docker: Document workaround for TSAN failures when running under a post 6.6.6 Linux kernel (project-chip#39885)

* docker: Document workaround for TSAN failures when running under a post 6.6.6 Linux kernel
* docker: Bail out early on meson error
* docker: Fix typo
* Update integrations/docker/images/base/chip-build/Dockerfile
* Update integrations/docker/images/base/chip-build/Dockerfile

---------

Signed-off-by: Maciej Grela <[email protected]>
Co-authored-by: Arkadiusz Bokowy <[email protected]>
Co-authored-by: Boris Zbarsky <[email protected]>

Author: 3 people

integrations/docker/images/base/chip-build/Dockerfile

@@ -150,6 +150,20 @@ RUN set -x \
     && rm -rf bloaty \
     && : # last line
 
+# Code built with thread sanitizer can sometimes fail to run with an error message
+# similar to the following:
+# FATAL: ThreadSanitizer: unexpected memory mapping 0x7763c5472000-0x7763c5900000
+#
+# This happens for example when the build is executed on a Ubuntu 24.04 host. It
+# is reported to be linked with kernel versions 6.6.6 and higher. In order for the
+# build to succeed ASLR entropy needs to be reduced. This can be done with the
+# sysctl command:
+# sudo sysctl vm.mmap_rnd_bits=28
+#
+# This command is not persistent across reboots. This is desired as reducing
+# ASLR entropy has negative impact on exploit mitigation.
+# Reference: https://github.com/google/sanitizers/issues/1716
+
 # Build glib-2.0 from source with enabled thread sanitizer. This is needed for
 # running CHIP tests with TSAN enabled. When running applications with TSAN
 # all shared libraries should be built with TSAN enabled, otherwise TSAN might
@@ -163,7 +177,8 @@ RUN case ${TARGETPLATFORM} in \
     && export CCACHE_DISABLE=1 PYTHONDONTWRITEBYTECODE=1 \
     && GLIB_VERSION=$(pkg-config --modversion glib-2.0) \
     && git clone --depth=1 --branch=$GLIB_VERSION https://github.com/GNOME/glib.git \
-    && CFLAGS="-O2 -g -fsanitize=thread" meson glib/build glib -Dtests=false \
+    && (CFLAGS="-O2 -g -fsanitize=thread" meson glib/build glib -Dtests=false || \
+    { cat glib/build/meson-logs/meson-log.txt; exit 1; }) \
     && DESTDIR=../build-image ninja -C glib/build install \
     && mv glib/build-image/usr/local/lib64/lib* $LD_LIBRARY_PATH_TSAN \
     && rm -rf glib \