#1112816 cryfs: FTBFS with CMake 4

#1112816#5
Date:
2025-08-31 22:51:55 UTC
From:
To:
Dear maintainer,

During a test rebuild for CMake 4, cryfs failed to rebuild.

Log Summary:
-------------------------------------------------------------------------------
[...]

+------------------------------------------------------------------------------+
| Build                                        Fri, 29 Aug 2025 16:11:36 +0000 |
+------------------------------------------------------------------------------+


Unpack source
-------------
Format: 3.0 (quilt)
Source: cryfs
Binary: cryfs
Architecture: linux-any
Version: 0.11.4-3
Maintainer: David Steele <steele@debian.org>
Homepage: https://www.cryfs.org/
Standards-Version: 4.6.0.1
Vcs-Browser: https://salsa.debian.org/steele/cryfs
Vcs-Git: https://salsa.debian.org/steele/cryfs.git -b debian
Testsuite: autopkgtest
Testsuite-Triggers: haveged, python3-pexpect
Build-Depends: debhelper-compat (= 13), cmake, pkg-config, librange-v3-dev, libspdlog-dev, libcurl4-openssl-dev, libboost-filesystem-dev, libboost-system-dev, libboost-chrono-dev, libboost-program-options-dev, libboost-thread-dev, libcrypto++-dev (>= 5.6.4), libssl-dev, libfuse-dev, python3-all, python3-versioneer
Package-List:
 cryfs deb utils optional arch=linux-any
Checksums-Sha1:
 e6c4fb91c73147d08862d47188ffdd3a5ba64be4 10420289 cryfs_0.11.4.orig.tar.gz
 2ec52bc473792d5675d2a11a6b88cf36e1a4af92 228 cryfs_0.11.4.orig.tar.gz.asc
 85b16544c108fc10eb1bf1e3b6b50c8ccf8d34cf 11208 cryfs_0.11.4-3.debian.tar.xz
Checksums-Sha256:
 6caca6276ce5aec40bf321fd0911b0af7bcffc44c3cb82ff5c5af944d6f75a45 10420289 cryfs_0.11.4.orig.tar.gz
 ba2f1a98d06d7cae9ead60a837e4136114c6a9d21021017fa874d1ee3eb9156e 228 cryfs_0.11.4.orig.tar.gz.asc
 fd7aaf8aefe25673d47494961ac1cc1893c357d0ad6f89fb0656f75f5d6c0582 11208 cryfs_0.11.4-3.debian.tar.xz
Files:
 53171c6b9c365b25ce0e1915d392d7ac 10420289 cryfs_0.11.4.orig.tar.gz
 99fe35f881493924df550b4892bc10dd 228 cryfs_0.11.4.orig.tar.gz.asc
 75e4b7f64549c33b16d04d3f0077abed 11208 cryfs_0.11.4-3.debian.tar.xz
-----BEGIN PGP SIGNATURE-----

iQJGBAEBCgAwFiEEi4SQsUoAbTYxHS3FCVnEo9z4n78FAmeLHWESHHN0ZWVsZUBk
ZWJpYW4ub3JnAAoJEAlZxKPc+J+/0PsP/3koWR5oqC72tGowOR/0n5/YXmjDBPLQ
tNFPyafcV4Z+8ZK2NirbHq3SRAFlilsUfO74P5oqocDKy/5tj9lII8fVy3FJV20h
MASxv4rL7Us4F1yOSfBEIRCY+YXvSbioMxYX0qyPWo6vKah5L8uy1LE7kWb41HY8
i0vjvG//C2I5LepGJo7QCJpke8f34ZQCH5oSHnnywvRMkEARH2za+4geCBkcz15K
txCNL2EFvfXOg0qd4mIjGsxatwzLIX1zr0f+j1okdwbCVxmPurPL3RlP3WEg3UYc
5zWqgOSSVHjBvKUvcXlRUcd1m9/UORyXYGSVQA8ewOgjWUQMxzj5AcBGbHrrQBqT
QjtvltzwJih/U8bjhrMZhozFz0t77DaGNVmyKOWunagjb+FU8xoI1FTLXdE1f+Gq
3iztCDPY2bl1LIjyIXxRYzrv3znZrP11x5co8nfFmCChukbpWjQz452Xaqh2rpjp
ZwDmsSJeCLlP2iRc/LfDIbl0hA3pMWnjOQpfFiA6WOwJw2RY9e5xFJgBdTa4FAoX
dJHV0zw4TWHWBvrc8uiA8TSzqV5LI/SG1W3a5JI6OTLs9nxy0bYBRR5eudbB74EX
Si82IMbSpBFqTYa04AahT5nYp80hK5Nodf+V0ud5A5AgOg3lwHm/EVDhXBSsUMQz
aJKYVrItyJfu
=qT61
-----END PGP SIGNATURE-----

