Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

core-qrexec v4.2.23 (r4.2) #5451

Open
qubesos-bot opened this issue Feb 18, 2025 · 19 comments
Open

core-qrexec v4.2.23 (r4.2) #5451

qubesos-bot opened this issue Feb 18, 2025 · 19 comments

Comments

@qubesos-bot
Copy link

Update of core-qrexec to v4.2.23 for Qubes OS r4.2, see comments below for details and build status.

From commit: QubesOS/qubes-core-qrexec@d80a13b

Changes since previous version:
QubesOS/qubes-core-qrexec@d80a13b version 4.2.23
QubesOS/qubes-core-qrexec@c13f3fb pylint: deal with too-many-positional-arguments
QubesOS/qubes-core-qrexec@c87c041 Use QREXEC_EXIT_PROBLEM for errors spawning child process
QubesOS/qubes-core-qrexec@402ec99 qrexec-agent: Require an argument to --fork-server-socket
QubesOS/qubes-core-qrexec@f6a4b45 Ignore SIGPIPE in qrexec-fork-server too
QubesOS/qubes-core-qrexec@ce2b0b8 Test that opening /proc/self/fd/2 for writing works
QubesOS/qubes-core-qrexec@900faab Call abort() if there is a qrexec buffer problem
QubesOS/qubes-core-qrexec@d75098a Add type annotation to Python code
QubesOS/qubes-core-qrexec@9131ed2 Fix spurious newline in error message
QubesOS/qubes-core-qrexec@e479d05 Test that stderr from qrexec-agent is properly received
QubesOS/qubes-core-qrexec@a3eb68b Add additional tests for running services in dom0
QubesOS/qubes-core-qrexec@dfb02e6 docs: qrexec-client accepts user:command not command
QubesOS/qubes-core-qrexec@e06dc2d rpm: adjust SELinux snippets for relabeling
QubesOS/qubes-core-qrexec@9408ca0 Add a test for qrexec-client race condition
QubesOS/qubes-core-qrexec@0863adf Try to retrieve exit code of a failed service call
QubesOS/qubes-core-qrexec@2f1ad35 Pipe qrexec-client(-vm) --help output to stdout
QubesOS/qubes-core-qrexec@9b2a239 Provide clear error on invalid policy file name
QubesOS/qubes-core-qrexec@cfa0af8 Remove unused test
QubesOS/qubes-core-qrexec@bcf222b qrexec-client-vm: fix missing option in usage and reorder it
QubesOS/qubes-core-qrexec@93dc837 daemon: log a bit more info on errors
QubesOS/qubes-core-qrexec@ef992cd daemon: restore SIGTERM default handler in child process
QubesOS/qubes-core-qrexec@b7d7333 actually sanitize service name

Referenced issues:
QubesOS/qubes-issues#9778
QubesOS/qubes-issues#9618
QubesOS/qubes-issues#5749
QubesOS/qubes-issues#8795
QubesOS/qubes-issues#9663

If you're release manager, you can issue GPG-inline signed command:

  • Upload-component r4.2 core-qrexec d80a13bc48c973e0b3e0f28a528daa77a64e2caf current all (available 5 days from now)
  • Upload-component r4.2 core-qrexec d80a13bc48c973e0b3e0f28a528daa77a64e2caf security-testing all

You can choose subset of distributions like:

  • Upload-component r4.2 core-qrexec d80a13bc48c973e0b3e0f28a528daa77a64e2caf current vm-bookworm,vm-fc37 (available 5 days from now)

Above commands will work only if packages in current-testing repository were built from given commit (i.e. no new version superseded it).

For more information on how to test this update, please take a look at https://www.qubes-os.org/doc/testing/#updates.

@qubesos-secondary-bot
Copy link

Package for vm-jammy was built (build log).

@qubesos-secondary-bot
Copy link

Package for vm-archlinux failed to build (build log) ((("core-qrexec:vm-archlinux-rolling.x86_64:archlinux: Failed to build PKGs: Failed to run '/usr/bin/qvm-run-vm -- disp8099 env -- VERBOSE=1 DEBUG=1 BACKEND_VMM=xen DIST=archlinux PACKAGE_SET=vm bash -c 'sudo cp /builder/plugins/chroot_archlinux/conf/makepkg-x86_64.conf /usr/local/share/devtools/makepkg.conf.d/qubes-x86_64.conf && sudo mkdir -p /builder/cache/qubes-x86_64 && cd /builder/cache/qubes-x86_64 && sudo tar xf /builder/cache/root.tar.gz && sudo /builder/plugins/chroot_archlinux/scripts/generate-pacman /builder/plugins/chroot_archlinux/conf/pacman.conf.j2 /usr/local/share/devtools/pacman.conf.d/qubes-x86_64.conf && sudo rm -rf /etc/pacman.d/gnupg/private-keys-v1.d && sudo pacman-key --init && sudo pacman-key --populate && sudo /builder/plugins/chroot_archlinux/scripts/generate-pacman /builder/plugins/chroot_archlinux/conf/pacman.conf.j2 /usr/local/share/devtools/pacman.conf.d/qubes-x86_64.conf --enable-builder-local && sudo /builder/plugins/build_archlinux/scripts/update-local-repo.sh /builder/cache/qubes-x86_64/root /builder/repository && cd /builder/core-qrexec && sudo qubes-x86_64-build -r /builder/cache -- -d /builder/repository:/builder/repository -- --syncdeps --noconfirm --skipinteg | cat'' (status=1)..",),)).

