libpci and libEGL missing - is it because I need to install Firefox on CI server first?

[Marvie Rosal]

I'm running against our Buildkite CI and I get the following error:

1664258957865    mozrunner::runner    INFO    Running command: "/usr/lib/firefox/firefox" "--marionette" "-headless" "-no-remote" "-profile" "/tmp/rust_mozprofilepPJma8"

*** You are running in headless mode.
[GFX1-]: glxtest: libpci missing
[GFX1-]: glxtest: Unable to open a connection to the X server
[GFX1-]: glxtest: libEGL missing
[GFX1-]: No GPUs detected via PCI
1664258958883    Marionette    INFO    Marionette enabled
1664258958888    Marionette    INFO    Listening on port 45585
Read port: 45585

1664258959025    RemoteAgent    WARN    TLS certificate errors will be ignored for this session
[GFX1-]: RenderCompositorSWGL failed mapping default framebuffer, no dt
console.warn: SearchSettings: "get: No settings file exists, new profile?" (new NotFoundError("Could not open the file at /tmp/rust_mozprofilepPJma8/search.json.mozlz4", (void 0)))
console.error: Region.jsm: "Error fetching region" (new SyntaxError("JSON.parse: unexpected character at line 1 column 1 of the JSON data", ""))
console.error: Region.jsm: "Failed to fetch region" (new Error("NO_RESULT", "resource://gre/modules/Region.jsm", 420))

Missing chrome or resource URL: resource://gre/modules/UpdateListener.sys.mjs
1664258964471    Marionette    INFO    Stopped listening on port 45585

Missing chrome or resource URL: resource://gre/modules/UpdateListener.sys.mjs
console.error: "Error during quit-application-granted: [Exception... \"File error: Not found\" nsresult: \"0x80520012 (NS_ERROR_FILE_NOT_FOUND)\" location: \"JS frame :: resource:///modules/BrowserGlue.jsm :: _onQuitApplicationGranted/tasks< :: line 2013\" data: no]"

[Simon Bennetts]

The Ajax Spider and DOM XSS scan rule use browsers, by default Firefox, so yes you will need to have Firefox installed.

You can change ZAP to use Chromf if you like (which must also be installed) or not use the features which require a browser.

Cheers,

Simon

[thc...@gmail.com]

If you are seeing that error it means Firefox is installed.

Those messages can be ignored though, there's a Firefox issue:
https://bugzilla.mozilla.org/show_bug.cgi?id=1716303

Best regards.

>> *Missing chrome or resource URL:
>> resource://gre/modules/UpdateListener.sys.mjs*

[Marvie Rosal]

You can change ZAP to use Chromf if you like (which must also be installed) or not use the features which require a browser.

>>>

Most CI servers have Chrome installed by default. In that case, how can I configure that on the yaml?

[Simon Bennetts]

Do you have any references to that?

I'm not disputing it, but it would be good to know for sure.

For the Ajax spider see https://www.zaproxy.org/docs/desktop/addons/ajax-spider/automation/

You just need to change the browserId to chrome-headless

For the DOM XSS scan rule you will need to set that via a "config" command line option.

I think that will be: "-config rules.domxss.browserid=chrome-headless"

but check that does really have the desired effect.

Cheers,

Simon