[Qa-jenkins-scm] Build failed in Jenkins: reproducible_fdroid_test #321

jenkins at jenkins.debian.net jenkins at jenkins.debian.net
Sun May 17 09:15:16 BST 2020 

See <https://jenkins.debian.net/job/reproducible_fdroid_test/321/display/redirect?page=changes>

Changes:

[bubu] add gradle 6.4.1


------------------------------------------
[...truncated 35.55 KB...]
DEBUG:root:> git checkout -f 0.3
DEBUG:root:Directory: /var/lib/jenkins/userContent/reproducible/reproducible_fdroid_build_apps/.testfiles/test_prepare_sources_refreshpwvso2z8/build/org.fdroid.ci.test.app
DEBUG:root:> git clean -dffx
.INFO:root:Cleaned build.gradle of keysigning configs at source-files/com.seafile.seadroid2/app/build.gradle
INFO:root:Cleaned build.gradle of keysigning configs at source-files/eu.siacs.conversations/build.gradle
INFO:root:Cleaned build.gradle of keysigning configs at source-files/open-keychain/open-keychain/OpenKeychain/build.gradle
INFO:root:Cleaned build.gradle.kts of keysigning configs at source-files/org.tasks/app/build.gradle.kts
INFO:root:Cleaned build.gradle of keysigning configs at source-files/osmandapp/osmand/build.gradle
INFO:root:Cleaned build.gradle of keysigning configs at source-files/ut.ewh.audiometrytest/app/build.gradle
.F.DEBUG:root:Reading 'config.py'
WARNING:root:unsafe permissions on 'config.py' (should be 0600)!
Exception in thread "main" java.io.FileNotFoundException: /var/lib/jenkins/userContent/reproducible/reproducible_fdroid_build_apps/.testfiles/test_sign_apkliwmgul0/urzip-release-unsigned.apk (No such file or directory)
	at java.base/java.io.RandomAccessFile.open0(Native Method)
	at java.base/java.io.RandomAccessFile.open(RandomAccessFile.java:345)
	at java.base/java.io.RandomAccessFile.<init>(RandomAccessFile.java:259)
	at java.base/java.io.RandomAccessFile.<init>(RandomAccessFile.java:214)
	at com.android.apksig.ApkVerifier.verify(ApkVerifier.java:100)
	at com.android.apksigner.ApkSignerTool.verify(ApkSignerTool.java:427)
	at com.android.apksigner.ApkSignerTool.main(ApkSignerTool.java:92)
ERROR:root:
/var/lib/jenkins/userContent/reproducible/reproducible_fdroid_build_apps/.testfiles/test_sign_apkliwmgul0/urzip-release-unsigned.apk: 
DEBUG:root:> /usr/lib/android-sdk/build-tools/debian/aapt dump badging /var/lib/jenkins/userContent/reproducible/reproducible_fdroid_build_apps/.testfiles/test_sign_apkliwmgul0/urzip-release-unsigned.apk
DEBUG:root:> /usr/bin/jarsigner -keystore /var/lib/jenkins/userContent/reproducible/reproducible_fdroid_build_apps/tests/keystore.jks -storepass:env FDROID_KEY_STORE_PASS -keypass:env FDROID_KEY_PASS -sigalg SHA1withRSA -digestalg SHA1 /var/lib/jenkins/userContent/reproducible/reproducible_fdroid_build_apps/.testfiles/test_sign_apkliwmgul0/urzip-release-unsigned.apk sova
jar signed.

Warning: 
The signer's certificate is self-signed.
DEBUG:root:> /usr/lib/android-sdk/build-tools/debian/zipalign -v -p 4 /var/lib/jenkins/userContent/reproducible/reproducible_fdroid_build_apps/.testfiles/test_sign_apkliwmgul0/urzip-release-unsigned.apk /var/lib/jenkins/userContent/reproducible/reproducible_fdroid_build_apps/.testfiles/test_sign_apkliwmgul0/urzip-release.apk
Verifying alignment of /var/lib/jenkins/userContent/reproducible/reproducible_fdroid_build_apps/.testfiles/test_sign_apkliwmgul0/urzip-release.apk (4)...
      50 META-INF/MANIFEST.MF (OK - compressed)
     396 META-INF/SOVA.SF (OK - compressed)
     808 META-INF/SOVA.RSA (OK - compressed)
    2706 AndroidManifest.xml (OK - compressed)
    4000 res/drawable/ic_launcher.png (OK)
    5471 res/layout/activity_main.xml (OK - compressed)
    5800 resources.arsc (OK)
    7053 classes.dex (OK - compressed)
Verification successful
DEBUG:root:/var/lib/jenkins/userContent/reproducible/reproducible_fdroid_build_apps/.testfiles/test_sign_apkliwmgul0/urzip-release.apk: Verifies
Verified using v1 scheme (JAR signing): true
Verified using v2 scheme (APK Signature Scheme v2): false
Number of signers: 1

DEBUG:root:> /usr/lib/android-sdk/build-tools/debian/aapt dump badging /var/lib/jenkins/userContent/reproducible/reproducible_fdroid_build_apps/.testfiles/test_sign_apkliwmgul0/duplicate.permisssions_9999999-unsigned.apk
DEBUG:root:> /usr/bin/jarsigner -keystore /var/lib/jenkins/userContent/reproducible/reproducible_fdroid_build_apps/tests/keystore.jks -storepass:env FDROID_KEY_STORE_PASS -keypass:env FDROID_KEY_PASS -sigalg SHA256withRSA -digestalg SHA-256 /var/lib/jenkins/userContent/reproducible/reproducible_fdroid_build_apps/.testfiles/test_sign_apkliwmgul0/duplicate.permisssions_9999999-unsigned.apk sova
jar signed.

Warning: 
The signer's certificate is self-signed.
DEBUG:root:> /usr/lib/android-sdk/build-tools/debian/zipalign -v -p 4 /var/lib/jenkins/userContent/reproducible/reproducible_fdroid_build_apps/.testfiles/test_sign_apkliwmgul0/duplicate.permisssions_9999999-unsigned.apk /var/lib/jenkins/userContent/reproducible/reproducible_fdroid_build_apps/.testfiles/test_sign_apkliwmgul0/duplicate.permisssions_9999999.apk
Verifying alignment of /var/lib/jenkins/userContent/reproducible/reproducible_fdroid_build_apps/.testfiles/test_sign_apkliwmgul0/duplicate.permisssions_9999999.apk (4)...
      50 META-INF/MANIFEST.MF (OK - compressed)
     504 META-INF/SOVA.SF (OK - compressed)
    1057 META-INF/SOVA.RSA (OK - compressed)
    2969 AndroidManifest.xml (OK - compressed)
    4725 classes.dex (OK - compressed)
    8792 res/drawable/banner.png (OK)
   24100 res/drawable/ic_launcher.png (OK)
   25468 res/layout/activity_main.xml (OK - compressed)
   25784 resources.arsc (OK)
Verification successful
DEBUG:root:/var/lib/jenkins/userContent/reproducible/reproducible_fdroid_build_apps/.testfiles/test_sign_apkliwmgul0/duplicate.permisssions_9999999.apk: Verifies
Verified using v1 scheme (JAR signing): true
Verified using v2 scheme (APK Signature Scheme v2): false
Number of signers: 1

DEBUG:root:> /usr/lib/android-sdk/build-tools/debian/aapt dump badging /var/lib/jenkins/userContent/reproducible/reproducible_fdroid_build_apps/.testfiles/test_sign_apkliwmgul0/duplicate.permisssions_9999999.apk
.DEBUG:root:Reading 'config.py'
WARNING:root:unsafe permissions on 'config.py' (should be 0600)!
DEBUG:root:> /usr/bin/jarsigner -keystore keystore.jks -storepass:env FDROID_KEY_STORE_PASS -digestalg SHA1 -sigalg SHA1withRSA /var/lib/jenkins/userContent/reproducible/reproducible_fdroid_build_apps/.testfiles/test_signjarrw5o5sy7/testy.jar sova -keypass:env FDROID_KEY_PASS
jar signed.

Warning: 
The signer's certificate is self-signed.
/var/lib/jenkins/userContent/reproducible/reproducible_fdroid_build_apps/tests/common.TestCase:347: ResourceWarning: unclosed file <_io.BufferedReader name='/var/lib/jenkins/userContent/reproducible/reproducible_fdroid_build_apps/tests/signindex/testy.jar'>
  self.assertNotEqual(open(sourcefile, 'rb').read(), open(testfile, 'rb').read())
ResourceWarning: Enable tracemalloc to get the object allocation traceback
/var/lib/jenkins/userContent/reproducible/reproducible_fdroid_build_apps/tests/common.TestCase:347: ResourceWarning: unclosed file <_io.BufferedReader name='/var/lib/jenkins/userContent/reproducible/reproducible_fdroid_build_apps/.testfiles/test_signjarrw5o5sy7/testy.jar'>
  self.assertNotEqual(open(sourcefile, 'rb').read(), open(testfile, 'rb').read())
ResourceWarning: Enable tracemalloc to get the object allocation traceback
DEBUG:root:> /usr/bin/jarsigner -keystore keystore.jks -storepass:env FDROID_KEY_STORE_PASS -digestalg SHA1 -sigalg SHA1withRSA /var/lib/jenkins/userContent/reproducible/reproducible_fdroid_build_apps/.testfiles/test_signjarrw5o5sy7/guardianproject.jar sova -keypass:env FDROID_KEY_PASS
jar signed.

Warning: 
The signer's certificate is self-signed.
/var/lib/jenkins/userContent/reproducible/reproducible_fdroid_build_apps/tests/common.TestCase:347: ResourceWarning: unclosed file <_io.BufferedReader name='/var/lib/jenkins/userContent/reproducible/reproducible_fdroid_build_apps/tests/signindex/guardianproject.jar'>
  self.assertNotEqual(open(sourcefile, 'rb').read(), open(testfile, 'rb').read())
ResourceWarning: Enable tracemalloc to get the object allocation traceback
/var/lib/jenkins/userContent/reproducible/reproducible_fdroid_build_apps/tests/common.TestCase:347: ResourceWarning: unclosed file <_io.BufferedReader name='/var/lib/jenkins/userContent/reproducible/reproducible_fdroid_build_apps/.testfiles/test_signjarrw5o5sy7/guardianproject.jar'>
  self.assertNotEqual(open(sourcefile, 'rb').read(), open(testfile, 'rb').read())
ResourceWarning: Enable tracemalloc to get the object allocation traceback
...DEBUG:root:Reading 'config.py'
WARNING:root:unsafe permissions on 'config.py' (should be 0600)!
DEBUG:root:bad-unicode-πÇÇ现代通用字-български-عربي1.apk: Verifies
Verified using v1 scheme (JAR signing): true
Verified using v2 scheme (APK Signature Scheme v2): false
Number of signers: 1

DEBUG:root:org.bitbucket.tickytacky.mirrormirror_1.apk: Verifies
Verified using v1 scheme (JAR signing): true
Verified using v2 scheme (APK Signature Scheme v2): false
Number of signers: 1

DEBUG:root:org.bitbucket.tickytacky.mirrormirror_2.apk: Verifies
Verified using v1 scheme (JAR signing): true
Verified using v2 scheme (APK Signature Scheme v2): false
Number of signers: 1

DEBUG:root:org.bitbucket.tickytacky.mirrormirror_3.apk: Verifies
Verified using v1 scheme (JAR signing): true
Verified using v2 scheme (APK Signature Scheme v2): false
Number of signers: 1

DEBUG:root:org.bitbucket.tickytacky.mirrormirror_4.apk: Verifies
Verified using v1 scheme (JAR signing): true
Verified using v2 scheme (APK Signature Scheme v2): false
Number of signers: 1

DEBUG:root:org.dyndns.fules.ck_20.apk: Verifies
Verified using v1 scheme (JAR signing): true
Verified using v2 scheme (APK Signature Scheme v2): false
Number of signers: 1
WARNING: META-INF/buildserverid not protected by signature. Unauthorized modifications to this JAR entry will not be detected. Delete or move the entry outside of META-INF/.
WARNING: META-INF/fdroidserverid not protected by signature. Unauthorized modifications to this JAR entry will not be detected. Delete or move the entry outside of META-INF/.

DEBUG:root:urzip.apk: Verifies
Verified using v1 scheme (JAR signing): true
Verified using v2 scheme (APK Signature Scheme v2): false
Number of signers: 1

DOES NOT VERIFY
ERROR: JAR signer CERT.RSA: JAR signature META-INF/CERT.RSA did not verify against META-INF/CERT.SF
ERROR:root:
urzip-badcert.apk: 
DOES NOT VERIFY
ERROR: JAR signer CERT.RSA: SHA-1 digest of META-INF/MANIFEST.MF section for AndroidManifest.xml does not match the digest specified in META-INF/CERT.SF. Expected: <JYBUMhOCUqbNupF0uRUilMG8psI=>, actual: <osOjbkldSAk+vTAdsdLeXI6f58c=>
ERROR:root:
urzip-badsig.apk: WARNING: JAR signer CERT.RSA: SHA-1 digest of META-INF/MANIFEST.MF does not match the digest specified in META-INF/CERT.SF. Expected: <xnVQzXMpgNgZtvjZJC+y28A9cjo=>, actual: <5+8iqbzUfegBixjQUeg1++LwFe4=>

DEBUG:root:urzip-release.apk: Verifies
Verified using v1 scheme (JAR signing): true
Verified using v2 scheme (APK Signature Scheme v2): false
Number of signers: 1

DOES NOT VERIFY
ERROR: Missing META-INF/MANIFEST.MF
ERROR:root:
urzip-release-unsigned.apk: 
.DEBUG:root:Reading 'config.py'
WARNING:root:unsafe permissions on 'config.py' (should be 0600)!
DEBUG:root:/var/lib/jenkins/userContent/reproducible/reproducible_fdroid_build_apps/.testfiles/test_verify_apksismnhum0/urzip-copy.apk: Verifies
Verified using v1 scheme (JAR signing): true
Verified using v2 scheme (APK Signature Scheme v2): false
Number of signers: 1

WARNING:root:Ignoring META-INF/MANIFEST.MF from /var/lib/jenkins/userContent/reproducible/reproducible_fdroid_build_apps/.testfiles/test_verify_apksismnhum0/urzip-copy.apk
WARNING:root:Ignoring META-INF/CERT.SF from /var/lib/jenkins/userContent/reproducible/reproducible_fdroid_build_apps/.testfiles/test_verify_apksismnhum0/urzip-copy.apk
WARNING:root:Ignoring META-INF/CERT.RSA from /var/lib/jenkins/userContent/reproducible/reproducible_fdroid_build_apps/.testfiles/test_verify_apksismnhum0/urzip-copy.apk
DEBUG:root:/var/lib/jenkins/userContent/reproducible/reproducible_fdroid_build_apps/.testfiles/sigcp_urzip-copy.apk: Verifies
Verified using v1 scheme (JAR signing): true
Verified using v2 scheme (APK Signature Scheme v2): false
Number of signers: 1

INFO:root:...successfully verified
DEBUG:root:/var/lib/jenkins/userContent/reproducible/reproducible_fdroid_build_apps/.testfiles/sigcp_urzip-unsigned.apk: Verifies
Verified using v1 scheme (JAR signing): true
Verified using v2 scheme (APK Signature Scheme v2): false
Number of signers: 1

INFO:root:...successfully verified
DOES NOT VERIFY
ERROR: Duplicate entry: META-INF/MANIFEST.MF
ERROR: Duplicate entry: META-INF/CERT.SF
ERROR: Duplicate entry: META-INF/CERT.RSA
/usr/lib/python3.7/zipfile.py:1470: UserWarning: Duplicate name: 'META-INF/MANIFEST.MF'
  return self._open_to_write(zinfo, force_zip64=force_zip64)
/usr/lib/python3.7/zipfile.py:1470: UserWarning: Duplicate name: 'META-INF/CERT.SF'
  return self._open_to_write(zinfo, force_zip64=force_zip64)
/usr/lib/python3.7/zipfile.py:1470: UserWarning: Duplicate name: 'META-INF/CERT.RSA'
  return self._open_to_write(zinfo, force_zip64=force_zip64)
ERROR:root:
/var/lib/jenkins/userContent/reproducible/reproducible_fdroid_build_apps/.testfiles/test_verify_apksismnhum0/urzip-twosig.apk: 
WARNING:root:Ignoring META-INF/MANIFEST.MF from /var/lib/jenkins/userContent/reproducible/reproducible_fdroid_build_apps/.testfiles/test_verify_apksismnhum0/urzip-twosig.apk
WARNING:root:Ignoring META-INF/MANIFEST.MF from /var/lib/jenkins/userContent/reproducible/reproducible_fdroid_build_apps/.testfiles/test_verify_apksismnhum0/urzip-twosig.apk
WARNING:root:Ignoring META-INF/CERT.SF from /var/lib/jenkins/userContent/reproducible/reproducible_fdroid_build_apps/.testfiles/test_verify_apksismnhum0/urzip-twosig.apk
WARNING:root:Ignoring META-INF/CERT.SF from /var/lib/jenkins/userContent/reproducible/reproducible_fdroid_build_apps/.testfiles/test_verify_apksismnhum0/urzip-twosig.apk
WARNING:root:Ignoring META-INF/CERT.RSA from /var/lib/jenkins/userContent/reproducible/reproducible_fdroid_build_apps/.testfiles/test_verify_apksismnhum0/urzip-twosig.apk
WARNING:root:Ignoring META-INF/CERT.RSA from /var/lib/jenkins/userContent/reproducible/reproducible_fdroid_build_apps/.testfiles/test_verify_apksismnhum0/urzip-twosig.apk
DEBUG:root:/var/lib/jenkins/userContent/reproducible/reproducible_fdroid_build_apps/.testfiles/sigcp_urzip-twosig.apk: Verifies
Verified using v1 scheme (JAR signing): true
Verified using v2 scheme (APK Signature Scheme v2): false
Number of signers: 1

INFO:root:...successfully verified
.DEBUG:root:Reading 'config.py'
WARNING:root:unsafe permissions on 'config.py' (should be 0600)!
.DEBUG:root:Reading 'config.py'
WARNING:root:unsafe permissions on 'config.py' (should be 0600)!
DEBUG:root:JAR signature verified: /var/lib/jenkins/userContent/reproducible/reproducible_fdroid_build_apps/tests/signindex/testy.jar
DEBUG:root:JAR signature verified: /var/lib/jenkins/userContent/reproducible/reproducible_fdroid_build_apps/tests/signindex/guardianproject.jar
.DEBUG:root:Reading 'config.py'
WARNING:root:unsafe permissions on 'config.py' (should be 0600)!
DEBUG:root:JAR signature verified: bad-unicode-πÇÇ现代通用字-български-عربي1.apk
DEBUG:root:JAR signature verified: org.bitbucket.tickytacky.mirrormirror_1.apk
DEBUG:root:JAR signature verified: org.bitbucket.tickytacky.mirrormirror_2.apk
DEBUG:root:JAR signature verified: org.bitbucket.tickytacky.mirrormirror_3.apk
DEBUG:root:JAR signature verified: org.bitbucket.tickytacky.mirrormirror_4.apk
DEBUG:root:JAR signature verified: org.dyndns.fules.ck_20.apk
DEBUG:root:JAR signature verified: urzip.apk
ERROR:root:Old APK signature failed to verify: urzip-badcert.apk
jarsigner: java.lang.SecurityException: cannot verify signature block file META-INF/CERT

ERROR:root:Old APK signature failed to verify: urzip-badsig.apk
jarsigner: java.lang.SecurityException: invalid SHA1 signature file digest for AndroidManifest.xml

DEBUG:root:JAR signature verified: urzip-release.apk
ERROR:root:Old APK signature failed to verify: urzip-release-unsigned.apk

no manifest.

jar is unsigned.

....
======================================================================
FAIL: test_run_yamllint_malformed (__main__.CommonTest)
----------------------------------------------------------------------
Traceback (most recent call last):
  File "/var/lib/jenkins/userContent/reproducible/reproducible_fdroid_build_apps/tests/common.TestCase", line 1341, in test_run_yamllint_malformed
    self.assertNotEqual(result, '')
AssertionError: '' == ''

----------------------------------------------------------------------
Ran 50 tests in 38.760s

FAILED (failures=1)
localmodule: /var/lib/jenkins/userContent/reproducible/reproducible_fdroid_build_apps
testdir /var/lib/jenkins/userContent/reproducible/reproducible_fdroid_build_apps/.testfiles/test_prepare_sources_refreshpwvso2z8
/var/lib/jenkins/userContent/reproducible/reproducible_fdroid_build_apps/.testfiles/test_remove_signing_keysadi70slb
testdir /var/lib/jenkins/userContent/reproducible/reproducible_fdroid_build_apps/.testfiles/test_verify_apksismnhum0
+ cleanup_all
++ date -u
Sun 17 May 2020 08:15:16 AM UTC - cleanup in progress...
+ echo 'Sun 17 May 2020 08:15:16 AM UTC - cleanup in progress...'
+ killall adb
Sun 17 May 2020 08:15:16 AM UTC - reproducible_fdroid_test.sh stopped running as /tmp/jenkins-script-jvyLYt85, which will now be removed.
adb: no process found

SSH EXIT CODE: 1
Build step 'Execute shell' marked build as failure

More information about the Qa-jenkins-scm mailing list