fix segfault when building with staticx 0.14.1

Author: slicklash

exe-requirements.txt

@@ -1,13 +1,4 @@
 # requirements for the standalone executable
-pyinstaller==5.6; platform.machine == "x86_64"
-# aarch64 requires a later version due to the use of a newer centos version.
-# see https://github.com/pyinstaller/pyinstaller/issues/5540
-pyinstaller==4.10; platform.machine == "aarch64" or sys.platform == "win32"
-# for aarch64 we build a slightly patched version
-# I tried upgrading to 0.13.6 but it crashes when the botoloader is run as non-root :/
-# I got this error in gdb:
-# (gdb) run
-# Starting program: /path/to/build/x86_64/gprofiler
-# During startup program terminated with signal SIGSEGV, Segmentation fault.
-# staying with 0.12.1 for the mean time...
-staticx==0.12.1; platform.machine == "x86_64"
+pyinstaller==5.13.2
+wheel==0.37.0
+scons==4.2.0

executable.Dockerfile

@@ -169,8 +169,7 @@ RUN yum install -y \
 COPY ./scripts/openssl_build.sh .
 RUN ./openssl_build.sh
 COPY ./scripts/python311_build.sh .
-RUN ./python311_build.sh && \ 
-    ln -s /usr/bin/python3.11 /usr/bin/python3
+RUN ./python311_build.sh
 
 # gProfiler part
 
@@ -179,24 +178,17 @@ WORKDIR /app
 RUN yum --setopt=skip_missing_names_on_install=False install -y \
         gcc \
         curl \
+        glibc-static \
         libicu && \
     yum clean all
 
 # needed for aarch64 (for staticx)
 RUN set -e; \
     if [ "$(uname -m)" = "aarch64" ]; then \
-        yum install -y glibc-static zlib-devel.aarch64 && \
+        ln -s /usr/lib64/python3.11/lib-dynload /usr/lib/python3.11/lib-dynload && \
+        yum install -y zlib-devel.aarch64 && \
         yum clean all; \
     fi
-# needed for aarch64, scons & wheel are needed to build staticx
-RUN set -e; \
-    if [ "$(uname -m)" = "aarch64" ]; then \
-         ln -s /usr/lib64/python3.11/lib-dynload /usr/lib/python3.11/lib-dynload; \
-    fi
-RUN set -e; \
-    if [ "$(uname -m)" = "aarch64" ]; then \
-        python3 -m pip install --no-cache-dir 'wheel==0.37.0' 'scons==4.2.0'; \
-    fi
 
 # we want the latest pip
 # hadolint ignore=DL3013
@@ -228,7 +220,8 @@ COPY granulate-utils/glogger granulate-utils/glogger
 RUN python3 -m pip install --no-cache-dir -r requirements.txt
 
 COPY exe-requirements.txt exe-requirements.txt
-RUN python3 -m pip install --no-cache-dir -r exe-requirements.txt
+RUN python3 -m pip install --no-cache-dir -r exe-requirements.txt && \
+    python3 -m pip install --no-cache-dir --no-binary=:all: staticx==0.14.1 # fixes gprofiler segfault
 
 # copy PyPerf, licenses and notice file.
 RUN mkdir -p gprofiler/resources/ruby && \
@@ -281,6 +274,7 @@ RUN pyinstaller pyinstaller.spec \
 # crash the staticx bootloader. we don't need them anyway (all files in our staticx tar are uid 0 and we don't need the names translation)
 COPY scripts/staticx_patch.diff staticx_patch.diff
 # hadolint ignore=DL3003
+# TODO: fix me
 RUN if [ "$(uname -m)" = "aarch64" ]; then \
         git clone -b v0.13.6 https://github.com/JonathonReinhart/staticx.git && \
         cd staticx && \

scripts/python311_build.sh

@@ -21,5 +21,5 @@ VERSION=3.11.9
 wget "https://www.python.org/ftp/python/$VERSION/Python-$VERSION.tgz"
 tar -xzf "Python-$VERSION.tgz"
 cd "Python-$VERSION"
-./configure --enable-optimizations --enable-shared --prefix=/usr LDFLAGS="-Wl,-rpath /usr/lib" --with-openssl=/usr --with-lto
+./configure --enable-optimizations --enable-shared --prefix=/usr LDFLAGS="-Wl,-rpath /usr/lib"
 make -j "$(nproc)" && make python install -j "$(nproc)"