#archlinux32 | Logs for 2020-01-25
Back
[01:16:34] -!- KeiraT has quit [Remote host closed the connection]
[02:26:55] -!- MrBIOS has quit [Quit: MrBIOS]
[02:43:28] -!- KeiraT has joined #archlinux32
[02:45:51] -!- KeiraT has quit [Client Quit]
[02:51:07] -!- KeiraT has joined #archlinux32
[03:00:42] -!- MrBIOS_ has joined #archlinux32
[03:10:49] -!- KeiraT has quit [Quit: KeiraT]
[03:11:55] -!- KeiraT has joined #archlinux32
[03:13:10] -!- KeiraT has quit [Remote host closed the connection]
[03:14:05] -!- KeiraT has joined #archlinux32
[03:30:00] -!- MrBIOS_ has quit [Read error: Connection reset by peer]
[03:31:08] -!- MrBIOS has joined #archlinux32
[03:59:38] -!- MrBIOS has quit [Read error: Connection reset by peer]
[04:02:36] -!- MrBIOS has joined #archlinux32
[04:30:13] -!- MrBIOS has quit [Read error: Connection reset by peer]
[04:31:38] -!- MrBIOS has joined #archlinux32
[05:00:23] -!- MrBIOS has quit [Read error: Connection reset by peer]
[05:00:26] -!- MrBIOS_ has joined #archlinux32
[05:01:59] -!- mrkiko has joined #archlinux32
[05:02:34] <mrkiko> Hello all! and thank you a lot for your work, maintaining and updating Archlinux for 32-bit X86 hardware.
[05:03:02] <mrkiko> I am encountering an issue where SSL via openssl stopped working
[05:03:22] <mrkiko> Sorry for my generic problem description, I am not able to get a more detaileddebug error
[05:04:44] <mrkiko> Same issue happened on my real machine and the VM one I use to compile some heavy stuff
[05:06:02] <mrkiko> ca-certificates-mozilla-3.49.1-2.0 was part of last update
[05:30:02] -!- MrBIOS_ has quit [Read error: Connection reset by peer]
[05:30:09] -!- MrBIOS has joined #archlinux32
[05:57:23] <mrkiko> ninja: build stopped: subcommand failed. while rebuilding nss
[05:57:34] <mrkiko> How may I get some more details?
[06:00:56] -!- MrBIOS has quit [Read error: Connection reset by peer]
[06:01:34] -!- MrBIOS has joined #archlinux32
[06:09:25] <mrkiko> found build failure issue: subprocess.CalledProcessError: Command '['/tmp/nss/src/nss-3.49.2/dist/Release/bin/shlibsign', '-v', '-i', '/tmp/nss/src/nss-3.49.2/dist/Release/lib/libfreebl3.so']' died with <Signals.SIGSEGV: 11>.
[06:29:55] -!- MrBIOS has quit [Read error: Connection reset by peer]
[06:30:21] <mrkiko> fixed rebuilding some packages; obtained files:
[06:30:22] <mrkiko> ca-certificates-20181109-3-any.pkg.tar.xz
[06:30:22] <mrkiko> ca-certificates-mozilla-3.49.2-2-pentium4.pkg.tar.xz
[06:30:22] <mrkiko> ca-certificates-utils-20181109-3-any.pkg.tar.xz
[06:30:22] <mrkiko> nss-3.49.2-2-pentium4.pkg.tar.xz
[06:30:24] <mrkiko> p11-kit-0.23.19-2-pentium4.pkg.tar.xz
[06:30:35] -!- MrBIOS has joined #archlinux32
[06:33:58] <mrkiko> so, if you happen to see build failures, take a look at shlibsign
[06:34:18] <mrkiko> binary from nss, I had to skip that part, otherwise a SEGV during build would stop me; a python script invokes it
[06:44:03] <mrkiko> sorry, exiting; PM me, I may read tonight
[06:44:18] -!- mrkiko has parted #archlinux32
[06:59:46] -!- MrBIOS has quit [Read error: Connection reset by peer]
[07:00:52] -!- MrBIOS has joined #archlinux32
[07:30:39] -!- MrBIOS has quit [Read error: Connection reset by peer]
[07:30:40] -!- MrBIOS has joined #archlinux32
[07:40:54] -!- abaumann has joined #archlinux32
[07:41:12] <abaumann> mrkiko: thanks for you feedback
[07:41:40] <abaumann> yes, new ca-certificates-mozilla where installed (presumably due to a revocation after the Netgear disaster, ahem).
