Developing C and C++ applications in RHEL 10
Setting up a developer workstation, and developing and debugging C and C++ applications in Red Hat Enterprise Linux 10
Abstract
Chapter 1. Setting up a development workstation Copy linkLink copied to clipboard!
Red Hat Enterprise Linux 10 supports development of custom applications. Learn about common development use cases and the required tools. You must ensure that the RHEL system, including a graphical environment, is installed and subscribed.
1.1. Enabling debug and source repositories Copy linkLink copied to clipboard!
To debug system components and measure their performance, enable the debug and source repositories. These repositories contain the required information for debugging and profiling but are disabled by default in a standard Red Hat Enterprise Linux installation.
Procedure
Enable the BaseOS debug information package channel:
subscription-manager repos --enable rhel-10-for-$(uname -i)-baseos-debug-rpms
# subscription-manager repos --enable rhel-10-for-$(uname -i)-baseos-debug-rpmsCopy to Clipboard Copied! Toggle word wrap Toggle overflow Enable the BaseOS source package channel:
subscription-manager repos --enable rhel-10-for-$(uname -i)-baseos-source-rpms
# subscription-manager repos --enable rhel-10-for-$(uname -i)-baseos-source-rpmsCopy to Clipboard Copied! Toggle word wrap Toggle overflow Enable the AppStream debug information package channel:
subscription-manager repos --enable rhel-10-for-$(uname -i)-appstream-debug-rpms
# subscription-manager repos --enable rhel-10-for-$(uname -i)-appstream-debug-rpmsCopy to Clipboard Copied! Toggle word wrap Toggle overflow Enable the AppStream source package channel:
subscription-manager repos --enable rhel-10-for-$(uname -i)-appstream-source-rpms
# subscription-manager repos --enable rhel-10-for-$(uname -i)-appstream-source-rpmsCopy to Clipboard Copied! Toggle word wrap Toggle overflow The
$(uname -i)part is automatically replaced with a matching value for architecture of your system:Expand Architecture name Value 64-bit Intel and AMD
x86_64
64-bit ARM
aarch64
IBM POWER
ppc64le
64-bit IBM Z
s390x
1.2. Setting up to manage application versions Copy linkLink copied to clipboard!
To manage application versions in multi-developer projects, use Git, a distributed version control system included in Red Hat Enterprise Linux.
Procedure
Install the
gitpackage:dnf install git
# dnf install gitCopy to Clipboard Copied! Toggle word wrap Toggle overflow Optional: Set the full name associated with your Git commits:
git config --global user.name "Full_Name"
$ git config --global user.name "Full_Name"Copy to Clipboard Copied! Toggle word wrap Toggle overflow Optional: Set the email address associated with your Git commits:
git config --global user.email "email@example.com"
$ git config --global user.email "email@example.com"Copy to Clipboard Copied! Toggle word wrap Toggle overflow Replace Full Name and email@example.com with your name and email address.
Optional: To change the default text editor started by Git, set the value of the
core.editorconfiguration option:git config --global core.editor command
$ git config --global core.editor commandCopy to Clipboard Copied! Toggle word wrap Toggle overflow Replace command with the command to be used to start the selected text editor.
1.3. Setting up to develop applications using C and C++ Copy linkLink copied to clipboard!
To develop applications using C and C++, install the necessary development tools and compilers provided by Red Hat Enterprise Linux. This procedure describes how to install the standard development tools, including the GNU Compiler Collection (GCC), GNU Debugger (GDB), and the LLVM toolset.
Prerequisites
- The debug and source repositories must be enabled.
Procedure
Install the Development Tools package group including GNU Compiler Collection (GCC), GNU Debugger (GDB), and other development tools:
dnf group install "Development Tools"
# dnf group install "Development Tools"Copy to Clipboard Copied! Toggle word wrap Toggle overflow Install the LLVM-based toolchain including the
clangcompiler and thelldlinker:dnf install llvm-toolset
# dnf install llvm-toolsetCopy to Clipboard Copied! Toggle word wrap Toggle overflow Optional: For Fortran dependencies, install the GNU Fortran compiler:
dnf install gcc-gfortran
# dnf install gcc-gfortranCopy to Clipboard Copied! Toggle word wrap Toggle overflow
1.4. Setting up to debug applications Copy linkLink copied to clipboard!
To analyze and troubleshoot internal application behavior, {ProductName} offers multiple debugging and instrumentation tools.
Prerequisites
- The debug and source repositories is enabled.
Procedure
Install the tools for debugging:
dnf install gdb valgrind systemtap ltrace strace
# dnf install gdb valgrind systemtap ltrace straceCopy to Clipboard Copied! Toggle word wrap Toggle overflow Install the
dnf-utilspackage to use thedebuginfo-installtool:dnf install dnf-utils
# dnf install dnf-utilsCopy to Clipboard Copied! Toggle word wrap Toggle overflow Run a SystemTap helper script for setting up the environment:
stap-prep
# stap-prepCopy to Clipboard Copied! Toggle word wrap Toggle overflow Note that
stap-prepinstalls packages relevant to the currently running kernel, which might not be the same as the installed kernel. To ensurestap-prepinstalls the correctkernel-debuginfoandkernel-headerspackages, double-check the current kernel version by using theuname -rcommand and reboot your system if necessary.Make sure
SELinuxpolicies allow the relevant applications to run not only normally, but in the debugging situations, too. For more information, see Using SELinux.
Additional resources
1.5. Setting up to measure performance of applications Copy linkLink copied to clipboard!
To identify the causes of application performance loss, use the performance measurement tools included in Red Hat Enterprise Linux, such as perf, papi, valgrind, and SystemTap.
Prerequisites
- The debug and source repositories are enabled.
Procedure
Install the tools for performance measurement:
dnf install perf papi pcp-zeroconf valgrind strace sysstat systemtap
# dnf install perf papi pcp-zeroconf valgrind strace sysstat systemtapCopy to Clipboard Copied! Toggle word wrap Toggle overflow Run a SystemTap helper script for setting up the environment.
stap-prep
# stap-prepCopy to Clipboard Copied! Toggle word wrap Toggle overflow Note that stap-prep installs packages relevant to the currently running kernel, which might not be the same as the installed kernel. To ensure stap-prep installs the correct kernel-debuginfo and kernel-headers packages, double-check the current kernel version by using the
uname -rcommand and reboot your system if necessary.Enable and start the Performance Co-Pilot (PCP) collector service:
systemctl enable pmcd && systemctl start pmcd
# systemctl enable pmcd && systemctl start pmcdCopy to Clipboard Copied! Toggle word wrap Toggle overflow
Chapter 2. Creating C or C++ Applications Copy linkLink copied to clipboard!
Red Hat offers multiple tools for creating applications using the C and C++ languages. Learn about some of the most common development tasks.
2.1. GCC in RHEL 10 Copy linkLink copied to clipboard!
Red Hat Enterprise Linux 10 is distributed with the GNU Compiler Collection (GCC) 14 as the standard compiler.
The default language standard setting for GCC 14 is C++17. This is equivalent to explicitly using the command-line option -std=gnu++17.
Later language standards, such as C++20 and so on, and library features introduced in these later language standards remain experimental.
2.2. Building code with GCC Copy linkLink copied to clipboard!
Transform source code into executable code. Compile source files, link object code, and understand the relationship between different code forms. Optimize, harden, and debug your applications by using GCC.
2.2.1. Relationship between code forms Copy linkLink copied to clipboard!
The C and C++ languages have three forms of code that are created through different stages of the build process. Understanding these relationships helps you work effectively with the GNU Compiler Collection (GCC).
The code forms of C and C++ languages:
Source code written in the C or C++ language, present as plain text files.
The files typically use extensions such as
.c,.cc,.cpp,.h,.hpp,.i,.inc. For a complete list of supported extensions and their interpretation, see the gcc manual pages:man gcc
$ man gccCopy to Clipboard Copied! Toggle word wrap Toggle overflow Object code, created by compiling the source code with a compiler. This is an intermediate form.
The object code files use the
.oextension.Executable code, created by linking object code with a linker.
Linux application executable files do not use any file name extension. Shared object (library) executable files use the
.sofile name extension.
Library archive files for static linking also exist. This is a variant of object code that uses the .a file name extension. Static linking is not recommended. See Static and dynamic linking.
Producing executable code from source code is performed in two steps, which require different applications or tools:
- Source files are compiled to object files.
- Object files and libraries are linked (including the previously compiled sources).
GCC can be used as an intelligent driver for both compilers and linkers. This allows you to use a single gcc command for any of the required actions (compiling and linking). GCC automatically selects the actions and their sequence.
You can run GCC to compile only, link only, or perform both steps. This is determined by the types of inputs and requested type of output.
Because larger projects require a build system that usually runs GCC separately for each action, it is better to always consider compilation and linking as two distinct actions, even if GCC can perform both at once.
2.2.2. Compiling source files to object code Copy linkLink copied to clipboard!
To create object code files from source files without creating an executable file immediately, instruct GCC to create only object code files as its output. This is a basic operation of the build process for larger projects.
Prerequisites
- C or C++ source code file(s)
- GCC installed on the system
Procedure
- In Terminal, open to the directory containing the source code file(s).
Run
gccwith the-coption:gcc -c source.c another_source.c
$ gcc -c source.c another_source.cCopy to Clipboard Copied! Toggle word wrap Toggle overflow Object files are created, with their file names reflecting the original source code files:
source.cresults insource.o.NoteWith C++ source code, replace the
gcccommand withg++for convenient handling of C++ Standard Library dependencies.
Additional resources
2.2.3. Enabling debugging of C and C++ applications with the GCC Copy linkLink copied to clipboard!
To debug C and C++ applications effectively, generate debugging information during compilation. Use GCC’s -g option to create this data. Debuggers use this data to map executable code to source lines for inspecting variables and logic.
Prerequisites
-
You have the
gccpackage installed.
Procedure
Compile and link your code with the
-goption to generate debugging information:gcc ... -g ...
$ gcc ... -g ...Copy to Clipboard Copied! Toggle word wrap Toggle overflow Optional: Set the optimization level to
-Og:gcc ... -g -Og ...
$ gcc ... -g -Og ...Copy to Clipboard Copied! Toggle word wrap Toggle overflow Compiler optimizations can make executable code hard to relate to the source code. The
-Ogoption optimizes the code without interfering with debugging. However, be aware that changing optimization levels can alter the program’s behavior.Optional: Use
-gfor moderate debugging information, or-g3to include macro definitions:gcc ... -g3 ...
$ gcc ... -g3 ...Copy to Clipboard Copied! Toggle word wrap Toggle overflow
Verification
Test the code by using the
-fcompare-debugGCC option:gcc -fcompare-debug ...
$ gcc -fcompare-debug ...Copy to Clipboard Copied! Toggle word wrap Toggle overflow This option tests code compiled with and without debug information. If the resulting binaries are identical, the executable code is not affected by debugging options. By using the
-fcompare-debugoption significantly increases compilation time.
2.2.4. Code optimization with the GCC Copy linkLink copied to clipboard!
Compiler optimization transforms your code for efficiency. Use GCC options to balance compilation overhead with execution speed or binary size suitable for your deployment. By selecting the appropriate optimization level, you can achieve faster execution speeds or smaller binary sizes tailored to your application’s deployment requirements.
With GCC, you can set the optimization level by using the -Olevel option. This option accepts a set of values in place of the level.
| Level | Description |
|---|---|
|
| Optimize for compilation speed - no code optimization (default). |
|
| Optimize to increase code execution speed (the larger the number, the greater the speed). |
|
| Optimize for file size. |
|
|
Same as a level |
|
| Optimize for debugging experience. |
For release builds, use the optimization option -O2.
During development, the -Og option is useful for debugging the program or library in some situations. Because some bugs manifest only with certain optimization levels, test the program or library with the release optimization level.
GCC offers a large number of options to enable individual optimizations. For more information, see gcc man page for more details.
2.2.5. Options for hardening code with the GCC Copy linkLink copied to clipboard!
To add security checks during code compilation, you can use GNU Compiler Collection (GCC) compiler options. This helps produce more secure programs and libraries without changing source code.
- Release version options
The following list of options is the recommended minimum for developers targeting Red Hat Enterprise Linux:
gcc ... -O2 -g -Wall -Wl,-z,now,-z,relro -fstack-protector-strong -fstack-clash-protection -D_FORTIFY_SOURCE=3 ...
$ gcc ... -O2 -g -Wall -Wl,-z,now,-z,relro -fstack-protector-strong -fstack-clash-protection -D_FORTIFY_SOURCE=3 ...Copy to Clipboard Copied! Toggle word wrap Toggle overflow -
For programs, add the
-fPIEand-piePosition Independent Executable options. -
For dynamically linked libraries, the mandatory
-fPIC(Position Independent Code) option indirectly increases security.
-
For programs, add the
- Development options
Use the following options to detect security flaws during development. Use these options in conjunction with the options for the release version:
gcc ... -Walloc-zero -Walloca-larger-than -Wextra -Wformat-security -Wvla-larger-than ...
$ gcc ... -Walloc-zero -Walloca-larger-than -Wextra -Wformat-security -Wvla-larger-than ...Copy to Clipboard Copied! Toggle word wrap Toggle overflow - -
fhardened -
GCC 14 provides a new flag,
-fhardened, which in turn enables several other flags to improve the security of generated code without impacting the ABI. - -
fanalyzer -
GCC provides a flag,
-fanalyzer, which triggers warnings about potential issues in the source code, including security-related issues. Because-fanalyzerfrequently has false positives and negatives, it should be used to locate potential bugs that should be investigated further and not as a formal analysis tool. This flag greatly increases the time and memory taken during compilation. Use only on C code.
2.2.6. Linking code to create executable files Copy linkLink copied to clipboard!
To create an executable file, linking combines all object files and libraries. This is the final step when building a C or C++ application.
Prerequisites
- One or more object file(s)
- GCC must be installed on the system
Procedure
- Change to the directory containing the object code file(s).
Run
gcc:gcc ... objfile.o another_object.o ... -o executable-file
$ gcc ... objfile.o another_object.o ... -o executable-fileCopy to Clipboard Copied! Toggle word wrap Toggle overflow An executable file named executable-file is created from the supplied object files and libraries. To link additional libraries, add the required options after the list of object files.
For more information, see Using libraries with GCC.
NoteWith C++ source code, replace the
gcccommand withg++for convenient handling of C++ Standard Library dependencies.
Additional resources
2.2.7. Example: Building a C program with the GCC (compiling and linking in one step) Copy linkLink copied to clipboard!
To build a basic C program, use GCC to compile source code directly into an executable. This single-step compilation command creates a foundation for developing simple applications on Red Hat Enterprise Linux.
Procedure
Create a directory
hello-c:mkdir hello-c
$ mkdir hello-cCopy to Clipboard Copied! Toggle word wrap Toggle overflow Change to the created directory:
cd hello-c
$ cd hello-cCopy to Clipboard Copied! Toggle word wrap Toggle overflow Create file
hello.cwith the following contents:Copy to Clipboard Copied! Toggle word wrap Toggle overflow Compile and link the code with GCC:
gcc hello.c -o helloworld
$ gcc hello.c -o helloworldCopy to Clipboard Copied! Toggle word wrap Toggle overflow This compiles the code, creates the object file
hello.o, and links the executable filehelloworldfrom the object file.Run the resulting executable file:
./helloworld
$ ./helloworldCopy to Clipboard Copied! Toggle word wrap Toggle overflow Hello, World!
Hello, World!Copy to Clipboard Copied! Toggle word wrap Toggle overflow
Additional resources
2.2.8. Example: Building a C program with the GCC (compiling and linking in two steps) Copy linkLink copied to clipboard!
To build a simple C program, compile a source file into an object file and then link it to create an executable. This two-step process demonstrates the fundamentals of how to use the GNU Compiler Collection (GCC) compiler workflow for C development.
