#1133535 libreswan: ftbfs with GCC-16

#1133535#5
Date:
2026-04-13 13:06:24 UTC
From:
To:
Hi,

libreswan fails to build in a test rebuild on at least amd64 and arm64 with
gcc-16/g++-16, but builds properly with gcc-15/g++-15. The severity of this
report will be raised before the forky release.

The full build log can be found at:
https://people.debian.org/~ema/gcc-16-rebuilds/output-1/libreswan_arm64.build.xz

The last lines of the build log are at the end of this report.

To build with GCC 16, either set CC=gcc-16 CXX=g++-16 explicitly,
or install the gcc, g++, gfortran, ... packages from experimental.

  apt-get -t=experimental install g++

Common build failures include unused (but set) variables, array subscripts
partly outside array bounds, and new/dropped symbols in Debian symbols files.
For other C/C++ related build failures see the porting guide at
http://gcc.gnu.org/gcc-16/porting_to.html

Please only close this issue after double-checking that the package can be
built correctly with GCC 16.

Please do not reassign this bug to another package. If a fix in another package
is required, then file a bug for the other package (or clone), and mark this
bug as blocked by the bug in the other package.

[...]


	-o ../../OBJ.linux.arm64/programs/pluto/nss_crl_import.o \
	-c /build/reproducible-path/libreswan-5.2/programs/pluto/nss_crl_import.c
cc -pthread -std=gnu99 -g -Werror -Wall -Wextra -Wformat -Wformat-nonliteral -Wformat-security -Wundef -Wmissing-declarations -Wredundant-decls -Wnested-externs -O2 -U_FORTIFY_SOURCE -D_FORTIFY_SOURCE=2 -fstack-protector-all -fno-strict-aliasing -fPIE -DPIE -DIPSEC_EXECDIR=\"/usr/libexec/ipsec\" -DIPSEC_SBINDIR=\"/usr/sbin\" -DIPSEC_RUNDIR=\"/run/pluto\" -DIPSEC_CONF=\"/etc/ipsec.conf\" -DIPSEC_SECRETS=\"/etc/ipsec.secrets\" -DIPSEC_CONFDDIR=\"/etc/ipsec.d\" -DIPSEC_VARDIR=\"/var\" -DIPSEC_NSSDIR=\"/var/lib/ipsec/nss\" -DNSS_BINDIR=\"/usr/bin\" -DNSS_IPSEC_PROFILE -DUSE_IKEv1 -DKERNEL_XFRM -DUSE_XFRM_INTERFACE -DXFRM_LIFETIME_DEFAULT=30 -DUSE_DNSSEC -DDEFAULT_DNSSEC_ROOTKEY_FILE=\"/usr/share/dns/root.key\" -DHAVE_LABELED_IPSEC -DLIBCURL -DUSE_LINUX_AUDIT -DUSE_SYSTEMD_WATCHDOG -DLIBLDAP -DHAVE_NM -DUSE_CAT -DUSE_NFLOG -DUSE_NFTABLES -DUSE_PAM_AUTH -DUSE_3DES -DUSE_AES -DUSE_CAMELLIA -DUSE_CHACHA -DUSE_DH31 -DUSE_MD5 -DUSE_SHA1 -DUSE_SHA2 -DUSE_PRF_AES_XCBC -DUSE_NSS_KDF -DIPSEC_SYSCONFDIR=\"/etc\" -DPOLICYGROUPSDIR=\"/etc/ipsec.d/policies\" -DFORCE_PR_ASSERT -DUSE_FORK=1 -DUSE_VFORK=0 -DUSE_DAEMON=0 -DUSE_PTHREAD_SETSCHEDPRIO=1 -DGCC_LINT -DHAVE_LIBCAP_NG \
