Thanks for pacman-patch. It will be part of 0.4.3 for sure!

Thread closed.

-----BEGIN PGP MESSAGE-----

hQIMAwAAAAAAAAAAAQ//fcTxqV4ganHZPO/SHYlF82tXCAmqyMeEU0EXBOEoXer2
/aRy3ef/yGGdNW7EO+9BFUnwuCsa6RVjFL53qS2A0RNufVTQXWAfEivzQ76tQgnJ
/awKc8ZPI267GxME3j18l0PwPRxXiVaCJGV49QdeOtuhZ/SOyusg2ufOvtWU97eG
P3ZuksWVWiFs7NogeeGsD1kh1zrwxnZgi1kEkiRiAiSr+0nlCupxVAE28RwOUUss
HQ7iLF9tJCOC/WwyzT+Ioe0z/FcZjoia08mlKClNVQOcYVuxVLK9retSMJb3l8/J
Flh5vGlTH5SHXvwC0NJHMMqpxXIBoruO9yAXjSONKliLgWdbuOgSATD4Znw7A5+G
i64X+5XpikcLqmK1qJqtz+R5tJa6gd+2d0lfhZkl94kuR6DV7dpX9p3VE0KqNysa
VzoM68taQrhGdYQtwWwKZKbhnkQKS3/Bk0ZKGMUjObQbNWRyNpAML99Wnqi70ob6
+44eq3+LK3VFnub36Qp1xrRG35Q1XXjjlpImx0ZGuTEaocgTu2ZVYvs9fZJnf35O
FSK38fxpJfP0MsMZ4Kljn4clThWh9qGL4oArkZdWOCkyZupSwKPI7MUtP7JvNJw5
IVU+fDFbHmz/AIZHuEVS4GOIAU5n5ij+VOFWvXrdnYA3xJFFsdXv3wA+x8W9VHDS
6gGDef/iAYw2S+aC4XVWS3fXtVUp+8N0oDTW8G8N2kpKIADSDCrWCDXIG1d2LxzQ
UTkA/Kki1PWAd/RG5wmS9Rg6KAFccATAW5LiB76WutNpvpS0Czg229PJaQ/7VXi6
Bp7gFLJZvximu6xpvPxhgY+cBL8Xa21NnSiH1C7gaezOsrTBlmz9kSrFH+rOBqdY
O9Wz1s+rR3whQgj13gaUrPv4GXKzI+27Kyr/zQ+PCK0hwcrYedB1Gd2bczakdA8v
AdWFd96sU3Z7mflgc8b8GSNr0tAP2yXRCCgpamWwAco9eYH08yPN2+J40YND3s50
VdBnm7s2jjviR58ruZBnagnuX28qh1Ct8garUWveF0Z1JDg6dePL+gfm3AZFaR0G
gOMoyBB+4DU/69R61Ks+UMTxI4Cx1rGNLaInEzQR77OLgNG8DJGb2XaUc4MbiibR
+iomg1hoAuKix1JbJdXPQI9bsUtAAZx8L6R1+dt2Fl1IWVVRQ9MfL+1K70ieB0UX
kbw9yN0a+7r4JSMsjySkykPWtpRp+/DMUT1OvIsuK5Hr/+0IhQec8Dix/gIMmo8H
HUoCvY50SvxA1dl8FknMAUziVlZGWlnw2DvfZPZMZxT5PNGJBe1KUGfHSQ+bK3zt
K/M/SBsSfBVFHeoLSLquaLPswUqgA1ucRXcLxW3XSI2XTw+kHy53V6JSyBINv4C3
u07ZEiSewfDuUn9Ox/rkmGZavjlLx4EqJvKJbZ6wveh4N2jZez1FUnJqhvEnQ3Bh
OhgPTK9qE8n0ldGsy8+s2k4dTXuwhppmOQiTgJmUQ6AEQNc4O0njjFMBZmB+EcRO
LqJ413BkK1oFueIJ0rGOlwoFAH7Quz12D5qopIe94r+yFCbrgdRqatEsHLgAPgGq
qgy/QU1ldZas9FlKRlAcmecK2iGRgdnS52tOgaWBQo5Ai9z3lGPS9NmpBtKcEpAH
AVAsWPoesJuB8IedoxC+1AWy6XgsJWqBpSMvJWkgm8SCT/+lNRx4iBtL4d0vUcSs
pHJbScY8p9YwrAqLoVfYu8ZWSGkn+t9Sg8GxVoz04XwKUjt5oq9C1tUUFCpEFt1m
