ling apk-tools (2.14.10-r9)
installing libxcrypt (4.5.2-r0)
installing libcrypt1 (2.42-r4)
installing busybox (1.37.0-r50)
installing wolfi-base (1-r7)
populating workspace /tmp/melange-workspace-3891493427 from sonarqube
qemu: generating ssh key pairs for ephemeral VM
qemu: generating SSH host key for VM
qemu: generating base initramfs
image configuration:
  contents:
    build repositories: [https://apk.cgr.dev/chainguard]
    runtime repositories: []
    repositories: []
    keyring:      []
    packages:     [microvm-init]
installing wolfi-baselayout (20230201-r25)
installing ca-certificates-bundle (20251003-r0)
installing libgcc (15.2.0-r6)
installing glibc-locale-posix (2.42-r4)
installing glibc (2.42-r4)
installing ld-linux (2.42-r4)
installing gnutar-rmt (1.35-r7)
installing gnutar (1.35-r7)
installing libattr1 (2.5.2-r54)
installing attr (2.5.2-r54)
installing zlib (1.3.1.2-r0)
installing libzstd1 (1.5.7-r5)
installing xz (5.8.2-r0)
installing libcrypto3 (3.6.0-r6)
installing kmod (34.2-r42)
installing libmnl (1.0.5-r6)
installing libbz2-1 (1.0.8-r21)
installing libelf (0.194-r0)
installing libbpf (1.6.2-r0)
installing libverto (0.3.2-r6)
installing krb5-conf (1.0-r7)
installing libcom_err (1.47.3-r1)
installing keyutils-libs (1.6.3-r37)
installing libssl3 (3.6.0-r6)
installing krb5-libs (1.22.1-r1)
installing libtirpc (1.3.7-r1)
installing libpcre2-8-0 (10.47-r0)
installing libsepol (3.9-r1)
installing libselinux (3.9-r1)
installing libnftnl (1.3.1-r0)
installing xtables (1.8.11-r31)
installing libcap (2.77-r0)
installing iproute2 (6.17.0-r2)
installing libstdc++ (15.2.0-r6)
installing inih (62-r1)
installing liburcu (0.15.5-r0)
installing libblkid (2.41.3-r0)
installing libuuid (2.41.3-r0)
installing xfsprogs-core (6.18.0-r0)
installing xfsprogs (6.18.0-r0)
installing libmount (2.41.3-r0)
installing mount (2.41.3-r0)
installing ncurses-terminfo-base (6.6_p20251230-r0)
installing ncurses (6.6_p20251230-r0)
installing setarch (2.41.3-r0)
installing libfdisk (2.41.3-r0)
installing sqlite-libs (3.51.1-r0)
installing util-linux (2.41.3-r0)
installing libsmartcols (2.41.3-r0)
installing util-linux-misc (2.41.3-r0)
installing libxcrypt (4.5.2-r0)
installing libcrypt1 (2.42-r4)
installing linux-pam (1.7.1-r4)
installing openssh-keygen (10.2_p1-r3)
installing openssh-server-config (10.2_p1-r3)
installing openssh-server (10.2_p1-r3)
installing busybox (1.37.0-r50)
installing microvm-init (0.0.1-r15)
qemu: starting VM
qemu: waiting for SSH
conn read: read tcp 127.0.0.1:45980->127.0.0.1:45497: i/o timeout
qemu: meta-data=/dev/vda               isize=512    agcount=8, agsize=1638400 blks
qemu:          =                       sectsz=4096  attr=2, projid32bit=1
qemu:          =                       crc=1        finobt=1, sparse=1, rmapbt=1
qemu:          =                       reflink=1    bigtime=1 inobtcount=1 nrext64=1
qemu:          =                       exchange=1   metadir=0
qemu: data     =                       bsize=4096   blocks=13107200, imaxpct=25
qemu:          =                       sunit=0      swidth=0 blks
qemu: naming   =version 2              bsize=4096   ascii-ci=0, ftype=1, parent=1
qemu: log      =internal log           bsize=4096   blocks=16384, version=2
qemu:          =                       sectsz=4096  sunit=1 blks, lazy-count=1
qemu: realtime =none                   extsz=4096   blocks=0, rtextents=0
qemu:          =                       rgcount=0    rgsize=0 extents
qemu:          =                       zoned=0      start=0 reserved=0
qemu: Discarding blocks...Done.
