Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merge openssl 1.1 into staging #67375

Closed
wants to merge 1,073 commits into from
Closed

Conversation

lheckemann
Copy link
Member

Motivation for this change

openssl 1.1 has been merged into master since it had its own hydra jobset. That means we need to merge it into staging. I'm making this PR so @GrahamcOfBorg can evaluate it, to check if I haven't made any silly mistakes while fixing merge conflicts (lots of them because of the pname change).

Things done
  • Tested using sandboxing (nix.useSandbox on NixOS, or option sandbox in nix.conf on non-NixOS)
  • Built on platform(s)
    • NixOS
    • macOS
    • other Linux distributions
  • Tested via one or more NixOS test(s) if existing and applicable for the change (look inside nixos/tests)
  • Tested compilation of all pkgs that depend on this change using nix-shell -p nix-review --run "nix-review wip"
  • Tested execution of all binary files (usually in ./result/bin/)
  • Determined the impact on package closure size (by running nix path-info -S before and after)
  • Ensured that relevant documentation is up to date
  • Fits CONTRIBUTING.md.
Notify maintainers

cc @

Vika and others added 30 commits August 21, 2019 18:28
Some build-time and run-time dependencies were mixed. I put them in a right place!
nixos/fontconfig: harmonize with penultimate
Changelog: https://git.ffmpeg.org/gitweb/ffmpeg.git/blob/refs/heads/release/4.2:/Changelog

Configuration flag changes:
https://git.ffmpeg.org/gitweb/ffmpeg.git/blobdiff/n4.1.4..n4.2:/configure

Ignored new configuration flags:
--enable-libaribb24      enable ARIB text and caption decoding via libaribb24 [no]
--enable-pocketsphinx    enable PocketSphinx, needed for asr filter [no]
--enable-cuda-nvcc       enable Nvidia CUDA compiler [no]
--disable-cuda-llvm      disable CUDA compilation using clang [autodetect]
--disable-msa2           disable MSA2 optimizations

The renamed and removed configuration options where not used.

I've added a patch to prefer libdav1d over libaom, as libaom wasn't even
able to play my sample videos for AV1 (apart from the reduced
performance, at least in theory).
Semi-automatic update generated by
https://github.com/ryantm/nixpkgs-update tools. This update was made
based on information from
https://repology.org/metapackage/thermald/versions
Per https://www.php.net/manual/en/intro.mhash.php, mhash extension
is obsolete, so disabling it here. (Also it doesn't cross-compile)

**Warning**: This could be a breaking change for some packages that
are very old and rely on this extension, maintainer discretion is
advised.
 python3Packages.xdis: 4.0.1 -> 4.0.3
libressl: build libcrypto with noexecstack
Dead project, broken with openssl 1.1
Dead project, broken with openssl 1.1
nixos/containers: fix imperative containers
Dead project, broken with openssl 1.1
@vcunat
Copy link
Member

vcunat commented Aug 24, 2019

Oh, I haven't noticed this work. I'm afraid I duplicated much of it now when merging master to staging-next in 2e6bf42.

In my experience it's a bit better to merge like master <-> staging-next <-> staging and not the spiral-staircase master -> staging -> staging-next -> master. (Well, for most/easy changes it doesn't matter how you do it.)

@lheckemann
Copy link
Member Author

Yeah that's my fault for breaking the merge yesterday, thus not being able to push it until I recovered it this morning… Sorry about that!

@lheckemann
Copy link
Member Author

So do you want to merge staging-next into staging?

@vcunat
Copy link
Member

vcunat commented Aug 24, 2019

When the conflict-resolution work was done twice, we might as well compare whether my merge and yours arrived at the same result :-) (after merging into some common staging commit) At least in my case it's well possible I overlooked some things that weren't caught as evaluation errors (I had to fixup two or three of those).

@edolstra
Copy link
Member

I don't get this PR. If master already has openssl 1.1, then why does openssl 1.1 specifically need to be merged into staging? Shouldn't we just merge master into staging?

@vcunat
Copy link
Member

vcunat commented Aug 24, 2019

git reports conflicts in very many files, so it's not just a trivial step. (I know of no other motivation.)

@FRidh
Copy link
Member

FRidh commented Aug 25, 2019 via email

@lheckemann lheckemann closed this Aug 26, 2019
@lheckemann lheckemann deleted the staging+openssl branch September 10, 2022 09:30
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

Successfully merging this pull request may close these issues.

None yet