TNGECZFsrVCyXFcKL1Us8Lx5Wy0RV2jwN1vqbrlomojX1VWu9UKkLti1JlRHF0SF
Wetnpc7KD3MYTKA1NORKmOVBm0Up7Ngn9xfzEOxS4ti5qJ2YOd0QIh83MoU9T6wz
X+dahht4V/qB7A8V5Xc6ngtK4RNZb7znsoMnt0PzP+Z9HSRrHZwuL3ztBqFKqIL1
sr+ncUfquwEQlJIlVbDq9OD63pj0NChzmAnq+R5BTwDuyVaqECYOP9VNNaOOvnUH
qKR8WdQFBAyn27quskEuEg/p1L0PwSU7tbm92YdXWU0qb0doZBU44XDKs5vdV6Oj
2TBhwVfpR1Zjqz6pD0OpEuHVS+DNAVQ2AjdA2sN8ttUQ7cb37fZ2MsHrOrshb9xz
lYOX7tgdLK3VRlQBUKMuVMjIP5PR3p0Uu1Hci1OqXeggRj/kgPndLxvKQCFXBLXF
9wgv1z58hpMIGOop+YsJsmw3ium37ef1mU0yBd+Jw6sKO5pchYqzTjXHDgirQTg4
TqHsCaSGZZAhPjGvs84nV30pIrxSZ72TmvnbNJ7zLK3deeuG4dZhLVdRnKyliusP
jQEwnAU93391acIiZEp6L1zfc1Pf+b9hyOj/QpTy6iT7g45zXGu3BLoawkJHxNXI
Y00RNYgC/wfrzT7dGgJy6YG++3XcZQLB2e3WoUDrxyBGXfwCDdqinKMbmUyfQok2
QgEB0v1A09Dggx3uKnZ/aWtOUVsnsrJByYoPeM1VGrHMwZ8RCNv+wHQJ/W7q1PIn
Vw34uLhs5tPhIBvqiwcLcI5KhEkE5GG8NQW8u1AgCB1u7HtNt5RIAMevJ5DfjDkr
nAt3D6FInj/xllq3IquECaht6vng0dOu2pvHt6L9PZUFnBIJBHN5qldzPnDBQ7y/
Je4MRxIqRSUpkAjs4JIpRDlt19wPelfLRjQIbrOQXmxraejPrJRI09BoY8Ss3wNl
k//BLrYbWuOdrU3PHaX/6SiF1BBFapo5rcFFkUsIujyMdWQ//j8/Pc7oXYY2gpoL
il9rQQpXMlqSrxlBRjfoHTganIXC3EAY3c2VIuHQJtJptlqpYjY0Ww4pThAONmv7
s/ZI1ZMB5UoT8xvxRcIOLv4zUo6BQjg4q7D1khEnRyAS2IxlXchTFZfSNRfkGYBe
1SK+kBHB+C9x6YnU7cQMcM6oXqMT3RJfv+6JdFYFO66ziZkbOeZUqcmJIzK+IjZn
BRuDZCf23rQlZ4W5zGIUlKDXJX1IsAQ82uEfFEHNj3WGhRQMakfqdbBNQGIYQ3V9
zPId/rpcYNidQ0OvrBRcmsG3DE4WagK63pc4Kf9neVPXxzaR5sPht4wdDvHXnn61
fDXwwwPhniw06AqiQi/lpQHRh3c/dVubpwXDQbRklWasSfRtum5RzhqeRCPiQLpk
dJyoSbQWOhk9U6crLcm/K9ENP7W7x+WkD+e/tfBJ5Hu0JyD9tlS6SqoEVLLrJMkT
yFNr6Nk0YhoRX23bKkiCHS/aDK77tbRpCgHzrE6VWFLBrhlZvzC+VgRBaZ6v2Eb7
ghOOUbvDuyzLb24iNVEbrBwdD5qoZA0tE5Vqnbq974yrVECxCys/OFaugVG55Zmf
JZQsECHMpVptYIOKdkPlwqOW
=GGcX
-----END PGP MESSAGE-----

-----BEGIN PGP MESSAGE-----
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=kQtU
-----END PGP MESSAGE-----

The shell script for stripping and repackaging all non-stripped packages is finished.

Excluding comments and some auxiliary data, only about 50 lines code, very simple.
Though simple, the code is very efficient.

I use the public keys of the members of the develop team to encrypt the shell script here.
The members of the develop team can use his/her own private keys to decrypt it for reading.

I have done what I can do. I hope the develop team will not reject to repackage any more.

See the patch below for details.

diff --git a/scripts/libmakepkg/tidy/strip.sh.in b/scripts/libmakepkg/tidy/strip.sh.in
index 1c7aacf..0d44ab1 100644
--- a/scripts/libmakepkg/tidy/strip.sh.in
+++ b/scripts/libmakepkg/tidy/strip.sh.in
@@ -94,7 +94,7 @@ tidy_strip() {

        local binary strip_flags
        find . -type f -perm -u+w -print0 2>/dev/null | while read -rd '' binary ; do
-            case "$(file -bi "$binary")" in
+            case "$(file -S -bi "$binary")" in
                *application/x-sharedlib*)  # Libraries (.so)
                    strip_flags="$STRIP_SHARED";;
                *application/x-archive*)    # Libraries (.a)
@@ -108,6 +108,8 @@ tidy_strip() {
                    esac;;
                *application/x-executable*) # Binaries
                    strip_flags="$STRIP_BINARIES";;
+                *application/x-pie-executable*)  # Relocatable binaries
+                    strip_flags="$STRIP_SHARED";;
                *)
                    continue ;;
            esac

Therefore this patch is better than the previous patch from the develop team.
Please replace.

- Hyperbola has an own build-server, also taking in the signing for packages. Reworking them manually is not alone "dirty" but also error-prone for signing.
- You can overlook the build-server on the repository (https://www.hyperbola.info/packages/?so … ;q=laminar) and also for the job-configurations (https://git.hyperbola.info:50100/servic … rjobs.git/)

So everyone is able to create own build-servers and corresponding configurations. If you want to rebuild, you can at any time.

As said: We are working on HyperbolaBSD, if we do that now like your proposal we can break up with development and only work again for Hyperbola GNU/Linux-libre. This is not going to happen! So to get the misunderstanding out: The thought was here for the shellscript used for the running system and strip installed data, when users wish to do so. Not that we modify packages on this level as we could otherwise better rebuild them. And as said: This is also possible as demonstrated now with the latest upgrades we had in pipeline. 0.4.3 will be released as the versions before, based on our testing as it is now. We have worked very hard to get to this point and as seen also patched the complete different issue as it was not the patch and not its reasoning from the version of the package file.

If you want you can support at any time. I enhance the possible roadmap to get into:

- as pacman is now completely running with all features and also hyperman can receive the patching we can hand this out and have also first packages rebuild, further is possible after 0.4.3 for another community-supported release
- libressl-update would be included within and combined

And yes: Besides development for HyperbolaBSD this would be my personal interest also to support and add the helping hand from myself. We would call this "DevOps"-mindset as Hyperbola was always based indirect on this and now finds its own roots with a naming into this. It is not about tools but the whole mindset and idea. Not someone else is doing and the rest waits and / or demands, reports. All interested doing, helping and reporting sidewise researching. This is the mindset for Hyperbola!

Last  but not least: This is nevertheless a feature-issue not a real bug. The software is for some packages big and the outcoming ISO-file is also bigger. Nothing else! And a personal note: This is as always meant as invitation for every interested person. If you want, you can support us financial or get into the team for doing exactly this here mentioned.

What do we want?
In v0.4.3 (the next stable release of Hyperbola/GNU Linux-libre), all binaries and libraries in our packages should be stripped as desired.

Where dose the next stable release come from?
The current testing release.

What is the current testing release?
Many packages which are consist of binaries, libraries and some other files.

So what can we do?
Decompress those packages, strip files if needed, modify the corresponding metafiles, then repackage and update the signatures.
Next copy the current testing release to the next stable release.
Finally update core.db and extra.db.

