Skip to content

test case: canister sandbox panic #3105

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Closed
wants to merge 18 commits into from
Closed

Conversation

nomeata
Copy link
Collaborator

@nomeata nomeata commented Feb 6, 2022

upgrades drun, disables crashing amounts in basic-cycles.mo and exhibits the panic in canster-sandbox-panic.mo until upstream has fixed that. Reported bug at https://forum.dfinity.org/t/10729?u=nomeata

dfinity-bot and others added 3 commits January 30, 2022 01:09
## Changelog for ic:
Branch: master
Commits: [dfinity/ic@b1fa6ab6...0d859159](dfinity/ic@b1fa6ab...0d85915)

* [`5a56b4bf`](dfinity/ic@5a56b4b) Improve error handling in the `summary` script
* [`c72d08db`](dfinity/ic@c72d08d) Implement http_requests feature flag
* [`9648a21c`](dfinity/ic@9648a21) Update generic-array to 0.12.4 / 0.14.5
* [`9def186b`](dfinity/ic@9def186) ROSETTA1-156 - Return list of operations instead of requests
* [`e5c897e7`](dfinity/ic@e5c897e) Upgrade wasmtime to version 0.30.0
* [`3cf02963`](dfinity/ic@3cf0296) Fix Prod Generic Test
* [`3bcf7214`](dfinity/ic@3bcf721) EXC-844: Fix the hypervisor allocated pages metric for sandbox
* [`0e699122`](dfinity/ic@0e69912) Update tar to 0.4.38
* [`98a59a27`](dfinity/ic@98a59a2) Fix Legacy Test after removing ingress-bytes-per-block-soft-cap
* [`4dcab226`](dfinity/ic@4dcab22) EXC-713 Implement step for Memory Test Canister
* [`64f34f25`](dfinity/ic@64f34f2) Catchup log
* [`bef2993f`](dfinity/ic@bef2993) Update nalgebra by updating statrs to 0.15.0
* [`b09c11f5`](dfinity/ic@b09c11f) EXC-826: Register callbacks within sandbox
* [`3de02e68`](dfinity/ic@3de02e6) Add invariants checks in scheduler
* [`2cc4af11`](dfinity/ic@2cc4af1) Make the networking team owners of the rpc_bridge interface
* [`11d8e2ae`](dfinity/ic@11d8e2a) Adding Gregory's public key to ssh_authorized_keys/admin
* [`5596d57a`](dfinity/ic@5596d57) Increase the query timeout in the WG for queries to 5 min
* [`2961e748`](dfinity/ic@2961e74) Do not run cargo pipeline and prod-generic-test when irrelevant files like CODEOWNERS are changed [lessci]
* [`b0a3c45c`](dfinity/ic@b0a3c45) Update zeroize_derive to 1.2.2
* [`eb9f3039`](dfinity/ic@eb9f303) EXC-523: Temporarily re-enable canister sandbox on Linux
* [`3e579633`](dfinity/ic@3e57963) Update the owners of rs/interfaces/src/transport, rs/workload_generator and subnet_query_workload
* [`9cd1a08c`](dfinity/ic@9cd1a08) Cache finalized chain (CON-735)
* [`a5a9ddd0`](dfinity/ic@a5a9ddd) [bugfix] Fix definitions of the CI jobs running farm based tests
* [`7d02e30c`](dfinity/ic@7d02e30) [minor] Do not forward a summary of tests to a file
* [`9e353810`](dfinity/ic@9e35381) Registering canisters metric at the end of loop based on executed canister list
* [`1f35f006`](dfinity/ic@1f35f00) [IC-718] ledger archive: add get_blocks candid endpoint
* [`2a57a713`](dfinity/ic@2a57a71) Update strum crate version to the newest available
* [`9c97e11d`](dfinity/ic@9c97e11) Replace plain comments with doc comments
* [`646d0f93`](dfinity/ic@646d0f9) Ledger spec minor fixes
* [`ecffc1e0`](dfinity/ic@ecffc1e) Added annotations
* [`fed5664f`](dfinity/ic@fed5664) OR-30 Remove the legacy test for the migrated one
* [`b5d5ff1e`](dfinity/ic@b5d5ff1) New targets request rates for the benchmarks
* [`93548f4f`](dfinity/ic@93548f4) Change the rs/drun ownership to execution team
* [`2a0fead2`](dfinity/ic@2a0fead) Print the build ID at the bottom of job output so that it is easy to find
* [`1272f6f4`](dfinity/ic@1272f6f) Changed the backoff strategy for the workload generator
* [`931e5ac4`](dfinity/ic@931e5ac) [NODE-332] [NODE-333] ssh and replica AVC denial fixes
* [`f85dbe2a`](dfinity/ic@f85dbe2) [minor] Use default ES hosts for local runs of tests
* [`6353e250`](dfinity/ic@6353e25) Optimize the Threshold ECDSA protocol
* [`b33a1699`](dfinity/ic@b33a169) FOLLOW-370: Continue to attempt to validate a block even when an invalid notarization is found
* [`6fc5d9b5`](dfinity/ic@6fc5d9b) [Minor] Run rosetta system-tests pre-master
* [`9d70bb03`](dfinity/ic@9d70bb0) [VER-1342] Replace std-sleep with async counterpart
* [`a5d15e9f`](dfinity/ic@a5d15e9) Implements node re-assignment
* [`64fa1642`](dfinity/ic@64fa164) [NODE-316] Only keep ./rootfs/opt/ic/bin/boundary-node-control-plane copy of boundary-node-control-plane
* [`411e5901`](dfinity/ic@411e590) CRP-1256/FOLLOW-436 PublicCoefficients::lagrange_coefficients_at_zero should reject duplicate inputs
* [`c07534b0`](dfinity/ic@c07534b) CON-700: Slow consensus down when the gap between finalization and the last cup gets too large
* [`d3a3a09c`](dfinity/ic@d3a3a09) http 1.1 for upstream
* [`3063a34b`](dfinity/ic@3063a34) Fix stale comment in the memory tracker
* [`7cfd27ee`](dfinity/ic@7cfd27e) [NET-839] Use  dedicated OS threads for peer flows
* [`c9611955`](dfinity/ic@c961195) EXC-610: Add query workload for upgrade/downgrade tests
* [`665b6213`](dfinity/ic@665b621) [NODE-191] Mark orchestrator and replica as permissive domains
* [`8f5f8413`](dfinity/ic@8f5f841) CRP-472: Use random number generator from CSP instead of OpenSSL for TLS keygen
* [`3be7d52c`](dfinity/ic@3be7d52) [bugfix] Classify a pot as failed if the farm service fails to create a group
* [`4390c047`](dfinity/ic@4390c04) Log blockhash when delivering batch
* [`52a84407`](dfinity/ic@52a8440) Update tiny_http to 0.10.0
* [`bf2783b4`](dfinity/ic@bf2783b) [NODE-258] SELinux policy for canister sandbox
* [`8b195b97`](dfinity/ic@8b195b9) cdslo testnet default node to subnet assignment
* [`8aabb69d`](dfinity/ic@8aabb69) In canonical_error accept String instead of &str in the constructors
* [`e9e769ea`](dfinity/ic@e9e769e) BTC Adapter
* [`41087b8b`](dfinity/ic@41087b8) [bugfix] Fix a concurrency issue in the test framework
* [`cf57f566`](dfinity/ic@cf57f56) CRP-1158+CRP-1159 Add ZK proofs of equality, product, and for MEGa
* [`f56f22c8`](dfinity/ic@f56f22c) Add BIP32 key derivation for Threshold ECDSA
* [`71102dd2`](dfinity/ic@71102dd) [Minor] Remove randomness from create_subnet test
* [`51336fa5`](dfinity/ic@51336fa) [NODE-317] Update node_exporter in boundary-guestos to match guestos
* [`f6b9979d`](dfinity/ic@f6b9979) EXC-750: Remove dependency on ic-cow-state from other crates
* [`e398e330`](dfinity/ic@e398e33) Elastic Search integration for perf dashboard
* [`3a3f8bcf`](dfinity/ic@3a3f8bc) CON-714: Use BTreeSet to ensure share signatures are deduplicated when aggregating
* [`bed7e430`](dfinity/ic@bed7e43) [Minor] Remove temporary artifacts dir
* [`52d2b8ae`](dfinity/ic@52d2b8a) [Minor] Log root_key in health check
* [`49005b67`](dfinity/ic@49005b6) [Bugfix] Rename pipeline job to reflect correct stage
* [`62aedd90`](dfinity/ic@62aedd9) [Bugfix] Rename GIT_REVISION to IC_VERSION_ID
* [`9cca1f72`](dfinity/ic@9cca1f7) [VER-1331] Track finalization rate of generic-hourly from each CI run.
* [`3f2a1c82`](dfinity/ic@3f2a1c8) EXC-827: Handle all syscalls in sandbox
* [`34120713`](dfinity/ic@3412071) EXC-854: Create canister when max_number_of_canisters == 0 comment
* [`d4b07d06`](dfinity/ic@d4b07d0) Improve registry canister integration test performance
* [`4d60e663`](dfinity/ic@4d60e66) NNS1-983: Add command to ic-admin to remove node operators
* [`1e2d622d`](dfinity/ic@1e2d622) [ROSETTA1-194] Dockerfiles for local building of ic-rosetta-api/ledger-canister.wasm
* [`8e1199e2`](dfinity/ic@8e1199e) .gitlab/CODEOWNERS: fix owners of the subnet_recovery tests
* [`951140c0`](dfinity/ic@951140c) Fix perf installation
* [`29232e1c`](dfinity/ic@29232e1) ER-2143: Blocks do not need to be requested again once they are in the block cache.
* [`1a84932e`](dfinity/ic@1a84932) CRP-905/906: Remove directory creation and permission setting from crypto code
* [`816b7104`](dfinity/ic@816b710) Adjust query median latency threshold
* [`036416ab`](dfinity/ic@036416a) OR-12: remove cup persistence at a deprecated path
* [`0f70e725`](dfinity/ic@0f70e72) Silence warnings for cargo clippy in rosetta-api
* [`c2fc3d0f`](dfinity/ic@c2fc3d0) Add an option to set the maximum allowed size for ingress messages for testnet deployment
* [`23702278`](dfinity/ic@2370227) [VER-1322] LocalRegistry
* [`d99a51d9`](dfinity/ic@d99a51d) [Minor] Wait in create subnet after node becomes healthy
* [`81046601`](dfinity/ic@8104660) [NET-860] Reduce scope of query call latency calculation.
* [`f8fab26f`](dfinity/ic@f8fab26) initial ECDSA key transcript generation
* [`fd4c385a`](dfinity/ic@fd4c385) Replace redundant method for pb encoding
* [`fe88223a`](dfinity/ic@fe88223) NNS1-572: Remove "hwywo" node record for invalid NO field in post-upgrade
* [`c1bbb9e3`](dfinity/ic@c1bbb9e) [Bugfix] Correctly report panics that throw str
* [`4d64d604`](dfinity/ic@4d64d60) NNS1-909 make Ledger transaction fee configurable
* [`a2189415`](dfinity/ic@a218941) Removed benchmarkxsmall03/04 and moved their host machines to farm
* [`7d54686c`](dfinity/ic@7d54686) Adding Severin's public key to ssh_authorized_keys/admin
* [`870ee9ca`](dfinity/ic@870ee9c) ROSETTA1-180 add check for ledger.did backward compatibility
* [`95cb45f5`](dfinity/ic@95cb45f) ER-2146: Adapter: Refactor sync_blocks to eliminate request counter.
* [`53ef3ec9`](dfinity/ic@53ef3ec) [OR-57] Extract RegistryReplicator to its own crate
* [`f4985c40`](dfinity/ic@f4985c4) Clean deceiving error
* [`81c04d4f`](dfinity/ic@81c04d4) [NNS1-1034] Ensure age is not lost during a non-dissolving merge
* [`2ae0465b`](dfinity/ic@2ae0465) NNS1-798: Proposal title length (in bytes) must be at least 5.
* [`a7ca2b3e`](dfinity/ic@a7ca2b3) NNS1-937: Add checks for registry version invariants
* [`20d81f39`](dfinity/ic@20d81f3) [Minor] Improve logging in reassignment test
* [`9f163a9c`](dfinity/ic@9f163a9) [NET-839] Remove the TransportClientType
* [`de5511d3`](dfinity/ic@de5511d) EXC-783: Remove limit on Cycles in a canister
* [`cbe435a3`](dfinity/ic@cbe435a) [OR-59] Make RegistryReplicator take node_id optionally
* [`bc60851c`](dfinity/ic@bc60851) Test translation to Rust node_graceful_leaving
* [`c0361a2d`](dfinity/ic@c0361a2) rs/ic_fondue: log output of build-bootstrap-config-image.sh in case it fails
* [`3e744fa7`](dfinity/ic@3e744fa) Added 99th percentile latency
* [`615e7548`](dfinity/ic@615e754) Fix VER-1441
* [`c041fc3b`](dfinity/ic@c041fc3) Added a test that makes sure that --features test is always used when running tests.
* [`5beb1d05`](dfinity/ic@5beb1d0) Ledger canister - limit max number of accounts to a lower number
* [`97a308ad`](dfinity/ic@97a308a) Fix for https://dfinity.slack.com/archives/C018WHN6R2L/p1643277703058300
* [`1efc4bf5`](dfinity/ic@1efc4bf) Add additional control check to merge_neuron
* [`dbf8a779`](dfinity/ic@dbf8a77) gitlab-ci/src/after_script: include git commit in slack messages
* [`73ed72ca`](dfinity/ic@73ed72c) Switch the ownership of the WG to the node team.
* [`efacce82`](dfinity/ic@efacce8) Disable capsule [lessci]
* [`3398b1b3`](dfinity/ic@3398b1b) [NNS1-762] ledger: expose endpoints for fetching candid interface
* [`a4adf0d0`](dfinity/ic@a4adf0d) Dedupe transcripts (CON-735)
* [`a0c94ef7`](dfinity/ic@a0c94ef) [IC-1050] fix max-capacity-experiment-1 name
* [`2bc6e78c`](dfinity/ic@2bc6e78) OR-51: Remove unused code
* [`36aac362`](dfinity/ic@36aac36) Don't consider latencies from failed requests to calculate latency stats
* [`5ee0df42`](dfinity/ic@5ee0df4) Simplify Build-ID calculation with newer capsule [moreci]
* [`0c5ef412`](dfinity/ic@0c5ef41) Temporarily disable test
* [`3794b490`](dfinity/ic@3794b49) ER-2147: BTC Adapter: Support multiple blocks in GetSuccessors
* [`261b0f51`](dfinity/ic@261b0f5) Fix a bug in creating initial ecdsa transcript
@nomeata
Copy link
Collaborator Author

nomeata commented Feb 6, 2022

This triggers

ingress Completed: Reply: 0x4449444c016c01b3c4b1f204680100010a00000000000000000101
ingress Completed: Reply: 0x4449444c0000
debug.print: topping up
thread '<unnamed>' panicked at 'Failed to serialize message: ErrorImpl { code: Message("The number can't be stored in CBOR"), offset: 0 }', /build/rs/canister_sandbox/common/src/transport.rs:285:55
note: run with `RUST_BACKTRACE=1` environment variable to display a backtrace
thread 'MR Batch Processor' panicked at 'Thread pool worker panicked', /build/drun-vendor.tar.gz/scoped_threadpool/src/lib.rs:236:13
thread 'main' panicked at 'Failed to send batch 24: background worker is dead', messaging/src/message_routing.rs:949:51

@nomeata
Copy link
Collaborator Author

nomeata commented Feb 6, 2022

This seems to come from https://rustdoc.etonomy.org/src/serde_cbor/ser.rs.html#267-279 or https://rustdoc.etonomy.org/src/serde_cbor/ser.rs.html#302-308, i.e serialize_u128 or serialize_u64. Looks like there is u128 or i128 used somewhere in the system API, and the sandbox uses CBOR, but serde doesn’t support that (despite the fact that CBOR does, via bignums).

@nomeata
Copy link
Collaborator Author

nomeata commented Feb 6, 2022

Related: pyfisch/cbor#77 and pyfisch/cbor#145

@nomeata
Copy link
Collaborator Author

nomeata commented Feb 6, 2022

BTW, looks like cbor_serde is no longer maintained by upstream: https://github.com/pyfisch/cbor. It recommends two other libraries. And https://crates.io/crates/ciborium at least get CBOR numbers right (always encodes at smallest size)

@nomeata
Copy link
Collaborator Author

nomeata commented Feb 6, 2022

Maybe we can actually merge this, so that we notice other breakage in drun in the meantime.

@nomeata nomeata added the automerge-squash When ready, merge (using squash) label Feb 6, 2022
@github-actions
Copy link

github-actions bot commented Feb 6, 2022

Comparing from defd131 to bf8ec4d:
The produced WebAssembly code seems to be completely unchanged.

Copy link
Contributor

@ggreif ggreif left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Do we need an issue for the commented-out tests?

@nomeata
Copy link
Collaborator Author

nomeata commented Feb 13, 2022

@nomeata
Copy link
Collaborator Author

nomeata commented Feb 13, 2022

Hmm, looks like drun on MacOS isn’t using the canister sandbox, so there we get different output. Maybe we can just wait for the bug to be fixed.

