sar/Message.h
-- Installing: /home/build/melange-out/libpulsar/usr/include/pulsar/Logger.h
-- Installing: /home/build/melange-out/libpulsar/usr/include/pulsar/KeyValue.h
-- Installing: /home/build/melange-out/libpulsar/usr/include/pulsar/KeySharedPolicy.h
-- Installing: /home/build/melange-out/libpulsar/usr/include/pulsar/InitialPosition.h
-- Installing: /home/build/melange-out/libpulsar/usr/include/pulsar/FileLoggerFactory.h
-- Installing: /home/build/melange-out/libpulsar/usr/include/pulsar/EncryptionKeyInfo.h
-- Installing: /home/build/melange-out/libpulsar/usr/include/pulsar/EncryptionContext.h
-- Installing: /home/build/melange-out/libpulsar/usr/include/pulsar/DeprecatedException.h
-- Installing: /home/build/melange-out/libpulsar/usr/include/pulsar/DeadLetterPolicyBuilder.h
-- Installing: /home/build/melange-out/libpulsar/usr/include/pulsar/DeadLetterPolicy.h
-- Installing: /home/build/melange-out/libpulsar/usr/include/pulsar/CryptoKeyReader.h
-- Installing: /home/build/melange-out/libpulsar/usr/include/pulsar/ConsumerType.h
-- Installing: /home/build/melange-out/libpulsar/usr/include/pulsar/ConsumerInterceptor.h
-- Installing: /home/build/melange-out/libpulsar/usr/include/pulsar/ConsumerEventListener.h
-- Installing: /home/build/melange-out/libpulsar/usr/include/pulsar/ConsumerCryptoFailureAction.h
-- Installing: /home/build/melange-out/libpulsar/usr/include/pulsar/ConsumerConfiguration.h
-- Installing: /home/build/melange-out/libpulsar/usr/include/pulsar/Consumer.h
-- Installing: /home/build/melange-out/libpulsar/usr/include/pulsar/ConsoleLoggerFactory.h
-- Installing: /home/build/melange-out/libpulsar/usr/include/pulsar/CompressionType.h
-- Installing: /home/build/melange-out/libpulsar/usr/include/pulsar/ClientConfiguration.h
-- Installing: /home/build/melange-out/libpulsar/usr/include/pulsar/Client.h
-- Installing: /home/build/melange-out/libpulsar/usr/include/pulsar/BrokerConsumerStats.h
-- Installing: /home/build/melange-out/libpulsar/usr/include/pulsar/BatchReceivePolicy.h
-- Installing: /home/build/melange-out/libpulsar/usr/include/pulsar/Authentication.h
-- Installing: /home/build/melange-out/libpulsar/usr/include/pulsar/Version.h
running step "strip"
running pipeline for subpackage libpulsar-dev
running step "split/dev"
retrieving workspace from builder: 
fetching remote workspace
retrieved and wrote post-build workspace to: /tmp/melange-workspace-1604652621
running package linters for libpulsar
linting apk: libpulsar
no lint findings to persist for package libpulsar
running package linters for libpulsar-dev
linting apk: libpulsar-dev
no lint findings to persist for package libpulsar-dev
checking license information
  LICENSE: Apache-2.0 (1.000000) (notice)
  LICENSE: BSD-2-Clause (0.994536) (notice)
  LICENSE: Zlib (0.977099) (notice)
  pkg/licenses/LICENSE.txt: Apache-2.0 (1.000000) (notice)
  pkg/licenses/LICENSE-boost.txt: BSL-1.0 (1.000000) (notice)
  pkg/licenses/LICENSE-jsoncpp.txt: MIT (1.000000) (notice)
  pkg/licenses/LICENSE-libcurl.txt: cURL (1.000000) (unknown)
  pkg/licenses/LICENSE-protobuf.txt: BSD-3-Clause (0.981221) (notice)
  pkg/licenses/LICENSE-zlib.txt: Zlib (0.984733) (notice)
checking gathered license information against the configuration
detected license differences:
  LICENSE: BSD-2-Clause not found
  LICENSE: Zlib not found
  pkg/licenses/LICENSE-boost.txt: BSL-1.0 not found
  pkg/licenses/LICENSE-jsoncpp.txt: MIT not found
  pkg/licenses/LICENSE-libcurl.txt: cURL not found
  NOTE! pkg/licenses/LICENSE-libcurl.txt: cURL might be a restrictive license, please proceed with caution
  pkg/licenses/LICENSE-protobuf.txt: BSD-3-Clause not found
  pkg/licenses/LICENSE-zlib.txt: Zlib not found
detected license differences, please check the configuration
license information check complete
generating enhanced Syft SBOMs merged with melange metadata
invalid license: NOASSERTION
invalid license: NOASSERTION
created base melange SBOMs with build metadata
scanning package directory with Syft to enhance SBOM
generating SBOM from unpacked directory
finished Syft SBOM generation
successfully merged Syft scan results with melange SBOM
scanning package directory with Syft to enhance SBOM
generating SBOM from unpacked directory
finished Syft SBOM generation
successfully merged Syft scan results with melange SBOM
enhanced all SBOMs with Syft scan results
generating package libpulsar-4.0.0-r0
scanning for ld.so.conf.d files...