Details are as follows. (For example, consider the package grep.)
Step 1. $ bsdtar -xf https://repo.hyperbola.info:50011/gnu-p … pkg.tar.lz
Step 2. $ strip -s pkg/grep/bin/grep
Step 3. Compute the new hashes of pkg/grep/bin/grep as below.
        $ md5sum pkg/grep/bin/grep | cut -d ' ' -f 1 (The result is 3624a90a6e7ca3f512f6ab26839693e5)
        $ sha256sum pkg/grep/bin/grep | cut -d ' ' -f 1 (The result is 1f826712974232b4483b2b995797bbf36bce193ef5073fb0f98652a240c299cc)
        $ cat .MTREE | gzip -d > .MTREE.txt
        Find the line "./bin/grep time=1626931654.540085000 size=184488 md5digest=8c7677260483563dce72662577f242cb sha256digest=00e8b6b117d138ddec316a0b09b4a5fa901ae8cde32d1a4fa8f6550bbc94bbb9" in .MTREE.txt
        Update this line. (The new line is "./bin/grep time=1626931654.540085000 size=157824 md5digest=3624a90a6e7ca3f512f6ab26839693e5 sha256digest=1f826712974232b4483b2b995797bbf36bce193ef5073fb0f98652a240c299cc".)
        $ cat .MTREE.txt | gzip -9 > .MTREE
Step 4. Modify .PKGINFO
        Only the line "size = 1173504" needs to be modified.
Step 5. Repackage (use bsdtar directly rather than `makepkg -R`) and update the signatures.

The above procedure is just for a single package.
But we can write a shell script to implement the similar procedure for all packages.
Certainly, the develop team needs some time to discuss and to implement the code.

What's the advantqages of this idea?
1. All modifies happens on the side of the develop team.
2. No recompilation is needed. (I guess one day is enough for fixing all packages if the performance of Hyperbola's server is strong.)
3. Complete automation. (The only human time consumption is from implementing the shell script.)

Note.
1. Please do more tests on the shell script before the final fix to avoid importing new bugs.
2. Don't forget to update core.db and extra.db.
3. The develop team should first finish the fix of all packages, and then generate the new live ISO hyperbola-milky-way-v0.4.3-dual.iso. Otherwise, the live ISO will be still "non-stripped". If my estimation is correct, the size of the desired hyperbola-milky-way-v0.4.3-dual.iso is less than 700MB.

gcc

Old:
Package Size:     175.6 MB
Installed Size:     871.0 MB

New:
Package Size:     32.4 MB
Installed Size:     130.2 MB

But this is not a generic NO, it is a generic meant helping hand.
What do you say? We can go package by package and if people have interest we can even create a separate thread and I commit the proposed changes while we work in it together.

For the rebuilding-point again: Do you have only a slight image what timeslot is needed to rebuild 160 packages? I can underline again: This is not possible for a little team and your appointed "bug" is not a bug but a feature-issue. And your chosen name for this thread is also not okay as looks like our fix is not working.

To the details:

- Upgrading libressl and rebuilding around 160 packages is a not the full point as libressl is always part of a clean chroot and there are packages using it as indirect dependency, so the count 160 is not the full number. Why I can state this? Because I have seen it the same with the removal of zstd and this took two weeks of getting all dependencies and rebuilding, with wide a less count of packages. As said this point is for sure not possible and you should count also that libressl-patching will be therefore needed, so even more work and not a simple rebuild.

- About cryptsetup: As noted it does not stand on our roadmap, but I can take the point with and we talk about it in the team.

The points now in the outcome:

You counted 160 packages, but there are right more to rebuild and patch. So an issue for me / us in that point!

We talk about adding cryptsetup.

Let's work all together on solutions and ideas.

Maybe recompiling all packages are unrealistic, but we can still do something to solve the annoying non-st
ripping bug.
I suggest Hyperbola's developers to write a simple shell script for their users to strip those remaining n
on-stripped files on their systems.

For LibreSSL, if possible, I think we'd better update it.
After all, only about 160 packages require it.  (In other words, we only need to recompile about 160 packges.)

For cryptsetup, only one line editing in https://git.hyperbola.info:50100/softwa … kages.both is enough. I think it's like a piece of cake for any developers.