When Travis-CI checking PR getting ERROR: py27: could not install deps [ipaclient[csrgen], ipatests]; v = InvocationError('/freeipa/.tox-install.sh wheel_bundle /freeipa/.tox/py27/bin/python /freeipa/.tox/py27/lib/python2.7/site-packages ipaclient[csrgen] ipatests (see /freeipa/.tox/py27/log/py27-1.log)', 2)
error described above
install deps ok
Fedora 28 client
https://travis-ci.org/freeipa/freeipa/jobs/382034446 https://github.com/freeipa/freeipa/pull/1938
The problem is caused by invalid compiler flags. I'm unable to reproduce the issue on an up to date installation of Fedora 28. Either the container images contains an old, broken version of GCC or some dependencies are missing.
gcc -pthread -fno-strict-aliasing -O2 -g -pipe -Wall -Werror=format-security -Wp,-D_FORTIFY_SOURCE=2 -Wp,-D_GLIBCXX_ASSERTIONS -fexceptions -fstack-protector-strong -grecord-gcc-switches -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -m64 -mtune=generic -fasynchronous-unwind-tables -fstack-clash-protection -fcf-protection -D_GNU_SOURCE -fPIC -fwrapv -DNDEBUG -O2 -g -pipe -Wall -Werror=format-security -Wp,-D_FORTIFY_SOURCE=2 -Wp,-D_GLIBCXX_ASSERTIONS -fexceptions -fstack-protector-strong -grecord-gcc-switches -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -m64 -mtune=generic -fasynchronous-unwind-tables -fstack-clash-protection -fcf-protection -D_GNU_SOURCE -fPIC -fwrapv -fPIC -I/usr/include/python2.7 -c gssapi/raw/misc.c -o build/temp.linux-x86_64-2.7/gssapi/raw/misc.o -DHAS_GSSAPI_EXT_H cc1: error: ‘-fcf-protection=full’ requires Intel CET support. Use -mcet or both of -mibt and -mshstk options to enable CET error: command 'gcc' failed with exit status 1
freeipa/freeipa-test-runner:master-latest with sha256:8ebfdb3172a42443d98305bbd7b7c25ee69604a7557b3719bb65188eb9230299 has an old gcc version:
freeipa/freeipa-test-runner:master-latest
sha256:8ebfdb3172a42443d98305bbd7b7c25ee69604a7557b3719bb65188eb9230299
# rpm -qa gcc gcc-8.0.1-0.20.fc28.x86_64
Fedora 28 has gcc-8.1.1-1.fc28.x86_64. A full package update should solve the issue.
gcc-8.1.1-1.fc28.x86_64
Metadata Update from @cheimes: - Issue assigned to stlaz - Issue priority set to: critical (was: normal)
Solved by rebuilding the container.
Metadata Update from @stlaz: - Issue close_status updated to: fixed - Issue status updated to: Closed (was: Open)
Login to comment on this ticket.