23.40.4: wants to fetch stuff (libgpg-error) during build

[tgurr]

Expected behavior

Do not try to fecht stuff during compile phase.

Actual behavior

error: failed to run custom build command for libgcrypt-sys v0.1.0 (/var/tmp/paludis/build/net-analyzer-openvas-scanner-23.40.4/work/openvas-scanner-23.40.4/rust/crates/nasl-c-lib/libgcrypt-sys)

Our build sandbox prevents fetching stuff during the build process. This is something distributions generally do not allow.

[...]
   Compiling tower-layer v0.3.3
   Compiling libgcrypt-sys v0.1.0 (/var/tmp/paludis/build/net-analyzer-openvas-scanner-23.40.4/work/openvas-scanner-23.40.4/rust/crates/nasl-c-lib/libgcrypt-sys)
   Compiling netsnmp-sys-nocrypto v0.1.3
   Compiling simd-adler32 v0.3.8
   Compiling sha1collisiondetection v0.3.4
   Compiling adler2 v2.0.1
   Compiling rustc-hash v1.1.0
   Compiling capnp v0.25.1
   Compiling miniz_oxide v0.8.9
sydbox: 8< -- Access Violation! --     ] 459/716: libsqlite3-sys(build), libsqlite3-sys(build), aws-lc-sys(build), zstd-sys(build), capnp, bindgen, openssl-sys(build), libgcrypt-sys(build)                                              
sydbox: connect(-1, inet:192.168.0.50@53)
sydbox: proc: curl[236674] (parent:236669)
sydbox: cwd: `/var/tmp/paludis/build/net-analyzer-openvas-scanner-23.40.4/work/openvas-scanner-23.40.4/rust/crates/nasl-c-lib/tmp'
sydbox: cmdline: `curl --fail -O https://gnupg.org/ftp/gcrypt/libgpg-error/libgpg-error-1.54.tar.'
sydbox: >8 --
sydbox: 8< -- Access Violation! --
sydbox: connect(-1, inet:10.132.159.40@53)
sydbox: proc: curl[236674] (parent:236669)
sydbox: cwd: `/var/tmp/paludis/build/net-analyzer-openvas-scanner-23.40.4/work/openvas-scanner-23.40.4/rust/crates/nasl-c-lib/tmp'
sydbox: cmdline: `curl --fail -O https://gnupg.org/ftp/gcrypt/libgpg-error/libgpg-error-1.54.tar.'
sydbox: >8 --
sydbox: 8< -- Access Violation! --
sydbox: connect(-1, inet:192.168.0.50@53)
sydbox: proc: curl[236674] (parent:236669)
sydbox: cwd: `/var/tmp/paludis/build/net-analyzer-openvas-scanner-23.40.4/work/openvas-scanner-23.40.4/rust/crates/nasl-c-lib/tmp'
sydbox: cmdline: `curl --fail -O https://gnupg.org/ftp/gcrypt/libgpg-error/libgpg-error-1.54.tar.'
sydbox: >8 --
sydbox: 8< -- Access Violation! --
sydbox: connect(-1, inet:10.132.159.40@53)
sydbox: proc: curl[236674] (parent:236669)
sydbox: cwd: `/var/tmp/paludis/build/net-analyzer-openvas-scanner-23.40.4/work/openvas-scanner-23.40.4/rust/crates/nasl-c-lib/tmp'
sydbox: cmdline: `curl --fail -O https://gnupg.org/ftp/gcrypt/libgpg-error/libgpg-error-1.54.tar.'
sydbox: >8 --
sydbox: 8< -- Access Violation! --
sydbox: connect(-1, inet:192.168.0.50@53)
sydbox: proc: curl[236674] (parent:236669)
sydbox: cwd: `/var/tmp/paludis/build/net-analyzer-openvas-scanner-23.40.4/work/openvas-scanner-23.40.4/rust/crates/nasl-c-lib/tmp'
sydbox: cmdline: `curl --fail -O https://gnupg.org/ftp/gcrypt/libgpg-error/libgpg-error-1.54.tar.'
sydbox: >8 --
sydbox: 8< -- Access Violation! --
sydbox: connect(-1, inet:10.132.159.40@53)
sydbox: proc: curl[236674] (parent:236669)
sydbox: cwd: `/var/tmp/paludis/build/net-analyzer-openvas-scanner-23.40.4/work/openvas-scanner-23.40.4/rust/crates/nasl-c-lib/tmp'
sydbox: cmdline: `curl --fail -O https://gnupg.org/ftp/gcrypt/libgpg-error/libgpg-error-1.54.tar.'
sydbox: >8 --
sydbox: 8< -- Access Violation! --
sydbox: connect(-1, inet:192.168.0.50@53)
sydbox: proc: curl[236674] (parent:236669)
sydbox: cwd: `/var/tmp/paludis/build/net-analyzer-openvas-scanner-23.40.4/work/openvas-scanner-23.40.4/rust/crates/nasl-c-lib/tmp'
sydbox: cmdline: `curl --fail -O https://gnupg.org/ftp/gcrypt/libgpg-error/libgpg-error-1.54.tar.'
sydbox: >8 --
sydbox: 8< -- Access Violation! --
sydbox: connect(-1, inet:10.132.159.40@53)
sydbox: proc: curl[236674] (parent:236669)
sydbox: cwd: `/var/tmp/paludis/build/net-analyzer-openvas-scanner-23.40.4/work/openvas-scanner-23.40.4/rust/crates/nasl-c-lib/tmp'
sydbox: cmdline: `curl --fail -O https://gnupg.org/ftp/gcrypt/libgpg-error/libgpg-error-1.54.tar.'
sydbox: >8 --
error: failed to run custom build command for `libgcrypt-sys v0.1.0 (/var/tmp/paludis/build/net-analyzer-openvas-scanner-23.40.4/work/openvas-scanner-23.40.4/rust/crates/nasl-c-lib/libgcrypt-sys)`