	-I../../OBJ.linux.arm64/programs/pluto -I../../include -I/usr/include/nss -I/usr/include/nspr -I/build/reproducible-path/libreswan-5.2/programs/pluto/linux-copy \
	-DHERE_FILENAME='"programs/pluto/root_certs.c"' \
	-g -O2 -Werror=implicit-function-declaration -ffile-prefix-map=/build/reproducible-path/libreswan-5.2=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -mbranch-protection=standard \
	-MF ../../OBJ.linux.arm64/programs/pluto/root_certs.d \
	-MP -MMD -MT root_certs.o \
	-o ../../OBJ.linux.arm64/programs/pluto/root_certs.o \
	-c /build/reproducible-path/libreswan-5.2/programs/pluto/root_certs.c
cc -pthread -std=gnu99 -g -Werror -Wall -Wextra -Wformat -Wformat-nonliteral -Wformat-security -Wundef -Wmissing-declarations -Wredundant-decls -Wnested-externs -O2 -U_FORTIFY_SOURCE -D_FORTIFY_SOURCE=2 -fstack-protector-all -fno-strict-aliasing -fPIE -DPIE -DIPSEC_EXECDIR=\"/usr/libexec/ipsec\" -DIPSEC_SBINDIR=\"/usr/sbin\" -DIPSEC_RUNDIR=\"/run/pluto\" -DIPSEC_CONF=\"/etc/ipsec.conf\" -DIPSEC_SECRETS=\"/etc/ipsec.secrets\" -DIPSEC_CONFDDIR=\"/etc/ipsec.d\" -DIPSEC_VARDIR=\"/var\" -DIPSEC_NSSDIR=\"/var/lib/ipsec/nss\" -DNSS_BINDIR=\"/usr/bin\" -DNSS_IPSEC_PROFILE -DUSE_IKEv1 -DKERNEL_XFRM -DUSE_XFRM_INTERFACE -DXFRM_LIFETIME_DEFAULT=30 -DUSE_DNSSEC -DDEFAULT_DNSSEC_ROOTKEY_FILE=\"/usr/share/dns/root.key\" -DHAVE_LABELED_IPSEC -DLIBCURL -DUSE_LINUX_AUDIT -DUSE_SYSTEMD_WATCHDOG -DLIBLDAP -DHAVE_NM -DUSE_CAT -DUSE_NFLOG -DUSE_NFTABLES -DUSE_PAM_AUTH -DUSE_3DES -DUSE_AES -DUSE_CAMELLIA -DUSE_CHACHA -DUSE_DH31 -DUSE_MD5 -DUSE_SHA1 -DUSE_SHA2 -DUSE_PRF_AES_XCBC -DUSE_NSS_KDF -DIPSEC_SYSCONFDIR=\"/etc\" -DPOLICYGROUPSDIR=\"/etc/ipsec.d/policies\" -DFORCE_PR_ASSERT -DUSE_FORK=1 -DUSE_VFORK=0 -DUSE_DAEMON=0 -DUSE_PTHREAD_SETSCHEDPRIO=1 -DGCC_LINT -DHAVE_LIBCAP_NG \
	-I../../OBJ.linux.arm64/programs/pluto -I../../include -I/usr/include/nss -I/usr/include/nspr -I/build/reproducible-path/libreswan-5.2/programs/pluto/linux-copy \
	-DHERE_FILENAME='"programs/pluto/pluto_timing.c"' \
	-g -O2 -Werror=implicit-function-declaration -ffile-prefix-map=/build/reproducible-path/libreswan-5.2=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -mbranch-protection=standard \
	-MF ../../OBJ.linux.arm64/programs/pluto/pluto_timing.d \
