boxlite 0.10.8

Done dynamic on Linux job 249941 crates.io SBOM Findings (VEX) Compare with 0.10.7

high severity environment_enumeration in build_script code: std::env::vars

medium

Automated verdict. Nobody reviewed it. A score is a reason to look closer, not a finding.

Evidence

Points	Signal	Where	What
30	static:environment_enumeration static · boxlite	build.rs:227	high severity environment_enumeration in build_script code: std::env::vars
10	network_lookup network · boxlite	github.com	The build looked up github.com.
5	exec_downloader trace · boxlite	/usr/bin/curl	The build ran /usr/bin/curl.

6 without points

Signal	Where	What
static:build_script static · boxlite	build.rs	low severity build_script in build_script code: build.rs
static:downloader_pattern static · boxlite	build.rs:606	high severity downloader_pattern in build_script code: https://github.com/boxlite-ai/boxlite/releases/download/v{version}/boxlite-runtime-v{version}-{target}.tar.gz at build.rs:606 with std::process::Command::new at build.rs:501
static:process_spawn static · boxlite	build.rs:501	medium severity process_spawn in build_script code (79 places): std::process::Command::new
static:shell_command static · boxlite	build.rs:507	high severity shell_command in build_script code (3 places): curl failed: {}
static:url_literal static · boxlite	build.rs:606	low severity url_literal in build_script code (111 places): https://github.com/boxlite-ai/boxlite/releases/download/v{version}/boxlite-runtime-v{version}-{target}.tar.gz
static:yara:sandbox_evasion static · boxlite	resources/seccomp/aarch64-unknown-linux-gnu.json:436	medium severity yara:sandbox_evasion in library code (17 places): Checks for virtual machines, sandboxes or debuggers

Behavior

Profile

exec:downloader net:github.com static:downloader_pattern static:environment_enumeration static:process_spawn static:shell_command static:yara:sandbox_evasion

Static findings

high downloader_pattern build_script 1

https://github.com/boxlite-ai/boxlite/releases/download/v{version}/boxlite-runtime-v{version}-{target}.tar.gz at build.rs:606 with std::process::Command::new at build.rs:501 build.rs:606

high environment_enumeration build_script 1

std::env::vars build.rs:227

high shell_command build_script 1

curl failed: {} build.rs:507

medium yara_match sandbox_evasion library 17

Checks for virtual machines, sandboxes or debuggers resources/seccomp/aarch64-unknown-linux-gnu.json:436 resources/seccomp/aarch64-unknown-linux-musl.json:436 resources/seccomp/x86_64-unknown-linux-gnu.json:436 resources/seccomp/x86_64-unknown-linux-gnu.original.json:388 resources/seccomp/x86_64-unknown-linux-musl.json:436 resources/seccomp/x86_64-unknown-linux-musl.original.json:388 src/jailer/THREAT_MODEL.md:322 src/jailer/cgroup.rs:75 src/jailer/mod.rs:4 src/jailer/seccomp.rs:30 src/jailer/shim_copy.rs:1 src/net/gvproxy/config.rs:122 src/rootfs/guest.rs:33 src/runtime/advanced_options.rs:677 src/vmm/controller/shim.rs:268 src/vmm/mod.rs:76 src/vmm/registry.rs:96

medium process_spawn build_script 3

std::process::Command::new build.rs:501 build.rs:517 build.rs:1107

medium shell_command test 2

wget -O- --timeout=5 {url} 2>&1; printf '\nEXIT:%s\n' $? tests/network_spec.rs:241
wget -q -O /dev/null --timeout=3 http://1.1.1.1/ 2>&1; echo EXIT:$? tests/security_enforcement.rs:385

low network_access library 144

tokio::net::TcpListener::bind src/images/store.rs:1627 src/images/store.rs:1707 src/images/store.rs:2128 src/images/store.rs:2152 src/images/store.rs:2189 src/images/store.rs:2248 src/litebox/box_impl.rs:1875 src/litebox/network.rs:510 src/rest/client.rs:786 src/rest/client.rs:820 src/rest/client.rs:855 src/rest/client.rs:929 src/rest/client.rs:978 src/rest/client.rs:1100 src/rest/client.rs:1180 src/rest/litebox.rs:1452 src/rest/litebox.rs:1721 src/rest/litebox.rs:1750 src/rest/litebox.rs:1790 src/rest/litebox.rs:1832 src/rest/litebox.rs:1896 src/rest/litebox.rs:1939 src/rest/litebox.rs:2003 src/rest/litebox.rs:2040 src/rest/litebox.rs:2113 src/rest/litebox.rs:2173 src/rest/litebox.rs:2232 src/rest/litebox.rs:2309 src/rest/litebox.rs:2381 src/rest/litebox.rs:2442 src/rest/litebox.rs:2488 src/rest/litebox.rs:2545 src/rest/litebox.rs:2612 src/rest/litebox.rs:2713 src/rest/litebox.rs:2755 src/rest/litebox.rs:2815 src/rest/litebox.rs:2839 src/rest/runtime.rs:526 src/rest/runtime.rs:1325
std::net::TcpListener::bind src/jailer/landlock.rs:517 src/jailer/sandbox/seatbelt.rs:1420 src/net/gvproxy/services.rs:58 src/net/gvproxy/services.rs:1008 src/portal/interfaces/container.rs:382
std::net::TcpStream::connect src/jailer/landlock.rs:521 src/jailer/landlock.rs:537
tokio::net::UnixListener::bind src/litebox/init/tasks/guest_connect.rs:142 src/litebox/network.rs:540 src/litebox/network.rs:1117 src/litebox/ssh_tests.rs:214 src/litebox/ssh_tests.rs:633 src/net/gvproxy/services.rs:769 src/net/gvproxy/services.rs:785 src/net/gvproxy/services.rs:999 src/net/gvproxy/services.rs:1077 src/net/gvproxy/services.rs:1519 src/net/gvproxy/services.rs:1577 src/net/gvproxy/services.rs:1618
tokio::net::UnixStream::connect src/litebox/init/tasks/guest_connect.rs:324 src/litebox/init/tasks/guest_connect.rs:388 src/net/gvproxy/services.rs:116 src/net/gvproxy/services.rs:491 src/portal/connection.rs:69
tokio::net::UnixStream src/litebox/network.rs:76 src/litebox/network.rs:614 src/litebox/network.rs:871 src/net/gvproxy/services.rs:537 src/net/gvproxy/services.rs:797 src/net/gvproxy/services.rs:827 src/net/mod.rs:262 src/net/mod.rs:281
tokio::net::UnixStream::into_split src/litebox/network.rs:78
tokio::net::UnixStream::from_std src/litebox/network.rs:150 src/litebox/network.rs:1228
tokio::net::TcpListener src/litebox/network.rs:499 src/rest/client.rs:712 src/rest/litebox.rs:1652 src/rest/litebox.rs:2665 src/rest/litebox.rs:2802
tokio::net::UnixListener src/litebox/network.rs:501
tokio::net::TcpStream src/litebox/network.rs:614 src/rest/client.rs:67 src/rest/litebox.rs:1533 src/rest/litebox.rs:1574 src/rest/litebox.rs:1593
tokio::net::UnixStream::pair src/litebox/network.rs:716 src/litebox/network.rs:880 src/litebox/network.rs:1182 src/litebox/network.rs:1214 src/litebox/network.rs:1336 src/net/mod.rs:757
tokio::net::TcpStream::connect src/litebox/network.rs:906 src/litebox/network.rs:978 src/litebox/network.rs:1012 src/litebox/network.rs:1018 src/litebox/network.rs:1027 src/litebox/network.rs:1052
std::net::TcpListener src/net/gvproxy/services.rs:51
std::net::UdpSocket src/net/gvproxy/services.rs:52
std::net::UdpSocket::bind src/net/gvproxy/services.rs:59 src/net/gvproxy/services.rs:1086
hyper::client::conn::http1::handshake src/net/gvproxy/services.rs:125 src/rest/client.rs:424
hyper_util::client::legacy::connect::HttpConnector src/rest/client.rs:58
reqwest::Client src/rest/client.rs:78
reqwest::Client::builder src/rest/client.rs:99
reqwest::RequestBuilder src/rest/client.rs:177 src/rest/client.rs:177 src/rest/client.rs:192 src/rest/client.rs:227 src/rest/client.rs:255 src/rest/client.rs:493
reqwest::StatusCode src/rest/client.rs:242 src/rest/error.rs:28 src/rest/error.rs:48 src/rest/error.rs:111 src/rest/error.rs:167 src/rest/error.rs:181
reqwest::Response src/rest/client.rs:243 src/rest/litebox.rs:1229
reqwest::header::CONTENT_LENGTH src/rest/client.rs:256 src/rest/client.rs:776
reqwest::header::ACCEPT src/rest/client.rs:472
reqwest::Error src/rest/client.rs:611
reqwest::StatusCode::BAD_GATEWAY src/rest/client.rs:1218
reqwest::StatusCode::from_u16 src/rest/error.rs:302 src/rest/error.rs:407 src/rest/error.rs:486 src/rest/error.rs:577
reqwest::StatusCode::BAD_REQUEST src/rest/error.rs:336 src/rest/error.rs:523
reqwest::StatusCode::TOO_MANY_REQUESTS src/rest/error.rs:346
reqwest::StatusCode::IM_A_TEAPOT src/rest/error.rs:361
reqwest::StatusCode::SERVICE_UNAVAILABLE src/rest/error.rs:378 src/rest/error.rs:549
reqwest::StatusCode::INTERNAL_SERVER_ERROR src/rest/error.rs:423
reqwest::StatusCode::UNAUTHORIZED src/rest/error.rs:432
reqwest::StatusCode::FORBIDDEN src/rest/error.rs:434
reqwest::StatusCode::NOT_FOUND src/rest/error.rs:441 src/rest/error.rs:595
reqwest::StatusCode::CONFLICT src/rest/error.rs:505
reqwest::Body::wrap_stream src/rest/litebox.rs:375
reqwest::Method::PUT src/rest/litebox.rs:385
reqwest::Method::GET src/rest/litebox.rs:413

low process_spawn library 67

low network_access test 10

tokio::net::UnixStream::connect tests/guest_ssh.rs:333 tests/guest_ssh.rs:535 tests/guest_ssh.rs:547
std::net::TcpListener::bind tests/gvproxy_backend.rs:206 tests/network_spec.rs:358 tests/network_spec.rs:398
tokio::net::TcpListener::bind tests/image_registry_proxy.rs:70
std::net::TcpStream::connect_timeout tests/network_spec.rs:261
std::net::UdpSocket::bind tests/network_spec.rs:312 tests/network_spec.rs:335

low process_spawn test 9

tokio::process::Command tests/guest_ssh.rs:341 tests/guest_ssh.rs:363 tests/guest_ssh.rs:482
tokio::process::Command::new tests/guest_ssh.rs:356 tests/guest_ssh.rs:364 tests/image_registry_proxy.rs:155
std::process::Command::new tests/health_check.rs:121 tests/run_main_command.rs:431 tests/sigstop_quiesce.rs:105

low foreign_functions library 3

extern block src/system_check.rs:162 src/system_check.rs:255 src/util/mod.rs:27

low url_literal build_script 2

https://github.com/boxlite-ai/boxlite/releases/download/v{version}/boxlite-runtime-v{version}-{target}.tar.gz build.rs:606
<?xml version="1.0" encoding="UTF-8"?>\u{a}<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">\u{a}<plist version="1.0">\u{a}<dict>\u{a} <key>com.… build.rs:1077

low build_script build_script 1

build.rs build.rs

info url_literal library 92

:// src/images/image_registry_proxy.rs:38 src/images/store.rs:1434 src/runtime/options.rs:88 src/runtime/options.rs:88
{field} must be an http:// or https:// URL src/images/image_registry_proxy.rs:42
http://registry.local:5000 src/images/store.rs:1793
http://127.0.0.1:1/token src/images/store.rs:2426
http://{failing}/token src/images/store.rs:2427
http://{tokens}/token src/images/store.rs:2456 src/images/store.rs:2485 src/images/store.rs:2516
https://evil.example.com/blob src/images/store.rs:2946
\u{a} See: https://boxlite.dev/docs/faq#sandbox-userns src/jailer/bwrap.rs:255
vsock://2:2695 src/jailer/command.rs:34 src/jailer/command.rs:42
http://{address} src/litebox/box_impl.rs:1891
tcp://{address} src/litebox/network.rs:36
https://3000-box.proxy.example.test src/litebox/network.rs:751 src/litebox/network.rs:771
tcp://[::1]:8080 src/litebox/network.rs:1151
tcp://192.168.127.2:80 src/net/gvproxy/services.rs:1121
http://[::]:50051 src/portal/connection.rs:64
http://127.0.0.1:{} src/portal/connection.rs:80 src/rest/litebox.rs:1555
http://{addr} src/portal/interfaces/container.rs:397
https:// src/rest/client.rs:367
wss://{} src/rest/client.rs:368
http:// src/rest/client.rs:369
ws://{} src/rest/client.rs:370
http://localhost:1 src/rest/client.rs:761 src/rest/client.rs:1173 src/rest/runtime.rs:559 src/rest/runtime.rs:580 src/rest/runtime.rs:707 src/rest/runtime.rs:729 src/rest/runtime.rs:755 src/rest/runtime.rs:781 src/rest/runtime.rs:804 src/rest/runtime.rs:830 src/rest/runtime.rs:853 src/rest/runtime.rs:876 src/rest/runtime.rs:892 src/rest/runtime.rs:912 src/rest/runtime.rs:941 src/rest/runtime.rs:966 src/rest/runtime.rs:986 src/rest/runtime.rs:1010 src/rest/runtime.rs:1032
https://api.example.com src/rest/client.rs:767 src/rest/client.rs:1265 src/rest/client.rs:1276 src/rest/client.rs:1288 src/rest/client.rs:1303 src/rest/client.rs:1316 src/rest/options.rs:139 src/rest/options.rs:140 src/rest/options.rs:147 src/rest/options.rs:156 src/rest/options.rs:162 src/rest/options.rs:169
http://127.0.0.1:{port} src/rest/client.rs:797 src/rest/client.rs:831 src/rest/client.rs:877 src/rest/client.rs:879 src/rest/client.rs:945 src/rest/client.rs:948 src/rest/client.rs:994 src/rest/client.rs:996 src/rest/client.rs:1132 src/rest/client.rs:1207 src/rest/litebox.rs:2790 src/rest/runtime.rs:605 src/rest/runtime.rs:624 src/rest/runtime.rs:652 src/rest/runtime.rs:668 src/rest/runtime.rs:684 src/rest/runtime.rs:1053 src/rest/runtime.rs:1302
{"uri":"http://127.0.0.1:9/tunnel"} src/rest/client.rs:1117
http://127.0.0.1:9/tunnel src/rest/client.rs:1135
https://api.example.com/v1/acme/boxes src/rest/client.rs:1269
https://api.example.com/v1/boxes src/rest/client.rs:1280 src/rest/client.rs:1292
https://api.example.com/v1/us-east/team-42/boxes src/rest/client.rs:1307
https://api.example.com/v1/me src/rest/client.rs:1320
{{"uri":"http://127.0.0.1:{port}"}} src/rest/litebox.rs:2767
http://alice:{password}@proxy.corp:3128 src/runtime/options.rs:293
http://***@proxy.corp:3128 src/runtime/options.rs:298
KVM smoke test failed: vCPU exit reason {exit_reason} (expected {expected})\u{a}\u{a}/dev/kvm exists but cannot execute guest code (host kernel: {kernel}).\u{a}\u{a}Suggestions:\u{a}- Ensure nested vi… src/system_check.rs:228
--{} unix:// src/vmm/krun/engine.rs:76 src/vmm/krun/engine.rs:123
unix:// src/vmm/krun/engine.rs:129

