Can't seem to build qubes 3.2

[Alchemist]

So I follow the build guide instructions, I have No_Sign=1, but for some reason the build script fails by telling me that the package is unsigned.

Fedora 27 is my build system.

Any ideas?

[Unman]

You'll really have to give us a clue - which package is unsigned?
You can turn on DEBUG and VERBOSE in builder.conf if you don't already
have them.
Then check the logs in build-logs and see exactly what is happening.

[Alchemist]

Sorry about that,

/qubes-builder/cache/fc23/base_rpms/acl-2.2.52-10.fc23.x86_64.rpm is not signed. Exiting!
make[1]: *** [/home/liveuser/qubes-builder/qubes-src/builder-fedora/Makefile.fedora:86: /home/liveuser/qubes-builder/chroot-fc23/home/user/.prepared_base] Error 1

is the error I get, I turned on Debug and Verbose, but there's nothing in build-logs.

[Unman]

Ok, so that's an issue with that package from Fedora. It isn't to do with
signing or not signing the packages that you are building.
Just delete that rpm and try the build again.

[Alchemist]

I deleted it, and it still is giving me the same error.

[Alchemist]

Here's the entire area of the log:

[SKIPPED] libusbx-1.0.21-0.1.git448584a.fc23.x86_64.rpm: Already downloaded
(154/154): acl-2.2.52-10.fc23.x86_64.rpm 44 kB/s | 77 kB 00:01
--------------------------------------------------------------------------------
Total 38 kB/s | 77 kB 00:02
Complete!
The downloaded packages were saved in cache until the next successful transaction.
You can remove cached packages by executing 'dnf clean packages'.
+ rm -f /tmp/tmp.q6KHM6Y1gW
+ echo '-> Verifying signatures...'
-> Verifying signatures...
+ set +x
Filename: /home/x/qubes-builder/cache/fc23/base_rpms/acl-2.2.52-10.fc23.x86_64.rpm is not signed. Exiting!
make[1]: *** [/home/x/qubes-builder/qubes-src/builder-fedora/Makefile.fedora:86: /home/x/qubes-builder/chroot-fc23/home/user/.prepared_base] Error 1
make[1]: Leaving directory '/home/x/qubes-builder'
make: *** [Makefile:224: vmm-xen-dom0] Error 1

[Tim W]

I have been having isses with fedoras repo over the last few days while compiling both 3.2 and 4.0. I have stopped using make qubes all together and instead compile the packages in small groups or individually. I can then redo a package a few times without starting over. I have been able to compile a number of different template configs.

So far it seems the non standard templates fail with python script or config errors. Fedora 25 works other than the fc25fullyloaded template. Centos fails as does Xenial Ubuntu. I had issues with archlinux as well but have not tried it package by package so it might work. They may build fine as templates only but they do not when rolled into a qubes os iso build.

Im putting together a list of the failures to post once Im done so we can look over and fix the issues.

[awokd]

On Tue, February 6, 2018 10:47 pm, Unman wrote:
> On Tue, Feb 06, 2018 at 02:27:57PM -0800, Alchemist wrote:
>
>> On Tuesday, February 6, 2018 at 5:15:34 PM UTC-5, Unman wrote:
>>
>>> On Tue, Feb 06, 2018 at 02:02:47PM -0800, Alchemist wrote:
>>>
>>>> So I follow the build guide instructions, I have No_Sign=1, but for
>>>> some reason the build script fails by telling me that the package
>>>> is unsigned.
>>>>
>>>> Fedora 27 is my build system.

Might want to try Fedora 25 instead?

[Unman]

Can you go to cache and test it:
rpm -qpi should show you the details

[Alchemist]

[x@localhost base_rpms]$ rpm -qpi acl-2.2.52-10.fc23.x86_64.rpm
warning: acl-2.2.52-10.fc23.x86_64.rpm: Header V3 RSA/SHA256 Signature, key ID 34ec9cba: NOKEY
Name : acl
Version : 2.2.52
Release : 10.fc23
Architecture: x86_64
Install Date: (not installed)
Group : System Environment/Base
Size : 187824
License : GPLv2+
Signature : RSA/SHA256, Tue 08 Sep 2015 08:24:19 AM PDT, Key ID 32474cf834ec9cba
Source RPM : acl-2.2.52-10.fc23.src.rpm
Build Date : Tue 08 Sep 2015 04:47:35 AM PDT
Build Host : buildvm-17.phx2.fedoraproject.org
Relocations : (not relocatable)
Packager : Fedora Project
Vendor : Fedora Project
URL : http://acl.bestbits.at/
Summary : Access control list utilities
Description :
This package contains the getfacl and setfacl utilities needed for
manipulating access control lists.

[Tim W]

Are you running the ./setup or using the build.conf example? If the later look at awokd's link and follow those steps.

https://github.com/QubesOS/qubes-issues/issues/3426

That is how I have been building qubes iso and separate templates since ver 3.1. Do not follow any of the steps to edit conf files etc in the linked instructions above. Just follow the cmds as those issues have been fixed.

Pick fc26 (optional fc26minimal) stretch (optional stretch minimal) and the 2 whonix templates. You tech can add all the fc26 and Stretch template choices as they all should build based off my tests results. You would need more disk space though. I could be off but I think adding 5 gig per extra template you add should keep you with enough build space. Start at 60 gig for standard build and go up from there. They build in fc23 fc25 i have seen people post issues using fc27 but have no idea if its version related or not.

[Alchemist]

I was building with ./setup, I'm just trying to get a new kernel into a 3.2 iso so I can install qubes on my Thinkpad.