@nomeata
Copy link
Collaborator Author

nomeata commented Mar 21, 2022

@ulan says that this is fixed. Let’s see…

@nomeata
Copy link
Collaborator Author

nomeata commented Mar 21, 2022

I see

       >   The package requires the Cargo feature called `named-profiles`, but that feature is not stabilized in this version of Cargo (1.56.0).
       >   Consider adding `cargo-features = ["named-profiles"]` to the top of Cargo.toml (above the [package] table) to tell Cargo you are opting in to use this unstable feature.
       >   See https://doc.rust-lang.org/nightly/cargo/reference/unstable.html#custom-named-profiles for more information about the status of this feature.

Do we need to update rust and/or cargo maybe? @ggreif didn’t you recently try to bump rust?

## Changelog for nixpkgs:
Branch: release-21.11
Commits: [NixOS/nixpkgs@d1e59cfc...a8217b4d](NixOS/nixpkgs@d1e59cf...a8217b4)

* [`a731c9b7`](NixOS/nixpkgs@a731c9b) weechat: fix certificate validation with modified gnutls options
* [`d6d6772c`](NixOS/nixpkgs@d6d6772) firefox: 98.0 -> 98.0.1
* [`e61f1841`](NixOS/nixpkgs@e61f184) firefox-esr-91-unwrapped: 91.7.0esr -> 91.7.1esr
* [`732c0bdf`](NixOS/nixpkgs@732c0bd) nats-streaming-server: add patch for CVE-2022-26652
* [`a3b33742`](NixOS/nixpkgs@a3b3374) vscodium: 1.65.1 -> 1.65.2
* [`1e717094`](NixOS/nixpkgs@1e71709) open-vm-tools: 11.3.5 -> 12.0.0
* [`decd6b85`](NixOS/nixpkgs@decd6b8) Update pkgs/applications/virtualization/open-vm-tools/default.nix
* [`17bb305a`](NixOS/nixpkgs@17bb305) nheko: 0.9.1 -> 0.9.2
* [`77e62b87`](NixOS/nixpkgs@77e62b8) wiki-js: 2.5.274 -> 2.5.276
* [`52c24b93`](NixOS/nixpkgs@52c24b9) tailscale: 1.20.1 -> 1.22.1
* [`0ae4e052`](NixOS/nixpkgs@0ae4e05) openssl_3_0: 3.0.1 -> 3.0.2
* [`987dd131`](NixOS/nixpkgs@987dd13) openssl_1_1: 1.1.1m -> 1.1.1n
* [`9d1dc365`](NixOS/nixpkgs@9d1dc36) dysnomia: replace deprecated mysql reference by mariadb
* [`bcdca2c5`](NixOS/nixpkgs@bcdca2c) disnixos: 0.9.2 -> 0.9.3
* [`e2d0740d`](NixOS/nixpkgs@e2d0740) DisnixWebService: compile with OpenJDK8 to retain compatibility with Tomcat 9.x
* [`80659300`](NixOS/nixpkgs@8065930) brave: 1.36.111 -> 1.36.112
* [`165cec17`](NixOS/nixpkgs@165cec1) apacheHttpd: 2.4.52 -> 2.4.53
* [`dacb16be`](NixOS/nixpkgs@dacb16b) chromium: 99.0.4844.51 -> 99.0.4844.74
* [`b0ac55d4`](NixOS/nixpkgs@b0ac55d) linux: 4.14.271 -> 4.14.272
* [`fdee8a83`](NixOS/nixpkgs@fdee8a8) linux: 4.19.234 -> 4.19.235
* [`6d4c9b19`](NixOS/nixpkgs@6d4c9b1) linux: 4.9.306 -> 4.9.307
* [`936982d3`](NixOS/nixpkgs@936982d) linux: 5.10.105 -> 5.10.106
* [`6116b6b7`](NixOS/nixpkgs@6116b6b) linux: 5.15.28 -> 5.15.29
* [`1beb3ac7`](NixOS/nixpkgs@1beb3ac) linux: 5.16.14 -> 5.16.15
* [`db7fda07`](NixOS/nixpkgs@db7fda0) linux: 5.4.184 -> 5.4.185
* [`d3a6dc92`](NixOS/nixpkgs@d3a6dc9) linux_latest-libre: 18627 -> 18635
* [`04e06dfc`](NixOS/nixpkgs@04e06df) brave: 1.36.112 -> 1.36.116
* [`23bcc94a`](NixOS/nixpkgs@23bcc94) mautrix-whatsapp: 0.2.4 -> 0.3.0
* [`2604fe94`](NixOS/nixpkgs@2604fe9) electron_14: 14.2.6 -> 14.2.7
* [`c6054263`](NixOS/nixpkgs@c605426) electron_15: 15.4.0 -> 15.4.1
* [`363a7711`](NixOS/nixpkgs@363a771) electron_16: 16.0.10 -> 16.1.0
* [`2c645230`](NixOS/nixpkgs@2c64523) bind: 9.16.25 -> 9.16.27
* [`34d24c6f`](NixOS/nixpkgs@34d24c6) ungoogled-chromium: 99.0.4844.51 -> 99.0.4844.74
* [`7c8f58ec`](NixOS/nixpkgs@7c8f58e) perlPackages.NetSSLeay: add patch fixing build on macos monterey
* [`0a8e7682`](NixOS/nixpkgs@0a8e768) pirate-get: 0.4.1 -> 0.4.2
* [`60779b2f`](NixOS/nixpkgs@60779b2) grafana: 8.4.3 -> 8.4.4