scanning for shared object dependencies...
2025/12/17 21:55:18 INFO completed enhanced Syft SBOM generation with merged metadata
  found lib libcurl.so.4 for usr/lib/libpulsar.so
  found lib libssl.so.3 for usr/lib/libpulsar.so
  found lib libcrypto.so.3 for usr/lib/libpulsar.so
  found lib libz.so.1 for usr/lib/libpulsar.so
  found lib libprotobuf.so.33.2.0 for usr/lib/libpulsar.so
  found lib libstdc++.so.6 for usr/lib/libpulsar.so
  found lib libgcc_s.so.1 for usr/lib/libpulsar.so
  found lib libc.so.6 for usr/lib/libpulsar.so
  found lib ld-linux-x86-64.so.2 for usr/lib/libpulsar.so
scanning for commands...
scanning for -doc package...
scanning for pkg-config data...
scanning for python modules...
scanning for ruby gems...
scanning for shbang deps...
scanning for kernel dependencies...
  runtime:
    so:ld-linux-x86-64.so.2
    so:libc.so.6
    so:libcrypto.so.3
    so:libcurl.so.4
    so:libgcc_s.so.1
    so:libprotobuf.so.33.2.0
    so:libssl.so.3
    so:libstdc++.so.6
    so:libz.so.1
  provides:
    so-ver:libpulsar.so=4.0.0-r0
    so:libpulsar.so=0
  installed-size: 5580633
  data.tar.gz digest: 597e55718c7b3577f6bf52630fc5a19a8d861aef3c58476d1b1a54083a382bb2
wrote packages/x86_64/libpulsar-4.0.0-r0.apk
generating package libpulsar-dev-4.0.0-r0
scanning for ld.so.conf.d files...
scanning for shared object dependencies...
scanning for commands...
scanning for -doc package...
scanning for pkg-config data...
scanning for python modules...
scanning for ruby gems...
scanning for shbang deps...
scanning for kernel dependencies...
  runtime:
    libpulsar==4.0.0-r0
  installed-size: 16029312
  data.tar.gz digest: dcdab71105997a2f71ad28547b410f23311caf03715e15ac290c6d529a307ca1
wrote packages/x86_64/libpulsar-dev-4.0.0-r0.apk
cleaning Workspace by removing 43 file/directories in /home/build
generating apk index from packages in packages/x86_64
processing package packages/x86_64/libpulsar-dev-4.0.0-r0.apk
processing package packages/x86_64/libpulsar-4.0.0-r0.apk
updating index at packages/x86_64/APKINDEX.tar.gz with new packages: [libpulsar-4.0.0-r0 libpulsar-dev-4.0.0-r0]
qemu: sending shutdown signal
build completed successfully
running malcontent scan...
found 2 APK files to scan
scanning packages/x86_64/libpulsar-4.0.0-r0.apk -> packages/libpulsar-4.0.0-r0/mal-scan.json
running command mal [--format=json --exit-extraction=false --min-risk=critical --min-file-risk=critical --quantity-increases-risk=true --output=packages/libpulsar-4.0.0-r0/mal-scan.json scan packages/x86_64/libpulsar-4.0.0-r0.apk]
command "mal" completed successfully
scanning packages/x86_64/libpulsar-dev-4.0.0-r0.apk -> packages/libpulsar-dev-4.0.0-r0/mal-scan.json
running command mal [--format=json --exit-extraction=false --min-risk=critical --min-file-risk=critical --quantity-increases-risk=true --output=packages/libpulsar-dev-4.0.0-r0/mal-scan.json scan packages/x86_64/libpulsar-dev-4.0.0-r0.apk]
command "mal" completed successfully
malcontent scan completed successfully for 2 APKs in 9s
creating packages tarball...
