Note that if you build something relying on $SHELL, it may still fail to
build in chroot.
In the chroot we first use "env -i" to clean the environment variables.
When bash starts with no $SHELL set, it *sets* SHELL=(the login shell
of current user specified in /etc/passwd), but it *does not export this
variable*.
For example:
$ cat > t.c << EOF
#include <stdio.h>
#include <stdlib.h>
int main() { puts (getenv ("SHELL") ?: "(nullptr)"); }
$ ./a.out
/bin/zsh/
$ cc t.c
$ env -i bash -c "echo $SHELL"
/bin/zsh
$ env -i bash -c "./a.out"
(nullptr)
We can remove this now only because Mozilla has added a workaround into
their building system at
https://hg.mozilla.org/mozilla-central/rev/5afe7b911f61 for some Mac
builder, inadvertently fixing our issue.
Link: https://lists.linuxfromscratch.org/sympa/arc/blfs-support/2014-11/msg00050.html
Link: https://lists.linuxfromscratch.org/sympa/arc/blfs-dev/2023-11/msg00136.html
If a newline is inside the comment, it won't be rendered. So we can
avoid an excessive amount of empty lines in seamonkey, and break the
long comments about RELR into multiple lines.
- Remove --enable-optimize=-O2 as it's the default.
- Use RELR for saving several MB from libxul.so, like Firefox.
- Update the comment for --disable-rust-simd.
- Copy a comment with legal implication from Firefox.
"export CC=clang CXX=clang++" is bad because it contaminates the
environment, thus if some packages are built after seamonkey in the same
shell and the user wouldn't have unset CC and CXX, those package may be
built with an untested configuration.
Move them into mozconfig. A test build has shown they still works
there.
Now all sourceforge.net subdomains have a valid SSL certificate. The
changes are automatically done via a sed. I've reviewed the changes and
reverted the changes in archive/*, pst/xml/docbook-xsl.xml, and
stylesheets/lfs-xsl/lfs-l10n.xml. Other changes should (hopefully) be
fine.
We used to sed the double_t definition to allow building, but now
we use clang, so that the build passes without sed. Say that using
GCC breaks the build in command explanations too.
Update to node.js-16.16.0
Update to php-8.1.8
Add security patch for Dovecot (fixes CVE-2022-30550)
Update to seamonkey-2.53.13
Update to gnupg-2.3.7
Mark git as a security update
Fix CVE-2021-4115 in Polkit
Update to cyrus-sasl-2.1.28 (Security Update)
Update to flac-1.3.4 (Security Update)
Update to seamonkey-2.53.11 (Security Update)
Update to feh-3.8.
Update to tree-2.0.1.
Update to tcsh-6.23.02.
Update to iso-codes-4.9.0.
Update to seamonkey-2.53.10.2.
Change required dependencies in pipewire to recommended.
I know it is somewhat useless, but I don't like them for
two reasons: first they cannot be seen, and I do not like things I
cannot see. Second, git highlights them, and this is disturbing...
