[Pkg-nagios-devel] Bug#914092: monitoring-plugins: wrong apt path when built on a merged-/usr system and run on a non-merged-/usr system

Simon McVittie smcv at debian.org
Mon Nov 19 08:56:31 GMT 2018


Source: monitoring-plugins
Version: 2.2-4
Severity: important
User: md at linux.it
Usertags: usrmerge
X-Debbugs-Cc: reproducible-bugs at lists.alioth.debian.org

Steps to reproduce:

* Have two chroots, containers or complete systems, one with merged /usr
  and one not
* Build monitoring-plugins on the system with merged /usr
* Install and use monitoring-plugins on the system without merged /usr

Expected result:

* The package is functionally equivalent to the package you'd get if it
  had been built on a system without merged /usr
* The absolute paths of standard tools in /usr/bin or /usr/sbin do not
  appear in the package's content as paths in /bin or /sbin
* Everything works as intended

Actual result:

* /usr/lib/nagios/plugins/check_apt contains what appears to be a string
  constant for /bin/apt-get
* If this is a command that it invokes, then it will not work on
  non-merged-/usr systems where only /usr/bin/apt-get exists

A merged-/usr system can be obtained by installing with
debootstrap >= 1.0.102 or debootstrap --merged-usr, or by installing the
usrmerge package. A non-merged-/usr system can be obtained by installing
with debootstrap --no-merged-usr (or upgrading from an older release) and
not installing usrmerge.

Recent tests on tests.reproducible-builds.org use unmerged /usr for the
first build and merged /usr for the second, as a way to detect some
issues in this class.

Because monitoring-plugins uses Autoconf, this can probably be fixed by
passing APT_GET="/usr/bin/apt-get" as an additional command-line option
when invoking dh_auto_configure or configure.

    smcv



More information about the Pkg-nagios-devel mailing list