info unsafe_code library 35

10 unsafe blocks, functions or impls src/disk/ext4.rs:381
4 unsafe blocks, functions or impls src/images/archive/extractor.rs:146 src/vmm/controller/shim.rs:95 src/vmm/krun/engine.rs:29
6 unsafe blocks, functions or impls src/jailer/cgroup.rs:53 src/vmm/controller/spawn.rs:427
18 unsafe blocks, functions or impls src/jailer/common/fd.rs:33
2 unsafe blocks, functions or impls src/jailer/common/mod.rs:22 src/jailer/common/rlimit.rs:27 src/jailer/sandbox/seatbelt.rs:426 src/net/ca.rs:109 src/net/gvproxy/logging.rs:35 src/portal/interfaces/exec.rs:665 src/runtime/lock.rs:62
3 unsafe blocks, functions or impls src/jailer/credentials.rs:60 src/litebox/box_impl.rs:1432 src/litebox/init/tasks/guest_connect.rs:554 src/net/socket_path.rs:74 src/system_check.rs:166
11 unsafe blocks, functions or impls src/jailer/landlock.rs:154
1 unsafe blocks, functions or impls src/jailer/pre_exec.rs:92 src/jailer/sandbox/bwrap.rs:163 src/jailer/sandbox/landlock.rs:45 src/net/gvproxy/instance.rs:197 src/rootfs/copy_mount.rs:576 src/runtime/core.rs:225 src/runtime/rt_impl.rs:908
12 unsafe blocks, functions or impls src/jailer/seccomp.rs:199 src/util/process.rs:82
5 unsafe blocks, functions or impls src/lock/file.rs:304 src/util/mod.rs:43
9 unsafe blocks, functions or impls src/net/gvproxy/ffi.rs:35
8 unsafe blocks, functions or impls src/util/pid_file.rs:63
13 unsafe blocks, functions or impls src/vmm/controller/watchdog.rs:50
31 unsafe blocks, functions or impls src/vmm/krun/context.rs:85

info url_literal test 17

http://[::]:50051 tests/guest_ssh.rs:329
tcp://192.168.127.2:80 tests/gvproxy_backend.rs:168
https://registry.local tests/image_registries.rs:42
http://{} tests/image_registry_proxy.rs:71
http://example.com/ tests/network_spec.rs:524 tests/network_spec.rs:674
http://example.org/ tests/network_spec.rs:536 tests/network_spec.rs:595
http://www.example.com/ tests/network_spec.rs:584
http://8.8.8.8/ tests/network_spec.rs:685
https://example.com/ tests/network_spec.rs:845
http://{HOST_HOSTNAME}:{port}/ tests/network_spec.rs:894 tests/network_spec.rs:937 tests/network_spec.rs:974
http://{HOST_IP}:{port}/ tests/network_spec.rs:1012
http://localhost:8080 tests/rest_integration.rs:21
wget -q -O /dev/null --timeout=3 http://1.1.1.1/ 2>&1; echo EXIT:$? tests/security_enforcement.rs:385

info unsafe_code test 4

1 unsafe blocks, functions or impls tests/exec_user.rs:140 tests/import_export_benchmark.rs:383 tests/recovery.rs:119
2 unsafe blocks, functions or impls tests/sigstop_quiesce.rs:49

info native_link build_script 1

links = "boxlite" Cargo.toml

info unsafe_code build_script 1

2 unsafe blocks, functions or impls build.rs:349

Run: check

failed

Ended: agent reported the end
Guest: exit code 101
Run time: 2 min 49 s
VM restore: 69 ms
Payload: 24504 files, 753.4 MiB
Files opened: 52202

Processes 969

Siblings that ran the same program with the same result and the same processes below are folded into one row, with their number. Hide the 917 compiler processes (rustc, C toolchain)

