kukui-full: chromeos-bmpblk sandbox violation (fc-cache -v: ACCESS DENIED: mkostemp) |
|||||||
Issue descriptionLaunch a ToT tryjob with kukui-full-tryjob: https://cros-goldeneye.corp.google.com/chromeos/healthmonitoring/buildDetails?buildbucketId=8929178397036024656 Or some people (e.g. shawnku) are able to reproduce when building kukui image using public overlay (internal builds look ok). https://luci-logdog.appspot.com/logs/chromeos/buildbucket/cr-buildbucket.appspot.com/8929178397036024656/+/steps/BuildPackages/0/stdout === Start output for job chromeos-bmpblk-1.0.1-r71 (0m1.4s) === chromeos-bmpblk-1.0.1-r71: >>> Emerging (1 of 1) sys-boot/chromeos-bmpblk-1.0.1-r71::chromiumos for /build/kukui/ ... chromeos-bmpblk-1.0.1-r71: >>> Preparing source in /mnt/host/source/src/platform/bmpblk ... chromeos-bmpblk-1.0.1-r71: * ACCESS DENIED: mkostemp: /usr/share/fonts/croscore/.uuid.TMP-XXXXXX chromeos-bmpblk-1.0.1-r71: * ACCESS DENIED: mkostemp: /usr/share/fonts/crosextra/.uuid.TMP-XXXXXX chromeos-bmpblk-1.0.1-r71: * ACCESS DENIED: mkostemp: /usr/share/fonts/dejavu/.uuid.TMP-XXXXXX chromeos-bmpblk-1.0.1-r71: * ACCESS DENIED: mkostemp: /usr/share/fonts/ko-nanum/.uuid.TMP-XXXXXX chromeos-bmpblk-1.0.1-r71: * ACCESS DENIED: mkostemp: /usr/share/fonts/lohit-cros/.uuid.TMP-XXXXXX chromeos-bmpblk-1.0.1-r71: * ACCESS DENIED: mkostemp: /usr/share/fonts/noto/.uuid.TMP-XXXXXX chromeos-bmpblk-1.0.1-r71: * ACCESS DENIED: mkostemp: /usr/share/fonts/notocjk/.uuid.TMP-XXXXXX chromeos-bmpblk-1.0.1-r71: * ACCESS DENIED: mkostemp: /usr/share/fonts/roboto/.uuid.TMP-XXXXXX chromeos-bmpblk-1.0.1-r71: * ACCESS DENIED: mkostemp: /usr/share/fonts/tibt-jomolhari/.uuid.TMP-XXXXXX chromeos-bmpblk-1.0.1-r71: /usr/share/fonts/croscore: skipping, existing cache is valid: 12 fonts, 0 dirs chromeos-bmpblk-1.0.1-r71: /usr/share/fonts/crosextra: skipping, existing cache is valid: 8 fonts, 0 dirs chromeos-bmpblk-1.0.1-r71: /usr/share/fonts/dejavu: skipping, existing cache is valid: 21 fonts, 0 dirs chromeos-bmpblk-1.0.1-r71: /usr/share/fonts/ko-nanum: skipping, existing cache is valid: 2 fonts, 0 dirs chromeos-bmpblk-1.0.1-r71: /usr/share/fonts/lohit-cros: skipping, existing cache is valid: 2 fonts, 0 dirs chromeos-bmpblk-1.0.1-r71: /usr/share/fonts/monotype: skipping, no such directory chromeos-bmpblk-1.0.1-r71: /usr/share/fonts/noto: skipping, existing cache is valid: 195 fonts, 0 dirs chromeos-bmpblk-1.0.1-r71: /usr/share/fonts/notocjk: skipping, existing cache is valid: 32 fonts, 0 dirs chromeos-bmpblk-1.0.1-r71: /usr/share/fonts/roboto: skipping, existing cache is valid: 12 fonts, 0 dirs chromeos-bmpblk-1.0.1-r71: /usr/share/fonts/tibt-jomolhari: skipping, existing cache is valid: 1 fonts, 0 dirs chromeos-bmpblk-1.0.1-r71: /usr/share/fonts/google-sans: skipping, no such directory chromeos-bmpblk-1.0.1-r71: /build/kukui/tmp/portage/sys-boot/chromeos-bmpblk-1.0.1-r71/temp/tmp.TaIDxA4dbZ: cleaning cache directory chromeos-bmpblk-1.0.1-r71: /usr/share/cache/fontconfig: not cleaning unwritable cache directory chromeos-bmpblk-1.0.1-r71: fc-cache: succeeded chromeos-bmpblk-1.0.1-r71: >>> Source prepared. chromeos-bmpblk-1.0.1-r71: * --------------------------- ACCESS VIOLATION SUMMARY --------------------------- chromeos-bmpblk-1.0.1-r71: * LOG FILE: "/var/log/sandbox/sandbox-12561.log" chromeos-bmpblk-1.0.1-r71: * chromeos-bmpblk-1.0.1-r71: VERSION 1.0 chromeos-bmpblk-1.0.1-r71: FORMAT: F - Function called chromeos-bmpblk-1.0.1-r71: FORMAT: S - Access Status chromeos-bmpblk-1.0.1-r71: FORMAT: P - Path as passed to function chromeos-bmpblk-1.0.1-r71: FORMAT: A - Absolute Path (not canonical) chromeos-bmpblk-1.0.1-r71: FORMAT: R - Canonical Path chromeos-bmpblk-1.0.1-r71: FORMAT: C - Command Line chromeos-bmpblk-1.0.1-r71: chromeos-bmpblk-1.0.1-r71: F: mkostemp chromeos-bmpblk-1.0.1-r71: S: deny chromeos-bmpblk-1.0.1-r71: P: /usr/share/fonts/croscore/.uuid.TMP-XXXXXX chromeos-bmpblk-1.0.1-r71: A: /usr/share/fonts/croscore/.uuid.TMP-XXXXXX chromeos-bmpblk-1.0.1-r71: R: /usr/share/fonts/croscore/.uuid.TMP-XXXXXX chromeos-bmpblk-1.0.1-r71: C: fc-cache -v chromeos-bmpblk-1.0.1-r71: ... chromeos-bmpblk-1.0.1-r71: * -------------------------------------------------------------------------------- chromeos-bmpblk-1.0.1-r71: >>> Failed to emerge sys-boot/chromeos-bmpblk-1.0.1-r71 for /build/kukui/
,
Nov 22
We added a workaround to some font cache problems that runs fc-cache as part of the package. https://bugs.gentoo.org/666418 indicates that upstream gentoo saw a similar bug and reverted part of its upstream fontconfig sources to deal with it. We probably need to do the same.
,
Nov 22
Tim has been hacking on this lately. hopefully he should be able to roll it.
,
Nov 22
I assume the break is caused by my recent CL to upgrade font-config to 2.13.0 with crrev.com/c/1313968. I'm going to work it on Monday 11/26 after the Thanksgiving holiday. In the meantime, I have several questions. * How do I launch a tryjob to reproduce it? So far I've only run tryjobs from Gerrit for my own CLs. * How do I run the build on my workstation for public overlay? Do I just change the "internal" USE flag? * pgeorgi@, what workarounds have been made to fong cache problems? You mentioned this in commnet 2. Can you give some links to the previous work? * Just for my curiosity, how is the public overlay builds used? Who's using them? And what board is kukui?
,
Nov 22
#4: * How do I launch a tryjob to reproduce it? So far I've only run tryjobs from Gerrit for my own CLs. cros tryjob kukui-full-tryjob, that just makes a kukui-full (public build) on ToT. * How do I run the build on my workstation for public overlay? Do I just change the "internal" USE flag? We usually use a completely separate Chromium OS checkout (just follow public Chromium OS instructions). People in the team here who _just_ checked out the tree could reproduce the issue (I wasn't, at first). For me, I first had to recreate my chroot: - cros_sdk -r - cros_sdk - ./setup_board --board=kukui - ./build_packages --board=kukui --accept_licenses=@CHROMEOS => error * pgeorgi@, what workarounds have been made to fong cache problems? You mentioned this in commnet 2. Can you give some links to the previous work? https://bugs.gentoo.org/666418#c13 https://bugs.gentoo.org/666418#c22 Sounds like we should "just" re-sync font-config to upstream Gentoo? * Just for my curiosity, how is the public overlay builds used? Who's using them? Any member of public can use it (Chromium OS is an open-source project!). We also have partners using public overlays (e.g. contractors, Wifi chip vendors, etc...). * And what board is kukui? It's a reference design, feel free to ping me for more details.