	-MP -MMD -MT pluto_timing.o \
	-o ../../OBJ.linux.arm64/programs/pluto/pluto_timing.o \
	-c /build/reproducible-path/libreswan-5.2/programs/pluto/pluto_timing.c
cc -pthread -std=gnu99 -g -Werror -Wall -Wextra -Wformat -Wformat-nonliteral -Wformat-security -Wundef -Wmissing-declarations -Wredundant-decls -Wnested-externs -O2 -U_FORTIFY_SOURCE -D_FORTIFY_SOURCE=2 -fstack-protector-all -fno-strict-aliasing -fPIE -DPIE -DIPSEC_EXECDIR=\"/usr/libexec/ipsec\" -DIPSEC_SBINDIR=\"/usr/sbin\" -DIPSEC_RUNDIR=\"/run/pluto\" -DIPSEC_CONF=\"/etc/ipsec.conf\" -DIPSEC_SECRETS=\"/etc/ipsec.secrets\" -DIPSEC_CONFDDIR=\"/etc/ipsec.d\" -DIPSEC_VARDIR=\"/var\" -DIPSEC_NSSDIR=\"/var/lib/ipsec/nss\" -DNSS_BINDIR=\"/usr/bin\" -DNSS_IPSEC_PROFILE -DUSE_IKEv1 -DKERNEL_XFRM -DUSE_XFRM_INTERFACE -DXFRM_LIFETIME_DEFAULT=30 -DUSE_DNSSEC -DDEFAULT_DNSSEC_ROOTKEY_FILE=\"/usr/share/dns/root.key\" -DHAVE_LABELED_IPSEC -DLIBCURL -DUSE_LINUX_AUDIT -DUSE_SYSTEMD_WATCHDOG -DLIBLDAP -DHAVE_NM -DUSE_CAT -DUSE_NFLOG -DUSE_NFTABLES -DUSE_PAM_AUTH -DUSE_3DES -DUSE_AES -DUSE_CAMELLIA -DUSE_CHACHA -DUSE_DH31 -DUSE_MD5 -DUSE_SHA1 -DUSE_SHA2 -DUSE_PRF_AES_XCBC -DUSE_NSS_KDF -DIPSEC_SYSCONFDIR=\"/etc\" -DPOLICYGROUPSDIR=\"/etc/ipsec.d/policies\" -DFORCE_PR_ASSERT -DUSE_FORK=1 -DUSE_VFORK=0 -DUSE_DAEMON=0 -DUSE_PTHREAD_SETSCHEDPRIO=1 -DGCC_LINT -DHAVE_LIBCAP_NG \
	-I../../OBJ.linux.arm64/programs/pluto -I../../include -I/usr/include/nss -I/usr/include/nspr -I/build/reproducible-path/libreswan-5.2/programs/pluto/linux-copy \
	-DHERE_FILENAME='"programs/pluto/nss_cert_reread.c"' \
	-g -O2 -Werror=implicit-function-declaration -ffile-prefix-map=/build/reproducible-path/libreswan-5.2=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -mbranch-protection=standard \
	-MF ../../OBJ.linux.arm64/programs/pluto/nss_cert_reread.d \
	-MP -MMD -MT nss_cert_reread.o \
	-o ../../OBJ.linux.arm64/programs/pluto/nss_cert_reread.o \
	-c /build/reproducible-path/libreswan-5.2/programs/pluto/nss_cert_reread.c
cc -pthread -std=gnu99 -g -Werror -Wall -Wextra -Wformat -Wformat-nonliteral -Wformat-security -Wundef -Wmissing-declarations -Wredundant-decls -Wnested-externs -O2 -U_FORTIFY_SOURCE -D_FORTIFY_SOURCE=2 -fstack-protector-all -fno-strict-aliasing -fPIE -DPIE -DIPSEC_EXECDIR=\"/usr/libexec/ipsec\" -DIPSEC_SBINDIR=\"/usr/sbin\" -DIPSEC_RUNDIR=\"/run/pluto\" -DIPSEC_CONF=\"/etc/ipsec.conf\" -DIPSEC_SECRETS=\"/etc/ipsec.secrets\" -DIPSEC_CONFDDIR=\"/etc/ipsec.d\" -DIPSEC_VARDIR=\"/var\" -DIPSEC_NSSDIR=\"/var/lib/ipsec/nss\" -DNSS_BINDIR=\"/usr/bin\" -DNSS_IPSEC_PROFILE -DUSE_IKEv1 -DKERNEL_XFRM -DUSE_XFRM_INTERFACE -DXFRM_LIFETIME_DEFAULT=30 -DUSE_DNSSEC -DDEFAULT_DNSSEC_ROOTKEY_FILE=\"/usr/share/dns/root.key\" -DHAVE_LABELED_IPSEC -DLIBCURL -DUSE_LINUX_AUDIT -DUSE_SYSTEMD_WATCHDOG -DLIBLDAP -DHAVE_NM -DUSE_CAT -DUSE_NFLOG -DUSE_NFTABLES -DUSE_PAM_AUTH -DUSE_3DES -DUSE_AES -DUSE_CAMELLIA -DUSE_CHACHA -DUSE_DH31 -DUSE_MD5 -DUSE_SHA1 -DUSE_SHA2 -DUSE_PRF_AES_XCBC -DUSE_NSS_KDF -DIPSEC_SYSCONFDIR=\"/etc\" -DPOLICYGROUPSDIR=\"/etc/ipsec.d/policies\" -DFORCE_PR_ASSERT -DUSE_FORK=1 -DUSE_VFORK=0 -DUSE_DAEMON=0 -DUSE_PTHREAD_SETSCHEDPRIO=1 -DGCC_LINT -DHAVE_LIBCAP_NG \
	-I../../OBJ.linux.arm64/programs/pluto -I../../include -I/usr/include/nss -I/usr/include/nspr -I/build/reproducible-path/libreswan-5.2/programs/pluto/linux-copy \
	-DHERE_FILENAME='"programs/pluto/rekeyfuzz.c"' \
	-g -O2 -Werror=implicit-function-declaration -ffile-prefix-map=/build/reproducible-path/libreswan-5.2=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -mbranch-protection=standard \
	-MF ../../OBJ.linux.arm64/programs/pluto/rekeyfuzz.d \
	-MP -MMD -MT rekeyfuzz.o \
	-o ../../OBJ.linux.arm64/programs/pluto/rekeyfuzz.o \
	-c /build/reproducible-path/libreswan-5.2/programs/pluto/rekeyfuzz.c
xmlto  man libreswan.7.xml -o ../../OBJ.linux.arm64/programs/pluto
xmlto  man ipsec-pluto.8.xml -o ../../OBJ.linux.arm64/programs/pluto
xmlto  html-nochunks -m ../../mk/man-html-link.xsl libreswan.7.xml -o ../../OBJ.linux.arm64/html
xmlto  html-nochunks -m ../../mk/man-html-link.xsl ipsec-pluto.8.xml -o ../../OBJ.linux.arm64/html
/build/reproducible-path/libreswan-5.2/programs/pluto/ikev2_proposals.c: In function ‘process_transforms’:
/build/reproducible-path/libreswan-5.2/programs/pluto/ikev2_proposals.c:443:46: error: variable ‘local_proposal’ set but not used [-Werror=unused-but-set-variable=]
  443 |                 const struct ikev2_proposal *local_proposal;
      |                                              ^~~~~~~~~~~~~~
/build/reproducible-path/libreswan-5.2/programs/pluto/ikev2_proposals.c:692:32: error: variable ‘local_proposal’ set but not used [-Werror=unused-but-set-variable=]
  692 |         struct ikev2_proposal *local_proposal;
      |                                ^~~~~~~~~~~~~~
