[Qa-jenkins-scm] Build failed in Jenkins: reproducible_fdroid_test #76
jenkins at jenkins.debian.net
jenkins at jenkins.debian.net
Tue Mar 6 19:49:02 UTC 2018
See <https://jenkins.debian.net/job/reproducible_fdroid_test/76/display/redirect?page=changes>
Changes:
[hans] update: make icon extraction less dependent on aapt
[hans] lint: ban all dangerous HTML tags
[hans] lint: tighten up HTTPS checks on URLs
[hans] lint: require UpdateCheckData to contain only valid HTTPS URLs
[hans] checkupdates: require UpdateCheckData has valid HTTPS URL
[bubu] lint: fix update check data https check
[hans] SVN: only allow redirects to HTTPS
[hans] hg: use /bin/false to clarify that it is an executable
[hans] VercodeOperation: only allow simple math expresssions and %c
[hans] checkupdates: exit with error if fdroiddata git repo is dirty
[hans] build/checkupdates/update: log current fdroiddata commit to wiki
------------------------------------------
[...truncated 136.77 KB...]
WARNING: '/usr/lib/android-sdk/build-tools/debian/aapt' is too old, fdroid requires build-tools-26.0.0 or newer!
DOES NOT VERIFY
ERROR: JAR signer E16A6514.RSA: Failed to verify JAR signature META-INF/E16A6514.RSA against META-INF/E16A6514.SF: java.security.SignatureException: Algorithm constraints check failed on disabled algorithm: MD5.
ERROR:
repo/org.bitbucket.tickytacky.mirrormirror_3.apk:
WARNING: Archiving org.bitbucket.tickytacky.mirrormirror_3.apk with invalid signature!
INFO: Moving org.bitbucket.tickytacky.mirrormirror_3.apk from repo to archive
WARNING: '/usr/lib/android-sdk/build-tools/debian/aapt' is too old, fdroid requires build-tools-26.0.0 or newer!
WARNING: '/usr/lib/android-sdk/build-tools/debian/aapt' is too old, fdroid requires build-tools-26.0.0 or newer!
DOES NOT VERIFY
ERROR: JAR signer E16A6514.RSA: Failed to verify JAR signature META-INF/E16A6514.RSA against META-INF/E16A6514.SF: java.security.SignatureException: Algorithm constraints check failed on disabled algorithm: MD5.
ERROR:
repo/org.bitbucket.tickytacky.mirrormirror_4.apk:
WARNING: Archiving org.bitbucket.tickytacky.mirrormirror_4.apk with invalid signature!
INFO: Moving org.bitbucket.tickytacky.mirrormirror_4.apk from repo to archive
WARNING: '/usr/lib/android-sdk/build-tools/debian/aapt' is too old, fdroid requires build-tools-26.0.0 or newer!
WARNING: '/usr/lib/android-sdk/build-tools/debian/aapt' is too old, fdroid requires build-tools-26.0.0 or newer!
WARNING: '/usr/lib/android-sdk/build-tools/debian/aapt' is too old, fdroid requires build-tools-26.0.0 or newer!
WARNING: '/usr/lib/android-sdk/build-tools/debian/aapt' is too old, fdroid requires build-tools-26.0.0 or newer!
DOES NOT VERIFY
ERROR: JAR signer E16A6514.RSA: Failed to verify JAR signature META-INF/E16A6514.RSA against META-INF/E16A6514.SF: java.security.SignatureException: Algorithm constraints check failed on disabled algorithm: MD5.
ERROR:
archive/org.bitbucket.tickytacky.mirrormirror_1.apk:
WARNING: '/usr/lib/android-sdk/build-tools/debian/aapt' is too old, fdroid requires build-tools-26.0.0 or newer!
WARNING: '/usr/lib/android-sdk/build-tools/debian/aapt' is too old, fdroid requires build-tools-26.0.0 or newer!
DOES NOT VERIFY
ERROR: JAR signer E16A6514.RSA: Failed to verify JAR signature META-INF/E16A6514.RSA against META-INF/E16A6514.SF: java.security.SignatureException: Algorithm constraints check failed on disabled algorithm: MD5.
ERROR:
archive/org.bitbucket.tickytacky.mirrormirror_2.apk:
WARNING: '/usr/lib/android-sdk/build-tools/debian/aapt' is too old, fdroid requires build-tools-26.0.0 or newer!
WARNING: '/usr/lib/android-sdk/build-tools/debian/aapt' is too old, fdroid requires build-tools-26.0.0 or newer!
