boxlite 0.10.6

Done dynamic on Linux job 144826 crates.io SBOM Findings (VEX)

high severity environment_enumeration in build_script code: std::env::vars

medium

Automated verdict. Nobody reviewed it. A score is a reason to look closer, not a finding.

Evidence

Points	Signal	Where	What
30	static:environment_enumeration static · boxlite	build.rs:227	high severity environment_enumeration in build_script code: std::env::vars
10	network_lookup network · boxlite	github.com	The build looked up github.com.
5	exec_downloader trace · boxlite	/usr/bin/curl	The build ran /usr/bin/curl.

6 without points

Signal	Where	What
static:build_script static · boxlite	build.rs	low severity build_script in build_script code: build.rs
static:downloader_pattern static · boxlite	build.rs:606	high severity downloader_pattern in build_script code: https://github.com/boxlite-ai/boxlite/releases/download/v{version}/boxlite-runtime-v{version}-{target}.tar.gz at build.rs:606 with std::process::Command::new at build.rs:501
static:process_spawn static · boxlite	build.rs:501	medium severity process_spawn in build_script code (76 places): std::process::Command::new
static:shell_command static · boxlite	build.rs:507	high severity shell_command in build_script code (3 places): curl failed: {}
static:url_literal static · boxlite	build.rs:606	low severity url_literal in build_script code (95 places): https://github.com/boxlite-ai/boxlite/releases/download/v{version}/boxlite-runtime-v{version}-{target}.tar.gz
static:yara:sandbox_evasion static · boxlite	resources/seccomp/aarch64-unknown-linux-gnu.json:436	medium severity yara:sandbox_evasion in library code (17 places): Checks for virtual machines, sandboxes or debuggers

Behavior

Profile

exec:downloader net:github.com static:downloader_pattern static:environment_enumeration static:process_spawn static:shell_command static:yara:sandbox_evasion

Static findings

high downloader_pattern build_script 1

https://github.com/boxlite-ai/boxlite/releases/download/v{version}/boxlite-runtime-v{version}-{target}.tar.gz at build.rs:606 with std::process::Command::new at build.rs:501 build.rs:606

high environment_enumeration build_script 1

std::env::vars build.rs:227

high shell_command build_script 1

curl failed: {} build.rs:507

medium yara_match sandbox_evasion library 17

Checks for virtual machines, sandboxes or debuggers resources/seccomp/aarch64-unknown-linux-gnu.json:436 resources/seccomp/aarch64-unknown-linux-musl.json:436 resources/seccomp/x86_64-unknown-linux-gnu.json:436 resources/seccomp/x86_64-unknown-linux-gnu.original.json:388 resources/seccomp/x86_64-unknown-linux-musl.json:436 resources/seccomp/x86_64-unknown-linux-musl.original.json:388 src/jailer/THREAT_MODEL.md:322 src/jailer/cgroup.rs:75 src/jailer/mod.rs:4 src/jailer/seccomp.rs:30 src/jailer/shim_copy.rs:1 src/net/gvproxy/config.rs:120 src/rootfs/guest.rs:33 src/runtime/advanced_options.rs:677 src/vmm/controller/shim.rs:268 src/vmm/mod.rs:76 src/vmm/registry.rs:96

medium process_spawn build_script 3

std::process::Command::new build.rs:501 build.rs:517 build.rs:1107

medium shell_command test 2

wget -O- --timeout=5 {url} 2>&1; printf '\nEXIT:%s\n' $? tests/network_spec.rs:238
wget -q -O /dev/null --timeout=3 http://1.1.1.1/ 2>&1; echo EXIT:$? tests/security_enforcement.rs:383

low network_access library 131

std::net::TcpListener::bind src/jailer/landlock.rs:517 src/jailer/sandbox/seatbelt.rs:1420 src/net/gvproxy/services.rs:58 src/net/gvproxy/services.rs:929 src/portal/interfaces/container.rs:382
std::net::TcpStream::connect src/jailer/landlock.rs:521 src/jailer/landlock.rs:537
tokio::net::TcpListener::bind src/litebox/box_impl.rs:1794 src/litebox/network.rs:499 src/rest/client.rs:764 src/rest/client.rs:798 src/rest/client.rs:833 src/rest/client.rs:907 src/rest/client.rs:956 src/rest/client.rs:1078 src/rest/client.rs:1158 src/rest/litebox.rs:1581 src/rest/litebox.rs:1610 src/rest/litebox.rs:1650 src/rest/litebox.rs:1692 src/rest/litebox.rs:1756 src/rest/litebox.rs:1799 src/rest/litebox.rs:1863 src/rest/litebox.rs:1900 src/rest/litebox.rs:1973 src/rest/litebox.rs:2033 src/rest/litebox.rs:2092 src/rest/litebox.rs:2169 src/rest/litebox.rs:2241 src/rest/litebox.rs:2302 src/rest/litebox.rs:2348 src/rest/litebox.rs:2405 src/rest/litebox.rs:2472 src/rest/litebox.rs:2573 src/rest/runtime.rs:417
tokio::net::UnixListener::bind src/litebox/init/tasks/guest_connect.rs:142 src/litebox/network.rs:529 src/litebox/network.rs:1017 src/litebox/ssh_tests.rs:213 src/litebox/ssh_tests.rs:632 src/net/gvproxy/services.rs:692 src/net/gvproxy/services.rs:708 src/net/gvproxy/services.rs:920 src/net/gvproxy/services.rs:998 src/net/gvproxy/services.rs:1395 src/net/gvproxy/services.rs:1452
tokio::net::UnixStream::connect src/litebox/init/tasks/guest_connect.rs:324 src/litebox/init/tasks/guest_connect.rs:388 src/net/gvproxy/services.rs:116 src/net/gvproxy/services.rs:452 src/portal/connection.rs:69
tokio::net::UnixStream src/litebox/network.rs:75 src/litebox/network.rs:603 src/litebox/network.rs:763 src/net/gvproxy/services.rs:720 src/net/gvproxy/services.rs:750 src/net/mod.rs:258 src/net/mod.rs:277
tokio::net::UnixStream::into_split src/litebox/network.rs:77
tokio::net::UnixStream::from_std src/litebox/network.rs:324 src/litebox/network.rs:1131
tokio::net::TcpListener src/litebox/network.rs:488 src/rest/client.rs:690 src/rest/litebox.rs:1512 src/rest/litebox.rs:2525
tokio::net::UnixListener src/litebox/network.rs:490
tokio::net::TcpStream src/litebox/network.rs:603 src/rest/client.rs:67 src/rest/litebox.rs:1367 src/rest/litebox.rs:1434 src/rest/litebox.rs:1453
tokio::net::UnixStream::pair src/litebox/network.rs:716 src/litebox/network.rs:733 src/litebox/network.rs:769 src/litebox/network.rs:1082 src/litebox/network.rs:1117 src/litebox/network.rs:1239 src/net/mod.rs:737
tokio::net::TcpStream::connect src/litebox/network.rs:795 src/litebox/network.rs:873 src/litebox/network.rs:909 src/litebox/network.rs:915 src/litebox/network.rs:924 src/litebox/network.rs:952
std::net::TcpListener src/net/gvproxy/services.rs:51
std::net::UdpSocket src/net/gvproxy/services.rs:52
std::net::UdpSocket::bind src/net/gvproxy/services.rs:59 src/net/gvproxy/services.rs:1007
hyper::client::conn::http1::handshake src/net/gvproxy/services.rs:125 src/rest/client.rs:413
hyper_util::client::legacy::connect::HttpConnector src/rest/client.rs:58
reqwest::Client src/rest/client.rs:78
reqwest::Client::builder src/rest/client.rs:99
reqwest::RequestBuilder src/rest/client.rs:177 src/rest/client.rs:177 src/rest/client.rs:192 src/rest/client.rs:227 src/rest/client.rs:255 src/rest/client.rs:471
reqwest::StatusCode src/rest/client.rs:242 src/rest/error.rs:28 src/rest/error.rs:48 src/rest/error.rs:111 src/rest/error.rs:166 src/rest/error.rs:180
reqwest::Response src/rest/client.rs:243 src/rest/litebox.rs:1144
reqwest::header::CONTENT_LENGTH src/rest/client.rs:256 src/rest/client.rs:754
reqwest::header::ACCEPT src/rest/client.rs:461
reqwest::Error src/rest/client.rs:589
reqwest::StatusCode::BAD_GATEWAY src/rest/client.rs:1196
reqwest::StatusCode::from_u16 src/rest/error.rs:301 src/rest/error.rs:406 src/rest/error.rs:485 src/rest/error.rs:576
reqwest::StatusCode::BAD_REQUEST src/rest/error.rs:335 src/rest/error.rs:522
reqwest::StatusCode::TOO_MANY_REQUESTS src/rest/error.rs:345
reqwest::StatusCode::IM_A_TEAPOT src/rest/error.rs:360
reqwest::StatusCode::SERVICE_UNAVAILABLE src/rest/error.rs:377 src/rest/error.rs:548
reqwest::StatusCode::INTERNAL_SERVER_ERROR src/rest/error.rs:422
reqwest::StatusCode::UNAUTHORIZED src/rest/error.rs:431
reqwest::StatusCode::FORBIDDEN src/rest/error.rs:433
reqwest::StatusCode::NOT_FOUND src/rest/error.rs:440 src/rest/error.rs:594
reqwest::StatusCode::CONFLICT src/rest/error.rs:504
reqwest::Body::wrap_stream src/rest/litebox.rs:343
reqwest::Method::PUT src/rest/litebox.rs:353
reqwest::Method::GET src/rest/litebox.rs:381