Process	Arguments	Start	Took	Exit
cargo /usr/local/bin/cargo	check --locked --offline	5 ms	2 min 49 s	25856
└rustc /usr/local/bin/rustc ×72	--crate-name build_script_build --edition=2021 /cw/vendor/proc-macro2-1.0.107/build.rs --error-format=json --json=diagnostic-rendered-ansi,artifacts,future-incompat --crate-type bin --emit=dep-info,link -C embed-bitcode=no --cfg feature="default" --cfg feature="proc-macro" --check-cfg cfg(docsrs,test) --check-cfg cfg(feature, values("default", "nightly", "proc-macro", "span-locations")) -C metadata=a3dc8fb24392fcd4 -C extra-filename=-a411f7480bd0f42c --out-dir /work/target/debug/build/proc-macro2-a411f7480bd0f42c -L dependency=/work/target/debug/deps --cap-lints allow	495 ms	704 ms	0
└toolchain /usr/bin/cc	-m64 /work/target/debug/build/proc-macro2-a411f7480bd0f42c/rustcPeN99x/symbols.o /work/target/debug/build/proc-macro2-a411f7480bd0f42c/build_script_build-a411f7480bd0f42c.build_script_build.dd8d7f624ad1d48e-cgu.0.rcgu.o /work/target/debug/build/proc-macro2-a411f7480bd0f42c/build_script_build-a411f7480bd0f42c.cnca5igddme2fkrf01fktrtaw.rcgu.o -Wl,--as-needed -Wl,-Bstatic /usr/local/lib/rustlib/x86_64-unknown-linux-gnu/lib/libstd-64f5f36fb0927694.rlib /usr/local/lib/rustlib/x86_64-unknown-linux-gnu/lib/libpanic_unwind-549498e8b2e4d924.rlib /usr/local/lib/rustlib/x86_64-unknown-linux-gnu/lib/libobject-7ff85ea729a864ff.rlib /usr/local/lib/rustlib/x86_64-unknown-linux-gnu/lib/libmemchr-0e3477fb2664a277.rlib /usr/local/lib/rustlib/x86_64-unknown-linux-gnu/lib/libaddr2line-09755979c57b7e64.rlib /usr/local/lib/rustlib/x86_64-unknown-linux-gnu/lib/libgimli-9a1fede77fbbf2f0.rlib /usr/local/lib/rustlib/x86_64-unknown-linux-gnu/lib/libcfg_if-360da4ba13154744.rlib /usr/local/lib/rustlib/x86_64-unknown-linux-gnu/lib/lib	1.0 s	140 ms	0
└toolchain /usr/libexec/gcc/x86_64-linux-gnu/14/collect2	-plugin /usr/libexec/gcc/x86_64-linux-gnu/14/liblto_plugin.so -plugin-opt=/usr/libexec/gcc/x86_64-linux-gnu/14/lto-wrapper -plugin-opt=-fresolution=/tmp/cchx9a9S.res --build-id --eh-frame-hdr -m elf_x86_64 --hash-style=gnu --as-needed -dynamic-linker /lib64/ld-linux-x86-64.so.2 -pie -fuse-ld=lld -o /work/target/debug/build/proc-macro2-a411f7480bd0f42c/build_script_build-a411f7480bd0f42c /usr/lib/gcc/x86_64-linux-gnu/14/../../../x86_64-linux-gnu/Scrt1.o /usr/lib/gcc/x86_64-linux-gnu/14/../../../x86_64-linux-gnu/crti.o /usr/lib/gcc/x86_64-linux-gnu/14/crtbeginS.o -L/work/target/debug/build/proc-macro2-a411f7480bd0f42c/rustcPeN99x/raw-dylibs -L/usr/local/lib/rustlib/x86_64-unknown-linux-gnu/lib -L/usr/local/lib/rustlib/x86_64-unknown-linux-gnu/bin/gcc-ld -L/usr/lib/gcc/x86_64-linux-gnu/14 -L/usr/lib/gcc/x86_64-linux-gnu/14/../../../x86_64-linux-gnu -L/usr/lib/gcc/x86_64-linux-gnu/14/../../../../lib -L/lib/x86_64-linux-gnu -L/lib/../lib -L/usr/lib/x86_64-linux-gnu -L	1.0 s	134 ms	0
└toolchain /usr/local/lib/rustlib/x86_64-unknown-linux-gnu/bin/rust-lld	-flavor gnu -plugin /usr/libexec/gcc/x86_64-linux-gnu/14/liblto_plugin.so -plugin-opt=/usr/libexec/gcc/x86_64-linux-gnu/14/lto-wrapper -plugin-opt=-fresolution=/tmp/cchx9a9S.res --build-id --eh-frame-hdr -m elf_x86_64 --hash-style=gnu --as-needed -dynamic-linker /lib64/ld-linux-x86-64.so.2 -pie -o /work/target/debug/build/proc-macro2-a411f7480bd0f42c/build_script_build-a411f7480bd0f42c /usr/lib/gcc/x86_64-linux-gnu/14/../../../x86_64-linux-gnu/Scrt1.o /usr/lib/gcc/x86_64-linux-gnu/14/../../../x86_64-linux-gnu/crti.o /usr/lib/gcc/x86_64-linux-gnu/14/crtbeginS.o -L/work/target/debug/build/proc-macro2-a411f7480bd0f42c/rustcPeN99x/raw-dylibs -L/usr/local/lib/rustlib/x86_64-unknown-linux-gnu/lib -L/usr/local/lib/rustlib/x86_64-unknown-linux-gnu/bin/gcc-ld -L/usr/lib/gcc/x86_64-linux-gnu/14 -L/usr/lib/gcc/x86_64-linux-gnu/14/../../../x86_64-linux-gnu -L/usr/lib/gcc/x86_64-linux-gnu/14/../../../../lib -L/lib/x86_64-linux-gnu -L/lib/../lib -L/usr/lib/x86_6	1.0 s	130 ms	0
└build_script proc-macro2		1.2 s	81 ms	0
└rustc /usr/local/bin/rustc ×3	--version	1.2 s	7 ms	0
└rustc /usr/local/bin/rustc	--cfg=procmacro2_build_probe --edition=2021 --crate-name=proc_macro2 --crate-type=lib --cap-lints=allow --emit=dep-info,metadata --out-dir /work/target/debug/build/proc-macro2-4f3f927bd5485a92/out/probe src/probe/proc_macro_span.rs --target x86_64-unknown-linux-gnu	1.2 s	32 ms	256
└rustc /usr/local/bin/rustc ×339	--crate-name unicode_ident --edition=2021 /cw/vendor/unicode-ident-1.0.27/src/lib.rs --error-format=json --json=diagnostic-rendered-ansi,artifacts,future-incompat --crate-type lib --emit=dep-info,metadata,link -C embed-bitcode=no --check-cfg cfg(docsrs,test) --check-cfg cfg(feature, values()) -C metadata=3bb98f7b2f589c61 -C extra-filename=-86dff03eb05ec8a5 --out-dir /work/target/debug/deps -L dependency=/work/target/debug/deps --cap-lints allow	1.2 s	48 ms	0
└build_script quote		1.4 s	9 ms	0
└rustc /usr/local/bin/rustc	--version	1.4 s	6 ms	0
└build_script libc		2.3 s	9 ms	0
└rustc /usr/local/bin/rustc	--version	2.3 s	6 ms	0
└build_script libc		11.5 s	9 ms	0
└rustc /usr/local/bin/rustc	--version	11.5 s	7 ms	0
└build_script serde_core		14.8 s	10 ms	0
└rustc /usr/local/bin/rustc	--version	14.8 s	6 ms	0
└build_script parking_lot_core		14.8 s	2 ms	0
└build_script serde		20.8 s	10 ms	0
└rustc /usr/local/bin/rustc	--version	20.8 s	7 ms	0
└build_script zmij		30.0 s	10 ms	0
└rustc /usr/local/bin/rustc	--version	30.0 s	7 ms	0
└build_script getrandom		30.0 s	2 ms	0
└build_script anyhow		34.6 s	34 ms	0
└rustc /usr/local/bin/rustc	--cfg=anyhow_build_probe --edition=2018 --crate-name=anyhow --crate-type=lib --cap-lints=allow --emit=dep-info,metadata --out-dir /work/target/debug/build/anyhow-16c5e2ddec703063/out/probe src/nightly.rs --target x86_64-unknown-linux-gnu	34.6 s	23 ms	256
└rustc /usr/local/bin/rustc	--version	34.6 s	6 ms	0
└build_script serde_json		34.6 s	2 ms	0
└build_script zerocopy		35.8 s	10 ms	0
└rustc /usr/local/bin/rustc	--version	35.8 s	7 ms	0
└build_script rustix		36.1 s	37 ms	0
└rustc /usr/local/bin/rustc ×2	--crate-type=rlib --emit=metadata --target x86_64-unknown-linux-gnu -o /work/target/debug/build/rustix-0f4e2900de2476d1/out/rustix_test_can_compile -	36.1 s	16 ms	0
└build_script rustversion		49.1 s	10 ms	0
└rustc /usr/local/bin/rustc	--version	49.1 s	7 ms	0
└build_script httparse		49.1 s	10 ms	0
└rustc /usr/local/bin/rustc	--version	49.1 s	7 ms	0
└build_script ring		49.1 s	1.8 s	0
└toolchain /usr/bin/cc ×2	-E /work/target/debug/build/ring-89b26f3c111c6d71/out/8288852463535469400detect_compiler_family.c	49.1 s	22 ms	0
└toolchain /usr/libexec/gcc/x86_64-linux-gnu/14/cc1	-E -quiet -imultiarch x86_64-linux-gnu /work/target/debug/build/ring-89b26f3c111c6d71/out/8288852463535469400detect_compiler_family.c -mtune=generic -march=x86-64 -fasynchronous-unwind-tables -dumpbase 8288852463535469400detect_compiler_family.c -dumpbase-ext .c	49.1 s	20 ms	0
└toolchain /usr/bin/cc ×2	-?	49.1 s	2 ms	256
└toolchain /usr/bin/cc ×32	-O0 -ffunction-sections -fdata-sections -fPIC -m64 -Wall -Wextra -mno-omit-leaf-frame-pointer -o /work/target/debug/build/ring-89b26f3c111c6d71/out/flag_check -c /work/target/debug/build/ring-89b26f3c111c6d71/out/flag_check.c	49.1 s	36 ms	0
└toolchain /usr/libexec/gcc/x86_64-linux-gnu/14/cc1	-quiet -imultiarch x86_64-linux-gnu /work/target/debug/build/ring-89b26f3c111c6d71/out/flag_check.c -quiet -dumpdir /work/target/debug/build/ring-89b26f3c111c6d71/out/ -dumpbase flag_check.c -dumpbase-ext .c -m64 -mno-omit-leaf-frame-pointer -mtune=generic -march=x86-64 -O0 -Wall -Wextra -ffunction-sections -fdata-sections -fPIC -fasynchronous-unwind-tables -o /tmp/cctP8VYH.s	49.1 s	24 ms	0
└toolchain /usr/bin/as	--64 -o /work/target/debug/build/ring-89b26f3c111c6d71/out/flag_check /tmp/cctP8VYH.s	49.1 s	6 ms	0
└toolchain /usr/bin/ar ×4	cqD /work/target/debug/build/ring-89b26f3c111c6d71/out/libring_core_0_17_14_.a /work/target/debug/build/ring-89b26f3c111c6d71/out/b9fed4bd5e786284-curve25519.o /work/target/debug/build/ring-89b26f3c111c6d71/out/2b18790154092d07-aes_nohw.o /work/target/debug/build/ring-89b26f3c111c6d71/out/20d6a080d7761227-montgomery.o /work/target/debug/build/ring-89b26f3c111c6d71/out/20d6a080d7761227-montgomery_inv.o /work/target/debug/build/ring-89b26f3c111c6d71/out/abdfa25550f18ac7-ecp_nistz.o /work/target/debug/build/ring-89b26f3c111c6d71/out/abdfa25550f18ac7-gfp_p256.o /work/target/debug/build/ring-89b26f3c111c6d71/out/abdfa25550f18ac7-gfp_p384.o /work/target/debug/build/ring-89b26f3c111c6d71/out/abdfa25550f18ac7-p256.o /work/target/debug/build/ring-89b26f3c111c6d71/out/9fa4cd275cb9daeb-limbs.o /work/target/debug/build/ring-89b26f3c111c6d71/out/8948ea8e62ee340e-mem.o /work/target/debug/build/ring-89b26f3c111c6d71/out/e288d65bf9bc9ef0-poly1305.o /work/target/debug/build/ring-89b26f3c111c6d71/out/8948ea8e62ee340e-crypt	50.9 s	17 ms	0
└build_script icu_properties_data		59.7 s	2 ms	0
└build_script crossbeam-utils		59.7 s	2 ms	0
└build_script rustix		1 min 2 s	34 ms	0
└rustc /usr/local/bin/rustc ×2	--crate-type=rlib --emit=metadata --target x86_64-unknown-linux-gnu -o /work/target/debug/build/rustix-8b19f1bf8cc92196/out/rustix_test_can_compile -	1 min 2 s	16 ms	0
└build_script icu_normalizer_data		1 min 2 s	1 ms	0
└build_script thiserror		1 min 5 s	27 ms	0
└rustc /usr/local/bin/rustc	--edition=2018 --crate-name=thiserror --crate-type=lib --cap-lints=allow --emit=dep-info,metadata --out-dir /work/target/debug/build/thiserror-2a2ace9117c7add0/out/probe build/probe.rs --target x86_64-unknown-linux-gnu	1 min 5 s	17 ms	256
└rustc /usr/local/bin/rustc	--version	1 min 5 s	6 ms	0
└build_script generic-array		1 min 6 s	10 ms	0
└rustc /usr/local/bin/rustc	--verbose --version	1 min 6 s	7 ms	0
└build_script prettyplease		1 min 17 s	2 ms	0
└build_script rustls		1 min 19 s	2 ms	0
└build_script getrandom		1 min 21 s	2 ms	0
└build_script crossbeam-epoch		1 min 21 s	2 ms	0
└build_script num-traits		1 min 21 s	47 ms	0
└rustc /usr/local/bin/rustc ×3	--version --verbose	1 min 21 s	8 ms	0
└build_script crossbeam-deque		1 min 28 s	2 ms	0
└build_script indexmap		1 min 29 s	41 ms	0
└rustc /usr/local/bin/rustc ×3	--version --verbose	1 min 29 s	7 ms	0
└build_script zstd-sys		1 min 30 s	7.9 s	0
└toolchain /usr/bin/cc	-E /work/target/debug/build/zstd-sys-8d1f39bd19ff6ca7/out/17670499543521362299detect_compiler_family.c	1 min 30 s	6 ms	0
└toolchain /usr/libexec/gcc/x86_64-linux-gnu/14/cc1	-E -quiet -imultiarch x86_64-linux-gnu /work/target/debug/build/zstd-sys-8d1f39bd19ff6ca7/out/17670499543521362299detect_compiler_family.c -mtune=generic -march=x86-64 -fasynchronous-unwind-tables -dumpbase 17670499543521362299detect_compiler_family.c -dumpbase-ext .c	1 min 30 s	5 ms	0
└toolchain /usr/bin/cc	-?	1 min 30 s	2 ms	256
└toolchain /usr/bin/cc ×41	-O0 -ffunction-sections -fdata-sections -fPIC -m64 -Wall -Wextra -mno-omit-leaf-frame-pointer -o /work/target/debug/build/zstd-sys-8d1f39bd19ff6ca7/out/flag_check -c /work/target/debug/build/zstd-sys-8d1f39bd19ff6ca7/out/flag_check.c	1 min 30 s	14 ms	0
└toolchain /usr/libexec/gcc/x86_64-linux-gnu/14/cc1	-quiet -imultiarch x86_64-linux-gnu /work/target/debug/build/zstd-sys-8d1f39bd19ff6ca7/out/flag_check.c -quiet -dumpdir /work/target/debug/build/zstd-sys-8d1f39bd19ff6ca7/out/ -dumpbase flag_check.c -dumpbase-ext .c -m64 -mno-omit-leaf-frame-pointer -mtune=generic -march=x86-64 -O0 -Wall -Wextra -ffunction-sections -fdata-sections -fPIC -fasynchronous-unwind-tables -o /tmp/cc3tz9I9.s	1 min 30 s	11 ms	0
└toolchain /usr/bin/as	--64 -o /work/target/debug/build/zstd-sys-8d1f39bd19ff6ca7/out/flag_check /tmp/cc3tz9I9.s	1 min 30 s	2 ms	0
└toolchain /usr/bin/ar ×2	cqD /work/target/debug/build/zstd-sys-8d1f39bd19ff6ca7/out/libzstd.a /work/target/debug/build/zstd-sys-8d1f39bd19ff6ca7/out/4f97f2375d6aa471-debug.o /work/target/debug/build/zstd-sys-8d1f39bd19ff6ca7/out/4f97f2375d6aa471-entropy_common.o /work/target/debug/build/zstd-sys-8d1f39bd19ff6ca7/out/4f97f2375d6aa471-error_private.o /work/target/debug/build/zstd-sys-8d1f39bd19ff6ca7/out/4f97f2375d6aa471-fse_decompress.o /work/target/debug/build/zstd-sys-8d1f39bd19ff6ca7/out/4f97f2375d6aa471-pool.o /work/target/debug/build/zstd-sys-8d1f39bd19ff6ca7/out/4f97f2375d6aa471-threading.o /work/target/debug/build/zstd-sys-8d1f39bd19ff6ca7/out/4f97f2375d6aa471-zstd_common.o /work/target/debug/build/zstd-sys-8d1f39bd19ff6ca7/out/7c9960efb53c0b35-fse_compress.o /work/target/debug/build/zstd-sys-8d1f39bd19ff6ca7/out/7c9960efb53c0b35-hist.o /work/target/debug/build/zstd-sys-8d1f39bd19ff6ca7/out/7c9960efb53c0b35-huf_compress.o /work/target/debug/build/zstd-sys-8d1f39bd19ff6ca7/out/7c9960efb53c0b35-zstd_compress.o /work/target/de	1 min 37 s	30 ms	0
└build_script io-uring		1 min 46 s	2 ms	0
└build_script thiserror		1 min 46 s	26 ms	0
└rustc /usr/local/bin/rustc	--edition=2018 --crate-name=thiserror --crate-type=lib --cap-lints=allow --emit=dep-info,metadata --out-dir /work/target/debug/build/thiserror-bf0fafdea055103f/out/probe build/probe.rs --target x86_64-unknown-linux-gnu	1 min 46 s	22 ms	256
└build_script rayon-core		1 min 51 s	2 ms	0
└build_script memoffset		1 min 51 s	27 ms	0
└rustc /usr/local/bin/rustc ×2	--version --verbose	1 min 51 s	8 ms	0
└build_script memoffset		1 min 51 s	27 ms	0
└rustc /usr/local/bin/rustc ×2	--version --verbose	1 min 51 s	8 ms	0
└build_script zstd-safe		2 min 1 s	3 ms	0
└build_script crc32fast		2 min 2 s	10 ms	0
└rustc /usr/local/bin/rustc	--version	2 min 2 s	7 ms	0
└build_script libkrun-sys		2 min 6 s	2 ms	0
└build_script e2fsprogs-sys		2 min 6 s	3 ms	0
└build_script bubblewrap-sys		2 min 6 s	2 ms	0
└build_script libsqlite3-sys		2 min 9 s	6.7 s	0
└toolchain /usr/bin/cc	-E /work/target/debug/build/libsqlite3-sys-515d61ed37c1e419/out/5808205376123949905detect_compiler_family.c	2 min 9 s	6 ms	0
└toolchain /usr/libexec/gcc/x86_64-linux-gnu/14/cc1	-E -quiet -imultiarch x86_64-linux-gnu /work/target/debug/build/libsqlite3-sys-515d61ed37c1e419/out/5808205376123949905detect_compiler_family.c -mtune=generic -march=x86-64 -fasynchronous-unwind-tables -dumpbase 5808205376123949905detect_compiler_family.c -dumpbase-ext .c	2 min 9 s	4 ms	0
└toolchain /usr/bin/cc	-?	2 min 9 s	2 ms	256
└toolchain /usr/bin/cc ×2	-O0 -ffunction-sections -fdata-sections -fPIC -m64 -Wall -Wextra -mno-omit-leaf-frame-pointer -o /work/target/debug/build/libsqlite3-sys-515d61ed37c1e419/out/flag_check -c /work/target/debug/build/libsqlite3-sys-515d61ed37c1e419/out/flag_check.c	2 min 9 s	14 ms	0
└toolchain /usr/libexec/gcc/x86_64-linux-gnu/14/cc1	-quiet -imultiarch x86_64-linux-gnu /work/target/debug/build/libsqlite3-sys-515d61ed37c1e419/out/flag_check.c -quiet -dumpdir /work/target/debug/build/libsqlite3-sys-515d61ed37c1e419/out/ -dumpbase flag_check.c -dumpbase-ext .c -m64 -mno-omit-leaf-frame-pointer -mtune=generic -march=x86-64 -O0 -Wall -Wextra -ffunction-sections -fdata-sections -fPIC -fasynchronous-unwind-tables -o /tmp/ccRKEYqK.s	2 min 9 s	11 ms	0
└toolchain /usr/bin/as	--64 -o /work/target/debug/build/libsqlite3-sys-515d61ed37c1e419/out/flag_check /tmp/ccRKEYqK.s	2 min 9 s	2 ms	0
└toolchain /usr/bin/ar ×2	cqD /work/target/debug/build/libsqlite3-sys-515d61ed37c1e419/out/libsqlite3.a /work/target/debug/build/libsqlite3-sys-515d61ed37c1e419/out/8017ddc1302f104c-sqlite3.o	2 min 15 s	22 ms	0
└build_script fuse-backend-rs		2 min 23 s	3 ms	0
└build_script signal-hook		2 min 27 s	1 ms	0
└build_script pathrs		2 min 28 s	2 ms	0
└build_script boxlite-shared		2 min 33 s	152 ms	0
└unknown		2 min 33 s	0 ms	32512
└other /usr/bin/protoc ×2	--version	2 min 33 s	15 ms	0
└build_script nix		2 min 34 s	1 ms	0
└build_script boxlite		2 min 49 s	128 ms	25856
└toolchain /usr/bin/cc	-E /work/target/debug/build/boxlite-05fb7bada3a52f00/out/1553250075858181496detect_compiler_family.c	2 min 49 s	6 ms	0
└toolchain /usr/libexec/gcc/x86_64-linux-gnu/14/cc1	-E -quiet -imultiarch x86_64-linux-gnu /work/target/debug/build/boxlite-05fb7bada3a52f00/out/1553250075858181496detect_compiler_family.c -mtune=generic -march=x86-64 -fasynchronous-unwind-tables -dumpbase 1553250075858181496detect_compiler_family.c -dumpbase-ext .c	2 min 49 s	5 ms	0
└toolchain /usr/bin/cc	-?	2 min 49 s	2 ms	256
└toolchain /usr/bin/cc ×2	-O0 -ffunction-sections -fdata-sections -fPIC -m64 -Wall -Wextra -mno-omit-leaf-frame-pointer -o /work/target/debug/build/boxlite-05fb7bada3a52f00/out/flag_check -c /work/target/debug/build/boxlite-05fb7bada3a52f00/out/flag_check.c	2 min 49 s	15 ms	0
└toolchain /usr/libexec/gcc/x86_64-linux-gnu/14/cc1	-quiet -imultiarch x86_64-linux-gnu /work/target/debug/build/boxlite-05fb7bada3a52f00/out/flag_check.c -quiet -dumpdir /work/target/debug/build/boxlite-05fb7bada3a52f00/out/ -dumpbase flag_check.c -dumpbase-ext .c -m64 -mno-omit-leaf-frame-pointer -mtune=generic -march=x86-64 -O0 -Wall -Wextra -ffunction-sections -fdata-sections -fPIC -fasynchronous-unwind-tables -o /tmp/ccrkI5Of.s	2 min 49 s	11 ms	0
└toolchain /usr/bin/as	--64 -o /work/target/debug/build/boxlite-05fb7bada3a52f00/out/flag_check /tmp/ccrkI5Of.s	2 min 49 s	2 ms	0
└toolchain /usr/bin/ar ×2	cqD /work/target/debug/build/boxlite-05fb7bada3a52f00/out/libkvm_smoke.a /work/target/debug/build/boxlite-05fb7bada3a52f00/out/e3b1d530bc9cf22b-kvm_smoke.o	2 min 49 s	2 ms	0
└other /usr/bin/curl	-fsSL -o /work/target/debug/build/boxlite-05fb7bada3a52f00/out/runtime/boxlite-runtime.tar.gz https://github.com/boxlite-ai/boxlite/releases/download/v0.10.8/boxlite-runtime-v0.10.8-linux-x64-gnu.tar.gz	2 min 49 s	56 ms	5632

Network 2

The VM has no internet. Every name it looks up resolves to 10.0.2.1, the fake internet, which accepts every connection and records what was sent. Below, it is shown by its port alone, such as :443. The name the build wanted is in the lookups, the HTTP host and the TLS SNI.

Looked up github.com

Destination	Protocol	What was sent	Bytes
:443	tls	SNI github.com, inside TLS: GET /boxlite-ai/boxlite/releases/download/v0.10.8/boxlite-runtime-v0.10.8-linux-x64-gnu.tar.gz, host github.com, agent curl/8.14.1	1.5 KiB

Sockets in the trace 3

When	Program	How	Address	Type
2 min 49 s	/usr/bin/curl	connect	unix:/var/run/nscd/socket	stream
2 min 49 s	/usr/bin/curl	connect	:53	datagram
2 min 49 s	/usr/bin/curl	connect	:443	stream

Files 0

Secrets opened

None.

Written outside the build directories

None.

Scratch disk 0

Files: 2964
Directories: 631
Size: 1.0 GiB
Compiled units: 436
Scan: stopped at a limit

Nothing outside the build areas.

Output

Standard error

   Compiling proc-macro2 v1.0.107
   Compiling unicode-ident v1.0.27
   Compiling quote v1.0.47
   Compiling libc v0.2.191
   Compiling syn v3.0.9
    Checking cfg-if v1.0.5
   Compiling syn v2.0.119
    Checking smallvec v1.16.3
    Checking memchr v2.8.3
    Checking pin-project-lite v0.2.17
   Compiling jobserver v0.1.35
   Compiling find-msvc-tools v0.1.15
   Compiling shlex v2.0.1
   Compiling cc v1.10.0
   Compiling parking_lot_core v0.9.12
   Compiling serde_core v1.0.229
    Checking errno v0.3.14
   Compiling autocfg v1.5.1
    Checking scopeguard v1.2.0
    Checking lock_api v0.4.14
    Checking signal-hook-registry v1.4.8
    Checking once_cell v1.21.4
    Checking itoa v1.0.18
    Checking futures-sink v0.3.34
    Checking parking_lot v0.12.5
   Compiling tokio-macros v2.7.2
    Checking mio v1.2.4
    Checking socket2 v0.6.5
    Checking tokio v1.54.1
   Compiling synstructure v0.14.0
    Checking slab v0.4.12
   Compiling serde v1.0.229
    Checking futures-channel v0.3.34
   Compiling serde_derive v1.0.229
    Checking log v0.4.34
   Compiling zerofrom-derive v0.1.8
    Checking futures-task v0.3.34
    Checking zerofrom v0.1.8
   Compiling yoke-derive v0.8.4
   Compiling futures-macro v0.3.34
    Checking futures-io v0.3.34
    Checking stable_deref_trait v1.2.1
    Checking yoke v0.8.4
    Checking futures-util v0.3.34
    Checking getrandom v0.2.17
   Compiling pkg-config v0.3.34
   Compiling getrandom v0.4.3
   Compiling zmij v1.0.23
    Checking http v1.5.0
    Checking tracing-core v0.1.36
   Compiling zerovec-derive v0.11.7
    Checking zerovec v0.11.9
   Compiling tracing-attributes v0.1.31
   Compiling displaydoc v0.2.7
    Checking bitflags v2.13.2
    Checking zeroize v1.9.1
    Checking typenum v1.20.1
   Compiling serde_json v1.0.154
   Compiling anyhow v1.0.104
    Checking tracing v0.1.44
    Checking http-body v1.1.0
    Checking tower-service v0.3.3
    Checking percent-encoding v2.3.2
   Compiling zerocopy v0.8.63
   Compiling heck v0.5.0
   Compiling either v1.19.0
   Compiling rustix v1.1.5
   Compiling itertools v0.14.0
    Checking tinystr v0.8.5
    Checking tokio-util v0.7.20
   Compiling ring v0.17.14
    Checking aho-corasick v1.1.5
   Compiling num_cpus v1.17.0
   Compiling httparse v1.10.1
   Compiling rustversion v1.0.23
    Checking writeable v0.6.4
   Compiling linux-raw-sys v0.12.1
    Checking litemap v0.8.3
    Checking regex-syntax v0.8.11
    Checking equivalent v1.0.3
    Checking hashbrown v0.17.1
   Compiling version_check v0.9.5
   Compiling generic-array v0.14.7
    Checking indexmap v2.14.2
    Checking regex-automata v0.4.18
    Checking icu_locale_core v2.4.0
   Compiling prost-derive v0.13.5
    Checking ppv-lite86 v0.2.21
    Checking rustls-pki-types v1.15.1
    Checking zerotrie v0.2.5
    Checking potential_utf v0.1.6
    Checking tower-layer v0.3.3
    Checking atomic-waker v1.1.2
    Checking try-lock v0.2.5
   Compiling fastrand v2.5.0
    Checking utf8_iter v1.0.4
   Compiling thiserror v2.0.21
   Compiling fnv v1.0.7
    Checking subtle v2.6.1
   Compiling strsim v0.11.1
   Compiling icu_normalizer_data v2.4.0
   Compiling crossbeam-utils v0.8.23
   Compiling icu_properties_data v2.4.0
   Compiling ident_case v1.0.1
   Compiling darling_core v0.20.11
    Checking h2 v0.4.20
   Compiling tempfile v3.27.0
    Checking icu_collections v2.4.0
    Checking want v0.3.2
    Checking icu_provider v2.4.0
    Checking sync_wrapper v1.0.2
   Compiling thiserror-impl v2.0.21
    Checking httpdate v1.0.3
    Checking untrusted v0.9.0
    Checking hyper v1.12.0
   Compiling regex v1.13.1
   Compiling darling_macro v0.20.11
    Checking bitflags v1.3.2
   Compiling bytes v1.12.1
    Checking base64 v0.23.1
   Compiling prettyplease v0.2.37
    Checking ipnet v2.12.2
   Compiling hybrid-array v0.4.15
    Checking hyper-util v0.1.21
   Compiling prost v0.13.5
   Compiling darling v0.20.11
    Checking icu_properties v2.4.0
    Checking icu_normalizer v2.4.0
    Checking tower v0.5.3
    Checking http-body-util v0.1.5
    Checking rand_core v0.6.4
   Compiling num-traits v0.2.19
   Compiling crossbeam-epoch v0.9.21
   Compiling getrandom v0.3.4
   Compiling fixedbitset v0.5.7
    Checking base64 v0.22.1
   Compiling rustls v0.23.46
   Compiling petgraph v0.7.1
    Checking rand_chacha v0.3.1
    Checking idna_adapter v1.2.2
   Compiling derive_builder_core v0.20.2
   Compiling prost-types v0.13.5
    Checking block-buffer v0.10.4
    Checking crypto-common v0.1.7
    Checking rustls-webpki v0.103.16
    Checking form_urlencoded v1.2.2
   Compiling zstd-sys v2.1.2+zstd.1.5.7
   Compiling indexmap v1.9.3
   Compiling async-trait v0.1.92
   Compiling multimap v0.10.1
   Compiling unicode-xid v0.2.6
   Compiling crossbeam-deque v0.8.8
    Checking konst_macro_rules v0.2.19
    Checking lazy_static v1.5.1
   Compiling virtue v0.0.18
    Checking utf8parse v0.2.2
    Checking anstyle-parse v1.0.0
   Compiling bincode_derive v2.0.1
    Checking konst v0.2.20
   Compiling prost-build v0.13.5
   Compiling const_format_proc_macros v0.2.34
    Checking digest v0.10.7
   Compiling derive_builder_macro v0.20.2
    Checking idna v1.1.0
    Checking rand v0.8.8
   Compiling block-buffer v0.12.1
   Compiling crypto-common v0.2.2
   Compiling memoffset v0.6.5
   Compiling memoffset v0.7.1
   Compiling pin-project-internal v1.1.13
    Checking anstyle v1.0.14
   Compiling const-oid v0.10.2
    Checking powerfmt v0.2.1
   Compiling vcpkg v0.2.15
   Compiling rayon-core v1.13.0
    Checking anstyle-query v1.1.5
    Checking is_terminal_polyfill v1.70.2
    Checking time-core v0.1.9
    Checking num-conv v0.2.2
    Checking deranged v0.5.9
    Checking base64ct v1.8.3
    Checking mime v0.3.17
    Checking hashbrown v0.12.3
   Compiling thiserror v1.0.69
   Compiling io-uring v0.5.13
    Checking colorchoice v1.0.5
    Checking anstream v1.0.0
    Checking axum-core v0.4.5
    Checking pem-rfc7468 v0.7.0
    Checking time v0.3.55
   Compiling libsqlite3-sys v0.37.0
   Compiling digest v0.11.3
    Checking pin-project v1.1.13
    Checking rand_core v0.9.5
    Checking url v2.5.8
    Checking derive_builder v0.20.2
    Checking tokio-rustls v0.26.6
    Checking const_format v0.2.36
   Compiling tonic-build v0.12.3
    Checking webpki-roots v1.0.11
   Compiling bubblewrap-sys v0.10.8
   Compiling e2fsprogs-sys v0.10.8
   Compiling libkrun-sys v0.10.8
   Compiling strum_macros v0.27.2
    Checking futures-executor v0.3.34
   Compiling async-stream-impl v0.3.6
   Compiling der_derive v0.7.3
   Compiling thiserror-impl v1.0.69
   Compiling getset v0.1.7
    Checking matchit v0.7.3
    Checking ryu v1.0.23
    Checking clap_lex v1.1.1
    Checking strum v0.27.2
   Compiling unty v0.0.4
   Compiling crc32fast v1.5.3
   Compiling cfg_aliases v0.2.2
    Checking const-oid v0.9.6
   Compiling zstd-safe v7.3.0
   Compiling cpufeatures v0.3.1
    Checking tinyvec v1.13.3
    Checking foldhash v0.2.0
    Checking flagset v0.4.7
    Checking cpufeatures v0.2.17
    Checking sha2 v0.10.9
    Checking der v0.7.10
    Checking hashbrown v0.16.1
    Checking unicode-normalization v0.1.26
   Compiling sha2 v0.11.1
   Compiling nix v0.30.1
    Checking clap_builder v4.6.7
   Compiling bincode v2.0.1
    Checking serde_urlencoded v0.7.1
    Checking axum v0.7.9
    Checking async-stream v0.3.6
    Checking futures v0.3.34
    Checking hyper-rustls v0.27.10
   Compiling seccompiler v0.4.0
   Compiling boxlite-shared v0.10.8
    Checking tower-http v0.6.11
    Checking rand_chacha v0.9.0
    Checking tower v0.4.13
    Checking hmac v0.12.1
    Checking sharded-slab v0.1.7
    Checking hyper-timeout v0.5.2
    Checking xattr v1.6.1
   Compiling pathrs v0.2.6
    Checking matchers v0.2.0
   Compiling clap_derive v4.6.7
    Checking tracing-log v0.2.0
    Checking tokio-stream v0.1.19
    Checking nibble_vec v0.1.0
   Compiling enumflags2_derive v0.7.12
    Checking filetime v0.2.29
    Checking thread_local v1.1.10
    Checking socket2 v0.4.10
    Checking socket2 v0.5.10
    Checking atty v0.2.14
   Compiling signal-hook v0.3.18
    Checking adler v1.0.2
    Checking termcolor v1.4.1
    Checking endian-type v0.1.2
    Checking scoped-tls v1.0.1
    Checking adler2 v2.0.1
    Checking simd-adler32 v0.3.10
    Checking pin-utils v0.1.1
    Checking base64 v0.13.1
    Checking option-ext v0.2.0
    Checking iana-time-zone v0.1.65
   Compiling fuse-backend-rs v0.12.1
   Compiling hex v0.4.3
    Checking humantime v2.4.0
    Checking nu-ansi-term v0.50.3
    Checking tracing-subscriber v0.3.23
    Checking env_logger v0.9.3
   Compiling boxlite v0.10.8
    Checking chrono v0.4.45
    Checking dirs-sys v0.4.1
    Checking jwt v0.16.0
    Checking nix v0.26.4
    Checking miniz_oxide v0.9.1
    Checking tokio-uring v0.4.0
    Checking radix_trie v0.2.1
    Checking miniz_oxide v0.7.4
    Checking tonic v0.12.3
    Checking tar v0.4.46
    Checking enumflags2 v0.7.12
    Checking clap v4.6.7
    Checking nix v0.24.3
    Checking rand v0.9.5
    Checking rayon v1.12.0
    Checking reqwest v0.12.28
    Checking vm-memory v0.14.1
    Checking olpc-cjson v0.1.4
    Checking hashlink v0.11.1
    Checking spki v0.7.3
    Checking oci-spec v0.8.4
    Checking yasna v0.5.2
    Checking itertools v0.15.0
    Checking clap-num v1.2.0
    Checking pem v3.0.6
    Checking vmm-sys-util v0.12.1
    Checking crossbeam-channel v0.5.17
    Checking arc-swap v1.9.3
    Checking bincode v1.3.3
    Checking futures-locks v0.7.1
    Checking mio v0.8.11
    Checking http-auth v0.1.10
   Compiling async-recursion v1.2.0
    Checking caps v0.5.6
    Checking fallible-streaming-iterator v0.1.9
    Checking byteorder v1.5.0
    Checking same-file v1.0.6
    Checking symlink v0.1.0
    Checking static_assertions v1.1.0
    Checking openssl-probe v0.2.1
    Checking unicase v2.10.0
    Checking fallible-iterator v0.3.0
    Checking rusqlite v0.39.0
    Checking oci-client v0.15.0
    Checking rustls-native-certs v0.8.5
    Checking tracing-appender v0.2.5
    Checking walkdir v2.5.0
    Checking qcow2-rs v0.1.6
    Checking rcgen v0.13.2
    Checking x509-cert v0.2.5
    Checking flate2 v1.1.10
    Checking sysinfo v0.30.13
    Checking ulid v1.2.1
    Checking zstd v0.13.3
    Checking landlock v0.4.7
    Checking dirs v5.0.1
warning: boxlite@0.10.8: Compiling seccomp filter: resources/seccomp/x86_64-unknown-linux-gnu.json -> /work/target/debug/build/boxlite-05fb7bada3a52f00/out/seccomp_filter.bpf
warning: boxlite@0.10.8: Successfully compiled seccomp filter (9386 bytes)
warning: boxlite@0.10.8: BOXLITE_DEPS_STUB=2: downloading prebuilt runtime
warning: boxlite@0.10.8: Downloading https://github.com/boxlite-ai/boxlite/releases/download/v0.10.8/boxlite-runtime-v0.10.8-linux-x64-gnu.tar.gz...
warning: boxlite@0.10.8: Failed to download prebuilt runtime from https://github.com/boxlite-ai/boxlite/releases/download/v0.10.8/boxlite-runtime-v0.10.8-linux-x64-gnu.tar.gz: curl failed: curl: (22) The requested URL returned error: 404
warning: boxlite@0.10.8: Native libraries will not be available.
error: failed to run custom build command for `boxlite v0.10.8`

Caused by:
  process didn't exit successfully: `/work/target/debug/build/boxlite-c468fa69aa6648d9/build-script-build` (exit status: 101)
  --- stdout
  cargo:rerun-if-changed=build.rs
  cargo:rerun-if-changed=src/default_runtime_dir.rs
  cargo:rerun-if-env-changed=BOXLITE_DEPS_STUB
  cargo:rerun-if-env-changed=BOXLITE_EMBED_RUNTIME
  cargo:rerun-if-env-changed=CARGO_TARGET_DIR
  cargo:rerun-if-changed=src/kvm_smoke.c
  cargo:rerun-if-env-changed=CC_FORCE_DISABLE
  CC_FORCE_DISABLE = None
  cargo:rerun-if-env-changed=CC_x86_64-unknown-linux-gnu
  CC_x86_64-unknown-linux-gnu = None
  cargo:rerun-if-env-changed=CC_x86_64_unknown_linux_gnu
  CC_x86_64_unknown_linux_gnu = None
  cargo:rerun-if-env-changed=HOST_CC
  HOST_CC = None
  cargo:rerun-if-env-changed=CC
  CC = None
  cargo:rerun-if-env-changed=CC_ENABLE_DEBUG_OUTPUT
  cargo:rerun-if-env-changed=CPATH
  cargo:rerun-if-env-changed=C_INCLUDE_PATH
  cargo:rerun-if-env-changed=CPLUS_INCLUDE_PATH
  cargo:rerun-if-env-changed=OBJC_INCLUDE_PATH
  cargo:rerun-if-env-changed=OBJCPLUS_INCLUDE_PATH
  cargo:rerun-if-env-changed=COMPILER_PATH
  cargo:rerun-if-env-changed=SOURCE_DATE_EPOCH
  cargo:rerun-if-env-changed=GCC_EXEC_PREFIX
  cargo:rerun-if-env-changed=CRATE_CC_NO_DEFAULTS
  CRATE_CC_NO_DEFAULTS = None
  CRATE_CC_NO_DEFAULTS = None
  cargo:rerun-if-env-changed=CFLAGS
  CFLAGS = None
  cargo:rerun-if-env-changed=HOST_CFLAGS
  HOST_CFLAGS = None
  cargo:rerun-if-env-changed=CFLAGS_x86_64_unknown_linux_gnu
  CFLAGS_x86_64_unknown_linux_gnu = None
  cargo:rerun-if-env-changed=CFLAGS_x86_64-unknown-linux-gnu
  CFLAGS_x86_64-unknown-linux-gnu = None
  CFLAGS = None
  HOST_CFLAGS = None
  CFLAGS_x86_64_unknown_linux_gnu = None
  CFLAGS_x86_64-unknown-linux-gnu = None
  CC_FORCE_DISABLE = None
  cargo:rerun-if-env-changed=AR_x86_64-unknown-linux-gnu
  AR_x86_64-unknown-linux-gnu = None
  cargo:rerun-if-env-changed=AR_x86_64_unknown_linux_gnu
  AR_x86_64_unknown_linux_gnu = None
  cargo:rerun-if-env-changed=HOST_AR
  HOST_AR = None
  cargo:rerun-if-env-changed=AR
  AR = None
  cargo:rerun-if-env-changed=ARFLAGS
  ARFLAGS = None
  cargo:rerun-if-env-changed=HOST_ARFLAGS
  HOST_ARFLAGS = None
  cargo:rerun-if-env-changed=ARFLAGS_x86_64_unknown_linux_gnu
  ARFLAGS_x86_64_unknown_linux_gnu = None
  cargo:rerun-if-env-changed=ARFLAGS_x86_64-unknown-linux-gnu
  ARFLAGS_x86_64-unknown-linux-gnu = None
  AR_x86_64-unknown-linux-gnu = None
  AR_x86_64_unknown_linux_gnu = None
  HOST_AR = None
  AR = None
  ARFLAGS = None
  HOST_ARFLAGS = None
  ARFLAGS_x86_64_unknown_linux_gnu = None
  ARFLAGS_x86_64-unknown-linux-gnu = None
  AR_x86_64-unknown-linux-gnu = None
  AR_x86_64_unknown_linux_gnu = None
  HOST_AR = None
  AR = None
  ARFLAGS = None
  HOST_ARFLAGS = None
  ARFLAGS_x86_64_unknown_linux_gnu = None
  ARFLAGS_x86_64-unknown-linux-gnu = None
  cargo:rustc-link-lib=static=kvm_smoke
  cargo:rustc-link-search=native=/work/target/debug/build/boxlite-05fb7bada3a52f00/out
  cargo:warning=Compiling seccomp filter: resources/seccomp/x86_64-unknown-linux-gnu.json -> /work/target/debug/build/boxlite-05fb7bada3a52f00/out/seccomp_filter.bpf
  cargo:warning=Successfully compiled seccomp filter (9386 bytes)
  cargo:rerun-if-changed=resources/seccomp/x86_64-unknown-linux-gnu.json
  cargo:rerun-if-changed=resources/seccomp/
  cargo:warning=BOXLITE_DEPS_STUB=2: downloading prebuilt runtime
  cargo:rerun-if-env-changed=BOXLITE_RUNTIME_URL
  cargo:warning=Downloading https://github.com/boxlite-ai/boxlite/releases/download/v0.10.8/boxlite-runtime-v0.10.8-linux-x64-gnu.tar.gz...
  cargo:warning=Failed to download prebuilt runtime from https://github.com/boxlite-ai/boxlite/releases/download/v0.10.8/boxlite-runtime-v0.10.8-linux-x64-gnu.tar.gz: curl failed: curl: (22) The requested URL returned error: 404

  cargo:warning=Native libraries will not be available.

  --- stderr

  thread 'main' (4185) panicked at /cw/vendor/boxlite-0.10.8/build.rs:1214:17:
  Failed to prepare complete prebuilt BoxLite runtime in /work/target/debug/build/boxlite-05fb7bada3a52f00/out/runtime
  note: run with `RUST_BACKTRACE=1` environment variable to display a backtrace

Timeline

When	From	To	Event	Worker
2026-10-23 15:34 UTC	Discovered	Fetched	fetched	fetcher-12688
2026-10-23 15:34 UTC	Fetched	ReadyForSandbox	static_analysis_completed	static-12726
2026-10-23 15:36 UTC	ReadyForSandbox	Running	sandbox_started	orchestrator-12760-slot0
2026-10-23 15:39 UTC	Running	DynamicallyAnalyzed	sandbox_completed	orchestrator-12760-slot0
2026-10-23 15:39 UTC	DynamicallyAnalyzed	Scored	scored	analyzer-12816
2026-10-23 15:39 UTC	Scored	Done	finalized	analyzer-12816