Skip to content

fix(buck2): Remediate GHSA-xwfj-jgwm-7wp5#64882

Merged
dnegreira merged 1 commit into
wolfi-dev:mainfrom
Ankush-Pathak:fix-buck2-GHSA-xwfj-jgwm-7wp5
Sep 2, 2025
Merged

fix(buck2): Remediate GHSA-xwfj-jgwm-7wp5#64882
dnegreira merged 1 commit into
wolfi-dev:mainfrom
Ankush-Pathak:fix-buck2-GHSA-xwfj-jgwm-7wp5

fix(buck2): Remediate GHSA-xwfj-jgwm-7wp5

5937948
Select commit
Loading
Failed to load commit list.
Chainguard Internal / elastic-build succeeded Sep 2, 2025 in 9m 27s

APKs built successfully

Build ID: d110ed81-9d47-4ca7-8416-7393d9901c32

Details

x86_64 Logs

Click to expand
v0.1.0 (/home/build/app/buck2_build_signals)
   Compiling buck2_test_runner v0.1.0 (/home/build/app/buck2_test_runner)
   Compiling buck2_event_observer v0.1.0 (/home/build/app/buck2_event_observer)
   Compiling buck2_re_configuration v0.1.0 (/home/build/app/buck2_re_configuration)
   Compiling buck2_node v0.1.0 (/home/build/app/buck2_node)
   Compiling buck2_interpreter v0.1.0 (/home/build/app/buck2_interpreter)
   Compiling buck2_file_watcher v0.1.0 (/home/build/app/buck2_file_watcher)
   Compiling buck2_forkserver v0.1.0 (/home/build/app/buck2_forkserver)
   Compiling remote_execution v0.1.0 (/home/build/remote_execution/oss/re_grpc)
   Compiling buck2_event_log v0.1.0 (/home/build/app/buck2_event_log)
   Compiling buck2_execute v0.1.0 (/home/build/app/buck2_execute)
   Compiling buck2_client_ctx v0.1.0 (/home/build/app/buck2_client_ctx)
   Compiling buck2_interpreter_for_build v0.1.0 (/home/build/app/buck2_interpreter_for_build)
   Compiling buck2_profile v0.1.0 (/home/build/app/buck2_profile)
   Compiling buck2_artifact v0.1.0 (/home/build/app/buck2_artifact)
   Compiling buck2_build_api v0.1.0 (/home/build/app/buck2_build_api)
   Compiling buck2_server_ctx v0.1.0 (/home/build/app/buck2_server_ctx)
   Compiling buck2_execute_impl v0.1.0 (/home/build/app/buck2_execute_impl)
   Compiling buck2_audit v0.1.0 (/home/build/app/buck2_audit)
   Compiling buck2_server_starlark_debug v0.1.0 (/home/build/app/buck2_server_starlark_debug)
   Compiling buck2_cmd_starlark_client v0.1.0 (/home/build/app/buck2_cmd_starlark_client)
   Compiling buck2_client v0.1.0 (/home/build/app/buck2_client)
   Compiling buck2_cmd_starlark_server v0.1.0 (/home/build/app/buck2_cmd_starlark_server)
   Compiling buck2_cmd_docs_server v0.1.0 (/home/build/app/buck2_cmd_docs_server)
   Compiling buck2_analysis v0.1.0 (/home/build/app/buck2_analysis)
   Compiling buck2_configured v0.1.0 (/home/build/app/buck2_configured)
   Compiling buck2_validation v0.1.0 (/home/build/app/buck2_validation)
   Compiling buck2_test v0.1.0 (/home/build/app/buck2_test)
   Compiling buck2_action_impl v0.1.0 (/home/build/app/buck2_action_impl)
   Compiling buck2_anon_target v0.1.0 (/home/build/app/buck2_anon_target)
   Compiling buck2_server v0.1.0 (/home/build/app/buck2_server)
   Compiling buck2_bxl v0.1.0 (/home/build/app/buck2_bxl)
   Compiling buck2_transition v0.1.0 (/home/build/app/buck2_transition)
   Compiling buck2_build_signals_impl v0.1.0 (/home/build/app/buck2_build_signals_impl)
   Compiling buck2_daemon v0.1.0 (/home/build/app/buck2_daemon)
   Compiling buck2_audit_server v0.1.0 (/home/build/app/buck2_audit_server)
   Compiling buck2_cfg_constructor v0.1.0 (/home/build/app/buck2_cfg_constructor)
   Compiling buck2_server_commands v0.1.0 (/home/build/app/buck2_server_commands)
   Compiling buck2_query_impls v0.0.0 (/home/build/app/buck2_query_impls)
   Compiling buck2_external_cells v0.1.0 (/home/build/app/buck2_external_cells)
   Compiling buck2_cmd_completion_client v0.1.0 (/home/build/app/buck2_cmd_completion_client)
   Compiling buck2_cmd_docs v0.1.0 (/home/build/app/buck2_cmd_docs)
   Compiling buck2 v0.1.0 (/home/build/app/buck2)
    Finished `release` profile [optimized] target(s) in 4m 56s
warning: the following packages contain code that will be rejected by a future version of Rust: anymap v1.0.0-beta.2
note: to see what the problems were, use the option `--future-incompat-report`, or run `cargo report future-incompatibilities --id 1`
running step "strip"
retrieving workspace from builder: 
fetching remote workspace
retrieved and wrote post-build workspace to: /tmp/melange-workspace-1919813906
running package linters for buck2
linting apk: buck2
checking license information
  LICENSE-APACHE: Apache-2.0 (1.000000) (notice)
  LICENSE-MIT: MIT (1.000000) (notice)
  prelude/toolchains/android/third-party/aosp/LICENSE: Apache-2.0 (1.000000) (notice)
  target/release/build/jemalloc-sys-48d5636409f2d09c/out/build/COPYING: BSD-2-Clause (0.961749) (notice)
  starlark-rust/starlark_syntax/testcases/parse/license.star: NOASSERTION (0.000000 low-confidence) (unknown)
  app/buck2_error_derive/LICENSE-APACHE: Apache-2.0 (1.000000) (notice)
  app/buck2_error_derive/LICENSE-MIT: MIT (1.000000) (notice)
  dice/oss/LICENSE-APACHE: Apache-2.0 (1.000000) (notice)
  dice/oss/LICENSE-MIT: MIT (1.000000) (notice)
  prelude/oss/LICENSE-APACHE: Apache-2.0 (1.000000) (notice)
  prelude/oss/LICENSE-MIT: MIT (1.000000) (notice)
  shed/completion_verify/src/runtime/LICENSE-APACHE: Apache-2.0 (1.000000) (notice)
  shed/completion_verify/src/runtime/LICENSE-MIT: MIT (1.000000) (notice)
  shim/LICENSE-APACHE: Apache-2.0 (1.000000) (notice)
  shim/LICENSE-MIT: MIT (1.000000) (notice)
  superconsole/oss/LICENSE-APACHE: Apache-2.0 (1.000000) (notice)
  superconsole/oss/LICENSE-MIT: MIT (1.000000) (notice)
checking gathered license information against the configuration
detected license differences:
  LICENSE-APACHE: Apache-2.0 not found
  prelude/toolchains/android/third-party/aosp/LICENSE: Apache-2.0 not found
  target/release/build/jemalloc-sys-48d5636409f2d09c/out/build/COPYING: BSD-2-Clause not found
  app/buck2_error_derive/LICENSE-APACHE: Apache-2.0 not found
  dice/oss/LICENSE-APACHE: Apache-2.0 not found
  prelude/oss/LICENSE-APACHE: Apache-2.0 not found
  shed/completion_verify/src/runtime/LICENSE-APACHE: Apache-2.0 not found
  shim/LICENSE-APACHE: Apache-2.0 not found
  superconsole/oss/LICENSE-APACHE: Apache-2.0 not found
detected license differences, please check the configuration
following license files could not be confidently assessed:
  starlark-rust/starlark_syntax/testcases/parse/license.star: NOASSERTION (0.000000) (unknown)
could not identify some licenses, please check the configuration
license information check complete
invalid license: NOASSERTION
writing SBOM for buck2
generating package buck2-20250401-r4
scanning for ld.so.conf.d files...
scanning for shared object dependencies...
interpreter for buck2 => /lib64/ld-linux-x86-64.so.2
  found lib libc.so.6 for usr/bin/buck2
  found lib ld-linux-x86-64.so.2 for usr/bin/buck2
  found lib libgcc_s.so.1 for usr/bin/buck2
  found lib libm.so.6 for usr/bin/buck2
scanning for commands...
  found command usr/bin/buck2
scanning for -doc package...
scanning for pkg-config data...
scanning for python modules...
scanning for ruby gems...
scanning for shbang deps...
  runtime:
    so:ld-linux-x86-64.so.2
    so:libc.so.6
    so:libgcc_s.so.1
    so:libm.so.6
  provides:
    cmd:buck2=20250401-r4
  installed-size: 138900440
  data.tar.gz digest: b7a432c03750937a928f1b427fee6b05276c3d41f6f14d1f8d7aa6a5a80d156d
wrote packages/x86_64/buck2-20250401-r4.apk
cleaning Workspace by removing 61 file/directories in /home/build
generating apk index from packages in packages/x86_64
processing package packages/x86_64/buck2-20250401-r4.apk
updating index at packages/x86_64/APKINDEX.tar.gz with new packages: [buck2-20250401-r4]
qemu: sending shutdown signal
command "melange" completed successfully
build completed successfully
creating packages tarball...
running command tar [-C packages -cf packages.tar .]
command "tar" completed successfully
packages.tar sha256sum: 19cb029143916ffeaacc8ff25e841acaf13636a26f34fc0bc51a3f5000d03d60
sha256sum "19cb029143916ffeaacc8ff25e841acaf13636a26f34fc0bc51a3f5000d03d60" written to /dev/termination-log
Built 1 packages, hash: 19cb029143916ffeaacc8ff25e841acaf13636a26f34fc0bc51a3f5000d03d60, size: 42176000 bytes
uploading final packages tarball...
running command curl [-s --upload-file packages.tar -H Content-Type: application/octet-stream https://storage.googleapis.com/prod-bundle-staging/wolfi/x86_64/1756804392413740545-buck2-20250401-r4.tar.gz?Expires=1756847592&GoogleAccessId=ebuild-zasv64d5x1oc4m3epw39yod%40prod-enforce-fabc.iam.gserviceaccount.com&Signature=lQaLWucLEZ5x05Jdy7f74OBZBNf4qadhOvVmXCfdtC8ZURXUnT2Di%2BW1DeMtg3%2FVFGOvyHLhv0UGZ1IDnZzTvi22QZOhja9jTBlnBZkln8WnSFjMoR816yZkcNsVtnpCXhCwQ1yUfgdn0QMVbd%2BwonI1AFBJphOV6LlyoaUe34nLYvSLU7WzR0zh7vcuIbo0GcRg%2BM%2BDJpdw9KJUYP%2FagYHTbNJtfJJur1Z%2FmC%2FcZqXbD1FWQl6DKkv3OyLNHHJ%2FqzVulmU9FCr1mU8Fqs%2B0bH89RUeJGbZ7Jy87wUbjwdzo9dx%2BGEhMCUgcEj7Yjx5eBFYeYl6TkrHRa2WjMZjvRQ%3D%3D]
command "curl" completed successfully
upload completed successfully
parsed env
configuring puller identity "720909c9f5279097d847ad02a2f24ba8f59de36a/a49c7fedc33adf69"...
running command chainctl [auth login --audience apk.cgr.dev --identity 720909c9f5279097d847ad02a2f24ba8f59de36a/a49c7fedc33adf69]
Successfully exchanged token.
Valid! Id: 720909c9f5279097d847ad02a2f24ba8f59de36a/a49c7fedc33adf69
Updates are available for chainctl (current version: 0.2.133; latest: 0.2.134). To install, please run:
    $ chainctl update
command "chainctl" completed successfully
puller identity configured successfully
puller identity configured successfully
running tests...
running command /usr/bin/dind [dockerd] in background
command "/usr/bin/dind" started successfully
running command bash [-c 
  # Retry up to 60 seconds to wait for docker to start.
  worked=false
  for i in $(seq 60); do
    if docker info >/dev/null 2>&1; then
	  worked=true
	  break
    fi
    echo "docker healthcheck failed, docker is not ready, retrying... ($i/60 seconds so far)..."
    sleep 1
  done

  if [ "$worked" = "false" ]; then
    echo "Failed to start docker after 60 seconds"
    exit 1
  fi
]
command "bash" completed successfully
running command melange [test buck2.yaml --gcplog --source-dir buck2 --test-package-append wolfi-base --arch=x86_64 --env-file=build-x86_64.env --pipeline-dirs=./pipelines --runner=qemu --keyring-append=https://packages.wolfi.dev/os/wolfi-signing.rsa.pub --repository-append=https://packages.wolfi.dev/os --repository-append=https://apk.cgr.dev/wolfi-presubmit/1e81754cc4ff561de6d2ff98c58ca36707c37362 --repository-append=https://apk.cgr.dev/wolfi-presubmit/1e81754cc4ff561de6d2ff98c58ca36707c37362]
melange v0.31.1+dirty with runner qemu is testing:
image configuration:
  contents:
    build repositories: []
    runtime repositories: []
    repositories: []
    keyring:      []
    packages:     [buck2]
  accounts:
    runas:  
    users:
      - uid=1000(build) gid=1000
    groups:
      - gid=1000(build) members=[build]

aarch64 Logs

Click to expand
try/src/index.crates.io-1949cf8c6b5b557f/aho-corasick-1.1.3/COPYING: NOASSERTION (0.000000) (unknown)
  .cargo/registry/src/index.crates.io-1949cf8c6b5b557f/anymap-1.0.0-beta.2/COPYING: NOASSERTION (0.000000) (unknown)
  .cargo/registry/src/index.crates.io-1949cf8c6b5b557f/bstr-0.2.17/COPYING: NOASSERTION (0.000000) (unknown)
  .cargo/registry/src/index.crates.io-1949cf8c6b5b557f/bstr-1.12.0/COPYING: NOASSERTION (0.000000) (unknown)
  .cargo/registry/src/index.crates.io-1949cf8c6b5b557f/byteorder-1.5.0/COPYING: NOASSERTION (0.000000) (unknown)
  .cargo/registry/src/index.crates.io-1949cf8c6b5b557f/csv-1.3.1/COPYING: NOASSERTION (0.000000) (unknown)
  .cargo/registry/src/index.crates.io-1949cf8c6b5b557f/csv-core-0.1.12/COPYING: NOASSERTION (0.000000) (unknown)
  .cargo/registry/src/index.crates.io-1949cf8c6b5b557f/elf-0.7.4/COPYRIGHT: NOASSERTION (0.000000) (unknown)
  .cargo/registry/src/index.crates.io-1949cf8c6b5b557f/globset-0.4.16/COPYING: NOASSERTION (0.000000) (unknown)
  .cargo/registry/src/index.crates.io-1949cf8c6b5b557f/linux-raw-sys-0.4.15/COPYRIGHT: NOASSERTION (0.000000) (unknown)
  .cargo/registry/src/index.crates.io-1949cf8c6b5b557f/linux-raw-sys-0.9.4/COPYRIGHT: NOASSERTION (0.000000) (unknown)
  .cargo/registry/src/index.crates.io-1949cf8c6b5b557f/memchr-2.7.5/COPYING: NOASSERTION (0.000000) (unknown)
  .cargo/registry/src/index.crates.io-1949cf8c6b5b557f/os_str_bytes-6.6.1/COPYRIGHT: NOASSERTION (0.000000) (unknown)
  .cargo/registry/src/index.crates.io-1949cf8c6b5b557f/quickcheck-1.0.3/COPYING: NOASSERTION (0.000000) (unknown)
  .cargo/registry/src/index.crates.io-1949cf8c6b5b557f/rand-0.8.5/COPYRIGHT: NOASSERTION (0.000000) (unknown)
  .cargo/registry/src/index.crates.io-1949cf8c6b5b557f/rand_chacha-0.3.1/COPYRIGHT: NOASSERTION (0.000000) (unknown)
  .cargo/registry/src/index.crates.io-1949cf8c6b5b557f/rand_core-0.6.4/COPYRIGHT: NOASSERTION (0.000000) (unknown)
  .cargo/registry/src/index.crates.io-1949cf8c6b5b557f/rand_distr-0.4.3/COPYRIGHT: NOASSERTION (0.000000) (unknown)
  .cargo/registry/src/index.crates.io-1949cf8c6b5b557f/regex-automata-0.1.10/COPYING: NOASSERTION (0.000000) (unknown)
  .cargo/registry/src/index.crates.io-1949cf8c6b5b557f/rustix-0.38.44/COPYRIGHT: NOASSERTION (0.000000) (unknown)
  .cargo/registry/src/index.crates.io-1949cf8c6b5b557f/rustix-1.0.8/COPYRIGHT: NOASSERTION (0.000000) (unknown)
  .cargo/registry/src/index.crates.io-1949cf8c6b5b557f/same-file-1.0.6/COPYING: NOASSERTION (0.000000) (unknown)
  .cargo/registry/src/index.crates.io-1949cf8c6b5b557f/siphasher-0.3.11/COPYING: NOASSERTION (0.000000) (unknown)
  .cargo/registry/src/index.crates.io-1949cf8c6b5b557f/siphasher-1.0.1/COPYING: NOASSERTION (0.000000) (unknown)
  .cargo/registry/src/index.crates.io-1949cf8c6b5b557f/unicode-segmentation-1.12.0/COPYRIGHT: NOASSERTION (0.000000) (unknown)
  .cargo/registry/src/index.crates.io-1949cf8c6b5b557f/unicode-width-0.1.14/COPYRIGHT: NOASSERTION (0.000000) (unknown)
  .cargo/registry/src/index.crates.io-1949cf8c6b5b557f/unicode-xid-0.2.6/COPYRIGHT: NOASSERTION (0.000000) (unknown)
  .cargo/registry/src/index.crates.io-1949cf8c6b5b557f/utf8_iter-1.0.4/COPYRIGHT: NOASSERTION (0.000000) (unknown)
  .cargo/registry/src/index.crates.io-1949cf8c6b5b557f/walkdir-2.5.0/COPYING: NOASSERTION (0.000000) (unknown)
  .rustup/toolchains/nightly-2025-01-03-aarch64-unknown-linux-gnu/share/doc/rust/COPYRIGHT: NCSA (0.880000) (notice)
  .rustup/toolchains/nightly-2025-01-03-aarch64-unknown-linux-gnu/share/doc/rust/COPYRIGHT: Unicode-DFS-2016 (0.812665) (notice)
  .cargo/registry/src/index.crates.io-1949cf8c6b5b557f/petgraph-0.6.5/assets/LICENSE.md: NOASSERTION (0.000000) (unknown)
  .rustup/toolchains/nightly-2025-01-03-aarch64-unknown-linux-gnu/lib/rustlib/src/rust/src/llvm-project/libunwind/LICENSE.TXT: NCSA (0.880000) (notice)
  starlark-rust/starlark_syntax/testcases/parse/license.star: NOASSERTION (0.000000) (unknown)
  .cargo/registry/src/index.crates.io-1949cf8c6b5b557f/deltae-0.3.2/docs/doc/COPYRIGHT.txt: NOASSERTION (0.000000) (unknown)
  .cargo/registry/src/index.crates.io-1949cf8c6b5b557f/bstr-0.2.17/src/unicode/data/LICENSE-UNICODE: Unicode-DFS-2016 (0.823219) (notice)
  .cargo/registry/src/index.crates.io-1949cf8c6b5b557f/constant_time_eq-0.2.6/LICENSE-MIT0: NOASSERTION (0.000000) (unknown)
  .cargo/registry/src/index.crates.io-1949cf8c6b5b557f/constant_time_eq-0.3.1/LICENSE-MIT0: NOASSERTION (0.000000) (unknown)
  .cargo/registry/src/index.crates.io-1949cf8c6b5b557f/sequence_trie-0.3.6/LICENSE-APACHE: NOASSERTION (0.000000) (unknown)
  .cargo/registry/src/index.crates.io-1949cf8c6b5b557f/shlex-1.3.0/LICENSE-APACHE: NOASSERTION (0.000000) (unknown)
  .rustup/toolchains/nightly-2025-01-03-aarch64-unknown-linux-gnu/share/doc/rust/html/static.files/COPYRIGHT-eb44e4cf.txt: NOASSERTION (0.000000) (unknown)
could not identify some licenses, please check the configuration
license information check complete
invalid license: NOASSERTION
writing SBOM for buck2
generating package buck2-20250401-r4
scanning for ld.so.conf.d files...
scanning for shared object dependencies...
interpreter for buck2 => /lib/ld-linux-aarch64.so.1
  found lib libc.so.6 for usr/bin/buck2
  found lib ld-linux-aarch64.so.1 for usr/bin/buck2
  found lib libgcc_s.so.1 for usr/bin/buck2
  found lib libm.so.6 for usr/bin/buck2
scanning for commands...
  found command usr/bin/buck2
scanning for -doc package...
scanning for pkg-config data...
scanning for python modules...
scanning for ruby gems...
scanning for shbang deps...
  runtime:
    so:ld-linux-aarch64.so.1
    so:libc.so.6
    so:libgcc_s.so.1
    so:libm.so.6
  provides:
    cmd:buck2=20250401-r4
  installed-size: 135337305
  data.tar.gz digest: 1e68ee56a7d04fdec08a40410142fd1f1951745f928b7153896dc54fa79f7ef6
wrote packages/aarch64/buck2-20250401-r4.apk
cleaning Workspace by removing 62 file/directories in /home/build
generating apk index from packages in packages/aarch64
processing package packages/aarch64/buck2-20250401-r4.apk
updating index at packages/aarch64/APKINDEX.tar.gz with new packages: [buck2-20250401-r4]
command "melange" completed successfully
build completed successfully
creating packages tarball...
running command tar [-C packages -cf packages.tar .]
command "tar" completed successfully
packages.tar sha256sum: f95ef8fc8ce4569c0803615aa3351fdf7b8161ad6bad3745bd871dd204a202e5
sha256sum "f95ef8fc8ce4569c0803615aa3351fdf7b8161ad6bad3745bd871dd204a202e5" written to /dev/termination-log
Built 1 packages, hash: f95ef8fc8ce4569c0803615aa3351fdf7b8161ad6bad3745bd871dd204a202e5, size: 45837312 bytes
uploading final packages tarball...
running command curl [-s --upload-file packages.tar -H Content-Type: application/octet-stream https://storage.googleapis.com/prod-bundle-staging/wolfi/aarch64/1756804392413685055-buck2-20250401-r4.tar.gz?Expires=1756847592&GoogleAccessId=ebuild-zasv64d5x1oc4m3epw39yod%40prod-enforce-fabc.iam.gserviceaccount.com&Signature=KbwCNUw8niTeJvhEnexX749MKWO1Cggxp%2BE1s%2BGvED6YoHLfCC88FS1NPltHzK%2FIbP50qj4oxy0xys7pPKlCaKXn%2BaxF6YWS5U%2FUkc7dKaaI6Cb4w%2BofgPQpjGWA4vp%2FFUBP4xQ1X7eDqRvEIc9XrvUiioFR7CYvWMOEcrP9%2ByfndApD3T1hUr3lED%2FIEab43Cs%2BoMTWNJL62nHFwfQU5hKIZAAapSSr6XxNcnqNoF33WJmFclY4Wt7jNPWxNSliBRGaGuyaBlv1sr5FVerETErq7wAT03M1wdOk7ku9CGbJpUlMNm25m6QYIHboc45gxHdMWA18pTLTrBMxUqLGsQ%3D%3D]
command "curl" completed successfully
upload completed successfully
parsed env
configuring puller identity "720909c9f5279097d847ad02a2f24ba8f59de36a/a49c7fedc33adf69"...
running command chainctl [auth login --audience apk.cgr.dev --identity 720909c9f5279097d847ad02a2f24ba8f59de36a/a49c7fedc33adf69]
Successfully exchanged token.
Valid! Id: 720909c9f5279097d847ad02a2f24ba8f59de36a/a49c7fedc33adf69
Updates are available for chainctl (current version: 0.2.133; latest: 0.2.134). To install, please run:
    $ chainctl update
command "chainctl" completed successfully
puller identity configured successfully
puller identity configured successfully
running tests...
running command /usr/bin/dind [dockerd] in background
command "/usr/bin/dind" started successfully
running command bash [-c 
  # Retry up to 60 seconds to wait for docker to start.
  worked=false
  for i in $(seq 60); do
    if docker info >/dev/null 2>&1; then
	  worked=true
	  break
    fi
    echo "docker healthcheck failed, docker is not ready, retrying... ($i/60 seconds so far)..."
    sleep 1
  done

  if [ "$worked" = "false" ]; then
    echo "Failed to start docker after 60 seconds"
    exit 1
  fi
]
command "bash" completed successfully
running command melange [test buck2.yaml --gcplog --source-dir buck2 --test-package-append wolfi-base --arch=aarch64 --env-file=build-aarch64.env --pipeline-dirs=./pipelines --runner=docker --keyring-append=https://packages.wolfi.dev/os/wolfi-signing.rsa.pub --repository-append=https://packages.wolfi.dev/os --repository-append=https://apk.cgr.dev/wolfi-presubmit/1e81754cc4ff561de6d2ff98c58ca36707c37362 --repository-append=https://apk.cgr.dev/wolfi-presubmit/1e81754cc4ff561de6d2ff98c58ca36707c37362]
melange v0.31.1+dirty with runner docker is testing:
image configuration:
  contents:
    build repositories: []
    runtime repositories: []
    repositories: []
    keyring:      []
    packages:     [buck2]
  accounts:
    runas:  
    users:
      - uid=1000(build) gid=1000
    groups:
      - gid=1000(build) members=[build]
installing wolfi-baselayout (20230201-r23)
installing ca-certificates-bundle (20250619-r5)
installing ld-linux (2.42-r0)
installing glibc-locale-posix (2.42-r0)
installing glibc (2.42-r0)
installing libgcc (15.2.0-r1)
installing buck2 (20250401-r4)
installing wolfi-keys (1-r12)
installing zlib (1.3.1-r51)
installing libcrypto3 (3.5.2-r1)
installing libssl3 (3.5.2-r1)
installing apk-tools (2.14.10-r8)
installing libxcrypt (4.4.38-r4)
installing libcrypt1 (2.42-r0)
installing busybox (1.37.0-r49)
installing wolfi-base (1-r7)
layer digest: sha256:d37950645f770b309ff361d9ead2a2b18cdaa85d71668aa673ddee993eae02e4
layer diffID: sha256:1da1543d18c8b85566e3bb5194ee83ad2e9e619f62725d2ad1f2e7734e8d4434
saving OCI image locally: apko.local/cache:5c20b19adb0eb2c5c946687c099cee07fa6526b05114b41c66a39c63de18fd53
populating workspace /tmp/melange-workspace-2753258706 from buck2

Indexes

https://apk.cgr.dev/wolfi-presubmit/1e81754cc4ff561de6d2ff98c58ca36707c37362

Packages

Tests

More Observability

Command

cg build log \
  --build-id d110ed81-9d47-4ca7-8416-7393d9901c32 \
  --project prod-wolfi-os \
  --cluster elastic-pre-a \
  --namespace pre-wolfi \
  --start 2025-09-02T09:10:07Z \
  --end 2025-09-02T09:29:35Z