Package: src:python-tuf Version: 6.0.0-2 Severity: important Tags: ftbfs forky sid User: [email protected] Usertags: ftbfs-during-forky-support-period
Dear maintainer: During a rebuild of all packages in unstable with the system clock set at 2030-08-09 (estimated to be three years after the release date of forky), this package failed to build. Below you will find the last part of the build log (probably the most relevant part, but not necessarily). If required, the full build log is available here: https://people.debian.org/~sanvila/build-logs/ftbfs-future/ About the archive rebuild: This is an effort to keep forky free from FTBFS bugs during its lifetime as a supported distribution, as explained here for trixie: https://lists.debian.org/debian-devel/2024/05/msg00414.html This category of bugs is considered to be RC for forky, but I will wait two months from now before raising to serious to give people a little bit more time to fix them. The build was made using sbuild and a reduced chroot with only build-essential packages. If you cannot reproduce the bug please contact me privately, as I am willing to provide ssh access to a virtual machine where the bug is fully reproducible. If this is really a bug in one of the build-depends, please use reassign and add an affects on src:python-tuf, so that this is still visible in the BTS web page for this package. Thanks. -------------------------------------------------------------------------------- [...] """Verify and load ``data`` as new timestamp metadata. Note that an intermediate timestamp is allowed to be expired: ``TrustedMetadataSet`` will throw an ``ExpiredMetadataError`` in this case but the intermediate timestamp will be loaded. This way a newer timestamp can still be loaded (and the intermediate timestamp will be used for rollback protection). Expired timestamp will prevent loading snapshot metadata. Args: data: Unverified new timestamp metadata as bytes Raises: RuntimeError: This function is called after updating snapshot. RepositoryError: Metadata failed to load or verify as final timestamp. The actual error type and content will contain more details. Returns: Deserialized and verified ``Timestamp`` object """ if Snapshot.type in self._trusted_set: raise RuntimeError("Cannot update timestamp after snapshot") # client workflow 5.3.10: Make sure final root is not expired. if self.root.is_expired(self.reference_time): > raise exceptions.ExpiredMetadataError("Final root.json is expired") E tuf.api.exceptions.ExpiredMetadataError: Final root.json is expired tuf/ngclient/_internal/trusted_metadata_set.py:231: ExpiredMetadataError _____________ TestTrustedMetadataSet.test_update_timestamp_expired _____________ self = <tests.test_trusted_metadata_set.TestTrustedMetadataSet testMethod=test_update_timestamp_expired> def test_update_timestamp_expired(self) -> None: # new_timestamp has expired def timestamp_expired_modifier(timestamp: Timestamp) -> None: timestamp.expires = datetime(1970, 1, 1, tzinfo=timezone.utc) # expired intermediate timestamp is loaded but raises timestamp = self.modify_metadata( Timestamp.type, timestamp_expired_modifier ) with self.assertRaises(exceptions.ExpiredMetadataError): self.trusted_set.update_timestamp(timestamp) # snapshot update does start but fails because timestamp is expired with self.assertRaises(exceptions.ExpiredMetadataError): > self.trusted_set.update_snapshot(self.metadata[Snapshot.type]) tests/test_trusted_metadata_set.py:344: _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ def update_snapshot( self, data: bytes, trusted: bool | None = False ) -> Snapshot: """Verify and load ``data`` as new snapshot metadata. Note that an intermediate snapshot is allowed to be expired and version is allowed to not match timestamp meta version: ``TrustedMetadataSet`` will throw an ``ExpiredMetadataError``/``BadVersionNumberError`` in these cases but the intermediate