cluster-api-aws-controller/2.8.4-r0: cve remediation#61666
Closed
octo-sts[bot] wants to merge 1 commit into
Closed
cluster-api-aws-controller/2.8.4-r0: cve remediation#61666octo-sts[bot] wants to merge 1 commit into
octo-sts[bot] wants to merge 1 commit into
Chainguard Internal / elastic-build
failed
Aug 5, 2025 in 3m 53s
Failed to build APKs
Build ID: af4e333e-3535-4762-910c-b8f8b2baea7d
Error: failed to build cluster-api-aws-controller: building group: pod failed: build failed
did not test because building group: pod failed: build failed
Details
x86_64 Logs
Click to expand
parsed env
configuring puller identity "720909c9f5279097d847ad02a2f24ba8f59de36a/a49c7fedc33adf69"...
running command chainctl [auth login --audience apk.cgr.dev --identity 720909c9f5279097d847ad02a2f24ba8f59de36a/a49c7fedc33adf69]
Successfully exchanged token.
Valid! Id: 720909c9f5279097d847ad02a2f24ba8f59de36a/a49c7fedc33adf69
Updates are available for chainctl (current version: 0.2.113; latest: 0.2.114). To install, please run:
$ chainctl update
command "chainctl" completed successfully
puller identity configured successfully
puller identity configured successfully
running build...
running command melange [build cluster-api-aws-controller.yaml --gcplog --source-dir cluster-api-aws-controller --arch x86_64 --arch=x86_64 --env-file=build-x86_64.env --namespace=wolfi --pipeline-dir=pipelines --out-dir=./packages/ --runner=qemu --keyring-append=https://packages.wolfi.dev/os/wolfi-signing.rsa.pub --repository-append=https://packages.wolfi.dev/os --repository-append=https://apk.cgr.dev/wolfi-presubmit/1555500959d21a53ef1e9b008558576a64d6f789 --repository-append=https://apk.cgr.dev/wolfi-presubmit/1555500959d21a53ef1e9b008558576a64d6f789 --git-repo-url=https://github.com/wolfi-dev/os]
melange v0.30.3+dirty is building:
populating workspace /tmp/melange-workspace-1805717497 from cluster-api-aws-controller
image configuration:
contents:
build repositories: [https://apk.cgr.dev/wolfi-presubmit/1555500959d21a53ef1e9b008558576a64d6f789 https://packages.wolfi.dev/os]
runtime repositories: []
repositories: []
keyring: [https://packages.wolfi.dev/os/wolfi-signing.rsa.pub]
packages: [bash=5.3-r2 binutils=2.45-r0 build-base=1-r8 busybox=1.37.0-r47 ca-certificates-bundle=20250619-r5 cyrus-sasl=2.1.28-r43 gcc=15.1.0-r4 gdbm=1.26-r0 git=2.50.1-r1 glibc-dev=2.41-r56 glibc-locale-posix=2.41-r56 glibc=2.41-r56 gmp=6.3.0-r8 go-1.24=1.24.5-r2 gobump=0.9.1-r1 heimdal-libs=7.8.0-r42 isl=0.27-r4 keyutils-libs=1.6.3-r36 krb5-conf=1.0-r7 krb5-libs=1.21.3-r45 ld-linux=2.41-r56 libatomic=15.1.0-r4 libbrotlicommon1=1.1.0-r7 libbrotlidec1=1.1.0-r7 libcom_err=1.47.3-r0 libcrypt1=2.41-r56 libcrypto3=3.5.1-r1 libcurl-openssl4=8.15.0-r4 