command "mal" completed successfully
malcontent scan completed successfully for 1 APKs in 7s
creating packages tarball...
running command tar [-C packages -cf packages.tar .]
command "tar" completed successfully
packages.tar sha256sum: c91f5f6f4691bb6d54a2a273a5e2e2087a2a02bb01bf1b75d789364e5a493c24
sha256sum "c91f5f6f4691bb6d54a2a273a5e2e2087a2a02bb01bf1b75d789364e5a493c24" written to /dev/termination-log
Built 1 packages, hash: c91f5f6f4691bb6d54a2a273a5e2e2087a2a02bb01bf1b75d789364e5a493c24, size: 1054720 bytes
uploading final packages tarball...
running command curl [-s --upload-file packages.tar -H Content-Type: application/octet-stream https://storage.googleapis.com/prod-bundle-staging/eco-2-28/x86_64/1764773879729699115-iptables-wrappers-2-r4.tar.gz?Expires=1764817079&GoogleAccessId=ebuild-456o8jve9m82pzkyd0rxyya%40prod-enforce-fabc.iam.gserviceaccount.com&Signature=y5wXEaCbWqLJnZQZRtdBHBh91JhOlhtnso93W808ZcFL7AYCmD8q8porjsWbZUQ8xdksfdyLbsGXALcLqTvIr1PrBvy4FlaX9eK499php%2F3Z%2BgDQXlzbGwLlqLE6ElTs8cDLUeHQGLp%2FatU2HQXQpJA5AAr89w7RII4pDrW8RyY%2BZRViQRmqnMUFFSrfgm2XY2lv6yOWbEBfvSMwh6MJ7pjsOs00XCU5LB8TPyzgj5gpEM%2BKl3a%2FXB2u3%2BwUH8JhSzADZtbm83x14pQfylo4zVdjZ37Iw10UTOaB6yY8NcYux%2FR93a%2Bp%2BuZrgwRxTPiYB%2Fk4H0XzpS0WZtz74H09jg%3D%3D]
command "curl" completed successfully
upload completed successfully
parsed env
configuring puller identity "e2fa069c57acc83f3f2748a8bed50e44dff064dc/dcb8fb2f15475910"...
running command chainctl [auth login --audience apk.cgr.dev --identity e2fa069c57acc83f3f2748a8bed50e44dff064dc/dcb8fb2f15475910]
Successfully exchanged token.
Valid! Id: e2fa069c57acc83f3f2748a8bed50e44dff064dc/dcb8fb2f15475910
Updates are available for chainctl (current version: 0.2.180; latest: 0.2.182). To install, please run:
    $ chainctl update
command "chainctl" completed successfully
puller identity configured successfully
puller identity configured successfully
running tests...
running command /usr/bin/dind [dockerd] in background
command "/usr/bin/dind" started successfully
running command bash [-c 
  # Retry up to 60 seconds to wait for docker to start.
  worked=false
  for i in $(seq 60); do
    if docker info >/dev/null 2>&1; then
	  worked=true
	  break
    fi
    echo "docker healthcheck failed, docker is not ready, retrying... ($i/60 seconds so far)..."
    sleep 1
  done

  if [ "$worked" = "false" ]; then
    echo "Failed to start docker after 60 seconds"
    exit 1
  fi
]
command "bash" completed successfully
running command melange [test iptables-wrappers.yaml --gcplog --source-dir iptables-wrappers --test-package-append wolfi-base --arch=x86_64 --env-file=build-x86_64.env --pipeline-dirs=./pipelines --runner=qemu --repository-append=https://apk.cgr.dev/chainguard --repository-append=https://apk.cgr.dev/chainguard-private --repository-append=https://apk.cgr.dev/chainguard-2.28 --repository-append=https://apk.cgr.dev/chainguard-2.28-presubmit/e886340aa2390e50bf307ab3ce92263d2fe5d051 --test-package-append=ct-manylinux-2.28 --test-package-append=gcc-14-default --repository-append=https://apk.cgr.dev/chainguard-2.28-presubmit/e886340aa2390e50bf307ab3ce92263d2fe5d051]
melange v0.34.1 with runner qemu is testing:
image configuration:
  contents:
    build repositories: []
    runtime repositories: []
    repositories: []
    keyring:      []
    packages:     [iptables-wrappers]
  accounts:
    runas:  
    users:
      - uid=1000(build) gid=1000
    groups:
      - gid=1000(build) members=[build]
installing wolfi-baselayout (20230201-r24)
installing ca-certificates-bundle (20251003-r0)
installing glibc-locale-posix (2.42-r4)
installing glibc (2.42-r4)
installing ld-linux (2.42-r4)
installing libgcc (15.2.0-r6)
installing oldlibstdcxx-2.28 (8.5.0-r1)
installing libstdc++ (15.2.0-r6)
installing ct-manylinux-2.28-gcc-14 (1.28.0-r87)
installing ct-manylinux-2.28 (1.28.0-r87)
installing gmp (6.3.0-r8)
installing mpfr (4.2.2-r2)
installing mpc (1.3.1-r7)
installing posix-cc-wrappers (2-r7)
installing isl (0.27-r4)
installing zlib (1.3.1-r51)
installing libzstd1 (1.5.7-r5)
installing libstdc++-14 (14.3.0-r8)
installing libstdc++-14-dev (14.3.0-r8)
installing libquadmath (15.2.0-r6)
installing binutils (2.45.1-r2)
installing openssf-compiler-options (20250904-r1)
installing libxcrypt (4.5.2-r0)
installing libxcrypt-dev (4.5.2-r0)
installing nss-db (2.42-r4)
installing nss-hesiod (2.42-r4)
installing linux-headers (6.18-r0)
installing glibc-dev (2.42-r4)
installing gcc-14 (14.3.0-r8)
installing libgfortran-14 (14.3.0-r8)
installing gfortran-14 (14.3.0-r8)
installing libgfortran (15.2.0-r6)
installing gcc-14-default (14.3.0-r8)
installing libmnl (1.0.5-r6)
installing libnftnl (1.3.0-r0)
installing xtables (1.8.11-r28)
installing iptables-wrappers (2-r4)
installing wolfi-keys (1-r12)
installing libcrypto3 (3.6.0-r4)
installing libssl3 (3.6.0-r4)
installing apk-tools (2.14.10-r9)
installing libcrypt1 (2.42-r4)
installing busybox (1.37.0-r50)
installing wolfi-base (1-r7)
populating workspace /tmp/melange-workspace-2740072005 from iptables-wrappers
qemu: generating ssh key pairs for ephemeral VM
qemu: generating SSH host key for VM
qemu: generating base initramfs
image configuration:
  contents:
    build repositories: [https://apk.cgr.dev/chainguard]
    runtime repositories: []
    repositories: []
    keyring:      []
    packages:     [microvm-init]

.37.0-r50)
installing ct-manylinux-2.28-gcc-14 (1.28.0-r87)
installing oldlibstdcxx-2.28 (8.5.0-r1)
installing ct-manylinux-2.28 (1.28.0-r87)
installing libcrypto3 (3.6.0-r4)
installing gdbm (1.26-r1)
installing readline (8.3-r1)
installing sqlite-libs (3.51.1-r0)
installing heimdal-libs (7.8.0-r42)
installing cyrus-sasl (2.1.28-r45)
installing libbrotlicommon1 (1.2.0-r1)
installing libbrotlidec1 (1.2.0-r1)
installing libcom_err (1.47.3-r1)
installing keyutils-libs (1.6.3-r37)
installing libssl3 (3.6.0-r4)
installing libverto (0.3.2-r6)
installing krb5-conf (1.0-r7)
installing krb5-libs (1.22.1-r1)
installing libldap-2.6 (2.6.10-r7)
installing libnghttp2-14 (1.68.0-r0)
installing nghttp3 (1.13.1-r0)
installing libunistring (1.4.1-r1)
installing libidn2 (2.3.8-r3)
installing libpsl (0.21.5-r6)
installing libcurl-openssl4 (8.17.0-r0)
installing libexpat1 (2.7.3-r0)
installing libpcre2-8-0 (10.47-r0)
installing git (2.52.0-r0)
installing go-1.25 (1.25.5-r0)
running step "git-checkout"
[git checkout] repo='https://github.com/kubernetes-sigs/iptables-wrappers' dest='.' depth='unset' branch='' tag='v2' expcommit='e139a115350974aac8a82ec4b815d2845f86997e' recurse='false'
[git checkout] execute: git config --global --add safe.directory /tmp/tmp.TzL7jq
[git checkout] execute: git config --global --add safe.directory /home/build
[git checkout] execute: git clone --quiet --origin=origin --config=user.name=Melange Build --config=user.email=melange-build@cgr.dev --config=advice.detachedHead=false --branch=v2 --depth=1 https://github.com/kubernetes-sigs/iptables-wrappers /tmp/tmp.TzL7jq
[git checkout] execute: cd /tmp/tmp.TzL7jq
[git checkout] tar -c . | tar -C "/home/build" -x
[git checkout] execute: cd /home/build
[git checkout] execute: git config --global --add safe.directory /home/build
[git checkout] execute: git fetch --quiet origin --depth=1 --no-tags +refs/tags/v2:refs/origin/tags/v2
[git checkout] execute: git checkout --quiet origin/tags/v2
[git checkout] tag v2 is e139a115350974aac8a82ec4b815d2845f86997e
[git checkout] execute: git fetch origin master:master
From https://github.com/kubernetes-sigs/iptables-wrappers
 * [new branch]      master     -> master
 * [new tag]         v1         -> v1
[git checkout] execute: env GIT_COMMITTER_DATE=@1764773643 git cherry-pick -x 680003b3c6e93b471a59ecc9ae87a8f9054b82f3
[detached HEAD 2281fa1] Convert iptables-wrapper to a static go program
 Author: Guillermo Gaston <gaslor@amazon.com>
 Date: Fri Feb 10 00:31:20 2023 +0000
 17 files changed, 527 insertions(+), 144 deletions(-)
 create mode 100644 .gitignore
 create mode 100644 go.mod
 create mode 100644 internal/commands/run.go
 create mode 100644 internal/files/exist.go
 create mode 100644 internal/iptables/alternatives.go
 create mode 100644 internal/iptables/detect.go
 create mode 100644 internal/iptables/rules.go
 create mode 100644 internal/iptables/xtables.go
 create mode 100644 main.go
[git checkout] Cherry-picked 680003b3c6e93b471a59ecc9ae87a8f9054b82f3 from master with comment: Convert iptables-wrapper to a static go program
[git checkout] applied 1 cherry-pick(s). head is now 2281fa10de8c149c1206973773266c37046cc77a
running step "go/build"
running step "Rename go binary to use upstream name"
retrieving workspace from builder: 
retrieved and wrote post-build workspace to: /tmp/melange-workspace-859871912
running package linters for iptables-wrappers
linting apk: iptables-wrappers
no lint findings to persist for package iptables-wrappers
checking license information
  LICENSE: Apache-2.0 (1.000000) (notice)
checking gathered license information against the configuration
no license differences detected
license information check complete
invalid license: NOASSERTION
generating package iptables-wrappers-2-r4
scanning for ld.so.conf.d files...
scanning for shared object dependencies...
scanning for commands...
  found command usr/bin/iptables-wrapper
scanning for -doc package...
scanning for pkg-config data...
scanning for python modules...
scanning for ruby gems...
scanning for shbang deps...
