On Mon, Nov 6, 2017 at 7:41 PM, Niels Möller nisse@lysator.liu.se wrote:
I suggest including the attached patches to the CI. The first makes sure that random errors due to installation of fedora packages don't get in the way by using the pre-build images used in gnutls.
To me, it sounds like it should be more robust to depend on fedora/redhat infrastructure rather than gnutls images. But I'm not familiar with yum so I'm not sure how to read the errors, e.g., from https://gitlab.com/gnutls/nettle/-/jobs/39211387:
$ yum install -y git make autoconf libtool automake gettext-devel glibc-devel gcc valgrind libasan-static libgcc.i686 glibc-devel.i686 [...] Running scriptlet: guile-5:2.0.14-1.fc26.x86_64 107/107BDB1539 Build signature doesn't match environment failed loading RPMDB
The downloaded packages were saved in cache until the next successful transaction. You can remove cached packages by executing 'dnf clean packages'. ERROR: Job failed: exit code 1 Hmm, from previous messages, it also looks like yum is attempting to downgrade certain nss-related packages, is that right? No idea why it decides to do that.
The previous messages were indicating that. I have no idea about the new issue.
The second it includes gnutls build in the CI to detect breakages early.
Sounds like an excellent idea, and in this case, it might be more reasonable to depend on gnutls images.
These are fedora images with required packages bundled, pre-built from the repo at: https://gitlab.com/gnutls/build-images/
they are restricted to fedora and debian. I have found out over time that pre-build images work much better than installing dependencies on the fly, not only for the issues you've been seeing lately, but also for random failures due to network outage, and for faster build (for nettle may not make much difference but the dependencies in gnutls were much longer). That's why there are pre-build images for gnutls. It would make more sense to have more compact images which only include the packages needed for nettle, but I wouldn't like to maintain that separately; that's why I used the existing images for gnutls. If you would like to submit nettle specific images in that repo, you are certainly welcome.
regards, Nikos