Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

haproxy: 1.8.9 -> 1.8.13 #44487

Merged
merged 1 commit into from Aug 5, 2018
Merged

haproxy: 1.8.9 -> 1.8.13 #44487

merged 1 commit into from Aug 5, 2018

Conversation

vincentbernat
Copy link
Member

The patches previously applied have been included upstream. Upstream
changelog (only MAJOR/MEDIUM):

2018/07/30 : 1.8.13
- BUG/MEDIUM: h2: don't accept new streams if conn_streams are still in excess
- BUG/MEDIUM: h2: never leave pending data in the output buffer on close
- BUG/MEDIUM: h2: make sure the last stream closes the connection after a timeout
- BUG/MEDIUM: threads: Fix the exit condition of the thread barrier
- BUG/MEDIUM: stream-int: don't immediately enable reading when the buffer was reportedly full
- BUG/MEDIUM: stats: don't ask for more data as long as we're responding
- BUG/MEDIUM: threads/sync: use sched_yield when available
- BUG/MEDIUM: h2: prevent orphaned streams from blocking a connection forever
- BUG/MEDIUM: threads: properly fix nbthreads == MAX_THREADS
- BUG/MEDIUM: threads: unbreak "bind" referencing an incorrect thread number
- MEDIUM: proxy_protocol: Convert IPs to v6 when protocols are mixed

2018/06/27 : 1.8.12
- BUG/MAJOR: stick_table: Complete incomplete SEGV fix

2018/06/26 : 1.8.11
- BUG/MAJOR: Stick-tables crash with segfault when the key is not in the stick-table

2018/06/22 : 1.8.10
- BUG/MEDIUM: spoe: Flags are not encoded in network order
- BUG/MEDIUM: contrib/mod_defender: Use network order to encode/decode flags
- BUG/MEDIUM: contrib/modsecurity: Use network order to encode/decode flags
- BUG/MEDIUM: cache: don't cache when an Authorization header is present
- BUG/MEDIUM: dns: Delay the attempt to run a DNS resolution on check failure.
- BUG/MEDIUM: fd: Only check update_mask against all_threads_mask.
- BUG/MEDIUM: servers: Add srv_addr default placeholder to the state file
- BUG/MEDIUM: lua/socket: Length required read doesn't work
- BUG/MEDIUM: stick-tables: Decrement ref_cnt in table_* converters
- BUG/MEDIUM: spoe: Return an error when the wrong ACK is received in sync mode
- BUG/MEDIUM: lua/socket: wrong scheduling for sockets
- BUG/MAJOR: lua: Dead lock with sockets
- BUG/MEDIUM: lua/socket: Notification error
- BUG/MEDIUM: lua/socket: Sheduling error on write: may dead-lock
- BUG/MEDIUM: lua/socket: Buffer error, may segfault
- MAJOR: spoe: upgrade the SPOP version to 2.0 and remove the support for 1.0
- BUG/MEDIUM: threads: handle signal queue only in thread 0
- BUG/MAJOR: map: fix a segfault when using http-request set-map
- BUG/MAJOR: ssl: Random crash with cipherlist capture
- BUG/MAJOR: ssl: OpenSSL context is stored in non-reserved memory slot
- BUG/MEDIUM: fd: Don't modify the update_mask in fd_dodelete().
- BUG/MEDIUM: threads: Use the sync point to check active jobs and exit

Motivation for this change

New stable upstream version.

Things done
  • Tested using sandboxing (nix.useSandbox on NixOS, or option sandbox in nix.conf on non-NixOS)
  • Built on platform(s)
    • NixOS
    • macOS
    • other Linux distributions
  • Tested via one or more NixOS test(s) if existing and applicable for the change (look inside nixos/tests)
  • Tested compilation of all pkgs that depend on this change using nix-shell -p nox --run "nox-review wip"
  • Tested execution of all binary files (usually in ./result/bin/)
  • Determined the impact on package closure size (by running nix path-info -S before and after)
  • Fits CONTRIBUTING.md.