running command tar [-C packages -cf packages.tar .]
command "tar" completed successfully
packages.tar sha256sum: 9e97e5cb4394c3954159308f826fed40f5a0cc0802f74dd44f8777a62a5915c3
sha256sum "9e97e5cb4394c3954159308f826fed40f5a0cc0802f74dd44f8777a62a5915c3" written to /dev/termination-log
Built 2 packages, hash: 9e97e5cb4394c3954159308f826fed40f5a0cc0802f74dd44f8777a62a5915c3, size: 5458432 bytes
uploading final packages tarball...
running command curl [-s --upload-file packages.tar -H Content-Type: application/octet-stream https://storage.googleapis.com/prod-bundle-staging/wolfi/x86_64/1766008460897672541-libpulsar-4.0.0-r0.tar.gz?Expires=1766051660&GoogleAccessId=ebuild-zasv64d5x1oc4m3epw39yod%40prod-enforce-fabc.iam.gserviceaccount.com&Signature=nso9DV7GS3NpefHkNqzNVq4S3e9dEF94%2Fs4ShOFtfPRBTuXWeelt3Ng2eX2F7oIzyubb%2FqV88%2F2FMnJPZ6BFB8oqrNeJUdZfRQSsBxayNxwKjXMpBGYd0E8WdTousY6dYMUzsWeaYuwVjLURYPrQFFjdijX3fEnjcvFLqbuuoGaQLthaS72gybZhHL%2B4yz6tpF8JATYbhW6ysKV57suJZZcftZo82MPFRR%2FEngI%2F2522mezd9sjvUNFeMP7E%2BMRDtbq60AvvFHTrNXpj99BlhEHaUTSwFsXpCjOMRGQDU5j%2F9qMNPTbl30V0aQzCKQt5WVvujQSJmT3DDcyvzIuuBg%3D%3D]
command "curl" completed successfully
upload completed successfully
parsed env
using enhanced syft sbom melange runner
configuring puller identity "720909c9f5279097d847ad02a2f24ba8f59de36a/a49c7fedc33adf69"...
running command chainctl [auth login --audience apk.cgr.dev --identity 720909c9f5279097d847ad02a2f24ba8f59de36a/a49c7fedc33adf69]
Successfully exchanged token.
Valid! Id: 720909c9f5279097d847ad02a2f24ba8f59de36a/a49c7fedc33adf69
Updates are available for chainctl (current version: 0.2.185; latest: 0.2.186). To install, please run:
    $ chainctl update
command "chainctl" completed successfully
puller identity configured successfully
puller identity configured successfully
running tests...
running command /usr/bin/dind [dockerd] in background
command "/usr/bin/dind" started successfully
running command bash [-c 
  # Retry up to 60 seconds to wait for docker to start.
  worked=false
  for i in $(seq 60); do
    if docker info >/dev/null 2>&1; then
	  worked=true
	  break
    fi
    echo "docker healthcheck failed, docker is not ready, retrying... ($i/60 seconds so far)..."
