Mirage-firewall - build fails

ronpunz

unread,

Jun 19, 2019, 5:31:41 AM6/19/19

to qubes-users

In the past I've successfully built mirage-firewall on several
occasions. However following a recent reinstall of qubesos I've been
unable to successfully build the firewall.

In summary I've tried building using fedora-29, fedora-30 and debian-10.
The errors associated with fedora 29 & 30 are similar and are listed below:

Maybe someone can point me to a solution?

[user@dev ~]$ sudo ln -s /home/user/docker /var/lib/docker
[user@dev ~]$ sudo dnf install docker
Last metadata expiration check: 0:42:32 ago on Wed Jun 19 09:21:13 2019.
Dependencies resolved.
================================================================================
Package                   Arch   Version
Repo     Size
================================================================================
Installing:
docker                    x86_64 2:1.13.1-67.git1185cfd.fc30
updates 26 M
Installing dependencies:
container-selinux         noarch 2:2.101-1.gitb0061dc.fc30
updates 47 k
containers-common         x86_64 1:0.1.36-9.dev.gitd93a581.fc30
updates 35 k
docker-common             x86_64 2:1.13.1-67.git1185cfd.fc30
updates 23 k
docker-rhel-push-plugin   x86_64 2:1.13.1-67.git1185cfd.fc30
updates 2.2 M
flatpak-selinux           x86_64 1.4.1-1.fc30
updates 24 k
selinux-policy            noarch 3.14.3-37.fc30
updates 123 k
selinux-policy-targeted   noarch 3.14.3-37.fc30
updates 14 M
subscription-manager-rhsm-certificates
                           x86_64 1.25.5-4.fc30
updates 59 k
atomic-registries         x86_64 1.22.1-28.gitb507039.fc30
fedora   35 k
checkpolicy               x86_64 2.9-1.fc30
fedora 291 k
container-storage-setup   noarch 0.11.0-5.dev.git413b408.fc30
fedora   39 k
device-mapper-event       x86_64 1.02.154-3.fc30
fedora   46 k
device-mapper-event-libs x86_64 1.02.154-3.fc30
fedora   46 k
device-mapper-persistent-data
                           x86_64 0.7.6-4.fc30
fedora 424 k
libaio                    x86_64 0.3.111-4.fc30
fedora   21 k
libbsd                    x86_64 0.9.1-3.fc30
fedora 100 k
libnet                    x86_64 1.1.6-17.fc30
fedora   61 k
libselinux-utils          x86_64 2.9-1.fc30
fedora 147 k
lvm2                      x86_64 2.02.183-3.fc30
fedora 1.2 M
lvm2-libs                 x86_64 2.02.183-3.fc30
fedora 943 k
oci-umount                x86_64 2:2.5-1.gitc3cda1f.fc30
fedora   37 k
policycoreutils           x86_64 2.9-1.fc30
fedora 193 k
policycoreutils-python-utils
                           noarch 2.9-1.fc30
fedora   64 k
protobuf-c                x86_64 1.3.1-2.fc30
fedora   33 k
python3-audit             x86_64 3.0-0.7.20190326git03e7489.fc30
fedora   73 k
python3-libselinux        x86_64 2.9-1.fc30
fedora 163 k
python3-libsemanage       x86_64 2.9-1.fc30
fedora   76 k
python3-policycoreutils   noarch 2.9-1.fc30
fedora 2.1 M
python3-pytoml            noarch 0.1.18-3.fc30
fedora   24 k
python3-pyyaml            x86_64 5.1-1.fc30
fedora 201 k
python3-setools           x86_64 4.1.1-14.fc30
fedora 437 k
rpm-plugin-selinux        x86_64 4.14.2.1-4.fc30.1
fedora   24 k
tpm2-abrmd-selinux        noarch 2.0.0-4.fc30
fedora   20 k
Installing weak dependencies:
criu                      x86_64 3.12-11.fc30
updates 476 k
oci-systemd-hook          x86_64 1:0.2.0-1.git05e6923.fc30
fedora   37 k

Transaction Summary
================================================================================
Install 36 Packages