conn read: read tcp 127.0.0.1:45984->127.0.0.1:45497: i/o timeout
conn read: read tcp 127.0.0.1:45986->127.0.0.1:45497: i/o timeout
conn read: read tcp 127.0.0.1:45992->127.0.0.1:45497: i/o timeout
qemu: [INIT] Checking for init.d scripts...
qemu: [INIT] No /opt/melange/init.d directory (optional, skipping)
qemu: ssh-keygen: generating new host keys: RSA ECDSA 
qemu: Server listening on 0.0.0.0 port 2223.
qemu: Server listening on 0.0.0.0 port 22.
qemu: VM started successfully, SSH server is up
qemu: Connection closed by 10.0.2.2 port 41474
qemu: verifying VM host key against pre-provisioned key
qemu: Accepted publickey for nonroot from 10.0.2.2 port 41486 ssh2: ECDSA SHA256:wqjPOwzwH4jbyH73lKVq0KyuYuTVkSys/lsmfvu+8DE
qemu: VM host key successfully verified against pre-provisioned key
qemu: Connection closed by 10.0.2.2 port 41486
qemu: Accepted publickey for nonroot from 10.0.2.2 port 41494 ssh2: ECDSA SHA256:wqjPOwzwH4jbyH73lKVq0KyuYuTVkSys/lsmfvu+8DE
qemu: Accepted publickey for root from 10.0.2.2 port 52808 ssh2: ECDSA SHA256:wqjPOwzwH4jbyH73lKVq0KyuYuTVkSys/lsmfvu+8DE
qemu: Accepted publickey for root from 10.0.2.2 port 41504 ssh2: ECDSA SHA256:wqjPOwzwH4jbyH73lKVq0KyuYuTVkSys/lsmfvu+8DE
qemu: running kernel version: 6.16.10-r2-qemu-generic #Chainguard SMP PREEMPT_DYNAMIC Fri Oct  3 22:31:32 UTC 2025
qemu: setting up local workspace
qemu: unmounting host workspace from guest
running the main test pipeline
SonarQube is running (926).
qemu: sending shutdown signal
running test pipeline for subpackage sonarqube-scripts
melange devel with runner qemu is testing:
image configuration:
  contents:
    build repositories: []
    runtime repositories: []
    repositories: []
    keyring:      []
    packages:     [sonarqube-scripts]
  accounts:
    runas:  
    users:
      - uid=1000(build) gid=1000
    groups:
      - gid=1000(build) members=[build]
installing wolfi-baselayout (20230201-r25)
installing ca-certificates-bundle (20251003-r0)
installing libgcc (15.2.0-r6)
installing glibc-locale-posix (2.42-r4)
installing glibc (2.42-r4)
installing ld-linux (2.42-r4)
installing libproc-2-0 (4.0.5-r42)
installing ncurses-terminfo-base (6.6_p20251230-r0)
installing ncurses (6.6_p20251230-r0)
installing procps (4.0.5-r42)
installing sonarqube-scripts (26.1.0.118079-r0)
installing wolfi-keys (1-r12)
installing zlib (1.3.1.2-r0)
installing libcrypto3 (3.6.0-r6)
installing libssl3 (3.6.0-r6)
installing apk-tools (2.14.10-r9)
installing libxcrypt (4.5.2-r0)
installing libcrypt1 (2.42-r4)
installing busybox (1.37.0-r50)
installing wolfi-base (1-r7)
qemu: generating ssh key pairs for ephemeral VM
qemu: generating SSH host key for VM
qemu: starting VM
qemu: waiting for SSH
conn read: read tcp 127.0.0.1:45254->127.0.0.1:46703: i/o timeout
qemu: meta-data=/dev/vda               isize=512    agcount=8, agsize=1638400 blks
qemu:          =                       sectsz=4096  attr=2, projid32bit=1
qemu:          =                       crc=1        finobt=1, sparse=1, rmapbt=1
qemu:          =                       reflink=1    bigtime=1 inobtcount=1 nrext64=1
qemu:          =                       exchange=1   metadir=0
qemu: data     =                       bsize=4096   blocks=13107200, imaxpct=25
qemu:          =                       sunit=0      swidth=0 blks
qemu: naming   =version 2              bsize=4096   ascii-ci=0, ftype=1, parent=1
qemu: log      =internal log           bsize=4096   blocks=16384, version=2
qemu:          =                       sectsz=4096  sunit=1 blks, lazy-count=1
qemu: realtime =none                   extsz=4096   blocks=0, rtextents=0
qemu:          =                       rgcount=0    rgsize=0 extents
qemu:          =                       zoned=0      start=0 reserved=0
qemu: Discarding blocks...Done.
