Stratis 3.5.0 + stratisd 3.5.1 release

[mulkieran]

• Upstream:

  • libbkid-rs: 0.3.0
  • stratisd_proc_macros: 0.2.0
  • stratisd: 3.5.0
  • stratis-cli: 3.5.0
  • testing: 3.5.0

• Fedora: In one side-tag, order: rust-libblkid-rs, stratisd_proc_macros, stratisd, stratis-cli

  • rawhide: https://bodhi.fedoraproject.org/updates/FEDORA-2023-1c259cc5cb
  • f37: https://bodhi.fedoraproject.org/updates/FEDORA-2023-11d44a0dbc

• Fedora stratisd -2 release (rpminspect.yaml changes):

  • rawhide: https://bodhi.fedoraproject.org/updates/FEDORA-2023-6ece4b08b6
  • f37: not useful

• f36 Stratis -1 release in side-tag (includes rpminspect.yaml changes): rust-libblkid-rs, stratisd_proc_macros, stratisd, stratis-cli

  • f36: https://bodhi.fedoraproject.org/updates/FEDORA-2023-26abebfbd1 (cancelled)

• stratisd 3.5.1 upstream

• Fedora releases

  • rawhide: stratisd 3.5.1 only: https://bodhi.fedoraproject.org/updates/FEDORA-2023-3b3a685c0e
  • f37: stratisd 3.5.1 only: https://bodhi.fedoraproject.org/updates/FEDORA-2023-d4c844852a
  • f36: Add stratisd 3.5.1 to pre-existing side-tag, make new build
    • (Updated and resubmitted previous F36 update): https://bodhi.fedoraproject.org/updates/FEDORA-2023-26abebfbd1

• Docs:

  • blog post
  • D-Bus API

Emails to:

• [email protected]

[mulkieran]

Investigating test failures in https://bodhi.fedoraproject.org/updates/FEDORA-2023-11d44a0dbc .

[mulkieran]

Two failures:

1. BAD /usr/lib/udev/stratis-base32-decode lost full GNU_RELRO security protection on i686 Security
Suggested remedy:

Ensure executables are linked with with '-z relro -z now'.

rustc does not yet support static-pie flag on all the architectures. See rust PR rust-lang/rust#86374 for some discussion. The "-z now" flag requires all symbols to be resolved when program is loaded. But our static compilation step made that not possible. We should waive it. We should also track it, to pick up future changes.

/usr/lib/udev/stratis-base32-decode in stratisd-3.5.0-1.fc37 on aarch64 contains debugging symbols Anyone
Contains: .symtab

rpminspect should strip this when it extracts debuginfo. So, it is probably not a Rust issue at all. We should waive it. We should also track it, to pick up future changes.

[mulkieran]

We will make changes to the rpminspect.yaml file in stratisd in rawhide first.

[mulkieran]

rpmbuild bz filed: https://bugzilla.redhat.com/show_bug.cgi?id=2166149

[mulkieran]

Related rpminspect issues:

• per-inspection ignores in rpminspect.yaml do not seem to be being processed properly rpminspect/rpminspect#1069
• Clear distinction in results output between comparison errors and baseline analysis errors rpminspect/rpminspect#1070