Total download size: 50 M
 : selinux-policy-targeted-3.14.3-37.fc30 738 kB/s | 14 MB
00:19
--------------------------------------------------------------------------------
Total                                           2.1 MB/s | 50 MB
00:24
Running transaction check
Transaction check succeeded.
Running transaction test
Transaction test succeeded.
Running transaction
Preparing
:                                                        1/1
Installing       :
python3-libselinux-2.9-1.fc30.x86_64                  1/36
Installing       :
libselinux-utils-2.9-1.fc30.x86_64                    2/36
Installing       :
policycoreutils-2.9-1.fc30.x86_64                     3/36
Running scriptlet:
policycoreutils-2.9-1.fc30.x86_64                     3/36
Installing       :
rpm-plugin-selinux-4.14.2.1-4.fc30.1.x86_64           4/36
Installing       :
selinux-policy-3.14.3-37.fc30.noarch                  5/36
Running scriptlet:
selinux-policy-3.14.3-37.fc30.noarch                  5/36
Running scriptlet:
selinux-policy-targeted-3.14.3-37.fc30.noarch         6/36
Installing       :
selinux-policy-targeted-3.14.3-37.fc30.noarch         6/36
Running scriptlet:
selinux-policy-targeted-3.14.3-37.fc30.noarch         6/36
Installing       :
libaio-0.3.111-4.fc30.x86_64                          7/36
Installing       :
device-mapper-event-libs-1.02.154-3.fc30.x86_64       8/36
Installing       :
containers-common-1:0.1.36-9.dev.gitd93a581.fc30.x    9/36
Installing       :
device-mapper-event-1.02.154-3.fc30.x86_64           10/36
Running scriptlet:
device-mapper-event-1.02.154-3.fc30.x86_64           10/36
Installing       :
lvm2-libs-2.02.183-3.fc30.x86_64                     11/36
Installing       :
device-mapper-persistent-data-0.7.6-4.fc30.x86_64    12/36
Installing       :
lvm2-2.02.183-3.fc30.x86_64                          13/36
Running scriptlet:
lvm2-2.02.183-3.fc30.x86_64                          13/36
Installing       :
container-storage-setup-0.11.0-5.dev.git413b408.fc   14/36
Installing       :
container-selinux-2:2.101-1.gitb0061dc.fc30.noarch   15/36
Running scriptlet:
container-selinux-2:2.101-1.gitb0061dc.fc30.noarch   15/36
Installing       :
python3-libsemanage-2.9-1.fc30.x86_64                16/36
Installing       :
python3-setools-4.1.1-14.fc30.x86_64                 17/36
Installing       :
python3-pyyaml-5.1-1.fc30.x86_64                     18/36
Installing       :
python3-pytoml-0.1.18-3.fc30.noarch                  19/36
Installing       :
atomic-registries-1.22.1-28.gitb507039.fc30.x86_64   20/36
Installing       :
python3-audit-3.0-0.7.20190326git03e7489.fc30.x86_   21/36
Installing       :
protobuf-c-1.3.1-2.fc30.x86_64                       22/36
Installing       :
oci-umount-2:2.5-1.gitc3cda1f.fc30.x86_64            23/36
Installing       :
oci-systemd-hook-1:0.2.0-1.git05e6923.fc30.x86_64    24/36
Installing       :
libnet-1.1.6-17.fc30.x86_64                          25/36
Installing       :
libbsd-0.9.1-3.fc30.x86_64                           26/36
Installing       :
criu-3.12-11.fc30.x86_64                             27/36
Installing       :
checkpolicy-2.9-1.fc30.x86_64                        28/36
Installing       :
python3-policycoreutils-2.9-1.fc30.noarch            29/36
Installing       :
policycoreutils-python-utils-2.9-1.fc30.noarch       30/36
Installing       :
subscription-manager-rhsm-certificates-1.25.5-4.fc   31/36
Installing       :
docker-rhel-push-plugin-2:1.13.1-67.git1185cfd.fc3   32/36
Running scriptlet:
docker-rhel-push-plugin-2:1.13.1-67.git1185cfd.fc3   32/36
Installing       :
docker-common-2:1.13.1-67.git1185cfd.fc30.x86_64     33/36
Installing       :
docker-2:1.13.1-67.git1185cfd.fc30.x86_64            34/36
Running scriptlet:
docker-2:1.13.1-67.git1185cfd.fc30.x86_64            34/36
Running scriptlet:
tpm2-abrmd-selinux-2.0.0-4.fc30.noarch               35/36
Installing       :
tpm2-abrmd-selinux-2.0.0-4.fc30.noarch               35/36
Running scriptlet:
tpm2-abrmd-selinux-2.0.0-4.fc30.noarch               35/36
Installing       :
flatpak-selinux-1.4.1-1.fc30.x86_64                  36/36
Running scriptlet:
flatpak-selinux-1.4.1-1.fc30.x86_64                  36/36
Running scriptlet:
tpm2-abrmd-selinux-2.0.0-4.fc30.noarch               36/36
Running scriptlet:
flatpak-selinux-1.4.1-1.fc30.x86_64                  36/36
Verifying        :
container-selinux-2:2.101-1.gitb0061dc.fc30.noarch    1/36
Verifying        :
containers-common-1:0.1.36-9.dev.gitd93a581.fc30.x    2/36
Verifying        :
criu-3.12-11.fc30.x86_64                              3/36
Verifying        :
docker-2:1.13.1-67.git1185cfd.fc30.x86_64             4/36
Verifying        :
docker-common-2:1.13.1-67.git1185cfd.fc30.x86_64      5/36
Verifying        :
docker-rhel-push-plugin-2:1.13.1-67.git1185cfd.fc3    6/36
Verifying        :
flatpak-selinux-1.4.1-1.fc30.x86_64                   7/36
Verifying        :
selinux-policy-3.14.3-37.fc30.noarch                  8/36
Verifying        :
selinux-policy-targeted-3.14.3-37.fc30.noarch         9/36
Verifying        :
subscription-manager-rhsm-certificates-1.25.5-4.fc   10/36
Verifying        :
atomic-registries-1.22.1-28.gitb507039.fc30.x86_64   11/36
Verifying        :
checkpolicy-2.9-1.fc30.x86_64                        12/36
Verifying        :
container-storage-setup-0.11.0-5.dev.git413b408.fc   13/36
Verifying        :
device-mapper-event-1.02.154-3.fc30.x86_64           14/36
Verifying        :
device-mapper-event-libs-1.02.154-3.fc30.x86_64      15/36
Verifying        :
device-mapper-persistent-data-0.7.6-4.fc30.x86_64    16/36
Verifying        :
libaio-0.3.111-4.fc30.x86_64                         17/36
Verifying        :
libbsd-0.9.1-3.fc30.x86_64                           18/36
Verifying        :
libnet-1.1.6-17.fc30.x86_64                          19/36
Verifying        :
libselinux-utils-2.9-1.fc30.x86_64                   20/36
Verifying        :
lvm2-2.02.183-3.fc30.x86_64                          21/36
Verifying        :
lvm2-libs-2.02.183-3.fc30.x86_64                     22/36
Verifying        :
oci-systemd-hook-1:0.2.0-1.git05e6923.fc30.x86_64    23/36
Verifying        :
oci-umount-2:2.5-1.gitc3cda1f.fc30.x86_64            24/36
Verifying        :
policycoreutils-2.9-1.fc30.x86_64                    25/36
Verifying        :
policycoreutils-python-utils-2.9-1.fc30.noarch       26/36
Verifying        :
protobuf-c-1.3.1-2.fc30.x86_64                       27/36
Verifying        :
python3-audit-3.0-0.7.20190326git03e7489.fc30.x86_   28/36
Verifying        :
python3-libselinux-2.9-1.fc30.x86_64                 29/36
Verifying        :
python3-libsemanage-2.9-1.fc30.x86_64                30/36
Verifying        :
python3-policycoreutils-2.9-1.fc30.noarch            31/36
Verifying        :
python3-pytoml-0.1.18-3.fc30.noarch                  32/36
Verifying        :
python3-pyyaml-5.1-1.fc30.x86_64                     33/36
Verifying        :
python3-setools-4.1.1-14.fc30.x86_64                 34/36
Verifying        :
rpm-plugin-selinux-4.14.2.1-4.fc30.1.x86_64          35/36
Verifying        :
tpm2-abrmd-selinux-2.0.0-4.fc30.noarch               36/36
Last metadata expiration check: 0:45:00 ago on Wed Jun 19 09:21:13 2019.
Notifying dom0 about installed applications

Installed:

docker-2:1.13.1-67.git1185cfd.fc30.x86_64

criu-3.12-11.fc30.x86_64

oci-systemd-hook-1:0.2.0-1.git05e6923.fc30.x86_64

container-selinux-2:2.101-1.gitb0061dc.fc30.noarch

containers-common-1:0.1.36-9.dev.gitd93a581.fc30.x86_64

docker-common-2:1.13.1-67.git1185cfd.fc30.x86_64

docker-rhel-push-plugin-2:1.13.1-67.git1185cfd.fc30.x86_64

flatpak-selinux-1.4.1-1.fc30.x86_64

selinux-policy-3.14.3-37.fc30.noarch

selinux-policy-targeted-3.14.3-37.fc30.noarch

subscription-manager-rhsm-certificates-1.25.5-4.fc30.x86_64

atomic-registries-1.22.1-28.gitb507039.fc30.x86_64

checkpolicy-2.9-1.fc30.x86_64

container-storage-setup-0.11.0-5.dev.git413b408.fc30.noarch

device-mapper-event-1.02.154-3.fc30.x86_64

device-mapper-event-libs-1.02.154-3.fc30.x86_64

device-mapper-persistent-data-0.7.6-4.fc30.x86_64

libaio-0.3.111-4.fc30.x86_64

libbsd-0.9.1-3.fc30.x86_64

libnet-1.1.6-17.fc30.x86_64

libselinux-utils-2.9-1.fc30.x86_64

lvm2-2.02.183-3.fc30.x86_64

lvm2-libs-2.02.183-3.fc30.x86_64

oci-umount-2:2.5-1.gitc3cda1f.fc30.x86_64

policycoreutils-2.9-1.fc30.x86_64

policycoreutils-python-utils-2.9-1.fc30.noarch

protobuf-c-1.3.1-2.fc30.x86_64

python3-audit-3.0-0.7.20190326git03e7489.fc30.x86_64

python3-libselinux-2.9-1.fc30.x86_64

python3-libsemanage-2.9-1.fc30.x86_64

python3-policycoreutils-2.9-1.fc30.noarch

python3-pytoml-0.1.18-3.fc30.noarch

python3-pyyaml-5.1-1.fc30.x86_64

python3-setools-4.1.1-14.fc30.x86_64

rpm-plugin-selinux-4.14.2.1-4.fc30.1.x86_64

tpm2-abrmd-selinux-2.0.0-4.fc30.noarch

Complete!
[user@dev ~]$ sudo systemctl start docker
[user@dev ~]$ git clone https://github.com/mirage/qubes-mirage-firewall.git
fatal: destination path 'qubes-mirage-firewall' already exists and is
not an empty directory.
[user@dev ~]$ cd qubes-mirage-firewall
[user@dev qubes-mirage-firewall]$ sudo ./build-with-docker.sh
Building Docker image with dependencies..
Sending build context to Docker daemon 120.3 kB
Step 1/10 : FROM
ocaml/opam2@sha256:f7125924dd6632099ff98b2505536fe5f5c36bf0beb24779431bb62be5748562
Trying to pull repository docker.io/ocaml/opam2 ...
sha256:f7125924dd6632099ff98b2505536fe5f5c36bf0beb24779431bb62be5748562:
Pulling from docker.io/ocaml/opam2
ab1fc7e4bf91: Pull complete
6f18bf102670: Pull complete
699ebb14d422: Pull complete
cf587ba18bc9: Pull complete
d3a929149973: Pull complete
9a6a034ad342: Pull complete
9bb3db9d2528: Pull complete
b87ea99b2663: Pull complete
b53e97a27ef2: Pull complete
Digest:
sha256:f7125924dd6632099ff98b2505536fe5f5c36bf0beb24779431bb62be5748562
Status: Downloaded newer image for
docker.io/ocaml/opam2@sha256:f7125924dd6632099ff98b2505536fe5f5c36bf0beb24779431bb62be5748562
---> c1014001338e
Step 2/10 : RUN git fetch origin && git reset --hard
d1b2a1cbc28d43926b37e61f46fc403b48ab9c23 && opam update
---> Running in 93013a78a67e
From git://github.com/ocaml/opam-repository
fad37c0129..08cc4d5cf9 master -> origin/master
Checking out files: 100% (13021/13021), done.
HEAD is now at d1b2a1cbc2 Merge pull request #14091 from
talex5/release-netchannel-1.11.0

