Hi,
today I built the updated 'suricata 7.0.7' and 'libhtp 0.5.49' with Core188 and Core189.
Builds ran without problems - but the resulting binary in /usr/bin was somehow bigger than I expected: 63071K. It should have ~9.9K. It wasn't stripped.
I looked for (e.g.) 'squid 6.11' - the same.
It looks like 'strip' didn't run during the build process...
Can anyone confirm?
Best Matthias
Hello Matthias,
We are still stripping all binaries, but we don’t do it in the build system any more.
We basically strip them when we package everything:
https://git.ipfire.org/?p=ipfire-2.x.git;a=blob;f=lfs/Config;h=9fabe790c3b0e...
That makes the build slightly faster because we only strip what we actually need to strip and not the rest. It also allows us to have some files with debugging information enabled which we normally don’t have access to.
In the final system there should not be any unstripped binaries.
-Michael
On 2 Oct 2024, at 14:14, Matthias Fischer matthias.fischer@ipfire.org wrote:
Hi,
today I built the updated 'suricata 7.0.7' and 'libhtp 0.5.49' with Core188 and Core189.
Builds ran without problems - but the resulting binary in /usr/bin was somehow bigger than I expected: 63071K. It should have ~9.9K. It wasn't stripped.
I looked for (e.g.) 'squid 6.11' - the same.
It looks like 'strip' didn't run during the build process...
Can anyone confirm?
Best Matthias
On 02.10.2024 18:01, Michael Tremer wrote:
Hello Matthias,
Hi,
We are still stripping all binaries, but we don’t do it in the build system any more.
We basically strip them when we package everything:
https://git.ipfire.org/?p=ipfire-2.x.git;a=blob;f=lfs/Config;h=9fabe790c3b0e...
That makes the build slightly faster because we only strip what we actually need to strip and not the rest. It also allows us to have some files with debugging information enabled which we normally don’t have access to.
In the final system there should not be any unstripped binaries.
Thanks for the clarification - no problem. Then I now know what I have to watch out for... ;-)
Best Matthias
-Michael
On 2 Oct 2024, at 14:14, Matthias Fischer matthias.fischer@ipfire.org wrote:
Hi,
today I built the updated 'suricata 7.0.7' and 'libhtp 0.5.49' with Core188 and Core189.
Builds ran without problems - but the resulting binary in /usr/bin was somehow bigger than I expected: 63071K. It should have ~9.9K. It wasn't stripped.
I looked for (e.g.) 'squid 6.11' - the same.
It looks like 'strip' didn't run during the build process...
Can anyone confirm?
Best Matthias