,
Nov 23
#4, My steps (see https://chromium.googlesource.com/chromiumos/docs/+/master/developer_guide.md#Building-Chromium-OS). are: 1. mkdir a chromiumOS folder 2. (outside) cd <path_to_chromiumOS_folder> repo init -u https://chromium.googlesource.com/chromiumos/manifest.git --repo-url https://chromium.googlesource.com/external/repo.git; repo sync -j4; 3. export BOARD=kukui; ./setup_board --board=${BOARD}; ./build_packages --board=${BOARD} --accept_licenses=@CHROMEOS; Observed error while running "./build_packages --board=${BOARD} --accept_licenses=@CHROMEOS;" Hope above help!!
,
Nov 23
This CL fixes it for me: https://chromium-review.googlesource.com/c/chromiumos/overlays/chromiumos-overlay/+/1348493 . Tryjob: https://cros-goldeneye.corp.google.com/chromeos/healthmonitoring/buildDetails?buildbucketId=8929111642686688224 => chromeos-bmpblk builds fine. https://chromium-review.googlesource.com/c/chromiumos/overlays/chromiumos-overlay/+/1340839 does look related, I haven't tested that one locally. Tryjob: https://cros-goldeneye.corp.google.com/chromeos/healthmonitoring/buildDetails?buildbucketId=8929104503010872496 (just started)
,
Nov 23
https://chromium-review.googlesource.com/c/chromiumos/overlays/chromiumos-overlay/+/1340839 also fixes this problem. But an upstream patch that we can drop after we uprev font-config to 2.13.1 sounds preferable.
,
Nov 27
Reassign to drinkcat@.
,
Nov 28
I upstreamed my fix to fc-cache not respecting --sysroot here: https://gitlab.freedesktop.org/fontconfig/fontconfig/merge_requests/16 2.13.1 was tagged two months ago so it won't include my change, but the fix would be in 2.13.2 whenever that gets tagged.
,
Nov 28
nice work!
,
Nov 30
Since the patch in #8/#10 also fixes the issue, I don't think there is much point to merge my CL that backports an upstream patch Maybe we should just uprev fc-cache once 2.13.2 is released, so that we get both patches?
,
Dec 1
The following revision refers to this bug: https://chromium.googlesource.com/chromiumos/overlays/chromiumos-overlay/+/f3a6472bc88c70f50156d81d30d949712562aa6c commit f3a6472bc88c70f50156d81d30d949712562aa6c Author: Nicolas Boichat <drinkcat@chromium.org> Date: Sat Dec 01 09:08:45 2018 media-libs/fontconfig: Add upstream patch to fix uuid generation This upstream patch takes into account sysroot, and fixes the build issue seen in crbug.com/907781 . BUG= chromium:907781 BUG=chromium:908588 TEST=cros tryjob kukui-full-tryjob Change-Id: I5b4081c4ffe48c4300753e9e0d975b481454d733 Reviewed-on: https://chromium-review.googlesource.com/1348493 Commit-Ready: Nicolas Boichat <drinkcat@chromium.org> Tested-by: Nicolas Boichat <drinkcat@chromium.org> Reviewed-by: Manoj Gupta <manojgupta@chromium.org> [rename] https://crrev.com/f3a6472bc88c70f50156d81d30d949712562aa6c/media-libs/fontconfig/fontconfig-2.13.0-r7.ebuild [add] https://crrev.com/f3a6472bc88c70f50156d81d30d949712562aa6c/media-libs/fontconfig/files/fontconfig-2.13.0-fc-cache-doesn-t-use-y-option.patch [delete] https://crrev.com/e481567febdd6226b111ab842dd9fdb2d60c0678/media-libs/fontconfig/fontconfig-2.13.0-r6.ebuild
,
Dec 1
Manoj said the patch helps with chromium:908588, so we merged the fix anyway.
,
Dec 5
This patch doesn't fix the problem. Still getting similar failures on soraka and sarien, at least on Intel side.
,
Dec 5
please verify what was recommended in the thread: $ ./update_chroot $ sudo fc-cache --really-force
,
Dec 6
,
Dec 6
This is happening even when you clone a fresh new tree. I'm going to try sudo fc-cache --really-force right after I enter chroot for the first time and see if that helps. BTW QC is reporting the same thing https://bugs.chromium.org/p/chromium/issues/detail?id=911696
,
Dec 6
Issue 911696 has been merged into this issue.
,
Dec 7
Running "sudo fc-cache --really-force" allowed build_packages to succeed after the initial failure. I'm trying to see if running the command first time after creating the chroot will prevent the build failure from reoccurring. |
|||||||
►
Sign in to add a comment |
|||||||
Comment 1 by coconutruben@chromium.org
, Nov 22