@qubesos-secondary-bot
Copy link

Package for vm-jammy was uploaded to current-testing repository.

@qubesos-bot
Copy link
Author

Package for vm-bookworm was built (build log).

@qubesos-bot
Copy link
Author

Package for vm-bookworm was uploaded to current-testing repository.

@qubesos-secondary-bot
Copy link

Package for vm-noble was built (build log).

@qubesos-secondary-bot
Copy link

Package for vm-noble was uploaded to current-testing repository.

@qubesos-bot
Copy link
Author

Package for vm-trixie was built (build log).

@qubesos-bot
Copy link
Author

Package for vm-trixie was uploaded to current-testing repository.

@qubesos-bot
Copy link
Author

Package for host was built (build log).

@qubesos-bot
Copy link
Author

Package for host was uploaded to current-testing repository.

@qubesos-bot
Copy link
Author

Package for vm-fc40 failed to build (build log) ((("core-qrexec:vm-fedora-40.x86_64:rpm_spec/qubes-qrexec-vm.spec: Failed to build RPMs: Failed to run '/usr/bin/qvm-run-vm -- disp4015 env -- VERBOSE=1 DEBUG=1 BACKEND_VMM=xen DIST=fc40 PACKAGE_SET=vm BIND_MOUNT_ENABLE=True bash -c 'cd /builder/repository && createrepo_c . && sudo chown -R user:mock /builder/build && sudo chown -R root:mock /builder/cache/mock && sudo --preserve-env=DIST,PACKAGE_SET,USE_QUBES_REPO_VERSION /usr/libexec/mock/mock --no-cleanup-after --verbose --rebuild /builder/build/qubes-core-qrexec-vm-4.2.23-1.fc40.src.rpm --root /builder/plugins/chroot_rpm/mock/fedora-40-x86_64.cfg --resultdir=/builder/build --isolation=nspawn --plugin-option=root_cache:age_check=False --no-clean && sudo --preserve-env=DIST,PACKAGE_SET,USE_QUBES_REPO_VERSION,BIND_MOUNT_ENABLE /usr/libexec/mock/mock --root /builder/plugins/chroot_rpm/mock/fedora-40-x86_64.cfg --chroot /plugins/build_rpm/scripts/rpmbuildinfo /builddir/build/SRPMS/qubes-core-qrexec-vm-4.2.23-1.fc40.src.rpm > /builder/build/qubes-core-qrexec-vm-4.2.23-1.fc40.x86_64.buildinfo && /builder/plugins/build_rpm/scripts/filter-packages-by-dist-arch /builder/build /builder/build/rpm fc40 x86_64'' (status=30)..",),)).

@qubesos-bot
Copy link
Author

Package for vm-fc41 was built (build log).

@qubesos-bot
Copy link
Author

Package for vm-fc41 was uploaded to current-testing repository.

@qubesos-bot
Copy link
Author

Package for vm-fc40 was built (build log).

@qubesos-bot
Copy link
Author

Package for vm-fc40 was uploaded to current-testing repository.

@qubesos-secondary-bot
Copy link

Package for vm-archlinux was built (build log).

@qubesos-secondary-bot
Copy link

Package for vm-archlinux was uploaded to current-testing repository.

@qubesos-bot
Copy link
Author

qubesos-bot commented Feb 23, 2025

OpenQA test summary

Complete test suite and dependencies: https://openqa.qubes-os.org/tests/overview?distri=qubesos&version=4.2&build=2025022304-4.2&flavor=update

Test run included the following:

New failures, excluding unstable

Compared to: https://openqa.qubes-os.org/tests/overview?distri=qubesos&version=4.2&build=2024111722-4.2&flavor=update

Failed tests

10 failures

Fixed failures

Compared to: https://openqa.qubes-os.org/tests/119203#dependencies

1 fixed
  • system_tests_pvgrub_salt_storage
    • TC_41_HVMGrub_fedora-40-xfce: test_010_template_based_vm (error)
      qubes.exc.QubesVMError: Cannot connect to qrexec agent for 120 seco...

Unstable tests

Performance Tests

Performance degradation:

No issues

Remaining performance tests:

No remaining performance tests

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment