From mboxrd@z Thu Jan 1 00:00:00 1970 From: Leo Famulari Subject: Re: glibc update Date: Wed, 17 Feb 2016 11:14:19 -0500 Message-ID: <20160217161419.GB1666@jasmine> References: <20160216202010.GA21380@jasmine> Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Return-path: Received: from eggs.gnu.org ([2001:4830:134:3::10]:48359) by lists.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1aW4kE-0002jK-DZ for guix-devel@gnu.org; Wed, 17 Feb 2016 11:14:30 -0500 Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71) (envelope-from ) id 1aW4kA-0004mN-DT for guix-devel@gnu.org; Wed, 17 Feb 2016 11:14:26 -0500 Received: from out1-smtp.messagingengine.com ([66.111.4.25]:34487) by eggs.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1aW4kA-0004mI-7C for guix-devel@gnu.org; Wed, 17 Feb 2016 11:14:22 -0500 Received: from localhost (74-94-44-34-philadelphia.hfc.comcastbusiness.net [74.94.44.34]) by mail.messagingengine.com (Postfix) with ESMTPA id C0CF56801CC for ; Wed, 17 Feb 2016 11:14:20 -0500 (EST) Content-Disposition: inline In-Reply-To: <20160216202010.GA21380@jasmine> List-Id: "Development of GNU Guix and the GNU System distribution." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: guix-devel-bounces+gcggd-guix-devel=m.gmane.org@gnu.org Sender: guix-devel-bounces+gcggd-guix-devel=m.gmane.org@gnu.org To: guix-devel@gnu.org On Tue, Feb 16, 2016 at 03:20:10PM -0500, Leo Famulari wrote: > I'm wondering if anyone has rebuilt their local systems based on the > glibc update in security updates? I'm wondering what is the best way to > achieve this? > > For Guix users, something like this? > > $ git checkout master \ > && git checkout -b my-branch \ > && git cherry-pick 8304ccdbc7b653ab0b81e3cec5420fcc6 \ > && ./pre-inst-env guix package -u I tried this. The resulting process downloaded the bootstrap binaries and appeared to rebuild *everything*. I haven't had time to figure out what actually got rebuilt and if anything is still using the vulnerable glibc. > > It would probably be desirable to reboot afterwards. > > GuixSD users would want to reconfigure, presumably. > > Then, you would rebase 'my-branch' on master as desired. > > It seems arduous, but faster than waiting for our build farm to rebuild > all packages. > > Feedback requested! >