* [`7ceebeb3`](NixOS/nixpkgs@7ceebeb) nodejs-12_x: 12.22.10 -> 12.22.11
* [`67e54f31`](NixOS/nixpkgs@67e54f3) nodejs-14_x: 14.19.0 -> 14.19.1
* [`1bbd049c`](NixOS/nixpkgs@1bbd049) nodejs-16_x: 16.14.0 -> 16.14.2
* [`fb0c4a41`](NixOS/nixpkgs@fb0c4a4) nodejs-17_x: 17.5.0 -> 17.7.2
* [`f4b037df`](NixOS/nixpkgs@f4b037d) python39Packages.scrapy: 2.5.1 -> 2.6.1
* [`71c72d61`](NixOS/nixpkgs@71c72d6) sdboot-builder: fix crash in exception handling
* [`936429d6`](NixOS/nixpkgs@936429d) openvpn: 2.5.2 -> 2.5.6, 2.4.11 -> 2.4.12 (security, CVE-2022-0547)
* [`a38cc57e`](NixOS/nixpkgs@a38cc57) wordpress: 5.8.3 -> 5.8.4 (security)
* [`a44485a9`](NixOS/nixpkgs@a44485a) gitlab: 14.8.2 -> 14.8.4 ([NixOS/nixpkgs⁠#164963](https://togithub.com/NixOS/nixpkgs/issues/164963))
* [`24dea223`](NixOS/nixpkgs@24dea22) libwebp: update source hash
* [`fabcb8ee`](NixOS/nixpkgs@fabcb8e) cawbird: 1.4.2 -> 1.5
* [`8441cb8a`](NixOS/nixpkgs@8441cb8) linuxPackages.lttng-modules: 2.13.1 -> 2.13.2
* [`8b488c55`](NixOS/nixpkgs@8b488c5) nixos/tests/kubernetes: disable rbac.singlenode.test, disable rbac.multinode.test
* [`15dcbc9f`](NixOS/nixpkgs@15dcbc9) linux: Enable BPF_UNPRIV_DEFAULT_OFF in 5.15
* [`9eb4e563`](NixOS/nixpkgs@9eb4e56) nixos/oauth2_proxy: add missing oidc providers ([NixOS/nixpkgs⁠#165000](https://togithub.com/NixOS/nixpkgs/issues/165000))
* [`c6f9f0a2`](NixOS/nixpkgs@c6f9f0a) ungoogled-chromium: 99.0.4844.74 -> 99.0.4844.82
* [`ce6837d0`](NixOS/nixpkgs@ce6837d) chromium: 99.0.4844.74 -> 99.0.4844.82
* [`ab684689`](NixOS/nixpkgs@ab68468) streamlink: 3.1.1 -> 3.2.0
* [`49f62325`](NixOS/nixpkgs@49f6232) sigi: 3.0.0 -> 3.0.2
* [`dab11935`](NixOS/nixpkgs@dab1193) peertube: 4.1.0 -> 4.1.1
* [`d7ee02de`](NixOS/nixpkgs@d7ee02d) nixos/tests/peertube: add check peertube cli
* [`d7b634db`](NixOS/nixpkgs@d7b634d) squashfsTools: 4.5 -> 4.5.1
* [`64c77a4a`](NixOS/nixpkgs@64c77a4) libressl_3_2: add patch for CVE-2022-0778
* [`613927b1`](NixOS/nixpkgs@613927b) wasm-pack: 0.10.1 -> 0.10.2
* [`974dc8e0`](NixOS/nixpkgs@974dc8e) libressl: 3.4.1 -> 3.4.2
* [`6a395040`](NixOS/nixpkgs@6a39504) libressl: 3.4.2 -> 3.4.3
* [`31aa631d`](NixOS/nixpkgs@31aa631) linuxPackages.rtl88x2bu: switch to the new, maintained repo
* [`cd6e8501`](NixOS/nixpkgs@cd6e850) tor-browser-bundle-bin: 11.0.7 -> 11.0.9
* [`0f3bf905`](NixOS/nixpkgs@0f3bf90) matrix-synapse: 1.54.0 -> 1.55.0
* [`118515de`](NixOS/nixpkgs@118515d) youtube-dl: update youtube.com download throttling patch
* [`f48dcc56`](NixOS/nixpkgs@f48dcc5) yt-dlp: 2022.1.21 -> 2022.2.3
* [`8dc6e600`](NixOS/nixpkgs@8dc6e60) yt-dlp: 2022.2.3 -> 2022.2.4
* [`f9b4fdbc`](NixOS/nixpkgs@f9b4fdb) yt-dlp: 2022.2.4 -> 2022.3.8.2, remove hlsEncrypt option, add SuperSandro200 as maintainer
* [`efb4f3ff`](NixOS/nixpkgs@efb4f3f) isso: 0.12.5 -> 0.12.6.1
* [`fa80524e`](NixOS/nixpkgs@fa80524) plasma-systemmonitor: add required dependencies
* [`22fc29d1`](NixOS/nixpkgs@22fc29d) firefox: 98.0.1 -> 98.0.2
* [`a78f0967`](NixOS/nixpkgs@a78f096) firefox-bin: 98.0.1 -> 98.0.2
* [`adcc6f5d`](NixOS/nixpkgs@adcc6f5) firefox: set consistent remoting name
* [`e78d5aae`](NixOS/nixpkgs@e78d5aa) keycloak: wrap all the shell scripts ([NixOS/nixpkgs⁠#165478](https://togithub.com/NixOS/nixpkgs/issues/165478))
* [`b0559e03`](NixOS/nixpkgs@b0559e0) php80: 8.0.16 -> 8.0.17
* [`69fbab6b`](NixOS/nixpkgs@69fbab6) signal-desktop: 5.35.0 -> 5.36.0
* [`412eb359`](NixOS/nixpkgs@412eb35) alloy: add alloy 6
* [`cd49b534`](NixOS/nixpkgs@cd49b53) linuxKernel.packages.linux_4_4: drop
* [`665b51e6`](NixOS/nixpkgs@665b51e) nextcloud: 22.2.5 -> 22.2.6, 23.0.2 -> 23.0.3
* [`3e201ab3`](NixOS/nixpkgs@3e201ab) [21.11] ldns: 1.7.1 -> 1.8.1 (security, backport) ([NixOS/nixpkgs⁠#165121](https://togithub.com/NixOS/nixpkgs/issues/165121))
* [`ddbb1d0d`](NixOS/nixpkgs@ddbb1d0) linux: 5.10.106 -> 5.10.107
* [`65e76642`](NixOS/nixpkgs@65e7664) linux: 5.15.29 -> 5.15.30
* [`0b2a76d0`](NixOS/nixpkgs@0b2a76d) linux: 5.16.15 -> 5.16.16
* [`d7ba27bc`](NixOS/nixpkgs@d7ba27b) linux: 5.4.185 -> 5.4.186
* [`f9dbb376`](NixOS/nixpkgs@f9dbb37) linux-rt_5_10: 5.10.104-rt63 -> 5.10.106-rt64
* [`5f07839a`](NixOS/nixpkgs@5f07839) linux_testing_bcachefs: unstable-2022-01-12 -> unstable-2022-03-09
* [`13a5c59b`](NixOS/nixpkgs@13a5c59) bcachefs-tools: unstable-2022-01-12 -> unstable-2022-03-09
* [`d606a054`](NixOS/nixpkgs@d606a05) bcachefs-tools: enable parallel building
* [`8b071fc6`](NixOS/nixpkgs@8b071fc) nixos/tests/bcachefs: use multi-disk
* [`165da06e`](NixOS/nixpkgs@165da06) nixos/bcachefs: re-enable encryption in test
* [`f3663942`](NixOS/nixpkgs@f366394) bcachefs: update maintainers
* [`565f3667`](NixOS/nixpkgs@565f366) linux_testing_bcachefs: 2022-03-09 -> 2022-03-21
* [`fd59ae34`](NixOS/nixpkgs@fd59ae3) bcachefs-tools: 2022-03-09 -> 2022-03-22
* [`e80f8f4d`](NixOS/nixpkgs@e80f8f4) zfs: 2.1.3 -> 2.1.4
* [`f3871f1d`](NixOS/nixpkgs@f3871f1) pythonPackages.nbxmpp: 2.0.4 → 2.0.6
* [`875c9080`](NixOS/nixpkgs@875c908) palemoon: 29.4.4 -> 29.4.5
* [`7dc8b4b8`](NixOS/nixpkgs@7dc8b4b) nix_2_7: init
* [`573bad07`](NixOS/nixpkgs@573bad0) chromium: 99.0.4844.82 -> 99.0.4844.84
* [`87448049`](NixOS/nixpkgs@8744804) warzone2100: 4.2.6 -> 4.2.7
* [`904a35f1`](NixOS/nixpkgs@904a35f) matio: 1.5.21 -> 1.5.22
* [`9ca4ded2`](NixOS/nixpkgs@9ca4ded) python3Packages.hacking: disable only failing tests instead of test group
* [`90d34983`](NixOS/nixpkgs@90d3498) brave: 1.36.116 -> 1.36.122
* [`794d2117`](NixOS/nixpkgs@794d211) linux: 4.14.272 -> 4.14.273
* [`6deb2857`](NixOS/nixpkgs@6deb285) linux: 4.19.235 -> 4.19.236
* [`71243ca9`](NixOS/nixpkgs@71243ca) linux: 4.9.307 -> 4.9.308
* [`92754995`](NixOS/nixpkgs@9275499) linux: 5.10.107 -> 5.10.108
* [`662ac47b`](NixOS/nixpkgs@662ac47) linux: 5.15.30 -> 5.15.31
* [`c1fc3779`](NixOS/nixpkgs@c1fc377) linux: 5.16.16 -> 5.16.17
* [`f192b518`](NixOS/nixpkgs@f192b51) linux: 5.4.186 -> 5.4.187
* [`21e98b41`](NixOS/nixpkgs@21e98b4) linux_latest-libre: 18635 -> 18664
* [`3bbb08c7`](NixOS/nixpkgs@3bbb08c) ungoogled-chromium: 99.0.4844.82 -> 99.0.4844.84
* [`f2ed26ad`](NixOS/nixpkgs@f2ed26a) strace: 5.16 -> 5.17
* [`657fc6d5`](NixOS/nixpkgs@657fc6d) powerdns: apply patch for ixfr validation issue
* [`367bfe8e`](NixOS/nixpkgs@367bfe8) pdns-recursor: 4.5.7 -> 4.5.8
* [`4ad304fa`](NixOS/nixpkgs@4ad304f) linuxPackages.virtualboxGuestAdditions: mark broken on Linux 5.17
* [`ec5e38a8`](NixOS/nixpkgs@ec5e38a) linuxPackages.r8168: mark broken on Linux 5.17
* [`54b4af65`](NixOS/nixpkgs@54b4af6) linuxPackages.rtl8821ce: mark broken on Linux 5.17
* [`a4e58117`](NixOS/nixpkgs@a4e5811) linuxPackages.openafs: mark broken on Linux 5.17
* [`beb13298`](NixOS/nixpkgs@beb1329) linux_latest: 5.16.14 -> 5.17
* [`e4be1d98`](NixOS/nixpkgs@e4be1d9) gitlab: 14.8.4 -> 14.9.1 ([NixOS/nixpkgs⁠#166079](https://togithub.com/NixOS/nixpkgs/issues/166079))
* [`b6f41961`](NixOS/nixpkgs@b6f4196) linux: 4.14.273 -> 4.14.274
* [`4700c27b`](NixOS/nixpkgs@4700c27) linux: 4.19.236 -> 4.19.237
* [`062c4428`](NixOS/nixpkgs@062c442) linux: 4.9.308 -> 4.9.309
* [`93b5025e`](NixOS/nixpkgs@93b5025) linux: 5.10.108 -> 5.10.109
* [`90bfd297`](NixOS/nixpkgs@90bfd29) linux: 5.15.31 -> 5.15.32
* [`070876e9`](NixOS/nixpkgs@070876e) linux: 5.16.17 -> 5.16.18