dpkg-source: warning: cannot verify inline signature for ./cryfs_0.11.4-3.dsc: no acceptable signature found
dpkg-source: info: extracting cryfs in /build/reproducible-path/cryfs-0.11.4
dpkg-source: info: unpacking cryfs_0.11.4.orig.tar.gz
dpkg-source: info: unpacking cryfs_0.11.4-3.debian.tar.xz
dpkg-source: info: using patch list from debian/patches/series
dpkg-source: info: applying 002-cryfs-unmount-man.patch
dpkg-source: info: applying 004-cryptopp-armel-cmake.patch
dpkg-source: info: applying 005-gcc-14.patch

Check disk space
----------------

Sufficient free space for build

User Environment
----------------

APT_CONFIG=/var/lib/sbuild/apt.conf
HOME=/sbuild-nonexistent
LANG=C.UTF-8
LC_ALL=C.UTF-8
LOGNAME=sbuild
PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:/usr/games
SHELL=/bin/sh
USER=sbuild

dpkg-buildpackage
-----------------

Command: dpkg-buildpackage --sanitize-env -us -uc -b
dpkg-buildpackage: info: source package cryfs
dpkg-buildpackage: info: source version 0.11.4-3
dpkg-buildpackage: info: source distribution unstable
dpkg-buildpackage: info: source changed by David Steele <steele@debian.org>
 dpkg-source --before-build .
dpkg-buildpackage: info: host architecture arm64
 debian/rules clean
dh clean
   dh_clean
 debian/rules binary
dh binary
   dh_update_autotools_config
   dh_autoreconf
   debian/rules override_dh_auto_configure
make[1]: Entering directory '/build/reproducible-path/cryfs-0.11.4'
mkdir -p build
dpkg-architecture
DEB_BUILD_ARCH=arm64
DEB_BUILD_ARCH_ABI=base
DEB_BUILD_ARCH_BITS=64
DEB_BUILD_ARCH_CPU=arm64
DEB_BUILD_ARCH_ENDIAN=little
DEB_BUILD_ARCH_LIBC=gnu
DEB_BUILD_ARCH_OS=linux
DEB_BUILD_GNU_CPU=aarch64
DEB_BUILD_GNU_SYSTEM=linux-gnu
DEB_BUILD_GNU_TYPE=aarch64-linux-gnu
DEB_BUILD_MULTIARCH=aarch64-linux-gnu
DEB_HOST_ARCH=arm64
DEB_HOST_ARCH_ABI=base
DEB_HOST_ARCH_BITS=64
DEB_HOST_ARCH_CPU=arm64
DEB_HOST_ARCH_ENDIAN=little
DEB_HOST_ARCH_LIBC=gnu
DEB_HOST_ARCH_OS=linux
DEB_HOST_GNU_CPU=aarch64
DEB_HOST_GNU_SYSTEM=linux-gnu
DEB_HOST_GNU_TYPE=aarch64-linux-gnu
DEB_HOST_MULTIARCH=aarch64-linux-gnu
DEB_TARGET_ARCH=arm64
DEB_TARGET_ARCH_ABI=base
DEB_TARGET_ARCH_BITS=64
DEB_TARGET_ARCH_CPU=arm64
DEB_TARGET_ARCH_ENDIAN=little
DEB_TARGET_ARCH_LIBC=gnu
DEB_TARGET_ARCH_OS=linux
DEB_TARGET_GNU_CPU=aarch64
DEB_TARGET_GNU_SYSTEM=linux-gnu
DEB_TARGET_GNU_TYPE=aarch64-linux-gnu
DEB_TARGET_MULTIARCH=aarch64-linux-gnu
if `dpkg-architecture -e armel` || `dpkg-architecture -e armhf` || `dpkg-architecture -e s390x`; then \
    echo "Performing armel build"; \
    (cd build && cmake .. -DDISABLE_ASM=ON -DDEPENDENCY_CONFIG=../cmake-utils/DependenciesFromLocalSystem.cmake -DBUILD_TESTING=ON -DCRYFS_UPDATE_CHECKS=OFF); \
else \
    (cd build && cmake .. -DDEPENDENCY_CONFIG=../cmake-utils/DependenciesFromLocalSystem.cmake -DBUILD_TESTING=ON -DCRYFS_UPDATE_CHECKS=OFF); \
fi
CMake Error at CMakeLists.txt:7 (cmake_policy):
  Policy CMP0065 may not be set to OLD behavior because this version of CMake
  no longer supports it.  The policy was introduced in CMake version 3.4.0,
  and use of NEW behavior is now required.