    sleep 1
  done

  if [ "$worked" = "false" ]; then
    echo "Failed to start docker after 60 seconds"
    exit 1
  fi
]
command "bash" completed successfully
melange devel with runner qemu is testing:
image configuration:
  contents:
    build repositories: []
    runtime repositories: []
    repositories: []
    keyring:      []
    packages:     [ldd-check libpulsar py3.10-pulsar-client py3.13-pulsar-client wolfi-base]
  accounts:
    runas:  
    users:
      - uid=1000(build) gid=1000
    groups:
      - gid=1000(build) members=[build]

d and wrote post-build workspace to: /tmp/melange-workspace-4175708352
running package linters for libpulsar
linting apk: libpulsar
no lint findings to persist for package libpulsar
running package linters for libpulsar-dev
linting apk: libpulsar-dev
no lint findings to persist for package libpulsar-dev
checking license information
  LICENSE: Apache-2.0 (1.000000) (notice)
  LICENSE: BSD-2-Clause (0.994536) (notice)
  LICENSE: Zlib (0.977099) (notice)
  pkg/licenses/LICENSE.txt: Apache-2.0 (1.000000) (notice)
  pkg/licenses/LICENSE-boost.txt: BSL-1.0 (1.000000) (notice)
  pkg/licenses/LICENSE-jsoncpp.txt: MIT (1.000000) (notice)
  pkg/licenses/LICENSE-libcurl.txt: cURL (1.000000) (unknown)
  pkg/licenses/LICENSE-protobuf.txt: BSD-3-Clause (0.981221) (notice)
  pkg/licenses/LICENSE-zlib.txt: Zlib (0.984733) (notice)
checking gathered license information against the configuration
detected license differences:
  LICENSE: BSD-2-Clause not found
  LICENSE: Zlib not found
  pkg/licenses/LICENSE-boost.txt: BSL-1.0 not found
  pkg/licenses/LICENSE-jsoncpp.txt: MIT not found
  pkg/licenses/LICENSE-libcurl.txt: cURL not found
  NOTE! pkg/licenses/LICENSE-libcurl.txt: cURL might be a restrictive license, please proceed with caution
  pkg/licenses/LICENSE-protobuf.txt: BSD-3-Clause not found
  pkg/licenses/LICENSE-zlib.txt: Zlib not found
detected license differences, please check the configuration
license information check complete
generating enhanced Syft SBOMs merged with melange metadata
invalid license: NOASSERTION
invalid license: NOASSERTION
created base melange SBOMs with build metadata
scanning package directory with Syft to enhance SBOM
generating SBOM from unpacked directory
finished Syft SBOM generation
successfully merged Syft scan results with melange SBOM
scanning package directory with Syft to enhance SBOM
generating SBOM from unpacked directory
finished Syft SBOM generation
successfully merged Syft scan results with melange SBOM
enhanced all SBOMs with Syft scan results
generating package libpulsar-4.0.0-r0
2025/12/17 21:54:52 INFO completed enhanced Syft SBOM generation with merged metadata
scanning for ld.so.conf.d files...
scanning for shared object dependencies...
  found lib libcurl.so.4 for usr/lib/libpulsar.so
  found lib libssl.so.3 for usr/lib/libpulsar.so
  found lib libcrypto.so.3 for usr/lib/libpulsar.so
  found lib libz.so.1 for usr/lib/libpulsar.so
  found lib libprotobuf.so.33.2.0 for usr/lib/libpulsar.so
  found lib libstdc++.so.6 for usr/lib/libpulsar.so
  found lib libgcc_s.so.1 for usr/lib/libpulsar.so
  found lib libc.so.6 for usr/lib/libpulsar.so
  found lib ld-linux-aarch64.so.1 for usr/lib/libpulsar.so
scanning for commands...
scanning for -doc package...
scanning for pkg-config data...
scanning for python modules...
scanning for ruby gems...
scanning for shbang deps...
scanning for kernel dependencies...
  runtime:
    so:ld-linux-aarch64.so.1
    so:libc.so.6
    so:libcrypto.so.3
    so:libcurl.so.4
    so:libgcc_s.so.1
    so:libprotobuf.so.33.2.0
    so:libssl.so.3
    so:libstdc++.so.6
    so:libz.so.1
  provides:
    so-ver:libpulsar.so=4.0.0-r0
    so:libpulsar.so=0
  installed-size: 5359155
  data.tar.gz digest: 3379e89de71c3b4c784af861991ee74a98747c1bcd4054f51e822dd82d81d905
wrote packages/aarch64/libpulsar-4.0.0-r0.apk
generating package libpulsar-dev-4.0.0-r0
scanning for ld.so.conf.d files...
scanning for shared object dependencies...
scanning for commands...
scanning for -doc package...
scanning for pkg-config data...
scanning for python modules...
scanning for ruby gems...
scanning for shbang deps...
scanning for kernel dependencies...