DOES NOT VERIFY
ERROR: JAR signer E16A6514.RSA: Failed to verify JAR signature META-INF/E16A6514.RSA against META-INF/E16A6514.SF: java.security.SignatureException: Algorithm constraints check failed on disabled algorithm: MD5.
ERROR:
archive/org.bitbucket.tickytacky.mirrormirror_3.apk:
WARNING: '/usr/lib/android-sdk/build-tools/debian/aapt' is too old, fdroid requires build-tools-26.0.0 or newer!
WARNING: '/usr/lib/android-sdk/build-tools/debian/aapt' is too old, fdroid requires build-tools-26.0.0 or newer!
DOES NOT VERIFY
ERROR: JAR signer E16A6514.RSA: Failed to verify JAR signature META-INF/E16A6514.RSA against META-INF/E16A6514.SF: java.security.SignatureException: Algorithm constraints check failed on disabled algorithm: MD5.
ERROR:
archive/org.bitbucket.tickytacky.mirrormirror_4.apk:
WARNING: '/usr/lib/android-sdk/build-tools/debian/aapt' is too old, fdroid requires build-tools-26.0.0 or newer!
WARNING: '/usr/lib/android-sdk/build-tools/debian/aapt' is too old, fdroid requires build-tools-26.0.0 or newer!
WARNING: archive/urzip-badsig.apk is set to android:debuggable="true"
DOES NOT VERIFY
ERROR: JAR signer CERT.RSA: SHA-1 digest of META-INF/MANIFEST.MF section for AndroidManifest.xml does not match the digest specified in META-INF/CERT.SF. Expected: <JYBUMhOCUqbNupF0uRUilMG8psI=>, actual: <osOjbkldSAk+vTAdsdLeXI6f58c=>
ERROR:
archive/urzip-badsig.apk: WARNING: JAR signer CERT.RSA: SHA-1 digest of META-INF/MANIFEST.MF does not match the digest specified in META-INF/CERT.SF. Expected: <xnVQzXMpgNgZtvjZJC+y28A9cjo=>, actual: <5+8iqbzUfegBixjQUeg1++LwFe4=>
ERROR: Old APK signature failed to verify: archive/urzip-badsig.apk
jarsigner: java.lang.SecurityException: invalid SHA1 signature file digest for AndroidManifest.xml
WARNING: Archiving urzip-badsig.apk with invalid signature!
INFO: Creating unsigned index in preparation for signing
INFO: Creating unsigned index in preparation for signing
INFO: Finished
++ wc -l
++ grep '<package>' archive/index.xml
+ test 5 -eq 5
++ grep '<package>' repo/index.xml
++ wc -l
+ test 3 -eq 3
+ grep -F org.bitbucket.tickytacky.mirrormirror_1.apk archive/index.xml
<apkname>org.bitbucket.tickytacky.mirrormirror_1.apk</apkname>
+ grep -F org.bitbucket.tickytacky.mirrormirror_2.apk archive/index.xml
<apkname>org.bitbucket.tickytacky.mirrormirror_2.apk</apkname>
+ grep -F org.bitbucket.tickytacky.mirrormirror_3.apk archive/index.xml
<apkname>org.bitbucket.tickytacky.mirrormirror_3.apk</apkname>
+ grep -F org.bitbucket.tickytacky.mirrormirror_4.apk archive/index.xml
<apkname>org.bitbucket.tickytacky.mirrormirror_4.apk</apkname>
+ grep -F com.politedroid_3.apk archive/index.xml
<apkname>com.politedroid_3.apk</apkname>
+ grep -F com.politedroid_4.apk repo/index.xml
<apkname>com.politedroid_4.apk</apkname>
+ grep -F com.politedroid_5.apk repo/index.xml
<apkname>com.politedroid_5.apk</apkname>
+ grep -F com.politedroid_6.apk repo/index.xml
<apkname>com.politedroid_6.apk</apkname>
+ grep -F urzip-badsig.apk repo/index.xml
+ grep -F urzip-badsig.apk archive/index.xml
==============================================================================
rename apks with `fdroid update --rename-apks`, --nosign for speed
+ test -e archive/org.bitbucket.tickytacky.mirrormirror_1.apk
+ test -e archive/org.bitbucket.tickytacky.mirrormirror_2.apk
+ test -e archive/org.bitbucket.tickytacky.mirrormirror_3.apk
+ test -e archive/org.bitbucket.tickytacky.mirrormirror_4.apk
+ test -e archive/com.politedroid_3.apk
+ test -e archive/urzip-badsig.apk
+ test -e repo/com.politedroid_4.apk
+ test -e repo/com.politedroid_5.apk
+ test -e repo/com.politedroid_6.apk
+ echo_header 'rename apks with `fdroid update --rename-apks`, --nosign for speed'
++ create_test_dir