sed -e "s:@@DOCKER_PLUTONOFORK@@:--nofork:g" -e "s:@@INITSYSTEM@@:systemd:g" -e "s:@@IPSECVERSION@@:5.2:g" -e "s:@@MODPROBEARGS@@:--quiet --use-blacklist:g" -e "s:@@MODPROBEBIN@@:modprobe:g" -e "s:@@SD_PLUTO_OPTIONS@@:--leak-detective:g" -e "s:@@SD_RESTART_TYPE@@:on-failure:g" -e "s:@@SD_TYPE@@:notify:g" -e "s:@@SD_WATCHDOGSEC@@:200:g" -e "s:@@SHELL_BINARY@@:/bin/sh:g" -e "s:@@USE_DEFAULT_CONNS@@::g"  -e 's:@@LIBEXECDIR@@:/usr/libexec/ipsec:g'  -e 's:@@IPSEC_EXECDIR@@:/usr/libexec/ipsec:g'  -e 's:@@SBINDIR@@:/usr/sbin:g'  -e 's:@@MANDIR@@:/usr/share/man:'  -e 's:@@SYSCONFDIR@@:/etc:g'  -e 's:@@RC_D_DIR@@:/etc/rc.d:g'  -e 's:@@EXAMPLE_RC_D_DIR@@:/usr/share/doc/libreswan/rc.d:g'  -e 's:@@INIT_D_DIR@@:/etc/init.d:g'  -e 's:@@EXAMPLE_INIT_D_DIR@@:/usr/share/doc/libreswan/init.d:g'  -e 's:@@RUNDIR@@:/run/pluto:g'  -e 's:@@IPSEC_CONF@@:/etc/ipsec.conf:g'  -e 's:@@IPSEC_SECRETS@@:/etc/ipsec.secrets:g'  -e 's:@@IPSEC_CONFDDIR@@:/etc/ipsec.d:g'  -e 's:@@EXAMPLE_IPSEC_CONFDDIR@@:/usr/share/doc/libreswan/ipsec.d:g'  -e 's:@@EXAMPLE_IPSEC_SYSCONFDIR@@:/usr/share/doc/libreswan:g'  -e 's:@@VARDIR@@:/var:g'  -e 's:@@LOGDIR@@:/var/log:g'  -e 's:@@LOGROTATEDDIR@@:/etc/logrotate.d:g'  -e 's:@@EXAMPLE_LOGROTATEDDIR@@:/usr/share/doc/libreswan/logrotate.d:g'  -e 's:@@IPSEC_NSSDIR@@:/var/lib/ipsec/nss:g'  -e 's:@@NSS_BINDIR@@:/usr/bin:g'  -e 's:@@USE_CAT@@:true:g'  -e 's:@@USE_NFLOG@@:true:g'  -e 's:@@USE_IPTABLES@@:false:g'  -e 's:@@USE_NFTABLES@@:true:g'  -e 's:@@PAMCONFDIR@@:/etc/pam.d:g'  -e 's:@@EXAMPLEPAMCONFDIR@@:/usr/share/doc/libreswan/pam.d:g' -i ../../OBJ.linux.arm64/html/libreswan.7.html
touch ../../OBJ.linux.arm64/programs/pluto/libreswan.7.html
sed -e "s:@@DOCKER_PLUTONOFORK@@:--nofork:g" -e "s:@@INITSYSTEM@@:systemd:g" -e "s:@@IPSECVERSION@@:5.2:g" -e "s:@@MODPROBEARGS@@:--quiet --use-blacklist:g" -e "s:@@MODPROBEBIN@@:modprobe:g" -e "s:@@SD_PLUTO_OPTIONS@@:--leak-detective:g" -e "s:@@SD_RESTART_TYPE@@:on-failure:g" -e "s:@@SD_TYPE@@:notify:g" -e "s:@@SD_WATCHDOGSEC@@:200:g" -e "s:@@SHELL_BINARY@@:/bin/sh:g" -e "s:@@USE_DEFAULT_CONNS@@::g"  -e 's:@@LIBEXECDIR@@:/usr/libexec/ipsec:g'  -e 's:@@IPSEC_EXECDIR@@:/usr/libexec/ipsec:g'  -e 's:@@SBINDIR@@:/usr/sbin:g'  -e 's:@@MANDIR@@:/usr/share/man:'  -e 's:@@SYSCONFDIR@@:/etc:g'  -e 's:@@RC_D_DIR@@:/etc/rc.d:g'  -e 's:@@EXAMPLE_RC_D_DIR@@:/usr/share/doc/libreswan/rc.d:g'  -e 's:@@INIT_D_DIR@@:/etc/init.d:g'  -e 's:@@EXAMPLE_INIT_D_DIR@@:/usr/share/doc/libreswan/init.d:g'  -e 's:@@RUNDIR@@:/run/pluto:g'  -e 's:@@IPSEC_CONF@@:/etc/ipsec.conf:g'  -e 's:@@IPSEC_SECRETS@@:/etc/ipsec.secrets:g'  -e 's:@@IPSEC_CONFDDIR@@:/etc/ipsec.d:g'  -e 's:@@EXAMPLE_IPSEC_CONFDDIR@@:/usr/share/doc/libreswan/ipsec.d:g'  -e 's:@@EXAMPLE_IPSEC_SYSCONFDIR@@:/usr/share/doc/libreswan:g'  -e 's:@@VARDIR@@:/var:g'  -e 's:@@LOGDIR@@:/var/log:g'  -e 's:@@LOGROTATEDDIR@@:/etc/logrotate.d:g'  -e 's:@@EXAMPLE_LOGROTATEDDIR@@:/usr/share/doc/libreswan/logrotate.d:g'  -e 's:@@IPSEC_NSSDIR@@:/var/lib/ipsec/nss:g'  -e 's:@@NSS_BINDIR@@:/usr/bin:g'  -e 's:@@USE_CAT@@:true:g'  -e 's:@@USE_NFLOG@@:true:g'  -e 's:@@USE_IPTABLES@@:false:g'  -e 's:@@USE_NFTABLES@@:true:g'  -e 's:@@PAMCONFDIR@@:/etc/pam.d:g'  -e 's:@@EXAMPLEPAMCONFDIR@@:/usr/share/doc/libreswan/pam.d:g' -i ../../OBJ.linux.arm64/html/ipsec-pluto.8.html
touch ../../OBJ.linux.arm64/programs/pluto/ipsec-pluto.8.html
Note: Writing ipsec-pluto.8
Note: Writing pluto.8 (soelim stub)
sed -e "s:@@DOCKER_PLUTONOFORK@@:--nofork:g" -e "s:@@INITSYSTEM@@:systemd:g" -e "s:@@IPSECVERSION@@:5.2:g" -e "s:@@MODPROBEARGS@@:--quiet --use-blacklist:g" -e "s:@@MODPROBEBIN@@:modprobe:g" -e "s:@@SD_PLUTO_OPTIONS@@:--leak-detective:g" -e "s:@@SD_RESTART_TYPE@@:on-failure:g" -e "s:@@SD_TYPE@@:notify:g" -e "s:@@SD_WATCHDOGSEC@@:200:g" -e "s:@@SHELL_BINARY@@:/bin/sh:g" -e "s:@@USE_DEFAULT_CONNS@@::g"  -e 's:@@LIBEXECDIR@@:/usr/libexec/ipsec:g'  -e 's:@@IPSEC_EXECDIR@@:/usr/libexec/ipsec:g'  -e 's:@@SBINDIR@@:/usr/sbin:g'  -e 's:@@MANDIR@@:/usr/share/man:'  -e 's:@@SYSCONFDIR@@:/etc:g'  -e 's:@@RC_D_DIR@@:/etc/rc.d:g'  -e 's:@@EXAMPLE_RC_D_DIR@@:/usr/share/doc/libreswan/rc.d:g'  -e 's:@@INIT_D_DIR@@:/etc/init.d:g'  -e 's:@@EXAMPLE_INIT_D_DIR@@:/usr/share/doc/libreswan/init.d:g'  -e 's:@@RUNDIR@@:/run/pluto:g'  -e 's:@@IPSEC_CONF@@:/etc/ipsec.conf:g'  -e 's:@@IPSEC_SECRETS@@:/etc/ipsec.secrets:g'  -e 's:@@IPSEC_CONFDDIR@@:/etc/ipsec.d:g'  -e 's:@@EXAMPLE_IPSEC_CONFDDIR@@:/usr/share/doc/libreswan/ipsec.d:g'  -e 's:@@EXAMPLE_IPSEC_SYSCONFDIR@@:/usr/share/doc/libreswan:g'  -e 's:@@VARDIR@@:/var:g'  -e 's:@@LOGDIR@@:/var/log:g'  -e 's:@@LOGROTATEDDIR@@:/etc/logrotate.d:g'  -e 's:@@EXAMPLE_LOGROTATEDDIR@@:/usr/share/doc/libreswan/logrotate.d:g'  -e 's:@@IPSEC_NSSDIR@@:/var/lib/ipsec/nss:g'  -e 's:@@NSS_BINDIR@@:/usr/bin:g'  -e 's:@@USE_CAT@@:true:g'  -e 's:@@USE_NFLOG@@:true:g'  -e 's:@@USE_IPTABLES@@:false:g'  -e 's:@@USE_NFTABLES@@:true:g'  -e 's:@@PAMCONFDIR@@:/etc/pam.d:g'  -e 's:@@EXAMPLEPAMCONFDIR@@:/usr/share/doc/libreswan/pam.d:g' -i  ../../OBJ.linux.arm64/programs/pluto/ipsec-pluto.8
sed -e "s:@@DOCKER_PLUTONOFORK@@:--nofork:g" -e "s:@@INITSYSTEM@@:systemd:g" -e "s:@@IPSECVERSION@@:5.2:g" -e "s:@@MODPROBEARGS@@:--quiet --use-blacklist:g" -e "s:@@MODPROBEBIN@@:modprobe:g" -e "s:@@SD_PLUTO_OPTIONS@@:--leak-detective:g" -e "s:@@SD_RESTART_TYPE@@:on-failure:g" -e "s:@@SD_TYPE@@:notify:g" -e "s:@@SD_WATCHDOGSEC@@:200:g" -e "s:@@SHELL_BINARY@@:/bin/sh:g" -e "s:@@USE_DEFAULT_CONNS@@::g"  -e 's:@@LIBEXECDIR@@:/usr/libexec/ipsec:g'  -e 's:@@IPSEC_EXECDIR@@:/usr/libexec/ipsec:g'  -e 's:@@SBINDIR@@:/usr/sbin:g'  -e 's:@@MANDIR@@:/usr/share/man:'  -e 's:@@SYSCONFDIR@@:/etc:g'  -e 's:@@RC_D_DIR@@:/etc/rc.d:g'  -e 's:@@EXAMPLE_RC_D_DIR@@:/usr/share/doc/libreswan/rc.d:g'  -e 's:@@INIT_D_DIR@@:/etc/init.d:g'  -e 's:@@EXAMPLE_INIT_D_DIR@@:/usr/share/doc/libreswan/init.d:g'  -e 's:@@RUNDIR@@:/run/pluto:g'  -e 's:@@IPSEC_CONF@@:/etc/ipsec.conf:g'  -e 's:@@IPSEC_SECRETS@@:/etc/ipsec.secrets:g'  -e 's:@@IPSEC_CONFDDIR@@:/etc/ipsec.d:g'  -e 's:@@EXAMPLE_IPSEC_CONFDDIR@@:/usr/share/doc/libreswan/ipsec.d:g'  -e 's:@@EXAMPLE_IPSEC_SYSCONFDIR@@:/usr/share/doc/libreswan:g'  -e 's:@@VARDIR@@:/var:g'  -e 's:@@LOGDIR@@:/var/log:g'  -e 's:@@LOGROTATEDDIR@@:/etc/logrotate.d:g'  -e 's:@@EXAMPLE_LOGROTATEDDIR@@:/usr/share/doc/libreswan/logrotate.d:g'  -e 's:@@IPSEC_NSSDIR@@:/var/lib/ipsec/nss:g'  -e 's:@@NSS_BINDIR@@:/usr/bin:g'  -e 's:@@USE_CAT@@:true:g'  -e 's:@@USE_NFLOG@@:true:g'  -e 's:@@USE_IPTABLES@@:false:g'  -e 's:@@USE_NFTABLES@@:true:g'  -e 's:@@PAMCONFDIR@@:/etc/pam.d:g'  -e 's:@@EXAMPLEPAMCONFDIR@@:/usr/share/doc/libreswan/pam.d:g' -i  ../../OBJ.linux.arm64/programs/pluto/pluto.8
touch ../../OBJ.linux.arm64/programs/pluto/ipsec-pluto.8.man
Note: Writing libreswan.7
sed -e "s:@@DOCKER_PLUTONOFORK@@:--nofork:g" -e "s:@@INITSYSTEM@@:systemd:g" -e "s:@@IPSECVERSION@@:5.2:g" -e "s:@@MODPROBEARGS@@:--quiet --use-blacklist:g" -e "s:@@MODPROBEBIN@@:modprobe:g" -e "s:@@SD_PLUTO_OPTIONS@@:--leak-detective:g" -e "s:@@SD_RESTART_TYPE@@:on-failure:g" -e "s:@@SD_TYPE@@:notify:g" -e "s:@@SD_WATCHDOGSEC@@:200:g" -e "s:@@SHELL_BINARY@@:/bin/sh:g" -e "s:@@USE_DEFAULT_CONNS@@::g"  -e 's:@@LIBEXECDIR@@:/usr/libexec/ipsec:g'  -e 's:@@IPSEC_EXECDIR@@:/usr/libexec/ipsec:g'  -e 's:@@SBINDIR@@:/usr/sbin:g'  -e 's:@@MANDIR@@:/usr/share/man:'  -e 's:@@SYSCONFDIR@@:/etc:g'  -e 's:@@RC_D_DIR@@:/etc/rc.d:g'  -e 's:@@EXAMPLE_RC_D_DIR@@:/usr/share/doc/libreswan/rc.d:g'  -e 's:@@INIT_D_DIR@@:/etc/init.d:g'  -e 's:@@EXAMPLE_INIT_D_DIR@@:/usr/share/doc/libreswan/init.d:g'  -e 's:@@RUNDIR@@:/run/pluto:g'  -e 's:@@IPSEC_CONF@@:/etc/ipsec.conf:g'  -e 's:@@IPSEC_SECRETS@@:/etc/ipsec.secrets:g'  -e 's:@@IPSEC_CONFDDIR@@:/etc/ipsec.d:g'  -e 's:@@EXAMPLE_IPSEC_CONFDDIR@@:/usr/share/doc/libreswan/ipsec.d:g'  -e 's:@@EXAMPLE_IPSEC_SYSCONFDIR@@:/usr/share/doc/libreswan:g'  -e 's:@@VARDIR@@:/var:g'  -e 's:@@LOGDIR@@:/var/log:g'  -e 's:@@LOGROTATEDDIR@@:/etc/logrotate.d:g'  -e 's:@@EXAMPLE_LOGROTATEDDIR@@:/usr/share/doc/libreswan/logrotate.d:g'  -e 's:@@IPSEC_NSSDIR@@:/var/lib/ipsec/nss:g'  -e 's:@@NSS_BINDIR@@:/usr/bin:g'  -e 's:@@USE_CAT@@:true:g'  -e 's:@@USE_NFLOG@@:true:g'  -e 's:@@USE_IPTABLES@@:false:g'  -e 's:@@USE_NFTABLES@@:true:g'  -e 's:@@PAMCONFDIR@@:/etc/pam.d:g'  -e 's:@@EXAMPLEPAMCONFDIR@@:/usr/share/doc/libreswan/pam.d:g' -i  ../../OBJ.linux.arm64/programs/pluto/libreswan.7
touch ../../OBJ.linux.arm64/programs/pluto/libreswan.7.man
cc1: all warnings being treated as errors
make[5]: *** [../../mk/rules.mk:63: ikev2_proposals.o] Error 1
make[5]: *** Waiting for unfinished jobs....
make[4]: *** [../../mk/targets.mk:84: all] Error 2
make[4]: Leaving directory '/build/reproducible-path/libreswan-5.2/programs/pluto'
make[3]: *** [../mk/targets.mk:84: recursive-all] Error 2
make[3]: Leaving directory '/build/reproducible-path/libreswan-5.2/programs'
make[2]: *** [/build/reproducible-path/libreswan-5.2/mk/targets.mk:84: recursive-all] Error 2
make[2]: Leaving directory '/build/reproducible-path/libreswan-5.2'
dh_auto_build: error: make -j128 INSTALL="install --strip-program=true" programs ARCH=arm64 OBJDIR=OBJ.linux.arm64 IPSECVERSION=5.2 PREFIX=/usr USE_LDAP=true USE_LIBCURL=true USE_AUTHPAM=true USE_LIBCAP_NG=true USE_LABELED_IPSEC=true USE_LINUX_AUDIT=true INITSYSTEM=systemd USE_DH31=true USE_NSS_KDF=true USE_NSS_IPSEC_PROFILE=true USE_DNSSEC=true DEFAULT_DNSSEC_ROOTKEY_FILE=/usr/share/dns/root.key returned exit code 2
make[1]: *** [debian/rules:51: override_dh_auto_build] Error 25
make[1]: Leaving directory '/build/reproducible-path/libreswan-5.2'
make: *** [debian/rules:6: binary] Error 2
dpkg-buildpackage: error: debian/rules binary subprocess failed with exit status 2