[Buildroot] [PATCH v2 2/3] package/fluent-bit: add support for non glibc toolchain

[Peter Korsgaard]

>>>>> "Thomas" == Thomas Devoogdt <thomas at devoogdt.com> writes:

 > Hi, Peter
 > It would indeed be better to link against those,
 > but this is sadly the nature of how fluent-bit is made.

Do you know why they have made that choice? From a quick look it doesn't
seem like the code has been modified.

 > Next to those two libs, there are a dozen  of other libs that are also
 > literally copied in their code base. What you are proposing is to adapt
 > their cmakefile and only compile the static libs if no dynamic lib could be
 > found. Or even never compile it and just pass the linker flags. I'm afraid
 > that we could have compatibility problems by that, so I would keep it
 > static for now.

If that is the only option supported by upstream, then indeed that is
what we will have to do. Will you monitor for security vulnerabilities
in the vendored libraries and ensure this is also fixed there? E.G. we
recently had a (low risk) vulnerability in c-ares.

-- 
Bye, Peter Korsgaard