[07:41:59] <abaumann> somehow the cert store in the pacman hook gets rebuild in size 0
[07:42:16] <abaumann> I had this before when bootstrapping for i486, leaving SSL basically broken.
[07:43:10] <abaumann> you can temporarily work around this by downgrading ca-certificates-mozilla
[07:48:08] <abaumann> mmh. my nss builds without shlibsign issues.
[07:48:23] <abaumann> I'll try just to force build nss and see what happens
[07:48:33] <abaumann> maybe it was a temporary glitch
[08:00:20] -!- MrBIOS has quit [Read error: Connection reset by peer]
[08:00:27] -!- MrBIOS_ has joined #archlinux32
[08:14:20] <abaumann> tls-ca-bundle.pem is 0 bytes after rebuilding the certs
[08:14:32] <abaumann> /usr/bin/update-ca-trust is called in the hook
[08:14:42] <abaumann> belonging to ca-certificates-utils
[08:14:52] <abaumann> has symlinks pointing into the other package
[08:14:55] <abaumann> yeah, nice.
[08:15:37] <abaumann> so the question is: is the ca-trust updater the problem (what files does it read?) or are those original certs missing?
[08:21:00] <abaumann> so, /usr/share/ca-certificates/trust-source/mozilla.trust.p11-kit would be bad somehow?
[08:21:30] <abaumann> I always hated NSS and friends..
[08:22:17] <abaumann> so intuitive those key files and easy to handle :->
[08:22:34] <abaumann> similar to Java keystores
[08:22:42] <abaumann> what's wrong with plain cert files in a directory?
[08:25:11] <abaumann> my build slaves do everything but building nss, as I forced it!
[08:25:20] <abaumann> ERROR: recursively_umount_and_rm requires a directory as argument - "/data/home/slave1/builder/work/tmp.build-packages.yBIUOd" is not
[08:25:30] <abaumann> *sigh*
[08:26:38] <abaumann> most likley the broken certs will hit the build slaves soon (if they didn't already)
[08:27:37] <abaumann> ERROR: Cannot lock ping-to-master - this should not happen.
[08:27:40] <abaumann> *sigh*
[08:27:59] <abaumann> -> Downloading ice-3.7.3.tar.gz...
[08:28:16] <abaumann> cool. so, whatever I do in the build system to force something, something else gets built
[08:30:52] <abaumann> building package "vulkan-tools"
[08:30:52] -!- MrBIOS_ has quit [Read error: Connection reset by peer]
[08:30:56] <abaumann> that's the other slave.
[08:31:12] -!- MrBIOS has joined #archlinux32
[08:34:57] * abaumann is counting 383 [gpg] <defunct> on the build machine..
[08:43:38] <abaumann> fatal: this operation must be run in a work tree
[08:43:39] <abaumann> huh?
[08:43:57] <abaumann> ah packages is again in the wrong git format
[08:44:29] * abaumann does a rm -rf /home/*/builder/work/repos/*
[08:50:39] -!- DepositePirate_ has quit [Quit: Connection reset by beer]
[08:55:33] -!- DepositePirate has joined #archlinux32
[08:59:53] <abaumann> gyp, ninja, oh my..
[08:59:53] -!- MrBIOS has quit [Read error: Connection reset by peer]
[09:00:14] <abaumann> I remember now why I just copied a ca-mozilla package from a 64-bit system back when bootstrapping :->
[09:02:05] -!- MrBIOS has joined #archlinux32
[09:12:25] <abaumann> run_scanbuild gyp -f ninja hangs now since 10 minutes..
[09:20:57] <abaumann> futex(0xf7242000, FUTEX_WAIT_BITSET|FUTEX_CLOCK_REALTIME, 1, NULL, FUTEX_BITSET_MATCH_ANY, ok nice, another python build system disaster called gyp
[09:21:03] <abaumann> now things are just self-blocked
[09:30:27] -!- MrBIOS has quit [Read error: Connection reset by peer]
[09:30:40] -!- MrBIOS_ has joined #archlinux32
[09:38:04] * abaumann kills a slave
[09:45:11] <abaumann> ==> ERROR: tarball not found for package: nss-3.49.2-1.2
[09:45:20] <abaumann> oh joy, getting better and better.