Procedure
Create a directory
hello-c:mkdir hello-c
$ mkdir hello-cCopy to Clipboard Copied! Toggle word wrap Toggle overflow Change to the created directory:
cd hello-c
$ cd hello-cCopy to Clipboard Copied! Toggle word wrap Toggle overflow Create file
hello.cwith the following contents:Copy to Clipboard Copied! Toggle word wrap Toggle overflow Compile the code with GCC:
gcc -c hello.c
$ gcc -c hello.cCopy to Clipboard Copied! Toggle word wrap Toggle overflow The object file
hello.ois created.Link an executable file
helloworldfrom the object file:gcc hello.o -o helloworld
$ gcc hello.o -o helloworldCopy to Clipboard Copied! Toggle word wrap Toggle overflow Run the resulting executable file:
./helloworld Hello, World!
$ ./helloworld Hello, World!Copy to Clipboard Copied! Toggle word wrap Toggle overflow Optional: Change back to the parent directory:
cd ..
$ cd ..Copy to Clipboard Copied! Toggle word wrap Toggle overflow Optional: Remove the
hello-cdirectory:rm -r hello-c
$ rm -r hello-cCopy to Clipboard Copied! Toggle word wrap Toggle overflow
Additional resources
2.2.9. Example: Building a C++ program with the GCC (compiling and linking in one step) Copy linkLink copied to clipboard!
To build a minimal C++ program, use the following steps.
In this example, compiling and linking the code is done in one step.
Procedure
Create a directory
hello-cpp:mkdir hello-cpp
$ mkdir hello-cppCopy to Clipboard Copied! Toggle word wrap Toggle overflow Change to the created directory:
cd hello-cpp
$ cd hello-cppCopy to Clipboard Copied! Toggle word wrap Toggle overflow Create file
hello.cppwith the following contents:Copy to Clipboard Copied! Toggle word wrap Toggle overflow Compile and link the code with
g++:g++ hello.cpp -o helloworld
$ g++ hello.cpp -o helloworldCopy to Clipboard Copied! Toggle word wrap Toggle overflow This compiles the code, creates the object file
hello.o, and links the executable filehelloworldfrom the object file.Run the resulting executable file:
./helloworld
$ ./helloworldCopy to Clipboard Copied! Toggle word wrap Toggle overflow Hello, World!
Hello, World!Copy to Clipboard Copied! Toggle word wrap Toggle overflow Optional: Change back to the parent directory:
cd ..
$ cd ..Copy to Clipboard Copied! Toggle word wrap Toggle overflow Optional: Remove the
hello-cppdirectory:rm -r hello-cpp
$ rm -r hello-cppCopy to Clipboard Copied! Toggle word wrap Toggle overflow
2.2.10. Example: Building a C++ program with the GCC (compiling and linking in two steps) Copy linkLink copied to clipboard!
To build a minimal C++ program by using a two-step process, first compile the source into an object file, and then link it to create the executable. This approach demonstrates modular building with the GNU Compiler Collection (GCC) compiler.
Procedure
Create a directory
hello-cpp:mkdir hello-cpp
$ mkdir hello-cppCopy to Clipboard Copied! Toggle word wrap Toggle overflow Change to the created directory:
cd hello-cpp
$ cd hello-cppCopy to Clipboard Copied! Toggle word wrap Toggle overflow Create file
hello.cppwith the following contents:Copy to Clipboard Copied! Toggle word wrap Toggle overflow Compile the code with
g++:g++ -c hello.cpp
$ g++ -c hello.cppCopy to Clipboard Copied! Toggle word wrap Toggle overflow The object file
hello.ois created.Link an executable file
helloworldfrom the object file:g++ hello.o -o helloworld
$ g++ hello.o -o helloworldCopy to Clipboard Copied! Toggle word wrap Toggle overflow Run the resulting executable file:
./helloworld
$ ./helloworldCopy to Clipboard Copied! Toggle word wrap Toggle overflow Hello, World!
Hello, World!Copy to Clipboard Copied! Toggle word wrap Toggle overflow Optional: Change back to the parent directory:
cd ..
$ cd ..Copy to Clipboard Copied! Toggle word wrap Toggle overflow Optional: Remove the
hello-cppdirectory:rm -r hello-cpp
$ rm -r hello-cppCopy to Clipboard Copied! Toggle word wrap Toggle overflow
2.3. Creating libraries with GCC Copy linkLink copied to clipboard!
Learn about the steps to create libraries and the necessary concepts used by the Linux operating system for libraries. Also, understand the special file name convention used for libraries. See Section 2.4.1, “Library naming conventions”.
2.3.1. The soname mechanism Copy linkLink copied to clipboard!
To manage multiple compatible versions of a library, dynamically loaded libraries (shared objects) use the soname mechanism.
- You must understand dynamic linking and libraries.
- You must understand the concept of ABI compatibility.
- You must understand library naming conventions.
You must understand symbolic links.
- Problem introduction
- A dynamically loaded library (shared object) exists as an independent executable file. This makes it possible to update the library without updating the applications that depend on it. However, the following problems arise with this concept:
- Identification of the actual version of the library
- Need for multiple versions of the same library present
Signalling ABI compatibility of each of the multiple versions
- The soname mechanism
-
The soname mechanism resolves these problems by using naming conventions to indicate compatibility. A
foolibrary version X.Y is ABI-compatible with other versions with the same value of X in a version number. Minor changes preserving compatibility increase the number Y. Major changes that break compatibility increase the number X.
The actual foo library version X.Y exists as a file libfoo.so.x.y. Inside the library file, a soname is recorded with value libfoo.so.x to signal the compatibility.
During the build, the linker searches for a symbolic link named libfoo.so that points to the library file. A symbolic link with this name must exist, pointing to the actual library file. The linker then reads the soname from the library file and records it into the application executable file. Finally, the linker creates the application that declares dependency on the library by using the soname, not a name or a file name.
When the runtime dynamic linker links an application before running, it reads the soname from application’s executable file. This soname is libfoo.so.x. A symbolic link with this name must exist, pointing to the actual library file. This allows loading the library, regardless of the Y component of a version, because the soname does not change.
The Y component of the version number is not limited to just a single number. Additionally, some libraries encode their version in their name.
- Reading soname from a file
To display the soname of a library file
somelibrary:objdump -p somelibrary | grep SONAME
$ objdump -p somelibrary | grep SONAMECopy to Clipboard Copied! Toggle word wrap Toggle overflow
Replace somelibrary with the actual file name of the library that you want to examine.
- Finding a library name and version in a file name
As an example, consider a library which is present as a file
libevent-2.0.so.5.1.9. To find the actual components:-
Start by ignoring the standard library file name prefix
lib. -
Break the remainder into the two parts preceding and following the string
.so.. -
The first part is
event-2.0, which is the name of the library. -
The second part is
5.1.9. To find the X version component, take everything before first dot:5. -
The rest is the Y version component:
1.9.
-
Start by ignoring the standard library file name prefix
Therefore the library’s name is event-2.0, the X version component is 5, and Y is 1.9.
The soname of this library file is everything up to the Y component: libevent-2.0.so.5.
When a newer but still compatible version of the library is released, it uses the same soname, and the Y version component is increased. The new file name is libevent-2.0.so.5.1.10.
2.3.2. Creating dynamic libraries with the GCC Copy linkLink copied to clipboard!
To build and install a dynamic library from the source code, you can use the GNU Compiler Collection (GCC). Dynamically linked libraries, also known as shared objects, help you conserve resources by reusing code and increase security by making library updates easier.
Prerequisites
- You must understand the soname mechanism.
- GCC must be installed on the system.
- You must have source code for a library.
Procedure
- Change to the directory with library sources.
Compile each source file to an object file with the Position independent code option
-fPIC:gcc ... -c -fPIC some_file.c ...
$ gcc ... -c -fPIC some_file.c ...Copy to Clipboard Copied! Toggle word wrap Toggle overflow The object files have the same file names as the original source code files, but their extension is
.o.Link the shared library from the object files:
gcc -shared -o libfoo.so.x.y -Wl,-soname,libfoo.so.x some_file.o ...
$ gcc -shared -o libfoo.so.x.y -Wl,-soname,libfoo.so.x some_file.o ...Copy to Clipboard Copied! Toggle word wrap Toggle overflow The used major version number is X and minor version number Y.
Copy the
libfoo.so.x.yfile to an appropriate location, where the system’s dynamic linker can find it. On Red Hat Enterprise Linux, the directory for libraries is/usr/lib64:cp libfoo.so.x.y /usr/lib64
# cp libfoo.so.x.y /usr/lib64Copy to Clipboard Copied! Toggle word wrap Toggle overflow Note that you need root permissions to manipulate files in this directory.
Create the symlink for the soname:
ln -s libfoo.so.x.y libfoo.so.x
# ln -s libfoo.so.x.y libfoo.so.xCopy to Clipboard Copied! Toggle word wrap Toggle overflow Create the symlink for the linker name:
ln -s libfoo.so.x libfoo.so
# ln -s libfoo.so.x libfoo.soCopy to Clipboard Copied! Toggle word wrap Toggle overflow
Additional resources
2.3.3. Creating static libraries with the GCC and ar Copy linkLink copied to clipboard!
To create static libraries, bundle object files into an archive by using the ar utility. Use the resulting .a file for static linking and for distributing self-contained libraries without external dependencies.
Red Hat discourages the use of static linking for security reasons. Use static linking only when necessary, especially against libraries provided by Red Hat. See Static and dynamic linking for more details.
Prerequisites
- GCC and binutils must be installed on the system.
- You must understand static and dynamic linking.
- Source file(s) with functions to be shared as a library are available.
Procedure
Create intermediate object files with GCC.
gcc -c source_file.c ...
$ gcc -c source_file.c ...Copy to Clipboard Copied! Toggle word wrap Toggle overflow Append more source files if required. The resulting object files share the file name but use the
.ofile name extension.Turn the object files into a static library (archive) using the
artool from thebinutilspackage.ar rcs libfoo.a source_file.o ...
$ ar rcs libfoo.a source_file.o ...Copy to Clipboard Copied! Toggle word wrap Toggle overflow File
libfoo.ais created.Use the
nmcommand to inspect the resulting archive:nm libfoo.a
$ nm libfoo.aCopy to Clipboard Copied! Toggle word wrap Toggle overflow - Copy the static library file to the appropriate directory.
When linking against the library, GCC will automatically recognize from the
.afile name extension that the library is an archive for static linking.gcc ... -lfoo ...
$ gcc ... -lfoo ...Copy to Clipboard Copied! Toggle word wrap Toggle overflow
2.4. Using Libraries with the GCC Copy linkLink copied to clipboard!
Libraries are collections of re-usable code, which can make coding easier and more effective. Understand library naming conventions and the distinction between static and dynamic linking. Link applications with static or dynamic libraries using the GCC, and optimize your code with Link Time Optimization (LTO).
2.4.1. Library naming conventions Copy linkLink copied to clipboard!
System libraries require consistent naming. A library known as foo is expected to exist as file libfoo.so or libfoo.a. This convention is automatically understood by the linking input options of the GNU Compiler Collection (GCC), but not by the output options:
When linking against the library, the library can be specified only by its name foo with the
-loption as-lfoo:gcc ... -lfoo ...
$ gcc ... -lfoo ...Copy to Clipboard Copied! Toggle word wrap Toggle overflow -
When creating the library, the full file name
libfoo.soorlibfoo.amust be specified.
Additional resources
2.4.2. Static and dynamic linking Copy linkLink copied to clipboard!
When building C or C++ applications, you must use dynamic linking. Static linking reduces compatibility and prevents timely library security updates.
- Comparison of static and dynamic linking
- Static linking makes libraries part of the resulting executable file. Dynamic linking keeps these libraries as separate files.
Static linking has numerous disadvantages and should be avoided, particularly for whole applications and the glibc and libstdc++ libraries:
Resource use: Static linking results in larger executable files which contain more code. This additional code coming from libraries cannot be shared across multiple programs on the system, increasing file system usage and memory usage at run time. Multiple processes running the same statically linked program will still share the code.
However, static applications need fewer runtime relocations, leading to reduced startup time, and require less private resident set size (RSS) memory. Generated code for static linking can be more efficient than for dynamic linking due to the overhead introduced by position-independent code (PIC).
Security: Dynamically linked libraries that provide ABI compatibility can be updated without changing the executable files depending on these libraries. This is especially important for libraries provided by Red Hat as part of Red Hat Enterprise Linux, where Red Hat provides security updates. Static linking against any such libraries is strongly discouraged.
Compatibility: Static linking seems to provide executable files independent of the versions of libraries provided by the operating system. However, most libraries depend on other libraries. With static linking, this dependency becomes inflexible and as a result, both forward and backward compatibility is lost. Static linking is guaranteed to work only on the system where the executable file was built.
Applications linking statically libraries from the GNU C library (glibc) still require glibc to be present on the system as a dynamic library. Furthermore, the dynamic library variant of glibc available at the application’s run time must be a bitwise identical version to that present while linking the application. As a result, static linking is guaranteed to work only on the system where the executable file was built.
Support coverage: Most static libraries provided by Red Hat are in the CodeReady Linux Builder channel and not supported by Red Hat.
Functionality: Some libraries, notably the GNU C Library (glibc), offer reduced functionality when linked statically.
For example, when statically linked, glibc does not support threads and any form of calls to the dlopen() function in the same program.
- Cases for static linking
Static linking might be a reasonable choice in some cases, such as:
- When using a library that is not enabled for dynamic linking.
-
When fully static linking is required for running code in an empty chroot environment or container. However, static linking by using the
glibc-staticpackage is not supported by Red Hat.
2.4.3. Link time optimization Copy linkLink copied to clipboard!
Link time optimization (LTO) optimizes code across all translation units of the program by using intermediate representation at link time. This results in smaller and faster executable files and libraries. Additionally, LTO analyzes package source code at compile time more thoroughly, which improves various GCC diagnostics for potential coding errors.
- Known issues
LTO has the following known issues:
Violating the One Definition Rule (ODR) produces a
-WodrwarningViolations of the ODR resulting in undefined behavior produce a
-Wodrwarning. This usually points to a bug in your program. The-Wodrwarning is enabled by default.LTO causes increased memory consumption
The compiler consumes more memory when it processes the translation units the program consists of. On systems with limited memory, disable LTO or lower the parallelism level when building your program.
GCC removes seemingly unused functions
GCC might remove functions it considers unused because the compiler is unable to recognize which symbols an asm() statement references. A compilation error might occur as a result. To prevent this, add
__attribute__((used))to the symbols you use in your program.Compiling with the
-fPICoption causes errorsBecause GCC does not parse the contents of asm() statements, compiling your code with the
-fPICcommand-line option can cause errors. To prevent this, use the-fno-ltooption when compiling your translation unit. More information is available at LTO FAQ {mdash}; Symbol usage from assembly language.Implementing symbol versioning by using the
.symverdirective in an asm() statement is not compatible with LTO. However, it is possible to implement symbol versioning using thesymverattribute. For example:__attribute__ ((_symver_ ("<symbol>@VERS_1"))) void <symbol>_v1 (void) { }
2.4.4. Using a library with the GCC Copy linkLink copied to clipboard!
A library is a reusable package of code. A C or C++ library consists of the library code and header files.
- Compiling code that uses a library
- The header files describe the interface of the library: the functions and variables available in the library. Information from the header files is needed for compiling the code.
Typically, header files of a library will be placed in a different directory than your application’s code. To tell GCC where the header files are, use the -I option:
gcc ... -Iinclude_path ...
$ gcc ... -Iinclude_path ...
Replace include_path with the actual path to the header file directory.
For example, to specify a relative path some/interesting/directory:
gcc ... -Isome/interesting/directory ...
$ gcc ... -Isome/interesting/directory ...
The -I option can be used multiple times to add multiple directories with header files. When looking for a header file, these directories are searched in the order of their appearance in the -I options.
- Linking code that uses a library
When linking the executable file, both the object code of your application and the binary code of the library must be available. The code for static and dynamic libraries is present in different forms:
-
Static libraries are available as archive files. They contain a group of object files. The archive file has a file name extension
.a. -
Dynamic libraries are available as shared objects. They are a form of an executable file. A shared object has a file name extension
.so.
-
Static libraries are available as archive files. They contain a group of object files. The archive file has a file name extension
To tell GCC where the archives or shared object files of a library are, use the -L option:
gcc ... -Llibrary_path -lfoo ...
$ gcc ... -Llibrary_path -lfoo ...
Replace library_path with the actual path to the library directory.
The -L option can be used multiple times to add multiple directories. When looking for a library, these directories are searched in the order of their -L options.
The order of options matters: GCC cannot link against a library foo unless it knows the directory with this library. Therefore, use the -L options to specify library directories before using the -l options for linking against libraries.
- Compiling and linking code which uses a library in one step
-
When you compile and link in a single
gcccommand, combine the compile-time and link-time options.
2.4.5. Linking static libraries with the GCC Copy linkLink copied to clipboard!
To link static libraries, bundle them as archives that contain object files. After linking, they become part of the resulting executable file. Static linking overrides the default dynamic linking behavior.
Red Hat discourages use of static linking for security reasons. See Static and dynamic linking. Use static linking only when necessary, especially against libraries provided by Red Hat.
Prerequisites
- GCC must be installed on your system.
- You must understand static and dynamic linking.
- You have a set of source or object files forming a valid program, requiring some static library foo and no other libraries.
The foo library is available as a file
libfoo.a, and no filelibfoo.sois provided for dynamic linking.NoteMost libraries that are part of Red Hat Enterprise Linux are supported for dynamic linking only. The steps below only work for libraries that are not enabled for dynamic linking.
See Static and dynamic linking
Procedure
To link a program from source and object files, adding a statically linked library foo, which is to be found as a file
libfoo.a.- Change to the directory containing your code.
Compile the program source files with headers of the foo library:
gcc ... -Iheader_path -c ...
$ gcc ... -Iheader_path -c ...Copy to Clipboard Copied! Toggle word wrap Toggle overflow Replace header_path with a path to a directory containing the header files for the foo library.
Link the program with the foo library:
gcc ... -Llibrary_path -lfoo ...
$ gcc ... -Llibrary_path -lfoo ...Copy to Clipboard Copied! Toggle word wrap Toggle overflow Replace library_path with a path to a directory containing the file
libfoo.a.To run the program later, simply:
./program
$ ./programCopy to Clipboard Copied! Toggle word wrap Toggle overflow WarningThe
-staticGCC option related to static linking forbids all dynamic linking. Instead, use the-Wl,-Bstaticand-Wl,-Bdynamicoptions to control linker behavior more precisely. See Using both static and dynamic libraries with GCC.
2.4.6. Using a dynamic library with the GCC Copy linkLink copied to clipboard!
Dynamic libraries are available as standalone executable files, required at both linking time and run time. They stay independent of your application’s executable file.
Prerequisites
- GCC must be installed on the system.
- A set of source or object files forming a valid program, requiring some dynamic library foo and no other libraries.
- The foo library must be available as a file libfoo.so.
Procedure
To link a program against a dynamic library foo:
gcc ... -Llibrary_path -lfoo ...
$ gcc ... -Llibrary_path -lfoo ...Copy to Clipboard Copied! Toggle word wrap Toggle overflow To use a
run pathvalue stored in the executable file:The
run pathis a special value saved as a part of an executable file when it is being linked. Later, when the program is loaded from its executable file, the runtime linker uses therun pathvalue to locate the library files.While linking with GCC, store the path library_path as
run path:gcc ... -Llibrary_path -lfoo -Wl,-run path=library_path ...
$ gcc ... -Llibrary_path -lfoo -Wl,-run path=library_path ...Copy to Clipboard Copied! Toggle word wrap Toggle overflow The path library_path must point to a directory containing the file libfoo.so.
ImportantDo not add a space after the comma in the
-Wl,-run path=option.Run the program:
./program
$ ./programCopy to Clipboard Copied! Toggle word wrap Toggle overflow On Red Hat Enterprise Linux 10, the
run pathencoded in the program during linking is used only if the linked libraries are not found inLD_LIBRARY_PATH. You can use the-Wl,--disable-new-dtagsoption to restore the old behaviour in Red Hat Enterprise Linux 10, where the run path is searched before theLD_LIBRARY_PATH.
To use the
LD_LIBRARY_PATHenvironment variable:Another way to set search paths to locate libraries is to use the
LD_LIBRARY_PATHenvironment variable. The value of this variable must be changed for each program. This value should represent the path where the shared library objects are located and must be set for every program invocation.Set the
LD_LIBRARY_PATHenvironment variable:export LD_LIBRARY_PATH=library_path:$LD_LIBRARY_PATH
$ export LD_LIBRARY_PATH=library_path:$LD_LIBRARY_PATHCopy to Clipboard Copied! Toggle word wrap Toggle overflow Run the program:
./program
$ ./programCopy to Clipboard Copied! Toggle word wrap Toggle overflow
Optional: Place the library into the default directories.
The runtime linker configuration specifies a number of directories as a default location of dynamic library files. To use this default behaviour, copy your library to the appropriate directory.
2.4.7. Using both static and dynamic libraries with GCC Copy linkLink copied to clipboard!
Combining static and dynamic linking balances portability and efficiency. The GNU Compiler Collection (GCC) automatically selects shared objects over static archives unless configured otherwise. Understand this behavior to control exactly which library versions your application uses.
gcc recognizes both dynamic and static libraries. When the -lfoo option is encountered, gcc will first attempt to locate a shared object (a .so file) containing a dynamically linked version of the foo library, and then look for the archive file (.a) containing a static version of the library. Thus, the following situations can result from this search:
- Only the shared object is found, and gcc links against it dynamically.
- Only the archive is found, and gcc links against it statically.
- Both the shared object and archive are found, and by default, gcc selects dynamic linking against the shared object.
- Neither shared object nor archive is found, and linking fails.
Because of these rules, the best way to select the static or dynamic version of a library for linking is having only that version found by gcc. This can be controlled to some extent by using or leaving out directories containing the library versions, when specifying the -Lpath options.
Additionally, because dynamic linking is the default, the only situation where linking must be explicitly specified is when a library with both versions present should be linked statically. There are two possible resolutions: specifying the static libraries by file path instead of the -l option, or using the -Wl option to pass options to the linker.
- Specifying the static libraries by file
Usually, gcc is instructed to link against the foo library with the
-lfoooption. However, it is possible to specify the full path to filelibfoo.acontaining the library instead:gcc ... path/to/libfoo.a ...
$ gcc ... path/to/libfoo.a ...Copy to Clipboard Copied! Toggle word wrap Toggle overflow From the file extension
.a, gcc will understand that this is a library to link with the program. However, specifying the full path to the library file is a less flexible method.- Using the
-Wloption The gcc option
-Wlis a special option for passing options to the underlying linker. Syntax of this option differs from the other gcc options. The-Wloption is followed by a comma-separated list of linker options, while other gcc options require space-separated list of options.The ld linker used by gcc offers the
-Bstaticoption to link libraries following this option statically, and-Bdynamicto link them dynamically. After passing-Bstaticand a library to the linker, the default dynamic linking behaviour must be restored manually for the following libraries to be linked dynamically with the-Bdynamicoption.Link a program with library first statically (
libfirst.a) and second dynamically (libsecond.so):gcc ... -Wl,-Bstatic -lfirst -Wl,-Bdynamic -lsecond ...
$ gcc ... -Wl,-Bstatic -lfirst -Wl,-Bdynamic -lsecond ...Copy to Clipboard Copied! Toggle word wrap Toggle overflow Notegcc can be configured to use linkers other than the default ld.
2.5. Managing More Code with Make Copy linkLink copied to clipboard!
The GNU make utility, commonly abbreviated as make, is a tool for controlling the generation of executables from source files. The make utility automatically determines which parts of a complex program have changed and need to be recompiled. make uses configuration files called Makefiles to control the way programs are built.
2.5.1. GNU make and Makefile overview Copy linkLink copied to clipboard!
To create a usable form (usually executable files) from the source files of a particular project, perform several necessary steps. Record the actions and their sequence to be able to repeat them later.
Red Hat Enterprise Linux contains GNU make, a build system designed for this purpose.
- What is GNU
make -
GNU
makereads Makefiles which contain the instructions describing the build process. A Makefile contains multiple rules that describe a way to satisfy a certain condition (target) with a specific action (recipe). Rules can hierarchically depend on another rule.
Running make without any options makes it look for a Makefile in the current directory and attempt to reach the default target. The actual Makefile file name can be one of Makefile, makefile, and GNUmakefile. The default target is determined from the Makefile contents.
To run make with a specific target:
make target
$ make target
- Makefile structure and syntax
- Makefiles use a relatively simple syntax for defining variables and rules, which consists of a target and a recipe. The target specifies what is the output if a rule is executed. The lines with recipes must start with the TAB character.
Typically, a Makefile contains rules for compiling source files, a rule for linking the resulting object files, and a target that serves as the entry point at the top of the hierarchy.
- Basic Makefile example
-
Consider the following
Makefilefor building a C program which consists of a single file,hello.c.
This example shows that to reach the target all, file hello is required. To get hello, one needs hello.o (linked by gcc), which in turn is created from hello.c (compiled by gcc).
The target all is the default target because it is the first target that does not start with a period (.). Running make without any arguments is then identical to running make all, when the current directory contains this Makefile.
- Advanced Makefile with variables
- A more typical Makefile uses variables for generalization of the steps and adds a target "clean" - remove everything but the source files.
Adding more source files to such Makefile requires only adding them to the line where the SOURCE variable is defined.
- Installed documentation
-
Use the
manutility to view manual pages installed on your system:
man make
$ man makeCopy to Clipboard Copied! Toggle word wrap Toggle overflow Use the
infoutility to view information pages installed on your system:info make
$ info makeCopy to Clipboard Copied! Toggle word wrap Toggle overflow
-
Use the
2.5.2. Example: Building a C program using a Makefile Copy linkLink copied to clipboard!
To build a sample C program by using a Makefile, follow the steps in this example.
Prerequisites
Procedure
Create a directory
hellomake:mkdir hellomake
$ mkdir hellomakeCopy to Clipboard Copied! Toggle word wrap Toggle overflow Change to the created directory:
cd hellomake
$ cd hellomakeCopy to Clipboard Copied! Toggle word wrap Toggle overflow Create a file
hello.cwith the following contents:Copy to Clipboard Copied! Toggle word wrap Toggle overflow Create a file
Makefilewith the following contents:Copy to Clipboard Copied! Toggle word wrap Toggle overflow ImportantThe Makefile recipe lines must start with the tab character! When copying the text above from the documentation, the cut-and-paste process might paste spaces instead of tabs. If this happens, correct the issue manually.
Run
make:make
$ makeCopy to Clipboard Copied! Toggle word wrap Toggle overflow gcc -c -Wall hello.c -o hello.o gcc hello.o -o hello
gcc -c -Wall hello.c -o hello.o gcc hello.o -o helloCopy to Clipboard Copied! Toggle word wrap Toggle overflow This creates an executable file
hello.Run the executable file
hello:./hello
$ ./helloCopy to Clipboard Copied! Toggle word wrap Toggle overflow Hello, World!
Hello, World!Copy to Clipboard Copied! Toggle word wrap Toggle overflow Run the Makefile target
cleanto remove the created files:make clean
$ make cleanCopy to Clipboard Copied! Toggle word wrap Toggle overflow rm -rf hello.o hello
rm -rf hello.o helloCopy to Clipboard Copied! Toggle word wrap Toggle overflow
Additional resources
Chapter 3. Debugging Applications Copy linkLink copied to clipboard!
You can use common techniques to debug applications in multiple situations.
3.1. Enabling Debugging with Debugging Information Copy linkLink copied to clipboard!
To debug applications and libraries, you must obtain debugging information.
3.1.1. Debugging information Copy linkLink copied to clipboard!
Reliable debugging requires connecting binary code back to source code. Debugging information provides this link, essential for inspecting variables and execution flow. The GNU Compiler Collection (GCC) generates this data in the DWARF format within ELF files, which tools like the GNU Debugger (GDB) use to analyze program behavior.
Red Hat Enterprise Linux uses the ELF format for executable binaries, shared libraries, or debuginfo files. Within these ELF files, the DWARF format is used to hold the debug information.
To display DWARF information stored within an ELF file, run the readelf -w file command.
STABS is an older, less capable format, occasionally used with UNIX. Its use is discouraged by Red Hat. GCC and GDB provide STABS production and consumption on a best effort basis only. Some other tools such as Valgrind and elfutils do not work with STABS.
3.1.2. Enabling debugging of C and C++ applications with the GCC Copy linkLink copied to clipboard!
To debug C and C++ applications effectively, generate debugging information during compilation. Use GCC’s -g option to create this data. Debuggers use this data to map executable code to source lines for inspecting variables and logic.
Prerequisites
-
You have the
gccpackage installed.
Procedure
Compile and link your code with the
-goption to generate debugging information:gcc ... -g ...
$ gcc ... -g ...Copy to Clipboard Copied! Toggle word wrap Toggle overflow Optional: Set the optimization level to
-Og:gcc ... -g -Og ...
$ gcc ... -g -Og ...Copy to Clipboard Copied! Toggle word wrap Toggle overflow Compiler optimizations can make executable code hard to relate to the source code. The
-Ogoption optimizes the code without interfering with debugging. However, be aware that changing optimization levels can alter the program’s behavior.Optional: Use
-gfor moderate debugging information, or-g3to include macro definitions:gcc ... -g3 ...
$ gcc ... -g3 ...Copy to Clipboard Copied! Toggle word wrap Toggle overflow
Verification
Test the code by using the
-fcompare-debugGCC option:gcc -fcompare-debug ...
$ gcc -fcompare-debug ...Copy to Clipboard Copied! Toggle word wrap Toggle overflow This option tests code compiled with and without debug information. If the resulting binaries are identical, the executable code is not affected by debugging options. By using the
-fcompare-debugoption significantly increases compilation time.
3.1.3. Debuginfo and debugsource packages Copy linkLink copied to clipboard!
The debuginfo and debugsource packages contain debugging information and source code for programs and libraries. To debug Red Hat Enterprise Linux applications, install these packages from additional repositories.
- Debugging information package types
-
Debuginfo packages: Thedebuginfopackages provide debugging information needed to provide human-readable names for binary code features. These packages contain.debugfiles, which contain DWARF debugging information. These files are installed to the/usr/lib/debugdirectory.
Debugsource packages: The debugsource packages contain the source files used for compiling the binary code. With both debuginfo and debugsource packages installed, debuggers such as GDB or LLDB can relate the execution of binary code to the source code. The source code files are installed to the /usr/src/debug directory.
3.1.4. Getting debuginfo packages for an application or library using GDB Copy linkLink copied to clipboard!
To obtain the necessary debuginfo packages for troubleshooting installed applications or libraries, use the GNU Debugger (GDB). It automatically detects missing symbols and identifies the specific packages needed. Follow GDB’s recommendations to install these packages and enable full debugging capabilities.
Prerequisites
- The application or library you want to debug must be installed on the system.
-
GDB and the
debuginfo-installtool must be installed on the system. -
Repositories providing
debuginfoanddebugsourcepackages must be configured and enabled on the system. For details, see Enabling debug and source repositories.
Procedure
Start GDB attached to the application or library you want to debug. GDB automatically recognizes missing debugging information and suggests a command to run.
gdb -q /bin/ls
$ gdb -q /bin/lsCopy to Clipboard Copied! Toggle word wrap Toggle overflow Reading symbols from /bin/ls...Reading symbols from .gnu_debugdata for /usr/bin/ls...(no debugging symbols found)...done. (no debugging symbols found)...done. Missing separate debuginfos, use: dnf debuginfo-install coreutils-9.5-6.el10.x86_64 (gdb)
Reading symbols from /bin/ls...Reading symbols from .gnu_debugdata for /usr/bin/ls...(no debugging symbols found)...done. (no debugging symbols found)...done. Missing separate debuginfos, use: dnf debuginfo-install coreutils-9.5-6.el10.x86_64 (gdb)Copy to Clipboard Copied! Toggle word wrap Toggle overflow Exit GDB: type q and confirm with Enter.
(gdb) q
(gdb) qCopy to Clipboard Copied! Toggle word wrap Toggle overflow Run the command suggested by GDB to install the required
debuginfopackages:dnf debuginfo-install coreutils-9.5-6.el10.x86_64
# dnf debuginfo-install coreutils-9.5-6.el10.x86_64Copy to Clipboard Copied! Toggle word wrap Toggle overflow The
dnfpackage management tool provides a summary of the changes, asks for confirmation and once you confirm, downloads and installs all the necessary files.In case GDB is not able to suggest the
debuginfopackage, follow the procedure described in
3.1.5. Getting debuginfo packages for an application or library manually Copy linkLink copied to clipboard!
To manually determine which debuginfo packages you need to install, locate the executable file and find the package that installs it.
Use GDB to determine the packages for installation. Use this manual procedure only if GDB is not able to suggest the package to install.
Prerequisites
- The application or library must be installed on the system.
- The application or library was installed from a package.
-
The
debuginfo-installtool must be available on the system. -
Channels providing the
debuginfopackages must be configured and enabled on the system.
Procedure
Find the executable file of the application or library.
Use the
whichcommand to find the application file.which less
$ which lessCopy to Clipboard Copied! Toggle word wrap Toggle overflow /usr/bin/less
/usr/bin/lessCopy to Clipboard Copied! Toggle word wrap Toggle overflow Use the
locatecommand to find the library file.locate libz | grep so
$ locate libz | grep soCopy to Clipboard Copied! Toggle word wrap Toggle overflow /usr/lib64/libz.so.1 /usr/lib64/libz.so.1.2.11
/usr/lib64/libz.so.1 /usr/lib64/libz.so.1.2.11Copy to Clipboard Copied! Toggle word wrap Toggle overflow If the original reasons for debugging include error messages, pick the result where the library has the same additional numbers in its file name as those mentioned in the error messages. If in doubt, try following the rest of the procedure with the result where the library file name includes no additional numbers.
NoteThe
locatecommand is provided by themlocatepackage. To install it and enable its use:dnf install mlocate
# dnf install mlocateCopy to Clipboard Copied! Toggle word wrap Toggle overflow Update the database:
updatedb
# updatedbCopy to Clipboard Copied! Toggle word wrap Toggle overflow
Search for a name and version of the package that provided the file:
rpm -qf /usr/lib64/libz.so.1.3.1.zlib-ng
$ rpm -qf /usr/lib64/libz.so.1.3.1.zlib-ngCopy to Clipboard Copied! Toggle word wrap Toggle overflow zlib-ng-compat-2.2.3-1.el10.x86_64
zlib-ng-compat-2.2.3-1.el10.x86_64Copy to Clipboard Copied! Toggle word wrap Toggle overflow The output provides details for the installed package in the name:epoch-version.release.architecture format.
ImportantIf this step does not produce any results, it is not possible to determine which package provided the binary file. There are several possible cases:
- The file is installed from a package which is not known to package management tools in their current configuration.
-
The file is installed from a locally downloaded and manually installed package. Determining a suitable
debuginfopackage automatically is impossible in that case. - Your package management tools are misconfigured.
-
The file is not installed from any package. In such a case, no corresponding
debuginfopackage exists.
Because further steps depend on this one, you must resolve this situation or stop this procedure. Describing the exact troubleshooting steps is beyond the scope of this procedure.
Install the
debuginfopackages using thednf debuginfo-installutility. In the command, use the package name and other details you determined during the previous step:dnf debuginfo-install zlib-ng-compat-2.2.3-1.el10.x86_64
# dnf debuginfo-install zlib-ng-compat-2.2.3-1.el10.x86_64Copy to Clipboard Copied! Toggle word wrap Toggle overflow
3.2. Inspecting Application Internal State with GDB Copy linkLink copied to clipboard!
To identify why an application fails, you can control its execution and examine its internal state with the GNU Debugger (GDB).
3.2.1. GNU debugger (GDB) Copy linkLink copied to clipboard!
Use the GNU Debugger (GDB) to inspect program execution and post-crash states. Also, you can analyze internal data and control execution flow when tracking down runtime errors. This command-line tool shows the detailed application state needed to identify and fix bugs in complex applications.
- GDB capabilities
A single GDB session can debug the following types of programs:
- Multithreaded and forking programs
- Multiple programs at once
-
Programs on remote machines or in containers with the
gdbserverutility connected over a TCP/IP network connection
- Debugging requirements
To debug any executable code, GDB requires debugging information for that particular code:
- For programs developed by you, you can create the debugging information while building the code.
- For system programs installed from packages, you must install their debuginfo packages.
3.2.2. Attaching GDB to a process Copy linkLink copied to clipboard!
To examine a system process, attach the GNU Debugger (GDB) to the process.
Prerequisites
Procedure
Start a program with GDB.
Launch a program using GDB:
gdb program
$ gdb programCopy to Clipboard Copied! Toggle word wrap Toggle overflow Replace program with a file name or path to the program.
GDBsets up to start execution of the program. You can set up breakpoints and thegdbenvironment before beginning the execution of the process with theruncommand. For more information on setting breakpoints, see Using GDB breakpoints to stop execution at defined code locations.- Attach GDB to an already running process.
Find the process ID (pid) with the
pscommand:ps -C program -o pid h
$ ps -C program -o pid hCopy to Clipboard Copied! Toggle word wrap Toggle overflow pid
pidCopy to Clipboard Copied! Toggle word wrap Toggle overflow Replace program with a file name or path to the program.
Attach GDB to this process:
gdb -p pid
$ gdb -p pidCopy to Clipboard Copied! Toggle word wrap Toggle overflow Replace pid with an actual process ID number from the
psoutput.
Attach an active GDB session to a running program:
Use the
shellGDB command to run thepscommand and find the program’s process ID (pid):(gdb) shell ps -C program -o pid h
(gdb) shell ps -C program -o pid hCopy to Clipboard Copied! Toggle word wrap Toggle overflow pid
pidCopy to Clipboard Copied! Toggle word wrap Toggle overflow Replace program with a file name or path to the program.
Use the
attachcommand to attach GDB to the program:(gdb) attach pid
(gdb) attach pidCopy to Clipboard Copied! Toggle word wrap Toggle overflow Replace pid by an actual process ID number from the
psoutput.NoteIn some cases, GDB might not be able to find the corresponding executable file. Use the
filecommand to specify the path:(gdb) file path/to/program
(gdb) file path/to/programCopy to Clipboard Copied! Toggle word wrap Toggle overflow
3.2.3. Controlling program execution with GDB Copy linkLink copied to clipboard!
When the GNU Debugger (GDB) has been attached to a program, you can use several commands to control the execution of the program. These commands parse code, set breakpoints, and control program flow during debugging sessions.
To use these GDB commands effectively, you must have debugging information available through these methods:
- The program is compiled and built with debugging information
- The relevant debuginfo packages are installed
- GDB must be attached to the program to be debugged
GDB provides commands for stepping through and controlling program execution:
r (run): Start the execution of the program. If run is executed with any arguments, those arguments are passed on to the executable as if the program has been started normally. Users normally issue this command after setting breakpoints.
start: Start the execution of the program but stop at the beginning of the program’s main function. If start is executed with any arguments, those arguments are passed on to the executable as if the program has been started normally.
c (continue): Continue the execution of the program from the current state. The execution of the program will continue until one of the following becomes true:
- A breakpoint is reached.
- A specified condition is satisfied.
- A signal is received by the program.
- An error occurs.
- The program terminates.
n (next): Continue the execution of the program from the current state, until the next line of code in the current source file is reached. The execution of the program will continue until one of the following becomes true:
- A breakpoint is reached.
- A specified condition is satisfied.
- A signal is received by the program.
- An error occurs.
- The program terminates.
s (step): The step command also halts execution at each sequential line of code in the current source file. However, if the execution is currently stopped at a source line containing a function call, GDB stops the execution after entering the function call (rather than executing it).
until location: Continue the execution until the code location specified by the location option is reached.
fini (finish): Resume the execution of the program and halt when execution returns from a function. The execution of the program will continue until one of the following becomes true:
- A breakpoint is reached.
- A specified condition is satisfied.
- A signal is received by the program.
- An error occurs.
- The program terminates.
q (quit): Terminate the execution and exit GDB.
3.2.4. Showing program internal values with GDB Copy linkLink copied to clipboard!
Displaying the values of a program’s internal variables is important for understanding of what the program is doing. The GNU Debugger (GDB) offers multiple commands that you can use to inspect the internal variables. The following list describes the most useful of these commands.
p(print)Display the value of the argument given. Usually, the argument is the name of a variable of any complexity, from a simple single value to a structure. An argument can also be an expression valid in the current language, including the use of program variables and library functions, or functions defined in the program being tested.
It is possible to extend GDB with pretty-printer Python or Guile scripts for customized display of data structures (such as classes, structs) using the
printcommand.bt(backtrace)Display the chain of function calls used to reach the current execution point, or the chain of functions used up until execution was terminated. This is useful for investigating serious bugs (such as segmentation faults) with elusive causes.
Adding the
fulloption to thebacktracecommand displays local variables, too.It is possible to extend GDB with frame filter Python scripts for customized display of data displayed using the
btandinfo framecommands. The term frame refers to the data associated with a single function call.infoThe
infocommand is a generic command to provide information about various items. It takes an option specifying the item to describe.-
The
info argscommand displays options of the function call that is the currently selected frame. -
The
info localscommand displays local variables in the currently selected frame.
For a list of the possible items, run the command
help infoin a GDB session:(gdb) help info
(gdb) help infoCopy to Clipboard Copied! Toggle word wrap Toggle overflow -
The
l(list)- Show program source code. When the program has been started, but is currently stopped, this command lists the source code where the program is currently stopped, along with a few lines of context. Before the program is started, this will list the main function. While not strictly a command to show internal state, list helps the user understand what changes to the internal state will happen in the next step of the program’s execution.
3.2.5. Using GDB breakpoints to stop execution at defined code locations Copy linkLink copied to clipboard!
During a debugging session, you often need to investigate only specific sections of code. Breakpoints are markers that instruct GDB to stop the execution of a program at a defined location. Since breakpoints are typically associated with lines of source code, placing them requires you to specify the correct source file and line number.
Procedure
To place a breakpoint.
Specify the name of the source code file and the line in that file:
(gdb) br file:line
(gdb) br file:lineCopy to Clipboard Copied! Toggle word wrap Toggle overflow When file is not present, name of the source file at the current point of execution is used:
(gdb) br line
(gdb) br lineCopy to Clipboard Copied! Toggle word wrap Toggle overflow Alternatively, use a function name to put the breakpoint on its start:
(gdb) br function_name
(gdb) br function_nameCopy to Clipboard Copied! Toggle word wrap Toggle overflow A program might encounter an error after a certain number of iterations of a task. To specify an additional condition to halt execution:
(gdb) br file:line if condition
(gdb) br file:line if conditionCopy to Clipboard Copied! Toggle word wrap Toggle overflow Replace condition with a condition in the C or C++ language. The meaning of file and line is the same as above.
To inspect the status of all breakpoints and watchpoints:
(gdb) info br
(gdb) info brCopy to Clipboard Copied! Toggle word wrap Toggle overflow To remove a breakpoint by using its number as displayed in the output of
info br:(gdb) delete number
(gdb) delete numberCopy to Clipboard Copied! Toggle word wrap Toggle overflow To remove a breakpoint at a given location:
(gdb) clear file:line
(gdb) clear file:lineCopy to Clipboard Copied! Toggle word wrap Toggle overflow
3.2.6. Using GDB watchpoints to stop execution on data access and changes Copy linkLink copied to clipboard!
GDB watchpoints pause execution when data changes or is accessed. Use them to debug unexpected variable corruption when the cause is unknown. Setting a watchpoint stops the program at the exact moment of access to inspect the state and find the root cause.
Procedure
To place a watchpoint for data change (write):
(gdb) watch expression
(gdb) watch expressionCopy to Clipboard Copied! Toggle word wrap Toggle overflow Replace expression with an expression that describes what you want to watch. For variables, expression is equal to the name of the variable.
To place a watchpoint for data access (read):
(gdb) rwatch expression
(gdb) rwatch expressionCopy to Clipboard Copied! Toggle word wrap Toggle overflow To place a watchpoint for any data access (both read and write):
(gdb) awatch expression
(gdb) awatch expressionCopy to Clipboard Copied! Toggle word wrap Toggle overflow To inspect the status of all watchpoints and breakpoints:
(gdb) info br
(gdb) info brCopy to Clipboard Copied! Toggle word wrap Toggle overflow To remove a watchpoint:
(gdb) delete num
(gdb) delete numCopy to Clipboard Copied! Toggle word wrap Toggle overflow Replace the num option with the number reported by the
info brcommand.
3.2.7. Debugging forking or threaded programs with GDB Copy linkLink copied to clipboard!
Some programs use forking or threads to achieve parallel code execution. To debug multiple simultaneous execution paths, you can use a variety of commands based on your use case.
- Debugging forked programs with GDB
Forking is a situation when a program (parent) creates an independent copy of itself (child). Use the following settings and commands to affect what GDB does when a fork occurs:
The
follow-fork-modesetting controls whether GDB follows the parent or the child after the fork.set follow-fork-mode parent- After a fork, debug the parent process. This is the default.
set follow-fork-mode child- After a fork, debug the child process.
show follow-fork-mode-
Display the current setting of
follow-fork-mode.
The
set detach-on-forksetting controls whether the GDB keeps control of the other (not followed) process or leaves it to run.set detach-on-fork on-
The process which is not followed (depending on the value of
follow-fork-mode) is detached and runs independently. This is the default. set detach-on-fork off-
GDB keeps control of both processes. The process which is followed (depending on the value of
follow-fork-mode) is debugged as usual, while the other is suspended. show detach-on-fork-
Display the current setting of
detach-on-fork.
- Debugging Threaded Programs with GDB
-
GDB has the ability to debug individual threads, and to manipulate and examine them independently. To make GDB stop only the thread that is examined, use the commands
set non-stop onandset target-async on. You can add these commands to the.gdbinitfile. After that functionality is turned on, GDB is ready to conduct thread debugging.
GDB uses a concept of current thread. By default, commands apply to the current thread only.
info threads-
Display a list of threads with their
idandgidnumbers, indicating the current thread. thread id-
Set the thread with the specified
idas the current thread. thread apply ids command-
Apply the command
commandto all threads listed byids. Theidsoption is a space-separated list of thread ids. A special valueallapplies the command to all threads. break location thread id if condition-
Set a breakpoint at a certain
locationwith a certainconditiononly for the thread numberid. watch expression thread id-
Set a watchpoint defined by
expressiononly for the thread numberid. command&-
Execute command
commandand return immediately to the gdb prompt(gdb), continuing any code execution in the background. interrupt- Halt execution in the background.
Additional resources
3.3. Recording Application Interactions Copy linkLink copied to clipboard!
The executable code of applications interacts with the code of the operating system and shared libraries. Recording an activity log of these interactions can provide enough insight into the application’s behavior without debugging the actual application code. Alternatively, analyzing an application’s interactions can help pinpoint the conditions in which a bug manifests.
3.3.1. Tools for recording application interactions Copy linkLink copied to clipboard!
To record application interactions, you can use several tools are available in RHEL. For system calls use strace, for library calls use ltrace, and for advanced probing SystemTap. Select the appropriate tool to log specific runtime behaviors and diagnose integration issues.
- strace
The
stracetool primarily enables logging of system calls (kernel functions) used by an application.-
The
stracetool can provide a detailed output about calls, becausestraceinterprets parameters and results with knowledge of the underlying kernel code. Numbers are turned into the corresponding constant names, bitwise combined flags expanded to flag list, pointers to character arrays dereferenced to provide the actual string, and more. Support for more recent kernel features might be lacking. - To reduce the amount of captured data, filter the traced calls.
-
The use of
stracedoes not require any particular setup except for setting up the log filter. -
Tracing the application code with
straceresults in significant slowdown of the application’s execution. As a result,straceis not suitable for many production deployments. As an alternative, consider usingltraceor SystemTap. -
The version of
straceavailable in Red Hat Developer Toolset can also perform system call tampering. This capability is useful for debugging.
-
The
- ltrace
The
ltracetool enables logging of an application’s user space calls into shared objects (dynamic libraries).-
The
ltracetool enables tracing calls to any library. - To reduce the amount of captured data, filter the traced calls.