  runtime:
    libpulsar==4.0.0-r0
  installed-size: 16981982
  data.tar.gz digest: feced16f50dc371ac170b12deabc192c53b305e06df36fcf27135959e3b6d25c
wrote packages/aarch64/libpulsar-dev-4.0.0-r0.apk
cleaning Workspace by removing 43 file/directories in /home/build
generating apk index from packages in packages/aarch64
processing package packages/aarch64/libpulsar-dev-4.0.0-r0.apk
processing package packages/aarch64/libpulsar-4.0.0-r0.apk
updating index at packages/aarch64/APKINDEX.tar.gz with new packages: [libpulsar-4.0.0-r0 libpulsar-dev-4.0.0-r0]
build completed successfully
running malcontent scan...
found 2 APK files to scan
scanning packages/aarch64/libpulsar-4.0.0-r0.apk -> packages/libpulsar-4.0.0-r0/mal-scan.json
running command mal [--format=json --exit-extraction=false --min-risk=critical --min-file-risk=critical --quantity-increases-risk=true --output=packages/libpulsar-4.0.0-r0/mal-scan.json scan packages/aarch64/libpulsar-4.0.0-r0.apk]
command "mal" completed successfully
scanning packages/aarch64/libpulsar-dev-4.0.0-r0.apk -> packages/libpulsar-dev-4.0.0-r0/mal-scan.json
running command mal [--format=json --exit-extraction=false --min-risk=critical --min-file-risk=critical --quantity-increases-risk=true --output=packages/libpulsar-dev-4.0.0-r0/mal-scan.json scan packages/aarch64/libpulsar-dev-4.0.0-r0.apk]
command "mal" completed successfully
malcontent scan completed successfully for 2 APKs in 7s
creating packages tarball...
running command tar [-C packages -cf packages.tar .]
command "tar" completed successfully
packages.tar sha256sum: ec8c00db8cfd0c4d5a4d1d58a5ffc3dd4efa2bfc2c856949fe19dd7585813e5e
sha256sum "ec8c00db8cfd0c4d5a4d1d58a5ffc3dd4efa2bfc2c856949fe19dd7585813e5e" written to /dev/termination-log
Built 2 packages, hash: ec8c00db8cfd0c4d5a4d1d58a5ffc3dd4efa2bfc2c856949fe19dd7585813e5e, size: 5553664 bytes
uploading final packages tarball...
running command curl [-s --upload-file packages.tar -H Content-Type: application/octet-stream https://storage.googleapis.com/prod-bundle-staging/wolfi/aarch64/1766008460897645411-libpulsar-4.0.0-r0.tar.gz?Expires=1766051660&GoogleAccessId=ebuild-zasv64d5x1oc4m3epw39yod%40prod-enforce-fabc.iam.gserviceaccount.com&Signature=R81szDI%2BRCe5aO6999JthMbJgm08fRRRGhX9S1tGNzoLr9jmqz0XYo3jbiUQpm1W%2BzeVHwdElKQIZZXMbeNun%2BK2b9qPqsgmqf4TyTd7ioP8CTNX9z5p5DPFM9xJdbRgswc%2BpnaI8bkarGMjftAJ8yLTTjrRJJdKlU0bycvPoiaX%2BkX6tDHXy1lwtbm7SA9f2pjdKZcO6U2tl2AUtMAtnM50XEludI9yy80FI432hbyLQsFqxczWxWDMvOi3xP1r1grlu218DcQSLpXUn6YieOjv4G%2Fnrt%2Bvi70DGrErYc%2FI9P7%2Fy4vU7q5ZhEj1ltx1xBcX3E6BBISWn%2BcijsQ4HQ%3D%3D]
command "curl" completed successfully
upload completed successfully
parsed env
using enhanced syft sbom melange runner
configuring puller identity "720909c9f5279097d847ad02a2f24ba8f59de36a/a49c7fedc33adf69"...
running command chainctl [auth login --audience apk.cgr.dev --identity 720909c9f5279097d847ad02a2f24ba8f59de36a/a49c7fedc33adf69]
Successfully exchanged token.