libexpat1=2.7.1-r2 libgcc=15.1.0-r4 libgo=15.1.0-r4 libgomp=15.1.0-r4 libidn2=2.3.8-r3 libldap=2.6.10-r5 libnghttp2-14=1.66.0-r1 libpcre2-8-0=10.45-r3 libpsl=0.21.5-r6 libquadmath=15.1.0-r4 libssl3=3.5.1-r1 libstdc++-dev=15.1.0-r4 libstdc++=15.1.0-r4 libunistring=1.3-r4 libverto=0.3.2-r6 libxcrypt-dev=4.4.38-r3 libxcrypt=4.4.38-r3 libzstd1=1.5.7-r3 linux-headers=6.16-r0 make=4.4.1-r8 mpc=1.3.1-r7 mpfr=4.2.2-r2 ncurses-terminfo-base=6.5_p20250621-r1 ncurses=6.5_p20250621-r1 nss-db=2.41-r56 nss-hesiod=2.41-r56 openssf-compiler-options=20240627-r26 pkgconf=2.5.1-r1 posix-cc-wrappers=1-r7 readline=8.3-r1 sqlite-libs=3.50.4-r0 wolfi-baselayout=20230201-r23 zlib=1.3.1-r51]
accounts:
runas:
users:
- uid=1000(build) gid=1000
groups:
- gid=1000(build) members=[build]
auth configured for: []
installing wolfi-baselayout (20230201-r23)
installing ca-certificates-bundle (20250619-r5)
installing glibc-locale-posix (2.41-r56)
installing libgcc (15.1.0-r4)
installing glibc (2.41-r56)
installing ld-linux (2.41-r56)
installing ncurses-terminfo-base (6.5_p20250621-r1)
installing ncurses (6.5_p20250621-r1)
installing bash (5.3-r2)
installing libstdc++ (15.1.0-r4)
installing libzstd1 (1.5.7-r3)
installing binutils (2.45-r0)
installing libxcrypt (4.4.38-r3)
installing libxcrypt-dev (4.4.38-r3)
installing linux-headers (6.16-r0)
installing nss-db (2.41-r56)
installing nss-hesiod (2.41-r56)
installing glibc-dev (2.41-r56)
installing libquadmath (15.1.0-r4)
installing libstdc++-dev (15.1.0-r4)
installing openssf-compiler-options (20240627-r26)
installing posix-cc-wrappers (1-r7)
installing libatomic (15.1.0-r4)
installing gmp (6.3.0-r8)
installing libgo (15.1.0-r4)
installing libgomp (15.1.0-r4)
installing isl (0.27-r4)
installing mpfr (4.2.2-r2)
installing mpc (1.3.1-r7)
installing zlib (1.3.1-r51)
installing gcc (15.1.0-r4)
installing make (4.4.1-r8)
installing pkgconf (2.5.1-r1)
installing build-base (1-r8)
installing libcrypt1 (2.41-r56)
installing busybox (1.37.0-r47)
installing libcrypto3 (3.5.1-r1)
installing gdbm (1.26-r0)
installing readline (8.3-r1)
installing sqlite-libs (3.50.4-r0)
installing heimdal-libs (7.8.0-r42)
installing cyrus-sasl (2.1.28-r43)
installing libbrotlicommon1 (1.1.0-r7)
installing libbrotlidec1 (1.1.0-r7)
installing krb5-conf (1.0-r7)
installing libcom_err (1.47.3-r0)
installing keyutils-libs (1.6.3-r36)
installing libssl3 (3.5.1-r1)
installing libverto (0.3.2-r6)
installing krb5-libs (1.21.3-r45)
installing libldap (2.6.10-r5)
installing libnghttp2-14 (1.66.0-r1)
installing libunistring (1.3-r4)
installing libidn2 (2.3.8-r3)
installing libpsl (0.21.5-r6)
installing libcurl-openssl4 (8.15.0-r4)
installing libexpat1 (2.7.1-r2)
installing libpcre2-8-0 (10.45-r3)
installing git (2.50.1-r1)
installing go-1.24 (1.24.5-r2)
installing gobump (0.9.1-r1)
qemu: generating ssh key pairs for ephemeral VM
qemu: generating initramfs
image configuration:
contents:
build repositories: [https://apk.cgr.dev/chainguard]
runtime repositories: []
repositories: []
keyring: []
packages: [microvm-init]
installing wolfi-baselayout (20230201-r23)
installing ca-certificates-bundle (20250619-r5)
installing libgcc (15.1.0-r4)
installing glibc-locale-posix (2.41-r56)
installing glibc (2.41-r56)
installing ld-linux (2.41-r56)
installing gnutar (1.35-r5)
installing libattr1 (2.5.2-r53)
installing attr (2.5.2-r53)
installing zlib (1.3.1-r51)
installing libzstd1 (1.5.7-r3)
installing xz (5.8.1-r2)
installing libcrypto3 (3.5.1-r1)
installing kmod (34.2-r40)
installing libbz2-1 (1.0.8-r21)
installing libelf (0.193-r3)
installing libmnl (1.0.5-r6)
installing libnftnl (1.2.9-r1)
installing xtables (1.8.11-r26)
installing iproute2 (6.16.0-r0)
installing libpcre2-8-0 (10.45-r3)
installing libsepol (3.9-r1)
installing libselinux (3.9-r1)
installing libxcrypt (4.4.38-r3)
installing libcrypt1 (2.41-r56)
installing linux-pam (1.7.1-r1)
installing openssh-keygen (10.0_p1-r3)
installing openssh-server-config (10.0_p1-r3)
installing openssh-server (10.0_p1-r3)
installing libblkid (2.41.1-r3)
installing libmount (2.41.1-r3)
installing mount (2.41.1-r3)
installing ncurses-terminfo-base (6.5_p20250621-r1)
installing ncurses (6.5_p20250621-r1)
installing setarch (2.41.1-r3)
installing libuuid (2.41.1-r3)
installing libfdisk (2.41.1-r3)
installing sqlite-libs (3.50.4-r0)
installing util-linux (2.41.1-r3)
installing libsmartcols (2.41.1-r3)
installing util-linux-misc (2.41.1-r3)
installing libstdc++ (15.1.0-r4)
installing inih (61-r1)
installing liburcu (0.15.3-r1)
installing xfsprogs-core (6.15.0-r2)
installing xfsprogs (6.15.0-r2)
installing busybox (1.37.0-r47)
installing microvm-init (0.0.1-r12)
qemu: starting VM
qemu: waiting for SSH
qemu: meta-data=/dev/vda isize=512 agcount=8, agsize=1638400 blks
qemu: = sectsz=4096 attr=2, projid32bit=1
qemu: = crc=1 finobt=1, sparse=1, rmapbt=1
qemu: = reflink=1 bigtime=1 inobtcount=1 nrext64=1
qemu: = exchange=0 metadir=0
qemu: data = bsize=4096 blocks=13107200, imaxpct=25
qemu: = sunit=0 swidth=0 blks
qemu: naming =version 2 bsize=4096 ascii-ci=0, ftype=1, parent=0
qemu: log =internal log bsize=4096 blocks=16384, version=2
qemu: = sectsz=4096 sunit=1 blks, lazy-count=1
qemu: realtime =none extsz=4096 blocks=0, rtextents=0
qemu: = rgcount=0 rgsize=0 extents
qemu: = zoned=0 start=0 reserved=0
qemu: Discarding blocks...Done.
qemu: ssh-keygen: generating new host keys: RSA ECDSA ED25519
qemu: Server listening on 0.0.0.0 port 2223.
qemu: Server listening on 0.0.0.0 port 22.
qemu: VM started successfully, SSH server is up
qemu: Connection closed by 10.0.2.2 port 36036
qemu: Accepted publickey for root from 10.0.2.2 port 36052 ssh2: ECDSA SHA256:ytRRa6B0hatesDH6Rs8C1WmFgKkilQj+UrP/SSU8Cbs
qemu: Connection closed by 10.0.2.2 port 36052
qemu: Accepted publickey for root from 10.0.2.2 port 36066 ssh2: ECDSA SHA256:ytRRa6B0hatesDH6Rs8C1WmFgKkilQj+UrP/SSU8Cbs
qemu: Accepted publickey for root from 10.0.2.2 port 35838 ssh2: ECDSA SHA256:ytRRa6B0hatesDH6Rs8C1WmFgKkilQj+UrP/SSU8Cbs
qemu: setting up melange cachedir: ./melange-cache/
qemu: setting up local workspace
running step "git-checkout"
[git checkout] repo='https://github.com/kubernetes-sigs/cluster-api-provider-aws' dest='.' depth='unset' branch='' tag='v2.8.4' expcommit='49658babd14cb9590f9fef8330243d530f7d6602' recurse='false'
[git checkout] execute: git config --global --add safe.directory /tmp/tmp.UD5aMi
[git checkout] execute: git config --global --add safe.directory /home/build
[git checkout] execute: git clone --quiet --origin=origin --config=user.name=Melange Build --config=user.email=melange-build@cgr.dev --config=advice.detachedHead=false --branch=v2.8.4 --depth=1 https://github.com/kubernetes-sigs/cluster-api-provider-aws /tmp/tmp.UD5aMi
warning: refs/tags/v2.8.4 27c6409c5434229baec90bdbe44b1aa3371dfb70 is not a commit!
[git checkout] execute: cd /tmp/tmp.UD5aMi
[git checkout] tar -c . | tar -C "/home/build" -x
[git checkout] execute: cd /home/build
[git checkout] execute: git config --global --add safe.directory /home/build
[git checkout] execute: git fetch --quiet origin --depth=1 --no-tags +refs/tags/v2.8.4:refs/origin/tags/v2.8.4
[git checkout] execute: git checkout --quiet origin/tags/v2.8.4
[git checkout] tag v2.8.4 is 49658babd14cb9590f9fef8330243d530f7d6602
running step "go/bump"
2025/08/05 07:25:04 Local Go version: 1.24.5
2025/08/05 07:25:04 Running go mod tidy with go version '1.24.5' ...
aarch64 Logs
Click to expand
parsed env
configuring puller identity "720909c9f5279097d847ad02a2f24ba8f59de36a/a49c7fedc33adf69"...
running command chainctl [auth login --audience apk.cgr.dev --identity 720909c9f5279097d847ad02a2f24ba8f59de36a/a49c7fedc33adf69]
Successfully exchanged token.
Valid! Id: 720909c9f5279097d847ad02a2f24ba8f59de36a/a49c7fedc33adf69
Updates are available for chainctl (current version: 0.2.113; latest: 0.2.114). To install, please run:
$ chainctl update
command "chainctl" completed successfully
puller identity configured successfully
puller identity configured successfully
running build...
running command melange [build cluster-api-aws-controller.yaml --gcplog --source-dir cluster-api-aws-controller --arch aarch64 --arch=aarch64 --env-file=build-aarch64.env --namespace=wolfi --pipeline-dir=pipelines --out-dir=./packages/ --runner=bubblewrap --keyring-append=https://packages.wolfi.dev/os/wolfi-signing.rsa.pub --repository-append=https://packages.wolfi.dev/os --repository-append=https://apk.cgr.dev/wolfi-presubmit/1555500959d21a53ef1e9b008558576a64d6f789 --repository-append=https://apk.cgr.dev/wolfi-presubmit/1555500959d21a53ef1e9b008558576a64d6f789 --git-repo-url=https://github.com/wolfi-dev/os]
melange v0.30.3+dirty is building:
populating workspace /tmp/melange-workspace-3403342817 from cluster-api-aws-controller
image configuration:
contents:
build repositories: [https://apk.cgr.dev/wolfi-presubmit/1555500959d21a53ef1e9b008558576a64d6f789 https://packages.wolfi.dev/os]
runtime repositories: []
repositories: []
keyring: [https://packages.wolfi.dev/os/wolfi-signing.rsa.pub]
packages: [bash=5.3-r2 binutils=2.45-r0 build-base=1-r8 busybox=1.37.0-r47 ca-certificates-bundle=20250619-r5 cyrus-sasl=2.1.28-r43 gcc=15.1.0-r4 gdbm=1.26-r0 git=2.50.1-r1 glibc-dev=2.41-r56 glibc-locale-posix=2.41-r56 glibc=2.41-r56 gmp=6.3.0-r8 go-1.24=1.24.5-r2 gobump=0.9.1-r1 heimdal-libs=7.8.0-r42 isl=0.27-r4 keyutils-libs=1.6.3-r36 krb5-conf=1.0-r7 krb5-libs=1.21.3-r45 ld-linux=2.41-r56 libatomic=15.1.0-r4 libbrotlicommon1=1.1.0-r7 libbrotlidec1=1.1.0-r7 libcom_err=1.47.3-r0 libcrypt1=2.41-r56 libcrypto3=3.5.1-r1 libcurl-openssl4=8.15.0-r4 libexpat1=2.7.1-r2 libgcc=15.1.0-r4 libgo=15.1.0-r4 libgomp=15.1.0-r4 libidn2=2.3.8-r3 libldap=2.6.10-r5 libnghttp2-14=1.66.0-r1 libpcre2-8-0=10.45-r3 libpsl=0.21.5-r6 libquadmath=15.1.0-r4 libssl3=3.5.1-r1 libstdc++-dev=15.1.0-r4 libstdc++=15.1.0-r4 libunistring=1.3-r4 libverto=0.3.2-r6 libxcrypt-dev=4.4.38-r3 libxcrypt=4.4.38-r3 libzstd1=1.5.7-r3 linux-headers=6.16-r0 make=4.4.1-r8 mpc=1.3.1-r7 mpfr=4.2.2-r2 ncurses-terminfo-base=6.5_p20250621-r1 ncurses=6.5_p20250621-r1 nss-db=2.41-r56 nss-hesiod=2.41-r56 openssf-compiler-options=20240627-r26 pkgconf=2.5.1-r1 posix-cc-wrappers=1-r7 readline=8.3-r1 sqlite-libs=3.50.4-r0 wolfi-baselayout=20230201-r23 zlib=1.3.1-r51]
accounts:
runas:
users:
- uid=1000(build) gid=1000
groups:
- gid=1000(build) members=[build]
auth configured for: []
installing wolfi-baselayout (20230201-r23)
installing ca-certificates-bundle (20250619-r5)
installing glibc-locale-posix (2.41-r56)
installing libgcc (15.1.0-r4)
installing glibc (2.41-r56)
installing ld-linux (2.41-r56)
installing ncurses-terminfo-base (6.5_p20250621-r1)
installing ncurses (6.5_p20250621-r1)
installing bash (5.3-r2)
installing libstdc++ (15.1.0-r4)
installing libzstd1 (1.5.7-r3)
installing binutils (2.45-r0)
installing libxcrypt (4.4.38-r3)
installing libxcrypt-dev (4.4.38-r3)
installing linux-headers (6.16-r0)
installing nss-db (2.41-r56)
installing nss-hesiod (2.41-r56)
installing glibc-dev (2.41-r56)
installing libquadmath (15.1.0-r4)
installing libstdc++-dev (15.1.0-r4)
installing openssf-compiler-options (20240627-r26)
installing posix-cc-wrappers (1-r7)
installing libatomic (15.1.0-r4)
installing gmp (6.3.0-r8)
installing libgo (15.1.0-r4)
installing libgomp (15.1.0-r4)
installing isl (0.27-r4)
installing mpfr (4.2.2-r2)
installing mpc (1.3.1-r7)
installing zlib (1.3.1-r51)
installing gcc (15.1.0-r4)
installing make (4.4.1-r8)
installing pkgconf (2.5.1-r1)
installing build-base (1-r8)
installing libcrypt1 (2.41-r56)
installing busybox (1.37.0-r47)
installing libcrypto3 (3.5.1-r1)
installing gdbm (1.26-r0)
installing readline (8.3-r1)
installing sqlite-libs (3.50.4-r0)
installing heimdal-libs (7.8.0-r42)
installing cyrus-sasl (2.1.28-r43)
installing libbrotlicommon1 (1.1.0-r7)
installing libbrotlidec1 (1.1.0-r7)
installing krb5-conf (1.0-r7)
installing libcom_err (1.47.3-r0)
installing keyutils-libs (1.6.3-r36)
installing libssl3 (3.5.1-r1)
installing libverto (0.3.2-r6)
installing krb5-libs (1.21.3-r45)
installing libldap (2.6.10-r5)
installing libnghttp2-14 (1.66.0-r1)
installing libunistring (1.3-r4)
installing libidn2 (2.3.8-r3)
installing libpsl (0.21.5-r6)
installing libcurl-openssl4 (8.15.0-r4)
installing libexpat1 (2.7.1-r2)
installing libpcre2-8-0 (10.45-r3)
installing git (2.50.1-r1)
installing go-1.24 (1.24.5-r2)
installing gobump (0.9.1-r1)
running step "git-checkout"
[git checkout] repo='https://github.com/kubernetes-sigs/cluster-api-provider-aws' dest='.' depth='unset' branch='' tag='v2.8.4' expcommit='49658babd14cb9590f9fef8330243d530f7d6602' recurse='false'
[git checkout] execute: git config --global --add safe.directory /tmp/tmp.XhnUDd
[git checkout] execute: git config --global --add safe.directory /home/build
[git checkout] execute: git clone --quiet --origin=origin --config=user.name=Melange Build --config=user.email=melange-build@cgr.dev --config=advice.detachedHead=false --branch=v2.8.4 --depth=1 https://github.com/kubernetes-sigs/cluster-api-provider-aws /tmp/tmp.XhnUDd
warning: refs/tags/v2.8.4 27c6409c5434229baec90bdbe44b1aa3371dfb70 is not a commit!
[git checkout] execute: cd /tmp/tmp.XhnUDd
[git checkout] tar -c . | tar -C "/home/build" -x
[git checkout] execute: cd /home/build
[git checkout] execute: git config --global --add safe.directory /home/build
[git checkout] execute: git fetch --quiet origin --depth=1 --no-tags +refs/tags/v2.8.4:refs/origin/tags/v2.8.4
[git checkout] execute: git checkout --quiet origin/tags/v2.8.4
[git checkout] tag v2.8.4 is 49658babd14cb9590f9fef8330243d530f7d6602
running step "go/bump"
2025/08/05 07:23:32 Local Go version: 1.24.5
2025/08/05 07:23:32 Running go mod tidy with go version '1.24.5' ...
2025/08/05 07:23:35 Update package: github.com/coreos/ignition
2025/08/05 07:23:35 Running go mod edit -droprequire ...
2025/08/05 07:23:35 Running go get ...
Error: failed to run update. Error: failed to run 'go get': exit status 1 with output: go: github.com/coreos/ignition@v2.14.0: invalid version: go.mod has post-v2 module path "github.com/coreos/ignition/v2" at revision v2.14.0
2025/08/05 07:23:43 failed to run update. Error: failed to run 'go get': exit status 1 with output: go: github.com/coreos/ignition@v2.14.0: invalid version: go.mod has post-v2 module path "github.com/coreos/ignition/v2" at revision v2.14.0
failed to build package: unable to run package cluster-api-aws-controller pipeline: unable to run pipeline: unable to run pipeline: exit status 1
failed to build: command melange failed: exit status 1
build failed: command melange failed: exit status 1
Indexes
https://apk.cgr.dev/wolfi-presubmit/1555500959d21a53ef1e9b008558576a64d6f789
❌ Failed Packages
- ❌ cluster-api-aws-controller (error | 1m50s)
Packages
- ❌ cluster-api-aws-controller (error | 1m50s | x86_64 logs | aarch64 logs)
More Observability
Command
cg build log \
--build-id af4e333e-3535-4762-910c-b8f8b2baea7d \
--project prod-wolfi-os \
--cluster elastic-pre-a \
--namespace pre-wolfi \
--start 2025-08-05T07:21:19Z \
--end 2025-08-05T07:35:13Z
Loading