<><> Updating package repositories
><><><><><><><><><><><><><><><><><><><><><><>
[default] synchronised from git+file:///home/opam/opam-repository
Now run 'opam upgrade' to apply any package updates.
---> 73809b3befba
Removing intermediate container 93013a78a67e
Step 3/10 : RUN sudo apt-get install -y m4 libxen-dev pkg-config
---> Running in 7d9bab2610ee
Reading package lists...
Building dependency tree...
Reading state information...
The following additional packages will be installed:
libglib2.0-0 libglib2.0-data libicu57 libsigsegv2 libxen-4.8
libxenstore3.0
libxml2 libyajl2 sgml-base shared-mime-info xdg-user-dirs xml-core
Suggested packages:
m4-doc sgml-base-doc debhelper
The following NEW packages will be installed:
libglib2.0-0 libglib2.0-data libicu57 libsigsegv2 libxen-4.8 libxen-dev
libxenstore3.0 libxml2 libyajl2 m4 pkg-config sgml-base shared-mime-info
xdg-user-dirs xml-core
0 upgraded, 15 newly installed, 0 to remove and 0 not upgraded.
Need to get 16.1 MB of archives.
After this operation, 58.5 MB of additional disk space will be used.
Get:1 http://deb.debian.org/debian stretch/main amd64 sgml-base all 1.29
[14.8 kB]
Get:2 http://security.debian.org/debian-security stretch/updates/main
amd64 libxenstore3.0 amd64 4.8.5+shim4.10.2+xsa282-1+deb9u11 [35.1 kB]
Get:3 http://deb.debian.org/debian stretch/main amd64 libicu57 amd64
57.1-6+deb9u2 [7700 kB]
Get:4 http://security.debian.org/debian-security stretch/updates/main
amd64 libxen-4.8 amd64 4.8.5+shim4.10.2+xsa282-1+deb9u11 [413 kB]
Get:5 http://security.debian.org/debian-security stretch/updates/main
amd64 libxen-dev amd64 4.8.5+shim4.10.2+xsa282-1+deb9u11 [652 kB]
Get:6 http://deb.debian.org/debian stretch/main amd64 libxml2 amd64
2.9.4+dfsg1-2.2+deb9u2 [920 kB]
Get:7 http://deb.debian.org/debian stretch/main amd64 libglib2.0-0 amd64
2.50.3-2 [2691 kB]
Get:8 http://deb.debian.org/debian stretch/main amd64 libglib2.0-data
all 2.50.3-2 [2517 kB]
Get:9 http://deb.debian.org/debian stretch/main amd64 libsigsegv2 amd64
2.10-5 [28.9 kB]
Get:10 http://deb.debian.org/debian stretch/main amd64 libyajl2 amd64
2.1.0-2+b3 [23.2 kB]
Get:11 http://deb.debian.org/debian stretch/main amd64 m4 amd64 1.4.18-1
[202 kB]
Get:12 http://deb.debian.org/debian stretch/main amd64 pkg-config amd64
0.29-4+b1 [63.3 kB]
Get:13 http://deb.debian.org/debian stretch/main amd64 shared-mime-info
amd64 1.8-1+deb9u1 [731 kB]
Get:14 http://deb.debian.org/debian stretch/main amd64 xdg-user-dirs
amd64 0.15-2+b1 [52.2 kB]
Get:15 http://deb.debian.org/debian stretch/main amd64 xml-core all 0.17
[23.2 kB]
debconf: delaying package configuration, since apt-utils is not installed
Fetched 16.1 MB in 4s (3964 kB/s)
Selecting previously unselected package sgml-base.
(Reading database ... 17661 files and directories currently installed.)
Preparing to unpack .../00-sgml-base_1.29_all.deb ...
Unpacking sgml-base (1.29) ...
Selecting previously unselected package libicu57:amd64.
Preparing to unpack .../01-libicu57_57.1-6+deb9u2_amd64.deb ...
Unpacking libicu57:amd64 (57.1-6+deb9u2) ...
Selecting previously unselected package libxml2:amd64.
Preparing to unpack .../02-libxml2_2.9.4+dfsg1-2.2+deb9u2_amd64.deb ...
Unpacking libxml2:amd64 (2.9.4+dfsg1-2.2+deb9u2) ...
Selecting previously unselected package libglib2.0-0:amd64.
Preparing to unpack .../03-libglib2.0-0_2.50.3-2_amd64.deb ...
Unpacking libglib2.0-0:amd64 (2.50.3-2) ...
Selecting previously unselected package libglib2.0-data.
Preparing to unpack .../04-libglib2.0-data_2.50.3-2_all.deb ...
Unpacking libglib2.0-data (2.50.3-2) ...
Selecting previously unselected package libsigsegv2:amd64.
Preparing to unpack .../05-libsigsegv2_2.10-5_amd64.deb ...
Unpacking libsigsegv2:amd64 (2.10-5) ...
Selecting previously unselected package libxenstore3.0:amd64.
Preparing to unpack
.../06-libxenstore3.0_4.8.5+shim4.10.2+xsa282-1+deb9u11_amd64.deb ...
Unpacking libxenstore3.0:amd64 (4.8.5+shim4.10.2+xsa282-1+deb9u11) ...
Selecting previously unselected package libyajl2:amd64.
Preparing to unpack .../07-libyajl2_2.1.0-2+b3_amd64.deb ...
Unpacking libyajl2:amd64 (2.1.0-2+b3) ...
Selecting previously unselected package libxen-4.8:amd64.
Preparing to unpack
.../08-libxen-4.8_4.8.5+shim4.10.2+xsa282-1+deb9u11_amd64.deb ...
Unpacking libxen-4.8:amd64 (4.8.5+shim4.10.2+xsa282-1+deb9u11) ...
Selecting previously unselected package libxen-dev:amd64.
Preparing to unpack
.../09-libxen-dev_4.8.5+shim4.10.2+xsa282-1+deb9u11_amd64.deb ...
Unpacking libxen-dev:amd64 (4.8.5+shim4.10.2+xsa282-1+deb9u11) ...
Selecting previously unselected package m4.
Preparing to unpack .../10-m4_1.4.18-1_amd64.deb ...
Unpacking m4 (1.4.18-1) ...
Selecting previously unselected package pkg-config.
Preparing to unpack .../11-pkg-config_0.29-4+b1_amd64.deb ...
Unpacking pkg-config (0.29-4+b1) ...
Selecting previously unselected package shared-mime-info.
Preparing to unpack .../12-shared-mime-info_1.8-1+deb9u1_amd64.deb ...
Unpacking shared-mime-info (1.8-1+deb9u1) ...
Selecting previously unselected package xdg-user-dirs.
Preparing to unpack .../13-xdg-user-dirs_0.15-2+b1_amd64.deb ...
Unpacking xdg-user-dirs (0.15-2+b1) ...
Selecting previously unselected package xml-core.
Preparing to unpack .../14-xml-core_0.17_all.deb ...
Unpacking xml-core (0.17) ...
Setting up libsigsegv2:amd64 (2.10-5) ...
Setting up libglib2.0-0:amd64 (2.50.3-2) ...
No schema files found: doing nothing.
Setting up libxenstore3.0:amd64 (4.8.5+shim4.10.2+xsa282-1+deb9u11) ...
Setting up m4 (1.4.18-1) ...
Setting up sgml-base (1.29) ...
Setting up libicu57:amd64 (57.1-6+deb9u2) ...
Setting up libxml2:amd64 (2.9.4+dfsg1-2.2+deb9u2) ...
Setting up pkg-config (0.29-4+b1) ...
Setting up libyajl2:amd64 (2.1.0-2+b3) ...
Setting up libglib2.0-data (2.50.3-2) ...
Processing triggers for libc-bin (2.24-11+deb9u3) ...
Setting up shared-mime-info (1.8-1+deb9u1) ...
Setting up xml-core (0.17) ...
Setting up xdg-user-dirs (0.15-2+b1) ...
Setting up libxen-4.8:amd64 (4.8.5+shim4.10.2+xsa282-1+deb9u11) ...
Setting up libxen-dev:amd64 (4.8.5+shim4.10.2+xsa282-1+deb9u11) ...
Processing triggers for sgml-base (1.29) ...
Processing triggers for libc-bin (2.24-11+deb9u3) ...
---> cfae1887fb72
Removing intermediate container 7d9bab2610ee
Step 4/10 : RUN opam pin add -yn cmdliner
'https://github.com/talex5/cmdliner.git#repro-builds'
---> Running in 8cd09c7f4089
[cmdliner.1.0.3: git]
[cmdliner.1.0.3: git]
[cmdliner.1.0.3: git]
[cmdliner.1.0.3: git]
[cmdliner.1.0.3: git]
[cmdliner.1.0.3: git]
[cmdliner.1.0.3: git]
[cmdliner.1.0.3: git]
[cmdliner.1.0.3] synchronised from
git+https://github.com/talex5/cmdliner.git#repro-builds
[WARNING] Failed checks on cmdliner package definition from source at
git+https://github.com/talex5/cmdliner.git#repro-builds:
             error 57: Synopsis and description must not be both empty
cmdliner is now pinned to
git+https://github.com/talex5/cmdliner.git#repro-builds (version 1.0.3)
---> 15a9e4da2eeb
Removing intermediate container 8cd09c7f4089
Step 5/10 : RUN opam install -y vchan mirage-xen-ocaml mirage-xen-minios
io-page mirage-xen mirage mirage-nat mirage-qubes
---> Running in f089b0d5de6d
The following actions will be performed:
- install conf-m4                 1          [required by ocamlfind]
- install seq                     base       [required by fmt, psq]
- install ocaml-src               4.07.1     [required by
mirage-xen-ocaml]
- install ocamlbuild              0.14.0     [required by bos,
astring, ppx_deriving]
- install cmdliner                1.0.3*     [required by vchan]
- install conf-perl               1          [required by minios-xen]
- install conf-pkg-config         1.1        [required by mirage-xen,
mirage-xen-ocaml]
- install dune                    1.9.0      [required by mirage-xen,
mirage-nat, io-page, etc.]
- install ocamlfind               1.8.0      [required by
mirage-xen-ocaml]
- install minios-xen              0.9        [required by
mirage-xen-minios]
- install stdlib-shims            0.1.0      [required by fmt]
- install sexplib0                v0.12.0    [required by ipaddr]
- install psq                     0.2.0      [required by lru]
- install ppx_derivers            1.2.1      [required by ppx_deriving]
- install mmap                    1.1.0      [required by lwt]
- install jbuilder                transition [required by mirage-time-lwt]
- install duration                0.1.2      [required by tcpip]
- install cstruct                 4.0.0      [required by mirage-xen,
mirage-nat, io-page, etc.]
- install bigarray-compat         1.0.0      [required by io-page]
- install ppx_tools               5.1+4.06.0 [required by vchan]
- install ocamlgraph              1.8.8      [required by functoria]
- install num                     1.1        [required by sexplib]
- install base-bytes              base       [required by astring]
- install mirage-xen-minios       0.9.3
- install macaddr                 3.1.0      [required by ethernet,
ipaddr, arp, tcpip]
- install base                    v0.12.0    [required by
configurator, ppx_sexp_conv]
- install lru                     0.3.0      [required by mirage-nat]
- install result                  1.3        [required by vchan]
- install ocaml-compiler-libs     v0.11.0    [required by ppxlib]
- install cppo                    1.6.5      [required by ppx_deriving]
- install randomconv              0.1.2      [required by tcpip]
- install mirage-random           1.2.0      [required by tcpip]
- install io-page                 2.2.0
- install mirage-xen-posix        3.3.0      [required by
mirage-xen-ocaml]
- install ipaddr                  3.1.0      [required by mirage,
mirage-nat]
- install stdio                   v0.12.0    [required by configurator]
- install parsexp                 v0.12.0    [required by sexplib]
- install topkg                   1.0.0      [required by astring, bos]
- install ocaml-migrate-parsetree 1.2.0      [required by ppx_deriving]
- install ocplib-endian           1.0        [required by mirage-profile]
- install lwt                     4.2.1      [required by mirage-xen,
mirage-nat, mirage-qubes, vchan]
- install cppo_ocamlbuild         1.6.0      [required by ppx_deriving]
- install mirage-xen-ocaml        3.3.0
- install configurator            v0.11.0    [required by tcpip]
- install sexplib                 v0.12.0    [required by vchan]
- install rresult                 0.6.0      [required by mirage-nat]
- install ptime                   0.8.5      [required by functoria]
- install fmt                     0.8.6      [required by mirage-xen]
- install astring                 0.8.3      [required by mirage]
- install ppxlib                  0.6.0      [required by ppx_sexp_conv]
- install ppx_tools_versioned     5.2.1      [required by ppx_cstruct]
- install lwt-dllist              1.0.0      [required by mirage-xen]
- install cstruct-lwt             4.0.0      [required by tcpip]
- install ppx_deriving            4.2.1      [required by mirage-nat]
- install io-page-xen             2.2.0      [required by mirage-xen]
- install mirage-flow             1.6.0      [required by mirage-flow-lwt]
- install mirage-device           1.2.0      [required by
mirage-clock, mirage-time]
- install logs                    0.6.3      [required by
mirage-qubes, mirage, mirage-nat, mirage-xen]
- install functoria-runtime       2.2.2      [required by mirage-runtime]
- install fpath                   0.7.2      [required by bos, functoria]
- install ppx_sexp_conv           v0.12.0    [required by vchan]
- install ppx_cstruct             4.0.0      [required by
mirage-qubes, vchan]
- install xen-evtchn              2.1.0      [required by
mirage-qubes, mirage-xen]
- install mirage-time             1.1.0      [required by mirage-time-lwt]
- install mirage-net              2.0.0      [required by mirage-net-lwt]
- install mirage-clock            2.0.0      [required by
mirage-clock-lwt, tcpip]
- install arp                     2.0.0      [required by mirage-nat]
- install mirage-runtime          3.5.0      [required by mirage]
- install bos                     0.2.0      [required by mirage]
- install xenstore                2.1.0      [required by mirage-xen,
vchan]
- install mirage-profile          0.8.2      [required by mirage-xen]
- install mirage-time-lwt         1.1.0      [required by mirage-nat]
- install mirage-protocols        2.0.0      [required by tcpip]
- install mirage-net-lwt          2.0.0      [required by ethernet, tcpip]
- install mirage-flow-lwt         1.6.0      [required by vchan]
- install mirage-clock-lwt        2.0.0      [required by mirage-nat]
- install functoria               2.2.3      [required by mirage]
- install xenstore_transport      1.0.0      [required by vchan]
- install xen-gnt                 4.0.0      [required by mirage-qubes]
- install shared-memory-ring      3.1.0      [required by
shared-memory-ring-lwt]
- install mirage-stack            1.4.0      [required by
mirage-stack-lwt]
- install mirage-protocols-lwt    2.0.0      [required by ethernet, tcpip]
- install mirage                  3.5.0
- install vchan                   4.0.2
- install shared-memory-ring-lwt 3.1.0      [required by mirage-xen]
- install mirage-stack-lwt        1.4.0      [required by tcpip]
- install ethernet                2.0.0      [required by mirage-nat]
- install mirage-xen              3.4.0
- install tcpip                   3.7.5      [required by mirage-nat]
- install vchan-xen               4.0.2      [required by mirage-qubes]
- install mirage-nat              1.2.0
- install mirage-qubes            0.7.0
===== 92 to install =====

