Build fails on WSL2 for windows

[fhoering]

I'm trying to build the latest version 4.7 of B&A https://github.com/privacysandbox/bidding-auction-servers with WSL2 Ubuntu

./production/packaging/build_and_test_all_in_docker \
  --service-path bidding_service \
  --service-path auction_service \
  --service-path buyer_frontend_service \
  --service-path seller_frontend_service \
  --platform gcp \
  --instance local \
  --no-precommit \
  --no-tests \
  --build-flavor non_prod \
  --gcp-skip-image-upload

Any idea on how to fix this as it worked before introducing this code path ?

https://github.com/privacysandbox/data-plane-shared-libraries/blob/72a4f180505acaa9baf30416c97ed88f256b15af/src/roma/byob/container/BUILD.bazel#L225

ERROR: /bazel_root/build_ubuntu_b77b7d5/ae89832ceb705fbace0506a09b1a240f/external/google_privacysandbox_servers_common/src/roma/byob/container/BUILD.bazel:222:12: Executing genrule @google_privacysandbox_servers_common//src/roma/byob/container:gen_byob_runtime_container_tar_amd64 failed: (Exit 1): bash failed: error executing command (from target @google_privacysandbox_servers_common//src/roma/byob/container:gen_byob_runtime_container_tar_amd64)
  (cd /bazel_root/build_ubuntu_b77b7d5/ae89832ceb705fbace0506a09b1a240f/sandbox/linux-sandbox/58/execroot/__main__ && \
  exec env - \
    PATH=/root/.cache/bazelisk/downloads/sha256/d64606c17e6b6a7fc119150420b4c109315982319ff3229587e200c47bf36946/bin:/opt/bin:/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:/usr/local/go/bin \
    TOOLCHAINS_HASH=b77b7d50a6527337035ce8d9d8a4a32218c32a5c0c431f28d4ca1a4bf767e384 \
  /bin/bash -c 'source external/bazel_tools/tools/genrule/genrule-setup.sh; echo FROM gcr.io/distroless/cc-debian11@sha256:5a9e854bab8498a61a66b2cfa4e76e009111d09cb23a353aaa8d926e29a653d9 | docker buildx build --output=type=tar,dest=bazel-out/k8-opt/bin/external/google_privacysandbox_servers_common/src/roma/byob/container/byob_runtime_base_amd64.tar --file=- .')
# Configuration: 495a315cb963408b5d7f5d3da7b60442029a34572baf1796db8a4b1bf394e6e6
# Execution platform: @local_config_platform//:host

Use --sandbox_debug to see verbose messages from the sandbox and retain the sandbox build root for debugging
ERROR: mkdir /root/.docker: read-only file system

[a-shruti]

Hello!

I am unable to repro this issue. However, I am using a Linux machine.

ERROR: mkdir /root/.docker: read-only file system

looks like a permission issue to me.

One thing I notice is that for you spawn strategy is defaulting to a different value. Could you try adding common --spawn_strategy=processwrapper-sandbox to .bazelrc file?

Another thing worth sharing would be the output for the following -

builders/tools/cbuild
# This will take open a shell a container. In that container could you try running - 
bazel build @google_privacysandbox_servers_common//src/roma/byob/container:gen_byob_runtime_container_tar_amd64 
whoami
ls -la /root/

Thanks!

[fhoering]

OK. I suppose builders/tools/cbuild moves me inside the docker build container. This seems to work:

fh@MYCOMPUTERNAME:~/dev/bidding-auction-servers$ builders/tools/cbuild
Error: No such object: MYCOMPUTERNAME
Error: Unable to determine mount point for /src/workspace. Exiting
root@MYCOMPUTERNAME:/src/workspace# bazel build @google_privacysandbox_servers_common//src/roma/byob/container:gen_byob_runtime_container_tar_amd64
Starting local Bazel server and connecting to it...
INFO: Reading 'startup' options from /etc/bazel.bazelrc: --output_user_root=/bazel_root/build_ubuntu_b77b7d5
INFO: Reading 'startup' options from /root/.bazelrc: --output_base=/bazel_root/build_ubuntu_b77b7d5/d41d8cd98f00b204e9800998ecf8427e
INFO: Options provided by the client:
  Inherited 'common' options: --isatty=1 --terminal_columns=340
INFO: Reading rc options for 'build' from /etc/bazel.bazelrc:
  'build' options: --action_env=TOOLCHAINS_HASH=b77b7d50a6527337035ce8d9d8a4a32218c32a5c0c431f28d4ca1a4bf767e384
INFO: Reading rc options for 'build' from /src/workspace/.bazelrc:
  'build' options: --announce_rc --verbose_failures --config=clang --compilation_mode=opt --output_filter=^//((?!(third_party):).)*$ --color=yes --workspace_status_command=bash tools/get_workspace_status --@io_opentelemetry_cpp//api:with_abseil --copt=-DENABLE_LOGS_PREVIEW --@com_google_googleurl//build_config:system_icu=0
INFO: Found applicable config definition build:clang in file /src/workspace/.bazelrc: --config=cpp_no_warn --cxxopt=-fbracket-depth=512 --client_env=CC=clang --cxxopt=-std=c++17 --host_cxxopt=-std=c++17 --client_env=BAZEL_CXXOPTS=-std=c++17 --copt=-Werror=thread-safety --per_file_copt=external/nitrokmscli_.*.c@-Wno-int-conversion --per_file_copt=api/.*_builder.c@-Wno-deprecated-declarations --cxxopt=-fsized-deallocation --host_cxxopt=-fsized-deallocation --cxxopt=-fnew-alignment=8 --host_cxxopt=-fnew-alignment=8 --per_file_copt=api/udf/.*@-fconstexpr-steps=1271242
INFO: Found applicable config definition build:cpp_no_warn in file /src/workspace/.bazelrc: --copt=-Werror --per_file_copt=.*external/.*@-Wno-error --per_file_copt=(services|api/udf)/.*@-Wno-macro-redefined,-Wno-deprecated-declarations,-Wno-deprecated-builtins --per_file_copt=tools/secure_invoke.*@-Wno-macro-redefined,-Wno-deprecated-declarations --per_file_copt=services/.*_main.cc@-Wno-unused-result --per_file_copt=services/common/telemetry/.*_test.cc@-Wno-unused-result --per_file_copt=services/.*_benchmarks.cc@-Wno-unused-function
INFO: Analyzed target @google_privacysandbox_servers_common//src/roma/byob/container:gen_byob_runtime_container_tar_amd64 (7 packages loaded, 7 targets configured).
INFO: Found 1 target...
Target @google_privacysandbox_servers_common//src/roma/byob/container:gen_byob_runtime_container_tar_amd64 up-to-date:
  bazel-bin/external/google_privacysandbox_servers_common/src/roma/byob/container/byob_runtime_base_amd64.tar
INFO: Elapsed time: 4.803s, Critical Path: 0.13s
INFO: 1 process: 1 internal.
INFO: Build completed successfully, 1 total action
root@MYCOMPUTERNAME:/src/workspace# whoami
root
root@MYCOMPUTERNAME:/src/workspace# ls -la /root/
total 32
drwx------ 1 root root 4096 Mar  3 15:53 .
drwxr-xr-x 1 root root 4096 Mar  3 15:53 ..
-rw-r--r-- 1 root root 3106 Dec  5  2019 .bashrc
-rw-r--r-- 1 root root   91 Mar  3 15:53 .bazelrc
drwxr-xr-x 5 root root 4096 Dec  2 15:21 .cache
drwxr-xr-x 4 root root 4096 Dec  2 15:21 go
-rw-r--r-- 1 root root  161 Dec  5  2019 .profile
-rw-r--r-- 1 root root  162 Dec  2 15:19 .wget-hsts
root@MYCOMPUTERNAME:/src/workspace#

There is some error because the container id cannot be extracted. Not sure it is blocking or not:
https://github.com/privacysandbox/build-system/blob/main/tools/builder.sh#L64

Error: No such object: MYCOMPUTERNAME
Error: Unable to determine mount point for /src/workspace. Exiting

root@MYCOMPUTERNAME:/src/workspace# uname --nodename
MYCOMPUTERNAME
root@MYCOMPUTERNAME:/src/workspace# docker container ls
CONTAINER ID   IMAGE                                                                                                         COMMAND                  CREATED          STATUS          PORTS     NAMES
f20834fda01c   privacysandbox/builders/build-debian:amd64-6d577d1a7564bb3fb8f815d49ef5e5ef30c0cfb7cf2d8cac83f78b3ee6e018c7   "/bin/bash --login"      5 minutes ago    Up 5 minutes              cbuild-73c76f4-6d577d1-15c9a70
root@MYCOMPUTERNAME:/src/workspace#

Adding this to .bazelrc also seems to work:

common --spawn_strategy=processwrapper-sandbox