strip is missing?

strip is missing?

[Matthias Fischer]

[-- Attachment #1: Type: text/plain, Size: 392 bytes --]

Hi,

today I built the updated 'suricata 7.0.7' and 'libhtp 0.5.49' with
Core188 and Core189.

Builds ran without problems - but the resulting binary in /usr/bin was
somehow bigger than I expected: 63071K. It should have ~9.9K.
It wasn't stripped.

I looked for (e.g.) 'squid 6.11' - the same.

It looks like 'strip' didn't run during the build process...

Can anyone confirm?

Best
Matthias

Re: strip is missing?

[Michael Tremer]

[-- Attachment #1: Type: text/plain, Size: 1125 bytes --]

Hello Matthias,

We are still stripping all binaries, but we don’t do it in the build system any more.

We basically strip them when we package everything:

  https://git.ipfire.org/?p=ipfire-2.x.git;a=blob;f=lfs/Config;h=9fabe790c3b0e1f7dcba1b86593e59da0b42520a;hb=HEAD#l371

That makes the build slightly faster because we only strip what we actually need to strip and not the rest. It also allows us to have some files with debugging information enabled which we normally don’t have access to.

In the final system there should not be any unstripped binaries.

-Michael

> On 2 Oct 2024, at 14:14, Matthias Fischer <matthias.fischer(a)ipfire.org> wrote:
> 
> Hi,
> 
> today I built the updated 'suricata 7.0.7' and 'libhtp 0.5.49' with
> Core188 and Core189.
> 
> Builds ran without problems - but the resulting binary in /usr/bin was
> somehow bigger than I expected: 63071K. It should have ~9.9K.
> It wasn't stripped.
> 
> I looked for (e.g.) 'squid 6.11' - the same.
> 
> It looks like 'strip' didn't run during the build process...
> 
> Can anyone confirm?
> 
> Best
> Matthias

Re: strip is missing?

[Matthias Fischer]

[-- Attachment #1: Type: text/plain, Size: 1340 bytes --]

On 02.10.2024 18:01, Michael Tremer wrote:
> Hello Matthias,

Hi,

> We are still stripping all binaries, but we don’t do it in the build system any more.
> 
> We basically strip them when we package everything:
> 
>   https://git.ipfire.org/?p=ipfire-2.x.git;a=blob;f=lfs/Config;h=9fabe790c3b0e1f7dcba1b86593e59da0b42520a;hb=HEAD#l371
> 
> That makes the build slightly faster because we only strip what we actually need to strip and not the rest. It also allows us to have some files with debugging information enabled which we normally don’t have access to.
> 
> In the final system there should not be any unstripped binaries.

Thanks for the clarification - no problem. Then I now know what I have
to watch out for... ;-)

Best
Matthias

> -Michael
> 
>> On 2 Oct 2024, at 14:14, Matthias Fischer <matthias.fischer(a)ipfire.org> wrote:
>> 
>> Hi,
>> 
>> today I built the updated 'suricata 7.0.7' and 'libhtp 0.5.49' with
>> Core188 and Core189.
>> 
>> Builds ran without problems - but the resulting binary in /usr/bin was
>> somehow bigger than I expected: 63071K. It should have ~9.9K.
>> It wasn't stripped.
>> 
>> I looked for (e.g.) 'squid 6.11' - the same.
>> 
>> It looks like 'strip' didn't run during the build process...
>> 
>> Can anyone confirm?
>> 
>> Best
>> Matthias
>