1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
243
244
245
246
247
248
249
250
251
252
253
254
255
256
257
258
259
260
261
262
263
264
265
266
267
268
269
270
271
272
273
274
275
276
277
278
279
280
281
282
283
284
285
286
287
288
289
290
291
292
293
294
295
296
297
298
299
300
301
302
303
304
305
306
307
308
309
310
311
312
313
314
315
316
317
318
319
320
321
322
323
324
325
326
327
328
329
330
331
332
333
334
335
336
337
338
339
340
341
342
343
344
345
346
347
348
349
350
351
352
353
354
355
356
357
358
359
360
361
362
|
#!/usr/bin/perl
=head1 NAME
dh_strip - strip executables, shared libraries, and some static libraries
=cut
use strict;
use warnings;
use File::Find;
use Debian::Debhelper::Dh_Lib;
=head1 SYNOPSIS
B<dh_strip> [S<I<debhelper options>>] [B<-X>I<item>] [B<--dbg-package=>I<package>] [B<--keep-debug>]
=head1 DESCRIPTION
B<dh_strip> is a debhelper program that is responsible for stripping
executables, shared libraries, and static libraries that are not used for
debugging.
This program examines your package build directories and works out what
to strip on its own. It uses L<file(1)> and file permissions and filenames
to figure out what files are shared libraries (F<*.so>), executable binaries,
and static (F<lib*.a>) and debugging libraries (F<lib*_g.a>, F<debug/*.so>), and
strips each as much as is possible. (Which is not at all for debugging
libraries.) In general it seems to make very good guesses, and will do the
right thing in almost all cases.
Since it is very hard to automatically guess if a file is a
module, and hard to determine how to strip a module, B<dh_strip> does not
currently deal with stripping binary modules such as F<.o> files.
=head1 OPTIONS
=over 4
=item B<-X>I<item>, B<--exclude=>I<item>
Exclude files that contain I<item> anywhere in their filename from being
stripped. You may use this option multiple times to build up a list of
things to exclude.
=item B<--dbg-package=>I<package>
B<This option is a now special purpose option that you normally do not
need>. In most cases, there should be little reason to use this
option for new source packages as debhelper generates automatic debug
packages ("ddebs"). B<If you have a manual --dbg-package> that you
want to migrate to the automatic ddeb, please see the
B<--ddeb-migration> option.
Causes B<dh_strip> to save debug symbols stripped from the packages it acts on
as independent files in the package build directory of the specified debugging
package.
For example, if your packages are libfoo and foo and you want to include a
I<foo-dbg> package with debugging symbols, use B<dh_strip --dbg-package=>I<foo-dbg>.
Note that this option behaves significantly different in debhelper
compatibility levels 4 and below. Instead of specifying the name of a debug
package to put symbols in, it specifies a package (or packages) which
should have separated debug symbols, and the separated symbols are placed
in packages with B<-dbg> added to their name.
This option implies B<--no-ddebs> and I<cannot> be used with B<--ddeb>
or B<--ddeb-migration>.
=item B<-k>, B<--keep-debug>
Debug symbols will be retained, but split into an independent
file in F<usr/lib/debug/> in the package build directory. B<--dbg-package>
is easier to use than this option, but this option is more flexible.
This option implies B<--no-ddebs> and I<cannot> be used with
B<--ddebs>.
=item B<--ddeb-migration=>I<package-relation>
This option is used to migrate from a manual "-dbg" package (created
with B<--dbg-package>) to the automatic "ddebs". The value of this
option should describe a valid B<Replaces>- and B<Breaks>-relation,
which will be added to the ddebs to avoid file conflicts with the (now
obsolete) -dbg package.
This option implies B<--ddebs> and I<cannot> be used with
B<--keep-debug>, B<--dbg-package> or B<--no-ddebs>.
Examples:
dh_strip --ddeb-migration='libfoo-dbg (<< 2.1-3~)'
dh_strip --ddeb-migration='libfoo-tools-dbg (<< 2.1-3~), libfoo2-dbg (<< 2.1-3~)'
=item B<--ddebs>, B<--no-ddebs>
Control whether B<dh_strip> should be creating ddebs when possible.
By default, B<dh_strip> will attempt to build ddebs and this option is
primarily useful for disabling this.
=back
=head1 NOTES
If the B<DEB_BUILD_OPTIONS> environment variable contains B<nostrip>, nothing
will be stripped, in accordance with Debian policy (section 10.1
"Binaries"). This will also inhibit the creation of automatic "ddebs".