Valid! Id: 720909c9f5279097d847ad02a2f24ba8f59de36a/a49c7fedc33adf69
Updates are available for chainctl (current version: 0.2.185; latest: 0.2.186). To install, please run:
    $ chainctl update
command "chainctl" completed successfully
puller identity configured successfully
puller identity configured successfully
running tests...
running command /usr/bin/dind [dockerd] in background
command "/usr/bin/dind" started successfully
running command bash [-c 
  # Retry up to 60 seconds to wait for docker to start.
  worked=false
  for i in $(seq 60); do
    if docker info >/dev/null 2>&1; then
	  worked=true
	  break
    fi
    echo "docker healthcheck failed, docker is not ready, retrying... ($i/60 seconds so far)..."
    sleep 1
  done

  if [ "$worked" = "false" ]; then
    echo "Failed to start docker after 60 seconds"
    exit 1
  fi
]
command "bash" completed successfully
melange devel with runner docker is testing:
image configuration:
  contents:
    build repositories: []
    runtime repositories: []
    repositories: []
    keyring:      []
    packages:     [ldd-check libpulsar py3.10-pulsar-client py3.13-pulsar-client wolfi-base]
  accounts:
    runas:  
    users:
      - uid=1000(build) gid=1000
    groups:
      - gid=1000(build) members=[build]
installing wolfi-baselayout (20230201-r24)
installing ca-certificates-bundle (20251003-r0)
installing libgcc (15.2.0-r6)
installing glibc-locale-posix (2.42-r4)
installing glibc (2.42-r4)
installing ld-linux (2.42-r4)
installing zlib (1.3.1-r51)
installing libcrypto3 (3.6.0-r6)
installing libssl3 (3.6.0-r6)
installing apk-tools (2.14.10-r9)
installing libxcrypt (4.5.2-r0)
installing libcrypt1 (2.42-r4)
installing busybox (1.37.0-r50)
installing ncurses-terminfo-base (6.5_p20251025-r1)
installing ncurses (6.5_p20251025-r1)
installing bash (5.3-r3)
installing posix-libc-utils (2.42-r4)
installing ldd-check (0.0.35-r1)
installing libstdc++ (15.2.0-r6)
installing gtest (1.17.0-r3)
installing gmock (1.17.0-r3)
installing libabsl2508.0.0 (20250814.1-r1)
installing libprotoc33.2.0 (33.2-r0)
installing libprotobuf33.2.0 (33.2-r0)
installing libunistring (1.4.1-r1)
installing libidn2 (2.3.8-r3)
installing libpsl (0.21.5-r6)
installing nghttp3 (1.13.1-r0)
installing libbrotlicommon1 (1.2.0-r1)
installing libbrotlidec1 (1.2.0-r1)
installing libnghttp2-14 (1.68.0-r0)
installing readline (8.3-r1)
installing sqlite-libs (3.51.1-r0)
installing heimdal-libs (7.8.0-r42)
installing gdbm (1.26-r1)
installing cyrus-sasl (2.1.28-r45)
installing libldap-2.6 (2.6.10-r7)
installing libverto (0.3.2-r6)
installing krb5-conf (1.0-r7)
installing libcom_err (1.47.3-r1)
installing keyutils-libs (1.6.3-r37)
installing krb5-libs (1.22.1-r1)
installing libcurl-openssl4 (8.17.0-r0)
installing libpulsar (4.0.0-r0)
installing mpdecimal (4.0.1-r3)
installing libexpat1 (2.7.3-r0)
installing libbz2-1 (1.0.8-r21)
installing libffi (3.5.2-r1)
installing xz (5.8.2-r0)
installing py3-pip-wheel (25.3-r3)
installing py3-setuptools-wheel (80.9.0-r3)
installing python-3.10-base (3.10.19-r3)
installing py3.10-certifi (2025.11.12-r0)
installing py3.10-pulsar-client (3.8.0-r2)
installing libuuid (2.41.3-r0)
installing python-3.13-base (3.13.11-r2)
installing py3.13-certifi (2025.11.12-r0)
installing py3.13-pulsar-client (3.8.0-r2)
installing wolfi-keys (1-r12)
installing wolfi-base (1-r7)
layer digest: sha256:014d7a9744a7e8dad0199fa9a340e75bc1f789666cea620ecfde51c33bd995c8
layer diffID: sha256:8b68591ba5fab5675998ea8a8cb7b9854f72670e35a4d95e843f7beeb565899e
saving OCI image locally: apko.local/cache:40c87e7a780ce6d15877ee209936c9e16ed194ea2eac3f55619ce9f44fafa86f