pipermail/netfilter-buglog/attachments/20201116/d400a9ed/attachment.html>

https://bugzilla.netfilter.org/show_bug.cgi?id=1483

--- Comment #2 from vtolkm at gmail.com ---
since the distro provides only 1.1.7 I self-compiled 1.1.8 from source, as
evident reading from libnftnl.pc

# libnftnl pkg-config file

prefix=/usr/local
exec_prefix=${prefix}
libdir=${exec_prefix}/lib
includedir=${prefix}/include

Name: libnftnl
Description: Netfilter nf_tables infrastructure library
URL: http://netfilter.org/projects/libnftnl/
Version: 1.1.8
Requires:
Requires.private: libmnl
Conflicts:
Libs: -L${libdir} -lnftnl
Cflags: -I${includedir}


But I compiled it for the arm-linux-gnueabihf target instead for the build
host, which may cause the issue.

-- 
You are receiving this mail because:
You are watching all bug changes.
-------------- next part --------------
An HTML attachment was scrubbed...
URL:
<http://lists.netfilter.org/pipermail/netfilter-buglog/attachments/20201116/18f18714/attachment-0001.html>

https://bugzilla.netfilter.org/show_bug.cgi?id=1483

vtolkm at gmail.com changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
         Resolution|WONTFIX                     |---
             Status|RESOLVED                    |REOPENED

--- Comment #3 from vtolkm at gmail.com ---
>Did you manipulate the configure.ac file in nftables?
no, I did not manipulate any souce files.

Just compiled libnftnl for the build host instead of the target but the outcome
is the same

-- 
You are receiving this mail because:
You are watching all bug changes.
-------------- next part --------------
An HTML attachment was scrubbed...
URL:
<http://lists.netfilter.org/pipermail/netfilter-buglog/attachments/20201116/2e366e34/attachment.html>

https://bugzilla.netfilter.org/show_bug.cgi?id=1483

Pablo Neira Ayuso <pablo at netfilter.org> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
             Status|REOPENED                    |RESOLVED
         Resolution|---                         |WONTFIX

--- Comment #4 from Pablo Neira Ayuso <pablo at netfilter.org> ---
You require libnftnl 1.1.8 with nftables 0.9.7

pkg-config should bail out from configure.

-- 
You are receiving this mail because:
You are watching all bug changes.
-------------- next part --------------
An HTML attachment was scrubbed...
URL:
<http://lists.netfilter.org/pipermail/netfilter-buglog/attachments/20201116/a661d12c/attachment.html>

https://bugzilla.netfilter.org/show_bug.cgi?id=1483

vtolkm at gmail.com changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
             Status|RESOLVED                    |REOPENED
         Resolution|WONTFIX                     |---

--- Comment #5 from vtolkm at gmail.com ---
Not sure what you are saying - I am utilising libnftnl 1.1.8 according to the
configure script (as shown in the build log)

PKG_CONFIG_PATH - directories to add to pkg-config's search path

Because if I skip that the script ends (as expected) with

checking for LIBNFTNL... no
configure: error: Package requirements (libnftnl >= 1.1.8) were not met:

Package 'libnftnl', required by 'virtual:world', not found

Consider adjusting the PKG_CONFIG_PATH environment variable if you
installed software in a non-standard prefix.

-- 
You are receiving this mail because:
You are watching all bug changes.
-------------- next part --------------
An HTML attachment was scrubbed...
URL:
<http://lists.netfilter.org/pipermail/netfilter-buglog/attachments/20201116/5e3a7dd0/attachment.html>

https://bugzilla.netfilter.org/show_bug.cgi?id=1483

--- Comment #6 from vtolkm at gmail.com ---
Created attachment 614
  --> https://bugzilla.netfilter.org/attachment.cgi?id=614&action=edit
libnftnl 1.1.8 compiled from source for arm-linux-gnueabihf

Not sure if it works/helps - attached the libnftnl 1.1.8 compiled from source
for arm-linux-gnueabihf that is being used for compiling nft 0.9.7

