search

freedomofpress / securedrop-workstation-ci

Repository for holding scripts related to running CI for SecureDrop Workstation (hosted on a Qubes machine)
GNU Affero General Public License v3.0
1 stars 0 forks source link

dom0 clock is behind reality #68

Open legoktm opened 3 weeks ago

legoktm commented 3 weeks ago

Flagged by @rocodes:

INFO:[2024-06-10-23:18:38:891402]   ----------
INFO:[2024-06-10-23:18:38:891429]             ID: install-securedrop-keyring-package
INFO:[2024-06-10-23:18:38:891462]       Function: pkg.installed
INFO:[2024-06-10-23:18:38:891488]         Result: False
INFO:[2024-06-10-23:18:38:891521]        Comment: An error was encountered while installing package(s): E: Release file for https://apt-test.freedom.press/dists/bookworm/InRelease is not valid yet (invalid for another 41s). Updates for this repository will not be applied.
INFO:[2024-06-10-23:18:38:891549]        Started: 23:18:27.396498
INFO:[2024-06-10-23:18:38:891582]       Duration: 3442.29 ms
INFO:[2024-06-10-23:18:38:891608]        Changes:   
INFO:[2024-06-10-23:18:38:891641]   ----------

This is a race condition with apt-test being published to more frequently, but at that time the dom0 clock was 2024-06-10-23:18:38:891521, while apt-test had published at Date: Mon, 10 Jun 2024 23:19:59 UTC.

The clock is probably off, which is somewhat expected since we just booted the VM. We should force a sudo qvm-sync-clock before provisioning.

legoktm commented 6 days ago

Happened again in https://ws-ci-runner.securedrop.org/2024-06-26-191634739526-cbb6ad92028564b062e7412c49df722fc2f22332-Qubes_4.2_A-update_20240626043626.log.txt

E: Release file for tor+https://fasttrack.debian.net/debian/dists/bookworm-fasttrack/InRelease is not valid yet (invalid for another 7s). Updates for this repository will not be applied.

Not sure if whonix is special in this regard.

legoktm commented 4 days ago

https://ws-ci-runner.securedrop.org/2024-06-28-193030038253-02500bf950d67b6fd7433a0271dc8a76b3f3961c-Qubes_4.2_A-update_20240628045353.log.txt

INFO:[2024-06-28-19:59:31:338170]             ID: upgrade-all-packages
INFO:[2024-06-28-19:59:31:338206]       Function: pkg.uptodate
INFO:[2024-06-28-19:59:31:338234]         Result: False
INFO:[2024-06-28-19:59:31:338279]        Comment: E: Release file for tor+https://fasttrack.debian.net/debian/dists/bookworm-fasttrack/InRelease is not valid yet (invalid for another 41s). Updates for this repository will not be applied.
INFO:[2024-06-28-19:59:31:338311]        Started: 19:59:18.051638
INFO:[2024-06-28-19:59:31:338346]       Duration: 4095.405 ms
INFO:[2024-06-28-19:59:31:338375]        Changes:   
INFO:[2024-06-28-19:59:31:338410]   ----------
INFO:[2024-06-28-19:59:31:338438]             ID: install-securedrop-keyring-package
INFO:[2024-06-28-19:59:31:338474]       Function: pkg.installed
INFO:[2024-06-28-19:59:31:338503]         Result: False
INFO:[2024-06-28-19:59:31:338538]        Comment: An error was encountered while installing package(s): E: Release file for tor+https://fasttrack.debian.net/debian/dists/bookworm-fasttrack/InRelease is not valid yet (invalid for another 37s). Updates for this repository will not be applied.
INFO:[2024-06-28-19:59:31:338568]        Started: 19:59:22.152466
INFO:[2024-06-28-19:59:31:338603]       Duration: 2104.76 ms
INFO:[2024-06-28-19:59:31:338632]        Changes:
legoktm commented 4 days ago

Not sure if whonix is special in this regard.