low process_spawn library 65

low network_access test 9

tokio::net::UnixStream::connect tests/guest_ssh.rs:331 tests/guest_ssh.rs:532 tests/guest_ssh.rs:544
std::net::TcpListener::bind tests/gvproxy_backend.rs:204 tests/network_spec.rs:355 tests/network_spec.rs:395
std::net::TcpStream::connect_timeout tests/network_spec.rs:258
std::net::UdpSocket::bind tests/network_spec.rs:309 tests/network_spec.rs:332

low process_spawn test 8

tokio::process::Command tests/guest_ssh.rs:339 tests/guest_ssh.rs:361 tests/guest_ssh.rs:479
tokio::process::Command::new tests/guest_ssh.rs:354 tests/guest_ssh.rs:362
std::process::Command::new tests/health_check.rs:121 tests/run_main_command.rs:314 tests/sigstop_quiesce.rs:104

low foreign_functions library 3

extern block src/system_check.rs:162 src/system_check.rs:255 src/util/mod.rs:27

low url_literal build_script 2

https://github.com/boxlite-ai/boxlite/releases/download/v{version}/boxlite-runtime-v{version}-{target}.tar.gz build.rs:606
<?xml version="1.0" encoding="UTF-8"?>\u{a}<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">\u{a}<plist version="1.0">\u{a}<dict>\u{a} <key>com.… build.rs:1077

low build_script build_script 1

build.rs build.rs

info url_literal library 77

:// src/images/store.rs:1094
http://registry.local:5000 src/images/store.rs:1261
https://evil.example.com/blob src/images/store.rs:1553
\u{a} See: https://boxlite.dev/docs/faq#sandbox-userns src/jailer/bwrap.rs:255
vsock://2:2695 src/jailer/command.rs:34 src/jailer/command.rs:42
http://{address} src/litebox/box_impl.rs:1810
tcp://{address} src/litebox/network.rs:35
https://3000-box.proxy.example.test src/litebox/network.rs:717 src/litebox/network.rs:719
tcp://[::1]:8080 src/litebox/network.rs:1051
tcp://192.168.127.2:80 src/net/gvproxy/services.rs:1042
http://[::]:50051 src/portal/connection.rs:64
http://127.0.0.1:{} src/portal/connection.rs:80 src/rest/litebox.rs:1389
http://{addr} src/portal/interfaces/container.rs:397
https:// src/rest/client.rs:356
wss://{} src/rest/client.rs:357
http:// src/rest/client.rs:358
ws://{} src/rest/client.rs:359
http://localhost:1 src/rest/client.rs:739 src/rest/client.rs:1151 src/rest/runtime.rs:450 src/rest/runtime.rs:471 src/rest/runtime.rs:598 src/rest/runtime.rs:620 src/rest/runtime.rs:646 src/rest/runtime.rs:672 src/rest/runtime.rs:695 src/rest/runtime.rs:721 src/rest/runtime.rs:744 src/rest/runtime.rs:767 src/rest/runtime.rs:783 src/rest/runtime.rs:803 src/rest/runtime.rs:832 src/rest/runtime.rs:857 src/rest/runtime.rs:877 src/rest/runtime.rs:901 src/rest/runtime.rs:923
https://api.example.com src/rest/client.rs:745 src/rest/client.rs:1243 src/rest/client.rs:1254 src/rest/client.rs:1266 src/rest/client.rs:1281 src/rest/client.rs:1294 src/rest/options.rs:139 src/rest/options.rs:140 src/rest/options.rs:147 src/rest/options.rs:156 src/rest/options.rs:162 src/rest/options.rs:169
http://127.0.0.1:{port} src/rest/client.rs:775 src/rest/client.rs:809 src/rest/client.rs:855 src/rest/client.rs:857 src/rest/client.rs:923 src/rest/client.rs:926 src/rest/client.rs:972 src/rest/client.rs:974 src/rest/client.rs:1110 src/rest/client.rs:1185 src/rest/runtime.rs:496 src/rest/runtime.rs:515 src/rest/runtime.rs:543 src/rest/runtime.rs:559 src/rest/runtime.rs:575
{"uri":"http://127.0.0.1:9/tunnel"} src/rest/client.rs:1095
http://127.0.0.1:9/tunnel src/rest/client.rs:1113
https://api.example.com/v1/acme/boxes src/rest/client.rs:1247
https://api.example.com/v1/boxes src/rest/client.rs:1258 src/rest/client.rs:1270
https://api.example.com/v1/us-east/team-42/boxes src/rest/client.rs:1285
https://api.example.com/v1/me src/rest/client.rs:1298
KVM smoke test failed: vCPU exit reason {exit_reason} (expected {expected})\u{a}\u{a}/dev/kvm exists but cannot execute guest code (host kernel: {kernel}).\u{a}\u{a}Suggestions:\u{a}- Ensure nested vi… src/system_check.rs:228
--{} unix:// src/vmm/krun/engine.rs:76 src/vmm/krun/engine.rs:123
unix:// src/vmm/krun/engine.rs:129

info unsafe_code library 35

10 unsafe blocks, functions or impls src/disk/ext4.rs:381
4 unsafe blocks, functions or impls src/images/archive/extractor.rs:146 src/vmm/controller/shim.rs:95 src/vmm/krun/engine.rs:29
6 unsafe blocks, functions or impls src/jailer/cgroup.rs:53 src/vmm/controller/spawn.rs:426
18 unsafe blocks, functions or impls src/jailer/common/fd.rs:33
2 unsafe blocks, functions or impls src/jailer/common/mod.rs:22 src/jailer/common/rlimit.rs:27 src/jailer/sandbox/seatbelt.rs:426 src/net/ca.rs:109 src/net/gvproxy/logging.rs:35 src/portal/interfaces/exec.rs:665 src/runtime/lock.rs:62
3 unsafe blocks, functions or impls src/jailer/credentials.rs:60 src/litebox/box_impl.rs:1411 src/litebox/init/tasks/guest_connect.rs:554 src/net/socket_path.rs:74 src/system_check.rs:166
11 unsafe blocks, functions or impls src/jailer/landlock.rs:154
1 unsafe blocks, functions or impls src/jailer/pre_exec.rs:92 src/jailer/sandbox/bwrap.rs:163 src/jailer/sandbox/landlock.rs:45 src/net/gvproxy/instance.rs:196 src/rootfs/copy_mount.rs:576 src/runtime/core.rs:216 src/runtime/rt_impl.rs:900
12 unsafe blocks, functions or impls src/jailer/seccomp.rs:199 src/util/process.rs:82
5 unsafe blocks, functions or impls src/lock/file.rs:304 src/util/mod.rs:43
9 unsafe blocks, functions or impls src/net/gvproxy/ffi.rs:35
8 unsafe blocks, functions or impls src/util/pid_file.rs:63
13 unsafe blocks, functions or impls src/vmm/controller/watchdog.rs:50
31 unsafe blocks, functions or impls src/vmm/krun/context.rs:85

