diff options
Diffstat (limited to 'community/go/APKBUILD')
| -rw-r--r-- | community/go/APKBUILD | 261 |
1 files changed, 209 insertions, 52 deletions
diff --git a/community/go/APKBUILD b/community/go/APKBUILD index 7424eecb34f..06274e82539 100644 --- a/community/go/APKBUILD +++ b/community/go/APKBUILD @@ -1,54 +1,176 @@ # Contributor: Sören Tempel <soeren+alpine@soeren-tempel.net> # Contributor: Eivind Uggedal <eu@eju.no> -# Maintainer: Natanael Copa <ncopa@alpinelinux.org> +# Contributor: Natanael Copa <ncopa@alpinelinux.org> +# Maintainer: Sören Tempel <soeren+alpine@soeren-tempel.net> pkgname=go # go binaries are statically linked, security updates require rebuilds -pkgver=1.13.4 -pkgrel=1 +pkgver=1.22.2 +pkgrel=0 pkgdesc="Go programming language compiler" -url="https://golang.org/" +url="https://go.dev/" arch="all" license="BSD-3-Clause" depends="binutils gcc musl-dev" makedepends="bash" -checkdepends="binutils-gold" +checkdepends="binutils-gold git git-daemon" subpackages="$pkgname-doc" -source="https://golang.org/dl/go${pkgver/_/}.src.tar.gz - default-buildmode-pie.patch - set-external-linker.patch - disable-flaky-sync-test.patch - " +source="https://go.dev/dl/go$pkgver.src.tar.gz + 0001-cmd-link-prefer-musl-s-over-glibc-s-ld.so-during-dyn.patch + 0002-misc-cgo-test-enable-setgid-tests-on-Alpine-Linux-ag.patch + 0003-go.env-Don-t-switch-Go-toolchain-version-as-directed.patch + 0004-cmd-dist-cmd-go-define-assembly-macros-handle-GOARM-.patch + tests-fchmodat-not-supported.patch + " case "$CARCH" in arm*|aarch64) depends="binutils-gold";; - x86) options="!check" ;; # FIXME + riscv64|loongarch64) + # binutils-gold is not supported on riscv64 and loongarch64. + checkdepends="${checkdepends/binutils-gold/}" + ;; esac # secfixes: +# 0: +# - CVE-2022-41716 +# - CVE-2022-41720 +# - CVE-2022-41722 +# 1.22.2-r0: +# - CVE-2023-45288 +# 1.22.1-r0: +# - CVE-2024-24783 +# - CVE-2023-45290 +# - CVE-2023-45289 +# - CVE-2024-24785 +# - CVE-2024-24784 +# 1.21.5-r0: +# - CVE-2023-39324 +# - CVE-2023-39326 +# 1.21.3-r0: +# - CVE-2023-39325 +# - CVE-2023-44487 +# 1.21.2-r0: +# - CVE-2023-39323 +# 1.21.1-r0: +# - CVE-2023-39318 +# - CVE-2023-39319 +# - CVE-2023-39320 +# - CVE-2023-39321 +# - CVE-2023-39322 +# 1.20.7-r0: +# - CVE-2023-29409 +# 1.20.6-r0: +# - CVE-2023-29406 +# 1.20.5-r0: +# - CVE-2023-29402 +# - CVE-2023-29403 +# - CVE-2023-29404 +# - CVE-2023-29405 +# 1.20.4-r0: +# - CVE-2023-24539 +# - CVE-2023-24540 +# - CVE-2023-29400 +# 1.20.3-r0: +# - CVE-2023-24537 +# - CVE-2023-24538 +# - CVE-2023-24534 +# - CVE-2023-24536 +# 1.20.2-r0: +# - CVE-2023-24532 +# 1.20.1-r0: +# - CVE-2022-41725 +# - CVE-2022-41724 +# - CVE-2022-41723 +# 1.19.4-r0: +# - CVE-2022-41717 +# 1.19.2-r0: +# - CVE-2022-2879 +# - CVE-2022-2880 +# - CVE-2022-41715 +# 1.19.1-r0: +# - CVE-2022-27664 +# - CVE-2022-32190 +# 1.18.5-r0: +# - CVE-2022-32189 +# 1.18.4-r0: +# - CVE-2022-1705 +# - CVE-2022-1962 +# - CVE-2022-28131 +# - CVE-2022-30630 +# - CVE-2022-30631 +# - CVE-2022-30632 +# - CVE-2022-30633 +# - CVE-2022-30635 +# - CVE-2022-32148 +# 1.18.1-r0: +# - CVE-2022-28327 +# - CVE-2022-27536 +# - CVE-2022-24675 +# 1.17.8-r0: +# - CVE-2022-24921 +# 1.17.7-r0: +# - CVE-2022-23772 +# - CVE-2022-23773 +# - CVE-2022-23806 +# 1.17.6-r0: +# - CVE-2021-44716 +# - CVE-2021-44717 +# 1.17.3-r0: +# - CVE-2021-41772 +# - CVE-2021-41771 +# 1.17.2-r0: +# - CVE-2021-38297 +# 1.17.1-r0: +# - CVE-2021-39293 +# 1.17-r0: +# - CVE-2020-29509 +# - CVE-2020-29511 +# - CVE-2021-29923 +# 1.16.7-r0: +# - CVE-2021-36221 +# 1.16.6-r0: +# - CVE-2021-34558 +# 1.16.5-r0: +# - CVE-2021-33195 +# - CVE-2021-33196 +# - CVE-2021-33197 +# - CVE-2021-33198 +# 1.16.4-r0: +# - CVE-2021-31525 +# 1.16.2-r0: +# - CVE-2021-27918 +# - CVE-2021-27919 +# 1.15.7-r0: +# - CVE-2021-3114 +# - CVE-2021-3115 +# 1.15.5-r0: +# - CVE-2020-28362 +# - CVE-2020-28366 +# - CVE-2020-28367 +# 1.15.2-r0: +# - CVE-2020-24553 +# 1.15-r0: +# - CVE-2020-16845 +# 1.14.5-r0: +# - CVE-2020-15586 +# 1.13.7-r0: +# - CVE-2020-7919 # 1.13.2-r0: -# - CVE-2019-17596 +# - CVE-2019-17596 # 1.13.1-r0: -# - CVE-2019-16276 +# - CVE-2019-16276 # 1.12.8-r0: -# - CVE-2019-9512 -# - CVE-2019-9514 -# - CVE-2019-14809 +# - CVE-2019-9512 +# - CVE-2019-9514 +# - CVE-2019-14809 # 1.11.5-r0: -# - CVE-2019-6486 +# - CVE-2019-6486 # 1.9.4-r0: -# - CVE-2018-6574 - -# NOTE: building go for x86 with grsec kernel requires: -# sysctl -w kernel.modify_ldt=1 - -# The following tests fail currently, most of them fail due to linking -# errors likely related to 'default-buildmode-pie.patch' or musl libc. -_brokentests="runtime debug/gosym cmd/.* cgo.* go_test:os/exec ^test.*" +# - CVE-2018-6574 if [ "$CBUILD" = "$CTARGET" ]; then makedepends="go-bootstrap $makedepends" provides="go-bootstrap=$pkgver-r$pkgrel" - subpackages="$subpackages" else pkgname="go-bootstrap" makedepends="go $makedepends" @@ -60,21 +182,39 @@ else fi case "$CTARGET_ARCH" in -aarch64)export GOARCH="arm64" ;; -armel) export GOARCH="arm" GOARM=5 ;; -armhf) export GOARCH="arm" GOARM=6 ;; -armv7) export GOARCH="arm" GOARM=7 ;; -s390x) export GOARCH="s390x" ;; -x86) export GOARCH="386" GO386=387 ;; -x86_64) export GOARCH="amd64" ;; +aarch64) export GOARCH="arm64" ;; +armel) export GOARCH="arm" GOARM=5 ;; +armhf) export GOARCH="arm" GOARM=6 ;; +armv7) export GOARCH="arm" GOARM=7 ;; +s390x) export GOARCH="s390x" ;; +x86) export GOARCH="386" ;; +x86_64) export GOARCH="amd64" ;; +ppc64) export GOARCH="ppc64" ;; ppc64le) export GOARCH="ppc64le" ;; -mips) export GOARCH="mips" GOMIPS=softfloat ;; -mips64) export GOARCH="mips64" GOMIPS64=softfloat ;; -mips64el) export GOARCH="mips64le" GOMIPS64=softfloat ;; -mipsel) export GOARCH="mipsle" GOMIPS=softfloat ;; -*) export GOARCH="unsupported";; +riscv64) export GOARCH="riscv64" ;; +loongarch64) export GOARCH="loong64" ;; +*) export GOARCH="unsupported";; esac +# compile go itself as a PIE on supported arches. +case "$CARCH" in +x86_64|s390x|aarch64) export GO_LDFLAGS=-buildmode=pie ;; +esac + +prepare() { + default_prepare + + # The GitLab CI builds aports in a container. On ppc64le, ASLR + # needs to be disabled in order to have the following test case + # pass. However, the container doesn't have permissions to + # disable ASLR, hence we just disable this test for now. + # + # See https://github.com/golang/go/issues/49066#issuecomment-1252948861 + if [ "$CTARGET_ARCH" = "ppc64le" ]; then + rm test/fixedbugs/bug513.go + fi +} + builddir="$srcdir"/go build() { cd "$builddir/src" @@ -84,6 +224,7 @@ build() { export GOROOT="$builddir" export GOBIN="$GOROOT"/bin export GOROOT_FINAL=/usr/lib/go + local p; for p in /usr/lib/go-bootstrap /usr/lib/go-linux-$GOARCH-bootstrap /usr/lib/go; do if [ -d "$p" ]; then export GOROOT_BOOTSTRAP="$p" @@ -91,7 +232,7 @@ build() { fi done - ./make.bash + ./make.bash -v # copied from bootstrap.bash to fixup cross-built bootstrap go if [ "$CBUILD" != "$CTARGET" ]; then @@ -106,8 +247,14 @@ build() { check() { cd "$builddir/src" - PATH="$builddir/bin:$PATH" ./run.bash -no-rebuild \ - -run "!($(echo "$_brokentests" | tr " " "|"))$" + if [ "$CTARGET_ARCH" = "armhf" ]; then + export GO_TEST_TIMEOUT_SCALE=2 + fi + + # Test suite does not pass with ccache, thus remove it form $PATH. + export PATH="$(echo "$PATH" | sed 's|/usr/lib/ccache/bin:||g')" + + PATH="$builddir/bin:$PATH" ./run.bash -no-rebuild } package() { @@ -118,26 +265,36 @@ package() { ln -s /usr/lib/go/bin/"$binary" "$pkgdir"/usr/bin/ done - cp -a pkg lib "$pkgdir"/usr/lib/go - cp -r doc misc "$pkgdir"/usr/share/doc/go + cp -a misc pkg src lib "$pkgdir"/usr/lib/go + cp -r doc "$pkgdir"/usr/share/doc/go rm -rf "$pkgdir"/usr/lib/go/pkg/obj rm -rf "$pkgdir"/usr/lib/go/pkg/bootstrap rm -f "$pkgdir"/usr/lib/go/pkg/tool/*/api - mkdir -p "$pkgdir"/usr/lib/go/ - cp -a "$builddir"/src "$pkgdir"/usr/lib/go + # Install go.env, see https://go.dev/doc/toolchain#GOTOOLCHAIN. + install -Dm644 "$builddir"/go.env "$pkgdir"/usr/lib/go/go.env + install -Dm644 VERSION "$pkgdir/usr/lib/go/VERSION" - # Remove tests from /usr/lib/go/src. - # Those shouldn't be affacted by the upstream bug (see above). + # Remove tests from /usr/lib/go/src to reduce package size, + # these should not be needed at run-time by any program. find "$pkgdir"/usr/lib/go/src \( -type f -a -name "*_test.go" \) \ -exec rm -rf \{\} \+ find "$pkgdir"/usr/lib/go/src \( -type d -a -name "testdata" \) \ -exec rm -rf \{\} \+ - find "$pkgdir"/usr/lib/go/src -type f -a \( -name "*.bash" -o -name "*.rc" -o -name "*.bat" \) \ + + # Remove rc (plan 9) and bat scripts (windows) to reduce package + # size further. The bash scripts are actually needed at run-time. + # + # See: https://gitlab.alpinelinux.org/alpine/aports/issues/11091 + find "$pkgdir"/usr/lib/go/src -type f -a \( -name "*.rc" -o -name "*.bat" \) \ -exec rm -rf \{\} \+ } -sha512sums="e8155cdceca2ebefd386feef98223bbdc92d9316f7188d4ba701cf43a723b75a9bf67a1eb92ac80987b7a113a2fb6981ef235292bec7dd3964805b7c33abdbb1 go1.13.4.src.tar.gz -f0c07d9979fc3165fc78158406de8440624b3f2c6f6542c9889c71efbf3d2f02a7ffee27ccba8c2630489895d331b7b9d3a606162134dcb3e8e0b9fc06b529dc default-buildmode-pie.patch -faf8de430df185842902322f064254f3e9ecee0884b3075b5550c85da15ff61ea6c2bb8d0fb7cf3887abc0e40974bd73ee8f8c14da7f914dde7e9220177c4e2a set-external-linker.patch -6ce14ca43fd35520e667530af91cfcad8902d635e6dd8c04d19428299b9e29ba049120f5eebbb00717a895f052d1cc40d3f522c090786625cce726715a8218ec disable-flaky-sync-test.patch" +sha512sums=" +f2491d2b5d4ef2dd86ca7820503a2534cd1860822049dc01a6cb40b556a0812cfc4196fa83173765816060253ac949f4165b0fb4b2bed5d45e30d03bb69e434d go1.22.2.src.tar.gz +34dbe032c5f08dd8a7aad36fc4d54e746a876fdadc25466888a2f04f5a9d53103190ebd68d3cf978d3a041976185e30ffb25611fb577d031c159810d2d4c7c41 0001-cmd-link-prefer-musl-s-over-glibc-s-ld.so-during-dyn.patch +89ab4fbb2901d3907e9661dce877ee45b4a4ee07b964dca341235420ee08764f49aed5da1596d28c649e349af19ea49c03ab6f2c2ad7588a4cf950a619c10e9b 0002-misc-cgo-test-enable-setgid-tests-on-Alpine-Linux-ag.patch +8061e4ef9d7dd31804bd8d98c95afa5dd82567940b3436f45f874e0419e324b49713d8a814df04617e575ec3c6155199c4661352ea8aef63ead81ca3020f3dc4 0003-go.env-Don-t-switch-Go-toolchain-version-as-directed.patch +a69a836364be8857f153b606769a155d89fdbbac39af6fbbc3cd923e95a15805f7497d6fdce6176a18a9ccee867946a03b809d8a4a32765dd20086115f179929 0004-cmd-dist-cmd-go-define-assembly-macros-handle-GOARM-.patch +33ecefca77fa0af52a3b2b66a76977af27a88c8dddb89f03e0a5ae6794b9aac53a62d7be33020b49022e9a89d4cdfa383038ee10e160eb94548b2430bf3cfb5e tests-fchmodat-not-supported.patch +" |