-
The use of
ltracedoes not require any particular setup except for setting up the log filter. -
The
ltracetool is lightweight and fast, offering an alternative tostrace: it is possible to trace the corresponding interfaces in libraries such asglibcwithltraceinstead of tracing kernel functions withstrace. -
Because
ltracedoes not handle a known set of calls such asstrace, it does not attempt to explain the values passed to library functions. Theltraceoutput contains only raw numbers and pointers. The interpretation ofltraceoutput requires consulting the actual interface declarations of the libraries present in the output.
NoteIn Red Hat Enterprise Linux 10, a known issue prevents
ltracefrom tracing system executable files. This limitation does not apply to executable files built by users.-
The
- SystemTap
SystemTap is an instrumentation platform for probing running processes and kernel activity on the Linux system. SystemTap uses its own scripting language for programming custom event handlers.
-
Compared to using
straceandltrace, scripting the logging means more work in the initial setup phase. However, the scripting capabilities extend SystemTap’s usefulness beyond just producing logs. - SystemTap works by creating and inserting a kernel module. The use of SystemTap is efficient and does not create a significant slowdown of the system or application execution on its own.
- SystemTap includes a set of usage examples.
-
Compared to using
- GDB
The GNU Debugger (GDB) is primarily meant for debugging, not logging. However, some of its features make it useful even in the scenario where an application’s interaction is the primary activity of interest.
- With GDB, it is possible to conveniently combine the capture of an interaction event with immediate debugging of the subsequent execution path.
- GDB is best suited for analyzing response to infrequent or singular events, after the initial identification of problematic situation by other tools. Using GDB in any scenario with frequent events becomes inefficient or even impossible.
Additional resources
3.3.2. Monitoring an application’s system calls with strace Copy linkLink copied to clipboard!
To monitor the system (kernel) calls performed by an application, use the strace tool.
Prerequisites
Procedure
Identify the system calls to monitor.
Start
straceand attach it to the program.If the program you want to monitor is not running, start
straceand specify the program:strace -fvttTyy -s 256 -e trace=call program
$ strace -fvttTyy -s 256 -e trace=call programCopy to Clipboard Copied! Toggle word wrap Toggle overflow If the program is already running, find its process id (pid):
ps -C program
$ ps -C programCopy to Clipboard Copied! Toggle word wrap Toggle overflow Attach
straceto the process:strace -fvttTyy -s 256 -e trace=call -ppid
$ strace -fvttTyy -s 256 -e trace=call -ppidCopy to Clipboard Copied! Toggle word wrap Toggle overflow
-
Replace call with the system calls to be displayed. You can use the
-e trace=calloption multiple times. If left out,stracewill display all system call types. See the strace(1) manual page for more information. -
If you do not want to trace any forked processes or threads, omit the
-foption.
The
stracetool displays the system calls made by the application and their details.In most cases, an application and its libraries make a large number of calls and
straceoutput displays immediately, if no filter for system calls is set.The
stracetool exits when the program exits.To terminate the monitoring before the traced program exits, press .
-
If
stracestarted the program, the program terminates together withstrace. -
If you attached
straceto an already running program, the program terminates together withstrace.
-
If
Analyze the list of system calls done by the application.
- Problems with resource access or availability are present in the log as calls returning errors.
- Values passed to the system calls and patterns of call sequences provide insight into the causes of the application’s behaviour.
- If the application crashes, the important information is probably at the end of log.
The output contains a large amount of unnecessary information. However, you can construct a more precise filter for the system calls of interest and repeat the procedure.
NoteIt is advantageous to both see the output and save it to a file. Use the
teecommand to achieve this:strace ... |& tee your_log_file.log
$ strace ... |& tee your_log_file.logCopy to Clipboard Copied! Toggle word wrap Toggle overflow
3.3.3. Monitoring application’s library function calls with ltrace Copy linkLink copied to clipboard!
To monitor an application’s calls to functions available in libraries (shared objects), use the ltrace tool.
Prerequisites
Procedure
- Identify the libraries and functions of interest, if possible.
Start
ltraceand attach it to the program.NoteIn Red Hat Enterprise Linux 10, a known issue prevents
ltracefrom tracing system executable files. This limitation does not apply to executable files built by users.If the program you want to monitor is not running, start
ltraceand specify program:ltrace -f -l library -e function program
$ ltrace -f -l library -e function programCopy to Clipboard Copied! Toggle word wrap Toggle overflow If the program is already running, find its process id (pid):
ps -C program
$ ps -C programCopy to Clipboard Copied! Toggle word wrap Toggle overflow Attach
ltraceto the process:ltrace -f -l library -e function -ppid program
$ ltrace -f -l library -e function -ppid programCopy to Clipboard Copied! Toggle word wrap Toggle overflow Use the
-e,-fand-loptions to filter the output:-
Supply the function names to be displayed as function. The
-e functionoption can be used multiple times. If left out,ltracedisplays calls to all functions. -
Instead of specifying functions, you can specify whole libraries with the
-l libraryoption. This option behaves similarly to the-e functionoption. -
If you do not want to trace any forked processes or threads, omit the
-foption.
See the ltrace(1)_ manual page for more information.
-
Supply the function names to be displayed as function. The
ltracedisplays the library calls made by the application.In most cases, an application makes a large number of calls and
ltraceoutput displays immediately, if no filter is set.ltraceexits when the program exits.To terminate the monitoring before the traced program exits, press .
-
If
ltracestarted the program, the program terminates together withltrace. -
If you attached
ltraceto an already running program, the program terminates together withltrace.
-
If
-
Stop
ltraceby pressing Ctrl+C. Analyze the list of library calls done by the application.
- If the application crashes, the important information is probably at the end of log.
The output contains a large amount of unnecessary information. However, you can construct a more precise filter and repeat the procedure.
NoteIt is advantageous to both see the output and save it to a file. Use the
teecommand to achieve this:ltrace ... |& tee your_log_file.log
$ ltrace ... |& tee your_log_file.logCopy to Clipboard Copied! Toggle word wrap Toggle overflow
3.3.4. Monitoring application’s system calls with SystemTap Copy linkLink copied to clipboard!
To register custom event handlers for kernel events, use the SystemTap tool. SystemTap is more efficient than the strace tool, but requires more setup. The included strace.stp script provides strace-like functionality. Installing SystemTap also installs the strace.stp script, which provides an approximation of the strace functionality when using SystemTap.
Procedure
Find the process ID (pid) of the process you want to monitor:
ps -aux
$ ps -auxCopy to Clipboard Copied! Toggle word wrap Toggle overflow Run SystemTap with the
strace.stpscript:stap /usr/share/systemtap/examples/process/strace.stp -x pid
# stap /usr/share/systemtap/examples/process/strace.stp -x pidCopy to Clipboard Copied! Toggle word wrap Toggle overflow The value of pid is the process id.
The script is compiled to a kernel module, which is then loaded. This introduces a slight delay between entering the command and getting the output.
- When the process performs a system call, the call name and its parameters are printed to the terminal.
-
The script exits when the process terminates, or when you press
Ctrl+C.
3.3.5. Using GDB to intercept application system calls Copy linkLink copied to clipboard!
To stop program execution when the program performs specific system calls, use GNU Debugger (GDB) catchpoints, then inspect the program state and system call parameters at those points.
Prerequisites
Procedure
Set the catchpoint:
(gdb) catch syscall syscall-name
(gdb) catch syscall syscall-nameCopy to Clipboard Copied! Toggle word wrap Toggle overflow The command
catch syscallsets a special type of breakpoint that halts execution when the program performs a system call.The
syscall-nameoption specifies the name of the call. You can specify multiple catchpoints for various system calls. Leaving out thesyscall-nameoption causes GDB to stop on any system call.Start execution of the program.
If the program has not started execution, start it:
(gdb) r
(gdb) rCopy to Clipboard Copied! Toggle word wrap Toggle overflow If the program execution is halted, resume it:
(gdb) c
(gdb) cCopy to Clipboard Copied! Toggle word wrap Toggle overflow
- GDB halts execution after the program performs any specified system call.
- Use further GDB commands to examine the program state and advance execution, according to the particular situation.
To exit the GDB debugging session:
(gdb) q
(gdb) qCopy to Clipboard Copied! Toggle word wrap Toggle overflow
3.3.6. Using GDB to intercept handling of signals by applications Copy linkLink copied to clipboard!
To stop the execution of a program under specific circumstances, you can use the GNU Debugger (GDB). To stop the execution when the program receives a signal from the operating system, use a GDB catchpoint.
Prerequisites
Procedure
Set the catchpoint:
(gdb) catch signal signal-type
(gdb) catch signal signal-typeCopy to Clipboard Copied! Toggle word wrap Toggle overflow The command
catch signalsets a special type of a breakpoint that halts execution when a signal is received by the program. Thesignal-typeoption specifies the type of the signal. Use the special value'all'to catch all signals.Let the program run.
If the program has not started execution, start it:
(gdb) r
(gdb) rCopy to Clipboard Copied! Toggle word wrap Toggle overflow If the program execution is halted, resume it:
(gdb) c
(gdb) cCopy to Clipboard Copied! Toggle word wrap Toggle overflow
- GDB halts execution after the program receives any specified signal.
- Continue by debugging the program code handling the signal, or resume execution with the knowledge of the signal being received.
Later, to exit the GDB debugging session:
(gdb) q
(gdb) qCopy to Clipboard Copied! Toggle word wrap Toggle overflow
3.4. Debugging a Crashed Application Copy linkLink copied to clipboard!
Sometimes, it is not possible to debug an application directly. In these situations, you can collect information about the application at the moment of its termination and analyze it afterwards.
3.4.1. Core dumps: what they are and how to use them Copy linkLink copied to clipboard!
A core dump records parts of an application’s memory when the application stops. After an application fails, you can analyze the core dump, along with the executable and debuginfo, by using a debugger.
The Linux operating system kernel can record core dumps automatically, if this functionality is enabled. Alternatively, send a signal to any running application to generate a core dump regardless of its actual state.
Some limits might affect the ability to generate a core dump. To see the current limits:
ulimit -a
$ ulimit -a
3.4.2. Recording application crashes with core dumps Copy linkLink copied to clipboard!
To record application crashes, set up core dump saving and add information about the system.
Procedure
To enable core dumps, ensure that the
/etc/systemd/system.conffile contains the following lines:DumpCore=yes DefaultLimitCORE=infinity
DumpCore=yes DefaultLimitCORE=infinityCopy to Clipboard Copied! Toggle word wrap Toggle overflow You can also add comments describing if these settings were previously present, and what the previous values were. This will enable you to reverse these changes later, if needed. Comments are lines starting with the
#character.Changing the file requires administrator level access.
Apply the new configuration:
systemctl daemon-reexec
# systemctl daemon-reexecCopy to Clipboard Copied! Toggle word wrap Toggle overflow Remove the limits for core dump sizes:
ulimit -c unlimited
# ulimit -c unlimitedCopy to Clipboard Copied! Toggle word wrap Toggle overflow To reverse this change, run the command with value
0instead ofunlimited.Install the
sospackage which provides thesosreportutility for collecting system information:dnf install sos
# dnf install sosCopy to Clipboard Copied! Toggle word wrap Toggle overflow -
When an application crashes, a core dump is generated and handled by
systemd-coredump. Create an SOS report to provide additional information about the system:
sosreport
# sosreportCopy to Clipboard Copied! Toggle word wrap Toggle overflow This creates a
.tararchive containing information about your system, such as copies of configuration files.Locate the core dump:
coredumpctl list executable-name
$ coredumpctl list executable-nameCopy to Clipboard Copied! Toggle word wrap Toggle overflow Export the core dump:
coredumpctl dump executable-name > /path/to/file-for-export
$ coredumpctl dump executable-name > /path/to/file-for-exportCopy to Clipboard Copied! Toggle word wrap Toggle overflow If the application crashed multiple times, output of the first command lists more captured core dumps. In that case, construct for the second command a more precise query by using the other information. See the coredumpctl(1) manual page for details.
Transfer the core dump and the SOS report to the computer where the debugging will take place. Transfer the executable file, too, if it is known.
ImportantWhen the executable file is not known, subsequent analysis of the core file identifies it.
- Optional: Remove the core dump and SOS report after transferring them, to free up disk space.
3.4.3. Inspecting application crash states with core dumps Copy linkLink copied to clipboard!
To inspect the state of an application at the moment it terminated unexpectely, use core dumps.
Prerequisites
- You must have a core dump file and sosreport from the system where the crash occurred.
- GDB and elfutils must be installed on your system.
Procedure
To identify the executable file where the crash occurred, run the
eu-unstripcommand with the core dump file:eu-unstrip -n --core=./core.9814
$ eu-unstrip -n --core=./core.9814Copy to Clipboard Copied! Toggle word wrap Toggle overflow 0x400000+0x207000 2818b2009547f780a5639c904cded443e564973e@0x400284 /usr/bin/sleep /usr/lib/debug/bin/sleep.debug [exe] 0x7fff26fff000+0x1000 1e2a683b7d877576970e4275d41a6aaec280795e@0x7fff26fff340 . - linux-vdso.so.1 0x35e7e00000+0x3b6000 374add1ead31ccb449779bc7ee7877de3377e5ad@0x35e7e00280 /usr/lib64/libc-2.14.90.so /usr/lib/debug/lib64/libc-2.14.90.so.debug libc.so.6 0x35e7a00000+0x224000 3ed9e61c2b7e707ce244816335776afa2ad0307d@0x35e7a001d8 /usr/lib64/ld-2.14.90.so /usr/lib/debug/lib64/ld-2.14.90.so.debug ld-linux-x86-64.so.2
0x400000+0x207000 2818b2009547f780a5639c904cded443e564973e@0x400284 /usr/bin/sleep /usr/lib/debug/bin/sleep.debug [exe] 0x7fff26fff000+0x1000 1e2a683b7d877576970e4275d41a6aaec280795e@0x7fff26fff340 . - linux-vdso.so.1 0x35e7e00000+0x3b6000 374add1ead31ccb449779bc7ee7877de3377e5ad@0x35e7e00280 /usr/lib64/libc-2.14.90.so /usr/lib/debug/lib64/libc-2.14.90.so.debug libc.so.6 0x35e7a00000+0x224000 3ed9e61c2b7e707ce244816335776afa2ad0307d@0x35e7a001d8 /usr/lib64/ld-2.14.90.so /usr/lib/debug/lib64/ld-2.14.90.so.debug ld-linux-x86-64.so.2Copy to Clipboard Copied! Toggle word wrap Toggle overflow The output contains details for each module on a line, separated by spaces. The information is listed in this order:
- The memory address where the module was mapped
- The build-id of the module and where in the memory it was found
-
The module’s executable file name, displayed as
-when unknown, or as.when the module has not been loaded from a file -
The source of debugging information, displayed as a file name when available, as
.when contained in the executable file itself, or as-when not present at all -
The shared library name (soname) or
[exe]for the main module
In this example, the important details are the file name
/usr/bin/sleepand the build-id2818b2009547f780a5639c904cded443e564973eon the line containing the text[exe]. With this information, you can identify the executable file required for analyzing the core dump.Get the executable file that crashed.
- If possible, copy it from the system where the crash occurred. Use the file name extracted from the core file.
You can also use an identical executable file on your system. Each executable file built on Red Hat Enterprise Linux contains a note with a unique build-id value. Determine the build-id of the relevant locally available executable files:
eu-readelf -n executable_file
$ eu-readelf -n executable_fileCopy to Clipboard Copied! Toggle word wrap Toggle overflow Use this information to match the executable file on the remote system with your local copy. The build-id of the local file and build-id listed in the core dump must match.
-
Finally, if the application is installed from an RPM package, you can get the executable file from the package. Use the
sosreportoutput to find the exact version of the package required.
- Get the shared libraries used by the executable file. Use the same steps as for the executable file.
- If the application is distributed as a package, load the executable file in GDB, to display hints for missing debuginfo packages. For more details, see Getting debuginfo packages for an application or library using GDB.
To examine the core file in detail, load the executable file and core dump file with GDB:
gdb -e executable_file -c core_file
$ gdb -e executable_file -c core_fileCopy to Clipboard Copied! Toggle word wrap Toggle overflow Further messages about missing files and debugging information help you identify what is missing for the debugging session. Return to the previous step if needed.
