intersphinx mapping - https errors causing reproducibility failures

Mattia Rizzolo mattia at debian.org
Fri Nov 19 08:56:12 GMT 2021


On Fri, Nov 19, 2021 at 08:49:33AM +0000, Neil Williams wrote:
> https://tests.reproducible-builds.org/debian/rb-pkg/bookworm/i386/diffoscope-results/python-jira.html
> 
> First build:
> 
> PYTHONPATH=. http_proxy='127.0.0.1:9' python3 -m sphinx -N -bhtml docs/ build/html # HTML generator
> Running Sphinx v4.2.0
> making output directory... done
> loading intersphinx inventory from https://docs.python.org/3.7/objects.inv...
> 
> Comparative build:
> 
> PYTHONPATH=. http_proxy='127.0.0.1:9' python3 -m sphinx -N -bhtml docs/ build/html # HTML generator
> Running Sphinx v4.2.0
> making output directory... done
> loading intersphinx inventory from https://docs.python.org/3.7/objects.inv...
[…]
> WARNING: failed to reach any of the inventories with the following issues:
> intersphinx inventory 'https://requests.kennethreitz.org/en/master/objects.inv' not fetchable due to <class 'requests.exceptions.SSLError'>: HTTPSConnectionPool(host='requests.kennethreitz.org', port=443): Max retries exceeded with url: /en/master/objects.inv (Caused by SSLError(SSLCertVerificationError(1, '[SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed: certificate has expired (_ssl.c:1129)')))

What surprises me here is that it actually works.

Locally I see:

PYTHONPATH=. http_proxy='127.0.0.1:9' python3 -m sphinx -N -bhtml docs/ build/html # HTML generator
Running Sphinx v4.2.0
making output directory... done
loading intersphinx inventory from https://docs.python.org/3.7/objects.inv...
[…]
WARNING: failed to reach any of the inventories with the following issues:
intersphinx inventory 'https://requests-oauthlib.readthedocs.io/en/latest/objects.inv' not fetchable due to <class 'requests.exceptions.ConnectionError'>: HTTPSConnectionPool(host='requests-oauthlib.readthedocs.io', port=443): Max retries exceeded with url: /en/latest/objects.inv (Caused by NewConnectionError('<urllib3.connection.HTTPSConnection object at 0x7f7041681cd0>: Failed to establish a new connection: [Errno -3] Temporary failure in name resolution'))

Which is what I expect, and which is what I see in, say, the amd64
build.

> The first run retrieves the inventories just fine, the second run
> always fails. This then leads to sphinx generating different output,
> causing the reproducibility failure.

Well, it's a RC bug even trying to do that (network access during the
build), so that's a bug coming your way ;)

-- 
regards,
                        Mattia Rizzolo

GPG Key: 66AE 2B4A FCCF 3F52 DA18  4D18 4B04 3FCD B944 4540      .''`.
More about me:  https://mapreri.org                             : :'  :
Launchpad user: https://launchpad.net/~mapreri                  `. `'`
Debian QA page: https://qa.debian.org/developer.php?login=mattia  `-
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 833 bytes
Desc: not available
URL: <http://alioth-lists.debian.net/pipermail/reproducible-builds/attachments/20211119/ebc6119d/attachment.sig>


More information about the Reproducible-builds mailing list