<><> Processing actions
<><><><><><><><><><><><><><><><><><><><><><><><><><><><>
-> installed ocaml-src.4.07.1
-> installed conf-m4.1
-> installed conf-perl.1
-> installed conf-pkg-config.1.1
-> installed seq.base
-> installed cmdliner.1.0.3
-> installed ocamlfind.1.8.0
-> installed base-bytes.base
-> installed minios-xen.0.9
-> installed mirage-xen-minios.0.9.3
-> installed num.1.1
-> installed ocamlbuild.0.14.0
-> installed ocamlgraph.1.8.8
-> installed mirage-xen-posix.3.3.0
-> installed ppx_tools.5.1+4.06.0
-> installed dune.1.9.0
-> installed jbuilder.transition
-> installed mirage-xen-ocaml.3.3.0
-> installed bigarray-compat.1.0.0
-> installed cstruct.4.0.0
-> installed duration.0.1.2
-> installed mmap.1.1.0
-> installed ppx_derivers.1.2.1
-> installed psq.0.2.0
-> installed sexplib0.v0.12.0
-> installed stdlib-shims.0.1.0
-> installed cppo.1.6.5
-> installed ocaml-compiler-libs.v0.11.0
-> installed result.1.3
-> installed io-page.2.2.0
-> installed mirage-random.1.2.0
-> installed randomconv.0.1.2
-> installed lru.0.3.0
-> installed macaddr.3.1.0
-> installed cppo_ocamlbuild.1.6.0
-> installed io-page-xen.2.2.0
-> installed ipaddr.3.1.0
-> installed base.v0.12.0
-> installed lwt.4.2.1
-> installed ocaml-migrate-parsetree.1.2.0
-> installed topkg.1.0.0
-> installed ocplib-endian.1.0
-> installed astring.0.8.3
-> installed cstruct-lwt.4.0.0
-> installed fmt.0.8.6
-> installed lwt-dllist.1.0.0
-> installed parsexp.v0.12.0
-> installed ppx_tools_versioned.5.2.1
-> installed rresult.0.6.0
-> installed stdio.v0.12.0
-> installed ppx_deriving.4.2.1
-> installed ptime.0.8.5
-> installed fpath.0.7.2
-> installed functoria-runtime.2.2.2
-> installed logs.0.6.3
-> installed mirage-device.1.2.0
-> installed mirage-flow.1.6.0
-> installed xen-evtchn.2.1.0
-> installed sexplib.v0.12.0
-> installed configurator.v0.11.0
-> installed arp.2.0.0
-> installed bos.0.2.0
-> installed mirage-runtime.3.5.0
-> installed ppxlib.0.6.0
-> installed mirage-clock.2.0.0
-> installed mirage-net.2.0.0
-> installed mirage-time.1.1.0
-> installed ppx_cstruct.4.0.0
-> installed functoria.2.2.3
-> installed ppx_sexp_conv.v0.12.0
-> installed mirage-clock-lwt.2.0.0
-> installed mirage-flow-lwt.1.6.0
-> installed mirage-net-lwt.2.0.0
-> installed mirage-protocols.2.0.0
-> installed mirage-time-lwt.1.1.0
-> installed mirage-profile.0.8.2
-> installed xenstore.2.1.0
-> installed mirage.3.5.0
-> installed mirage-protocols-lwt.2.0.0
-> installed mirage-stack.1.4.0
-> installed shared-memory-ring.3.1.0
-> installed xen-gnt.4.0.0
-> installed xenstore_transport.1.0.0
-> installed ethernet.2.0.0
-> installed mirage-stack-lwt.1.4.0
-> installed shared-memory-ring-lwt.3.1.0
-> installed vchan.4.0.2
-> installed mirage-xen.3.4.0
-> installed tcpip.3.7.5
-> installed vchan-xen.4.0.2
-> installed mirage-nat.1.2.0
-> installed mirage-qubes.0.7.0
Done.

<><> jbuilder.transition installed successfully
<><><><><><><><><><><><><><><><>
=> Jbuilder has been renamed and the jbuilder package is now a
transition package. Use the dune package instead.
# Run eval $(opam env) to update the current shell environment
---> c0cdbd635215
Removing intermediate container f089b0d5de6d
Step 6/10 : RUN mkdir /home/opam/qubes-mirage-firewall
---> Running in d02c8827e3c2
---> 130bc82bf327
Removing intermediate container d02c8827e3c2
Step 7/10 : ADD config.ml /home/opam/qubes-mirage-firewall/config.ml
---> ec021a8c0fec
Removing intermediate container 7a741f55bc84
Step 8/10 : WORKDIR /home/opam/qubes-mirage-firewall
---> 616c12ec2658
Removing intermediate container 2a23c6a3737d
Step 9/10 : RUN opam config exec -- mirage configure -t xen && make depend
---> Running in 5ec0afabe249
opam pin add -k path --no-action --yes
mirage-unikernel-qubes_firewall-xen . && opam depext --yes --update
mirage-unikernel-qubes_firewall-xen ; opam pin remove --no-action
mirage-unikernel-qubes_firewall-xen
Package mirage-unikernel-qubes_firewall-xen does not exist, create as a
NEW package? [Y/n] y
[mirage-unikernel-qubes_firewall-xen.~dev: rsync]
[mirage-unikernel-qubes_firewall-xen.~dev] synchronised from
file:///home/opam/qubes-mirage-firewall
The following additional pinnings are required by
mirage-unikernel-qubes_firewall-xen.~dev:
- netchannel.dev at git+https://github.com/mirage/mirage-net-xen.git
Continue? [Y/n] y
[netchannel.dev: git]
[netchannel.dev: git]
[netchannel.dev: git]
[netchannel.dev: git]
[netchannel.dev: git]
[netchannel.dev: git]
[netchannel.dev: git]
[netchannel.dev] synchronised from
git+https://github.com/mirage/mirage-net-xen.git
netchannel is now pinned to
git+https://github.com/mirage/mirage-net-xen.git (version dev)
mirage-unikernel-qubes_firewall-xen is now pinned to
file:///home/opam/qubes-mirage-firewall (version ~dev)
# Detecting depexts using vars: arch=x86_64, os=linux,
os-distribution=debian, os-family=debian
m4
perl
pkg-config
# The following system packages are needed:
# All required OS packages found.
Ok, mirage-unikernel-qubes_firewall-xen is no longer pinned to
file:///home/opam/qubes-mirage-firewall (version ~dev)
opam install -y --deps-only .
The following actions will be performed:
- install mirage-console            2.4.2
- install mirage-block              1.2.0
- install mirage-kv                 2.0.0
- install mirage-channel            3.2.0
- install mirage-logs               0.3.0
- install mirage-clock-freestanding 2.0.0
- install arp-mirage                2.0.0
- install netchannel                dev*
- install mirage-fs                 2.0.0
- install mirage-console-lwt        2.4.2
- install mirage-block-lwt          1.2.0
- install mirage-kv-lwt             2.0.0
- install mirage-channel-lwt        3.2.0
- install mirage-net-xen            1.11.0
- install mirage-types              3.5.0
- install mirage-fs-lwt             2.0.0
- install mirage-types-lwt          3.5.0
===== 17 to install =====

<><> Processing actions
<><><><><><><><><><><><><><><><><><><><><><><><><><><><>
-> installed mirage-console.2.4.2
-> installed arp-mirage.2.0.0
-> installed mirage-block.1.2.0
-> installed mirage-channel.3.2.0
-> installed mirage-clock-freestanding.2.0.0
-> installed mirage-fs.2.0.0
-> installed mirage-kv.2.0.0
-> installed mirage-logs.0.3.0
[ERROR] The compilation of netchannel failed at
"/home/opam/.opam/4.07/bin/dune build -p netchannel -j 71".
-> installed mirage-console-lwt.2.4.2
-> installed mirage-block-lwt.1.2.0
-> installed mirage-channel-lwt.3.2.0
-> installed mirage-kv-lwt.2.0.0
-> installed mirage-types.3.5.0
-> installed mirage-fs-lwt.2.0.0
-> installed mirage-types-lwt.3.5.0

#=== ERROR while compiling netchannel.dev
=====================================#
# context              2.0.3 | linux/x86_64 | ocaml-base-compiler.4.07.1
| pinned(git+https://github.com/mirage/mirage-net-xen.git#5f74996a)
# path                 ~/.opam/4.07/.opam-switch/build/netchannel.dev
# command              ~/.opam/4.07/bin/dune build -p netchannel -j 71
# exit-code            1
# env-file             ~/.opam/log/netchannel-144-9dfd00.env
# output-file          ~/.opam/log/netchannel-144-9dfd00.out
### output ###
# Error: The module OS is an alias for module Os_xen, which is missing
# [...]
# (cd _build/default && /home/opam/.opam/4.07/bin/ocamlopt.opt -w -40 -g
-I lib/.netchannel.objs/byte -I lib/.netchannel.objs/native -I
/home/opam/.opam/4.07/lib/base/caml -I
/home/opam/.opam/4.07/lib/bigarray-compat -I
/home/opam/.opam/4.07/lib/bytes -I /home/opam/.opam/4.07/lib/cstruct -I
/home/opam/.opam/4.07/lib/fmt -I /home/opam/.opam/4.07/lib/io-page -I
/home/opam/.opam/4.07/lib/io-page-x[...]
# File "lib/backend.ml", line 23, characters 16-29:
# Error: The module OS is an alias for module Os_xen, which is missing
#       ocamlc lib/.netchannel.objs/byte/netchannel__Xenstore.{cmo,cmt}
(exit 2)
# (cd _build/default && /home/opam/.opam/4.07/bin/ocamlc.opt -w -40 -g
-bin-annot -I lib/.netchannel.objs/byte -I
/home/opam/.opam/4.07/lib/base/caml -I
/home/opam/.opam/4.07/lib/bigarray-compat -I
/home/opam/.opam/4.07/lib/bytes -I /home/opam/.opam/4.07/lib/cstruct -I
/home/opam/.opam/4.07/lib/fmt -I /home/opam/.opam/4.07/lib/io-page -I
/home/opam/.opam/4.07/lib/io-page-xen -I /home/opam/.opam[...]
# File "lib/xenstore.ml", line 165, characters 19-34:
# Error: The module OS is an alias for module Os_xen, which is missing
#     ocamlopt lib/.netchannel.objs/native/netchannel__Xenstore.{cmx,o}
(exit 2)
# (cd _build/default && /home/opam/.opam/4.07/bin/ocamlopt.opt -w -40 -g
-I lib/.netchannel.objs/byte -I lib/.netchannel.objs/native -I
/home/opam/.opam/4.07/lib/base/caml -I
/home/opam/.opam/4.07/lib/bigarray-compat -I
/home/opam/.opam/4.07/lib/bytes -I /home/opam/.opam/4.07/lib/cstruct -I
/home/opam/.opam/4.07/lib/fmt -I /home/opam/.opam/4.07/lib/io-page -I
/home/opam/.opam/4.07/lib/io-page-x[...]
# File "lib/xenstore.ml", line 165, characters 19-34:
# Error: The module OS is an alias for module Os_xen, which is missing

<><> Error report
<><><><><><><><><><><><><><><><><><><><><><><><><><><><><><><>
+- The following actions failed
| - build netchannel dev
+-
+- The following changes have been performed (the rest was aborted)
| - install arp-mirage                2.0.0
| - install mirage-block              1.2.0
| - install mirage-block-lwt          1.2.0
| - install mirage-channel            3.2.0
| - install mirage-channel-lwt        3.2.0
| - install mirage-clock-freestanding 2.0.0
| - install mirage-console            2.4.2
| - install mirage-console-lwt        2.4.2
| - install mirage-fs                 2.0.0
| - install mirage-fs-lwt             2.0.0
| - install mirage-kv                 2.0.0
| - install mirage-kv-lwt             2.0.0
| - install mirage-logs               0.3.0
| - install mirage-types              3.5.0
| - install mirage-types-lwt          3.5.0
+-
# Run eval $(opam env) to update the current shell environment

The former state can be restored with:
opam switch import
"/home/opam/.opam/4.07/.opam-switch/backup/state-20190619092022.export"
Makefile:14: recipe for target 'depend' failed
make: *** [depend] Error 31
The command '/bin/sh -c opam config exec -- mirage configure -t xen &&
make depend' returned a non-zero code: 2
[user@dev qubes-mirage-firewall]$

pEpkey.asc

Thomas Leonard

unread,

Jun 22, 2019, 10:41:05 AM6/22/19

to qubes-users

On Wednesday, June 19, 2019 at 10:31:41 AM UTC+1, ronpunz wrote:
> In the past I've successfully built mirage-firewall on several
> occasions. However following a recent reinstall of qubesos I've been
> unable to successfully build the firewall.
>
> In summary I've tried building using fedora-29, fedora-30 and debian-10.
> The errors associated with fedora 29 & 30 are similar and are listed below:
>
> Maybe someone can point me to a solution?

[...]
> # File "lib/xenstore.ml", line 165, characters 19-34:
> # Error: The module OS is an alias for module Os_xen, which is missing

Sorry about that - it should be fixed now (see https://github.com/mirage/qubes-mirage-firewall/pull/72).

I needed to depend on netchannel >= 1.11.0 before it had been released, so I set it to use the latest Git version instead (I should have pinned it to a fixed version instead of just using the latest). 1.11.0 was released soon afterwards, and I've now removed the pin, so it's back to using an official release.

ronpunz

unread,

Jun 22, 2019, 12:26:30 PM6/22/19

to Thomas Leonard, qubes-users

Thanks Thomas - It now works well

pEpkey.asc

Reply all

Reply to author

Forward