snapshot will be loaded. This way a newer snapshot can still be loaded (and the intermediate snapshot will be used for rollback protection). Expired snapshot or snapshot that does not match timestamp meta version will prevent loading targets. Args: data: Unverified new snapshot metadata as bytes trusted: ``True`` if data has at some point been verified by ``TrustedMetadataSet`` as a valid snapshot. Purpose of trusted is to allow loading of locally stored snapshot as intermediate snapshot even if hashes in current timestamp meta no longer match data. Default is False. Raises: RuntimeError: This function is called before updating timestamp or after updating targets. RepositoryError: Data failed to load or verify as final snapshot. The actual error type and content will contain more details. Returns: Deserialized and verified ``Snapshot`` object """ if Timestamp.type not in self._trusted_set: > raise RuntimeError("Cannot update snapshot before timestamp") E RuntimeError: Cannot update snapshot before timestamp tuf/ngclient/_internal/trusted_metadata_set.py:308: RuntimeError _ TestTrustedMetadataSet.test_update_timestamp_new_timestamp_ver_below_trusted_ver _ self = <tests.test_trusted_metadata_set.TestTrustedMetadataSet testMethod=test_update_timestamp_new_timestamp_ver_below_trusted_ver> def test_update_timestamp_new_timestamp_ver_below_trusted_ver(self) -> None: # new_timestamp.version < trusted_timestamp.version def version_modifier(timestamp: Timestamp) -> None: timestamp.version = 3 timestamp = self.modify_metadata(Timestamp.type, version_modifier) > self.trusted_set.update_timestamp(timestamp) tests/test_trusted_metadata_set.py:298: _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ self = <tuf.ngclient._internal.trusted_metadata_set.TrustedMetadataSet object at 0x7f135dd68cb0> data = b'{\n "signatures": [\n {\n "keyid": "8a1c4a3ac2d515dec982ba9910c5fd79b91ae57f625b9cff25d06bf0a61c1758",\n "sig":...,\n "meta": {\n "snapshot.json": {\n "version": 1\n }\n },\n "spec_version": "1.0.0",\n "version": 3\n }\n}' def update_timestamp(self, data: bytes) -> Timestamp: """Verify and load ``data`` as new timestamp metadata. Note that an intermediate timestamp is allowed to be expired: ``TrustedMetadataSet`` will throw an ``ExpiredMetadataError`` in this case but the intermediate timestamp will be loaded. This way a newer timestamp can still be loaded (and the intermediate timestamp will be used for rollback protection). Expired timestamp will prevent loading snapshot metadata. Args: data: Unverified new timestamp metadata as bytes Raises: RuntimeError: This function is called after updating snapshot. RepositoryError: Metadata failed to load or verify as final timestamp. The actual error type and content will contain more details. Returns: Deserialized and verified ``Timestamp`` object """ if Snapshot.type in self._trusted_set: raise RuntimeError("Cannot update timestamp after snapshot") # client workflow 5.3.10: Make sure final root is not expired. if self.root.is_expired(self.reference_time): > raise exceptions.ExpiredMetadataError("Final root.json is expired") E tuf.api.exceptions.ExpiredMetadataError: Final root.json is expired tuf/ngclient/_internal/trusted_metadata_set.py:231: ExpiredMetadataError ___ TestTrustedMetadataSet.test_update_timestamp_snapshot_ver_below_current ____ self = <tests.test_trusted_metadata_set.TestTrustedMetadataSet testMethod=test_update_timestamp_snapshot_ver_below_current> def test_update_timestamp_snapshot_ver_below_current(self) -> None: def bump_snapshot_version(timestamp: Timestamp) -> None: timestamp.snapshot_meta.version = 2 # The timestamp version must be increased to initiate a update. timestamp.version += 1 # set current known snapshot.json version to 2 timestamp = self.modify_metadata(Timestamp.type, bump_snapshot_version) > self.trusted_set.update_timestamp(timestamp) tests/test_trusted_metadata_set.py:324: _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ self = <tuf.ngclient._internal.trusted_metadata_set.TrustedMetadataSet object at 0x7f135dd69610> data = b'{\n "signatures": [\n {\n "keyid": "8a1c4a3ac2d515dec982ba9910c5fd79b91ae57f625b9cff25d06bf0a61c1758",\n "sig":...,\n "meta": {\n "snapshot.json": {\n "version": 2\n }\n },\n "spec_version": "1.0.0",\n "version": 2\n }\n}' def update_timestamp(self, data: bytes) -> Timestamp: """Verify and load ``data`` as new timestamp metadata. Note that an intermediate timestamp is allowed to be expired: ``TrustedMetadataSet`` will throw an ``ExpiredMetadataError`` in this case but the intermediate timestamp will be loaded. This way a newer timestamp can still be loaded (and the intermediate timestamp will be used for rollback protection). Expired timestamp will prevent loading snapshot metadata. Args: data: Unverified new timestamp metadata as bytes Raises: RuntimeError: This function is called after updating snapshot. RepositoryError: Metadata failed to load or verify as final timestamp. The actual error type and content will contain more details. Returns: Deserialized and verified ``Timestamp`` object """ if Snapshot.type in self._trusted_set: raise RuntimeError("Cannot update timestamp after snapshot") # client workflow 5.3.10: Make sure final root is not expired. if self.root.is_expired(self.reference_time): > raise exceptions.ExpiredMetadataError("Final root.json is expired") E tuf.api.exceptions.ExpiredMetadataError: Final root.json is expired tuf/ngclient/_internal/trusted_metadata_set.py:231: ExpiredMetadataError _______ TestTrustedMetadataSet.test_update_timestamp_with_same_timestamp _______ self = <tests.test_trusted_metadata_set.TestTrustedMetadataSet testMethod=test_update_timestamp_with_same_timestamp> def test_update_timestamp_with_same_timestamp(self) -> None: # Test that timestamp is NOT updated if: # new_timestamp.version == trusted_timestamp.version > self.trusted_set.update_timestamp(self.metadata[Timestamp.type]) tests/test_trusted_metadata_set.py:305: _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ self = <tuf.ngclient._internal.trusted_metadata_set.TrustedMetadataSet object at 0x7f135dd69c10> data = b'{\n "signatures": [\n {\n "keyid": "8a1c4a3ac2d515dec982ba9910c5fd79b91ae57f625b9cff25d06bf0a61c1758",\n "sig":...,\n "meta": {\n "snapshot.json": {\n "version": 1\n }\n },\n "spec_version": "1.0.0",\n "version": 1\n }\n}' def update_timestamp(self, data: bytes) -> Timestamp: """Verify and load ``data`` as new timestamp metadata. Note that an intermediate timestamp is allowed to be expired: ``TrustedMetadataSet`` will throw an ``ExpiredMetadataError`` in this case but the intermediate timestamp will be loaded. This way a newer timestamp can still be loaded (and the intermediate timestamp will be used for rollback protection). Expired timestamp will prevent loading snapshot metadata. Args: data: Unverified new timestamp metadata as bytes Raises: RuntimeError: This function is called after updating snapshot. RepositoryError: Metadata failed to load or verify as final timestamp. The actual error type and content will contain more details. Returns: Deserialized and verified ``Timestamp`` object """ if Snapshot.type in self._trusted_set: raise RuntimeError("Cannot update timestamp after snapshot") # client workflow 5.3.10: Make sure final root is not expired. if self.root.is_expired(self.reference_time): > raise exceptions.ExpiredMetadataError("Final root.json is expired") E tuf.api.exceptions.ExpiredMetadataError: Final root.json is expired tuf/ngclient/_internal/trusted_metadata_set.py:231: ExpiredMetadataError =============================== warnings summary =============================== tests/test_repository.py:42 /<<PKGBUILDDIR>>/.pybuild/cpython3_3.13/build/tests/test_repository.py:42: PytestCollectionWarning: cannot collect test class 'TestingRepository' because