[09:47:05] <abaumann> signing package(s)
[09:47:07] <abaumann> running namcap ...
[09:47:11] <abaumann> though it didn't build anything?
[09:47:47] <abaumann> and now it created a borked (empty) ca-certificates-mozilla-3.49.2-1.1-i686 again.
[09:51:36] <abaumann> i486 and i686 are building now
[09:51:45] <abaumann> ==> ERROR: tarball not found for package: nss-3.49.2-1.3
[09:51:54] <abaumann> this seems to be a new message at the end of the build..
[09:52:16] <abaumann> builds succeed anyways..
[09:59:49] <abaumann> p11-kit/nss mismatch.. things getting worse
[09:59:50] -!- MrBIOS_ has quit [Read error: Connection reset by peer]
[10:00:01] <abaumann> now only a forced move helps
[10:01:20] -!- MrBIOS has joined #archlinux32
[10:02:59] <abaumann> at least on i686 I have no working SSL again :-)
[10:03:33] <abaumann> *a working
[10:04:04] <abaumann> nss building on pentium4 now
[10:10:22] <abaumann> how can I force move any packages?
[10:10:31] <abaumann> 'any' not any :-)
[10:10:47] <abaumann> ah, they just got moved automatically :-)
[10:14:19] <abaumann> *uff*
[10:14:24] <abaumann> that was a tough one.
[10:14:31] <abaumann> I'll make an announcment
[10:30:17] -!- MrBIOS has quit [Read error: Connection reset by peer]
[10:30:40] -!- MrBIOS has joined #archlinux32
[10:35:58] <abaumann> Jan 25 10:34:53 eurobuild6 build-packages[228448]: /usr/share/makepkg/srcinfo.sh: line 34: echo: write error: Broken pipe
[10:36:01] <abaumann> Jan 25 10:34:53 eurobuild6 build-packages[228448]: /usr/bin/makepkg: line 110: echo: write error: Broken pipe
[10:36:04] <abaumann> huh?
[10:36:23] <abaumann> what the duck is that?
[10:36:44] <abaumann> gpg failing in a loop now.
[10:37:17] <abaumann> I'm stopping my slaves for now, I'm out of time to investigate this..
[10:37:18] -!- abaumann has quit [Quit: leaving]
[11:01:15] -!- MrBIOS has quit [Read error: Connection reset by peer]
[11:02:48] -!- MrBIOS has joined #archlinux32
[11:10:59] -!- infides has joined #archlinux32
[11:16:54] -!- infides has quit [Ping timeout: 265 seconds]
[11:31:43] -!- MrBIOS has quit [Read error: Connection reset by peer]
[11:32:37] -!- MrBIOS has joined #archlinux32
[12:01:22] -!- MrBIOS has quit [Read error: Connection reset by peer]
[12:02:05] -!- MrBIOS has joined #archlinux32
[12:30:37] -!- MrBIOS has quit [Read error: Connection reset by peer]
[12:30:48] -!- MrBIOS_ has joined #archlinux32
[13:00:34] -!- MrBIOS_ has quit [Read error: Connection reset by peer]
[13:00:58] -!- MrBIOS has joined #archlinux32
[13:31:25] -!- MrBIOS has quit [Read error: Connection reset by peer]
[13:33:09] -!- MrBIOS has joined #archlinux32
[13:52:03] <trotz> 2020/01/25 13:51 CRIT buildmaster Buildmaster Secure HTTP CRITICAL - Invalid HTTP response received from host on port 443: cURL returned 7 - Couldn't connect to server
[13:53:04] -!- abaumann has joined #archlinux32
[13:53:09] -!- abaumann has parted #archlinux32
[13:53:11] -!- abaumann has joined #archlinux32
[13:53:14] -!- abaumann has parted #archlinux32
[13:53:18] -!- abaumann has joined #archlinux32
[13:54:03] <trotz> 2020/01/25 13:53 CRIT okeanos Home HTTP CRITICAL - Invalid HTTP response received from host on port 80: cURL returned 7 - Couldn't connect to server
[13:54:04] <trotz> 2020/01/25 13:53 CRIT okeanos Home Certificate HTTP CRITICAL - Invalid HTTP response received from host on port 443: cURL returned 7 - Couldn't connect to server
[13:54:09] <abaumann> yeah, I know
[13:54:45] <abaumann> i stored the common configuration of archlinux32 (http and https) into a directory (!!) /etc/nginx/snippets/common.conf and my stupid editor actually did that.
