[Reproducible-builds] Missing dependencies aren't actually missing

[Mattia Rizzolo]

On Sat, Feb 28, 2015 at 09:59:01PM -0800, Nikolaus Rath wrote:
> Hello,

Hi there!
First, thank you for contacting us.

> https://reproducible.debian.net/rb-pkg/s3ql.html claims that S3QL has
> missing dependencies. If I interpret the build log correctly, the
> python3-dugong package is missing. But that's actually available in sid:
> https://tracker.debian.org/pkg/python-dugong
> 
> Is not available for reproducible builds, because it cannot be build
> reprocibly itself?

Most likely that was a temporary failure due to $weird_things_happen.

We performed a rebuild, and your package still FTBFS.
This time it looks like it fails at a test with the error
    dugong.ConnectionClosed: connection closed unexpectedly
which is quite nasty at the sight (I don't know what that means).
Does this mean that the package tries to connect to the internet?
A quick glance on the network status on that build machine:
 * connection to the outside are blocked
 * connection on the loopback interface are fine
 * the ports 8080 and 9129 are already taken.
The first two bullets are fine (e.g. policy-allowed) while the third one is
jenkins-specifc (thus the port_8080_in_use and ftbfs_jenkins_squid issues).
Please keep in mind that packages in main _must not_ talk to the wide&wild
internet.
(note that I didn't investigate further)

-- 
regards,
                        Mattia Rizzolo

GPG Key: 4096R/B9444540 http://goo.gl/I8TMB
more about me:      http://mapreri.org
Launchpad User:     https://launchpad.net/~mapreri
Ubuntu Wiki page:   https://wiki.ubuntu.com/MattiaRizzolo
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 819 bytes
Desc: Digital signature
URL: <http://lists.alioth.debian.org/pipermail/reproducible-builds/attachments/20150301/ce74ad33/attachment.sig>