If the application’s debugging information is available as a file instead of as a package, load this file in GDB with the
symbol-filecommand:(gdb) symbol-file program.debug
(gdb) symbol-file program.debugCopy to Clipboard Copied! Toggle word wrap Toggle overflow Replace program.debug with the actual file name.
NoteIt might not be necessary to install the debugging information for all executable files contained in the core dump. Most of these executable files are libraries used by the application code. These libraries might not directly contribute to the problem you are analyzing, and you do not need to include debugging information for them.
Use the GDB commands to inspect the state of the application at the moment it crashed. See Inspecting Application Internal State with GDB.
NoteWhen analyzing a core file, GDB is not attached to a running process. Commands for controlling execution have no effect.
To see only the stack of the application at the moment it terminated, open the core file with the
eu-stackutility:eu-stack --core core-file
$ eu-stack --core core-fileCopy to Clipboard Copied! Toggle word wrap Toggle overflow This will display listing of the application’s stack.
Additional resources
3.4.4. Creating and accessing a core dump with coredumpctl Copy linkLink copied to clipboard!
To manage and analyze core dumps directly on the affected system, use coredumpctl. This tool simplifies finding, capturing, and inspecting crash data. Identify an unresponsive process, force a core dump, and verify its successful capture to diagnose application failures.
Prerequisites
The system must be configured to use
systemd-coredumpfor core dump handling. To verify this is true:sysctl kernel.core_pattern
$ sysctl kernel.core_patternCopy to Clipboard Copied! Toggle word wrap Toggle overflow The configuration is correct if the output starts with the following:
kernel.core_pattern = |/usr/lib/systemd/systemd-coredump
kernel.core_pattern = |/usr/lib/systemd/systemd-coredumpCopy to Clipboard Copied! Toggle word wrap Toggle overflow
Procedure
Find the PID of the hung process, based on a known part of the executable file name:
pgrep -a executable-name-fragment
$ pgrep -a executable-name-fragmentCopy to Clipboard Copied! Toggle word wrap Toggle overflow This command will output a line in the form
PID command-line
PID command-lineCopy to Clipboard Copied! Toggle word wrap Toggle overflow Use the command-line value to verify that the PID belongs to the intended process.
For example:
pgrep -a bc
$ pgrep -a bcCopy to Clipboard Copied! Toggle word wrap Toggle overflow 5459 bc
5459 bcCopy to Clipboard Copied! Toggle word wrap Toggle overflow Send an abort signal to the process:
kill -ABRT PID
# kill -ABRT PIDCopy to Clipboard Copied! Toggle word wrap Toggle overflow Verify that the core has been captured by
coredumpctl:coredumpctl list PID
$ coredumpctl list PIDCopy to Clipboard Copied! Toggle word wrap Toggle overflow For example:
coredumpctl list 5459
$ coredumpctl list 5459Copy to Clipboard Copied! Toggle word wrap Toggle overflow TIME PID UID GID SIG COREFILE EXE Thu 2019-11-07 15:14:46 CET 5459 1000 1000 6 present /usr/bin/bc
TIME PID UID GID SIG COREFILE EXE Thu 2019-11-07 15:14:46 CET 5459 1000 1000 6 present /usr/bin/bcCopy to Clipboard Copied! Toggle word wrap Toggle overflow Further examine or use the core file as needed.
You can specify the core dump by PID and other values. See the coredumpctl(1) manual page for further details.
Next steps
To show details of the core file, run:
coredumpctl info PID
$ coredumpctl info PIDCopy to Clipboard Copied! Toggle word wrap Toggle overflow To load the core file in the GDB debugger, run:
coredumpctl debug PID
$ coredumpctl debug PIDCopy to Clipboard Copied! Toggle word wrap Toggle overflow Depending on the availability of debugging information, GDB might suggest commands to run, such as:
Missing separate debuginfos, use: dnf debuginfo-install bc-1.07.1-23.el10.x86_64
Missing separate debuginfos, use: dnf debuginfo-install bc-1.07.1-23.el10.x86_64Copy to Clipboard Copied! Toggle word wrap Toggle overflow For more details on this process, see Getting debuginfo packages for an application or library using GDB.
To export the core file for further processing elsewhere, run:
coredumpctl dump PID > /path/to/file_for_export
$ coredumpctl dump PID > /path/to/file_for_exportCopy to Clipboard Copied! Toggle word wrap Toggle overflow Replace /path/to/file_for_export with the file where you want to put the core dump.
coredumpctl dump PID > /path/to/file_for_export
$ coredumpctl dump PID > /path/to/file_for_exportCopy to Clipboard Copied! Toggle word wrap Toggle overflow
3.4.5. Dumping process memory with gcore Copy linkLink copied to clipboard!
To capture the memory state of a running process without terminating it, use the gcore utility. This creates a core dump file for offline analysis. The result is a snapshot of the application’s memory that helps you investigate issues while the service remains available.
Prerequisites
Procedure
Identify the process id (pid). Use tools such as
ps,pgrep, andtop:ps -C some-program
$ ps -C some-programCopy to Clipboard Copied! Toggle word wrap Toggle overflow Dump the memory of this process:
gcore -o filename pid
$ gcore -o filename pidCopy to Clipboard Copied! Toggle word wrap Toggle overflow This creates a file filename and dumps the process memory in it. While the memory is being dumped, the execution of the process is halted.
- After the core dump is finished, the process resumes normal execution.
Create an SOS report to provide additional information about the system:
sosreport
# sosreportCopy to Clipboard Copied! Toggle word wrap Toggle overflow This creates a tar archive containing information about your system, such as copies of configuration files.
- Transfer the program’s executable file, core dump, and the SOS report to the computer where the debugging will take place.
- Optional: Remove the core dump and SOS report after transferring them, to free up disk space.
Additional resources
3.4.6. Dumping protected process memory with GDB Copy linkLink copied to clipboard!
To dump protected process memory, configure GNU Debugger (GDB) to ignore core dump filters. Capture memory regions flagged as non-dumpable, such as those conserving resources or holding sensitive data. Use the gcore command within GDB to generate the complete core file.
Prerequisites
Procedure
Set GDB to ignore the settings in the
/proc/PID/coredump_filterfile:(gdb) set use-coredump-filter off
(gdb) set use-coredump-filter offCopy to Clipboard Copied! Toggle word wrap Toggle overflow Set GDB to ignore the memory page flag
VM_DONTDUMP:(gdb) set dump-excluded-mappings on
(gdb) set dump-excluded-mappings onCopy to Clipboard Copied! Toggle word wrap Toggle overflow Dump the memory:
(gdb) gcore core-file
(gdb) gcore core-fileCopy to Clipboard Copied! Toggle word wrap Toggle overflow Replace core-file with name of file where you want to dump the memory.
3.5. Debugging applications in containers Copy linkLink copied to clipboard!
To troubleshoot container applications, you can use various command-line tools.
This is not a complete list of command-line tools. The choice of tool for debugging a container application is heavily based on the container image and your use case.
For instance, the systemctl, journalctl, ip, netstat, ping, traceroute, perf, iostat tools might need root access because they interact with system-level resources such as networking, systemd services, or hardware performance counters, which are restricted in rootless containers for security reasons.
Rootless containers operate without requiring elevated privileges, running as non-root users within user namespaces to provide improved security and isolation from the host system. They offer limited interaction with the host, reduced attack surface, and enhanced security by mitigating the risk of privilege escalation vulnerabilities.
Rootful containers run with elevated privileges, typically as the root user, granting full access to system resources and capabilities. While rootful containers offer greater flexibility and control, they pose security risks due to their potential for privilege escalation and exposure of the host system to vulnerabilities.
For more information about rootful and rootless containers, see Creating a rootless container with bind mount by using the podman RHEL system role and Special considerations for rootless containers.
- Systemd and Process Management Tools
-
systemctl: Controls systemd services within containers, allowing start, stop, enable, and disable operations.journalctl: Views logs generated by systemd services, aiding in troubleshooting container issues. - Networking Tools
-
ip: Manages network interfaces, routing, and addresses within containers.netstat: Displays network connections, routing tables, and interface statistics.ping: Verifies network connectivity between containers or hosts.traceroute: Identifies the path packets take to reach a destination, useful for diagnosing network issues. - Process and Performance Tools
-
ps: Lists currently running processes within containers.top: Provides real-time insights into resource usage by processes within containers.htop: Interactive process viewer for monitoring resource utilization.perf: CPU performance profiling, tracing, and monitoring, aiding in pinpointing performance bottlenecks within the system or applications.vmstat: Reports virtual memory statistics within containers, aiding in performance analysis.iostat: Monitors input/output statistics for block devices within containers.gdb(GNU Debugger): A command-line debugger that helps in examining and debugging programs by allowing users to track and control their execution, inspect variables, and analyze memory and registers during runtime. For more information, see the Debugging applications within Red Hat OpenShift containers article.strace: Intercepts and records system calls made by a program, aiding in troubleshooting by revealing interactions between the program and the operating system. - Security and Access Control Tools
-
sudo: Enables executing commands with elevated privileges.chroot: Changes the root directory for a command, helpful in testing or troubleshooting within a different root directory. - Podman-Specific Tools
-
podman logs: Batch-retrieves whatever logs are present for one or more containers at the time of execution.podman inspect: Displays the low-level information on containers and images as identified by name or ID.podman events: Monitor and print events that occur in Podman. Each event includes a timestamp, a type, a status, a name (if applicable), and an image (if applicable). The default logging mechanism isjournald.podman run --health-cmd: Use the health check to determine the health or readiness of the process running inside the container.podman top: Display the running processes of the container.podman exec: Running commands in or attaching to a running container is extremely useful to get a better understanding of what is happening in the container.podman export: When the container fails, it is difficult to know the reasons. Exporting the filesystem structure from the container will allow for checking other logs files that might not be in the mounted volumes.
Chapter 4. Using the gcc-toolset-15 container image Copy linkLink copied to clipboard!
The gcc-toolset-15 container image provides a complete toolchain for building, testing, and troubleshooting C and C++ applications in a containerized environment.
4.1. Introduction to the gcc-toolset-15 container image Copy linkLink copied to clipboard!
The gcc-toolset-15 container image provides a GCC Toolset 15 toolchain for building, testing, and troubleshooting C and C++ applications on Red Hat Enterprise Linux (RHEL). By using this image, you can mantain a reproducible environment without installing packages directly on the host.
The image is part of the RHEL container collection. All included RPM packages originate from official RHEL repositories, ensuring the image follows standard RHEL lifecycle and support policies. This provides a portable, containerized alternative to traditional RPM-based delivery.
Deployment scenarios include:
- Interactive development on a RHEL host by running an interactive container that mounts source code from the host.
- Noninteractive builds in CI pipelines or scheduled jobs, with build scripts running inside the container and writing artifacts to host-mounted directories.
- Evaluation and troubleshooting of GCC Toolset 15 behavior in an isolated environment without installing the toolchain on the host.
4.2. Supported platforms and architectures for the gcc-toolset-15 container image Copy linkLink copied to clipboard!
The gcc-toolset-15 image targets the same architectures provided by Red Hat Enterprise Linux (RHEL), including AMD64 and Intel 64 (x86_64), 64-bit ARM (aarch64), IBM Power, little endian (ppc64le), and 64-bit IBM Z (s390x).
For image-specific metadata, supported architectures, and tags, see the Red Hat container catalog entry for the gcc-toolset-15 container image.
If you plan to deploy the image across multiple architectures, ensure that you choose a tag that includes multi-architecture support or use architecture-specific tags according to your organization’s standards.
The gcc-toolset-15 image is available from Red Hat container registries. The exact path can differ depending on whether you use public registries, internal mirrors, or both. This document uses placeholders for image locations:
-
<REGISTRY>for the registry hostname. -
<NAMESPACE>for the registry namespace that contains thegcc-toolset-15image. -
<TAG>for the image tag that corresponds to the GCC Toolset 15 level that you require.
Use your product documentation, internal image catalog, or registry UI to determine the correct values for <REGISTRY>, <NAMESPACE>, and <TAG>. Record these values for use in the procedures in this document.
4.3. Preparing a RHEL host for the gcc-toolset-15 container image Copy linkLink copied to clipboard!
To configure hosts to use the gcc-toolset-15 image, verify system requirements and install necessary container tools. For comprehensive guidelines, see Building, running, and managing containers.
Prerequisites
- Administrator access to the RHEL host.
- The host is registered and has access to required Red Hat Enterprise Linux repositories.
- The host runs a supported Red Hat Enterprise Linux variant and architecture.
- Ensure that the host has adequated resources for CPU, memory, and storage for build workloads.
- The host has network access to the container registry or to an internal mirror.
Procedure
Install the container management tools:
sudo dnf install -y container-tools
$ sudo dnf install -y container-toolsCopy to Clipboard Copied! Toggle word wrap Toggle overflow Verify that
podmanis available:podman --version
$ podman --versionCopy to Clipboard Copied! Toggle word wrap Toggle overflow If the command completes successfully, it prints the version. For example:
podman version 5.4.1
podman version 5.4.1Copy to Clipboard Copied! Toggle word wrap Toggle overflow Verify subscription and repository access:
sudo dnf repolist
$ sudo dnf repolistCopy to Clipboard Copied! Toggle word wrap Toggle overflow If required, configure subscription settings according to your environment so that the host can consume RHEL content and container registries.
4.4. Authenticating to the container registry Copy linkLink copied to clipboard!
To pull the gcc-toolset-15 image, you must log in to the container registry.
Prerequisites
-
container-toolsare installed on the RHEL host. - You have the registry hostname and valid credentials.
Procedure
Log in to the registry using
podman:podman login <REGISTRY>
$ podman login <REGISTRY>Copy to Clipboard Copied! Toggle word wrap Toggle overflow Replace
<REGISTRY>with your registry hostname.- When prompted, enter your user name and password, or use the authentication mechanism that your organization provides.
Verification
Verify that the login and registry access were successful by searching for the
gcc-toolset-15image:podman search <REGISTRY>/<NAMESPACE>/gcc-toolset-15**
$ podman search <REGISTRY>/<NAMESPACE>/gcc-toolset-15**Copy to Clipboard Copied! Toggle word wrap Toggle overflow
4.5. Pulling the gcc-toolset-15 container image Copy linkLink copied to clipboard!
To use the gcc-toolset-15 image, pull it to your local system after authenticating to the registry.
Prerequisites
- You have authenticated to the container registry.
-
You know the
<REGISTRY>,<NAMESPACE>, and<TAG>values for the image. You can determine these details from the Red Hat Container Catalog or your internal image catalog.
Procedure
Pull the image:
podman pull <REGISTRY>/<NAMESPACE>/gcc-toolset-15:<TAG>
$ podman pull <REGISTRY>/<NAMESPACE>/gcc-toolset-15:<TAG>Copy to Clipboard Copied! Toggle word wrap Toggle overflow Replace
<REGISTRY>,<NAMESPACE>, and<TAG>with the values you determined earlier.
Verification
Verify that the image is available locally:
podman images <REGISTRY>/<NAMESPACE>/gcc-toolset-15
$ podman images <REGISTRY>/<NAMESPACE>/gcc-toolset-15Copy to Clipboard Copied! Toggle word wrap Toggle overflow The output should display a table row containing the repository, tag, image ID, and size. For example:
REPOSITORY TAG IMAGE ID CREATED SIZE registry.redhat.io/.../gcc-toolset-15 latest a1b2c3d4e5f6 2 days ago 540MB
REPOSITORY TAG IMAGE ID CREATED SIZE registry.redhat.io/.../gcc-toolset-15 latest a1b2c3d4e5f6 2 days ago 540MBCopy to Clipboard Copied! Toggle word wrap Toggle overflow
4.6. Using the gcc-toolset-15 to run interactive development containers Copy linkLink copied to clipboard!
To use the gcc-toolset-15 image for interactive development, run an interactive container that mounts source code from the host.
Prerequisites
-
The
gcc-toolset-15image is available locally. -
You have a host directory containing the application source code, for example,
/home/devuser/src. - You have read and write permissions for the host directory.
