[
https://issues.apache.org/jira/browse/BEAM-11227?focusedWorklogId=574502&page=com.atlassian.jira.plugin.system.issuetabpanels:worklog-tabpanel#worklog-574502
]
ASF GitHub Bot logged work on BEAM-11227:
-----------------------------------------
Author: ASF GitHub Bot
Created on: 31/Mar/21 01:38
Start Date: 31/Mar/21 01:38
Worklog Time Spent: 10m
Work Description: suztomo edited a comment on pull request #14295:
URL: https://github.com/apache/beam/pull/14295#issuecomment-810577032
Comparison of the time.
Bad one:
https://ci-beam.apache.org/job/beam_PreCommit_Java_Commit/16814/consoleFull
Good one (with empty change):
https://ci-beam.apache.org/job/beam_PreCommit_Java_Phrase/3287/consoleFull
Good one with this PR:
https://ci-beam.apache.org/job/beam_PreCommit_Java_Phrase/3260/consoleFull
Differences
# "FROM-CACHE"
Good one with empty change has 718 "FROM-CACHE" marked Gradle tasks, while
bad one has only 19.
(Good one with this PR had 57 "FROM-CACHE" marked tasks.)
If the difference comes from the Gradle's build cache's status, running
"Java Precommit" will warm up the build cache on the Jenkins nodes eventually.
# What's printed before the timeout?
It seems that something gets stuck during the build when the build times out.
https://ci-beam.apache.org/job/beam_PreCommit_Java_Phrase/3260/console has
```
12:14:16 GitHub pull request #14295 of commit
7746a03db04a81fcc01a71a39d280fbbba8011de, no merge conflicts.
...
12:48:55 > Task :sdks:java:container:goBuild
12:48:55 > Task :sdks:java:container:java8:copySdkHarnessLauncher
12:48:55 > Task :sdks:java:container:java8:dockerPrepare
12:48:56 > Task :sdks:java:container:java8:docker
12:49:22 > Task :sdks:java:core:validateShadedJarDoesntLeakNonProjectClasses
12:49:23 > Task :sdks:java:core:check
12:49:23 > Task :sdks:java:core:build
12:49:23 > Task :sdks:java:core:buildNeeded
12:49:23 Build timed out (after 120 minutes). Marking the build as aborted.
14:14:36 Build was aborted
```
Something was stuck for
```
19:19:05 GitHub pull request #14295 of commit
adb900f5e59bd2d73dcab01fdafba31335a74958, no merge conflicts.
...
19:55:45 > Task :sdks:java:core:build
19:55:45 > Task :sdks:java:core:buildNeeded
19:55:45 > Task :sdks:go:buildLinuxAmd64
19:55:53 > Task :sdks:go:goBuild
19:55:53
19:55:57 > Task :sdks:java:container:resolveBuildDependencies
19:55:57 Resolving
./github.com/apache/beam/sdks/go@/home/jenkins/jenkins-slave/workspace/beam_PreCommit_Java_Phrase/src/sdks/go
19:55:57
19:55:58 > Task :sdks:java:container:installDependencies
19:55:58 > Task :sdks:java:container:buildLinuxAmd64
19:56:06 > Task :sdks:java:container:goBuild
19:56:06 > Task :sdks:java:container:java8:copySdkHarnessLauncher
19:56:07 > Task :sdks:java:container:java8:dockerPrepare
19:56:08 > Task :sdks:java:container:java8:docker
19:56:35 Build timed out (after 120 minutes). Marking the build as aborted.
21:19:28 Build was aborted
```
(Timestamp on "Build timed out (after 120 minutes)" seems misleading but the
timeout did happen 2 hours after the build started.)
What was going on before the timeout?
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
For queries about this service, please contact Infrastructure at:
[email protected]
Issue Time Tracking
-------------------
Worklog Id: (was: 574502)
Time Spent: 85h 10m (was: 85h)
> Upgrade beam-vendor-grpc-1_26_0-0.3 to fix CVE-2020-27216
> ---------------------------------------------------------
>
> Key: BEAM-11227
> URL: https://issues.apache.org/jira/browse/BEAM-11227
> Project: Beam
> Issue Type: Bug
> Components: build-system
> Affects Versions: 2.21.0, 2.22.0, 2.23.0, 2.24.0, 2.25.0
> Reporter: Boury Mbodj
> Assignee: Kenneth Knowles
> Priority: P1
> Labels: apache-beam, beam
> Fix For: 2.29.0
>
> Time Spent: 85h 10m
> Remaining Estimate: 0h
>
> *+Description+**:* [Apache Beam :: Vendored Dependencies :: GRPC ::
> 1.26.0|https://mvnrepository.com/artifact/org.apache.beam/beam-vendor-grpc-1_26_0]
> »
> [0.3|https://mvnrepository.com/artifact/org.apache.beam/beam-vendor-grpc-1_26_0/0.3]
> uses the dependency Eclipse Jetty (9.2.10.v20150310), which is prone to a
> privilege escalation vulnerability. This issue (CVE-2020-27216) was published
> on 23/10/2020.
> *+Affected Versions:+*
> Eclipse Jetty versions 9.4.32.v20200930 and prior, 10.0.0.beta2 and prior
> and 11.0.0.beta2 and prior.
> *+Recommendation/+* *+Update Suggestion:+*
> Update the Eclipse Jetty dependency to version 9.4.33.v20201020,
> 10.0.0.beta3, 11.0.0.beta3 or later.
>
--
This message was sent by Atlassian Jira
(v8.3.4#803005)