[13:55:04] <abaumann> the configuration of the website is not checked in, only the php part it seems..
[13:55:36] <abaumann> so, no I can either wait till somebody (deep42thought) hops on the channel and can produce a file from the backup..
[13:55:49] <abaumann> ..or I try my luck to reconstruct the configuration
[13:56:00] <abaumann> our backup concept still has several flaws..
[13:56:03] <trotz> 2020/01/25 13:55 CRIT okeanos Home Secure HTTP CRITICAL - Invalid HTTP response received from host on port 443: cURL returned 7 - Couldn't connect to server
[13:57:39] <abaumann> nginx reads backup files of joe/jstar, so of course I deleted the old version in there :->
[13:58:25] <abaumann> modern configuration management :->
[13:58:50] <abaumann> having all configuration of machines in a git and then use hooks to cfengine/puppet/chef the thing out.
[13:59:03] <abaumann> but somehow it never happens in reality.
[14:01:38] -!- MrBIOS has quit [Read error: Connection reset by peer]
[14:01:51] -!- MrBIOS_ has joined #archlinux32
[14:01:56] <abaumann> Apache at least has .htaccess files if you need pages of webserver config inside the project.
[14:02:02] <abaumann> At least you can check in that.
[14:04:03] <trotz> 2020/01/25 14:03 OK okeanos Home Certificate OK - Certificate 'archlinux32.org' will expire on Tue 03 Mar 2020 12:50:25 AM GMT +0000.
[14:05:43] <abaumann> modern webbrowser b*it: you cannot forget http to https redirects!
[14:05:52] <abaumann> you can if you delete .config/firefox or so
[14:09:08] <abaumann> oh joy: configuring an unknown webserver
[14:16:49] <abaumann> no chance.
[14:16:52] <abaumann> I need a backup.
[14:24:29] * abaumann tries to reconstruct a Nginx configuration from a test Apache configuration he used to test some parts of the webpage
[14:31:29] -!- MrBIOS_ has quit [Read error: Connection reset by peer]
[14:32:05] <trotz> 2020/01/25 14:31 OK buildmaster Buildmaster Secure HTTP OK: HTTP/2.0 200 - 2837 bytes in 0.221 second response time
[14:32:14] -!- MrBIOS has joined #archlinux32
[14:34:05] <trotz> 2020/01/25 14:33 OK okeanos Home HTTP OK: HTTP/1.1 200 OK - 23521 bytes in 1.247 second response time
[14:36:05] <trotz> 2020/01/25 14:35 OK okeanos Home Secure HTTP OK: HTTP/2.0 200 - 23609 bytes in 1.251 second response time
[14:36:13] <abaumann> this stupid http to https redirection.. killing some people for that idea is at hand :->
[14:37:33] <abaumann> seems as if browser see that the site is available in both http and https, they just silently decide to use https
[14:37:41] <abaumann> forced encryption
[14:38:17] <abaumann> which is brilliant if you are a) a developer wanting to test things b) you SSL system is broken or a+b) both
[14:40:02] <abaumann> c) not being able to read the webpage if somebody forgets to update certificates
[14:48:45] -!- infides has joined #archlinux32
[14:58:13] * abaumann balances the craziness of an Apache webserver config against the craziness of a Nginx config
[14:59:12] <abaumann> deep42thought: I readded sort of a working config on archlinux32.org (snippets/archweb.conf) which I'm including in sites.available/archlinux32.org, feel free to restore your backup there
[15:01:56] -!- MrBIOS has quit [Read error: Connection reset by peer]
[15:02:04] <abaumann> "/mirrorlist.php.php.php.php.php.php.php.php.php.php.php/
[15:02:06] <abaumann> *sigh8
[15:02:23] -!- MrBIOS has joined #archlinux32
[15:02:33] <abaumann> I thought that's why there is 'last'?
