ossf/package-analysis

Sandbox failed (error starting container: exit status 125)

coffeehb opened this issue · 5 comments

Hello, I encountered the same error as #271 in running the project.

➜  package-analysis git:(main) scripts//run_analysis.sh -ecosystem pypi -package pythonkafka -dryrun
-----------------------------------------
Package Details
Ecosystem:                pypi
Package:                  pythonkafka
Version:
Location:                 remote
-----------------------------------------
Analysis command (dry run)

docker run --cgroupns=host --privileged --rm -ti -v /var/lib/containers:/var/lib/containers -v /tmp/results:/results -v /tmp/staticResults:/staticResults -v /tmp/writeResults:/writeResults -v /tmp/dockertmp:/tmp gcr.io/ossf-malware-analysis/analysis analyze -upload file:///results/ -upload-file-write-info file:///writeResults/ -upload-static file:///staticResults/ -ecosystem pypi -package pythonkafka

➜  package-analysis git:(main) scripts//run_analysis.sh -ecosystem pypi -package pythonkafka
-----------------------------------------
Package Details
Ecosystem:                pypi
Package:                  pythonkafka
Version:
Location:                 remote
-----------------------------------------
Analysing package

2023-03-07T06:45:38.164Z	INFO	worker/logging.go:63	Got request	{"ecosystem": "pypi", "name": "pythonkafka", "version": "", "package_path": "", "results_bucket_override": ""}
2023-03-07T06:45:38.625Z	INFO	analyze/main.go:199	Starting static analysis
2023-03-07T06:45:38.625Z	DEBUG	sandbox/init.go:71	Creating bridge network
2023-03-07T06:45:38.647Z	DEBUG	sandbox/init.go:31	Loading iptable rules
2023-03-07T06:45:38.652Z	INFO	worker/runstatic.go:35	Running static analysis	{"tasks": ["all"]}
2023-03-07T06:45:38.652Z	DEBUG	sandbox/sandbox.go:240	podman	{"args": ["--cgroup-manager=cgroupfs", "--events-backend=file", "pull", "gcr.io/ossf-malware-analysis/static-analysis:latest"]}
2023-03-07T06:45:39.146Z	FATAL	analyze/main.go:128	Static analysis aborted	{"error": "sandbox failed (error pulling image: exit status 125)"}
main.staticAnalysis
	/src/cmd/analyze/main.go:128
main.main
	/src/cmd/analyze/main.go:200
runtime.main
	/usr/local/go/src/runtime/proc.go:250

-----------------------------------------
Analysis failed

docker process exited with code 1

Ecosystem:                pypi
Package:                  pythonkafka
Version:
Location:                 remote
-----------------------------------------
➜  package-analysis git:(main) uname -a
Linux ziwu.cd 5.4.0-73-generic #82~18.04.1-Ubuntu SMP Fri Apr 16 15:10:02 UTC 2021 x86_64 x86_64 x86_64 GNU/Linux
➜  package-analysis git:(main) docker -v
Docker version 23.0.0, build e92dd87

I updated the latest code to test on both Mac and Ubuntu, none of them work properly. please help me!

Thanks for the report!

That's strange, I don't think it's the same error as the one you linked - it seems like it's having some trouble pulling the remote image needed for static analysis, but I know it's there because it pulls fine when I run it.

What happens if you run docker pull gcr.io/ossf-malware-analysis/static-analysis:latest? Does it download successfully?

By the way, there is no package on PyPI named pythonkafka, perhaps you meant kafka-python?

Thanks for your reply, when i run

docker pull gcr.io/ossf-malware-analysis/static-analysis:latest

it always returns an error

Error response from daemon: Get "https://gcr.io/v2/": dial tcp 142.250.157.82:443: i/o timeout

Due to network restrictions at my home, I had to apply for a VPS to download this image. Do you mind if I upload the image in the hub.docker repository? like this
https://hub.docker.com/r/coffeehb/ossf-malware-analysis-analysis
so, I can download normally from the hub.docker warehouse.

If you disagree, please let me know and I will delete it as soon as possible. All the best wishes to you.

That's fine. Please make it clear that it's an unofficial copy of the image and isn't supported by us.