The patches previously applied have been included upstream. Upstream
changelog (only MAJOR/MEDIUM):

2018/07/30 : 1.8.13
    - BUG/MEDIUM: h2: don't accept new streams if conn_streams are still in excess
    - BUG/MEDIUM: h2: never leave pending data in the output buffer on close
    - BUG/MEDIUM: h2: make sure the last stream closes the connection after a timeout
    - BUG/MEDIUM: threads: Fix the exit condition of the thread barrier
    - BUG/MEDIUM: stream-int: don't immediately enable reading when the buffer was reportedly full
    - BUG/MEDIUM: stats: don't ask for more data as long as we're responding
    - BUG/MEDIUM: threads/sync: use sched_yield when available
    - BUG/MEDIUM: h2: prevent orphaned streams from blocking a connection forever
    - BUG/MEDIUM: threads: properly fix nbthreads == MAX_THREADS
    - BUG/MEDIUM: threads: unbreak "bind" referencing an incorrect thread number
    - MEDIUM: proxy_protocol: Convert IPs to v6 when protocols are mixed

2018/06/27 : 1.8.12
    - BUG/MAJOR: stick_table: Complete incomplete SEGV fix

2018/06/26 : 1.8.11
    - BUG/MAJOR: Stick-tables crash with segfault when the key is not in the stick-table

2018/06/22 : 1.8.10
    - BUG/MEDIUM: spoe: Flags are not encoded in network order
    - BUG/MEDIUM: contrib/mod_defender: Use network order to encode/decode flags
    - BUG/MEDIUM: contrib/modsecurity: Use network order to encode/decode flags
    - BUG/MEDIUM: cache: don't cache when an Authorization header is present
    - BUG/MEDIUM: dns: Delay the attempt to run a DNS resolution on check failure.
    - BUG/MEDIUM: fd: Only check update_mask against all_threads_mask.
    - BUG/MEDIUM: servers: Add srv_addr default placeholder to the state file
    - BUG/MEDIUM: lua/socket: Length required read doesn't work
    - BUG/MEDIUM: stick-tables: Decrement ref_cnt in table_* converters
    - BUG/MEDIUM: spoe: Return an error when the wrong ACK is received in sync mode
    - BUG/MEDIUM: lua/socket: wrong scheduling for sockets
    - BUG/MAJOR: lua: Dead lock with sockets
    - BUG/MEDIUM: lua/socket: Notification error
    - BUG/MEDIUM: lua/socket: Sheduling error on write: may dead-lock
    - BUG/MEDIUM: lua/socket: Buffer error, may segfault
    - MAJOR: spoe: upgrade the SPOP version to 2.0 and remove the support for 1.0
    - BUG/MEDIUM: threads: handle signal queue only in thread 0
    - BUG/MAJOR: map: fix a segfault when using http-request set-map
    - BUG/MAJOR: ssl: Random crash with cipherlist capture
    - BUG/MAJOR: ssl: OpenSSL context is stored in non-reserved memory slot
    - BUG/MEDIUM: fd: Don't modify the update_mask in fd_dodelete().
    - BUG/MEDIUM: threads: Use the sync point to check active jobs and exit
@xeji
Copy link
Contributor

xeji commented Aug 5, 2018

@GrahamcOfBorg build haproxy

@GrahamcOfBorg
Copy link

Success on x86_64-darwin (full log)

Attempted: haproxy

Partial log (click to expand)

        install -m 644 doc/$x.txt "/nix/store/2ixssd069h796db0biscph31kn8l2p40-haproxy-1.8.13/doc/haproxy" ; \
done
post-installation fixup
moving /nix/store/2ixssd069h796db0biscph31kn8l2p40-haproxy-1.8.13/doc to /nix/store/2ixssd069h796db0biscph31kn8l2p40-haproxy-1.8.13/share/doc
gzipping man pages under /nix/store/2ixssd069h796db0biscph31kn8l2p40-haproxy-1.8.13/share/man/
strip is /nix/store/qfxcr8c4fg7lkybrny9n2sb77bmippdx-cctools-binutils-darwin/bin/strip
stripping (with command strip and flags -S) in /nix/store/2ixssd069h796db0biscph31kn8l2p40-haproxy-1.8.13/sbin
patching script interpreter paths in /nix/store/2ixssd069h796db0biscph31kn8l2p40-haproxy-1.8.13
moving /nix/store/2ixssd069h796db0biscph31kn8l2p40-haproxy-1.8.13/sbin/* to /nix/store/2ixssd069h796db0biscph31kn8l2p40-haproxy-1.8.13/bin
/nix/store/2ixssd069h796db0biscph31kn8l2p40-haproxy-1.8.13

@GrahamcOfBorg
Copy link

Success on x86_64-linux (full log)