Caused by:
  process didn't exit successfully: `/var/tmp/paludis/build/net-analyzer-openvas-scanner-23.40.4/work/openvas-scanner-23.40.4/rust/target/release/build/libgcrypt-sys-d98553ca9c19b88f/build-script-build` (exit status: 101)
  --- stdout
  cargo:rerun-if-changed=install-gcrypt.sh

  --- stderr

  thread 'main' (236668) panicked at crates/nasl-c-lib/libgcrypt-sys/build.rs:25:21:
  Script exited with 5:
  stdout:

  stderr:
  + '[' x86_64-unknown-linux-gnu = aarch64-unknown-linux-gnu ']'
  + '[' 0 -ne 0 ']'
  + '[' '!' -d '' ']'
  + mkdir -p /var/tmp/paludis/build/net-analyzer-openvas-scanner-23.40.4/work/openvas-scanner-23.40.4/rust/crates/nasl-c-lib/libgcrypt-sys/../tmp
  + install_gnu libgpg-error 1.54
  + VERSION=1.54
  + NAME=libgpg-error
  + cd /var/tmp/paludis/build/net-analyzer-openvas-scanner-23.40.4/work/openvas-scanner-23.40.4/rust/crates/nasl-c-lib/libgcrypt-sys/../tmp
  + '[' '!' -f libgpg-error-1.54.tar.bz2 ']'
  + curl --fail -O https://gnupg.org/ftp/gcrypt/libgpg-error/libgpg-error-1.54.tar.bz2
    % Total    % Received % Xferd  Average Speed  Time    Time    Time   Current
                                   Dload  Upload  Total   Spent   Left   Speed
  0      0   0      0   0      0      0      0                              0curl: (5) Could not resolve proxy: proxy.corporate.local

  note: run with `RUST_BACKTRACE=1` environment variable to display a backtrace
warning: build failed, waiting for other jobs to finish...
    Building [===============>         ] 466/716: openssl-sys(build)                                                                                                                                                                      
Error:
  * In program cave perform install --hooks --managed-output --output-exclusivity with-others =net-analyzer/openvas-scanner-23.40.4:0::net --destination installed --replacing =net-analyzer/openvas-scanner-23.40.3:0::installed --x-of-y 1 of 1:
  * When installing 'net-analyzer/openvas-scanner-23.40.4:0::net' replacing { 'net-analyzer/openvas-scanner-23.40.3:0::installed' }:
  * When running an ebuild command on 'net-analyzer/openvas-scanner-23.40.4:0::net':
  * Install failed for 'net-analyzer/openvas-scanner-23.40.4:0::net' (paludis::ActionFailedError)


!!! ERROR in net-analyzer/openvas-scanner-23.40.4::net:
!!! In edo at line 1750
!!! cargo build --frozen --release failed

It should use the system installed libgpg-error & libgcrypt instead of trying to download its own versions. Interestingly this issue appears to be arch specific as our aarch64 CI runner build succeeded without hitting that issue:
https://gitlab.exherbo.org/tgurr/net/-/jobs/198865 probably related to the [' x86_64-unknown-linux-gnu = aarch64-unknown-linux-gnu ']' seen in the error message above?. Edit: Reason is that our sandbox doesn't currently run on aarch64.

Steps to reproduce

1. run cargo vendor
2. go offline
3. try to build openvas-scanner 23.40.4 rust part (cargo build --frozen --release)

Environment

GCC: 14.3.0
Operating system: Exherbo Linux
Installation method / source: source-based packages

Logfiles

Complete build log: openvas-scanner-23.40.4_build.log

[tgurr]

A workaround is to download the versions of libgpg-error & libgcrypt specified in rust/crates/nasl-c-lib/libgcrypt-sys/install-gcrypt.sh and put them under rust/crates/nasl-c-lib/tmp.