  runtime:
    xtables
  provides:
    cmd:iptables-wrapper=2-r4
  installed-size: 2362943
  data.tar.gz digest: a9de30fe8f615095e8d193b3b95a4aff5a6f2b62bc5ec953c5204106772875fb
wrote packages/aarch64/iptables-wrappers-2-r4.apk
cleaning Workspace by removing 19 file/directories in /home/build
generating apk index from packages in packages/aarch64
processing package packages/aarch64/iptables-wrappers-2-r4.apk
updating index at packages/aarch64/APKINDEX.tar.gz with new packages: [iptables-wrappers-2-r4]
build completed successfully
running malcontent scan...
found 1 APK files to scan
scanning packages/aarch64/iptables-wrappers-2-r4.apk -> packages/iptables-wrappers-2-r4/mal-scan.json
running command mal [--format=json --exit-extraction=false --min-risk=critical --min-file-risk=critical --quantity-increases-risk=true --output=packages/iptables-wrappers-2-r4/mal-scan.json scan packages/aarch64/iptables-wrappers-2-r4.apk]
command "mal" completed successfully
malcontent scan completed successfully for 1 APKs in 6s
creating packages tarball...
running command tar [-C packages -cf packages.tar .]
command "tar" completed successfully
packages.tar sha256sum: 4ef42b6f1448953f3ff3451b07dc497c5210504376f1b1a3e2578fb714a19aa4
sha256sum "4ef42b6f1448953f3ff3451b07dc497c5210504376f1b1a3e2578fb714a19aa4" written to /dev/termination-log
Built 1 packages, hash: 4ef42b6f1448953f3ff3451b07dc497c5210504376f1b1a3e2578fb714a19aa4, size: 974848 bytes
uploading final packages tarball...
running command curl [-s --upload-file packages.tar -H Content-Type: application/octet-stream https://storage.googleapis.com/prod-bundle-staging/eco-2-28/aarch64/1764773879729628155-iptables-wrappers-2-r4.tar.gz?Expires=1764817079&GoogleAccessId=ebuild-456o8jve9m82pzkyd0rxyya%40prod-enforce-fabc.iam.gserviceaccount.com&Signature=H%2FBg6gEjrWAUtksZiS12fTcBJM4ioOIW1mF8iUpvLbj8TQGeIMnzIf4%2BPT0YSABmZR7jdqfVnfQkIR0t21GF4aoxeAzMwjMyOyR4fYnl%2BmVJ37gzrV4uHAVAuadiCcX%2BiaOgrj0AJZYect7TUmvZW5fyX5em1CCXq54sJTcoQLFeuZAEZSOLhqaq1LPUkzxJFSH%2Bd0vC0O1%2Fq3zH5NViGEcqpz5jRz6L00Q0Y8bbawr1hAg3CEav0lHq5%2BXTYxOIPSOXI8BX6qB4x2Eht6lZSJb291PUEbI32poCA7h2e8nLYDlT7yZdHJIYY9%2F6t65u7HvV2IBPE7yDdPj4aaGomw%3D%3D]
command "curl" completed successfully
upload completed successfully
parsed env
configuring puller identity "e2fa069c57acc83f3f2748a8bed50e44dff064dc/dcb8fb2f15475910"...
running command chainctl [auth login --audience apk.cgr.dev --identity e2fa069c57acc83f3f2748a8bed50e44dff064dc/dcb8fb2f15475910]
Successfully exchanged token.
Valid! Id: e2fa069c57acc83f3f2748a8bed50e44dff064dc/dcb8fb2f15475910
Updates are available for chainctl (current version: 0.2.180; latest: 0.2.182). To install, please run:
    $ chainctl update
command "chainctl" completed successfully
puller identity configured successfully
puller identity configured successfully
running tests...
running command /usr/bin/dind [dockerd] in background
command "/usr/bin/dind" started successfully
running command bash [-c 
  # Retry up to 60 seconds to wait for docker to start.
  worked=false
  for i in $(seq 60); do
    if docker info >/dev/null 2>&1; then
	  worked=true
	  break
    fi
    echo "docker healthcheck failed, docker is not ready, retrying... ($i/60 seconds so far)..."