The creation of automatic "ddebs" can also be prevented by adding
B<noddebs> to the B<DEB_BUILD_OPTIONS> environment variable.
=head1 CONFORMS TO
Debian policy, version 3.0.1
=cut
init(options => {
"keep-debug" => \$dh{K_FLAG},
'ddeb-migration=s' => \$dh{MIGRATE_DDEB},
'ddebs!' => \$dh{ENABLE_DDEBS},
});
if ($dh{K_FLAG} and $dh{MIGRATE_DDEB}) {
error("--keep-debug and --ddeb-migration are mutually exclusive");
}
if ($dh{DEBUGPACKAGES} and $dh{MIGRATE_DDEB}) {
error("--dbg-package and --ddeb-migration are mutually exclusive");
}
if ($dh{ENABLE_DDEBS} and $dh{ENABLE_DDEBS} ne 'auto') {
if ($dh{K_FLAG}) {
error("--keep-debug and explicit --ddebs are mutually exclusive");
}
if ($dh{DEBUGPACKAGES}) {
error("--dbg-package and explicit --ddebs are mutually exclusive");
}
}
$dh{ENABLE_DDEBS} = 1 if not defined($dh{ENABLE_DDEBS});
if ($dh{MIGRATE_DDEB} and not $dh{ENABLE_DDEBS}) {
error("--ddeb-migration and --no-ddebs are mutually exclusive");
}
$dh{ENABLE_DDEBS} = 0 if not $ENV{'DH_BUILD_DDEBS'};
# This variable can be used to turn off stripping (see Policy).
if (get_buildoption('nostrip')) {
exit;
}
my $objcopy = cross_command("objcopy");
my $strip = cross_command("strip");
$dh{ENABLE_DDEBS} = 0 if get_buildoption('noddebs');
# I could just use `file $_[0]`, but this is safer
sub get_file_type {
my $file=shift;
open (FILE, '-|') # handle all filenames safely
|| exec('file', $file)
|| die "can't exec file: $!";
my $type=<FILE>;
close FILE;
return $type;
}
# Check if a file is an elf binary, shared library, or static library,
# for use by File::Find. It'll fill the following 3 arrays with anything
# it finds:
my (@shared_libs, @executables, @static_libs);
sub testfile {
return if -l $_ or -d $_; # Skip directories and symlinks always.
# See if we were asked to exclude this file.
# Note that we have to test on the full filename, including directory.
my $fn="$File::Find::dir/$_";
foreach my $f (@{$dh{EXCLUDE}}) {
return if ($fn=~m/\Q$f\E/);
}
# Is it a debug library in a debug subdir?
return if $fn=~m/debug\/.*\.so/;
# Does its filename look like a shared library?
# - *.cmxs are OCaml native code shared libraries
# - *.node are also native ELF binaries (for node-js)
if (m/.*\.(?:so.*?|cmxs|node)$/) {
# Ok, do the expensive test.
my $type=get_file_type($_);
if ($type=~m/.*ELF.*shared.*/) {
push @shared_libs, $fn;
return;
}
}
# Is it executable? -x isn't good enough, so we need to use stat.
my (undef,undef,$mode,undef)=stat(_);
if ($mode & 0111) {
# Ok, expensive test.
my $type=get_file_type($_);
if ($type=~m/.*ELF.*(executable|shared).*/) {
push @executables, $fn;
return;
}
}
# Is it a static library, and not a debug library?
if (m/lib.*\.a$/ && ! m/.*_g\.a$/) {
# Is it a binary file, or something else (maybe a liner
# script on Hurd, for example? I don't use file, because
# file returns a variety of things on static libraries.
if (-B $_) {
push @static_libs, $fn;
return;
}
}
}
sub make_debug {
my ($file, $tmp, $desttmp, $use_build_id) = @_;
# Don't try to copy debug symbols out if the file is already
# stripped.
return unless get_file_type($file) =~ /not stripped/;
my ($base_file)=$file=~/^\Q$tmp\E(.*)/;
my $debug_path;
if ($use_build_id &&
`LC_ALL=C readelf -n $file`=~ /^\s+Build ID: ([0-9a-f]{2})([0-9a-f]+)$/m) {
$debug_path=$desttmp."/usr/lib/debug/.build-id/$1/$2.debug"
