Skip to content

firebird3: update to 3.0.14.33856#60009

Open
onlylunix wants to merge 1 commit intovoid-linux:masterfrom
onlylunix:firebird3upd
Open

firebird3: update to 3.0.14.33856#60009
onlylunix wants to merge 1 commit intovoid-linux:masterfrom
onlylunix:firebird3upd

Conversation

@onlylunix
Copy link
Copy Markdown
Contributor

@onlylunix onlylunix commented Apr 17, 2026

Testing the changes

  • I tested the changes in this PR: YES

Local build testing

  • I built this PR locally for my native architecture, (x86_64-LIBC, i686-LIBC, x86_64-musl)

New features:
You can now install and run several different versions of Firebird at the same time, including client and development libraries, since the databases require the corresponding server versions.

FIX: CVE-2026-40342 GHSA-7pxc-h3rv-r257

Also see Firebird5 PR #60010

@onlylunix
Copy link
Copy Markdown
Contributor Author

@Duncaen
FIX: CVE-2026-40342 GHSA-7pxc-h3rv-r257

@Duncaen
Copy link
Copy Markdown
Member

Duncaen commented Apr 18, 2026

This is a huge change that is hard to review and I have no idea whether the install and run scripts are correct or right.

@onlylunix
Copy link
Copy Markdown
Contributor Author

onlylunix commented Apr 18, 2026

It's all simple there. I tried.
I want my efforts not to be in vain.

@Duncaen
Copy link
Copy Markdown
Member

Duncaen commented Apr 18, 2026

I would like to merge this, but I simply don't understand why the run script needs to do all this backing up as I have 0 experience with firebase.

And for the INSTALL script, we do try to limit them to be as small as possible and only do the necessary work.

I don't think password generation and/or setting up a database in INSTALL scripts is something I would merge.

@onlylunix
Copy link
Copy Markdown
Contributor Author

onlylunix commented Apr 18, 2026

All actions in the run script are aimed at ensuring the smooth operation of the server. The server runs under an unprivileged user, so it's important to ensure that logs are saved.

Password generation is useful for inexperienced users, even as an example.

My template provides a working server immediately after installation.

@Duncaen
Copy link
Copy Markdown
Member

Duncaen commented Apr 18, 2026

All actions in the run script are aimed at ensuring the smooth operation of the server. The server runs under an unprivileged user, so it's important to ensure that logs are saved.

I don't understand why that is necessary if upstream also doesn't do it. We generally stick to how upstream would run a service, to avoid inventing our own stuff on top of what would be expected from a fresh/clean installation of the upstream program.

Password generation is useful for inexperienced users, even as an example.
My template provides a working server immediately after installation.

But that is really not our goal. Things like that are better off documented in README.voidlinux or left to the upstream documentation.

@onlylunix
Copy link
Copy Markdown
Contributor Author

What should I do if need to save logs, but for some reason there are files with the same name created by another user?

@Duncaen
Copy link
Copy Markdown
Member

Duncaen commented Apr 18, 2026

What should I do if need to save logs, but for some reason there are files with the same name created by another user?

I have no idea, I can only go by what upstream provides and its just a service, also using a separate user that does not do any backups of log files or tmp files. https://github.com/FirebirdSQL/firebird/blob/60dbea67dcc52208092e3131c9958a3019a1a8fd/builds/install/arch-specific/linux/firebird.service.in

@onlylunix
Copy link
Copy Markdown
Contributor Author

I can clean up the scripts from these extra steps, but it will make things more complicated for users.

@classabbyamp
Copy link
Copy Markdown
Member

void isn't a distro that does everything automatically for users, some things will need manual setup.

@onlylunix
Copy link
Copy Markdown
Contributor Author

@Duncaen
Fixed

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants