[11.0-preview.2] Native AoT compilation fails on Linux

[martincostello]

Description

Upgrading an application targeting .NET 11 preview 1 to preview 2, native AoT compilation now fails on Linux using ubuntu-latest GitHub Actions runner (Ubuntu 24.04.3):

  Generating native code
/usr/bin/ld.bfd : error : UniversalTransition.S.o: missing .note.GNU-stack section implies executable stack [/home/runner/work/website/website/src/Website/Website.csproj]
  /usr/bin/ld.bfd: NOTE: This behaviour is deprecated and will be removed in a future version of the linker
/home/runner/.nuget/packages/microsoft.dotnet.ilcompiler/11.0.0-preview.2.26159.112/build/Microsoft.NETCore.Native.targets(391,5): error MSB3073: The command ""clang" "/home/runner/work/website/website/artifacts/obj/Website/release/native/Website.o" -o "/home/runner/work/website/website/artifacts/bin/Website/release/native/Website" -Wl,--version-script="/home/runner/work/website/website/artifacts/obj/Website/release/native/Website.exports" -Wl,--export-dynamic -gz=zlib -fuse-ld=bfd /home/runner/.nuget/packages/sentry/6.1.0/buildTransitive/../sentry-native/linux-x64/libsentry-native.a /home/runner/.nuget/packages/microsoft.netcore.app.runtime.nativeaot.linux-x64/11.0.0-preview.2.26159.112/runtimes/linux-x64/native/libSystem.Native.a /home/runner/.nuget/packages/microsoft.netcore.app.runtime.nativeaot.linux-x64/11.0.0-preview.2.26159.112/runtimes/linux-x64/native/libSystem.IO.Compression.Native.a /home/runner/.nuget/packages/microsoft.netcore.app.runtime.nativeaot.linux-x64/11.0.0-preview.2.26159.112/runtimes/linux-x64/native/libSystem.Net.Security.Native.a /home/runner/.nuget/packages/microsoft.netcore.app.runtime.nativeaot.linux-x64/11.0.0-preview.2.26159.112/runtimes/linux-x64/native/libSystem.Security.Cryptography.Native.OpenSsl.a /home/runner/.nuget/packages/microsoft.netcore.app.runtime.nativeaot.linux-x64/11.0.0-preview.2.26159.112/runtimes/linux-x64/native/libbootstrapper.o /home/runner/.nuget/packages/microsoft.netcore.app.runtime.nativeaot.linux-x64/11.0.0-preview.2.26159.112/runtimes/linux-x64/native/libRuntime.ServerGC.a /home/runner/.nuget/packages/microsoft.netcore.app.runtime.nativeaot.linux-x64/11.0.0-preview.2.26159.112/runtimes/linux-x64/native/libeventpipe-enabled.a /home/runner/.nuget/packages/microsoft.netcore.app.runtime.nativeaot.linux-x64/11.0.0-preview.2.26159.112/runtimes/linux-x64/native/libRuntime.VxsortDisabled.a /home/runner/.nuget/packages/microsoft.netcore.app.runtime.nativeaot.linux-x64/11.0.0-preview.2.26159.112/runtimes/linux-x64/native/libstandalonegc-disabled.a /home/runner/.nuget/packages/microsoft.netcore.app.runtime.nativeaot.linux-x64/11.0.0-preview.2.26159.112/runtimes/linux-x64/native/libaotminipal.a /home/runner/.nuget/packages/microsoft.netcore.app.runtime.nativeaot.linux-x64/11.0.0-preview.2.26159.112/runtimes/linux-x64/native/libstdc++compat.a /home/runner/.nuget/packages/microsoft.netcore.app.runtime.nativeaot.linux-x64/11.0.0-preview.2.26159.112/runtimes/linux-x64/native/libz.a /home/runner/.nuget/packages/microsoft.netcore.app.runtime.nativeaot.linux-x64/11.0.0-preview.2.26159.112/runtimes/linux-x64/native/libbrotlienc.a /home/runner/.nuget/packages/microsoft.netcore.app.runtime.nativeaot.linux-x64/11.0.0-preview.2.26159.112/runtimes/linux-x64/native/libbrotlidec.a /home/runner/.nuget/packages/microsoft.netcore.app.runtime.nativeaot.linux-x64/11.0.0-preview.2.26159.112/runtimes/linux-x64/native/libbrotlicommon.a /home/runner/.nuget/packages/microsoft.netcore.app.runtime.nativeaot.linux-x64/11.0.0-preview.2.26159.112/runtimes/linux-x64/native/libzstd.a -g -Wl,--build-id=sha1 -Wl,--as-needed -pthread -ldl -lrt -lm -pie -Wl,-pie -Wl,-z,relro -Wl,-z,now -Wl,--eh-frame-hdr -Wl,--discard-all -Wl,--gc-sections" exited with code -1. [/home/runner/work/website/website/src/Website/Website.csproj]

I have several applications targeting .NET 11 targeting preview 2, and this is the only one I'm having this issue (and #124336) with. I'm unsure what specifically causes the error for this application and not others. Also seeing here, here and here.

Reproduction Steps

1. Clone martincostello/website@7e44977 on a Linux machine
2. Run build.ps1 in the root of the application

Expected behavior

The native AoT binary is successfully compiled.

Actual behavior

Compilation fails with the error UniversalTransition.S.o: missing .note.GNU-stack section implies executable stack.

Regression?

Yes

Known Workarounds

None

Configuration

.NET SDK 11.0.100-preview.2.26159.112

Other information

No response

[dotnet-policy-service]

Tagging subscribers to this area: @agocke, @dotnet/ilc-contrib
See info in area-owners.md if you want to be subscribed.

[jtschuster]

It looks like a few objects in the libRuntime.ServerGC.a and Runtime.WorkstationGC.a libraries for linux-x64 are missing the .note.GNU-stack section, not just UniversalTransition.S.o.

1. AllocFast.S.o
2. ExceptionHandling.S.o
3. GcProbe.S.o
4. MiscStubs.S.o
5. PInvoke.S.o
6. InteropThunksHelpers.S.o
7. StubDispatch.S.o
8. UniversalTransition.S.o
9. WriteBarriers.S.o
10. CachedInterfaceDispatchAot.S.o

The warning repros on a plain aot app on linux-x64.

runtime/src/coreclr/nativeaot/Runtime/CMakeLists.txt

Lines 227 to 243 in 3f56fbb

	list(APPEND RUNTIME_SOURCES_ARCH_ASM
	${RUNTIME_DIR}/${ARCH_SOURCES_DIR}/AllocFast.${ASM_SUFFIX}
	${ARCH_SOURCES_DIR}/ExceptionHandling.${ASM_SUFFIX}
	${ARCH_SOURCES_DIR}/GcProbe.${ASM_SUFFIX}
	${ARCH_SOURCES_DIR}/MiscStubs.${ASM_SUFFIX}
	${ARCH_SOURCES_DIR}/PInvoke.${ASM_SUFFIX}
	${ARCH_SOURCES_DIR}/InteropThunksHelpers.${ASM_SUFFIX}
	${RUNTIME_DIR}/${ARCH_SOURCES_DIR}/StubDispatch.${ASM_SUFFIX}
	${ARCH_SOURCES_DIR}/UniversalTransition.${ASM_SUFFIX}
	${RUNTIME_DIR}/${ARCH_SOURCES_DIR}/WriteBarriers.${ASM_SUFFIX}
	)
	if (CLR_CMAKE_TARGET_ARCH_AMD64 OR CLR_CMAKE_TARGET_ARCH_ARM64)
	list(APPEND RUNTIME_SOURCES_ARCH_ASM
	${ARCH_SOURCES_DIR}/CachedInterfaceDispatchAot.${ASM_SUFFIX}
	)
	endif ()

Looks relevant.

[jtschuster]

It looks like the clang 22 assembler no longer adds the .note.GNU-stack section even when -Wa,--noexecstack is passed. Filing a bug on LLVM.

[agocke]

FYI @richlander

[richlander]

I'm using Preview 2 on Ubuntu 24.04 (x64) with NAOT. I've been building dotnet-inspect that way. I'm not seeing this issue. I wonder why not.

[jtschuster]

@richlander What version of ld do you have on your machine? I think it started warning in 2.39

[richlander]

$ ld --version
GNU ld (GNU Binutils for Ubuntu) 2.42
Copyright (C) 2024 Free Software Foundation, Inc.
This program is free software; you may redistribute it under the terms of
the GNU General Public License version 3 or (at your option) a later version.
This program has absolutely no warranty.
$ uname -a
Linux merritt 6.14.0-37-generic #37~24.04.1-Ubuntu SMP PREEMPT_DYNAMIC Thu Nov 20 10:25:38 UTC 2 x86_64 x86_64 x86_64 GNU/Linux
$ head -3 /etc/os-release
PRETTY_NAME="Ubuntu 24.04.4 LTS"
NAME="Ubuntu"
VERSION_ID="24.04"
$ dotnet --version
11.0.100-preview.2.26159.112
$ clang --version
clang version 17.0.0 (https://github.com/swiftlang/llvm-project.git 9784760565e8cae0bc0b97bad69aaf498408dc3d)
Target: x86_64-unknown-linux-gnu
Thread model: posix
InstalledDir: /home/rich/.local/share/swiftly/toolchains/6.2.3/usr/bin

[martincostello]

Just tested locally via WSL using the following and I get the same error.

• martincostello/build-kit@61423c2
• dotnet publish ./samples/ContainerApp --arch x64 --os linux -p:PublishProfile=DefaultContainer -p:SetGitHubContainerPublishingOutputs=true

$ dotnet publish ./samples/ContainerApp --arch x64 --os linux -p:PublishProfile=DefaultContainer -p:SetGitHubContainerPublishingOutputs=true
Restore complete (0.8s)
  MartinCostello.BuildKit netstandard2.0 succeeded (0.3s) → artifacts/bin/MartinCostello.BuildKit/release/MartinCostello.BuildKit.dll
  ContainerApp net11.0 linux-x64 failed with 2 error(s) (25.6s) → artifacts/bin/ContainerApp/release_linux-x64/ContainerApp.dll
    /usr/bin/ld.bfd : error UniversalTransition.S.o: missing .note.GNU-stack section implies executable stack
    /home/martin/.nuget/packages/microsoft.dotnet.ilcompiler/11.0.0-preview.2.26159.112/build/Microsoft.NETCore.Native.targets(391,5): error MSB3073: The command ""clang" "/home/martin/coding/martincostello/build-kit/artifacts/obj/ContainerApp/release_linux-x64/native/ContainerApp.o" -o "/home/martin/coding/martincostello/build-kit/artifacts/bin/ContainerApp/release_linux-x64/native/ContainerApp" -Wl,--version-script="/home/martin/coding/martincostello/build-kit/artifacts/obj/ContainerApp/release_linux-x64/native/ContainerApp.exports" -Wl,--export-dynamic -gz=zlib -fuse-ld=bfd /home/martin/.nuget/packages/microsoft.netcore.app.runtime.nativeaot.linux-x64/11.0.0-preview.2.26159.112/runtimes/linux-x64/native/libSystem.Native.a /home/martin/.nuget/packages/microsoft.netcore.app.runtime.nativeaot.linux-x64/11.0.0-preview.2.26159.112/runtimes/linux-x64/native/libSystem.IO.Compression.Native.a /home/martin/.nuget/packages/microsoft.netcore.app.runtime.nativeaot.linux-x64/11.0.0-preview.2.26159.112/runtimes/linux-x64/native/libSystem.Net.Security.Native.a /home/martin/.nuget/packages/microsoft.netcore.app.runtime.nativeaot.linux-x64/11.0.0-preview.2.26159.112/runtimes/linux-x64/native/libSystem.Security.Cryptography.Native.OpenSsl.a /home/martin/.nuget/packages/microsoft.netcore.app.runtime.nativeaot.linux-x64/11.0.0-preview.2.26159.112/runtimes/linux-x64/native/libbootstrapper.o /home/martin/.nuget/packages/microsoft.netcore.app.runtime.nativeaot.linux-x64/11.0.0-preview.2.26159.112/runtimes/linux-x64/native/libRuntime.ServerGC.a /home/martin/.nuget/packages/microsoft.netcore.app.runtime.nativeaot.linux-x64/11.0.0-preview.2.26159.112/runtimes/linux-x64/native/libeventpipe-enabled.a /home/martin/.nuget/packages/microsoft.netcore.app.runtime.nativeaot.linux-x64/11.0.0-preview.2.26159.112/runtimes/linux-x64/native/libRuntime.VxsortDisabled.a /home/martin/.nuget/packages/microsoft.netcore.app.runtime.nativeaot.linux-x64/11.0.0-preview.2.26159.112/runtimes/linux-x64/native/libstandalonegc-disabled.a /home/martin/.nuget/packages/microsoft.netcore.app.runtime.nativeaot.linux-x64/11.0.0-preview.2.26159.112/runtimes/linux-x64/native/libaotminipal.a /home/martin/.nuget/packages/microsoft.netcore.app.runtime.nativeaot.linux-x64/11.0.0-preview.2.26159.112/runtimes/linux-x64/native/libstdc++compat.a /home/martin/.nuget/packages/microsoft.netcore.app.runtime.nativeaot.linux-x64/11.0.0-preview.2.26159.112/runtimes/linux-x64/native/libz.a /home/martin/.nuget/packages/microsoft.netcore.app.runtime.nativeaot.linux-x64/11.0.0-preview.2.26159.112/runtimes/linux-x64/native/libbrotlienc.a /home/martin/.nuget/packages/microsoft.netcore.app.runtime.nativeaot.linux-x64/11.0.0-preview.2.26159.112/runtimes/linux-x64/native/libbrotlidec.a /home/martin/.nuget/packages/microsoft.netcore.app.runtime.nativeaot.linux-x64/11.0.0-preview.2.26159.112/runtimes/linux-x64/native/libbrotlicommon.a /home/martin/.nuget/packages/microsoft.netcore.app.runtime.nativeaot.linux-x64/11.0.0-preview.2.26159.112/runtimes/linux-x64/native/libzstd.a -g -Wl,--build-id=sha1 -Wl,--as-needed -pthread -ldl -lrt -lm -pie -Wl,-pie -Wl,-z,relro -Wl,-z,now -Wl,--eh-frame-hdr -Wl,--discard-all -Wl,--gc-sections" exited with code -1.

$ ld --version
GNU ld (GNU Binutils for Ubuntu) 2.42
Copyright (C) 2024 Free Software Foundation, Inc.
This program is free software; you may redistribute it under the terms of
the GNU General Public License version 3 or (at your option) a later version.
This program has absolutely no warranty.
$ uname -a
Linux Martin 6.6.87.2-microsoft-standard-WSL2 #1 SMP PREEMPT_DYNAMIC Thu Jun  5 18:30:46 UTC 2025 x86_64 x86_64 x86_64 GNU/Linux
$ head -3 /etc/os-release
PRETTY_NAME="Ubuntu 24.04.2 LTS"
NAME="Ubuntu"
VERSION_ID="24.04"
$ dotnet --version
11.0.100-preview.2.26159.112
$ clang --version
Ubuntu clang version 18.1.3 (1ubuntu1)
Target: x86_64-pc-linux-gnu
Thread model: posix
InstalledDir: /usr/bin