info url_literal test 16

http://[::]:50051 tests/guest_ssh.rs:327
tcp://192.168.127.2:80 tests/gvproxy_backend.rs:166
https://registry.local tests/image_registries.rs:41
http://example.com/ tests/network_spec.rs:519 tests/network_spec.rs:666
http://example.org/ tests/network_spec.rs:531 tests/network_spec.rs:589
http://www.example.com/ tests/network_spec.rs:578
http://8.8.8.8/ tests/network_spec.rs:677
https://example.com/ tests/network_spec.rs:833
http://{HOST_HOSTNAME}:{port}/ tests/network_spec.rs:880 tests/network_spec.rs:922 tests/network_spec.rs:958
http://{HOST_IP}:{port}/ tests/network_spec.rs:995
http://localhost:8080 tests/rest_integration.rs:21
wget -q -O /dev/null --timeout=3 http://1.1.1.1/ 2>&1; echo EXIT:$? tests/security_enforcement.rs:383

info unsafe_code test 4

1 unsafe blocks, functions or impls tests/exec_user.rs:139 tests/import_export_benchmark.rs:382 tests/recovery.rs:116
2 unsafe blocks, functions or impls tests/sigstop_quiesce.rs:48

info native_link build_script 1

links = "boxlite" Cargo.toml

info unsafe_code build_script 1

2 unsafe blocks, functions or impls build.rs:349

Run: check

failed

Ended: agent reported the end
Guest: exit code 101
Run time: 2 min 49 s
VM restore: 59 ms
Payload: 24304 files, 751.4 MiB
Files opened: 52180

Processes 969

Siblings that ran the same program with the same result and the same processes below are folded into one row, with their number. Hide the 917 compiler processes (rustc, C toolchain)

Process	Arguments	Start	Took	Exit
cargo /usr/local/bin/cargo	check --locked --offline	5 ms	2 min 49 s	25856
└rustc /usr/local/bin/rustc ×72	--crate-name build_script_build --edition=2021 /cw/vendor/proc-macro2-1.0.107/build.rs --error-format=json --json=diagnostic-rendered-ansi,artifacts,future-incompat --crate-type bin --emit=dep-info,link -C embed-bitcode=no --cfg feature="default" --cfg feature="proc-macro" --check-cfg cfg(docsrs,test) --check-cfg cfg(feature, values("default", "nightly", "proc-macro", "span-locations")) -C metadata=a3dc8fb24392fcd4 -C extra-filename=-a411f7480bd0f42c --out-dir /work/target/debug/build/proc-macro2-a411f7480bd0f42c -L dependency=/work/target/debug/deps --cap-lints allow	642 ms	718 ms	0
└toolchain /usr/bin/cc	-m64 /work/target/debug/build/proc-macro2-a411f7480bd0f42c/rustctSZNjU/symbols.o /work/target/debug/build/proc-macro2-a411f7480bd0f42c/build_script_build-a411f7480bd0f42c.build_script_build.dd8d7f624ad1d48e-cgu.0.rcgu.o /work/target/debug/build/proc-macro2-a411f7480bd0f42c/build_script_build-a411f7480bd0f42c.cnca5igddme2fkrf01fktrtaw.rcgu.o -Wl,--as-needed -Wl,-Bstatic /usr/local/lib/rustlib/x86_64-unknown-linux-gnu/lib/libstd-64f5f36fb0927694.rlib /usr/local/lib/rustlib/x86_64-unknown-linux-gnu/lib/libpanic_unwind-549498e8b2e4d924.rlib /usr/local/lib/rustlib/x86_64-unknown-linux-gnu/lib/libobject-7ff85ea729a864ff.rlib /usr/local/lib/rustlib/x86_64-unknown-linux-gnu/lib/libmemchr-0e3477fb2664a277.rlib /usr/local/lib/rustlib/x86_64-unknown-linux-gnu/lib/libaddr2line-09755979c57b7e64.rlib /usr/local/lib/rustlib/x86_64-unknown-linux-gnu/lib/libgimli-9a1fede77fbbf2f0.rlib /usr/local/lib/rustlib/x86_64-unknown-linux-gnu/lib/libcfg_if-360da4ba13154744.rlib /usr/local/lib/rustlib/x86_64-unknown-linux-gnu/lib/lib	1.2 s	153 ms	0
└toolchain /usr/libexec/gcc/x86_64-linux-gnu/14/collect2	-plugin /usr/libexec/gcc/x86_64-linux-gnu/14/liblto_plugin.so -plugin-opt=/usr/libexec/gcc/x86_64-linux-gnu/14/lto-wrapper -plugin-opt=-fresolution=/tmp/cc7bNAWJ.res --build-id --eh-frame-hdr -m elf_x86_64 --hash-style=gnu --as-needed -dynamic-linker /lib64/ld-linux-x86-64.so.2 -pie -fuse-ld=lld -o /work/target/debug/build/proc-macro2-a411f7480bd0f42c/build_script_build-a411f7480bd0f42c /usr/lib/gcc/x86_64-linux-gnu/14/../../../x86_64-linux-gnu/Scrt1.o /usr/lib/gcc/x86_64-linux-gnu/14/../../../x86_64-linux-gnu/crti.o /usr/lib/gcc/x86_64-linux-gnu/14/crtbeginS.o -L/work/target/debug/build/proc-macro2-a411f7480bd0f42c/rustctSZNjU/raw-dylibs -L/usr/local/lib/rustlib/x86_64-unknown-linux-gnu/lib -L/usr/local/lib/rustlib/x86_64-unknown-linux-gnu/bin/gcc-ld -L/usr/lib/gcc/x86_64-linux-gnu/14 -L/usr/lib/gcc/x86_64-linux-gnu/14/../../../x86_64-linux-gnu -L/usr/lib/gcc/x86_64-linux-gnu/14/../../../../lib -L/lib/x86_64-linux-gnu -L/lib/../lib -L/usr/lib/x86_64-linux-gnu -L	1.2 s	146 ms	0
└toolchain /usr/local/lib/rustlib/x86_64-unknown-linux-gnu/bin/rust-lld	-flavor gnu -plugin /usr/libexec/gcc/x86_64-linux-gnu/14/liblto_plugin.so -plugin-opt=/usr/libexec/gcc/x86_64-linux-gnu/14/lto-wrapper -plugin-opt=-fresolution=/tmp/cc7bNAWJ.res --build-id --eh-frame-hdr -m elf_x86_64 --hash-style=gnu --as-needed -dynamic-linker /lib64/ld-linux-x86-64.so.2 -pie -o /work/target/debug/build/proc-macro2-a411f7480bd0f42c/build_script_build-a411f7480bd0f42c /usr/lib/gcc/x86_64-linux-gnu/14/../../../x86_64-linux-gnu/Scrt1.o /usr/lib/gcc/x86_64-linux-gnu/14/../../../x86_64-linux-gnu/crti.o /usr/lib/gcc/x86_64-linux-gnu/14/crtbeginS.o -L/work/target/debug/build/proc-macro2-a411f7480bd0f42c/rustctSZNjU/raw-dylibs -L/usr/local/lib/rustlib/x86_64-unknown-linux-gnu/lib -L/usr/local/lib/rustlib/x86_64-unknown-linux-gnu/bin/gcc-ld -L/usr/lib/gcc/x86_64-linux-gnu/14 -L/usr/lib/gcc/x86_64-linux-gnu/14/../../../x86_64-linux-gnu -L/usr/lib/gcc/x86_64-linux-gnu/14/../../../../lib -L/lib/x86_64-linux-gnu -L/lib/../lib -L/usr/lib/x86_6	1.2 s	142 ms	0
└build_script proc-macro2		1.3 s	82 ms	0
└rustc /usr/local/bin/rustc ×3	--version	1.3 s	7 ms	0
└rustc /usr/local/bin/rustc	--cfg=procmacro2_build_probe --edition=2021 --crate-name=proc_macro2 --crate-type=lib --cap-lints=allow --emit=dep-info,metadata --out-dir /work/target/debug/build/proc-macro2-4f3f927bd5485a92/out/probe src/probe/proc_macro_span.rs --target x86_64-unknown-linux-gnu	1.3 s	32 ms	256
└rustc /usr/local/bin/rustc ×339	--crate-name unicode_ident --edition=2021 /cw/vendor/unicode-ident-1.0.27/src/lib.rs --error-format=json --json=diagnostic-rendered-ansi,artifacts,future-incompat --crate-type lib --emit=dep-info,metadata,link -C embed-bitcode=no --check-cfg cfg(docsrs,test) --check-cfg cfg(feature, values()) -C metadata=3bb98f7b2f589c61 -C extra-filename=-86dff03eb05ec8a5 --out-dir /work/target/debug/deps -L dependency=/work/target/debug/deps --cap-lints allow	1.5 s	49 ms	0
└build_script quote		2.1 s	10 ms	0
└rustc /usr/local/bin/rustc	--version	2.1 s	7 ms	0
└build_script libc		2.5 s	10 ms	0
└rustc /usr/local/bin/rustc	--version	2.5 s	7 ms	0
└build_script libc		11.8 s	10 ms	0
└rustc /usr/local/bin/rustc	--version	11.8 s	7 ms	0
└build_script serde_core		15.6 s	11 ms	0
└rustc /usr/local/bin/rustc	--version	15.6 s	7 ms	0
└build_script parking_lot_core		15.6 s	2 ms	0
└build_script serde		21.1 s	9 ms	0
└rustc /usr/local/bin/rustc	--version	21.1 s	7 ms	0
└build_script zmij		29.8 s	10 ms	0
└rustc /usr/local/bin/rustc	--version	29.8 s	8 ms	0
└build_script getrandom		29.8 s	1 ms	0
└build_script anyhow		34.1 s	37 ms	0
└rustc /usr/local/bin/rustc	--cfg=anyhow_build_probe --edition=2018 --crate-name=anyhow --crate-type=lib --cap-lints=allow --emit=dep-info,metadata --out-dir /work/target/debug/build/anyhow-16c5e2ddec703063/out/probe src/nightly.rs --target x86_64-unknown-linux-gnu	34.1 s	25 ms	256
└rustc /usr/local/bin/rustc	--version	34.1 s	7 ms	0
└build_script serde_json		34.1 s	2 ms	0