qemu: [INIT] Checking for init.d scripts...
qemu: [INIT] No /opt/melange/init.d directory (optional, skipping)
qemu: ssh-keygen: generating new host keys: RSA ECDSA 
qemu: Server listening on 0.0.0.0 port 2223.
qemu: Server listening on 0.0.0.0 port 22.
conn read: read tcp 127.0.0.1:45270->127.0.0.1:46703: i/o timeout
qemu: VM started successfully, SSH server is up
qemu: Connection closed by 10.0.2.2 port 45274
qemu: verifying VM host key against pre-provisioned key
qemu: Accepted publickey for root from 10.0.2.2 port 45278 ssh2: ECDSA SHA256:zJhwG55CDL1BCQzgWeqFkG6yAlGumjNQz32kN4OhOyw
qemu: VM host key successfully verified against pre-provisioned key
qemu: Connection closed by 10.0.2.2 port 45278
qemu: Accepted publickey for root from 10.0.2.2 port 45286 ssh2: ECDSA SHA256:zJhwG55CDL1BCQzgWeqFkG6yAlGumjNQz32kN4OhOyw
qemu: Accepted publickey for root from 10.0.2.2 port 59644 ssh2: ECDSA SHA256:zJhwG55CDL1BCQzgWeqFkG6yAlGumjNQz32kN4OhOyw
qemu: Accepted publickey for root from 10.0.2.2 port 45298 ssh2: ECDSA SHA256:zJhwG55CDL1BCQzgWeqFkG6yAlGumjNQz32kN4OhOyw
qemu: running kernel version: 6.16.10-r2-qemu-generic #Chainguard SMP PREEMPT_DYNAMIC Fri Oct  3 22:31:32 UTC 2025
qemu: setting up local workspace
qemu: unmounting host workspace from guest
running step "test/virtualpackage"
running step "virtual package installation checks"
PASS: sonarqube-startup-26.1.0.118079-r0 is not installed.
PASS: sonarqube-scripts-26.1.0.118079-r0 is installed.
running step "virtual package configuration checks"
PASS: real package [sonarqube-scripts] correctly declares virtual package [sonarqube-startup].
qemu: sending shutdown signal
running test pipeline for subpackage sonarqube-docker-compat
melange devel with runner qemu is testing:
image configuration:
  contents:
    build repositories: []
    runtime repositories: []
    repositories: []
    keyring:      []
    packages:     [sonarqube-docker-compat]
  accounts:
    runas:  
    users:
      - uid=1000(build) gid=1000
    groups:
      - gid=1000(build) members=[build]
installing wolfi-baselayout (20230201-r25)
installing ca-certificates-bundle (20251003-r0)
installing libgcc (15.2.0-r6)
installing glibc-locale-posix (2.42-r4)
installing glibc (2.42-r4)
installing libpcre2-8-0 (10.47-r0)
installing grep (3.12-r4)
installing libproc-2-0 (4.0.5-r42)
installing ncurses-terminfo-base (6.6_p20251230-r0)
installing ncurses (6.6_p20251230-r0)
installing procps (4.0.5-r42)
installing libcrypto3 (3.6.0-r6)
installing libssl3 (3.6.0-r6)
installing wget (1.25.0-r6)
installing sonarqube-docker-compat (26.1.0.118079-r0)
installing zlib (1.3.1.2-r0)
installing apk-tools (2.14.10-r9)
installing libxcrypt (4.5.2-r0)
installing libcrypt1 (2.42-r4)
installing busybox (1.37.0-r50)
qemu: generating ssh key pairs for ephemeral VM
qemu: generating SSH host key for VM
qemu: starting VM
qemu: waiting for SSH

isk=true --output=packages/sonarqube-docker-compat-26.1.0.118079-r0/mal-scan.json scan packages/aarch64/sonarqube-docker-compat-26.1.0.118079-r0.apk]
command "mal" completed successfully
scanning packages/aarch64/sonarqube-scripts-26.1.0.118079-r0.apk -> packages/sonarqube-scripts-26.1.0.118079-r0/mal-scan.json
running command mal [--format=json --exit-extraction=false --min-risk=critical --min-file-risk=critical --quantity-increases-risk=true --output=packages/sonarqube-scripts-26.1.0.118079-r0/mal-scan.json scan packages/aarch64/sonarqube-scripts-26.1.0.118079-r0.apk]
command "mal" completed successfully
malcontent scan completed successfully for 3 APKs in 36s
creating packages tarball...
