build-tails script should unmount website cache
I've seen a case where many files are empty in the included website (including OpenPGP keys). The website was retrieved from the cache. That cache was generated by an earlier build that failed like this:
08:36:22 P: Begin bootstrapping system... 08:36:22 P: If the following stage fails, the most likely cause of the problem is with your mirror configuration or a caching proxy. 08:36:22 P: Running debootstrap... 08:36:22 I: Retrieving InRelease 08:36:22 I: Checking Release signature 08:36:22 E: Release signed by unknown key (key id C7988EA7A358D82E) 08:36:22 The specified keyring /tmp/tmp.DmaJ330pgw/pubring.kbx may be incorrect or out of date. 08:36:22 You can find the latest Debian release key at https://ftp-master.debian.org/keys.html 08:36:22 P: Begin unmounting filesystems... 08:36:22 08:36:22 real 0m0.167s 08:36:22 user 0m0.148s 08:36:22 sys 0m0.037s 08:36:22 + kill -9 6047 08:36:22 + cleanup 08:36:22 + [ -n /tmp/tails-build.9JsalPU4 ] 08:36:22 + cd / 08:36:22 + remove_build_dirs 08:36:22 + + tacold_build_dirs 08:36:22 08:36:22 + mount 08:36:22 + perl -ni -E say $mountpoint if (($mountpoint) = ($_ =~ m{^(?:tmpfs|devpts-live|proc-live|sysfs-live) on (/tmp/tails-build(?:-tmpfs)?\.[/[:alnum:]]+)})) 08:36:22 -i used with no filenames on the command line, reading from STDIN. 08:36:22 + tries=0 08:36:22 + sudo lsof 08:36:22 + grep --fixed-strings /tmp/tails-build.9JsalPU4 08:36:22 + true 08:36:22 + sudo umount -f --verbose /tmp/tails-build.9JsalPU4 08:36:22 umount: /tmp/tails-build.9JsalPU4 (tmpfs) unmounted 08:36:22 + sudo rm -rf /tmp/tails-build.9JsalPU4 08:36:22 + sudo rm -rf /tmp/tails-build.9JsalPU4 08:36:23 No build artifacts were found! 08:36:23 [build_Tails_ISO_sysadmin-17810-stop-trusting-old-apt-signing-key] $ /bin/sh -xe /tmp/jenkins717595006945242931.sh 08:36:23 + /usr/local/bin/sign_artifacts 08:36:23 + [ /var/lib/jenkins/workspace/build_Tails_ISO_sysadmin-17810-stop-trusting-old-apt-signing-key ] 08:36:23 + [ -d /var/lib/jenkins/workspace/build_Tails_ISO_sysadmin-17810-stop-trusting-old-apt-signing-key ] 08:36:23 + ARTIFACTS_DIR=/var/lib/jenkins/workspace/build_Tails_ISO_sysadmin-17810-stop-trusting-old-apt-signing-key/build-artifacts 08:36:23 + [ -d /var/lib/jenkins/workspace/build_Tails_ISO_sysadmin-17810-stop-trusting-old-apt-signing-key/build-artifacts ] 08:36:23 + cd /var/lib/jenkins/workspace/build_Tails_ISO_sysadmin-17810-stop-trusting-old-apt-signing-key/build-artifacts 08:36:23 + ls -d tails-* 1/tails-* 2/tails-* diffoscope.* 08:36:23 ls: cannot access 'tails-*': No such file or directory 08:36:23 ls: cannot access '1/tails-*': No such file or directory 08:36:23 ls: cannot access '2/tails-*': No such file or directory 08:36:23 ls: cannot access 'diffoscope.*': No such file or directory 08:36:23 [build_Tails_ISO_sysadmin-17810-stop-trusting-old-apt-signing-key] $ /bin/sh -xe /tmp/jenkins46811281708471447.sh 08:36:23 + ls /var/lib/jenkins/workspace/build_Tails_ISO_sysadmin-17810-stop-trusting-old-apt-signing-key/build-artifacts/tails-*.iso /var/lib/jenkins/workspace/build_Tails_ISO_sysadmin-17810-stop-trusting-old-apt-signing-key/build-artifacts/tails-*.img 08:36:23 ls: cannot access '/var/lib/jenkins/workspace/build_Tails_ISO_sysadmin-17810-stop-trusting-old-apt-signing-key/build-artifacts/tails-*.iso': No such file or directory 08:36:23 ls: cannot access '/var/lib/jenkins/workspace/build_Tails_ISO_sysadmin-17810-stop-trusting-old-apt-signing-key/build-artifacts/tails-*.img': No such file or directory 08:36:23 + ls /var/lib/jenkins/workspace/build_Tails_ISO_sysadmin-17810-stop-trusting-old-apt-signing-key/build-artifacts/2/tails-*.iso /var/lib/jenkins/workspace/build_Tails_ISO_sysadmin-17810-stop-trusting-old-apt-signing-key/build-artifacts/2/tails-*.img 08:36:23 ls: cannot access '/var/lib/jenkins/workspace/build_Tails_ISO_sysadmin-17810-stop-trusting-old-apt-signing-key/build-artifacts/2/tails-*.iso': No such file or directory 08:36:23 ls: cannot access '/var/lib/jenkins/workspace/build_Tails_ISO_sysadmin-17810-stop-trusting-old-apt-signing-key/build-artifacts/2/tails-*.img': No such file or directory 08:36:23 Build step 'Execute shell' marked build as failure 08:36:23 [PostBuildScript] - [INFO] Executing post build scripts. 08:36:23 [PostBuildScript] - [INFO] Build does not have any of the results [SUCCESS]. Did not execute build step #0. 08:36:23 Archiving artifacts 08:36:24 An attempt to send an e-mail to empty list of recipients, ignored. 08:36:24 [WS-CLEANUP] Deleting project workspace... 08:36:24 [WS-CLEANUP] done 08:36:24 Finished: FAILURE
My hunch is that build-tails
did not umount the website cache cleanly, which left it in a corrupted state.