Procedure
Start an interactive container that mounts the source directory and uses it as the working directory:
podman run --rm -it -v /home/devuser/src:/src -w /src <REGISTRY>/<NAMESPACE>/gcc-toolset-15:<TAG> /bin/bash
$ podman run --rm -it -v /home/devuser/src:/src -w /src <REGISTRY>/<NAMESPACE>/gcc-toolset-15:<TAG> /bin/bashCopy to Clipboard Copied! Toggle word wrap Toggle overflow Replace
<REGISTRY>,<NAMESPACE>, and<TAG>with your specific values.Inside the container, verify that the source code is available:
ls /src
# ls /srcCopy to Clipboard Copied! Toggle word wrap Toggle overflow Build an application using GCC Toolset 15:
gcc -o myapp main.c
# gcc -o myapp main.cCopy to Clipboard Copied! Toggle word wrap Toggle overflow Build artifacts created in
/srcare stored on the host in/home/devuser/src.When the interactive session completes, exit the shell:
exit
# exitCopy to Clipboard Copied! Toggle word wrap Toggle overflow Because the container was started with the
--rmflag, it is removed automatically.
4.7. Running noninteractive builds with gcc-toolset-15 Copy linkLink copied to clipboard!
To perform noninteractive builds, run the gcc-toolset-15 image with a predefined build script that exits upon completion.
In CI systems, you can integrate this pattern by running podman run as part of a pipeline step. Use pipeline variables or configuration files to provide the values for <REGISTRY>, <NAMESPACE>, <TAG>, and host paths.
Ensure build scripts write logs and artifacts to host-mounted directories. This practice enables CI systems and administrators to inspect outputs after the container exits and to archive them as needed.
Prerequisites
-
The
gcc-toolset-15image is available locally. -
A host directory for source and build scripts, for example,
/srv/src. -
A host directory for build output, for example,
/srv/build-output. -
A build script, for example,
build.sh, that runs GCC Toolset 15 commands.
Procedure
- Prepare your build workflow. Ensure both the source and output directories on the host have appropriate permissions.
Run the container in noninteractive mode:
podman run --rm -v /srv/src:/src -v /srv/build-output:/build-output -w /src <REGISTRY> / <NAMESPACE> /gcc-toolset-15: <TAG> /src/build.sh
$ podman run --rm -v /srv/src:/src -v /srv/build-output:/build-output -w /src <REGISTRY> / <NAMESPACE> /gcc-toolset-15: <TAG> /src/build.shCopy to Clipboard Copied! Toggle word wrap Toggle overflow In this example:
-
/src/build.shis a script inside the container that performs the build. -
Build artifacts and logs are written to
/build-output, which maps to/srv/build-outputon the host.
-
4.8. Maintaining the gcc-toolset-15 container image Copy linkLink copied to clipboard!
To maintain the gcc-toolset-15 image, monitor for updates including security fixes, bug fixes, and dependency changes. Track updates and errata by monitoring RHEL release notes, or internal advisories for new images that contain updated GCC Toolset 15 content.
- If you use an internal registry, mirror the updated image into the internal registry or rely on existing synchronization mechanisms.
-
Use internal paths for
<REGISTRY>and<NAMESPACE>in all procedures. - Coordinate with the team that manages the internal registry to ensure that mirrors are updated inline with your rollout schedule.
Procedure
Update to a new image tag: Consult the Red Hat Ecosystem Catalog or your internal registry to find the new image tag.
-
Determine the
<NEW_TAG>that corresponds to the updatedgcc-toolset-15image. Pull the new tag to your environment:
podman pull <REGISTRY>/<NAMESPACE>/gcc-toolset-15:<NEW_TAG>
$ podman pull <REGISTRY>/<NAMESPACE>/gcc-toolset-15:<NEW_TAG>Copy to Clipboard Copied! Toggle word wrap Toggle overflow -
Update scripts, CI jobs, and documentation to reference
<NEW_TAG>as appropriate.
-
Determine the
Remove outdated image tags after you complete validation and roll out the new tag, according to your retention policy:
podman rmi <REGISTRY>/<NAMESPACE>/gcc-toolset-15:<OLD_TAG>
$ podman rmi <REGISTRY>/<NAMESPACE>/gcc-toolset-15:<OLD_TAG>Copy to Clipboard Copied! Toggle word wrap Toggle overflow
4.9. Troubleshooting the gcc-toolset-15 container image Copy linkLink copied to clipboard!
Identify and resolve common issues when pulling or running the gcc-toolset-15 container image.
- Common issues when pulling images
If
podman pullfails:-
Check registry login by running
podman login <REGISTRY>. - Verify network connectivity to the registry.
-
Confirm that
<REGISTRY>,<NAMESPACE>, and<TAG>values are correct. -
If access is denied, verify that your subscription and registry permissions allow access to the
gcc-toolset-15image.
-
Check registry login by running
- Common issues when running containers
If
podman runfails:Verify that the image is available locally by running
podman images <REGISTRY>/<NAMESPACE>/gcc-toolset-15.The output should display a table row containing the repository, tag, image ID, and size. For example:
REPOSITORY TAG IMAGE ID CREATED SIZE registry.redhat.io/.../gcc-toolset-15 latest a1b2c3d4e5f6 2 days ago 540MB
REPOSITORY TAG IMAGE ID CREATED SIZE registry.redhat.io/.../gcc-toolset-15 latest a1b2c3d4e5f6 2 days ago 540MBCopy to Clipboard Copied! Toggle word wrap Toggle overflow - Check volume mount paths to ensure that host directories exist and that you have appropriate permissions.
- Review container exit codes and logs to identify script or compiler errors.
- Collecting data for support
When opening a support case, collect the following data:
-
The exact
podmancommands that you ran. - Full command output and error messages.
-
The values of
<REGISTRY>,<NAMESPACE>, and<TAG>that you used. - Information about the host, including Red Hat Enterprise Linux version and architecture.
-
The exact
4.10. Operational and security considerations for the gcc-toolset-15 container image Copy linkLink copied to clipboard!
Review the following operational and security guidelines when using the gcc-toolset-15 container image in your environment.
- Network and registry access control
- Ensure that hosts can access the required registries or internal mirrors and that firewall settings allow necessary connections. Use internal registries where possible to centralize control of images. Consult your internal documentation for details on your organization’s registry layout and CI integration patterns.
- Resource management for build workloads
-
Build containers can be resource-intensive. Use cgroup controls,
systemdintegration, or container runtime options to manage CPU, memory, and I/O usage on shared hosts. - Logging and auditing containerized builds
- Configure build scripts to write logs to host-mounted directories. Integrate these logs with your logging and auditing infrastructure to track build activity and diagnose issues.
- Security and compliance guidelines
Because the
gcc-toolset-15image is built from Red Hat Enterprise Linux (RHEL) repositories, it follows RHEL security practices. However, you should still:- Limit who can run containers on shared hosts.
- Periodically review and update image tags to consume security fixes.
- Use internal registries and scanning tools according to your organization’s policies.
Chapter 5. Additional toolsets for development Copy linkLink copied to clipboard!
Additional toolsets for C and C++ development provides capabilities for building, analyzing, and optimizing applications. By using these toolsets, you can define development workflows and improve application quality.
5.1. Using the GCC Toolset Copy linkLink copied to clipboard!
5.1.1. What is the GCC Toolset Copy linkLink copied to clipboard!
Red Hat Enterprise Linux 10 introduces the GCC Toolset, which is an Application Stream containing updated versions of development and performance analysis tools. The GCC Toolset is similar to Red Hat Developer Toolset.
GCC Toolset is available as an Application Stream in the form of a software collection in the AppStream repository. The GCC Toolset is fully supported under Red Hat Enterprise Linux Subscription Level Agreements, is functionally complete, and is intended for production use. Applications and libraries provided by the GCC Toolset do not replace the Red Hat Enterprise Linux system versions, do not override them, and do not automatically become default or preferred choices. By using a framework called software collections, an additional set of developer tools is installed into the /opt/ directory and is explicitly enabled by the user on demand by using the scl utility. Unless noted otherwise for specific tools or features, the GCC Toolset is available for all architectures supported by Red Hat Enterprise Linux.
For information about the length of support, see Red Hat Enterprise Linux Application Streams Life Cycle.
5.1.2. Installing the GCC Toolset Copy linkLink copied to clipboard!
Installing the GCC Toolset on a system installs the main tools and all necessary dependencies. Note that some parts of the toolset are not installed by default and must be installed separately.
Procedure
To install the GCC Toolset version N:
dnf install gcc-toolset-N
# dnf install gcc-toolset-NCopy to Clipboard Copied! Toggle word wrap Toggle overflow
5.1.3. Installing individual packages from the GCC Toolset Copy linkLink copied to clipboard!
To install only certain tools from the GCC Toolset instead of the whole toolset, list the available packages and install the selected ones with the dnf package management tool. Use selective installation to access packages not installed by default with the full toolset.
Procedure
List the packages available in the GCC Toolset version N:
dnf list available gcc-toolset-N-\
$ dnf list available gcc-toolset-N-\Copy to Clipboard Copied! Toggle word wrap Toggle overflow To install any of these packages:
dnf install package_name
# dnf install package_nameCopy to Clipboard Copied! Toggle word wrap Toggle overflow Replace package_name with a space-separated list of packages to install. For example, to install the
gcc-toolset-15-annobin-annocheckandgcc-toolset-15-binutils-develpackages:dnf install gcc-toolset-15-annobin-annocheck gcc-toolset-15-binutils-devel
# dnf install gcc-toolset-15-annobin-annocheck gcc-toolset-15-binutils-develCopy to Clipboard Copied! Toggle word wrap Toggle overflow
5.1.4. Uninstalling the GCC Toolset Copy linkLink copied to clipboard!
Remove the GCC Toolset from your system by uninstalling it using the dnf package management tool.
Procedure
To uninstall the GCC Toolset version N:
dnf remove gcc-toolset-N \
# dnf remove gcc-toolset-N \Copy to Clipboard Copied! Toggle word wrap Toggle overflow
5.1.5. Accessing the GCC Toolset Copy linkLink copied to clipboard!
To access the GCC Toolset, you can run a specific tool using the scl utility, or start a shell session where the toolset versions override the system versions.
Procedure
To run a single tool from the GCC Toolset version N:
gcc-toolset-N-env tool
$ gcc-toolset-N-env toolCopy to Clipboard Copied! Toggle word wrap Toggle overflow Replace tool with the command provided by the tool you want to run.
To run a shell session where tool versions from the GCC Toolset version N override system versions of these tools:
gcc-toolset-N-env bash
$ gcc-toolset-N-env bashCopy to Clipboard Copied! Toggle word wrap Toggle overflow NoteThe
sclutility is not used for the GCC Toolset in Red Hat Enterprise Linux 10. Thescl enablecommand does not work with the GCC Toolset.
5.2. GCC Toolset 15 Copy linkLink copied to clipboard!
GCC Toolset 15 in Red Hat Enterprise Linux offers updated compilers and debuggers for C, C++, and Fortran. It enables building, testing, and optimizing applications with current features while maintaining system stability and support.
5.2.1. The GCC Toolset 15 tools and versions Copy linkLink copied to clipboard!
The GCC Toolset 15 offers updated versions of development tools for building and debugging applications on RHEL.
- [list of tools]
| Name | Version | Description |
| GCC | 15.1.0 | A portable compiler suite with support for C, C++, and Fortran. |
| binutils | 2.44 | A collection of binary tools and other utilities to inspect and manipulate object files and binaries. |
| dwz | 0.16 | A tool to optimize DWARF debugging information contained in ELF shared libraries and ELF executables for size. |
5.2.2. C++ compatibility in the GCC Toolset 15 Copy linkLink copied to clipboard!
GCC Toolset 15 supports a range of C++ language standards. The default standard is C++17, but you can choose other options such as C++98, C++11, C++14, or experimental versions including C++20, C++23, and C++26. To select a different standard, use the appropriate compiler flag when building your code.
This compatibility information applies only to GCC from the GCC Toolset 15.
The GCC compiler in the GCC Toolset 15 can use the following C++ standards:
- C++98
- This language standard is available in the GCC Toolset 15. Binaries, shared libraries, and objects built using this standard can be freely mixed regardless of being built with GCC from the GCC Toolset 15, Red Hat Developer Toolset, and RHEL 5, 6, 7, and 8.
- C++11
This language standard is available in the GCC Toolset 15.
Using the C++11 language version is supported when all C++ objects compiled with the corresponding flag have been built using GCC version 5 or later.
- C++14
This language standard is available in the GCC Toolset 15.
Using the C++14 language version is supported when all C++ objects compiled with the corresponding flag have been built using GCC version 6 or later.
- C++17
This language standard is available in the GCC Toolset 15.
This is the default language standard setting for the GCC Toolset 15, with GNU extensions, equivalent to explicitly using option
-std=gnu++17.Using the C++17 language version is supported when all C++ objects compiled with the corresponding flag have been built using GCC version 10 or later.
- C++20, C++23, and C++26
These language standards are available in the GCC Toolset 15 only as experimental, unstable, and unsupported capabilities. Additionally, the compatibility of objects, binary files, and libraries built using these standards cannot be guaranteed.
To enable the C++20 standard, add the command-line option
-std=c++20to yourg++command line.To enable the C++23 standard, add the command-line option
-std=c++23to yourg++command line.To enable the C++26 standard, add the command-line option
-std=c++26to yourg++command line.
All of the language standards are available in both the standard-compliant variant and with GNU extensions.
Use the GCC Toolset 15 for linking when you combine objects built with the GCC Toolset 15 and objects built with the system toolchain, particulary .o or .a files. This ensures any newer library features provided only by the GCC Toolset 15 are resolved at link time.
5.2.3. Specifics of GCC in the GCC Toolset 15 Copy linkLink copied to clipboard!
Certain behaviors and requirements of binutils in the GCC Toolset 15 differ from the base Red Hat Enterprise Linux binutils. These include automatic static linking of certain library features and the requirement to specify libraries after object files during linking.
- Static linking of libraries
- Certain more recent library features are statically linked into applications built with the GCC Toolset 15 to support execution on multiple versions of Red Hat Enterprise Linux. This creates an additional minor security risk because standard Red Hat Enterprise Linux errata do not change this code. If the need arises for developers to rebuild their applications due to this risk, Red Hat will communicate this using a security erratum.
Because of this additional security risk, developers are strongly advised not to statically link their entire application for the same reasons.
- Specify libraries after object files when linking
In the GCC Toolset 15, libraries are linked by using linker scripts, which might specify some symbols through static archives. This is required to ensure compatibility with multiple versions of Red Hat Enterprise Linux. However, the linker scripts use the names of the corresponding shared object files. As a consequence, the linker uses different symbol handling rules than expected, and does not recognize symbols required by object files when the option adding the library is specified before options specifying the object files:
gcc-toolset-15-env gcc -lsomelib objfile.o
$ gcc-toolset-15-env gcc -lsomelib objfile.oCopy to Clipboard Copied! Toggle word wrap Toggle overflow Using a library from the GCC Toolset 15 in this manner results in the linker error message
undefined reference to symbol. To prevent this problem, follow the standard linking practice and specify the option by adding the library after the options specifying the object files:gcc-toolset-15-env gcc objfile.o -lsomelib
$ gcc-toolset-15-env gcc objfile.o -lsomelibCopy to Clipboard Copied! Toggle word wrap Toggle overflow Note that this recommendation also applies when using the base Red Hat Enterprise Linux version of GCC.
5.2.4. Specifics of binutils in the GCC Toolset 15 Copy linkLink copied to clipboard!
Certain behaviors and requirements of binutils in the GCC Toolset 15 differ from the base Red Hat Enterprise Linux binutils. These include automatic static linking of certain library features and the requirement to specify libraries after object files during linking.
- Static linking of libraries
- GCC Toolset 15 statically links newer library features into applications to ensure compatibility across multiple Red Hat Enterprise Linux versions. Statically linked code can introduce minor security risks, because security updates require applications to be rebuilt. If a security vulnerability is discovered, Red Hat will notify developers to rebuild affected applications through a security advisory.
Because of this additional security risk, developers are strongly advised not to statically link their entire application for the same reasons.