running command tar [-C packages -cf packages.tar .]
command "tar" completed successfully
packages.tar sha256sum: 06e3f4bbc96573ed594ae92dc970da4f871e2edb67b91ed919f60695f7237228
sha256sum "06e3f4bbc96573ed594ae92dc970da4f871e2edb67b91ed919f60695f7237228" written to /dev/termination-log
Built 3 packages, hash: 06e3f4bbc96573ed594ae92dc970da4f871e2edb67b91ed919f60695f7237228, size: 927332352 bytes
uploading final packages tarball...
running command curl [-s --upload-file packages.tar -H Content-Type: application/octet-stream https://storage.googleapis.com/prod-bundle-staging/wolfi/aarch64/1767729179619936609-sonarqube-26.1.0.118079-r0.tar.gz?Expires=1767772379&GoogleAccessId=ebuild-zasv64d5x1oc4m3epw39yod%40prod-enforce-fabc.iam.gserviceaccount.com&Signature=iHKgdeWXVp%2Bfz8IaDEnpDcgosg364FZxIbpIWt9iILVrm8%2FiRG5gzqJ5Yu1Fmtni51kf89lRXK1MsX3ivheSag4anTPMbfTjnDLD0I3M7kDR5eAZZ8ZiukzaL53t3aLNgOpF%2FBHC%2F%2BlPWVPmqWGR74DQjAh9y1TLaFHIdsSYebdvYMebqT9aRq%2BI7hvs%2Fgja0sXwfxnEojTBjJBrnbzMdKy4AxQFDE1OhfvrggOgPD1QUeDKt%2BDObfOQa14qfiawt7P7aH8DYC%2FCIAr7VOPbS%2FyGqXefpHj5VkTUbHgTDkEo%2BJSbBQMj9xH0qSqHmAyRZqgeio8MSwhYMvIhvSLx%2BA%3D%3D]
command "curl" completed successfully
upload completed successfully
parsed env
using enhanced syft sbom melange runner
configuring puller identity "720909c9f5279097d847ad02a2f24ba8f59de36a/a49c7fedc33adf69"...
running command chainctl [auth login --audience apk.cgr.dev --identity 720909c9f5279097d847ad02a2f24ba8f59de36a/a49c7fedc33adf69]
Successfully exchanged token.
Valid! Id: 720909c9f5279097d847ad02a2f24ba8f59de36a/a49c7fedc33adf69
Updates are available for chainctl (current version: 0.2.187; latest: 0.2.189). To install, please run:
    $ chainctl update
command "chainctl" completed successfully
puller identity configured successfully
puller identity configured successfully
running tests...
running command /usr/bin/dind [dockerd] in background
command "/usr/bin/dind" started successfully
running command bash [-c 
  # Retry up to 60 seconds to wait for docker to start.
  worked=false
  for i in $(seq 60); do
    if docker info >/dev/null 2>&1; then
	  worked=true
	  break
    fi
    echo "docker healthcheck failed, docker is not ready, retrying... ($i/60 seconds so far)..."
