Missing dependency dev-libs/libzip & collision

[anthonyryan1]

Regression introduced in ff236357d5a065e544e20bef4fa32658c87f8f7c

FEATURES="collision-protect" is showing that HHVM is compiling it's own version of lipzip.so and trying to install it as a system library.

We're going to need to add a dependency on dev-libs/libzip and determine why HHVM isn't noticing it.

[anthonyryan1]

We also seem to be missing (and risking collisions for): app-arch/lz4 & dev-libs/double-conversion.

Furthermore, hhvm will not compile with dev-libs/double-conversion from the portage tree. This will need to be investigated and is probably an issue we'll need to take upstream. Possibly related to https://github.com/facebook/folly/issues/32.

[rosmanov]

I'm still having this issue, which is annoying because it happens at the very end of the long build:

>>> Completed installing hhvm-3.2.0 into /var/tmp/portage/dev-php/hhvm-3.2.0/image/

strip: x86_64-pc-linux-gnu-strip --strip-unneeded -R .comment -R .GCC.command.line -R .note.gnu.gold-version
   usr/lib/libzip.a
   usr/bin/hh_single_type_check
   usr/bin/hhvm
   usr/lib/libzip.so
   usr/bin/hh_client
   usr/bin/hh_server

 * QA Notice: The following files contain writable and executable sections
 *  Files with such sections will not work properly (or at all!) on some
 *  architectures/operating systems.  A bug should be filed at
 *  http://bugs.gentoo.org/ to make sure the issue is fixed.
 *  For more information, see http://hardened.gentoo.org/gnu-stack.xml
 *  Please include the following list of files in your report:
 *  Note: Bugs should be filed for the respective maintainers
 *  of the package in question and not hardened@g.o.
 * RWX --- --- usr/bin/hhvm

>>> Installing (1 of 1) dev-php/hhvm-3.2.0
 * checking 1332 files for package collisions
1000 files checked ...
 * This package will overwrite one or more files that may belong to other
 * packages (see list below). You can use a command such as `portageq
 * owners / <filename>` to identify the installed package that owns a
 * file. If portageq reports that only one package owns a file then do
 * NOT file a bug report. A bug report is only useful if it identifies at
 * least two or more packages that are known to install the same file(s).
 * If a collision occurs and you can not explain where the file came from
 * then you should simply ignore the collision since there is not enough
 * information to determine if a real problem exists. Please do NOT file
 * a bug report at http://bugs.gentoo.org unless you report exactly which
 * two packages install the same file(s). See
 * http://wiki.gentoo.org/wiki/Knowledge_Base:Blockers for tips on how to
 * solve the problem. And once again, please do NOT file a bug report
 * unless you have completely understood the above message.
 * 
 * Detected file collision(s):
 * 
 *  /usr/include/zipconf.h
 *  /usr/include/zip.h
 *  /usr/lib/libzip.so
 *  /usr/lib/libzip.a
 * 
 * Searching all installed packages for file collisions...
 * 
 * Press Ctrl-C to Stop
 * 
 * dev-libs/libzip-0.11.1:0::gentoo
 *  /usr/include/zip.h
 *  /usr/include/zipconf.h
 *  /usr/lib/libzip.a
 *  /usr/lib/libzip.so
 * 
 * Package 'dev-php/hhvm-3.2.0' NOT merged due to file collisions. If
 * necessary, refer to your elog messages for the whole content of the
 * above message.

>>> Failed to install dev-php/hhvm-3.2.0, Log file:

>>>  '/var/tmp/portage/dev-php/hhvm-3.2.0/temp/build.log'

 * Messages for package dev-php/hhvm-3.2.0:

 * This package will overwrite one or more files that may belong to other
 * packages (see list below). You can use a command such as `portageq
 * owners / <filename>` to identify the installed package that owns a
 * file. If portageq reports that only one package owns a file then do
 * NOT file a bug report. A bug report is only useful if it identifies at
 * least two or more packages that are known to install the same file(s).
 * If a collision occurs and you can not explain where the file came from
 * then you should simply ignore the collision since there is not enough
 * information to determine if a real problem exists. Please do NOT file
 * a bug report at http://bugs.gentoo.org unless you report exactly which
 * two packages install the same file(s). See
 * http://wiki.gentoo.org/wiki/Knowledge_Base:Blockers for tips on how to
 * solve the problem. And once again, please do NOT file a bug report
 * unless you have completely understood the above message.
 * 
 * Detected file collision(s):
 * 
 *  /usr/include/zipconf.h
 *  /usr/include/zip.h
 *  /usr/lib/libzip.so
 *  /usr/lib/libzip.a
 * 
 * Searching all installed packages for file collisions...
 * 
 * Press Ctrl-C to Stop
 * 
 * dev-libs/libzip-0.11.1:0::gentoo
 *  /usr/include/zip.h
 *  /usr/include/zipconf.h
 *  /usr/lib/libzip.a
 *  /usr/lib/libzip.so
 * 
 * Package 'dev-php/hhvm-3.2.0' NOT merged due to file collisions. If
 * necessary, refer to your elog messages for the whole content of the
 * above message.

 * GNU info directory index is up-to-date.

I tried to unmerge dev-libs/libzip. However, it gets pulled again with emerge hhvm, because hhvm requires dev-libs/libzip.

[ellisonpatterson]

Getting this issue as well.