You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@jmeter.apache.org by "bharathgowda11 (via GitHub)" <gi...@apache.org> on 2024/08/07 16:10:54 UTC
[I] unable to build 5.6.3 due to checksum issue [jmeter]
bharathgowda11 opened a new issue, #6331:
URL: https://github.com/apache/jmeter/issues/6331
### Expected behavior
FAILURE: Build failed with an exception.
* What went wrong:
A problem occurred configuring root project 'jmeter'.
> Could not determine the dependencies of null.
> Checksum/PGP violations detected on resolving configuration :classpath
Actual checksum is [EC2200E5A5A70F5C64744F6413A546F5E4979B3FB1649B02756FF035D36DDE31170EAADC70842230296B60896F04877270C26B40415736299AEF44AC16C5811C], however expected one of [37A13B129F3536A53F2A553151A53997DA6DE7CE4D7231EFEEFD26A68C92BE309666F2EE1F527D3B8C38BC6ADDC9FCCBBDD0D134759FD88667976B0CFF842435]:
xerces:xercesImpl:2.9.1 (pgp=[], sha512=[EC2200E5A5A70F5C64744F6413A546F5E4979B3FB1649B02756FF035D36DDE31170EAADC70842230296B60896F04877270C26B40415736299AEF44AC16C5811C])
No PGP signature (.asc file) found for artifact:
xml-apis:xml-apis:1.3.04 (pgp=[], sha512=[1086A52924ADD2406E0B4EC7219A8783AC20E02A32A7A2461EFBF092F0070501F7CADE9C0588907C403352F1A48F80B950E6D40B2E4E3E9EB886E7DB4E97BDEC])
There might be more checksum violations, however, current configuration specifies the build to fail on the first violation.
You might use the following properties:
* -PchecksumIgnore temporary disables checksum-dependency-plugin (e.g. to try new dependencies)
* -PchecksumUpdate updates checksum.xml and it will fail after the first violation so you can review the diff
* -PchecksumUpdateAll (insecure) updates checksum.xml with all the new discovered checksums
* -PchecksumFailOn=build_finish (insecure) It will postpone the failure till the build finish
It will collect all the violations, however untrusted code might be executed (e.g. from a plugin)
You can find updated checksum.xml file at /root/apache-jmeter-5.6.3/build/checksum/checksum.xml.
You might add -PchecksumUpdate to update root checksum.xml file.
### Actual behavior
_No response_
### Steps to reproduce the problem
clone 5.6.3 tag & build
### JMeter Version
5.6.3
### Java Version
17
### OS Version
_No response_
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: dev-unsubscribe@jmeter.apache.org.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
Re: [I] unable to build 5.6.3 due to checksum issue [jmeter]
Posted by "vlsi (via GitHub)" <gi...@apache.org>.
vlsi closed issue #6331: unable to build 5.6.3 due to checksum issue
URL: https://github.com/apache/jmeter/issues/6331
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: dev-unsubscribe@jmeter.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
Re: [I] unable to build 5.6.3 due to checksum issue [jmeter]
Posted by "hsuram189 (via GitHub)" <gi...@apache.org>.
hsuram189 commented on issue #6331:
URL: https://github.com/apache/jmeter/issues/6331#issuecomment-2324355551
Hey,
@vlsi
@linvaux
Can you please create a tag out of master branch so that we can build a package from that version.
or else please let us know whether we can consider master as the 5.6.3 branch?
Thanks in advance.
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: dev-unsubscribe@jmeter.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
Re: [I] unable to build 5.6.3 due to checksum issue [jmeter]
Posted by "linvaux (via GitHub)" <gi...@apache.org>.
linvaux commented on issue #6331:
URL: https://github.com/apache/jmeter/issues/6331#issuecomment-2274815355
yep, i modify the `settings.gradle.kts`，it looks can work!
```java
/*
* Licensed to the Apache Software Foundation (ASF) under one or more
* contributor license agreements. See the NOTICE file distributed with
* this work for additional information regarding copyright ownership.
* The ASF licenses this file to you under the Apache License, Version 2.0
* (the "License"); you may not use this file except in compliance with
* the License. You may obtain a copy of the License at
*
* http://www.apache.org/licenses/LICENSE-2.0
*
* Unless required by applicable law or agreed to in writing, software
* distributed under the License is distributed on an "AS IS" BASIS,
* WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
* See the License for the specific language governing permissions and
* limitations under the License.
*/
import com.gradle.enterprise.gradleplugin.internal.extension.BuildScanExtensionWithHiddenFeatures
import java.util.*
pluginManagement {
plugins {
id("com.github.vlsi.stage-vote-release") version "1.90"
}
}
plugins {
id("com.gradle.enterprise") version "3.15.1"
id("com.gradle.common-custom-user-data-gradle-plugin") version "1.12.1"
id("org.gradle.toolchains.foojay-resolver-convention") version "0.7.0"
}
dependencyResolutionManagement {
repositoriesMode.set(RepositoriesMode.FAIL_ON_PROJECT_REPOS)
repositories {
// TODO: support enableMavenLocal
mavenCentral()
}
}
if (JavaVersion.current() < JavaVersion.VERSION_17) {
throw UnsupportedOperationException("Please use Java 17 or 21 for launching Gradle when building JMeter, the current Java is ${JavaVersion.current().majorVersion}")
}
// This is the name of a current project
// Note: it cannot be inferred from the directory name as developer might clone JMeter to jmeter_tmp folder
rootProject.name = "jmeter"
enableFeaturePreview("TYPESAFE_PROJECT_ACCESSORS")
includeBuild("build-logic-commons")
includeBuild("build-logic")
include(
"src:bom",
"src:bom-testing",
"src:bom-thirdparty",
"src:bshclient",
"src:launcher",
"src:components",
"src:config",
"src:core",
"src:examples",
"src:functions",
"src:generator",
"src:jorphan",
"src:licenses",
"src:protocol:bolt",
"src:protocol:ftp",
"src:protocol:http",
"src:protocol:java",
"src:protocol:jdbc",
"src:protocol:jms",
"src:protocol:junit",
"src:protocol:junit-sample",
"src:protocol:ldap",
"src:protocol:mail",
"src:protocol:mongodb",
"src:protocol:native",
"src:protocol:tcp",
"src:release",
"src:testkit",
"src:testkit-wiremock",
"src:test-services",
"src:dist",
// "src:dist-check"
)
// See https://github.com/gradle/gradle/issues/1348#issuecomment-284758705 and
// https://github.com/gradle/gradle/issues/5321#issuecomment-387561204
// Gradle inherits Ant "default excludes", however we do want to archive those files
org.apache.tools.ant.DirectoryScanner.removeDefaultExclude("**/.gitattributes")
org.apache.tools.ant.DirectoryScanner.removeDefaultExclude("**/.gitignore")
fun String?.toBool(nullAs: Boolean, blankAs: Boolean, default: Boolean) =
when {
this == null -> nullAs
isBlank() -> blankAs
default -> !equals("false", ignoreCase = true)
else -> equals("true", ignoreCase = true)
}
fun property(name: String) =
when (extra.has(name)) {
true -> extra.get(name) as? String
else -> null
}
if (property("localReleasePlugins").toBool(nullAs = false, blankAs = true, default = false)) {
// This enables to use local clone of vlsi-release-plugins for debugging purposes
includeBuild("../vlsi-release-plugins")
}
val isCiServer = System.getenv().containsKey("CI")
gradleEnterprise {
server = "https://ge.apache.org"
allowUntrustedServer = false
buildScan {
capture { isTaskInputFiles = true }
isUploadInBackground = !isCiServer
publishAlways()
this as BuildScanExtensionWithHiddenFeatures
publishIfAuthenticated()
obfuscation {
ipAddresses { addresses -> addresses.map { "0.0.0.0" } }
}
}
}
// Checksum plugin sources can be validated at https://github.com/vlsi/vlsi-release-plugins
buildscript {
dependencies {
// classpath("com.github.vlsi.gradle:checksum-dependency-plugin:${settings.extra["com.github.vlsi.checksum-dependency.version"]}") {
// // Gradle ships kotlin-stdlib which is good enough
// exclude("org.jetbrains.kotlin", "kotlin-stdlib")
// }
// Remove when Autostyle updates jgit dependency
classpath("org.eclipse.jgit:org.eclipse.jgit:5.13.2.202306221912-r")
}
repositories {
gradlePluginPortal()
}
}
// Note: we need to verify the checksum for checksum-dependency-plugin itself
val expectedSha512 = mapOf(
// TODO: remove JavaEWAH-1.1.12.jar, org.eclipse.jgit-5.13.0.202109080827-r.jar, slf4j-api-1.7.30.jar when Autostyle updates jgit
"ECBBFD1C6593AFBAA4CA7F65E10BC67B12FF75EB221E490051522FAC8D291B202A0A165644A9C5AC9E5618CD771817C9052F171E5E6210CB021DF5A6E4CBF787"
to "JavaEWAH-1.1.12.jar",
"5A3821A07EEBC9B56F87054C71B9BAFA0D9D0B556AA16191F8676D748CEC755A741CD5500E8676493FFCA69E6C9608CAF86D80B60B5934EE108D77030C490194"
to "JavaEWAH-1.1.13.jar",
"D56423AD67E3EB133939BB69DA202445EBB476F8C2D570CD741C3043EADD132D4C1BB3D08757B266C08A4D2150BE2248A65580A517E3230322D13D983CACCDD6"
to "common-custom-user-data-gradle-plugin-1.12.1.jar",
"768DBB3BA2649A7025338197B4703B414983E4608138719B0D69201F7F49E57E0454846B41B775B135B083F820824749DA6121F20A812C4F155A97F09C9B15AC"
to "org.eclipse.jgit-5.13.0.202109080827-r.jar",
"DD1453E479CAC4E0D20143A1955654DC6C163916CA07C11F70F482F317BBF00A5FEDC8B198AF60BF17E9843E76DDA3103DAB3463384536F73A90AC0206CFB0E0"
to "org.eclipse.jgit-5.13.1.202206130422-r.jar",
"37ED7485AF83C40D3FC1965512F88E73D139D1CD099CFC71A7E87A38B2D2CD14BB34918718EC7F19A155AC0632B97BAC77295CFFC49F11275B1F7D82D0655357"
to "org.eclipse.jgit-5.13.2.202306221912-r.jar",
"E5435852569DDA596BA46138AF8EE9C4ECBA8A7A43F4F1E7897AEB4430523A0F037088A7B63877DF5734578F19D331F03D7B0F32D5AE6C425DF211947B3E6173"
to "slf4j-api-1.7.30.jar",
"4B13DF3104932BCA325445276915BF710234888B76E315FE44BAEB2DF3D56AA21EDF77B5C7357887CF9D592010794192250B3E061437A102F63E68C075D67D3"
to "gradle-enterprise-gradle-plugin-3.15.1.jar",
"4E240B7811EF90C090E83A181DACE41DA487555E4136221861B0060F9AF6D8B316F2DD0472F747ADB98CA5372F46055456EF04BDC0C3992188AB13302922FCE9"
to "bcpg-jdk15on-1.70.jar",
"7DCCFC636EE4DF1487615818CFA99C69941081DF95E8EF1EAF4BCA165594DFF9547E3774FD70DE3418ABACE77D2C45889F70BCD2E6823F8539F359E68EAF36D1"
to "bcprov-jdk15on-1.70.jar",
"17DAAF511BE98F99007D7C6B3762C9F73ADD99EAB1D222985018B0258EFBE12841BBFB8F213A78AA5300F7A3618ACF252F2EEAD196DF3F8115B9F5ED888FE827"
to "okhttp-4.1.0.jar",
"93E7A41BE44CC17FB500EA5CD84D515204C180AEC934491D11FC6A71DAEA761FB0EECEF865D6FD5C3D88AAF55DCE3C2C424BE5BA5D43BEBF48D05F1FA63FA8A7"
to "okio-2.2.2.jar",
"A7E32B1E638C47049683ED945BBCD2678F9FC2AEE1E329C61C05DF8FF426DF5FAE21C81446F4361ABBDB18E5B3B7B7DD01AA1074EDCB3A6D5D148C2B3DEB3FC9"
to "foojay-resolver-0.7.0.jar",
"10BF91C79AB151B684834E3CA8BA7D7E19742A3EEB580BDE690FBA433F9FFFE3ABBD79ED3FE3F97986C3A2BADC4D14E28835A8EF89167B4B9CC6014242338769"
to "gson-2.9.1.jar",
settings.extra["com.github.vlsi.checksum-dependency.sha512"].toString()
to "checksum-dependency-plugin.jar"
)
fun File.sha512(): String {
val md = java.security.MessageDigest.getInstance("SHA-512")
forEachBlock { buffer, bytesRead ->
md.update(buffer, 0, bytesRead)
}
return BigInteger(1, md.digest()).toString(16).uppercase(Locale.ROOT)
}
val violations =
buildscript.configurations["classpath"]
.resolve()
.sortedBy { it.name }
.associateWith { it.sha512() }
.filterNot { (_, sha512) -> expectedSha512.contains(sha512) }
.entries
.joinToString("\n ") { (file, sha512) -> "SHA-512(${file.name}) = $sha512 ($file)" }
if (violations.isNotBlank()) {
throw GradleException("Buildscript classpath has files that were not explicitly permitted:\n $violations")
}
//apply(plugin = "com.github.vlsi.checksum-dependency")
// This enables to try local Autostyle
property("localAutostyle")?.ifBlank { "../autostyle" }?.let {
println("Importing project '$it'")
includeBuild(it)
}
property("localDarklaf")?.ifBlank { "../darklaf" }?.let {
println("Importing project '$it'")
includeBuild(it)
}
buildCache {
local {
isEnabled = !isCiServer
}
remote(gradleEnterprise.buildCache) {
isEnabled = false
}
}
```
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: dev-unsubscribe@jmeter.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
Re: [I] unable to build 5.6.3 due to checksum issue [jmeter]
Posted by "vlsi (via GitHub)" <gi...@apache.org>.
vlsi commented on issue #6331:
URL: https://github.com/apache/jmeter/issues/6331#issuecomment-2274926902
I noticed the same on the recent master branch builds, so I fixed it as follows: https://github.com/apache/jmeter/commit/6b650080c40ef1d0ac4c52a597fd20f9c746485c
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: dev-unsubscribe@jmeter.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org