└build_script zerocopy		35.2 s	15 ms	0
└rustc /usr/local/bin/rustc	--version	35.2 s	8 ms	0
└build_script rustix		35.6 s	37 ms	0
└rustc /usr/local/bin/rustc ×2	--crate-type=rlib --emit=metadata --target x86_64-unknown-linux-gnu -o /work/target/debug/build/rustix-0f4e2900de2476d1/out/rustix_test_can_compile -	35.6 s	17 ms	0
└build_script rustversion		44.0 s	9 ms	0
└rustc /usr/local/bin/rustc	--version	44.0 s	6 ms	0
└build_script httparse		48.2 s	9 ms	0
└rustc /usr/local/bin/rustc	--version	48.2 s	7 ms	0
└build_script ring		48.3 s	1.6 s	0
└toolchain /usr/bin/cc ×2	-E /work/target/debug/build/ring-c589ba26a1e6c3e5/out/15011910559549539077detect_compiler_family.c	48.3 s	23 ms	0
└toolchain /usr/libexec/gcc/x86_64-linux-gnu/14/cc1	-E -quiet -imultiarch x86_64-linux-gnu /work/target/debug/build/ring-c589ba26a1e6c3e5/out/15011910559549539077detect_compiler_family.c -mtune=generic -march=x86-64 -fasynchronous-unwind-tables -dumpbase 15011910559549539077detect_compiler_family.c -dumpbase-ext .c	48.3 s	20 ms	0
└toolchain /usr/bin/cc ×2	-?	48.3 s	2 ms	256
└toolchain /usr/bin/cc ×32	-O0 -ffunction-sections -fdata-sections -fPIC -m64 -Wall -Wextra -mno-omit-leaf-frame-pointer -o /work/target/debug/build/ring-c589ba26a1e6c3e5/out/flag_check -c /work/target/debug/build/ring-c589ba26a1e6c3e5/out/flag_check.c	48.3 s	33 ms	0
└toolchain /usr/libexec/gcc/x86_64-linux-gnu/14/cc1	-quiet -imultiarch x86_64-linux-gnu /work/target/debug/build/ring-c589ba26a1e6c3e5/out/flag_check.c -quiet -dumpdir /work/target/debug/build/ring-c589ba26a1e6c3e5/out/ -dumpbase flag_check.c -dumpbase-ext .c -m64 -mno-omit-leaf-frame-pointer -mtune=generic -march=x86-64 -O0 -Wall -Wextra -ffunction-sections -fdata-sections -fPIC -fasynchronous-unwind-tables -o /tmp/ccdr5tRt.s	48.3 s	25 ms	0
└toolchain /usr/bin/as	--64 -o /work/target/debug/build/ring-c589ba26a1e6c3e5/out/flag_check /tmp/ccdr5tRt.s	48.3 s	6 ms	0
└toolchain /usr/bin/ar ×4	cqD /work/target/debug/build/ring-c589ba26a1e6c3e5/out/libring_core_0_17_14_.a /work/target/debug/build/ring-c589ba26a1e6c3e5/out/25ac62e5b3c53843-curve25519.o /work/target/debug/build/ring-c589ba26a1e6c3e5/out/0bbbd18bda93c05b-aes_nohw.o /work/target/debug/build/ring-c589ba26a1e6c3e5/out/00c879ee3285a50d-montgomery.o /work/target/debug/build/ring-c589ba26a1e6c3e5/out/00c879ee3285a50d-montgomery_inv.o /work/target/debug/build/ring-c589ba26a1e6c3e5/out/a0330e891e733f4e-ecp_nistz.o /work/target/debug/build/ring-c589ba26a1e6c3e5/out/a0330e891e733f4e-gfp_p256.o /work/target/debug/build/ring-c589ba26a1e6c3e5/out/a0330e891e733f4e-gfp_p384.o /work/target/debug/build/ring-c589ba26a1e6c3e5/out/a0330e891e733f4e-p256.o /work/target/debug/build/ring-c589ba26a1e6c3e5/out/aaa1ba3e455ee2e1-limbs.o /work/target/debug/build/ring-c589ba26a1e6c3e5/out/a4019cc0736b0423-mem.o /work/target/debug/build/ring-c589ba26a1e6c3e5/out/d5a9841f3dc6e253-poly1305.o /work/target/debug/build/ring-c589ba26a1e6c3e5/out/a4019cc0736b0423-crypt	49.8 s	18 ms	0
└build_script icu_properties_data		1 min 0 s	2 ms	0
└build_script thiserror		1 min 3 s	30 ms	0
└rustc /usr/local/bin/rustc	--edition=2018 --crate-name=thiserror --crate-type=lib --cap-lints=allow --emit=dep-info,metadata --out-dir /work/target/debug/build/thiserror-2a2ace9117c7add0/out/probe build/probe.rs --target x86_64-unknown-linux-gnu	1 min 3 s	17 ms	256
└rustc /usr/local/bin/rustc	--version	1 min 3 s	8 ms	0
└build_script icu_normalizer_data		1 min 3 s	2 ms	0
└build_script crossbeam-utils		1 min 4 s	2 ms	0
└build_script rustix		1 min 4 s	35 ms	0
└rustc /usr/local/bin/rustc ×2	--crate-type=rlib --emit=metadata --target x86_64-unknown-linux-gnu -o /work/target/debug/build/rustix-8b19f1bf8cc92196/out/rustix_test_can_compile -	1 min 4 s	16 ms	0
└build_script generic-array		1 min 4 s	11 ms	0
└rustc /usr/local/bin/rustc	--verbose --version	1 min 4 s	8 ms	0
└build_script prettyplease		1 min 16 s	1 ms	0
└build_script getrandom		1 min 19 s	2 ms	0
└build_script crossbeam-epoch		1 min 19 s	1 ms	0
└build_script rustls		1 min 19 s	2 ms	0
└build_script num-traits		1 min 20 s	45 ms	0
└rustc /usr/local/bin/rustc ×3	--version --verbose	1 min 20 s	7 ms	0
└build_script crossbeam-deque		1 min 29 s	2 ms	0
└build_script indexmap		1 min 29 s	42 ms	0
└rustc /usr/local/bin/rustc ×3	--version --verbose	1 min 29 s	8 ms	0
└build_script zstd-sys		1 min 30 s	8.2 s	0
└toolchain /usr/bin/cc	-E /work/target/debug/build/zstd-sys-92c3f4e302e5f443/out/5117245170720918351detect_compiler_family.c	1 min 30 s	6 ms	0
└toolchain /usr/libexec/gcc/x86_64-linux-gnu/14/cc1	-E -quiet -imultiarch x86_64-linux-gnu /work/target/debug/build/zstd-sys-92c3f4e302e5f443/out/5117245170720918351detect_compiler_family.c -mtune=generic -march=x86-64 -fasynchronous-unwind-tables -dumpbase 5117245170720918351detect_compiler_family.c -dumpbase-ext .c	1 min 30 s	5 ms	0
└toolchain /usr/bin/cc	-?	1 min 30 s	2 ms	256
└toolchain /usr/bin/cc ×41	-O0 -ffunction-sections -fdata-sections -fPIC -m64 -Wall -Wextra -mno-omit-leaf-frame-pointer -o /work/target/debug/build/zstd-sys-92c3f4e302e5f443/out/flag_check -c /work/target/debug/build/zstd-sys-92c3f4e302e5f443/out/flag_check.c	1 min 30 s	14 ms	0
└toolchain /usr/libexec/gcc/x86_64-linux-gnu/14/cc1	-quiet -imultiarch x86_64-linux-gnu /work/target/debug/build/zstd-sys-92c3f4e302e5f443/out/flag_check.c -quiet -dumpdir /work/target/debug/build/zstd-sys-92c3f4e302e5f443/out/ -dumpbase flag_check.c -dumpbase-ext .c -m64 -mno-omit-leaf-frame-pointer -mtune=generic -march=x86-64 -O0 -Wall -Wextra -ffunction-sections -fdata-sections -fPIC -fasynchronous-unwind-tables -o /tmp/ccQdsXt8.s	1 min 30 s	11 ms	0
└toolchain /usr/bin/as	--64 -o /work/target/debug/build/zstd-sys-92c3f4e302e5f443/out/flag_check /tmp/ccQdsXt8.s	1 min 30 s	1 ms	0
└toolchain /usr/bin/ar ×2	cqD /work/target/debug/build/zstd-sys-92c3f4e302e5f443/out/libzstd.a /work/target/debug/build/zstd-sys-92c3f4e302e5f443/out/44ff4c55aa9e5133-debug.o /work/target/debug/build/zstd-sys-92c3f4e302e5f443/out/44ff4c55aa9e5133-entropy_common.o /work/target/debug/build/zstd-sys-92c3f4e302e5f443/out/44ff4c55aa9e5133-error_private.o /work/target/debug/build/zstd-sys-92c3f4e302e5f443/out/44ff4c55aa9e5133-fse_decompress.o /work/target/debug/build/zstd-sys-92c3f4e302e5f443/out/44ff4c55aa9e5133-pool.o /work/target/debug/build/zstd-sys-92c3f4e302e5f443/out/44ff4c55aa9e5133-threading.o /work/target/debug/build/zstd-sys-92c3f4e302e5f443/out/44ff4c55aa9e5133-zstd_common.o /work/target/debug/build/zstd-sys-92c3f4e302e5f443/out/fb80479a5fb81f6a-fse_compress.o /work/target/debug/build/zstd-sys-92c3f4e302e5f443/out/fb80479a5fb81f6a-hist.o /work/target/debug/build/zstd-sys-92c3f4e302e5f443/out/fb80479a5fb81f6a-huf_compress.o /work/target/debug/build/zstd-sys-92c3f4e302e5f443/out/fb80479a5fb81f6a-zstd_compress.o /work/target/de	1 min 38 s	27 ms	0
└build_script io-uring		1 min 51 s	2 ms	0
└build_script rayon-core		1 min 51 s	2 ms	0
└build_script thiserror		1 min 51 s	25 ms	0
└rustc /usr/local/bin/rustc	--edition=2018 --crate-name=thiserror --crate-type=lib --cap-lints=allow --emit=dep-info,metadata --out-dir /work/target/debug/build/thiserror-bf0fafdea055103f/out/probe build/probe.rs --target x86_64-unknown-linux-gnu	1 min 51 s	21 ms	256
└build_script memoffset		1 min 51 s	26 ms	0
└rustc /usr/local/bin/rustc ×2	--version --verbose	1 min 51 s	6 ms	0
└build_script memoffset		1 min 51 s	25 ms	0
└rustc /usr/local/bin/rustc ×2	--version --verbose	1 min 51 s	7 ms	0
└build_script zstd-safe		2 min 3 s	2 ms	0
└build_script crc32fast		2 min 3 s	9 ms	0
└rustc /usr/local/bin/rustc	--version	2 min 3 s	7 ms	0
└build_script e2fsprogs-sys		2 min 6 s	3 ms	0
└build_script libkrun-sys		2 min 6 s	2 ms	0
└build_script bubblewrap-sys		2 min 6 s	2 ms	0
└build_script libsqlite3-sys		2 min 9 s	6.9 s	0
└toolchain /usr/bin/cc	-E /work/target/debug/build/libsqlite3-sys-1534b97f3ebd83be/out/14967725271034907351detect_compiler_family.c	2 min 9 s	6 ms	0
└toolchain /usr/libexec/gcc/x86_64-linux-gnu/14/cc1	-E -quiet -imultiarch x86_64-linux-gnu /work/target/debug/build/libsqlite3-sys-1534b97f3ebd83be/out/14967725271034907351detect_compiler_family.c -mtune=generic -march=x86-64 -fasynchronous-unwind-tables -dumpbase 14967725271034907351detect_compiler_family.c -dumpbase-ext .c	2 min 9 s	5 ms	0
└toolchain /usr/bin/cc	-?	2 min 9 s	2 ms	256
└toolchain /usr/bin/cc ×2	-O0 -ffunction-sections -fdata-sections -fPIC -m64 -Wall -Wextra -mno-omit-leaf-frame-pointer -o /work/target/debug/build/libsqlite3-sys-1534b97f3ebd83be/out/flag_check -c /work/target/debug/build/libsqlite3-sys-1534b97f3ebd83be/out/flag_check.c	2 min 9 s	15 ms	0
└toolchain /usr/libexec/gcc/x86_64-linux-gnu/14/cc1	-quiet -imultiarch x86_64-linux-gnu /work/target/debug/build/libsqlite3-sys-1534b97f3ebd83be/out/flag_check.c -quiet -dumpdir /work/target/debug/build/libsqlite3-sys-1534b97f3ebd83be/out/ -dumpbase flag_check.c -dumpbase-ext .c -m64 -mno-omit-leaf-frame-pointer -mtune=generic -march=x86-64 -O0 -Wall -Wextra -ffunction-sections -fdata-sections -fPIC -fasynchronous-unwind-tables -o /tmp/ccnQDDuL.s	2 min 9 s	11 ms	0
└toolchain /usr/bin/as	--64 -o /work/target/debug/build/libsqlite3-sys-1534b97f3ebd83be/out/flag_check /tmp/ccnQDDuL.s	2 min 9 s	2 ms	0
└toolchain /usr/bin/ar ×2	cqD /work/target/debug/build/libsqlite3-sys-1534b97f3ebd83be/out/libsqlite3.a /work/target/debug/build/libsqlite3-sys-1534b97f3ebd83be/out/c877a2978823c39d-sqlite3.o	2 min 15 s	23 ms	0
└build_script signal-hook		2 min 25 s	2 ms	0
└build_script fuse-backend-rs		2 min 25 s	1 ms	0
└build_script pathrs		2 min 28 s	3 ms	0
└build_script boxlite-shared		2 min 33 s	150 ms	0
└unknown		2 min 33 s	1 ms	32512
└other /usr/bin/protoc ×2	--version	2 min 33 s	14 ms	0
└build_script nix		2 min 34 s	3 ms	0
└build_script boxlite		2 min 49 s	129 ms	25856
└toolchain /usr/bin/cc	-E /work/target/debug/build/boxlite-b28d4df80554d6e7/out/14755927997506284709detect_compiler_family.c	2 min 49 s	6 ms	0
└toolchain /usr/libexec/gcc/x86_64-linux-gnu/14/cc1	-E -quiet -imultiarch x86_64-linux-gnu /work/target/debug/build/boxlite-b28d4df80554d6e7/out/14755927997506284709detect_compiler_family.c -mtune=generic -march=x86-64 -fasynchronous-unwind-tables -dumpbase 14755927997506284709detect_compiler_family.c -dumpbase-ext .c	2 min 49 s	5 ms	0
└toolchain /usr/bin/cc	-?	2 min 49 s	2 ms	256
└toolchain /usr/bin/cc ×2	-O0 -ffunction-sections -fdata-sections -fPIC -m64 -Wall -Wextra -mno-omit-leaf-frame-pointer -o /work/target/debug/build/boxlite-b28d4df80554d6e7/out/flag_check -c /work/target/debug/build/boxlite-b28d4df80554d6e7/out/flag_check.c	2 min 49 s	15 ms	0
└toolchain /usr/libexec/gcc/x86_64-linux-gnu/14/cc1	-quiet -imultiarch x86_64-linux-gnu /work/target/debug/build/boxlite-b28d4df80554d6e7/out/flag_check.c -quiet -dumpdir /work/target/debug/build/boxlite-b28d4df80554d6e7/out/ -dumpbase flag_check.c -dumpbase-ext .c -m64 -mno-omit-leaf-frame-pointer -mtune=generic -march=x86-64 -O0 -Wall -Wextra -ffunction-sections -fdata-sections -fPIC -fasynchronous-unwind-tables -o /tmp/ccrAZj1N.s	2 min 49 s	11 ms	0
└toolchain /usr/bin/as	--64 -o /work/target/debug/build/boxlite-b28d4df80554d6e7/out/flag_check /tmp/ccrAZj1N.s	2 min 49 s	1 ms	0
└toolchain /usr/bin/ar ×2	cqD /work/target/debug/build/boxlite-b28d4df80554d6e7/out/libkvm_smoke.a /work/target/debug/build/boxlite-b28d4df80554d6e7/out/ea708c7824d36062-kvm_smoke.o	2 min 49 s	2 ms	0
└other /usr/bin/curl	-fsSL -o /work/target/debug/build/boxlite-b28d4df80554d6e7/out/runtime/boxlite-runtime.tar.gz https://github.com/boxlite-ai/boxlite/releases/download/v0.10.6/boxlite-runtime-v0.10.6-linux-x64-gnu.tar.gz	2 min 49 s	57 ms	5632

Network 2

The VM has no internet. Every name it looks up resolves to 10.0.2.1, the fake internet, which accepts every connection and records what was sent. Below, it is shown by its port alone, such as :443. The name the build wanted is in the lookups, the HTTP host and the TLS SNI.

Looked up github.com

Destination	Protocol	What was sent	Bytes
:443	tls	SNI github.com, inside TLS: GET /boxlite-ai/boxlite/releases/download/v0.10.6/boxlite-runtime-v0.10.6-linux-x64-gnu.tar.gz, host github.com, agent curl/8.14.1	1.5 KiB

Sockets in the trace 3

When	Program	How	Address	Type
2 min 49 s	/usr/bin/curl	connect	unix:/var/run/nscd/socket	stream
2 min 49 s	/usr/bin/curl	connect	:53	datagram
2 min 49 s	/usr/bin/curl	connect	:443	stream

Files 0

Secrets opened

None.

Written outside the build directories

None.

Scratch disk 0

Files: 2964
Directories: 631
Size: 1.0 GiB
Compiled units: 436
Scan: stopped at a limit

Nothing outside the build areas.

Output

Standard error

   Compiling proc-macro2 v1.0.107
   Compiling quote v1.0.47
   Compiling unicode-ident v1.0.27
   Compiling libc v0.2.190
   Compiling syn v3.0.9
    Checking cfg-if v1.0.5
   Compiling syn v2.0.119
    Checking smallvec v1.16.3
    Checking memchr v2.8.3
    Checking pin-project-lite v0.2.17
    Checking futures-core v0.3.34
    Checking bytes v1.12.1
   Compiling jobserver v0.1.35
   Compiling shlex v2.0.1
   Compiling find-msvc-tools v0.1.14
   Compiling cc v1.8.0
   Compiling parking_lot_core v0.9.12
   Compiling serde_core v1.0.229
    Checking errno v0.3.14
    Checking scopeguard v1.2.0
   Compiling autocfg v1.5.1
    Checking lock_api v0.4.14
    Checking signal-hook-registry v1.4.8
    Checking once_cell v1.21.4
    Checking itoa v1.0.18
    Checking futures-sink v0.3.34
    Checking parking_lot v0.12.5
   Compiling tokio-macros v2.7.2
    Checking socket2 v0.6.5
    Checking mio v1.2.4
    Checking tokio v1.53.2
   Compiling synstructure v0.14.0
    Checking slab v0.4.12
   Compiling serde v1.0.229
    Checking futures-channel v0.3.34
   Compiling serde_derive v1.0.229
    Checking log v0.4.34
   Compiling zerofrom-derive v0.1.8
    Checking futures-task v0.3.34
    Checking zerofrom v0.1.8
   Compiling yoke-derive v0.8.4
   Compiling futures-macro v0.3.34
    Checking futures-io v0.3.34
    Checking stable_deref_trait v1.2.1
    Checking yoke v0.8.3
    Checking futures-util v0.3.34
    Checking getrandom v0.2.17
   Compiling pkg-config v0.3.34
   Compiling getrandom v0.4.3
   Compiling zmij v1.0.23
    Checking http v1.5.0
    Checking tracing-core v0.1.36
   Compiling zerovec-derive v0.11.6
    Checking zerovec v0.11.8
   Compiling tracing-attributes v0.1.31
   Compiling displaydoc v0.2.7
    Checking typenum v1.20.1
    Checking bitflags v2.13.2
   Compiling serde_json v1.0.154
   Compiling anyhow v1.0.104
    Checking tracing v0.1.44
    Checking http-body v1.1.0
    Checking percent-encoding v2.3.2
   Compiling heck v0.5.0
   Compiling zerocopy v0.8.62
    Checking zeroize v1.9.1
    Checking tower-service v0.3.3
   Compiling either v1.19.0
   Compiling rustix v1.1.5
   Compiling itertools v0.14.0
    Checking tinystr v0.8.4
    Checking tokio-util v0.7.20
   Compiling ring v0.17.14
    Checking aho-corasick v1.1.5
   Compiling num_cpus v1.17.0
    Checking writeable v0.6.4
    Checking equivalent v1.0.2
   Compiling httparse v1.10.1
   Compiling linux-raw-sys v0.12.1
    Checking litemap v0.8.3
    Checking hashbrown v0.17.1
   Compiling version_check v0.9.5
    Checking regex-syntax v0.8.11
   Compiling rustversion v1.0.23
    Checking regex-automata v0.4.18
   Compiling generic-array v0.14.7
    Checking indexmap v2.14.2
    Checking icu_locale_core v2.3.0
   Compiling prost-derive v0.13.5
    Checking ppv-lite86 v0.2.21
    Checking zerotrie v0.2.5
    Checking potential_utf v0.1.6
   Compiling fastrand v2.5.0
   Compiling fnv v1.0.7
   Compiling crossbeam-utils v0.8.23
    Checking subtle v2.6.1
    Checking try-lock v0.2.5
    Checking atomic-waker v1.1.2
   Compiling icu_normalizer_data v2.3.0
   Compiling thiserror v2.0.21
    Checking utf8_iter v1.0.4
    Checking tower-layer v0.3.3
   Compiling icu_properties_data v2.3.0
   Compiling strsim v0.11.1
   Compiling ident_case v1.0.1
   Compiling darling_core v0.20.11
    Checking h2 v0.4.20
    Checking icu_collections v2.3.0
   Compiling tempfile v3.27.0
    Checking want v0.3.2
    Checking icu_provider v2.3.1
    Checking rustls-pki-types v1.15.1
    Checking sync_wrapper v1.0.2
   Compiling thiserror-impl v2.0.21
    Checking httpdate v1.0.3
    Checking untrusted v0.9.0
    Checking hyper v1.12.0
   Compiling regex v1.13.1
   Compiling darling_macro v0.20.11
   Compiling prettyplease v0.2.37
    Checking base64 v0.23.1
    Checking ipnet v2.12.2
    Checking bitflags v1.3.2
    Checking hyper-util v0.1.21
   Compiling hybrid-array v0.4.15
   Compiling prost v0.13.5
   Compiling darling v0.20.11
    Checking icu_properties v2.3.0
    Checking icu_normalizer v2.3.0
    Checking tower v0.5.3
    Checking http-body-util v0.1.5
    Checking rand_core v0.6.4
   Compiling num-traits v0.2.19
   Compiling fixedbitset v0.5.7
   Compiling rustls v0.23.45
    Checking base64 v0.22.1
   Compiling crossbeam-epoch v0.9.21
   Compiling getrandom v0.3.4
   Compiling petgraph v0.7.1
    Checking rand_chacha v0.3.1
    Checking idna_adapter v1.2.2
   Compiling derive_builder_core v0.20.2
   Compiling prost-types v0.13.5
    Checking crypto-common v0.1.7
    Checking block-buffer v0.10.4
    Checking rustls-webpki v0.103.15
    Checking form_urlencoded v1.2.2
   Compiling zstd-sys v2.1.1+zstd.1.5.7
   Compiling indexmap v1.9.3
   Compiling async-trait v0.1.92
   Compiling unicode-xid v0.2.6
   Compiling crossbeam-deque v0.8.8
    Checking konst_macro_rules v0.2.19
   Compiling virtue v0.0.18
    Checking utf8parse v0.2.2
   Compiling multimap v0.10.1
    Checking lazy_static v1.5.1
   Compiling prost-build v0.13.5
    Checking anstyle-parse v1.0.0
   Compiling bincode_derive v2.0.1
    Checking konst v0.2.20
   Compiling const_format_proc_macros v0.2.34
    Checking digest v0.10.7
   Compiling derive_builder_macro v0.20.2
    Checking idna v1.1.0
    Checking rand v0.8.8
   Compiling crypto-common v0.2.2
   Compiling block-buffer v0.12.1
   Compiling memoffset v0.7.1
   Compiling memoffset v0.6.5
   Compiling pin-project-internal v1.1.13
    Checking anstyle-query v1.1.5
   Compiling thiserror v1.0.69
    Checking num-conv v0.2.2
   Compiling rayon-core v1.13.0
    Checking colorchoice v1.0.5
    Checking powerfmt v0.2.1
   Compiling vcpkg v0.2.15
    Checking deranged v0.5.8
    Checking is_terminal_polyfill v1.70.2
   Compiling const-oid v0.10.2
   Compiling io-uring v0.5.13
    Checking mime v0.3.17
    Checking hashbrown v0.12.3
    Checking time-core v0.1.9
    Checking base64ct v1.8.3
    Checking anstyle v1.0.14
    Checking anstream v1.0.0
    Checking pem-rfc7468 v0.7.0
    Checking time v0.3.55
    Checking axum-core v0.4.5
   Compiling digest v0.11.3
   Compiling libsqlite3-sys v0.37.0
    Checking pin-project v1.1.13
    Checking rand_core v0.9.5
    Checking url v2.5.8
    Checking derive_builder v0.20.2
    Checking tokio-rustls v0.26.6
    Checking const_format v0.2.36
   Compiling tonic-build v0.12.3
    Checking webpki-roots v1.0.9
   Compiling bubblewrap-sys v0.10.6
   Compiling libkrun-sys v0.10.6
   Compiling e2fsprogs-sys v0.10.6
   Compiling strum_macros v0.27.2
    Checking futures-executor v0.3.34
   Compiling thiserror-impl v1.0.69
   Compiling getset v0.1.7
   Compiling async-stream-impl v0.3.6
   Compiling der_derive v0.7.3
    Checking tinyvec v1.13.3
    Checking foldhash v0.2.0
    Checking strum v0.27.2
   Compiling cpufeatures v0.3.1
    Checking flagset v0.4.7
    Checking const-oid v0.9.6
   Compiling unty v0.0.4
   Compiling cfg_aliases v0.2.2
   Compiling crc32fast v1.5.2
   Compiling zstd-safe v7.3.0
    Checking matchit v0.7.3
    Checking ryu v1.0.23
    Checking cpufeatures v0.2.17
    Checking clap_lex v1.1.1
    Checking clap_builder v4.6.7
    Checking sha2 v0.10.9
    Checking serde_urlencoded v0.7.1
    Checking axum v0.7.9
   Compiling nix v0.30.1
   Compiling bincode v2.0.1
    Checking der v0.7.10
   Compiling sha2 v0.11.1
    Checking hashbrown v0.16.1
    Checking unicode-normalization v0.1.25
    Checking async-stream v0.3.6
    Checking futures v0.3.34
    Checking hyper-rustls v0.27.10
   Compiling seccompiler v0.4.0
   Compiling boxlite-shared v0.10.6
    Checking tower-http v0.6.11
    Checking rand_chacha v0.9.0
    Checking tower v0.4.13
    Checking hmac v0.12.1
    Checking sharded-slab v0.1.7
    Checking hyper-timeout v0.5.2
    Checking xattr v1.6.1
   Compiling pathrs v0.2.6
    Checking matchers v0.2.0
   Compiling clap_derive v4.6.7
    Checking tracing-log v0.2.0
    Checking tokio-stream v0.1.19
    Checking nibble_vec v0.1.0
   Compiling enumflags2_derive v0.7.12
    Checking filetime v0.2.29
    Checking thread_local v1.1.10
    Checking socket2 v0.5.10
    Checking atty v0.2.14
    Checking socket2 v0.4.10
    Checking adler v1.0.2
    Checking iana-time-zone v0.1.65
    Checking adler2 v2.0.1
    Checking scoped-tls v1.0.1
    Checking option-ext v0.2.0
   Compiling fuse-backend-rs v0.12.1
    Checking simd-adler32 v0.3.10
    Checking endian-type v0.1.2
    Checking termcolor v1.4.1
    Checking humantime v2.4.0
   Compiling signal-hook v0.3.18
   Compiling hex v0.4.3
    Checking base64 v0.13.1
    Checking nu-ansi-term v0.50.3
    Checking pin-utils v0.1.1
    Checking nix v0.26.4
    Checking tracing-subscriber v0.3.23
    Checking jwt v0.16.0
   Compiling boxlite v0.10.6
    Checking env_logger v0.9.3
    Checking radix_trie v0.2.1
    Checking miniz_oxide v0.9.1
    Checking dirs-sys v0.4.1
    Checking tokio-uring v0.4.0
    Checking chrono v0.4.45
    Checking miniz_oxide v0.7.4
    Checking tonic v0.12.3
    Checking tar v0.4.46
    Checking enumflags2 v0.7.12
    Checking clap v4.6.7
    Checking nix v0.24.3
    Checking rand v0.9.5
    Checking rayon v1.12.0
    Checking reqwest v0.12.28
    Checking vm-memory v0.14.1
    Checking olpc-cjson v0.1.4
    Checking hashlink v0.11.1
    Checking spki v0.7.3
    Checking oci-spec v0.8.4
    Checking yasna v0.5.2
    Checking itertools v0.15.0
    Checking clap-num v1.2.0
    Checking pem v3.0.6
    Checking vmm-sys-util v0.12.1
    Checking crossbeam-channel v0.5.17
    Checking arc-swap v1.9.2
    Checking bincode v1.3.3
    Checking futures-locks v0.7.1
    Checking mio v0.8.11
    Checking http-auth v0.1.10
   Compiling async-recursion v1.2.0
    Checking caps v0.5.6
    Checking fallible-iterator v0.3.0
    Checking symlink v0.1.0
    Checking byteorder v1.5.0
    Checking fallible-streaming-iterator v0.1.9
    Checking unicase v2.10.0
    Checking static_assertions v1.1.0
    Checking same-file v1.0.6
    Checking walkdir v2.5.0
    Checking oci-client v0.15.0
    Checking rusqlite v0.39.0
    Checking qcow2-rs v0.1.6
    Checking tracing-appender v0.2.5
    Checking rcgen v0.13.2
    Checking flate2 v1.1.10
    Checking x509-cert v0.2.5
    Checking sysinfo v0.30.13
    Checking ulid v1.2.1
    Checking zstd v0.13.3
    Checking landlock v0.4.7
    Checking dirs v5.0.1
warning: boxlite@0.10.6: Compiling seccomp filter: resources/seccomp/x86_64-unknown-linux-gnu.json -> /work/target/debug/build/boxlite-b28d4df80554d6e7/out/seccomp_filter.bpf
warning: boxlite@0.10.6: Successfully compiled seccomp filter (9386 bytes)
warning: boxlite@0.10.6: BOXLITE_DEPS_STUB=2: downloading prebuilt runtime
warning: boxlite@0.10.6: Downloading https://github.com/boxlite-ai/boxlite/releases/download/v0.10.6/boxlite-runtime-v0.10.6-linux-x64-gnu.tar.gz...
warning: boxlite@0.10.6: Failed to download prebuilt runtime from https://github.com/boxlite-ai/boxlite/releases/download/v0.10.6/boxlite-runtime-v0.10.6-linux-x64-gnu.tar.gz: curl failed: curl: (22) The requested URL returned error: 404
warning: boxlite@0.10.6: Native libraries will not be available.
error: failed to run custom build command for `boxlite v0.10.6`

Caused by:
  process didn't exit successfully: `/work/target/debug/build/boxlite-4a574b0dfa79c85d/build-script-build` (exit status: 101)
  --- stdout
  cargo:rerun-if-changed=build.rs
  cargo:rerun-if-changed=src/default_runtime_dir.rs
  cargo:rerun-if-env-changed=BOXLITE_DEPS_STUB
  cargo:rerun-if-env-changed=BOXLITE_EMBED_RUNTIME
  cargo:rerun-if-env-changed=CARGO_TARGET_DIR
  cargo:rerun-if-changed=src/kvm_smoke.c
  cargo:rerun-if-env-changed=CC_FORCE_DISABLE
  CC_FORCE_DISABLE = None
  cargo:rerun-if-env-changed=CC_x86_64-unknown-linux-gnu
  CC_x86_64-unknown-linux-gnu = None
  cargo:rerun-if-env-changed=CC_x86_64_unknown_linux_gnu
  CC_x86_64_unknown_linux_gnu = None
  cargo:rerun-if-env-changed=HOST_CC
  HOST_CC = None
  cargo:rerun-if-env-changed=CC
  CC = None
  cargo:rerun-if-env-changed=CC_ENABLE_DEBUG_OUTPUT
  cargo:rerun-if-env-changed=CRATE_CC_NO_DEFAULTS
  CRATE_CC_NO_DEFAULTS = None
  cargo:rerun-if-env-changed=CRATE_CC_NO_DEFAULTS
  CRATE_CC_NO_DEFAULTS = None
  cargo:rerun-if-env-changed=CFLAGS
  CFLAGS = None
  cargo:rerun-if-env-changed=HOST_CFLAGS
  HOST_CFLAGS = None
  cargo:rerun-if-env-changed=CFLAGS_x86_64_unknown_linux_gnu
  CFLAGS_x86_64_unknown_linux_gnu = None
  cargo:rerun-if-env-changed=CFLAGS_x86_64-unknown-linux-gnu
  CFLAGS_x86_64-unknown-linux-gnu = None
  cargo:rerun-if-env-changed=CFLAGS
  CFLAGS = None
  cargo:rerun-if-env-changed=HOST_CFLAGS
  HOST_CFLAGS = None
  cargo:rerun-if-env-changed=CFLAGS_x86_64_unknown_linux_gnu
  CFLAGS_x86_64_unknown_linux_gnu = None
  cargo:rerun-if-env-changed=CFLAGS_x86_64-unknown-linux-gnu
  CFLAGS_x86_64-unknown-linux-gnu = None
  cargo:rerun-if-env-changed=CC_FORCE_DISABLE
  CC_FORCE_DISABLE = None
  cargo:rerun-if-env-changed=AR_x86_64-unknown-linux-gnu
  AR_x86_64-unknown-linux-gnu = None
  cargo:rerun-if-env-changed=AR_x86_64_unknown_linux_gnu
  AR_x86_64_unknown_linux_gnu = None
  cargo:rerun-if-env-changed=HOST_AR
  HOST_AR = None
  cargo:rerun-if-env-changed=AR
  AR = None
  cargo:rerun-if-env-changed=ARFLAGS
  ARFLAGS = None
  cargo:rerun-if-env-changed=HOST_ARFLAGS
  HOST_ARFLAGS = None
  cargo:rerun-if-env-changed=ARFLAGS_x86_64_unknown_linux_gnu
  ARFLAGS_x86_64_unknown_linux_gnu = None
  cargo:rerun-if-env-changed=ARFLAGS_x86_64-unknown-linux-gnu
  ARFLAGS_x86_64-unknown-linux-gnu = None
  cargo:rerun-if-env-changed=AR_x86_64-unknown-linux-gnu
  AR_x86_64-unknown-linux-gnu = None
  cargo:rerun-if-env-changed=AR_x86_64_unknown_linux_gnu
  AR_x86_64_unknown_linux_gnu = None
  cargo:rerun-if-env-changed=HOST_AR
  HOST_AR = None
  cargo:rerun-if-env-changed=AR
  AR = None
  cargo:rerun-if-env-changed=ARFLAGS
  ARFLAGS = None
  cargo:rerun-if-env-changed=HOST_ARFLAGS
  HOST_ARFLAGS = None
  cargo:rerun-if-env-changed=ARFLAGS_x86_64_unknown_linux_gnu
  ARFLAGS_x86_64_unknown_linux_gnu = None
  cargo:rerun-if-env-changed=ARFLAGS_x86_64-unknown-linux-gnu
  ARFLAGS_x86_64-unknown-linux-gnu = None
  cargo:rustc-link-lib=static=kvm_smoke
  cargo:rustc-link-search=native=/work/target/debug/build/boxlite-b28d4df80554d6e7/out
  cargo:warning=Compiling seccomp filter: resources/seccomp/x86_64-unknown-linux-gnu.json -> /work/target/debug/build/boxlite-b28d4df80554d6e7/out/seccomp_filter.bpf
  cargo:warning=Successfully compiled seccomp filter (9386 bytes)
  cargo:rerun-if-changed=resources/seccomp/x86_64-unknown-linux-gnu.json
  cargo:rerun-if-changed=resources/seccomp/
  cargo:warning=BOXLITE_DEPS_STUB=2: downloading prebuilt runtime
  cargo:rerun-if-env-changed=BOXLITE_RUNTIME_URL
  cargo:warning=Downloading https://github.com/boxlite-ai/boxlite/releases/download/v0.10.6/boxlite-runtime-v0.10.6-linux-x64-gnu.tar.gz...
  cargo:warning=Failed to download prebuilt runtime from https://github.com/boxlite-ai/boxlite/releases/download/v0.10.6/boxlite-runtime-v0.10.6-linux-x64-gnu.tar.gz: curl failed: curl: (22) The requested URL returned error: 404

  cargo:warning=Native libraries will not be available.

  --- stderr

  thread 'main' (4185) panicked at /cw/vendor/boxlite-0.10.6/build.rs:1214:17:
  Failed to prepare complete prebuilt BoxLite runtime in /work/target/debug/build/boxlite-b28d4df80554d6e7/out/runtime
  note: run with `RUST_BACKTRACE=1` environment variable to display a backtrace

Timeline

When	From	To	Event	Worker
2026-10-13 02:21 UTC	Discovered	Fetched	fetched	fetcher-1896447
2026-10-13 02:21 UTC	Fetched	ReadyForSandbox	static_analysis_completed	static-1896495
2026-10-13 02:29 UTC	ReadyForSandbox	Running	sandbox_started	orchestrator-1898673-slot2
2026-10-13 02:33 UTC	Running	DynamicallyAnalyzed	sandbox_completed	orchestrator-1898673-slot2
2026-10-13 02:33 UTC	DynamicallyAnalyzed	Scored	scored	analyzer-1898703
2026-10-13 02:33 UTC	Scored	Done	finalized	analyzer-1898703