- Specify libraries after object files when linking
In the GCC Toolset 15, libraries are linked by using linker scripts which might specify some symbols through static archives. This is required to ensure compatibility with multiple versions of Red Hat Enterprise Linux. However, the linker scripts use the names of the corresponding shared object files. As a consequence, the linker uses different symbol handling rules than expected, and does not recognize symbols required by object files when the option adding the library is specified before options specifying the object files:
gcc-toolset-15-env gcc ld -lsomelib objfile.o
$ gcc-toolset-15-env gcc ld -lsomelib objfile.oCopy to Clipboard Copied! Toggle word wrap Toggle overflow Using a library from the GCC Toolset 15 in this manner results in the linker error message
undefined reference to symbol. To prevent this problem, follow the standard linking practice, and specify the option adding the library after the options specifying the object files:gcc-toolset-15-env ld objfile.o -lsomelib
$ gcc-toolset-15-env ld objfile.o -lsomelibCopy to Clipboard Copied! Toggle word wrap Toggle overflow Note that this recommendation also applies when using the base Red Hat Enterprise Linux version of binutils.
5.3. Compiler toolsets Copy linkLink copied to clipboard!
RHEL 10 provides several compiler toolsets as Application Streams, including the LLVM Toolset, Rust Toolset, and Go Toolset. These toolsets provides compilers, debuggers, dependency managers, and other related tools and libraries for C, C++, Rust, and Go development.
The following compiler toolsets are available:
- LLVM Toolset provides the LLVM compiler infrastructure framework, the Clang compiler for the C and C++ languages, the LLDB debugger, and related tools for code analysis.
-
Rust Toolset provides the Rust programming language compiler
rustc, thecargobuild tool and dependency manager, thecargo-vendorplug-in, and required libraries. -
Go Toolset provides the Go programming language tools and libraries. Go is alternatively known as
golang.
For more details and information about usage, see the compiler toolsets user guides on the Red Hat Developer Tools page.
5.4. The Annobin project Copy linkLink copied to clipboard!
Use the Annobin project to add markers to Executable and Linkable Format (ELF) objects. With the Annobin project, you can track build properties and perform security hardening checks on your binaries using the annobin plugin and the annocheck programs.
The annobin plugin scans the GNU Compiler Collection (GCC) command line, the compilation state, and the compilation process, and generates the ELF notes. The ELF notes record how the binary was built and provide information for the annocheck program to perform security hardening checks.
The security hardening checker is part of the annocheck program and is enabled by default. It checks the binary files to determine whether the program was built with necessary security hardening options and compiled correctly. annocheck is able to recursively scan directories, archives, and RPM packages for ELF object files.
The files must be in ELF format. annocheck does not handle any other binary file types.
The following section describes how to:
-
Use the
annobinplugin -
Use the
annocheckprogram -
Remove redundant
annobinnotes
5.4.1. Using the annobin plugin Copy linkLink copied to clipboard!
You can use the annobin plugin to annotate binary files. You can enable the annobin plugin and pass options to it.
5.4.1.1. Enabling the annobin plug-in Copy linkLink copied to clipboard!
To add build security notes to binaries, enable the annobin plug-in by using command-line options with gcc or clang utilities.
Procedure
To enable the
annobinplug-in withgcc, use:gcc -fplugin=annobin
$ gcc -fplugin=annobinCopy to Clipboard Copied! Toggle word wrap Toggle overflow If
gccdoes not find theannobinplug-in, use:gcc -iplugindir=/path/to/directory/containing/annobin/
$ gcc -iplugindir=/path/to/directory/containing/annobin/Copy to Clipboard Copied! Toggle word wrap Toggle overflow Replace /path/to/directory/containing/annobin/ with the absolute path to the directory that contains
annobin.To find the directory containing the
annobinplug-in, use:gcc --print-file-name=plugin
$ gcc --print-file-name=pluginCopy to Clipboard Copied! Toggle word wrap Toggle overflow
To enable the
annobinplug-in withclang, use:clang -fplugin=/path/to/directory/containing/annobin/
$ clang -fplugin=/path/to/directory/containing/annobin/Copy to Clipboard Copied! Toggle word wrap Toggle overflow Replace /path/to/directory/containing/annobin/ with the absolute path to the directory that contains
annobin.Optional: To remove the redundant
annobinnotes, use theobjcopyutility:objcopy --merge-notes file-name
$ objcopy --merge-notes file-nameCopy to Clipboard Copied! Toggle word wrap Toggle overflow
5.4.1.2. Passing options to the annobin plug-in Copy linkLink copied to clipboard!
To pass options to the annobin plug-in, use the appropriate command-line arguments with gcc or clang.
Procedure
To pass options to the
annobinplug-in withgcc, use:gcc -fplugin=annobin -fplugin-arg-annobin-option file-name
$ gcc -fplugin=annobin -fplugin-arg-annobin-option file-nameCopy to Clipboard Copied! Toggle word wrap Toggle overflow Replace option with the
annobincommand line arguments and replace file-name with the name of the file.For example, to display additional details about what
annobinit is doing, use:gcc -fplugin=annobin -fplugin-arg-annobin-verbose file-name
$ gcc -fplugin=annobin -fplugin-arg-annobin-verbose file-nameCopy to Clipboard Copied! Toggle word wrap Toggle overflow Replace file-name with the name of the file.
To pass options to the
annobinplug-in withclang, use:clang -fplugin=/path/to/directory/containing/annobin/ -Xclang -plugin-arg-annobin -Xclang option file-name
$ clang -fplugin=/path/to/directory/containing/annobin/ -Xclang -plugin-arg-annobin -Xclang option file-nameCopy to Clipboard Copied! Toggle word wrap Toggle overflow Replace option with the
annobincommand line arguments and replace /path/to/directory/containing/annobin/ with the absolute path to the directory containingannobin.For example, to display additional details about what
annobinit is doing, use:clang -fplugin=/usr/lib64/clang/10/lib/annobin.so -Xclang -plugin-arg-annobin -Xclang verbose file-name
$ clang -fplugin=/usr/lib64/clang/10/lib/annobin.so -Xclang -plugin-arg-annobin -Xclang verbose file-nameCopy to Clipboard Copied! Toggle word wrap Toggle overflow Replace file-name with the name of the file.
5.4.2. Using the annocheck program Copy linkLink copied to clipboard!
You can use annocheck to examine files, directories, RPM packages, and extra tools.
annocheck recursively scans directories, archives, and RPM packages for ELF object files. The files have to be in the ELF format. annocheck does not handle any other binary file types.
5.4.2.1. Using annocheck to examine files Copy linkLink copied to clipboard!
To verify hardening options and build security notes of ELF files, examine the files by using the annocheck tool.
Procedure
To examine a file, use:
annocheck file-name
$ annocheck file-nameCopy to Clipboard Copied! Toggle word wrap Toggle overflow Replace file-name with the name of a file.
NoteThe files must be in ELF format.
annocheckdoes not handle any other binary file types.annocheckprocesses static libraries that contain ELF object files.
5.4.2.2. Using annocheck to examine directories Copy linkLink copied to clipboard!
To examine ELF files in a directory, use the annocheck tool, which recursively scans directories, subdirectories, and archives.
Procedure
To scan a directory, use:
annocheck directory-name
$ annocheck directory-nameCopy to Clipboard Copied! Toggle word wrap Toggle overflow Replace directory-name with the name of a directory.
annocheckautomatically examines the contents of the directory, its sub-directories, and any archives and RPM packages within the directory.Noteannocheckonly looks for ELF files. Other file types are ignored.
5.4.2.3. Using annocheck to examine RPM packages Copy linkLink copied to clipboard!
To examine ELF files in an RPM package, use the annocheck tool, which recursively scans all ELF files inside the package.
Procedure
To scan an RPM package, use:
annocheck rpm-package-name
$ annocheck rpm-package-nameCopy to Clipboard Copied! Toggle word wrap Toggle overflow Replace rpm-package-name with the name of an RPM package.
annocheckrecursively scans all the ELF files inside the RPM package.Noteannocheckonly looks for ELF files. Other file types are ignored.To scan an RPM package with provided debug info RPM, use:
annocheck rpm-package-name --debug-rpm debuginfo-rpm
$ annocheck rpm-package-name --debug-rpm debuginfo-rpmCopy to Clipboard Copied! Toggle word wrap Toggle overflow Replace rpm-package-name with the name of an RPM package, and debuginfo-rpm with the name of a debug info RPM associated with the binary RPM.
5.4.2.4. Using annocheck extra tools Copy linkLink copied to clipboard!
The annocheck utility includes multiple tools for examining binary files, which you can enable by using command-line options.
The following section describes how to enable the:
-
built-bytool -
notestool -
section-sizetool
You can enable multiple tools at the same time.
The hardening checker is enabled by default.
5.4.2.4.1. Enabling the built-by tool Copy linkLink copied to clipboard!
To find the name of the compiler that built a specific binary file, you can use the annocheck built-by tool.
Procedure
To enable the
built-bytool, use:annocheck --enable-built-by
$ annocheck --enable-built-byCopy to Clipboard Copied! Toggle word wrap Toggle overflow For more information about the
built-bytool, see the--helpcommand-line option.
5.4.2.4.2. Enabling the notes tool Copy linkLink copied to clipboard!
To display the notes stored inside a binary file created by the annobin plug-in, you can use the annocheck notes tool.
Procedure
To enable the
notestool, use:annocheck --enable-notes
$ annocheck --enable-notesCopy to Clipboard Copied! Toggle word wrap Toggle overflow The notes are displayed in a sequence sorted by the address range. For more information about the
notestool, see the--helpcommand-line option.
5.4.2.4.3. Enabling the section-size tool Copy linkLink copied to clipboard!
To display the size of named sections, you can use the annocheck section-size tool.
Procedure
To enable the
section-sizetool, use:annocheck --section-size=name
$ annocheck --section-size=nameCopy to Clipboard Copied! Toggle word wrap Toggle overflow Replace name with the name of the named section. The output is restricted to specific sections. A cumulative result is produced at the end. For more information about the
section-sizetool, see the--helpcommand-line option.
5.4.2.4.4. Hardening checker basics Copy linkLink copied to clipboard!
The hardening checker is enabled by default. You can disable the hardening checker by using the --disable-hardened command-line option.
5.4.2.4.4.1. Hardening checker options Copy linkLink copied to clipboard!
The annocheck tool verifies binaries for various hardening options, such as stack protection, PIC/PIE usage, and secure linker settings.
The following options are checked:
-
Lazy binding is disabled using the
-z nowlinker option. - The program does not have a stack in an executable region of memory.
- The relocations for the GOT table are set to read only.
- No program segment has all three of the read, write and execute permission bits set.
- There are no relocations against executable code.
- The runpath information for locating shared libraries at runtime includes only directories rooted at /usr.
-
The program was compiled with
annobinnotes enabled. -
The program was compiled with the
-fstack-protector-strongoption enabled. -
The program was compiled with
-D_FORTIFY_SOURCE=2. -
The program was compiled with
-D_GLIBCXX_ASSERTIONS. -
The program was compiled with
-fexceptionsenabled. -
The program was compiled with
-fstack-clash-protectionenabled. -
The program was compiled at
-O2or higher. - The program does not have any relocations held in a writeable.
- Dynamic executables have a dynamic segment.
-
Shared libraries were compiled with
-fPICor-fPIE. -
Dynamic executables were compiled with
-fPIEand linked with-pie. -
If available, the
-fcf-protection=fulloption was used. -
If available, the
-mbranch-protectionoption was used. -
If available, the
-mstackrealignoption was used.
5.4.2.4.4.2. Disabling the hardening checker Copy linkLink copied to clipboard!
To skip security checks during binary analysis, disable the hardening checker by using the annocheck utility.
Procedure
To scan the notes in a file without the hardening checker, use:
annocheck --enable-notes --disable-hardened file-name
$ annocheck --enable-notes --disable-hardened file-nameCopy to Clipboard Copied! Toggle word wrap Toggle overflow Replace file-name with the name of a file.
5.4.3. Removing redundant annobin notes Copy linkLink copied to clipboard!
Using annobin increases the size of binaries. To reduce the size of the binaries compiled with annobin, use the objcopy program, which is a part of the binutils package.
Procedure
To remove the redundant
annobinnotes, use:objcopy --merge-notes file-name
$ objcopy --merge-notes file-nameCopy to Clipboard Copied! Toggle word wrap Toggle overflow Replace file-name with the name of the file.
Chapter 6. Notable changes in RHEL 10 Copy linkLink copied to clipboard!
Red Hat Enterprise Linux 10 introduces important changes that affect C and C++ application development.
6.1. Compatibility breaking changes in C++ Copy linkLink copied to clipboard!
In GNU Compiler Collection (GCC) 12 and later, std::condition_variable::wait is a thread cancellation point. This allows pthread_cancel to clean up the stack, whereas in GCC 11 and earlier, the function was noexcept and cancellation terminated the process. If you have code that depends on wait never throwing an exception, review the code and take appropriate action. Furthermore, newer C++ versions deprecate certain class templates, which now trigger warning diagnostics.
std::condition_variable::waitis now a thread cancellation point-
In GCC 11 and earlier, the
std::condition_variable::waitfunction wasnoexcept, which made it incompatible with thread cancellation. As a result, if a call topthread_cancelcanceled a thread blocked instd::condition_variable::wait, the process would be terminated. In GCC 12 and later,std::condition_variable::waitcan be canceled by calls to thepthread_cancelfunction, which unwinds the stack. If you have code that depends onwaitnever throwing an exception, review the code and take appropriate action. - Deprecated class templates, Certain class templates have been deprecated in new versions of C++ and produce warning diagnostics in GCC 12 and later
The following class templates have been deprecated in C++11 and later:
-
std::unary_function -
std::binary_function
-
-
The
std::iteratorclass template has been deprecated in C++17 and later.
To prevent the warning diagnostics, you can take one of the following actions:
When you do not want to make other changes to the code, silence the warning diagnostics by using GCC’s diagnostic pragmas. For example:
#pragma GCC diagnostic push #pragma GCC diagnostic ignored “-Wdeprecated-declarations" class Functor : public std::unary_function<int, int> { /* … */ }; #pragma GCC diagnostic pop#pragma GCC diagnostic push #pragma GCC diagnostic ignored “-Wdeprecated-declarations" class Functor : public std::unary_function<int, int> { /* … */ }; #pragma GCC diagnostic popCopy to Clipboard Copied! Toggle word wrap Toggle overflow When you want your code to be compatible with later versions of C++, replace these class templates in the code with nested typedefs. For example, you can replace a
std::unary_functionbase class withresult_typeandargument_typetypedefs:Copy to Clipboard Copied! Toggle word wrap Toggle overflow
6.2. Compatibility breaking changes to glibc Copy linkLink copied to clipboard!
Updates to the GNU C Library (glibc) include compatibility breaking changes to the dynamic linker search algorithm, which no longer checks certain subdirectories for shared objects. This release also removes the catchsegv script and the libSegFault.so shared object.
- Changes to how the dynamic linker finds shared objects
The following list describes changes to the dynamic linker search algorithm:
-
The dynamic linker no longer loads shared objects from the
tlssubdirectories on the library search path or the subdirectory that corresponds to theAT_PLATFORMsystem name. -
The dynamic linker no longer searches subdirectories named after the legacy
AT_HWCAPsearch mechanism.
-
The dynamic linker no longer loads shared objects from the
Port your applications to the glibc-hwcaps mechanism, which has been available since RHEL 8.4.
- Removed
catchsegvscript andlibSegFault.soshared object -
The
catchsegvscript and associatedlibSegFault.soshared object have been removed. You can use an out-of-process alternative for intercepting coredumps and backtraces, such assystemd-coredumpandcoredumpctl.
6.3. C23 support Copy linkLink copied to clipboard!
The GNU C Library (glibc) supports new features introduced in the C23 standard, formerly known as C2X. For more information about these features, see the glibc manual.
6.4. RHEL 10 uses IEEE binary128 for long double on POWER Copy linkLink copied to clipboard!
On the POWER (ppc64le) architecture, the default representation of the long double type changes from the IBM-specific double-double format to the standard IEEE 754 binary128 format in RHEL 10. Both formats use 16 bytes, but their internal representations differ. The C and C++ core runtime libraries in RHEL 10 (glibc and libstdc++) support both formats. The rest of the system uses binary128 by default. If your applications use the long double type on POWER, you must recompile them on RHEL 10 to ensure correct behavior.