Skip to content

Add support for position-independent executables (static-pie)#51

Merged
brandond merged 1 commit intorancher:masterfrom
brandond:fix-static-pie
Aug 2, 2023
Merged

Add support for position-independent executables (static-pie)#51
brandond merged 1 commit intorancher:masterfrom
brandond:fix-static-pie

Conversation

@brandond
Copy link
Copy Markdown
Member

@brandond brandond commented Aug 2, 2023

runc is now producing static-pie binaries: https://drone-publish.rancher.io/rancher/image-build-runc/59/1/2

This is statically linked, but is rejected by the go-assert-static script.

#8 [builder  8/11] RUN go-assert-static.sh runc
#8 sha256:76a40b6ba9b591a4a4cbf5ebf637fa6caea2a78164db0d5979cb0f119c6f987b
#8 0.292 runc: ELF 64-bit LSB pie executable, x86-64, version 1 (SYSV), static-pie linked, Go BuildID=1CTLEUF3DdkTs6IyBuGO/LcWDI4-YjqoMXdCuiPHV/jDaCbXbhRhpICHNGOytz/zXFXFfs0dX-EJ3lwmbXQ, with debug_info, not stripped
#8 0.292 runc: not a statically linked executable
#8 ERROR: process "/bin/sh -c go-assert-static.sh runc" did not complete successfully: exit code: 1

I'm not sure why this just started failing, as they've been doing this for quite a while: opencontainers/runc#3446

Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
@brandond brandond merged commit 62de3e1 into rancher:master Aug 2, 2023
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants