Project:Toolchain/23.0 profile transition

A project management page for the 23.0 profile transition.

General information

• The tracker for the 23.0 profiles is bug #876891
• The upgrade instructions can be found on a separate page with the newsitem-in-preparation.
• Progress in implementation is tracked on a timeline page.

Planned specific issues, all arches

bug #675050: Enable GCC's -fstack-clash-protection by default

• control useflag added to gcc-13
• useflag forced on hardened and 23.0
• done
• may want to port also to a later gcc-12 release?

bug #818376: adopt SHT_RELR/DT_RELR relative relocation format

• requires on upgrade dependency on glibc-2.36
• done (via LDFLAGS, only on amd64, x86, ppc, ppc64; otherwise not implemented yet)

bug #831045: remove USE=cli default and inline into ebuilds

• trivial
• done

bug #849875: remove USE=dri default, clean up make.defaults

• trivial
• done

bug #876881: make merged usr the default configuration

• the changes in the profiles are trivial (renaming)
• requires now testing
• what do we do with openrc profiles? we offer both there
• done
• make sure that people do not switch during the profile upgrade

bug #876923: enable "-z relro -z now" by default in the linker

• -z relro is already default since 2017
• -z now is enabled by the hardened code in gcc and can be moved out into vanilla there
• control useflag added to gcc-13
• useflag forced on hardened and 23.0
• done
• may want to port also to a later gcc-12 release?

bug #878119: rename clang to llvm in profile names

• implementation trivial
• done

bug #878157: add systemd/hardened profiles, make systemd/selinux inherit them

• done

bug #917396: get rid of -gentoo- in musl CHOST setting

• CHOST change but nothing else, fairly easy
• done

Planned specific issues, single arches

bug #469490: profile make.defaults {C,CXX,FC,F}FLAGS default to "-O2 -march=i686 -pipe" even for CHOST="i486-pc-linux-gnu"

• x86-specific
• done

bug #515694: Update MIPS profiles to use ABI-specific CHOST

• MIPS-specific
• In default/linux/23.0/mips..., set the correct CHOST. That's all.
• done
• requires on upgrade the usual CHOST-changing acrobatics

bug #882815: transition ppc64le 23.0 profiles to 128-bit IEEE long double ABI

• arch-specific
• Fedora finally switched recently
• GH pull request for gcc plumbing
• migration procedure is same as CHOST change
• done

bug #927298: enable amd64 (x86-64) CET by default in 23.0 profiles

• IBT and SHSTK
• done, works just fine, packages are getting rebuilt

Deferred / postponed issues

bug #876883: time64 migration for 32bit arches

• upstream not many understand the problem and coordination between distros has failed
• first we need to figure out what we want
• probably best to add the time64 variants as new profiles
• postponed

bug #882825: align to 32-bit rather than 16-bit on m68k with -malign-int

• this breaks about just everything and thus makes a complex migration necessary
• adjustments to glibc may be required
• new CHOST?
• postponed

bug #916381: arm64: enable -mbranch-protection=standard by default

• leads to build failures in gcc in the current form
• postponed

bug #917677: move ppc64 to ELFv2 ABI?

• unclear what the benefit is
• postponed