}
elsif ($use_build_id > 1) {
# For ddebs, we need build-id (else it will not be co-installable).
return;
}
else {
$debug_path=$desttmp."/usr/lib/debug/".$base_file;
}
my $debug_dir=dirname($debug_path);
if (! -d $debug_dir) {
install_dir($debug_dir);
}
if (compat(8)) {
doit($objcopy, "--only-keep-debug", $file, $debug_path);
}
else {
doit($objcopy, "--only-keep-debug", "--compress-debug-sections", $file, $debug_path);
}
# No reason for this to be executable.
doit("chmod", "0644", $debug_path);
return $debug_path;
}
sub attach_debug {
my $file=shift;
my $debug_path=shift;
doit($objcopy, "--add-gnu-debuglink", $debug_path, $file);
}
my %all_packages = map { $_ => 1 } getpackages();
foreach my $package (@{$dh{DOPACKAGES}}) {
my $tmp=tmpdir($package);
# Support for keeping the debugging symbols in a detached file.
my $keep_debug=$dh{K_FLAG};
my $debugtmp=$tmp;
my $use_build_id = compat(8) ? 0 : 1;
if (! compat(4)) {
if (ref $dh{DEBUGPACKAGES}) {
$keep_debug=1;
# Note that it's only an array for the v4 stuff;
# for v5 only one value is used.
my $debugpackage=@{$dh{DEBUGPACKAGES}}[0];
if (!$all_packages{$debugpackage}) {
error("debug package $debugpackage is not listed in the control file");
}
$debugtmp=tmpdir($debugpackage);
}
}
else {
if (ref $dh{DEBUGPACKAGES} && grep { $_ eq $package } @{$dh{DEBUGPACKAGES}}) {
$keep_debug=1;
$debugtmp=tmpdir($package."-dbg");
}
}
if ($dh{ENABLE_DDEBS} and not $keep_debug and package_arch($package) ne 'all') {
# Avoid creating a ddeb that would clash with a registered package
# or looks like a manual -dbg package.
if (!$all_packages{"${package}-dbgsym"} or $package =~ m/-dbg$/) {
$debugtmp = "debian/.debhelper/${package}/ddeb-root";
$keep_debug = 1;
$use_build_id = 2;
}
}
@shared_libs=@executables=@static_libs=();
find(\&testfile,$tmp);
foreach (@shared_libs) {
my $debug_path = make_debug($_, $tmp, $debugtmp, $use_build_id) if $keep_debug;
# Note that all calls to strip on shared libs
# *must* include the --strip-unneeded.
doit($strip,"--remove-section=.comment",
"--remove-section=.note","--strip-unneeded",$_);
attach_debug($_, $debug_path) if defined $debug_path;
}
foreach (@executables) {
my $debug_path = make_debug($_, $tmp, $debugtmp, $use_build_id) if $keep_debug;
doit($strip,"--remove-section=.comment",
"--remove-section=.note",$_);
attach_debug($_, $debug_path) if defined $debug_path;
}
if (@static_libs) {
my $strip_help = qx{$strip 2>&1};
my @opts = ('--strip-debug');
if (index($strip_help, '--enable-deterministic-archives') > -1) {
# NB: The short variant (-D) is broken in Jessie
# (binutils/2.25-3)
push(@opts, '--enable-deterministic-archives');
}
foreach (@static_libs) {
doit($strip, @opts, $_);
}
}
if ($use_build_id > 1 and -d $debugtmp) {
my $ddeb_docdir = "${debugtmp}/usr/share/doc";
my $doc_symlink = "${ddeb_docdir}/${package}-dbgsym";
if ( not -l $doc_symlink and not -e $doc_symlink ) {
install_dir($ddeb_docdir) if not -d $ddeb_docdir;
doit('ln', '-s', $package, $doc_symlink);
}
if ($dh{MIGRATE_DDEB}) {
my $path = "debian/.debhelper/${package}/ddeb-migration";
open(my $fd, '>', $path) or error("open $path failed: $!");
print {$fd} "$dh{MIGRATE_DDEB}\n";
close($fd) or error("close $path failed: $!");
}
}
}
=head1 SEE ALSO
L<debhelper(7)>
This program is a part of debhelper.
=head1 AUTHOR
Joey Hess <joeyh@debian.org>
=cut
# Local Variables:
# indent-tabs-mode: t
# tab-width: 4
# cperl-indent-level: 4
# End:
|