#1104384 gittuf: FTBFS randomly: targets_test.go:36: failed to run command /usr/bin/ssh-keygen -m rfc4716 -e -f /build/reproducible-path/gittuf-0.9.0/debian/gotmp/TestTargetsMetadataAndDelegations-72cca03496422cdfe1c00ba5e299d18ca383b16041a7b28a5fca5e853b8f065a: exit status 255 ssh-keygen: /build/reproducible-path/gittuf-0.9.0/debian/gotmp/TestTargetsMetadataAndDelegations-72cca03496422cdfe1c00ba5e299d18ca383b16041a7b28a5fca5e853b8f065a: No such file or directory

Package:
src:gittuf
Source:
src:gittuf
Submitter:
Lucas Nussbaum
Date:
2026-05-17 09:07:02 UTC
Severity:
normal
Tags:
#1104384#5
Date:
2025-04-29 13:45:36 UTC
From:
To:
Hi,

Your package fails to build randomly on amd64: In the exact same
environment, sometimes it builds fine, and sometimes it fails.

Relevant part (hopefully):
The full build log is available from:
http://qa-logs.debian.net/2025/04/28/gittuf_0.9.0-5_unstable.log

You can find other build logs (including successful ones) in:
http://qa-logs.debian.net/2025/04/28/

All bugs filed during this archive rebuild are listed at:
https://bugs.debian.org/cgi-bin/pkgreport.cgi?tag=ftbfs-20250428;users=lucas@debian.org
or:
https://udd.debian.org/bugs/?release=na&merged=ign&fnewerval=7&flastmodval=7&fusertag=only&fusertagtag=ftbfs-20250428&fusertaguser=lucas@debian.org&allbugs=1&cseverity=1&ctags=1&caffected=1#results

A list of current common problems and possible solutions is available at
http://wiki.debian.org/qa.debian.org/FTBFS . You're welcome to contribute!

If you reassign this bug to another package, please mark it as 'affects'-ing
this package. See https://www.debian.org/Bugs/server-control#affects

If you fail to reproduce this, please provide a build log and diff it with mine
so that we can identify if something relevant changed in the meantime.

#1104384#14
Date:
2026-03-15 14:01:37 UTC
From:
To:
fixed 1104384 0.12.0-1
thanks

Debci seems happy with 0.12.0-1, tagging appropriately.

https://ci.debian.net/packages/g/gittuf/unstable/amd64/

/Simon

#1104384#21
Date:
2026-05-17 09:03:52 UTC
From:
To:
This bug appears to be fixed. The package gittuf 0.12.0-2 is nnow present
in both unstable(sid) and testing(trixie) as of March 26, 2026.

the FTBFS issue is targets_test.go (ssh-keygen race condition) was resolved
in version 0.12.0-1 and is included in the current 0.12.0-2.

closing this bug.