Control: reassign 1009385 libldns3 1.7.1-2.1 Control: retitle 1009385 libldns3 1.7.1-2.1 changes output of ldns-key2ds, causing FTBFS on dns-root-data Control: affects 1009385 + dns-root-data X-Debbugs-Cc: Michael Tokarev <m...@tls.msk.ru> Control: tags 1009385 + help
Lucas, thanks for flagging this!
The build failure below appears to happen when libldns3 1.7.1-2.1 is
installed.
It does not fail with libldns3 1.7.1-2+b1. The output of ldns-key2ds
has changed between these two versions. yikes!
Michael, it looks like it was this particular upload for ldns:
-------------
ldns (1.7.1-2.1) unstable; urgency=medium
* Non-maintainer upload.
* add fix-wrong-python-distutils-configure-check.diff to fix the
incorrect distutils package check (it should be checking the
return code not the emptiness of the output). This fixes FTBFS
with new python (3.10) and allows the python3.10 transition to
happen, but it is not fixing the actual issiue with ldns using
distutils which should be addressed later. Closes: #1008638
-- Michael Tokarev <m...@tls.msk.ru> Thu, 07 Apr 2022 16:03:29 +0300
-------------
This doesn't seem like it should be a relevant change to adjust the
output of /usr/bin/ldns-key2ds, but it does:
here's a narrow transcript that shows what should be a deterministic
result varying depending on the version:
0 dkg@alice:~/src/pkg-dns/dns-root-data$ dpkg -l libldns3
Desired=Unknown/Install/Remove/Purge/Hold
| Status=Not/Inst/Conf-files/Unpacked/halF-conf/Half-inst/trig-aWait/Trig-pend
|/ Err?=(none)/Reinst-required (Status,Err: uppercase=bad)
||/ Name Version Architecture Description
+++-==============-============-============-=================================
ii libldns3:amd64 1.7.1-2+b1 amd64 ldns library for DNS programming
0 dkg@alice:~/src/pkg-dns/dns-root-data$ /usr/bin/ldns-key2ds -n -2 root.key
. 86400 IN DS 20326 8 2
e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d
0 dkg@alice:~/src/pkg-dns/dns-root-data$ dpkg -l libldns3
Desired=Unknown/Install/Remove/Purge/Hold
| Status=Not/Inst/Conf-files/Unpacked/halF-conf/Half-inst/trig-aWait/Trig-pend
|/ Err?=(none)/Reinst-required (Status,Err: uppercase=bad)
||/ Name Version Architecture Description
+++-==============-============-============-=================================
ii libldns3:amd64 1.7.1-2.1 amd64 ldns library for DNS programming
0 dkg@alice:~/src/pkg-dns/dns-root-data$ /usr/bin/ldns-key2ds -n -2 root.key
. 86400 IN DS 20326 8 2
0ae721f59a19244008217c3d2a646183acef2f17cf4c30929a3f29d09311c05e
0 dkg@alice:~/src/pkg-dns/dns-root-data$
Any idea what's happened here?
--dkg
On Tue 2022-04-12 20:38:47 +0200, Lucas Nussbaum wrote:
> Source: dns-root-data
> Version: 2021011101
> Severity: serious
> Justification: FTBFS
> Tags: bookworm sid ftbfs
> User: lu...@debian.org
> Usertags: ftbfs-20220412 ftbfs-bookworm
>
> Hi,
>
> During a rebuild of all packages in sid, your package failed to build
> on amd64.
>
>
> Relevant part (hopefully):
>> make[1]: Entering directory '/<<PKGBUILDDIR>>'
>> # Verify root-anchors.xml using OpenSSL
>> openssl smime -verify -noverify -inform DER -in root-anchors.p7s -content
>> root-anchors.xml
>> Verification successful
>> <?xml version="1.0" encoding="UTF-8"?>
>> <TrustAnchor id="380DC50D-484E-40D0-A3AE-68F2B18F61C7"
>> source="http://data.iana.org/root-anchors/root-anchors.xml";>
>> <Zone>.</Zone>
>> <KeyDigest id="Kjqmt7v" validFrom="2010-07-15T00:00:00+00:00"
>> validUntil="2019-01-11T00:00:00+00:00">
>> <KeyTag>19036</KeyTag>
>> <Algorithm>8</Algorithm>
>> <DigestType>2</DigestType>
>> <Digest>49AAC11D7B6F6446702E54A1607371607A1A41855200FD2CE1CDDE32F24E8FB5</Digest>
>> </KeyDigest>
>> <KeyDigest id="Klajeyz" validFrom="2017-02-02T00:00:00+00:00">
>> <KeyTag>20326</KeyTag>
>> <Algorithm>8</Algorithm>
>> <DigestType>2</DigestType>
>> <Digest>E06D44B80B8F1D39A95C0B0D7C65D08458E880409BBC683457104237C7F8EC8D</Digest>
>> </KeyDigest>
>> </TrustAnchor>
>> # Verify root.hints
>> gpgv --keyring /<<PKGBUILDDIR>>/registry-admin.key
>> /<<PKGBUILDDIR>>/root.hints.sig /<<PKGBUILDDIR>>/root.hints
>> gpgv: Signature made Mon Jan 11 15:55:50 2021 UTC
>> gpgv: using DSA key 937BB869E3A238C5
>> gpgv: Good signature from "Registry Administrator <ns...@verisign-grs.com>"
>> # Create key from validated root-anchors.xml
>> ./parse-root-anchors.sh < root-anchors.xml | sort -k 4 -n > root-anchors.ds
>> Digest 49aac11d7b6f6446702e54a1607371607a1a41855200fd2ce1cdde32f24e8fb5
>> expired on 2019-01-11T00:00:00+00:00
>> # Create key from downloaded root.key
>> /usr/bin/ldns-key2ds -n -2 root.key | cut --fields=1,3- --output-delimiter='
>> ' | sort -k 4 -n > root.ds
>> # Compare the DS from root.key and from root-anchors.xml
>> diff -u root-anchors.ds root.ds
>> --- root-anchors.ds 2022-04-12 16:59:11.126351522 +0000
>> +++ root.ds 2022-04-12 16:59:11.130351536 +0000
>> @@ -1 +1 @@
>> -. IN DS 20326 8 2
>> e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d
>> +. IN DS 20326 8 2
>> 0ae721f59a19244008217c3d2a646183acef2f17cf4c30929a3f29d09311c05e
>> make[1]: *** [debian/rules:23: override_dh_auto_build] Error 1
>
>
> The full build log is available from:
> http://qa-logs.debian.net/2022/04/12/dns-root-data_2021011101_unstable.log
>
> All bugs filed during this archive rebuild are listed at:
> https://bugs.debian.org/cgi-bin/pkgreport.cgi?tag=ftbfs-20220412;users=lu...@debian.org
> or:
> https://udd.debian.org/bugs/?release=na&merged=ign&fnewerval=7&flastmodval=7&fusertag=only&fusertagtag=ftbfs-20220412&fusertaguser=lu...@debian.org&allbugs=1&cseverity=1&ctags=1&caffected=1#results
>
> A list of current common problems and possible solutions is available at
> http://wiki.debian.org/qa.debian.org/FTBFS . You're welcome to contribute!
>
> If you reassign this bug to another package, please marking it as
> 'affects'-ing
> this package. See https://www.debian.org/Bugs/server-control#affects
>
> If you fail to reproduce this, please provide a build log and diff it with
> mine
> so that we can identify if something relevant changed in the meantime.
signature.asc
Description: PGP signature
