Skip to content

Instantly share code, notes, and snippets.

@fepitre

fepitre/gist:02950fac4e90fa4e74730b850eb82475 Secret

Created January 27, 2021 16:08
Show Gist options
  • Save fepitre/02950fac4e90fa4e74730b850eb82475 to your computer and use it in GitHub Desktop.
Save fepitre/02950fac4e90fa4e74730b850eb82475 to your computer and use it in GitHub Desktop.
Download ZIP
Raw
gistfile1.txt
dpkg-buildpackage -us -uc
dpkg-buildpackage: info: source package apt-transport-in-toto
dpkg-buildpackage: info: source version 0.1.1-1
dpkg-buildpackage: info: source distribution unstable
dpkg-buildpackage: info: source changed by Frédéric Pierret <frederic.pierret@qubes-os.org>
dpkg-buildpackage: info: host architecture amd64
dpkg-source --before-build .
debian/rules clean
dh clean
dh_clean
dpkg-source -b .
dpkg-source: info: using source format '3.0 (quilt)'
dpkg-source: info: building apt-transport-in-toto using existing ./apt-transport-in-toto_0.1.1.orig.tar.gz
dpkg-source: info: building apt-transport-in-toto using existing ./apt-transport-in-toto_0.1.1.orig.tar.gz.asc
dpkg-source: info: building apt-transport-in-toto in apt-transport-in-toto_0.1.1-1.debian.tar.xz
dpkg-source: info: building apt-transport-in-toto in apt-transport-in-toto_0.1.1-1.dsc
debian/rules binary
dh binary
dh_update_autotools_config
dh_autoreconf
debian/rules override_dh_auto_test
make[1]: Entering directory '/home/user/debian/apt-transport-in-toto'
python3-coverage run -m unittest discover
Skipping unknown config item 'APT::Intoto::NoFail::=false'
Prepare in-toto verification for '/home/user/debian/apt-transport-in-toto/tests/data/bad/final-product_0.0.0.0-0_all.deb'
Create verification directory '/tmp/tmp_as27d1c'
Request in-toto metadata from 2 rebuilder(s) (apt config)
Request in-toto metadata from http://127.0.0.1:8081/sources/final-product/0.0.0.0-0/metadata
Successfully downloaded in-toto metadata 'rebuild.5863835e.link' from rebuilder 'http://127.0.0.1:8081'
Request in-toto metadata from http://127.0.0.1:8082/sources/final-product/0.0.0.0-0/metadata
Successfully downloaded in-toto metadata 'rebuild.e946fc60.link' from rebuilder 'http://127.0.0.1:8082'
Copy final product to verification directory
Load in-toto layout '/home/user/debian/apt-transport-in-toto/tests/data/test.layout' (apt config)
Load in-toto layout key(s) '['88876A89E3D4698F83D3DB0E72E33CA3E0E04E46']' (apt config)
Use gpg keyring '/home/user/debian/apt-transport-in-toto/tests/data/gpg_keyring' (apt config)
Run in-toto verification
In-toto verification for '/home/user/debian/apt-transport-in-toto/tests/data/bad/final-product_0.0.0.0-0_all.deb' failed, reason was: 'DISALLOW *.deb' matched the following artifacts: ['final-product_0.0.0.0-0_all.deb']
Full trace for 'expected_materials' of item 'verify-reprobuilds':
Available materials (used for queue):
['final-product_0.0.0.0-0_all.deb']
Available products:
['final-product_0.0.0.0-0_all.deb']
Queue after 'MATCH *.deb WITH PRODUCTS FROM rebuild':
['final-product_0.0.0.0-0_all.deb']
.Prepare in-toto verification for '/home/user/debian/apt-transport-in-toto/tests/data/bad/final-product_0.0.0.0-0_all.deb'
Create verification directory '/tmp/tmpsl4v4o9p'
Request in-toto metadata from 2 rebuilder(s) (apt config)
Request in-toto metadata from http://127.0.0.1:8081/sources/final-product/0.0.0.0-0/metadata
Successfully downloaded in-toto metadata 'rebuild.5863835e.link' from rebuilder 'http://127.0.0.1:8081'
Request in-toto metadata from http://127.0.0.1:8082/sources/final-product/0.0.0.0-0/metadata
Successfully downloaded in-toto metadata 'rebuild.e946fc60.link' from rebuilder 'http://127.0.0.1:8082'
Copy final product to verification directory
Load in-toto layout '/home/user/debian/apt-transport-in-toto/tests/data/test.layout' (apt config)
Load in-toto layout key(s) '['88876A89E3D4698F83D3DB0E72E33CA3E0E04E46']' (apt config)
Use gpg keyring '/home/user/debian/apt-transport-in-toto/tests/data/gpg_keyring' (apt config)
Run in-toto verification
In-toto verification for '/home/user/debian/apt-transport-in-toto/tests/data/bad/final-product_0.0.0.0-0_all.deb' failed, reason was: 'DISALLOW *.deb' matched the following artifacts: ['final-product_0.0.0.0-0_all.deb']
Full trace for 'expected_materials' of item 'verify-reprobuilds':
Available materials (used for queue):
['final-product_0.0.0.0-0_all.deb']
Available products:
['final-product_0.0.0.0-0_all.deb']
Queue after 'MATCH *.deb WITH PRODUCTS FROM rebuild':
['final-product_0.0.0.0-0_all.deb']
.Skipping unknown config item 'APT::Intoto::NoFail::=false'
Prepare in-toto verification for '/home/user/debian/apt-transport-in-toto/tests/data/good/final-product_0.0.0.0-0_all.deb'
Create verification directory '/tmp/tmpgp9r3z9c'
Request in-toto metadata from 2 rebuilder(s) (apt config)
Request in-toto metadata from http://127.0.0.1:8083/sources/final-product/0.0.0.0-0/metadata
Could not retrieve in-toto metadata from rebuilder 'http://127.0.0.1:8083', reason was: HTTPConnectionPool(host='127.0.0.1', port=8083): Max retries exceeded with url: /sources/final-product/0.0.0.0-0/metadata (Caused by NewConnectionError('<urllib3.connection.HTTPConnection object at 0x772af2d4ccd0>: Failed to establish a new connection: [Errno 111] Connection refused'))
Request in-toto metadata from http://127.0.0.1:8082/sources/final-product/0.0.0.0-0/metadata
Successfully downloaded in-toto metadata 'rebuild.e946fc60.link' from rebuilder 'http://127.0.0.1:8082'
Copy final product to verification directory
Load in-toto layout '/home/user/debian/apt-transport-in-toto/tests/data/test.layout' (apt config)
Load in-toto layout key(s) '['88876A89E3D4698F83D3DB0E72E33CA3E0E04E46']' (apt config)
Use gpg keyring '/home/user/debian/apt-transport-in-toto/tests/data/gpg_keyring' (apt config)
Run in-toto verification
In-toto verification for '/home/user/debian/apt-transport-in-toto/tests/data/good/final-product_0.0.0.0-0_all.deb' failed, reason was: Step 'rebuild' requires '2' link metadata file(s), found '1'.
.Skipping unknown config item 'APT::Intoto::NoFail::=false'
Prepare in-toto verification for '/home/user/debian/apt-transport-in-toto/tests/data/good/final-product_0.0.0.0-0_all.deb'
Create verification directory '/tmp/tmph1e0005d'
Request in-toto metadata from 2 rebuilder(s) (apt config)
Request in-toto metadata from http://127.0.0.1:8083/sources/final-product/0.0.0.0-0/metadata
Could not retrieve in-toto metadata from rebuilder 'http://127.0.0.1:8083', reason was: server response: 404
Request in-toto metadata from http://127.0.0.1:8082/sources/final-product/0.0.0.0-0/metadata
Successfully downloaded in-toto metadata 'rebuild.e946fc60.link' from rebuilder 'http://127.0.0.1:8082'
Copy final product to verification directory
Load in-toto layout '/home/user/debian/apt-transport-in-toto/tests/data/test.layout' (apt config)
Load in-toto layout key(s) '['88876A89E3D4698F83D3DB0E72E33CA3E0E04E46']' (apt config)
Use gpg keyring '/home/user/debian/apt-transport-in-toto/tests/data/gpg_keyring' (apt config)
Run in-toto verification
In-toto verification for '/home/user/debian/apt-transport-in-toto/tests/data/good/final-product_0.0.0.0-0_all.deb' failed, reason was: Step 'rebuild' requires '2' link metadata file(s), found '1'.
.Prepare in-toto verification for '/home/user/debian/apt-transport-in-toto/tests/data/good/final-product_0.0.0.0-0_all.deb'
Create verification directory '/tmp/tmpt1p7j1zj'
Request in-toto metadata from 2 rebuilder(s) (apt config)
Request in-toto metadata from http://127.0.0.1:8083/sources/final-product/0.0.0.0-0/metadata
Could not retrieve in-toto metadata from rebuilder 'http://127.0.0.1:8083', reason was: HTTPConnectionPool(host='127.0.0.1', port=8083): Max retries exceeded with url: /sources/final-product/0.0.0.0-0/metadata (Caused by NewConnectionError('<urllib3.connection.HTTPConnection object at 0x70b5cacf5cd0>: Failed to establish a new connection: [Errno 111] Connection refused'))
Request in-toto metadata from http://127.0.0.1:8082/sources/final-product/0.0.0.0-0/metadata
Successfully downloaded in-toto metadata 'rebuild.e946fc60.link' from rebuilder 'http://127.0.0.1:8082'
Copy final product to verification directory
Load in-toto layout '/home/user/debian/apt-transport-in-toto/tests/data/test.layout' (apt config)
Load in-toto layout key(s) '['88876A89E3D4698F83D3DB0E72E33CA3E0E04E46']' (apt config)
Use gpg keyring '/home/user/debian/apt-transport-in-toto/tests/data/gpg_keyring' (apt config)
Run in-toto verification
In-toto verification for '/home/user/debian/apt-transport-in-toto/tests/data/good/final-product_0.0.0.0-0_all.deb' failed, reason was: Step 'rebuild' requires '2' link metadata file(s), found '1'.
The 'NoFail' setting was configured, installation continues.
.Skipping unknown config item 'APT::Intoto::NoFail::=false'
Prepare in-toto verification for '/home/user/debian/apt-transport-in-toto/tests/data/good/final-product_0.0.0.0-0_all.deb'
Create verification directory '/tmp/tmpdaszwif3'
Request in-toto metadata from 2 rebuilder(s) (apt config)
Request in-toto metadata from http://127.0.0.1:8081/sources/final-product/0.0.0.0-0/metadata
Successfully downloaded in-toto metadata 'rebuild.5863835e.link' from rebuilder 'http://127.0.0.1:8081'
Request in-toto metadata from http://127.0.0.1:8082/sources/final-product/0.0.0.0-0/metadata
Successfully downloaded in-toto metadata 'rebuild.e946fc60.link' from rebuilder 'http://127.0.0.1:8082'
Copy final product to verification directory
Load in-toto layout '/home/user/debian/apt-transport-in-toto/tests/data/test.layout' (apt config)
Load in-toto layout key(s) '['88876A89E3D4698F83D3DB0E72E33CA3E0E04E46']' (apt config)
Use gpg keyring '/home/user/debian/apt-transport-in-toto/tests/data/gpg_keyring' (apt config)
Run in-toto verification
In-toto verification for '/home/user/debian/apt-transport-in-toto/tests/data/good/final-product_0.0.0.0-0_all.deb' passed! :)
..Ignoring unknown LogLevel '1.0'
Ignoring unknown LogLevel 'abc'
....
----------------------------------------------------------------------
Ran 11 tests in 9.775s
OK
python3-coverage combine
python3-coverage report -m
Name Stmts Miss Branch BrPart Cover Missing
-------------------------------------------------------
intoto.py 236 7 74 1 97% 430-440, 770->774, 774-775
make[1]: Leaving directory '/home/user/debian/apt-transport-in-toto'
create-stamp debian/debhelper-build-stamp
dh_prep
dh_install
dh_installdocs
dh_installchangelogs
dh_perl
dh_link
dh_strip_nondeterminism
dh_compress
dh_fixperms
dh_missing
dh_installdeb
dh_gencontrol
dh_md5sums
dh_builddeb
dpkg-deb: building package 'apt-transport-in-toto' in '../apt-transport-in-toto_0.1.1-1_all.deb'.
dpkg-genbuildinfo
dpkg-genchanges >../apt-transport-in-toto_0.1.1-1_amd64.changes
dpkg-genchanges: info: including full source code in upload
dpkg-source --after-build .
dpkg-buildpackage: info: full upload (original source is included)
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment