[MCOL-97] old bundled versions of software in source tree Created: 2016-06-01  Updated: 2016-10-12  Resolved: 2016-10-12

Status: Closed
Project: MariaDB ColumnStore
Component/s: Build, installation
Affects Version/s: None
Fix Version/s: 1.0.4

Type: Bug Priority: Major
Reporter: Justin Swanhart (Inactive) Assignee: David Hall (Inactive)
Resolution: Fixed Votes: 0
Labels: None

Issue Links:
PartOf
is part of MCOL-280 Beta issues Closed
Sprint: 2016-19, 2016-20

 Description   

There are entire software libraries checked into the columnstore tree including (but not limited to)
net-snmp
boost

net-snmp in particular is quite old and likely has vulnerabilities

I am going to attempt to build the source with system-level packaged versions of these systems as opposed to bundled versions.



 Comments   
Comment by Andrew Hutchings (Inactive) [ 2016-09-14 ]

Branch for this available here: https://github.com/LinuxJedi/mariadb-columnstore-engine/tree/binary_cleanup

I will propose for merge request after the window for 1.0.3 has closed.

Comment by Andrew Hutchings (Inactive) [ 2016-09-14 ]

TODO: investigate why libdrizzle is in the tree and maybe kill that too...

Comment by Justin Swanhart (Inactive) [ 2016-09-14 ]

Libdrizzle is used for cross-engine joins.

Comment by Justin Swanhart (Inactive) [ 2016-09-14 ]

The problem with using the OS version of net-snmp previously was that MariaDB corporation columnstore starts it's own snmpd and had a hard coded path to it and some other dependencies on the built in version (I can't remember exactly what now). Were these problems resolved with these changes as well? This is why I just updated the bundled net-snmp rather than using the OS version.

Comment by Andrew Hutchings (Inactive) [ 2016-09-14 ]

I think some of these problems were resolved during the conversion to CMake. I fixed up everything else I could find. My fix appears to cover everything else. I'll run some more tests when I'm come back to this.

Comment by Andrew Hutchings (Inactive) [ 2016-09-23 ]

This branch switches to the OS net-snmp, removes the dead boost_idb and removes some of the pre-build binaries that aren't used.

Everything else mentioned in this Jira issue will be split out into other issues to be tackled at another time.

Comment by Andrew Hutchings (Inactive) [ 2016-09-23 ]

Assigning back to me, something broke...

Comment by Andrew Hutchings (Inactive) [ 2016-09-23 ]

Should be good now

Comment by David Hall (Inactive) [ 2016-10-12 ]

This looks like it's all done correctly

Generated at Thu Feb 08 02:18:29 UTC 2024 using Jira 8.20.16#820016-sha1:9d11dbea5f4be3d4cc21f03a88dd11d8c8687422.