Skip to content

Name kexec_file_load by number, so porta builds as a static musl binary - #43

Merged
O6lvl4 merged 1 commit into
developfrom
fix/musl-seccomp
Sep 29, 2026
Merged

O6lvl4 merged 1 commit into
developfrom
fix/musl-seccomp

Conversation

@O6lvl4

@O6lvl4 O6lvl4 commented Sep 28, 2026

Copy link
Copy Markdown
Contributor

almide build --target linux-musl (Almide v0.65.1-rc3, almide/almide#2772) fails on porta on aarch64:

error[E0425]: cannot find value `SYS_kexec_file_load` in crate `libc`
  --> src/seccomp.rs:88:11

The libc crate's musl table for aarch64 has no SYS_kexec_file_load (glibc's has it). The seccomp filter now names it by number, per architecture as AUDIT_ARCH already is: 320 on x86_64, 294 on aarch64. The filter is unchanged for glibc builds.

Tried on aarch64 in rust:1-bookworm with musl-tools: the musl build is statically linked, porta --version and run --help (with --credential) work, and a confined sh writes the granted directory and is refused /root.

Why: aitrium (formerly onogoro) ships porta in its release archive, and a static porta would start on any Linux, Alpine included, not only glibc 2.30+.

🤖 Generated with Claude Code

Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com>
@O6lvl4
O6lvl4 merged commit ee6c5a8 into develop Sep 29, 2026
4 checks passed
@O6lvl4
O6lvl4 deleted the fix/musl-seccomp branch September 29, 2026 01:01
O6lvl4 added a commit to O6lvl4/aitrium that referenced this pull request Sep 29, 2026
…orta#43)

Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com>
O6lvl4 added a commit to O6lvl4/aitrium that referenced this pull request Sep 29, 2026
* Build the Linux archives as static musl binaries

Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com>

* Build porta at develop ee6c5a8, which builds as static musl (almide/porta#43)

Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com>

* Version 0.3.0

Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com>

* package.sh: static-pie is static too (x86_64 musl builds are static-pie)

Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com>

---------

Co-authored-by: Claude Opus 5.5 (1M context) <noreply@anthropic.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant