Community
Participate
Working Groups
I'm trying to run what I hope will be the last UML2 build on the old build infrastructure on modeling.eclipse.org. During the build, files are transferred to and from build.eclipse.org for signing and promotion. I requested SSH access for my user (khussey) via the portal, but the build still fails. I suspect this is because the build user on that machine (www-data and/or apache) need shell access (for ssh and scp) to build.eclipse.org. I obviously can't request shell access for these users, but it appears it is needed for the build to succeed: -timestamp: [echo] 12:44:50 [mkdir] Created dir: /home/www-data/build/modeling/mdt/uml2/downloads/drops/3.2.1/R201109131236/eclipse/packtmp [move] Moving 1 file to /home/www-data/build/modeling/mdt/uml2/downloads/drops/3.2.1/R201109131236/eclipse/packtmp [exec] adding: pack.properties (deflated 7%) -timestamp: [echo] 12:44:50 [echo] push drop to staging directory [exec] Result: 1 [exec] Result: 255 -timestamp: [echo] 12:44:51 [echo] invoke sign script and wait [exec] Result: 255 waitForChangedAttribs: -timestamp: [echo] 12:44:51 compareAttribs: [exec] Result: 255 [echo] original: ${originalAttribs} [echo] polled: Permission denied (publickey,keyboard-interactive). Could you please confirm whether this user had shell access and, if so, re-enable it if even for a brief period so I can do my last build?
I saw this in my logs for today, on build.eclipse.org: Sep 13 12:45:47 build sshd[19963]: Accepted publickey for khussey from 209.217.126.116 So your account, your public key, and your shell are fine. I believe your build script is trying to scp as nickb. I've granted him a real shell while we can figure this out. Apologies for the inconvenience.
(In reply to comment #1) > I believe your build script is trying to scp as nickb. I've granted him a real > shell while we can figure this out. Thanks, that helped - the build completed. Now promotion of the build is failing: [promote] [23:48:51] Create target drop folder /home/data/httpd/download.eclipse.org/modeling/mdt/uml2/downloads/drops/3.2.1/R201109132310 on remote box started: Not allowed to do 'mkdir' at /usr/local/bin/committer_shell line 153. [promote] [23:48:51] Create target drop folder /home/data/httpd/download.eclipse.org/modeling/mdt/uml2/downloads/drops/3.2.1/R201109132310 on remote box done. [promote] [23:48:51] SCP build folder 3.2.1/R201109132310 onto remote box started: Not allowed to do 'rsync' at /usr/local/bin/committer_shell line 153. rsync: connection unexpectedly closed (0 bytes received so far) [sender] rsync error: error in rsync protocol data stream (code 12) at io.c(434) [promote] [23:48:51] SCP build folder 3.2.1/R201109132310 onto remote box done. [promote] [23:48:51] Comparing local and remote folders to ensure SCP completeness... [compare] Started Tue Sep 13 23:48:51 EDT 2011 [compare] Local: khussey@localhost:/home/www-data/build/modeling/mdt/uml2/downloads/drops/3.2.1/R201109132310 [compare] Remote: khussey@download1.eclipse.org:/home/data/httpd/download.eclipse.org/modeling/mdt/uml2/downloads/drops/3.2.1/R201109132310 [compare] Compare dir contents file sizes (omit Master and Update zips) ... local ... remote ... Not allowed to do 'cd' at /usr/local/bin/committer_shell line 153. cat: /tmp/compareFolders.sh-khussey-remote-20110913_234851.tmp: No such file or directory [compare] Directory sizes do not match! Compare failed (local vs. remote): diff: /tmp/compareFolders.sh-khussey-remote-20110913_234851.tmp: No such file or directory [promote] [23:48:52] ERROR! Script exiting with code 2 from compareFolders.sh
> Not allowed to do 'mkdir' Looks like you're trying to run this on dev.eclipse.org ... can you change that to build.eclipse.org ? All the file paths are the same.
(In reply to comment #3) > > Not allowed to do 'mkdir' > > Looks like you're trying to run this on dev.eclipse.org ... can you change that > to build.eclipse.org ? All the file paths are the same. I could try but these are scripts that Nick wrote a long time ago... I'd have to find them, edit them, and figure out how to update them on modeling.eclipse.org. If that's the only way, I'll investigate but it's not looking good for my SR1 build. :(
Hi Kenn, just update the build to run as yourself and not Nick. I did this for my builds, they run as ahunter. I just ran a GEF build and the signing worked.
(In reply to comment #5) > Hi Kenn, just update the build to run as yourself and not Nick. > > I did this for my builds, they run as ahunter. > > I just ran a GEF build and the signing worked. OK, you are passed the builds running, you are on to promote....
OK, the GEF build promote script is dead in the water as well with the same issue. I cannot promote any builds. You want us to replace dev.eclipse.org with build.eclipse.org right? I cannot ssh from modeling.eclipse.org to build.eclipse.org. I am supposed to be allowed?
(In reply to comment #7) > OK, the GEF build promote script is dead in the water as well with the same > issue. > > I cannot promote any builds. > > You want us to replace dev.eclipse.org with build.eclipse.org right? > > I cannot ssh from modeling.eclipse.org to build.eclipse.org. I am supposed to > be allowed? download1.eclipse.org is no good either. Time is up for looking at changing our build scripts at RC4. We have to put our access back or there will not be a GEF SR1 nor EMF Transaction SR1. Those are the two builds I take care of.
(In reply to comment #4) > I could try but these are scripts that Nick wrote a long time ago... I'd have > to find them, edit them, and figure out how to update them on > modeling.eclipse.org. If that's the only way, I'll investigate but it's not > looking good for my SR1 build. :( Luckily, as it turns out, the scripts were already parameterized for the CVS and download servers, so I changed the promotion properties file for UML2 and things seem to be getting farther...
(In reply to comment #7) > OK, the GEF build promote script is dead in the water as well with the same > issue. > > I cannot promote any builds. > > You want us to replace dev.eclipse.org with build.eclipse.org right? See my other comment. You should be able to do this via the promotion properties files... > > I cannot ssh from modeling.eclipse.org to build.eclipse.org. I am supposed to > be allowed? The user running the build (and also nickb, apparently) need shell access, yes.
My build promotion finally completed, thanks for the help. As long as I don't need to do an SR2 (fingers crossed), I won't need to run my builds on modeling.eclipse.org any more (builds for Juno are running on Hudson).