Attempted: haproxy

Partial log (click to expand)

moving /nix/store/czihwqwr5xg972hwzppm7yknwmm8slyd-haproxy-1.8.13/doc to /nix/store/czihwqwr5xg972hwzppm7yknwmm8slyd-haproxy-1.8.13/share/doc
shrinking RPATHs of ELF executables and libraries in /nix/store/czihwqwr5xg972hwzppm7yknwmm8slyd-haproxy-1.8.13
shrinking /nix/store/czihwqwr5xg972hwzppm7yknwmm8slyd-haproxy-1.8.13/sbin/haproxy
gzipping man pages under /nix/store/czihwqwr5xg972hwzppm7yknwmm8slyd-haproxy-1.8.13/share/man/
strip is /nix/store/1hi76hr87bd1y1q1qjk0lv8nmcjip1c8-binutils-2.30/bin/strip
stripping (with command strip and flags -S) in /nix/store/czihwqwr5xg972hwzppm7yknwmm8slyd-haproxy-1.8.13/sbin
patching script interpreter paths in /nix/store/czihwqwr5xg972hwzppm7yknwmm8slyd-haproxy-1.8.13
checking for references to /build in /nix/store/czihwqwr5xg972hwzppm7yknwmm8slyd-haproxy-1.8.13...
moving /nix/store/czihwqwr5xg972hwzppm7yknwmm8slyd-haproxy-1.8.13/sbin/* to /nix/store/czihwqwr5xg972hwzppm7yknwmm8slyd-haproxy-1.8.13/bin
/nix/store/czihwqwr5xg972hwzppm7yknwmm8slyd-haproxy-1.8.13

@GrahamcOfBorg
Copy link

Success on aarch64-linux (full log)

Attempted: haproxy

Partial log (click to expand)

moving /nix/store/4n6jls5y936dl08qygdv4czk1g218a9v-haproxy-1.8.13/doc to /nix/store/4n6jls5y936dl08qygdv4czk1g218a9v-haproxy-1.8.13/share/doc
shrinking RPATHs of ELF executables and libraries in /nix/store/4n6jls5y936dl08qygdv4czk1g218a9v-haproxy-1.8.13
shrinking /nix/store/4n6jls5y936dl08qygdv4czk1g218a9v-haproxy-1.8.13/sbin/haproxy
gzipping man pages under /nix/store/4n6jls5y936dl08qygdv4czk1g218a9v-haproxy-1.8.13/share/man/
strip is /nix/store/zrs21zqcchgyabjf4xfimncdq16njizc-binutils-2.30/bin/strip
stripping (with command strip and flags -S) in /nix/store/4n6jls5y936dl08qygdv4czk1g218a9v-haproxy-1.8.13/sbin
patching script interpreter paths in /nix/store/4n6jls5y936dl08qygdv4czk1g218a9v-haproxy-1.8.13
checking for references to /build in /nix/store/4n6jls5y936dl08qygdv4czk1g218a9v-haproxy-1.8.13...
moving /nix/store/4n6jls5y936dl08qygdv4czk1g218a9v-haproxy-1.8.13/sbin/* to /nix/store/4n6jls5y936dl08qygdv4czk1g218a9v-haproxy-1.8.13/bin
/nix/store/4n6jls5y936dl08qygdv4czk1g218a9v-haproxy-1.8.13

@xeji
Copy link
Contributor

xeji commented Aug 5, 2018

@GrahamcOfBorg test haproxy

@GrahamcOfBorg
Copy link

Success on x86_64-linux (full log)

Attempted: tests.haproxy

Partial log (click to expand)

machine: exit status 1
syncing
machine: running command: sync
machine: exit status 0
test script finished in 7.01s
cleaning up
killing machine (pid 600)
vde_switch: EOF on stdin, cleaning up and exiting
vde_switch: Could not remove ctl dir '/build/vde1.ctl': Directory not empty
/nix/store/bhj0zzp26d2n746b4naylkiq2f2psdn4-vm-test-run-haproxy

@xeji xeji merged commit cc1d821 into NixOS:master Aug 5, 2018
@GrahamcOfBorg
Copy link

Success on aarch64-linux (full log)

Attempted: tests.haproxy

Partial log (click to expand)

machine: exit status 1
syncing
machine: running command: sync
machine: exit status 0
test script finished in 89.66s
cleaning up
killing machine (pid 631)
vde_switch: EOF on stdin, cleaning up and exiting
vde_switch: Could not remove ctl dir '/build/vde1.ctl': Directory not empty
/nix/store/fw1yy9jy58fnvza2kxkd7flq1qpinr1s-vm-test-run-haproxy

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

Successfully merging this pull request may close these issues.

None yet

3 participants