  Please either update your CMakeLists.txt files to conform to the new
  behavior or use an older version of CMake that still supports the old
  behavior.  Run cmake --help-policy CMP0065 for more information.
-------------------------------------------------------------------------------

The above is just how the build ends and not necessarily the most relevant part.
If required, the full build log is available here (for the next 30 days):
https://debusine.debian.net/artifact/2390719/

The most likely cause of build failures is the removed backwards compatibility for
CMake versions earlier than 3.5. You can find additional information in my
debian-devel announcement:

https://lists.debian.org/debian-devel/2025/04/msg00310.html

About the archive rebuild: The build was made on debusine.debian.net,
using sbuild.

You can find the build task here:
https://debusine.debian.net/work-request/152634/

If this is really a bug in one of the build-depends, please use
reassign and affects, so that this is still visible in the BTS web
page for this package.

Thanks,
Timo

#1112816#12
Date:
2025-09-01 11:51:14 UTC
From:
To:
I have downgraded the bug to non-RC severity temporarily and reverted
CMake in unstable to version 3.31.6. I plan to re-upgrade in about a
month's time. I realize that despite my April announcement, the upload
to unstable came rather surprising, and I don't want to cause
unnecessary pain.

Also, the build log URL has an unfortunate mistake. The correct URL
should include the workspace, i.e.,

https://debusine.debian.net/debian/developers/artifact/XXXX

CMake 4 will also be available in experimental again, so it can be
used to verify that the bug is fixed.

Cheers
Timo

#1112816#17
Date:
2025-09-06 22:35:51 UTC
From:
To:
We believe that the bug you reported is fixed in the latest version of
cryfs, which is due to be installed in the Debian FTP archive.

A summary of the changes between this version and the previous one is
attached.

Thank you for reporting the bug, which will now be closed.  If you
have further comments please address them to 1112816@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
pp.
Adrian Bunk <bunk@debian.org> (supplier of updated cryfs package)

(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmaster@ftp-master.debian.org)
Format: 1.8
Date: Sat, 06 Sep 2025 22:04:23 +0300
Source: cryfs
Architecture: source
Version: 0.11.4-5
Distribution: unstable
Urgency: medium
Maintainer: Debian QA Group <packages@qa.debian.org>
Changed-By: Adrian Bunk <bunk@debian.org>
Closes: 1086870 1108008 1112816 1114085
Changes:
 cryfs (0.11.4-5) unstable; urgency=medium
 .
   * QA upload.
   * Build using the default gcc. (Closes: #1114085)
   * Backport upstream fix for FTBFS with CMake 4. (Closes: #1112816)
   * Use the system libcrypto++. (Closes: #1108008)
   * Use the system GoogleTest.
   * Apply patch from Aurelien Jarno to enable parallel building and
     fix nocheck. (Closes: #1086870)
Checksums-Sha1:
 50f73caeefc9cf2a5665a958afdb422602a08c63 2438 cryfs_0.11.4-5.dsc
 8f5a9b762d3da4aa47e6d9de520a4191e5e44fff 12916 cryfs_0.11.4-5.debian.tar.xz
Checksums-Sha256:
 d5ac876c93e7b8b5f2985acd940d3de90d1cf908707374a59f557b47056b260e 2438 cryfs_0.11.4-5.dsc
 666c0c003053cb21f579a4f75cd8c6bccb6d42019b1ba71e4fc9d0a108a14a02 12916 cryfs_0.11.4-5.debian.tar.xz
Files:
 ed9895194be27ecad406cdfb776653fd 2438 utils optional cryfs_0.11.4-5.dsc
 62323d5ca07b77d68e3578d09d461586 12916 utils optional cryfs_0.11.4-5.debian.tar.xz
-----BEGIN PGP SIGNATURE-----
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=obse
-----END PGP SIGNATURE-----