Release Date for Gramine 1.9

[ppsc0]

Dear Gramine community,

we are heavily relying on Gramine in production and we are missing a fix contained in the new Gramine 1.9 release version to improve the stability of our system. We could not successfully test our application with the current master branch and have resigned to wait for 1.9 release. Could you please let us know, when the release for this version is expected?

Many thanks,
Patrick

[kailun-qin]

Could you please let us know, when the release for this version is expected?

We're planning to release in the coming weeks.

We could not successfully test our application with the current master branch and have resigned to wait for 1.9 release.

Would a tag release work for you, or are you looking to use the new version of the Gramine packages?

[monavij]

Also can you share with how you are using in Gramine in production and for what use case? We would like to highlight you on our Gramine users page. Thanks

[ppsc0]

Thank you for the quick response! With the master branch, we are facing the same issue as mentioned in gramineproject/gsc#224.

[kailun-qin]

With the master branch, we are facing the same issue as mentioned in gramineproject/gsc#224.

IIUC, you're okay with using the master branch (i.e., not necessarily a new Gramine release) as long as the cited issue is resolved, since it's the only blocking issue you're encountering?

[ppsc0]

Yes, that would be fine for us!

@monavij I'm with IBM and we're already on the Gramine users page.

[kailun-qin]

@ppsc0: If you're not working on SUSE (where a new issue was just found: gramineproject/gsc#236), pls take another try w/ the latest GSC master branch, which should have resolved your blocking issue: gramineproject/gsc#224.

[uwe-albert-ibm]

Dear all,
I am a member of Patricks team and want to add some issue we are facing, when we use the "master" of gramine project together with the "master" of gsc project: During the "build" step it fails with:

Step 19/22 : ENV PATH="/gramine/meson_build_output/bin:$PATH"

---> Running in ce0ec405000c
---> 7598e26b810d
Step 20/22 : RUN chmod u+x /gramine/app_files/apploader.sh && /usr/bin/python3 -B /gramine/app_files/finalize_manifest.py && rm -f /gramine/app_files/finalize_manifest.py

---> Running in aaf362addcfa
[from inside Docker container] Found 10373 files in /.
Traceback (most recent call last):
File "/gramine/app_files/finalize_manifest.py", line 175, in
main(sys.argv)
File "/gramine/app_files/finalize_manifest.py", line 166, in main
rendered_manifest_dict['sgx']['trusted_files'] = expand_trusted_files(trusted_files + already_added_files)
File "/gramine/app_files/finalize_manifest.py", line 45, in expand_trusted_files

raise ManifestError(f'File not found: {file_path}')

NameError: name 'ManifestError' is not defined

Failed to build unsigned graminized Docker image gsc-our-component-unsigned.

[kailun-qin]

@DukeDavis12, @jinengandhi-intel: Could you please take a look at the issue reported above? Thanks!

[anjalirai-intel]

@uwe-albert-ibm Can you give some more details, about workload and distro os? And if possible some logs as well. I am not able to repro this issue on my end.

[uwe-albert-ibm]

@anjalirai-intel sure I will provide you with:
we run it for distro ubuntu 22.04
regarding the logs I can re-run and try capture whole gsc output (if there are any "switches" to produce more useful logging for your investigation pls let me know)

now it seems a different error (gramine master might have changed ? ) :

cc common.o onefile.o fuzz_dtlsclient.o ../../framework/tests/src/asn1_helpers.o ../../framework/tests/src/bignum_codepath_check.o ../../framework/tests/src/bignum_helpers.o ../../framework/tests/src/fake_external_rng_for_test.o ../../framework/tests/src/helpers.o ../../framework/tests/src/psa_crypto_helpers.o ../../framework/tests/src/psa_crypto_stubs.o ../../framework/tests/src/psa_exercise_key.o ../../framework/tests/src/psa_memory_poisoning_wrappers.o ../../framework/tests/src/random.o ../../framework/tests/src/test_memory.o ../../framework/tests/src/threading_helpers.o ../../framework/tests/src/drivers/hash.o ../../framework/tests/src/drivers/platform_builtin_keys.o ../../framework/tests/src/drivers/test_driver_aead.o ../../framework/tests/src/drivers/test_driver_asymmetric_encryption.o ../../framework/tests/src/drivers/test_driver_cipher.o ../../framework/tests/src/drivers/test_driver_key_agreement.o ../../framework/tests/src/drivers/test_driver_key_management.o ../../framework/tests/src/drivers/test_driver_mac.o ../../framework/tests/src/drivers/test_driver_pake.o ../../framework/tests/src/drivers/test_driver_signature.o ../../tests/src/certs.o ../../tests/src/psa_test_wrappers.o ../../tests/src/test_helpers/ssl_helpers.o -L../../library -lmbedtls -lmbedx509 -lmbedcrypto -o fuzz_dtlsclient
cc common.o onefile.o fuzz_dtlsserver.o ../../framework/tests/src/asn1_helpers.o ../../framework/tests/src/bignum_codepath_check.o ../../framework/tests/src/bignum_helpers.o ../../framework/tests/src/fake_external_rng_for_test.o ../../framework/tests/src/helpers.o ../../framework/tests/src/psa_crypto_helpers.o ../../framework/tests/src/psa_crypto_stubs.o ../../framework/tests/src/psa_exercise_key.o ../../framework/tests/src/psa_memory_poisoning_wrappers.o ../../framework/tests/src/random.o ../../framework/tests/src/test_memory.o ../../framework/tests/src/threading_helpers.o ../../framework/tests/src/drivers/hash.o ../../framework/tests/src/drivers/platform_builtin_keys.o ../../framework/tests/src/drivers/test_driver_aead.o ../../framework/tests/src/drivers/test_driver_asymmetric_encryption.o ../../framework/tests/src/drivers/test_driver_cipher.o ../../framework/tests/src/drivers/test_driver_key_agreement.o ../../framework/tests/src/drivers/test_driver_key_management.o ../../framework/tests/src/drivers/test_driver_mac.o ../../framework/tests/src/drivers/test_driver_pake.o ../../framework/tests/src/drivers/test_driver_signature.o ../../tests/src/certs.o ../../tests/src/psa_test_wrappers.o ../../tests/src/test_helpers/ssl_helpers.o -L../../library -lmbedtls -lmbedx509 -lmbedcrypto -o fuzz_dtlsserver
cc common.o onefile.o fuzz_pkcs7.o ../../framework/tests/src/asn1_helpers.o ../../framework/tests/src/bignum_codepath_check.o ../../framework/tests/src/bignum_helpers.o ../../framework/tests/src/fake_external_rng_for_test.o ../../framework/tests/src/helpers.o ../../framework/tests/src/psa_crypto_helpers.o ../../framework/tests/src/psa_crypto_stubs.o ../../framework/tests/src/psa_exercise_key.o ../../framework/tests/src/psa_memory_poisoning_wrappers.o ../../framework/tests/src/random.o ../../framework/tests/src/test_memory.o ../../framework/tests/src/threading_helpers.o ../../framework/tests/src/drivers/hash.o ../../framework/tests/src/drivers/platform_builtin_keys.o ../../framework/tests/src/drivers/test_driver_aead.o ../../framework/tests/src/drivers/test_driver_asymmetric_encryption.o ../../framework/tests/src/drivers/test_driver_cipher.o ../../framework/tests/src/drivers/test_driver_key_agreement.o ../../framework/tests/src/drivers/test_driver_key_management.o ../../framework/tests/src/drivers/test_driver_mac.o ../../framework/tests/src/drivers/test_driver_pake.o ../../framework/tests/src/drivers/test_driver_signature.o ../../tests/src/certs.o ../../tests/src/psa_test_wrappers.o ../../tests/src/test_helpers/ssl_helpers.o -L../../library -lmbedtls -lmbedx509 -lmbedcrypto -o fuzz_pkcs7
cc common.o onefile.o fuzz_privkey.o ../../framework/tests/src/asn1_helpers.o ../../framework/tests/src/bignum_codepath_check.o ../../framework/tests/src/bignum_helpers.o ../../framework/tests/src/fake_external_rng_for_test.o ../../framework/tests/src/helpers.o ../../framework/tests/src/psa_crypto_helpers.o ../../framework/tests/src/psa_crypto_stubs.o ../../framework/tests/src/psa_exercise_key.o ../../framework/tests/src/psa_memory_poisoning_wrappers.o ../../framework/tests/src/random.o ../../framework/tests/src/test_memory.o ../../framework/tests/src/threading_helpers.o ../../framework/tests/src/drivers/hash.o ../../framework/tests/src/drivers/platform_builtin_keys.o ../../framework/tests/src/drivers/test_driver_aead.o ../../framework/tests/src/drivers/test_driver_asymmetric_encryption.o ../../framework/tests/src/drivers/test_driver_cipher.o ../../framework/tests/src/drivers/test_driver_key_agreement.o ../../framework/tests/src/drivers/test_driver_key_management.o ../../framework/tests/src/drivers/test_driver_mac.o ../../framework/tests/src/drivers/test_driver_pake.o ../../framework/tests/src/drivers/test_driver_signature.o ../../tests/src/certs.o ../../tests/src/psa_test_wrappers.o ../../tests/src/test_helpers/ssl_helpers.o -L../../library -lmbedtls -lmbedx509 -lmbedcrypto -o fuzz_privkey
cc common.o onefile.o fuzz_pubkey.o ../../framework/tests/src/asn1_helpers.o ../../framework/tests/src/bignum_codepath_check.o ../../framework/tests/src/bignum_helpers.o ../../framework/tests/src/fake_external_rng_for_test.o ../../framework/tests/src/helpers.o ../../framework/tests/src/psa_crypto_helpers.o ../../framework/tests/src/psa_crypto_stubs.o ../../framework/tests/src/psa_exercise_key.o ../../framework/tests/src/psa_memory_poisoning_wrappers.o ../../framework/tests/src/random.o ../../framework/tests/src/test_memory.o ../../framework/tests/src/threading_helpers.o ../../framework/tests/src/drivers/hash.o ../../framework/tests/src/drivers/platform_builtin_keys.o ../../framework/tests/src/drivers/test_driver_aead.o ../../framework/tests/src/drivers/test_driver_asymmetric_encryption.o ../../framework/tests/src/drivers/test_driver_cipher.o ../../framework/tests/src/drivers/test_driver_key_agreement.o ../../framework/tests/src/drivers/test_driver_key_management.o ../../framework/tests/src/drivers/test_driver_mac.o ../../framework/tests/src/drivers/test_driver_pake.o ../../framework/tests/src/drivers/test_driver_signature.o ../../tests/src/certs.o ../../tests/src/psa_test_wrappers.o ../../tests/src/test_helpers/ssl_helpers.o -L../../library -lmbedtls -lmbedx509 -lmbedcrypto -o fuzz_pubkey
cc common.o onefile.o fuzz_server.o ../../framework/tests/src/asn1_helpers.o ../../framework/tests/src/bignum_codepath_check.o ../../framework/tests/src/bignum_helpers.o ../../framework/tests/src/fake_external_rng_for_test.o ../../framework/tests/src/helpers.o ../../framework/tests/src/psa_crypto_helpers.o ../../framework/tests/src/psa_crypto_stubs.o ../../framework/tests/src/psa_exercise_key.o ../../framework/tests/src/psa_memory_poisoning_wrappers.o ../../framework/tests/src/random.o ../../framework/tests/src/test_memory.o ../../framework/tests/src/threading_helpers.o ../../framework/tests/src/drivers/hash.o ../../framework/tests/src/drivers/platform_builtin_keys.o ../../framework/tests/src/drivers/test_driver_aead.o ../../framework/tests/src/drivers/test_driver_asymmetric_encryption.o ../../framework/tests/src/drivers/test_driver_cipher.o ../../framework/tests/src/drivers/test_driver_key_agreement.o ../../framework/tests/src/drivers/test_driver_key_management.o ../../framework/tests/src/drivers/test_driver_mac.o ../../framework/tests/src/drivers/test_driver_pake.o ../../framework/tests/src/drivers/test_driver_signature.o ../../tests/src/certs.o ../../tests/src/psa_test_wrappers.o ../../tests/src/test_helpers/ssl_helpers.o -L../../library -lmbedtls -lmbedx509 -lmbedcrypto -o fuzz_server
cc common.o onefile.o fuzz_x509crl.o ../../framework/tests/src/asn1_helpers.o ../../framework/tests/src/bignum_codepath_check.o ../../framework/tests/src/bignum_helpers.o ../../framework/tests/src/fake_external_rng_for_test.o ../../framework/tests/src/helpers.o ../../framework/tests/src/psa_crypto_helpers.o ../../framework/tests/src/psa_crypto_stubs.o ../../framework/tests/src/psa_exercise_key.o ../../framework/tests/src/psa_memory_poisoning_wrappers.o ../../framework/tests/src/random.o ../../framework/tests/src/test_memory.o ../../framework/tests/src/threading_helpers.o ../../framework/tests/src/drivers/hash.o ../../framework/tests/src/drivers/platform_builtin_keys.o ../../framework/tests/src/drivers/test_driver_aead.o ../../framework/tests/src/drivers/test_driver_asymmetric_encryption.o ../../framework/tests/src/drivers/test_driver_cipher.o ../../framework/tests/src/drivers/test_driver_key_agreement.o ../../framework/tests/src/drivers/test_driver_key_management.o ../../framework/tests/src/drivers/test_driver_mac.o ../../framework/tests/src/drivers/test_driver_pake.o ../../framework/tests/src/drivers/test_driver_signature.o ../../tests/src/certs.o ../../tests/src/psa_test_wrappers.o ../../tests/src/test_helpers/ssl_helpers.o -L../../library -lmbedtls -lmbedx509 -lmbedcrypto -o fuzz_x509crl
cc common.o onefile.o fuzz_x509crt.o ../../framework/tests/src/asn1_helpers.o ../../framework/tests/src/bignum_codepath_check.o ../../framework/tests/src/bignum_helpers.o ../../framework/tests/src/fake_external_rng_for_test.o ../../framework/tests/src/helpers.o ../../framework/tests/src/psa_crypto_helpers.o ../../framework/tests/src/psa_crypto_stubs.o ../../framework/tests/src/psa_exercise_key.o ../../framework/tests/src/psa_memory_poisoning_wrappers.o ../../framework/tests/src/random.o ../../framework/tests/src/test_memory.o ../../framework/tests/src/threading_helpers.o ../../framework/tests/src/drivers/hash.o ../../framework/tests/src/drivers/platform_builtin_keys.o ../../framework/tests/src/drivers/test_driver_aead.o ../../framework/tests/src/drivers/test_driver_asymmetric_encryption.o ../../framework/tests/src/drivers/test_driver_cipher.o ../../framework/tests/src/drivers/test_driver_key_agreement.o ../../framework/tests/src/drivers/test_driver_key_management.o ../../framework/tests/src/drivers/test_driver_mac.o ../../framework/tests/src/drivers/test_driver_pake.o ../../framework/tests/src/drivers/test_driver_signature.o ../../tests/src/certs.o ../../tests/src/psa_test_wrappers.o ../../tests/src/test_helpers/ssl_helpers.o -L../../library -lmbedtls -lmbedx509 -lmbedcrypto -o fuzz_x509crt
cc common.o onefile.o fuzz_x509csr.o ../../framework/tests/src/asn1_helpers.o ../../framework/tests/src/bignum_codepath_check.o ../../framework/tests/src/bignum_helpers.o ../../framework/tests/src/fake_external_rng_for_test.o ../../framework/tests/src/helpers.o ../../framework/tests/src/psa_crypto_helpers.o ../../framework/tests/src/psa_crypto_stubs.o ../../framework/tests/src/psa_exercise_key.o ../../framework/tests/src/psa_memory_poisoning_wrappers.o ../../framework/tests/src/random.o ../../framework/tests/src/test_memory.o ../../framework/tests/src/threading_helpers.o ../../framework/tests/src/drivers/hash.o ../../framework/tests/src/drivers/platform_builtin_keys.o ../../framework/tests/src/drivers/test_driver_aead.o ../../framework/tests/src/drivers/test_driver_asymmetric_encryption.o ../../framework/tests/src/drivers/test_driver_cipher.o ../../framework/tests/src/drivers/test_driver_key_agreement.o ../../framework/tests/src/drivers/test_driver_key_management.o ../../framework/tests/src/drivers/test_driver_mac.o ../../framework/tests/src/drivers/test_driver_pake.o ../../framework/tests/src/drivers/test_driver_signature.o ../../tests/src/certs.o ../../tests/src/psa_test_wrappers.o ../../tests/src/test_helpers/ssl_helpers.o -L../../library -lmbedtls -lmbedx509 -lmbedcrypto -o fuzz_x509csr
make[2]: Leaving directory '/gramine/build/subprojects/mbedtls-3.6.3/libmbedcrypto.a.p/programs/fuzz'
make[1]: Leaving directory '/gramine/build/subprojects/mbedtls-3.6.3/libmbedcrypto.a.p/programs'
make: Leaving directory '/gramine/build/subprojects/mbedtls-3.6.3/libmbedcrypto.a.p'

• basename subprojects/mbedtls-3.6.3/libmbedcrypto.a
• cp -a subprojects/mbedtls-3.6.3/libmbedcrypto.a.p/library/libmbedcrypto.a subprojects/mbedtls-3.6.3/libmbedcrypto.a
• basename subprojects/mbedtls-3.6.3/libmbedtls.a
• cp -a subprojects/mbedtls-3.6.3/libmbedcrypto.a.p/library/libmbedtls.a subprojects/mbedtls-3.6.3/libmbedtls.a
• basename subprojects/mbedtls-3.6.3/libmbedx509.a
• cp -a subprojects/mbedtls-3.6.3/libmbedcrypto.a.p/library/libmbedx509.a subprojects/mbedtls-3.6.3/libmbedx509.a
  ninja: build stopped: subcommand failed.
  Failed to build unsigned graminized Docker image `gsc-idbroker

[anjalirai-intel]

@anjalirai-intel sure I will provide you with: we run it for distro ubuntu 22.04 regarding the logs I can re-run and try capture whole gsc output (if there are any "switches" to produce more useful logging for your investigation pls let me know)

now it seems a different error (gramine master might have changed ? ) :

cc common.o onefile.o fuzz_dtlsclient.o ../../framework/tests/src/asn1_helpers.o ../../framework/tests/src/bignum_codepath_check.o ../../framework/tests/src/bignum_helpers.o ../../framework/tests/src/fake_external_rng_for_test.o ../../framework/tests/src/helpers.o ../../framework/tests/src/psa_crypto_helpers.o ../../framework/tests/src/psa_crypto_stubs.o ../../framework/tests/src/psa_exercise_key.o ../../framework/tests/src/psa_memory_poisoning_wrappers.o ../../framework/tests/src/random.o ../../framework/tests/src/test_memory.o ../../framework/tests/src/threading_helpers.o ../../framework/tests/src/drivers/hash.o ../../framework/tests/src/drivers/platform_builtin_keys.o ../../framework/tests/src/drivers/test_driver_aead.o ../../framework/tests/src/drivers/test_driver_asymmetric_encryption.o ../../framework/tests/src/drivers/test_driver_cipher.o ../../framework/tests/src/drivers/test_driver_key_agreement.o ../../framework/tests/src/drivers/test_driver_key_management.o ../../framework/tests/src/drivers/test_driver_mac.o ../../framework/tests/src/drivers/test_driver_pake.o ../../framework/tests/src/drivers/test_driver_signature.o ../../tests/src/certs.o ../../tests/src/psa_test_wrappers.o ../../tests/src/test_helpers/ssl_helpers.o -L../../library -lmbedtls -lmbedx509 -lmbedcrypto -o fuzz_dtlsclient cc common.o onefile.o fuzz_dtlsserver.o ../../framework/tests/src/asn1_helpers.o ../../framework/tests/src/bignum_codepath_check.o ../../framework/tests/src/bignum_helpers.o ../../framework/tests/src/fake_external_rng_for_test.o ../../framework/tests/src/helpers.o ../../framework/tests/src/psa_crypto_helpers.o ../../framework/tests/src/psa_crypto_stubs.o ../../framework/tests/src/psa_exercise_key.o ../../framework/tests/src/psa_memory_poisoning_wrappers.o ../../framework/tests/src/random.o ../../framework/tests/src/test_memory.o ../../framework/tests/src/threading_helpers.o ../../framework/tests/src/drivers/hash.o ../../framework/tests/src/drivers/platform_builtin_keys.o ../../framework/tests/src/drivers/test_driver_aead.o ../../framework/tests/src/drivers/test_driver_asymmetric_encryption.o ../../framework/tests/src/drivers/test_driver_cipher.o ../../framework/tests/src/drivers/test_driver_key_agreement.o ../../framework/tests/src/drivers/test_driver_key_management.o ../../framework/tests/src/drivers/test_driver_mac.o ../../framework/tests/src/drivers/test_driver_pake.o ../../framework/tests/src/drivers/test_driver_signature.o ../../tests/src/certs.o ../../tests/src/psa_test_wrappers.o ../../tests/src/test_helpers/ssl_helpers.o -L../../library -lmbedtls -lmbedx509 -lmbedcrypto -o fuzz_dtlsserver cc common.o onefile.o fuzz_pkcs7.o ../../framework/tests/src/asn1_helpers.o ../../framework/tests/src/bignum_codepath_check.o ../../framework/tests/src/bignum_helpers.o ../../framework/tests/src/fake_external_rng_for_test.o ../../framework/tests/src/helpers.o ../../framework/tests/src/psa_crypto_helpers.o ../../framework/tests/src/psa_crypto_stubs.o ../../framework/tests/src/psa_exercise_key.o ../../framework/tests/src/psa_memory_poisoning_wrappers.o ../../framework/tests/src/random.o ../../framework/tests/src/test_memory.o ../../framework/tests/src/threading_helpers.o ../../framework/tests/src/drivers/hash.o ../../framework/tests/src/drivers/platform_builtin_keys.o ../../framework/tests/src/drivers/test_driver_aead.o ../../framework/tests/src/drivers/test_driver_asymmetric_encryption.o ../../framework/tests/src/drivers/test_driver_cipher.o ../../framework/tests/src/drivers/test_driver_key_agreement.o ../../framework/tests/src/drivers/test_driver_key_management.o ../../framework/tests/src/drivers/test_driver_mac.o ../../framework/tests/src/drivers/test_driver_pake.o ../../framework/tests/src/drivers/test_driver_signature.o ../../tests/src/certs.o ../../tests/src/psa_test_wrappers.o ../../tests/src/test_helpers/ssl_helpers.o -L../../library -lmbedtls -lmbedx509 -lmbedcrypto -o fuzz_pkcs7 cc common.o onefile.o fuzz_privkey.o ../../framework/tests/src/asn1_helpers.o ../../framework/tests/src/bignum_codepath_check.o ../../framework/tests/src/bignum_helpers.o ../../framework/tests/src/fake_external_rng_for_test.o ../../framework/tests/src/helpers.o ../../framework/tests/src/psa_crypto_helpers.o ../../framework/tests/src/psa_crypto_stubs.o ../../framework/tests/src/psa_exercise_key.o ../../framework/tests/src/psa_memory_poisoning_wrappers.o ../../framework/tests/src/random.o ../../framework/tests/src/test_memory.o ../../framework/tests/src/threading_helpers.o ../../framework/tests/src/drivers/hash.o ../../framework/tests/src/drivers/platform_builtin_keys.o ../../framework/tests/src/drivers/test_driver_aead.o ../../framework/tests/src/drivers/test_driver_asymmetric_encryption.o ../../framework/tests/src/drivers/test_driver_cipher.o ../../framework/tests/src/drivers/test_driver_key_agreement.o ../../framework/tests/src/drivers/test_driver_key_management.o ../../framework/tests/src/drivers/test_driver_mac.o ../../framework/tests/src/drivers/test_driver_pake.o ../../framework/tests/src/drivers/test_driver_signature.o ../../tests/src/certs.o ../../tests/src/psa_test_wrappers.o ../../tests/src/test_helpers/ssl_helpers.o -L../../library -lmbedtls -lmbedx509 -lmbedcrypto -o fuzz_privkey cc common.o onefile.o fuzz_pubkey.o ../../framework/tests/src/asn1_helpers.o ../../framework/tests/src/bignum_codepath_check.o ../../framework/tests/src/bignum_helpers.o ../../framework/tests/src/fake_external_rng_for_test.o ../../framework/tests/src/helpers.o ../../framework/tests/src/psa_crypto_helpers.o ../../framework/tests/src/psa_crypto_stubs.o ../../framework/tests/src/psa_exercise_key.o ../../framework/tests/src/psa_memory_poisoning_wrappers.o ../../framework/tests/src/random.o ../../framework/tests/src/test_memory.o ../../framework/tests/src/threading_helpers.o ../../framework/tests/src/drivers/hash.o ../../framework/tests/src/drivers/platform_builtin_keys.o ../../framework/tests/src/drivers/test_driver_aead.o ../../framework/tests/src/drivers/test_driver_asymmetric_encryption.o ../../framework/tests/src/drivers/test_driver_cipher.o ../../framework/tests/src/drivers/test_driver_key_agreement.o ../../framework/tests/src/drivers/test_driver_key_management.o ../../framework/tests/src/drivers/test_driver_mac.o ../../framework/tests/src/drivers/test_driver_pake.o ../../framework/tests/src/drivers/test_driver_signature.o ../../tests/src/certs.o ../../tests/src/psa_test_wrappers.o ../../tests/src/test_helpers/ssl_helpers.o -L../../library -lmbedtls -lmbedx509 -lmbedcrypto -o fuzz_pubkey cc common.o onefile.o fuzz_server.o ../../framework/tests/src/asn1_helpers.o ../../framework/tests/src/bignum_codepath_check.o ../../framework/tests/src/bignum_helpers.o ../../framework/tests/src/fake_external_rng_for_test.o ../../framework/tests/src/helpers.o ../../framework/tests/src/psa_crypto_helpers.o ../../framework/tests/src/psa_crypto_stubs.o ../../framework/tests/src/psa_exercise_key.o ../../framework/tests/src/psa_memory_poisoning_wrappers.o ../../framework/tests/src/random.o ../../framework/tests/src/test_memory.o ../../framework/tests/src/threading_helpers.o ../../framework/tests/src/drivers/hash.o ../../framework/tests/src/drivers/platform_builtin_keys.o ../../framework/tests/src/drivers/test_driver_aead.o ../../framework/tests/src/drivers/test_driver_asymmetric_encryption.o ../../framework/tests/src/drivers/test_driver_cipher.o ../../framework/tests/src/drivers/test_driver_key_agreement.o ../../framework/tests/src/drivers/test_driver_key_management.o ../../framework/tests/src/drivers/test_driver_mac.o ../../framework/tests/src/drivers/test_driver_pake.o ../../framework/tests/src/drivers/test_driver_signature.o ../../tests/src/certs.o ../../tests/src/psa_test_wrappers.o ../../tests/src/test_helpers/ssl_helpers.o -L../../library -lmbedtls -lmbedx509 -lmbedcrypto -o fuzz_server cc common.o onefile.o fuzz_x509crl.o ../../framework/tests/src/asn1_helpers.o ../../framework/tests/src/bignum_codepath_check.o ../../framework/tests/src/bignum_helpers.o ../../framework/tests/src/fake_external_rng_for_test.o ../../framework/tests/src/helpers.o ../../framework/tests/src/psa_crypto_helpers.o ../../framework/tests/src/psa_crypto_stubs.o ../../framework/tests/src/psa_exercise_key.o ../../framework/tests/src/psa_memory_poisoning_wrappers.o ../../framework/tests/src/random.o ../../framework/tests/src/test_memory.o ../../framework/tests/src/threading_helpers.o ../../framework/tests/src/drivers/hash.o ../../framework/tests/src/drivers/platform_builtin_keys.o ../../framework/tests/src/drivers/test_driver_aead.o ../../framework/tests/src/drivers/test_driver_asymmetric_encryption.o ../../framework/tests/src/drivers/test_driver_cipher.o ../../framework/tests/src/drivers/test_driver_key_agreement.o ../../framework/tests/src/drivers/test_driver_key_management.o ../../framework/tests/src/drivers/test_driver_mac.o ../../framework/tests/src/drivers/test_driver_pake.o ../../framework/tests/src/drivers/test_driver_signature.o ../../tests/src/certs.o ../../tests/src/psa_test_wrappers.o ../../tests/src/test_helpers/ssl_helpers.o -L../../library -lmbedtls -lmbedx509 -lmbedcrypto -o fuzz_x509crl cc common.o onefile.o fuzz_x509crt.o ../../framework/tests/src/asn1_helpers.o ../../framework/tests/src/bignum_codepath_check.o ../../framework/tests/src/bignum_helpers.o ../../framework/tests/src/fake_external_rng_for_test.o ../../framework/tests/src/helpers.o ../../framework/tests/src/psa_crypto_helpers.o ../../framework/tests/src/psa_crypto_stubs.o ../../framework/tests/src/psa_exercise_key.o ../../framework/tests/src/psa_memory_poisoning_wrappers.o ../../framework/tests/src/random.o ../../framework/tests/src/test_memory.o ../../framework/tests/src/threading_helpers.o ../../framework/tests/src/drivers/hash.o ../../framework/tests/src/drivers/platform_builtin_keys.o ../../framework/tests/src/drivers/test_driver_aead.o ../../framework/tests/src/drivers/test_driver_asymmetric_encryption.o ../../framework/tests/src/drivers/test_driver_cipher.o ../../framework/tests/src/drivers/test_driver_key_agreement.o ../../framework/tests/src/drivers/test_driver_key_management.o ../../framework/tests/src/drivers/test_driver_mac.o ../../framework/tests/src/drivers/test_driver_pake.o ../../framework/tests/src/drivers/test_driver_signature.o ../../tests/src/certs.o ../../tests/src/psa_test_wrappers.o ../../tests/src/test_helpers/ssl_helpers.o -L../../library -lmbedtls -lmbedx509 -lmbedcrypto -o fuzz_x509crt cc common.o onefile.o fuzz_x509csr.o ../../framework/tests/src/asn1_helpers.o ../../framework/tests/src/bignum_codepath_check.o ../../framework/tests/src/bignum_helpers.o ../../framework/tests/src/fake_external_rng_for_test.o ../../framework/tests/src/helpers.o ../../framework/tests/src/psa_crypto_helpers.o ../../framework/tests/src/psa_crypto_stubs.o ../../framework/tests/src/psa_exercise_key.o ../../framework/tests/src/psa_memory_poisoning_wrappers.o ../../framework/tests/src/random.o ../../framework/tests/src/test_memory.o ../../framework/tests/src/threading_helpers.o ../../framework/tests/src/drivers/hash.o ../../framework/tests/src/drivers/platform_builtin_keys.o ../../framework/tests/src/drivers/test_driver_aead.o ../../framework/tests/src/drivers/test_driver_asymmetric_encryption.o ../../framework/tests/src/drivers/test_driver_cipher.o ../../framework/tests/src/drivers/test_driver_key_agreement.o ../../framework/tests/src/drivers/test_driver_key_management.o ../../framework/tests/src/drivers/test_driver_mac.o ../../framework/tests/src/drivers/test_driver_pake.o ../../framework/tests/src/drivers/test_driver_signature.o ../../tests/src/certs.o ../../tests/src/psa_test_wrappers.o ../../tests/src/test_helpers/ssl_helpers.o -L../../library -lmbedtls -lmbedx509 -lmbedcrypto -o fuzz_x509csr make[2]: Leaving directory '/gramine/build/subprojects/mbedtls-3.6.3/libmbedcrypto.a.p/programs/fuzz' make[1]: Leaving directory '/gramine/build/subprojects/mbedtls-3.6.3/libmbedcrypto.a.p/programs' make: Leaving directory '/gramine/build/subprojects/mbedtls-3.6.3/libmbedcrypto.a.p'

• basename subprojects/mbedtls-3.6.3/libmbedcrypto.a
• cp -a subprojects/mbedtls-3.6.3/libmbedcrypto.a.p/library/libmbedcrypto.a subprojects/mbedtls-3.6.3/libmbedcrypto.a
• basename subprojects/mbedtls-3.6.3/libmbedtls.a
• cp -a subprojects/mbedtls-3.6.3/libmbedcrypto.a.p/library/libmbedtls.a subprojects/mbedtls-3.6.3/libmbedtls.a
• basename subprojects/mbedtls-3.6.3/libmbedx509.a
• cp -a subprojects/mbedtls-3.6.3/libmbedcrypto.a.p/library/libmbedx509.a subprojects/mbedtls-3.6.3/libmbedx509.a
  ninja: build stopped: subcommand failed.
  Failed to build unsigned graminized Docker image `gsc-idbroker

@uwe-albert-ibm No, the Gramine master branch has remained unchanged for the past two weeks. Please try running docker system prune and then attempt to collect the logs once more. You can enclose your logs within triple backticks (```) and ensure to close them with quotes at the end, or alternatively, you can attach a log file.

[uwe-albert-ibm]

Hi @anjalirai-intel , thanks for taking all that trouble
here are the logs from a freshly pruned system

gsc-master-branch-issue.txt

[anjalirai-intel]

@uwe-albert-ibm the logs does not contain any detail, except the failure part, you can check the logs steps. You should see Step 1/29. check the logs for step 6 & step 7, this will ensure whether gramine master is being used and if possible share step 8 full logs, those are gramine build log.

[uwe-albert-ibm]

@uwe-albert-ibm the logs does not contain any detail, except the failure part, you can check the logs steps. You should see Step 1/29. check the logs for step 6 & step 7, this will ensure whether gramine master is being used and if possible share step 8 full logs, those are gramine build log.

sure, I will provide you with complete gsc output , takes just 30-40 minutes due to runtime :-)

@anjalirai-intel here it comes:

gsc-master-branch-issue.txt

[anjalirai-intel]

@uwe-albert-ibm the logs does not contain any detail, except the failure part, you can check the logs steps. You should see Step 1/29. check the logs for step 6 & step 7, this will ensure whether gramine master is being used and if possible share step 8 full logs, those are gramine build log.

sure, I will provide you with complete gsc output , takes just 30-40 minutes due to runtime :-)

@anjalirai-intel here it comes:

gsc-master-branch-issue.txt

@uwe-albert-ibm For some reason, it is getting build from cache, As per gsc template https://github.com/gramineproject/gsc/blob/master/templates/debian/Dockerfile.compile.template#L42 , it should install latest version of meson, but it is running with meson v1.1.1.

I am sharing logs for ubuntu 22.04 where it is working. Please try cleanup properly

gsc_master.log