* [`f8b0f02e`](NixOS/nixpkgs@f8b0f02) linux: 5.17 -> 5.17.1
* [`e4067739`](NixOS/nixpkgs@e406773) linux: 5.4.187 -> 5.4.188
* [`12dbe338`](NixOS/nixpkgs@12dbe33) salt: 3003.3 -> 3003.4
* [`e613eaa1`](NixOS/nixpkgs@e613eaa) nixos/default.nix: Use extendModules
* [`3525da15`](NixOS/nixpkgs@3525da1) sops: 3.7.1 -> 3.7.2
* [`d646b327`](NixOS/nixpkgs@d646b32) chromiumBeta: 99.0.4844.51 -> 100.0.4896.20
* [`825d3a57`](NixOS/nixpkgs@825d3a5) chromiumDev: 100.0.4896.12 -> 100.0.4896.20
* [`ed4e3b46`](NixOS/nixpkgs@ed4e3b4) chromiumDev: 100.0.4896.20 -> 101.0.4919.0
* [`e8561d13`](NixOS/nixpkgs@e8561d1) ungoogled-chromium: inherit upstream's build flags
* [`381028f4`](NixOS/nixpkgs@381028f) chromiumBeta: 100.0.4896.20 -> 100.0.4896.30
* [`2ec364e0`](NixOS/nixpkgs@2ec364e) chromiumDev: 101.0.4919.0 -> 101.0.4929.5
* [`ba927da7`](NixOS/nixpkgs@ba927da) chromiumBeta: 100.0.4896.30 -> 100.0.4896.46
* [`7879a268`](NixOS/nixpkgs@7879a26) chromiumDev: 101.0.4929.5 -> 101.0.4947.0
* [`cd9c2a71`](NixOS/nixpkgs@cd9c2a7) chromiumBeta: 100.0.4896.46 -> 100.0.4896.56
* [`b145c6c0`](NixOS/nixpkgs@b145c6c) chromiumDev: 101.0.4947.0 -> 101.0.4951.7
* [`c4759273`](NixOS/nixpkgs@c475927) chromium: honor systemdSupport
* [`a599b0ed`](NixOS/nixpkgs@a599b0e) chromium: 99.0.4844.84 -> 100.0.4896.60
* [`5b1f7769`](NixOS/nixpkgs@5b1f776) nixos/prometheus-exporters/kea: wait for kea
* [`0a3f21a0`](NixOS/nixpkgs@0a3f21a) python3Packages.twisted: fix CVE-2022-21712
* [`cf7e268a`](NixOS/nixpkgs@cf7e268) knot-resolver: 5.4.4 -> 5.5.0
* [`d702c802`](NixOS/nixpkgs@d702c80) zoom-us: 5.8.4.210 -> 5.8.6.739
* [`37d8962c`](NixOS/nixpkgs@37d8962) zoom-us: 5.8.6.739 -> 5.9.1.1380
* [`caddf7d6`](NixOS/nixpkgs@caddf7d) zoom-us: 5.9.1.1380 -> 5.9.3.1911
* [`6c5e8987`](NixOS/nixpkgs@6c5e898) zoom-us: 5.9.3.1911 -> 5.9.6.2225
* [`eb01c162`](NixOS/nixpkgs@eb01c16) nixos/manual: Update copyright years, authors, and copyright
* [`7678aef3`](NixOS/nixpkgs@7678aef) oil-buku: improved syntax
* [`0dfea8f9`](NixOS/nixpkgs@0dfea8f) mastodon: add aarch64-linux platform
* [`4b44df71`](NixOS/nixpkgs@4b44df7) nixos/tests: add mastodon test
* [`2798497c`](NixOS/nixpkgs@2798497) mastodon: build nodejs modules with fetchYarnDeps
* [`0d9901fd`](NixOS/nixpkgs@0d9901f) mastodon: 3.4.6 -> 3.5.0
* [`e0e26f37`](NixOS/nixpkgs@e0e26f3) nixos/mastodon: preload libjemalloc.so
* [`0a58eebd`](NixOS/nixpkgs@0a58eeb) mastodon: use correct GitHub Url
* [`439acd69`](NixOS/nixpkgs@439acd6) zlib: add patches to fix CVE-2018-25032
* [`3e143251`](NixOS/nixpkgs@3e14325) zlib: 1.2.11 -> 1.2.12 (security, CVE-2018-25032)
* [`f034526e`](NixOS/nixpkgs@f034526) fish: 3.3.1 -> 3.4.0
* [`7411a012`](NixOS/nixpkgs@7411a01) fish: disable flaky pexpect tests on aarch64-linux
* [`82906cbf`](NixOS/nixpkgs@82906cb) mediawiki: 1.36.3 -> 1.36.4
* [`ec4ee3bf`](NixOS/nixpkgs@ec4ee3b) ocamlPackages.unionFind: init at 20220122
* [`69a3b5f6`](NixOS/nixpkgs@69a3b5f) mailspring: 1.9.2 -> 1.10.2
* [`bc86aef8`](NixOS/nixpkgs@bc86aef) intel-ocl: add http url to url list
* [`11e3ff27`](NixOS/nixpkgs@11e3ff2) imagemagick6: remove erictapen as maintainer
* [`46967290`](NixOS/nixpkgs@4696729) gitlab: 14.9.1 -> 14.9.2
* [`c49827bd`](NixOS/nixpkgs@c49827b) palemoon: 29.4.5 -> 29.4.5.1, add version test
* [`3c66fd46`](NixOS/nixpkgs@3c66fd4) lrzip: 0.641 -> 0.650
* [`babd69ef`](NixOS/nixpkgs@babd69e) spark: mark 2.4 as vulnerable
* [`a907688e`](NixOS/nixpkgs@a907688) spark: 3.1.2 -> 3.1.3
* [`b752931a`](NixOS/nixpkgs@b752931) qutebrowser: 2.4.0 -> 2.5.0
@nomeata
Copy link
Collaborator Author

nomeata commented Apr 3, 2022

@ggreif, could you help us updating drun maybe?

@nomeata
Copy link
Collaborator Author

nomeata commented Apr 4, 2022

With rust-1.57 I am making progress. I still need to apply this patch to ic, because otherwise cargo vendor complains about multiple versions of wabt:

diff --git a/rs/boundary_node/prober/Cargo.toml b/rs/boundary_node/prober/Cargo.toml
index b28edf48..6beb9bd1 100644
--- a/rs/boundary_node/prober/Cargo.toml
+++ b/rs/boundary_node/prober/Cargo.toml
@@ -35,4 +35,4 @@ slog-scope = "4.1.2"
 slog-term = "2.6.0"
 tokio = { version = "1.15.0", features = ["full"] }
 tokio-openssl = "0.6.0"
-wabt = "0.10.0"
+wabt = { git = "https://github.com/dfinity-lab/wabt-rs", tag = "0.10.0-dfinity" }

Maybe someone can upstream this? Once fixed, this should work:

~/dfinity/ic/rs $ cargo vendor vendor-test
error: failed to sync

Caused by:
  found duplicate version of package `wabt v0.10.0` vendored from two sources:

  	source 1: registry `crates-io`
  	source 2: https://github.com/dfinity-lab/wabt-rs?tag=0.10.0-dfinity#7ab9062d

@nomeata
Copy link
Collaborator Author

nomeata commented Apr 4, 2022

Next error would be

   Compiling ic-registry-provisional-whitelist v0.8.0 (/build/rs/registry/provisional_whitelist)
The following warnings were emitted during compilation:

warning: ../src/backtrace.c:11:10: fatal error: libunwind.h: No such file or directory
warning:    11 | #include <libunwind.h>
warning:       |          ^~~~~~~~~~~~~
warning: compilation terminated.

error: failed to run custom build command for `ic-canister-sandbox-launcher v0.8.0 (/build/rs/canister_sandbox/sandbox_launcher)`

Caused by:
  process didn't exit successfully: `/build/rs/target/release/build/ic-canister-sandbox-launcher-4d61a222ccdb986f/build-script-build` (exit status: 1)
  --- stdout
  TARGET = Some("x86_64-unknown-linux-gnu")
  OPT_LEVEL = Some("3")
  HOST = Some("x86_64-unknown-linux-gnu")
  CC_x86_64-unknown-linux-gnu = Some("/nix/store/ajisnbqj2qyirds1hnwf3pn919c2c8yc-gcc-wrapper-10.3.0/bin/cc")
  CFLAGS_x86_64-unknown-linux-gnu = None
  CFLAGS_x86_64_unknown_linux_gnu = None
  HOST_CFLAGS = None
  CFLAGS = None
  CRATE_CC_NO_DEFAULTS = None
  CARGO_CFG_TARGET_FEATURE = Some("fxsr,sse,sse2")
  running: "/nix/store/ajisnbqj2qyirds1hnwf3pn919c2c8yc-gcc-wrapper-10.3.0/bin/cc" "-O3" "-ffunction-sections" "-fdata-sections" "-fPIC" "-m64" "-Wall" "-Wextra" "-o" "/build/rs/target/x86_64-unknown-linux-gnu/release/build/ic-canister-sandbox-launcher-fee8adc3b2e6dbd4/out/../src/backtrace.o" "-c" "../src/backtrace.c"
  cargo:warning=../src/backtrace.c:11:10: fatal error: libunwind.h: No such file or directory
  cargo:warning=   11 | #include <libunwind.h>
  cargo:warning=      |          ^~~~~~~~~~~~~
  cargo:warning=compilation terminated.
  exit status: 1

  --- stderr


  error occurred: Command "/nix/store/ajisnbqj2qyirds1hnwf3pn919c2c8yc-gcc-wrapper-10.3.0/bin/cc" "-O3" "-ffunction-sections" "-fdata-sections" "-fPIC" "-m64" "-Wall" "-Wextra" "-o" "/build/rs/target/x86_64-unknown-linux-gnu/release/build/ic-canister-sandbox-launcher-fee8adc3b2e6dbd4/out/../src/backtrace.o" "-c" "../src/backtrace.c" with args "cc" did not execute successfully (status code exit status: 1).


warning: build failed, waiting for other jobs to finish...

@ulan
Copy link
Contributor

ulan commented Apr 4, 2022

@hcbdfinity ^ any ideas why libunwind.h is failing for @nomeata ?

Maybe someone can upstream this?

Thanks! I'll upstream the fix.

@hcbdfinity
Copy link

I think you would simply need to get libunwind into your nix env, AFAICT it is supported already: https://github.com/NixOS/nixpkgs/blob/master/pkgs/development/libraries/libunwind/default.nix
there may be a need to pass pkg-config flags, TBOMK libunwind upstream has been pkg-config'ed

@nomeata
Copy link
Collaborator Author

nomeata commented Apr 4, 2022

I can investigate the libunwind issue, I didn’t try hard yet; would be nice though to get past the other issue first (cargo vendor failing due to different wabt crates appearing in the Cargo.lock).

@nomeata
Copy link
Collaborator Author

nomeata commented Apr 4, 2022

As @hcbdfinity said, making libunwind accessible in the nix env is enough. So once the Cargo files are in better order in the ic repo, we can start testing the latest replica code here again (I hope)

dfinity-bot pushed a commit to dfinity/ic that referenced this pull request Apr 5, 2022
Fix prober to use the same wabt as other crates

This upstreams a patch shared by nomeata@ in
dfinity/motoko#3105 

See merge request dfinity-lab/public/ic!4162
@ulan
Copy link
Contributor

ulan commented Apr 5, 2022

Upstreamed fix: dfinity/ic@bedc417

@nomeata
Copy link
Collaborator Author

nomeata commented Apr 6, 2022

Bumping drun separately in #3181, afterwards this PR can add the new test case

@nomeata
Copy link
Collaborator Author

nomeata commented Apr 7, 2022

Probably not needed anymore, as there is a fix in the replica already (#3181)

@nomeata nomeata closed this Apr 7, 2022
@nomeata nomeata deleted the joachim/canister-sandbox-panic branch April 7, 2022 20:43
@mergify mergify bot removed the automerge-squash When ready, merge (using squash) label Apr 7, 2022
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

6 participants