[15:03:31] <KitsuWhooa> <abaumann> this stupid http to https redirection.. killing some people for that idea is at hand :-> <-- if you sent an http 301 in the past then the browser just cached the redirect
[15:04:01] <KitsuWhooa> Usually curl is pretty good for debugging this stuff
[15:05:05] <abaumann> I know that.
[15:05:41] <abaumann> The problem is, sending a permantent redirect from http to https is almost the last action you do on a website.. there is no way back.
[15:06:14] <abaumann> so imagine how you can inform people about a fatal certificate bug .. and this information is on a website which is only accessible with SSL
[15:09:41] <abaumann> uff. recovered.
[15:10:05] <abaumann> sorry for my harsh behaviour, but since this morning I'm killing bugs and creating new ones myself..
[15:10:06] <trotz> 2020/01/25 15:09 CRIT buildmaster Buildmaster Secure HTTP CRITICAL: HTTP/2.0 403 - string 'build' not found on 'https://buildmaster.archlinux32.org:443/' - 506 bytes in 0.240 second response time
[15:31:47] -!- MrBIOS has quit [Read error: Connection reset by peer]
[15:31:48] -!- MrBIOS has joined #archlinux32
[16:01:35] -!- MrBIOS has quit [Read error: Connection reset by peer]
[16:02:16] -!- MrBIOS has joined #archlinux32
[16:06:08] -!- abaumann has quit [Quit: leaving]
[16:31:45] -!- MrBIOS has quit [Read error: Connection reset by peer]
[16:31:52] -!- MrBIOS_ has joined #archlinux32
[16:50:12] <trotz> 2020/01/25 16:49 OK buildmaster Buildmaster Secure HTTP OK: HTTP/2.0 200 - 2837 bytes in 0.252 second response time
[17:01:23] -!- MrBIOS_ has quit [Read error: Connection reset by peer]
[17:03:10] -!- MrBIOS has joined #archlinux32
[17:28:19] -!- neitzel has joined #archlinux32
[17:32:03] -!- MrBIOS has quit [Read error: Connection reset by peer]
[17:32:21] -!- MrBIOS has joined #archlinux32
[17:57:30] -!- infides has quit [Ping timeout: 268 seconds]
[18:01:58] -!- MrBIOS has quit [Read error: Connection reset by peer]
[18:03:30] -!- MrBIOS has joined #archlinux32
[18:32:11] -!- MrBIOS has quit [Read error: Connection reset by peer]
[18:33:07] -!- MrBIOS has joined #archlinux32
[18:52:16] <trotz> 2020/01/25 18:51 CRIT buildmaster OS updates 1 updates, 0 ignored
[18:58:28] -!- nit-picker has quit [Remote host closed the connection]
[18:58:51] -!- nit-picker has joined #archlinux32
[19:00:08] -!- nit-picker has quit [Remote host closed the connection]
[19:00:31] -!- nit-picker has joined #archlinux32
[19:00:40] -!- MrBIOS has quit [Read error: Connection reset by peer]
[19:01:41] -!- nit-picker has quit [Remote host closed the connection]
[19:02:03] -!- nit-picker has joined #archlinux32
[19:03:07] -!- MrBIOS has joined #archlinux32
[19:03:19] -!- nit-picker has quit [Remote host closed the connection]
[19:03:41] -!- nit-picker has joined #archlinux32
[19:31:51] -!- MrBIOS has quit [Read error: Connection reset by peer]
[19:32:29] -!- MrBIOS has joined #archlinux32
[20:01:50] -!- MrBIOS has quit [Read error: Connection reset by peer]
[20:01:59] -!- MrBIOS_ has joined #archlinux32
[20:32:28] -!- MrBIOS_ has quit [Read error: Connection reset by peer]
[20:32:44] -!- MrBIOS has joined #archlinux32
[21:00:52] -!- MrBIOS has quit [Read error: Connection reset by peer]
[21:00:57] -!- MrBIOS_ has joined #archlinux32