++ test -e /var/lib/jenkins/userContent/reproducible/reproducible_fdroid_build_apps/.testfiles
++ mktemp -d /var/lib/jenkins/userContent/reproducible/reproducible_fdroid_build_apps/.testfiles/run-tests.XXXX
+ REPOROOT=/var/lib/jenkins/userContent/reproducible/reproducible_fdroid_build_apps/.testfiles/run-tests.fnax
+ cd /var/lib/jenkins/userContent/reproducible/reproducible_fdroid_build_apps/.testfiles/run-tests.fnax
+ fdroid_init_with_prebuilt_keystore
+ '[' -z '' ']'
+ keystore=/var/lib/jenkins/userContent/reproducible/reproducible_fdroid_build_apps/tests/keystore.jks
+ /var/lib/jenkins/userContent/reproducible/reproducible_fdroid_build_apps/fdroid init --keystore /var/lib/jenkins/userContent/reproducible/reproducible_fdroid_build_apps/tests/keystore.jks --repo-keyalias=sova
WARNING:
Using existing keystore "/var/lib/jenkins/userContent/reproducible/reproducible_fdroid_build_apps/tests/keystore.jks"
Now set these in config.py: keystorepass, keypass, keydname
INFO:
Built repo based in "/var/lib/jenkins/userContent/reproducible/reproducible_fdroid_build_apps/.testfiles/run-tests.fnax" with this config:
Android SDK: /usr/lib/android-sdk
Android SDK Build Tools: /usr/lib/android-sdk/build-tools/debian
Android NDK r12b (optional): $ANDROID_NDK
Keystore for signing key: /var/lib/jenkins/userContent/reproducible/reproducible_fdroid_build_apps/tests/keystore.jks
Alias for key in store: sova
To complete the setup, add your APKs to "/var/lib/jenkins/userContent/reproducible/reproducible_fdroid_build_apps/.testfiles/run-tests.fnax/repo"
then run "fdroid update -c; fdroid update". You might also want to edit
"config.py" to set the URL, repo name, and more. You should also set up
a signing key (a temporary one might have been automatically generated).
For more info: https://f-droid.org/docs/Setup_an_F-Droid_App_Repo
and https://f-droid.org/docs/Signing_Process
+ echo 'keystorepass = "r9aquRHYoI8+dYz6jKrLntQ5/NJNASFBacJh7Jv2BlI="'
+ echo 'keypass = "r9aquRHYoI8+dYz6jKrLntQ5/NJNASFBacJh7Jv2BlI="'
+ echo 'accepted_formats = ['\''txt'\'', '\''yml'\'']'
+ echo 'keydname = "CN=Birdman, OU=Cell, O=Alcatraz, L=Alcatraz, S=California, C=US"'
+ test -d metadata
+ mkdir metadata
+ cp /var/lib/jenkins/userContent/reproducible/reproducible_fdroid_build_apps/tests/metadata/info.guardianproject.urzip.yml metadata/
+ test -d repo
+ cp /var/lib/jenkins/userContent/reproducible/reproducible_fdroid_build_apps/tests/urzip.apk 'repo/asdfiuhk urzip-πÇÇπÇÇ现代汉语通用字-български-عربي1234 ö.apk'
+ /var/lib/jenkins/userContent/reproducible/reproducible_fdroid_build_apps/fdroid update --rename-apks --pretty --nosign
WARNING: '/usr/lib/android-sdk/build-tools/debian/aapt' is too old, fdroid requires build-tools-26.0.0 or newer!
WARNING: '/usr/lib/android-sdk/build-tools/debian/aapt' is too old, fdroid requires build-tools-26.0.0 or newer!
WARNING: '/usr/lib/android-sdk/build-tools/debian/aapt' is too old, fdroid requires build-tools-26.0.0 or newer!
WARNING: repo/asdfiuhk urzip-πÇÇπÇÇ现代汉语通用字-български-عربي1234 ö.apk is set to android:debuggable="true"
INFO: Creating unsigned index in preparation for signing
INFO: Creating unsigned index in preparation for signing
INFO: Finished
+ test -e repo/info.guardianproject.urzip_100.apk
+ grep -F info.guardianproject.urzip_100.apk repo/index-v1.json repo/index.xml
repo/index-v1.json: "apkName": "info.guardianproject.urzip_100.apk",
repo/index.xml: <apkname>info.guardianproject.urzip_100.apk</apkname>
+ cp /var/lib/jenkins/userContent/reproducible/reproducible_fdroid_build_apps/tests/urzip-release.apk repo/
+ /var/lib/jenkins/userContent/reproducible/reproducible_fdroid_build_apps/fdroid update --rename-apks --pretty --nosign
WARNING: '/usr/lib/android-sdk/build-tools/debian/aapt' is too old, fdroid requires build-tools-26.0.0 or newer!
WARNING: '/usr/lib/android-sdk/build-tools/debian/aapt' is too old, fdroid requires build-tools-26.0.0 or newer!
WARNING: '/usr/lib/android-sdk/build-tools/debian/aapt' is too old, fdroid requires build-tools-26.0.0 or newer!
WARNING: repo/info.guardianproject.urzip_100.apk is set to android:debuggable="true"
WARNING: '/usr/lib/android-sdk/build-tools/debian/aapt' is too old, fdroid requires build-tools-26.0.0 or newer!
WARNING: '/usr/lib/android-sdk/build-tools/debian/aapt' is too old, fdroid requires build-tools-26.0.0 or newer!
INFO: Creating unsigned index in preparation for signing
INFO: Creating unsigned index in preparation for signing
INFO: Finished
+ test -e repo/info.guardianproject.urzip_100.apk
+ test -e repo/info.guardianproject.urzip_100_b4964fd.apk
+ grep -F info.guardianproject.urzip_100.apk repo/index-v1.json repo/index.xml
repo/index-v1.json: "apkName": "info.guardianproject.urzip_100.apk",
repo/index.xml: <apkname>info.guardianproject.urzip_100.apk</apkname>
+ grep -F info.guardianproject.urzip_100_b4964fd.apk repo/index-v1.json
"apkName": "info.guardianproject.urzip_100_b4964fd.apk",
+ grep -F info.guardianproject.urzip_100_b4964fd.apk repo/index.xml
+ cp /var/lib/jenkins/userContent/reproducible/reproducible_fdroid_build_apps/tests/urzip-release.apk repo/
+ /var/lib/jenkins/userContent/reproducible/reproducible_fdroid_build_apps/fdroid update --rename-apks --pretty --nosign
WARNING: '/usr/lib/android-sdk/build-tools/debian/aapt' is too old, fdroid requires build-tools-26.0.0 or newer!
WARNING: '/usr/lib/android-sdk/build-tools/debian/aapt' is too old, fdroid requires build-tools-26.0.0 or newer!
WARNING: '/usr/lib/android-sdk/build-tools/debian/aapt' is too old, fdroid requires build-tools-26.0.0 or newer!
WARNING: repo/info.guardianproject.urzip_100.apk is set to android:debuggable="true"
WARNING: '/usr/lib/android-sdk/build-tools/debian/aapt' is too old, fdroid requires build-tools-26.0.0 or newer!
WARNING: '/usr/lib/android-sdk/build-tools/debian/aapt' is too old, fdroid requires build-tools-26.0.0 or newer!
WARNING: '/usr/lib/android-sdk/build-tools/debian/aapt' is too old, fdroid requires build-tools-26.0.0 or newer!
WARNING: '/usr/lib/android-sdk/build-tools/debian/aapt' is too old, fdroid requires build-tools-26.0.0 or newer!
WARNING: Moving duplicate repo/info.guardianproject.urzip_100_b4964fd.apk to duplicates/repo/info.guardianproject.urzip_100_b4964fd.apk
INFO: Creating unsigned index in preparation for signing
INFO: Creating unsigned index in preparation for signing
INFO: Finished
+ test -e repo/info.guardianproject.urzip_100.apk
+ test -e repo/info.guardianproject.urzip_100_b4964fd.apk
+ test -e duplicates/repo/info.guardianproject.urzip_100_b4964fd.apk
+ grep -F info.guardianproject.urzip_100.apk repo/index-v1.json repo/index.xml
repo/index-v1.json: "apkName": "info.guardianproject.urzip_100.apk",
repo/index.xml: <apkname>info.guardianproject.urzip_100.apk</apkname>
+ grep -F info.guardianproject.urzip_100_b4964fd.apk repo/index-v1.json
"apkName": "info.guardianproject.urzip_100_b4964fd.apk",
+ grep -F info.guardianproject.urzip_100_b4964fd.apk repo/index.xml
==============================================================================
test metadata checks
+ echo_header 'test metadata checks'
++ create_test_dir
++ test -e /var/lib/jenkins/userContent/reproducible/reproducible_fdroid_build_apps/.testfiles
++ mktemp -d /var/lib/jenkins/userContent/reproducible/reproducible_fdroid_build_apps/.testfiles/run-tests.XXXX
+ REPOROOT=/var/lib/jenkins/userContent/reproducible/reproducible_fdroid_build_apps/.testfiles/run-tests.r0Hg
+ cd /var/lib/jenkins/userContent/reproducible/reproducible_fdroid_build_apps/.testfiles/run-tests.r0Hg
+ mkdir repo
+ cp /var/lib/jenkins/userContent/reproducible/reproducible_fdroid_build_apps/tests/urzip.apk /var/lib/jenkins/userContent/reproducible/reproducible_fdroid_build_apps/.testfiles/run-tests.r0Hg/repo/
+ set +e
+ /var/lib/jenkins/userContent/reproducible/reproducible_fdroid_build_apps/fdroid build
CRITICAL: No app metadata found, nothing to process!
testing metadata checks passed
+ '[' 1 -eq 0 ']'
+ echo 'testing metadata checks passed'
+ set -e
+ mkdir /var/lib/jenkins/userContent/reproducible/reproducible_fdroid_build_apps/.testfiles/run-tests.r0Hg/metadata/
+ cp /var/lib/jenkins/userContent/reproducible/reproducible_fdroid_build_apps/tests/metadata/org.smssecure.smssecure.txt /var/lib/jenkins/userContent/reproducible/reproducible_fdroid_build_apps/.testfiles/run-tests.r0Hg/metadata/
+ /var/lib/jenkins/userContent/reproducible/reproducible_fdroid_build_apps/fdroid readmeta
WARNING: No 'config.py' found, using defaults.
+ touch /var/lib/jenkins/userContent/reproducible/reproducible_fdroid_build_apps/.testfiles/run-tests.r0Hg/metadata/org.smssecure.smssecure.yml
+ set +e
+ /var/lib/jenkins/userContent/reproducible/reproducible_fdroid_build_apps/fdroid readmeta
WARNING: No 'config.py' found, using defaults.
CRITICAL: Found multiple metadata files for org.smssecure.smssecure
testing duplicate metadata checks passed
==============================================================================
ensure commands that don't need the JDK work without a JDK configed
+ '[' 1 -eq 0 ']'
+ echo 'testing duplicate metadata checks passed'
+ set -e
+ echo_header 'ensure commands that don'\''t need the JDK work without a JDK configed'
++ create_test_dir
++ test -e /var/lib/jenkins/userContent/reproducible/reproducible_fdroid_build_apps/.testfiles
++ mktemp -d /var/lib/jenkins/userContent/reproducible/reproducible_fdroid_build_apps/.testfiles/run-tests.XXXX
+ REPOROOT=/var/lib/jenkins/userContent/reproducible/reproducible_fdroid_build_apps/.testfiles/run-tests.DFlM
+ cd /var/lib/jenkins/userContent/reproducible/reproducible_fdroid_build_apps/.testfiles/run-tests.DFlM
+ mkdir repo
+ mkdir metadata
+ echo License:GPL-2.0
+ echo 'Summary:Yup still fake'
+ echo Categories:Internet
+ echo Description:
+ echo 'this is fake'
+ echo .
+ echo 'java_paths = {}'
++ create_test_dir
++ test -e /var/lib/jenkins/userContent/reproducible/reproducible_fdroid_build_apps/.testfiles
++ mktemp -d /var/lib/jenkins/userContent/reproducible/reproducible_fdroid_build_apps/.testfiles/run-tests.XXXX
+ LOCAL_COPY_DIR=/var/lib/jenkins/userContent/reproducible/reproducible_fdroid_build_apps/.testfiles/run-tests.dhCZ/fdroid
+ mkdir -p /var/lib/jenkins/userContent/reproducible/reproducible_fdroid_build_apps/.testfiles/run-tests.dhCZ/fdroid/repo
+ echo 'local_copy_dir = '\''/var/lib/jenkins/userContent/reproducible/reproducible_fdroid_build_apps/.testfiles/run-tests.dhCZ/fdroid'\'''
+ /var/lib/jenkins/userContent/reproducible/reproducible_fdroid_build_apps/fdroid checkupdates
ERROR: Build metadata git repo has uncommited changes!
+ cleanup_all
++ date -u
Tue Mar 6 19:49:02 UTC 2018 - cleanup in progress...
+ echo 'Tue Mar 6 19:49:02 UTC 2018 - cleanup in progress...'
+ killall adb
adb: no process found
Tue Mar 6 19:49:02 UTC 2018 - /srv/jenkins/bin/reproducible_fdroid_test.sh stopped running as /tmp/jenkins-script-Uh5NTiJP, which will now be removed.
SSH EXIT CODE: 1
Build step 'Execute shell' marked build as failure
More information about the Qa-jenkins-scm
mailing list