    sleep 1
  done

  if [ "$worked" = "false" ]; then
    echo "Failed to start docker after 60 seconds"
    exit 1
  fi
]
command "bash" completed successfully
running command melange [test iptables-wrappers.yaml --gcplog --source-dir iptables-wrappers --test-package-append wolfi-base --arch=aarch64 --env-file=build-aarch64.env --pipeline-dirs=./pipelines --runner=docker --repository-append=https://apk.cgr.dev/chainguard --repository-append=https://apk.cgr.dev/chainguard-private --repository-append=https://apk.cgr.dev/chainguard-2.28 --repository-append=https://apk.cgr.dev/chainguard-2.28-presubmit/e886340aa2390e50bf307ab3ce92263d2fe5d051 --test-package-append=ct-manylinux-2.28 --test-package-append=gcc-14-default --repository-append=https://apk.cgr.dev/chainguard-2.28-presubmit/e886340aa2390e50bf307ab3ce92263d2fe5d051]
melange v0.34.1 with runner docker is testing:
image configuration:
  contents:
    build repositories: []
    runtime repositories: []
    repositories: []
    keyring:      []
    packages:     [iptables-wrappers]
  accounts:
    runas:  
    users:
      - uid=1000(build) gid=1000
    groups:
      - gid=1000(build) members=[build]
installing wolfi-baselayout (20230201-r24)
installing ca-certificates-bundle (20251003-r0)
installing glibc-locale-posix (2.42-r4)
installing ld-linux (2.42-r4)
installing glibc (2.42-r4)
installing libgcc (15.2.0-r6)
installing oldlibstdcxx-2.28 (8.5.0-r1)
installing libstdc++ (15.2.0-r6)
installing ct-manylinux-2.28-gcc-14 (1.28.0-r87)
installing ct-manylinux-2.28 (1.28.0-r87)
installing gmp (6.3.0-r8)
installing mpfr (4.2.2-r2)
installing mpc (1.3.1-r7)
installing posix-cc-wrappers (2-r7)
installing isl (0.27-r4)
installing zlib (1.3.1-r51)
installing libzstd1 (1.5.7-r5)
installing libstdc++-14 (14.3.0-r8)
installing libstdc++-14-dev (14.3.0-r8)
installing libquadmath (15.2.0-r6)
installing binutils (2.45.1-r2)
installing openssf-compiler-options (20250904-r1)
installing libxcrypt (4.5.2-r0)
installing libxcrypt-dev (4.5.2-r0)
installing nss-db (2.42-r4)
installing nss-hesiod (2.42-r4)
installing linux-headers (6.18-r0)
installing glibc-dev (2.42-r4)
installing gcc-14 (14.3.0-r8)
installing libgfortran-14 (14.3.0-r8)
installing gfortran-14 (14.3.0-r8)
installing libgfortran (15.2.0-r6)
installing gcc-14-default (14.3.0-r8)
installing libmnl (1.0.5-r6)
installing libnftnl (1.3.0-r0)
installing xtables (1.8.11-r28)
installing iptables-wrappers (2-r4)
installing wolfi-keys (1-r12)
installing libcrypto3 (3.6.0-r4)
installing libssl3 (3.6.0-r4)
installing apk-tools (2.14.10-r9)
installing libcrypt1 (2.42-r4)
installing busybox (1.37.0-r50)
installing wolfi-base (1-r7)
layer digest: sha256:6464722f2a9138b8082532422278a932ca9dc3064c1b873e63c7d950103c5132
layer diffID: sha256:f463ffc9c086202e8ad8a291fa5e3deb79e3dee8795e6cd9abe3b72049ea30c0
saving OCI image locally: apko.local/cache:f3f17aa18bf8c8ddc297921b9e323757c0218ba793552d1db980f34833b958a6