it has a __init__ constructor (from: tests/test_repository.py) class TestingRepository(Repository): tests/test_updater_delegation_graphs.py:31 /<<PKGBUILDDIR>>/.pybuild/cpython3_3.13/build/tests/test_updater_delegation_graphs.py:31: PytestCollectionWarning: cannot collect test class 'TestDelegation' because it has a __init__ constructor (from: tests/test_updater_delegation_graphs.py) @dataclass tests/test_updater_delegation_graphs.py:42 /<<PKGBUILDDIR>>/.pybuild/cpython3_3.13/build/tests/test_updater_delegation_graphs.py:42: PytestCollectionWarning: cannot collect test class 'TestTarget' because it has a __init__ constructor (from: tests/test_updater_delegation_graphs.py) @dataclass tests/test_updater_fetch_target.py:23 /<<PKGBUILDDIR>>/.pybuild/cpython3_3.13/build/tests/test_updater_fetch_target.py:23: PytestCollectionWarning: cannot collect test class 'TestTarget' because it has a __init__ constructor (from: tests/test_updater_fetch_target.py) @dataclass -- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html =========================== short test summary info ============================ FAILED tests/test_trusted_metadata_set.py::TestTrustedMetadataSet::test_out_of_order_ops FAILED tests/test_trusted_metadata_set.py::TestTrustedMetadataSet::test_top_level_md_with_invalid_json FAILED tests/test_trusted_metadata_set.py::TestTrustedMetadataSet::test_update FAILED tests/test_trusted_metadata_set.py::TestTrustedMetadataSet::test_update_metadata_output FAILED tests/test_trusted_metadata_set.py::TestTrustedMetadataSet::test_update_snapshot_expired_new_snapshot FAILED tests/test_trusted_metadata_set.py::TestTrustedMetadataSet::test_update_snapshot_fail_threshold_verification FAILED tests/test_trusted_metadata_set.py::TestTrustedMetadataSet::test_update_snapshot_file_removed_from_meta FAILED tests/test_trusted_metadata_set.py::TestTrustedMetadataSet::test_update_snapshot_length_or_hash_mismatch FAILED tests/test_trusted_metadata_set.py::TestTrustedMetadataSet::test_update_snapshot_meta_version_decreases FAILED tests/test_trusted_metadata_set.py::TestTrustedMetadataSet::test_update_snapshot_successful_rollback_checks FAILED tests/test_trusted_metadata_set.py::TestTrustedMetadataSet::test_update_snapshot_version_diverge_timestamp_snapshot_version FAILED tests/test_trusted_metadata_set.py::TestTrustedMetadataSet::test_update_targets_expired_new_target FAILED tests/test_trusted_metadata_set.py::TestTrustedMetadataSet::test_update_targets_hash_diverge_from_snapshot_meta_hash FAILED tests/test_trusted_metadata_set.py::TestTrustedMetadataSet::test_update_targets_no_meta_in_snapshot FAILED tests/test_trusted_metadata_set.py::TestTrustedMetadataSet::test_update_targets_version_diverge_snapshot_meta_version FAILED tests/test_trusted_metadata_set.py::TestTrustedMetadataSet::test_update_timestamp_expired FAILED tests/test_trusted_metadata_set.py::TestTrustedMetadataSet::test_update_timestamp_new_timestamp_ver_below_trusted_ver FAILED tests/test_trusted_metadata_set.py::TestTrustedMetadataSet::test_update_timestamp_snapshot_ver_below_current FAILED tests/test_trusted_metadata_set.py::TestTrustedMetadataSet::test_update_timestamp_with_same_timestamp ================== 19 failed, 145 passed, 4 warnings in 1.10s ================== E: pybuild pybuild:483: test: plugin pyproject failed with: exit code=1: cd /<<PKGBUILDDIR>>/.pybuild/cpython3_3.13/build; python3.13 -m pytest --ignore tests/test_examples.py --ignore tests/test_fetcher_ng.py --ignore tests/test_metadata_generation.py --ignore tests/test_updater_ng.py --ignore tests/test_utils.py dh_auto_test: error: pybuild --test --test-pytest -i python{version} -p "3.14 3.13" returned exit code 13 make: *** [debian/rules:12: binary] Error 25 dpkg-buildpackage: error: debian/rules binary subprocess failed with exit status 2 --------------------------------------------------------------------------------
