Page MenuHomePhabricator

mwaddlink fails to build because of a missing public key
Closed, ResolvedPublic

Description

I uploaded a patch for research/mwaddlink and found it fails to build with the following error message:

#9 [codehealth  2/11] RUN apt-get update && apt-get install -y "python3-icu" "python3-setuptools" "default-libmysqlclient-dev" "python3-dev" "build-essential" "python3-pip" "curl" "pkg-config" "libicu-dev" && rm -rf /var/lib/apt/lists/*
#9 sha256:bf60eb810b93f88517e05559f183d764d153654b250f20e148405b04a7b1f500
#9 0.621 Get:1 http://mirrors.wikimedia.org/debian buster InRelease [122 kB]
#9 0.621 Get:2 http://apt.wikimedia.org/wikimedia buster-wikimedia InRelease [175 kB]
#9 0.656 Get:3 http://mirrors.wikimedia.org/debian buster-updates InRelease [56.6 kB]
#9 0.656 Get:4 http://mirrors.wikimedia.org/debian buster-backports InRelease [51.4 kB]
#9 0.657 Get:5 http://security.debian.org buster/updates InRelease [34.8 kB]
#9 1.056 Get:6 http://mirrors.wikimedia.org/debian buster/main amd64 Packages [10.7 MB]
#9 1.360 Get:7 http://mirrors.wikimedia.org/debian buster-updates/main amd64 Packages [9,745 B]
#9 1.637 Err:4 http://mirrors.wikimedia.org/debian buster-backports InRelease
#9 1.637   The following signatures couldn't be verified because the public key is not available: NO_PUBKEY 0E98404D386FA1D9 NO_PUBKEY 6ED0E7B82643E131
#9 1.950 Get:8 http://apt.wikimedia.org/wikimedia buster-wikimedia/main amd64 Packages [97.3 kB]
#9 2.267 Get:9 http://security.debian.org buster/updates/main amd64 Packages [652 kB]
#9 2.416 Reading package lists...
#9 3.172 W: GPG error: http://mirrors.wikimedia.org/debian buster-backports InRelease: The following signatures couldn't be verified because the public key is not available: NO_PUBKEY 0E98404D386FA1D9 NO_PUBKEY 6ED0E7B82643E131
#9 3.172 E: The repository 'http://mirrors.wikimedia.org/debian buster-backports InRelease' is not signed.
#9 ERROR: executor failed running [/bin/sh -c apt-get update && apt-get install -y "python3-icu" "python3-setuptools" "default-libmysqlclient-dev" "python3-dev" "build-essential" "python3-pip" "curl" "pkg-config" "libicu-dev" && rm -rf /var/lib/apt/lists/*]: exit code: 100

The codehealth image is based on docker-registry.wikimedia.org/releng/sonar-scanner. The issue seems to be reproducable with both 4.6.0.2311-1 and 4.6.0.2311-4 versions.

Event Timeline

Restricted Application added a subscriber: Aklapper. · View Herald Transcript

The issue is somewhere within Release-Engineering-Team's docker images. releng/sonar-scanner is based on releng/maven-java11, which is itself based on releng/java11, which is finally based on releng/ci-buster. Trying to run apt update in releng/java11 results in NO_PUBKEY 0E98404D386FA1D9, while the same command works fine in releng/ci-buster. Not sure why.

kostajh triaged this task as High priority.Jun 23 2023, 7:31 AM
kostajh subscribed.

We can't merge patches to Add-Link until we solve this issue, so raising the priority.

Change 946575 had a related patch set uploaded (by Ahmon Dancy; author: Ahmon Dancy):

[integration/config@master] dockerfiles: Refresh java11 image and children

https://gerrit.wikimedia.org/r/946575

Change 946575 merged by jenkins-bot:

[integration/config@master] dockerfiles: Refresh java11 image and children

https://gerrit.wikimedia.org/r/946575

Mentioned in SAL (#wikimedia-releng) [2023-08-07T16:11:16Z] <dancy> Updating docker-pkg files on contint primary for T338952

Please try docker-registry.wikimedia.org/releng/sonar-scanner:4.6.0.2311-4-s1.

Please try docker-registry.wikimedia.org/releng/sonar-scanner:4.6.0.2311-4-s1.

Seems that works, thanks!

Urbanecm_WMF assigned this task to dancy.

The patch passed both test and gate-and-submit, so this seems to be resolved. Thanks again.

Change 954598 had a related patch set uploaded (by Hashar; author: Hashar):

[integration/config@master] jjb: update Java 11 to latest image

https://gerrit.wikimedia.org/r/954598

Change 954598 merged by jenkins-bot:

[integration/config@master] jjb: update Java 11 to latest image

https://gerrit.wikimedia.org/r/954598

Change 955942 had a related patch set uploaded (by Hashar; author: Hashar):

[integration/config@master] jjb: update rest of Java 11 jobs to latest image

https://gerrit.wikimedia.org/r/955942

Change 955942 merged by jenkins-bot:

[integration/config@master] jjb: update rest of Java 11 jobs to latest image

https://gerrit.wikimedia.org/r/955942