Notices by nmeum (nmeum@chaos.social)

OpenBSD's httpd and relayd use invalid time formats starting with OpenBSD 7.8 due to a change of the libc's gmtime(3) time zone string. If you are using one of these daemons and wondering why some clients refuse to talk to your server, this might be the cause: https://marc.info/?l=openbsd-tech&m=176627308013655

#OpenBSD

TIL: OSH apparently uses Alpine's aports tree as a testsuite https://oils.pub/blog/2025/12/release-0.37.0.html#building-thousands-of-alpine-linux-packages-with-osh

#AlpineLinux

My favorite new feature of #AlpineLinux 3.22: Support for OpenRC user services. The feature is still considered experimental, but some packages already provide user service files (e.g. dbus, pipewire, kanshi). Further, you can easily define your own in ~/.config/rc/.

If you use a PAM-enabled login method, you just need to install openrc-user-pam, and you're good to go.

For more information refer to: https://github.com/OpenRC/openrc/blob/0.62.2/user-guide.md#user-services----experimental

@navi IEEE Std 1003.1™-2024 ☝️

Yesterday, OpenRC released the first version with experimental user services support. It is already available in Alpine Linux Edge; hence, we can now start experimenting with shipping users services with Alpine packages.

More information: https://github.com/OpenRC/openrc/blob/0.60/user-guide.md#user-services----experimental

#AlpineLinux

POSIX.1-2008 moved support for unnamed semaphores from the semaphore option to the base specification. macOS has never followed up on that. To make things more confusing, it does provide the function prototypes (though with a deprecated declaration annotation) and just has sem_init(3) return -1 unconditionally: https://github.com/apple-oss-distributions/xnu/blob/a5e7219620fa69943647714baaf632196f37249e/libsyscall/wrappers/posix_sem_obsolete.c

Fun!

Days since I have run into issues with macOS's non-conformance to POSIX.1-2008: 0.

@khm @lanodan toybox is unfortunately subject to the same size coding silliness as BusyBox. Considering the effort required for the switch, I am doubtful that it would be a worthwhile improvement.

@lanodan The problem is: BusyBox ed is even worse and not even close to POSIX compliant, hence it was disabled in Alpine.

My train is still running on legacy IP technology :(

@lanodan Right, totally agree, but even then you still need someone to actually check the config.log file manually.

The new enabled-by-default compile errors in GCC 14 can introduce subtle build changes by causing feature test code to no longer compile correctly, thereby breaking feature detection https://github.com/justinethier/cyclone/pull/544

Noticed this by accident, hope this wasn't a common occurrence during GCC 14 rebuilds.

This bogus CVE assignment is getting out of hand. Someone keeps requesting CVEs for the most mundane issues in BusyBox which then creates a support burden on the Alpine end because security scanners start complaining about them, and we need to deal with those complaints somehow. Feels like a lot of time is wasted for nothing really.

The latest and greatest GHC version (9.8.2) is now available in the Alpine Linux Edge repositories and will be included in the upcoming 3.20 stable release.

#AlpineLinux #Haskell

TIL: The Go repository includes a compiled version of BoringSSL as a binary blob https://github.com/golang/go/blob/master/src/crypto/internal/boring/syso/goboringcrypto_linux_amd64.syso

#GoLang