    sleep 1
  done

  if [ "$worked" = "false" ]; then
    echo "Failed to start docker after 60 seconds"
    exit 1
  fi
]
command "bash" completed successfully
melange devel with runner docker is testing:
image configuration:
  contents:
    build repositories: []
    runtime repositories: []
    repositories: []
    keyring:      []
    packages:     [bash openjdk-21-default-jvm sonarqube]
  accounts:
    runas:  65532
    users:
      - uid=65532(nonroot) gid=65532
      - uid=1000(build) gid=1000
    groups:
      - gid=65532(nonroot) members=[]
      - gid=1000(build) members=[build]
installing wolfi-baselayout (20230201-r25)
installing ca-certificates-bundle (20251003-r0)
installing ncurses-terminfo-base (6.6_p20251230-r0)
installing libgcc (15.2.0-r6)
installing glibc-locale-posix (2.42-r4)
installing glibc (2.42-r4)
installing ld-linux (2.42-r4)
installing ncurses (6.6_p20251230-r0)
installing bash (5.3-r3)
installing java-common-jre (0.2-r2)
installing libbrotlicommon1 (1.2.0-r1)
installing libbrotlidec1 (1.2.0-r1)
installing zlib (1.3.1.2-r0)
installing libbz2-1 (1.0.8-r21)
installing libpng (1.6.53-r0)
installing freetype (2.14.1-r0)
installing libxau (1.0.12-r3)
installing libxdmcp (1.1.5-r9)
installing libxcb (1.17.0-r8)
installing libx11 (1.8.12-r3)
installing libxext (1.3.6-r7)
installing libxi (1.8.2-r4)
installing libxtst (1.2.5-r4)
installing ttf-dejavu (2.37-r7)
installing libxrender (0.9.12-r4)
installing alsa-lib (1.2.15.1-r0)
installing lcms2 (2.17-r5)
installing giflib (5.2.2-r11)
installing libjpeg-turbo (3.1.3-r0)
installing fontconfig-config (2.17.1-r1)
installing libexpat1 (2.7.3-r0)
installing libfontconfig1 (2.17.1-r1)
installing libtasn1 (4.20.0-r5)
installing libffi (3.5.2-r1)
installing p11-kit (0.25.10-r0)
installing p11-kit-trust (0.25.10-r0)
installing libcrypto3 (3.6.0-r6)
installing ca-certificates (20251003-r0)
installing java-cacerts (20251003-r0)
installing openjdk-21-jre (21.0.9-r2)
installing openjdk-21-default-jvm (21.0.9-r2)
installing libzstd1 (1.5.7-r5)
installing zstd-dev (1.5.7-r5)
installing bash-binsh (5.3-r3)
installing libstdc++ (15.2.0-r6)
installing libproc-2-0 (4.0.5-r42)
installing procps (4.0.5-r42)
installing sonarqube-scripts (26.1.0.118079-r0)
installing libudev (259-r0)
installing libudev-dev (259-r0)
installing libsystemd (259-r0)
installing systemd-dev (259-r0)
installing sonarqube (26.1.0.118079-r0)
installing wolfi-keys (1-r12)
installing libssl3 (3.6.0-r6)
installing apk-tools (2.14.10-r9)
installing libxcrypt (4.5.2-r0)
installing libcrypt1 (2.42-r4)
installing busybox (1.37.0-r50)
installing wolfi-base (1-r7)
layer digest: sha256:710f959037ae1961c841e9a5e838b87c92c2309a8b6f237470288345de980da2
layer diffID: sha256:bf98d33f70685dd667e770aee3ff4ea2159e4606ca6e5f0d7996f6dcf8e27c1b
saving OCI image locally: apko.local/cache:a05d034141ba97b9515e2592ed37691e87730a0a34b0ec5e7a92adad386b2a3d
tagging local image apko.local/cache:a05d034141ba97b9515e2592ed37691e87730a0a34b0ec5e7a92adad386b2a3d as index.docker.io/library/melange:latest
populating workspace /tmp/melange-workspace-942702176 from sonarqube
running the main test pipeline
SonarQube is running (41).
pod acf99fc05bbe83fe728f45a4734a013717042d7560e7c40f0c847ed1f8ebef0f terminated
running test pipeline for subpackage sonarqube-scripts
melange devel with runner docker is testing:
image configuration:
  contents:
    build repositories: []
    runtime repositories: []
    repositories: []
    keyring:      []
    packages:     [sonarqube-scripts]
  accounts:
    runas:  
    users:
      - uid=1000(build) gid=1000
    groups:
      - gid=1000(build) members=[build]
installing wolfi-baselayout (20230201-r25)
installing ca-certificates-bundle (20251003-r0)
installing libgcc (15.2.0-r6)
installing glibc-locale-posix (2.42-r4)
installing glibc (2.42-r4)
installing ld-linux (2.42-r4)
installing libproc-2-0 (4.0.5-r42)
installing ncurses-terminfo-base (6.6_p20251230-r0)
installing ncurses (6.6_p20251230-r0)
installing procps (4.0.5-r42)
installing sonarqube-scripts (26.1.0.118079-r0)
installing wolfi-keys (1-r12)
installing zlib (1.3.1.2-r0)
installing libcrypto3 (3.6.0-r6)
installing libssl3 (3.6.0-r6)
installing apk-tools (2.14.10-r9)
installing libxcrypt (4.5.2-r0)
installing libcrypt1 (2.42-r4)
installing busybox (1.37.0-r50)
installing wolfi-base (1-r7)
layer digest: sha256:10eb21fd8b804fe6a19432b8ef1f4321c75300db82e164b0a44b1c3724c76f9f
layer diffID: sha256:011250eef224c5f320a3037a5babfe775ce7e8c1e9817a396198dc9ae8d76c22
saving OCI image locally: apko.local/cache:15dddfaa46d23ca41448a86cec59bc0efdfc6cc76afbd9f50c00bff7bc5b9f9d
tagging local image apko.local/cache:15dddfaa46d23ca41448a86cec59bc0efdfc6cc76afbd9f50c00bff7bc5b9f9d as index.docker.io/library/melange:latest
running step "test/virtualpackage"
running step "virtual package installation checks"
PASS: sonarqube-startup-26.1.0.118079-r0 is not installed.
PASS: sonarqube-scripts-26.1.0.118079-r0 is installed.
running step "virtual package configuration checks"
PASS: real package [sonarqube-scripts] correctly declares virtual package [sonarqube-startup].
pod 960399cfb8ed5972a18560fa1b98fc31b52a137d9c8d3b80400d150930aa7569 terminated
running test pipeline for subpackage sonarqube-docker-compat
melange devel with runner docker is testing:
image configuration:
  contents:
    build repositories: []
    runtime repositories: []
    repositories: []
    keyring:      []
    packages:     [sonarqube-docker-compat]
  accounts:
    runas:  
    users:
      - uid=1000(build) gid=1000
    groups:
      - gid=1000(build) members=[build]
installing wolfi-baselayout (20230201-r25)
installing ca-certificates-bundle (20251003-r0)
installing libgcc (15.2.0-r6)
installing glibc-locale-posix (2.42-r4)
installing glibc (2.42-r4)
installing ld-linux (2.42-r4)
installing libpcre2-8-0 (10.47-r0)
installing grep (3.12-r4)
installing libproc-2-0 (4.0.5-r42)
installing ncurses-terminfo-base (6.6_p20251230-r0)
installing ncurses (6.6_p20251230-r0)
installing procps (4.0.5-r42)
installing libcrypto3 (3.6.0-r6)
installing libssl3 (3.6.0-r6)
installing wget (1.25.0-r6)
installing sonarqube-docker-compat (26.1.0.118079-r0)
installing wolfi-keys (1-r12)
installing zlib (1.3.1.2-r0)
installing apk-tools (2.14.10-r9)
installing libxcrypt (4.5.2-r0)
installing libcrypt1 (2.42-r4)
installing busybox (1.37.0-r50)
installing wolfi-base (1-r7)
layer digest: sha256:ee25aa0c5b890a367a8883a1f103be6bef9f792b90e1f30f38edb700fdb2b33c
layer diffID: sha256:586ee911c6b84ff8a71d52cfaa1661f96586be75ecb4772715458abdafd021fb
saving OCI image locally: apko.local/cache:71df41846d40991712d04428bb4b1627c9bc3af9b4722cbc5811eeb5c0543bfe
tagging local image apko.local/cache:71df41846d40991712d04428bb4b1627c9bc3af9b4722cbc5811eeb5c0543bfe as index.docker.io/library/melange:latest
running step "test/virtualpackage"
running step "virtual package installation checks"
PASS: sonarqube-startup-26.1.0.118079-r0 is not installed.
PASS: sonarqube-docker-compat-26.1.0.118079-r0 is installed.
running step "virtual package configuration checks"
PASS: real package [sonarqube-docker-compat] correctly declares virtual package [sonarqube-startup].
pod 1d8e8b4c731d94782f7621d45166b4f3d11acc1ae7e69297ed549f55f16996c5 terminated
tests completed successfully
all tests passed