-- 
You are receiving this mail because:
You are watching all bug changes.
-------------- next part --------------
An HTML attachment was scrubbed...
URL:
<http://lists.netfilter.org/pipermail/netfilter-buglog/attachments/20201116/1ecd87a9/attachment.html>

https://bugzilla.netfilter.org/show_bug.cgi?id=1483

--- Comment #7 from vtolkm at gmail.com ---
Created attachment 615
  --> https://bugzilla.netfilter.org/attachment.cgi?id=615&action=edit
libnftnl 1.1.8 build log

for completeness the build log for compiling libnftnl 1.1.8,

there is no apparent error printed however and one would assume that the
compilation completed successfully/satisfactory and it then could be used for
compiling nft accordingly

-- 
You are receiving this mail because:
You are watching all bug changes.
-------------- next part --------------
An HTML attachment was scrubbed...
URL:
<http://lists.netfilter.org/pipermail/netfilter-buglog/attachments/20201116/527121b1/attachment.html>

https://bugzilla.netfilter.org/show_bug.cgi?id=1483

vtolkm at gmail.com changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
           Severity|blocker                     |major

--- Comment #8 from vtolkm at gmail.com ---
I suspect that nft's configure script checks the PKG_CONFIG_PATH and finds
libnftnl 1.1.8 present but then fails to pass the given path to MAKE to utilise
it, instead MAKE ending up looking into the standard path(s) where only
libnftnl 1.1.7 is present.

How could test this theory, i.e. to pass the libnftnl 1.1.8 to MAKE?

-- 
You are receiving this mail because:
You are watching all bug changes.
-------------- next part --------------
An HTML attachment was scrubbed...
URL:
<http://lists.netfilter.org/pipermail/netfilter-buglog/attachments/20201116/8128758a/attachment.html>

https://bugzilla.netfilter.org/show_bug.cgi?id=1483

vtolkm at gmail.com changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
           Hardware|arm                         |All
            Summary|v0.9.7 does not compile for |configure script fails to
                   |arm-linux-gnueabihf         |add lib path to MAKE from
                   |                            |PKG_CONFIG_PATH

-- 
You are receiving this mail because:
You are watching all bug changes.
-------------- next part --------------
An HTML attachment was scrubbed...
URL:
<http://lists.netfilter.org/pipermail/netfilter-buglog/attachments/20201116/d1145c20/attachment.html>

https://bugzilla.netfilter.org/show_bug.cgi?id=1483

--- Comment #9 from vtolkm at gmail.com ---
Created attachment 617
  --> https://bugzilla.netfilter.org/attachment.cgi?id=617&action=edit
configure script log

after having removed libnftnl 1.1.7 and with only libnftnl 1.1.8 in place it
becomes apparent that the configure script does not provide MAKE with the
necessary path derived from PKG_CONFIG_PATH

In file included from ../include/statement.h:5,
                 from rule.c:19:
../include/expression.h:13:10: fatal error: libnftnl/udata.h: No such file or
directory
   13 | #include <libnftnl/udata.h>
      |          ^~~~~~~~~~~~~~~~~~
compilation terminated.

____

Also attached now the configure script log, noteworthy:

ac_cv_env_PKG_CONFIG_PATH_value=/srv/apps/armhf/libnftnl/usr/local/lib/pkgconfig
pkg_cv_LIBNFTNL_CFLAGS='-I/usr/local/include '
pkg_cv_LIBNFTNL_LIBS='-L/usr/local/lib -lnftnl '
LIBNFTNL_CFLAGS='-I/usr/local/include '
LIBNFTNL_LIBS='-L/usr/local/lib -lnftnl

-- 
You are receiving this mail because:
You are watching all bug changes.
-------------- next part --------------
An HTML attachment was scrubbed...
URL:
<http://lists.netfilter.org/pipermail/netfilter-buglog/attachments/20201116/1571fd78/attachment.html>