Package: src:gitsign Version: 0.13.0-2 Severity: serious Tags: ftbfs forky sid
Dear maintainer: During a rebuild of all packages in unstable, this package failed to build. Below you will find the last part of the build log (probably the most relevant part, but not necessarily). If required, the full build log is available here: https://people.debian.org/~sanvila/build-logs/202510/ About the archive rebuild: The build was made on virtual machines from AWS, using sbuild and a reduced chroot with only build-essential packages. If you cannot reproduce the bug please contact me privately, as I am willing to provide ssh access to a virtual machine where the bug is fully reproducible. If this is really a bug in one of the build-depends, please use reassign and add an affects on src:gitsign, so that this is still visible in the BTS web page for this package. Thanks. -------------------------------------------------------------------------------- [...] debian/rules clean dh clean --builddirectory=_build --buildsystem=golang dh_auto_clean -O--builddirectory=_build -O--buildsystem=golang dh_autoreconf_clean -O--builddirectory=_build -O--buildsystem=golang dh_clean -O--builddirectory=_build -O--buildsystem=golang debian/rules binary dh binary --builddirectory=_build --buildsystem=golang dh_update_autotools_config -O--builddirectory=_build -O--buildsystem=golang dh_autoreconf -O--builddirectory=_build -O--buildsystem=golang dh_auto_configure -O--builddirectory=_build -O--buildsystem=golang dh_auto_build -O--builddirectory=_build -O--buildsystem=golang cd _build && go install -trimpath -v -p 2 github.com/sigsto [too-long-redacted] om/sigstore/gitsign/pkg/version internal/unsafeheader internal/goarch internal/cpu [... snipped ...] go.step.sm/crypto/x25519 go.step.sm/crypto/keyutil go.step.sm/crypto/randutil go.step.sm/crypto/pemutil github.com/sigstore/gitsign/pkg/version github.com/aws/aws-sdk-go/service/kms/kmsiface github.com/sigstore/gitsign/internal/commands/version github.com/sigstore/gitsign/internal/cache/api net/rpc github.com/tink-crypto/tink-go-awskms/integration/awskms github.com/sigstore/rekor/pkg/signer github.com/sigstore/rekor/pkg/sharding github.com/sigstore/gitsign/pkg/rekor github.com/sigstore/gitsign/internal/cache github.com/sigstore/gitsign/internal/rekor github.com/sigstore/gitsign/pkg/git github.com/sigstore/gitsign/internal/signerverifier github.com/sigstore/gitsign/pkg/fulcio github.com/sigstore/gitsign/internal/gitsign github.com/sigstore/gitsign/internal/fulcio github.com/sigstore/gitsign/internal/signature github.com/sigstore/gitsign/internal/git github.com/sigstore/gitsign/internal/gpg github.com/sigstore/gitsign/internal/commands/verify os/signal github.com/mattn/go-tty github.com/sigstore/gitsign/internal/commands/verify-tag github.com/sigstore/gitsign/internal/io github.com/coreos/go-systemd/activation github.com/sigstore/gitsign/internal/commands/root github.com/patrickmn/go-cache github.com/sigstore/gitsign github.com/sigstore/gitsign/internal/cache/service github.com/sigstore/gitsign/cmd/gitsign-credential-cache github.com/russross/blackfriday/v2 github.com/cpuguy83/go-md2man/v2/md2man github.com/spf13/cobra/doc github.com/sigstore/gitsign/docs/cli github.com/sigstore/gitsign/internal/git/gittest github.com/sigstore/gitsign/pkg/gitsign dh_auto_test -O--builddirectory=_build -O--buildsystem=golang cd _build && go test -vet=off -v -p 2 github.com/sigstore/g [too-long-redacted] om/sigstore/gitsign/pkg/version ? github.com/sigstore/gitsign [no test files] ? github.com/sigstore/gitsign/cmd/gitsign-credential-cache [no test files] ? github.com/sigstore/gitsign/docs/cli [no test files] === RUN TestStripUrl --- PASS: TestStripUrl (0.00s) PASS ok github.com/sigstore/gitsign/internal 0.002s === RUN TestAttestCommitRef === RUN TestAttestCommitRef/base LogEntry ID foo 1 === RUN TestAttestCommitRef/noop LogEntry ID foo 1 === RUN TestAttestCommitRef/new_commit LogEntry ID foo 1 --- PASS: TestAttestCommitRef (0.03s) --- PASS: TestAttestCommitRef/base (0.00s) --- PASS: TestAttestCommitRef/noop (0.00s) --- PASS: TestAttestCommitRef/new_commit (0.00s) === RUN TestAttestTreeRef === RUN TestAttestTreeRef/base LogEntry ID foo 1 === RUN TestAttestTreeRef/noop LogEntry ID foo 1 === RUN TestAttestTreeRef/new_commit_same_tree LogEntry ID foo 1 === RUN TestAttestTreeRef/new_commit_new_tree LogEntry ID foo 1 --- PASS: TestAttestTreeRef (0.01s) --- PASS: TestAttestTreeRef/base (0.00s) --- PASS: TestAttestTreeRef/noop (0.00s) --- PASS: TestAttestTreeRef/new_commit_same_tree (0.00s) --- PASS: TestAttestTreeRef/new_commit_new_tree (0.00s) PASS ok github.com/sigstore/gitsign/internal/attest 0.053s === RUN TestCache Get sbuild@/<<PKGBUILDDIR>>/_build/src/github.com/sigstore/gitsign/internal/cache Store sbuild@/<<PKGBUILDDIR>>/_build/src/github.com/sigstore/gitsign/internal/cache Get sbuild@/<<PKGBUILDDIR>>/_build/src/github.com/sigstore/gitsign/internal/cache gitsign-credential-cache: found credential! Get sbuild@/<<PKGBUILDDIR>>/_build/src/github.com/sigstore/gitsign/internal/cache gitsign-credential-cache: found credential! --- PASS: TestCache (0.16s) PASS ok github.com/sigstore/gitsign/internal/cache 0.159s ? github.com/sigstore/gitsign/internal/cache/api [no test files] ? github.com/sigstore/gitsign/internal/cache/service [no test files] ? github.com/sigstore/gitsign/internal/cert [no test files] ? github.com/sigstore/gitsign/internal/commands/attest [no test files] ? github.com/sigstore/gitsign/internal/commands/initialize [no test files] ? github.com/sigstore/gitsign/internal/commands/root [no test files] === RUN TestShow === RUN TestShow/fulcio-cert === RUN TestShow/gpg --- PASS: TestShow (0.00s) --- PASS: TestShow/fulcio-cert (0.00s) --- PASS: TestShow/gpg (0.00s) PASS ok github.com/sigstore/gitsign/internal/commands/show 0.011s ? github.com/sigstore/gitsign/internal/commands/verify [no test files] ? github.com/sigstore/gitsign/internal/commands/verify-tag [no test files] ? github.com/sigstore/gitsign/internal/commands/version [no test files] === RUN TestGet --- PASS: TestGet (0.00s) PASS ok github.com/sigstore/gitsign/internal/config 0.010s === RUN TestSign --- PASS: TestSign (0.00s) === RUN TestSignDetached --- PASS: TestSignDetached (0.00s) === RUN TestSignDetachedWithOpenSSL --- PASS: TestSignDetachedWithOpenSSL (0.03s) === RUN TestSignRemoveHeaders --- PASS: TestSignRemoveHeaders (0.00s) === RUN TestAddTimestamps --- PASS: TestAddTimestamps (0.02s) === RUN TestTimestampsVerifications --- PASS: TestTimestampsVerifications (0.23s) === RUN TestVerify --- PASS: TestVerify (0.00s) === RUN TestVerifyGPGSMAttached --- PASS: TestVerifyGPGSMAttached (0.00s) === RUN TestVerifyGPGSMDetached --- PASS: TestVerifyGPGSMDetached (0.00s) === RUN TestVerifyGPGSMNoCerts --- PASS: TestVerifyGPGSMNoCerts (0.00s) === RUN TestVerifyOpenSSLAttached --- PASS: TestVerifyOpenSSLAttached (0.00s) === RUN TestVerifyOpenSSLDetached --- PASS: TestVerifyOpenSSLDetached (0.00s) === RUN TestVerifyChain --- PASS: TestVerifyChain (0.03s) === RUN TestVerifyDSAWithSHA1 --- PASS: TestVerifyDSAWithSHA1 (0.00s) PASS ok github.com/sigstore/gitsign/internal/fork/ietf-cms 1.247s === RUN TestRequestDo --- PASS: TestRequestDo (0.00s) === RUN TestRequestMatches --- PASS: TestRequestMatches (0.00s) === RUN TestGenerateNonce --- PASS: TestGenerateNonce (0.00s) === RUN TestMessageImprint --- PASS: TestMessageImprint (0.00s) === RUN TestErrorResponse --- PASS: TestErrorResponse (0.00s) === RUN TestPKIFreeText --- PASS: TestPKIFreeText (0.00s) === RUN TestTSTInfo --- PASS: TestTSTInfo (0.00s) === RUN TestParseTimestampSymantec --- PASS: TestParseTimestampSymantec (0.00s) === RUN TestParseTimestampSymantecWithCerts --- PASS: TestParseTimestampSymantecWithCerts (0.00s) === RUN TestParseTimestampDigicert --- PASS: TestParseTimestampDigicert (0.00s) === RUN TestParseTimestampComodo --- PASS: TestParseTimestampComodo (0.00s) === RUN TestParseTimestampGlobalSign --- PASS: TestParseTimestampGlobalSign (0.00s) PASS ok github.com/sigstore/gitsign/internal/fork/ietf-cms/timestamp 0.005s ? github.com/sigstore/gitsign/internal/fulcio [no test files] === RUN TestNew === RUN TestNew/FromFile === RUN TestNew/Static === RUN TestNew/None --- PASS: TestNew (0.06s) --- PASS: TestNew/FromFile (0.00s) --- PASS: TestNew/Static (0.00s) --- PASS: TestNew/None (0.00s) PASS ok github.com/sigstore/gitsign/internal/fulcio/fulcioroots 0.058s ? github.com/sigstore/gitsign/internal/git [no test files] ? github.com/sigstore/gitsign/internal/git/gittest [no test files] === RUN TestVerify --- PASS: TestVerify (0.00s) PASS ok github.com/sigstore/gitsign/internal/gitsign 0.032s ? github.com/sigstore/gitsign/internal/gpg [no test files] ? github.com/sigstore/gitsign/internal/io [no test files] ? github.com/sigstore/gitsign/internal/rekor [no test files] === RUN TestOID --- PASS: TestOID (0.00s) === RUN TestConvert --- PASS: TestConvert (0.00s) PASS ok github.com/sigstore/gitsign/internal/rekor/oid 0.007s === RUN TestMatchSAN === RUN TestMatchSAN/email_match === RUN TestMatchSAN/uri_match === RUN TestMatchSAN/no_match --- PASS: TestMatchSAN (0.00s) --- PASS: TestMatchSAN/email_match (0.00s) --- PASS: TestMatchSAN/uri_match (0.00s) --- PASS: TestMatchSAN/no_match (0.00s) PASS ok github.com/sigstore/gitsign/internal/signature 0.010s ? github.com/sigstore/gitsign/internal/signerverifier [no test files] === RUN TestKeyAlgorithm === RUN TestKeyAlgorithm/ecdsa === RUN TestKeyAlgorithm/fulcio === RUN TestKeyAlgorithm/#00 --- PASS: TestKeyAlgorithm (0.00s) --- PASS: TestKeyAlgorithm/ecdsa (0.00s) --- PASS: TestKeyAlgorithm/fulcio (0.00s) --- PASS: TestKeyAlgorithm/#00 (0.00s) === RUN TestGetCert --- PASS: TestGetCert (0.00s) PASS ok github.com/sigstore/gitsign/pkg/fulcio 0.004s === RUN TestObjectHash === RUN TestObjectHash/tag === RUN TestObjectHash/commit --- PASS: TestObjectHash (0.00s) --- PASS: TestObjectHash/tag (0.00s) --- PASS: TestObjectHash/commit (0.00s) === RUN TestSignVerify === RUN TestSignVerify/detached(true) === RUN TestSignVerify/detached(true)/VerifySignature === RUN TestSignVerify/detached(true)/CertVerifier.Verify === RUN TestSignVerify/detached(false) === RUN TestSignVerify/detached(false)/VerifySignature === RUN TestSignVerify/detached(false)/CertVerifier.Verify --- PASS: TestSignVerify (0.22s) --- PASS: TestSignVerify/detached(true) (0.00s) --- PASS: TestSignVerify/detached(true)/VerifySignature (0.00s) --- PASS: TestSignVerify/detached(true)/CertVerifier.Verify (0.00s) --- PASS: TestSignVerify/detached(false) (0.00s) --- PASS: TestSignVerify/detached(false)/VerifySignature (0.00s) --- PASS: TestSignVerify/detached(false)/CertVerifier.Verify (0.00s) PASS ok github.com/sigstore/gitsign/pkg/git 0.227s ? github.com/sigstore/gitsign/pkg/gitsign [no test files] ? github.com/sigstore/gitsign/pkg/predicate [no test files] ? github.com/sigstore/gitsign/pkg/rekor [no test files] === RUN TestVersionText --- PASS: TestVersionText (0.00s) === RUN TestEnv --- PASS: TestEnv (0.00s) PASS ok github.com/sigstore/gitsign/pkg/version 0.002s create-stamp debian/debhelper-build-stamp dh_testroot -O--builddirectory=_build -O--buildsystem=golang dh_prep -O--builddirectory=_build -O--buildsystem=golang dh_auto_install -O--builddirectory=_build -O--buildsystem=golang cd _build && mkdir -p /<<PKGBUILDDIR>>/debian/tmp/usr cd _build && cp -r bin /<<PKGBUILDDIR>>/debian/tmp/usr dh_install -O--builddirectory=_build -O--buildsystem=golang debian/rules execute_after_dh_install make[1]: Entering directory '/<<PKGBUILDDIR>>' rm -fv /<<PKGBUILDDIR>>/debian/gitsign/usr/bin/cli removed '/<<PKGBUILDDIR>>/debian/gitsign/usr/bin/cli' make[1]: Leaving directory '/<<PKGBUILDDIR>>' dh_installdocs -O--builddirectory=_build -O--buildsystem=golang dh_installchangelogs -O--builddirectory=_build -O--buildsystem=golang debian/rules execute_before_dh_installman-arch make[1]: Entering directory '/<<PKGBUILDDIR>>' mkdir -pv /<<PKGBUILDDIR>>/debian/tmp/usr/share/man/man1 mkdir: created directory '/<<PKGBUILDDIR>>/debian/tmp/usr/share/man' mkdir: created directory '/<<PKGBUILDDIR>>/debian/tmp/usr/share/man/man1' help2man --version-string="0.13.0-2" \ --no-info \ --name="Keyless Git signing using Sigstore" \ --output /<<PKGBUILDDIR>>/debian/tmp/usr/share/man/man1/gitsign.1 \ /<<PKGBUILDDIR>>/debian/tmp/usr/bin/gitsign help2man --version-string="0.13.0-2" \ --no-info \ --name="Gitsign(1) credential caching helper" \ --output /<<PKGBUILDDIR>>/debian/tmp/usr/share/man/man1/gitsign-credential-cache.1 \ /<<PKGBUILDDIR>>/debian/tmp/usr/bin/gitsign-credential-cache help2man: can't get `--help' info from /<<PKGBUILDDIR>>/debian/tmp/usr/bin/gitsign-credential-cache Try `--no-discard-stderr' if option outputs to stderr make[1]: *** [debian/rules:18: execute_before_dh_installman-arch] Error 255 make[1]: Leaving directory '/<<PKGBUILDDIR>>' make: *** [debian/rules:6: binary] Error 2 dpkg-buildpackage: error: debian/rules binary subprocess returned exit status 2 --------------------------------------------------------------------------------

