tribuchet: building on jamie Running phase: unpackPhase unpacking source archive /nix/store/ys890fh4kjmab903b75i1swn9ji5w8k3-source source root is source Running phase: patchPhase Running phase: updateAutotoolsGnuConfigScriptsPhase Running phase: configurePhase mesonConfigurePhase flags: --prefix=/nix/store/i1rvaz17rd21mx4ff68rgmdn8lnx3lvg-nix-grpc-store-clang-tidy-0.2.0 --libdir=/nix/store/i1rvaz17rd21mx4ff68rgmdn8lnx3lvg-nix-grpc-store-clang-tidy-0.2.0/lib --libexecdir=/nix/store/i1rvaz17rd21mx4ff68rgmdn8lnx3lvg-nix-grpc-store-clang-tidy-0.2.0/libexec --bindir=/nix/store/i1rvaz17rd21mx4ff68rgmdn8lnx3lvg-nix-grpc-store-clang-tidy-0.2.0/bin --sbindir=/nix/store/i1rvaz17rd21mx4ff68rgmdn8lnx3lvg-nix-grpc-store-clang-tidy-0.2.0/sbin --includedir=/nix/store/i1rvaz17rd21mx4ff68rgmdn8lnx3lvg-nix-grpc-store-clang-tidy-0.2.0/include --mandir=/nix/store/i1rvaz17rd21mx4ff68rgmdn8lnx3lvg-nix-grpc-store-clang-tidy-0.2.0/share/man --infodir=/nix/store/i1rvaz17rd21mx4ff68rgmdn8lnx3lvg-nix-grpc-store-clang-tidy-0.2.0/share/info --localedir=/nix/store/i1rvaz17rd21mx4ff68rgmdn8lnx3lvg-nix-grpc-store-clang-tidy-0.2.0/share/locale -Dauto_features=enabled -Dwrap_mode=nodownload --buildtype=plain -Db_pch=false The Meson build system Version: 1.12.1 Source dir: /build/source Build dir: /build/source/build Build type: native build WARNING: Project does not target a minimum version but uses feature introduced in '1.1': meson.options file. Use meson_options.txt instead Project name: nix-grpc-store Project version: 0.2.0 C++ compiler for the host machine: clang++ (clang 22.1.8 "clang version 22.1.8") C++ linker for the host machine: clang++ ld.bfd 2.46 Host machine cpu family: x86_64 Host machine cpu: x86_64 Found pkg-config: YES (/nix/store/b9izmrfjp0qnnyahdwwrzdwi87s1h179-pkg-config-wrapper-0.29.2/bin/pkg-config) 0.29.2 Run-time dependency grpc++ found: YES 1.83.1 Run-time dependency protobuf found: YES 36.2.0 Run-time dependency libzstd found: YES 1.5.7 Run-time dependency threads found: YES Run-time dependency libcrypto found: YES 3.5.8 Run-time dependency prometheus-cpp-core found: YES 1.3.0 Run-time dependency prometheus-cpp-pull found: YES 1.3.0 Run-time dependency absl_flat_hash_map found: YES 20260817 Run-time dependency absl_hash found: YES 20260817 Run-time dependency absl_synchronization found: YES 20260817 Compiler for C++ supports arguments -Werror=thread-safety: YES Run-time dependency nix-store found: YES 2.36.0pre20261004_b010dc99 Run-time dependency nix-util found: YES 2.36.0pre20261004_b010dc99 Run-time dependency jemalloc found: YES 5.3.1_0 Run-time dependency libcurl found: YES 8.22.0 Run-time dependency nlohmann_json found: YES 3.12.0 Check usable header "jwt-cpp/traits/nlohmann-json/defaults.h" : YES Program protoc found: YES (/nix/store/icm7gdscsdcbkf1rmnyqhf5vmrdhl6d4-protobuf-36.2/bin/protoc) Program grpc_cpp_plugin found: YES (/nix/store/5ajs0p0ysy8hynsf1g0b1ggaf1ah3ynj-grpc-1.83.1/bin/grpc_cpp_plugin) Program mold found: YES (/nix/store/9dcddrfxlfl9n3wfibi5jkmp22bjkvkh-mold-unwrapped-wrapper-2.42.1/bin/mold) Run-time dependency dl found: YES Program tests/farm-client-test.sh found: YES (/build/source/tests/farm-client-test.sh) Program tests/oidc-test.sh found: YES (/build/source/tests/oidc-test.sh) Build targets in project: 20 WARNING: Project specifies no minimum version but uses features which were added in versions: * 1.1: {'meson.options file'} nix-grpc-store 0.2.0 User defined options auto_features: enabled b_pch : false bindir : /nix/store/i1rvaz17rd21mx4ff68rgmdn8lnx3lvg-nix-grpc-store-clang-tidy-0.2.0/bin buildtype : plain includedir : /nix/store/i1rvaz17rd21mx4ff68rgmdn8lnx3lvg-nix-grpc-store-clang-tidy-0.2.0/include infodir : /nix/store/i1rvaz17rd21mx4ff68rgmdn8lnx3lvg-nix-grpc-store-clang-tidy-0.2.0/share/info libdir : /nix/store/i1rvaz17rd21mx4ff68rgmdn8lnx3lvg-nix-grpc-store-clang-tidy-0.2.0/lib libexecdir : /nix/store/i1rvaz17rd21mx4ff68rgmdn8lnx3lvg-nix-grpc-store-clang-tidy-0.2.0/libexec localedir : /nix/store/i1rvaz17rd21mx4ff68rgmdn8lnx3lvg-nix-grpc-store-clang-tidy-0.2.0/share/locale mandir : /nix/store/i1rvaz17rd21mx4ff68rgmdn8lnx3lvg-nix-grpc-store-clang-tidy-0.2.0/share/man prefix : /nix/store/i1rvaz17rd21mx4ff68rgmdn8lnx3lvg-nix-grpc-store-clang-tidy-0.2.0 sbindir : /nix/store/i1rvaz17rd21mx4ff68rgmdn8lnx3lvg-nix-grpc-store-clang-tidy-0.2.0/sbin wrap_mode : nodownload Found ninja-1.13.2 at /nix/store/4nsdla28c4177ssp0hlyv5l2yzj8wcba-ninja-1.13.2/bin/ninja mesonConfigurePhase: enabled\ parallel\ building Running phase: buildPhase [1/2] Generating eds_proto with a custom command [2/2] Generating nix_remote_proto with a custom command [0/1] /nix/store/r72868g8znkk4m8pmwsn3cf8v3h84mr0-meson-1.12.1/bin/meson --internal clangtidy /build/source /build/source/build --color always >>> /nix/store/f9hs9r4kcnics2v0l9dbd1b1arx09gza-clang-tools-22.1.8/bin/clang-tidy --use-color -quiet -p /build/source/build /build/source/tests/sbpl-test.cc ../tests/sbpl-test.cc:18:6: error: an exception may be thrown in function 'main' which should not throw exceptions [bugprone-exception-escape,-warnings-as-errors] 18 | auto main() -> int | ^ /nix/store/5q6bdxkp7lc70gn9mnf4yiybrx8ry5xq-gcc-16.2.0/include/c++/16.2.0/format:243:5: note: frame #0: unhandled exception of type 'format_error' may be thrown in function '__throw_format_error' here 243 | { _GLIBCXX_THROW_OR_ABORT(format_error(__what)); } | ^ /nix/store/5q6bdxkp7lc70gn9mnf4yiybrx8ry5xq-gcc-16.2.0/include/c++/16.2.0/x86_64-unknown-linux-gnu/bits/c++config.h:262:42: note: expanded from macro '_GLIBCXX_THROW_OR_ABORT' 262 | # define _GLIBCXX_THROW_OR_ABORT(_EXC) (throw (_EXC)) | ^ /nix/store/5q6bdxkp7lc70gn9mnf4yiybrx8ry5xq-gcc-16.2.0/include/c++/16.2.0/format:264:5: note: frame #1: function '__conflicting_indexing_in_format_string' calls function '__throw_format_error' here 264 | { __throw_format_error("format error: conflicting indexing style in format string"); } | ^ /nix/store/5q6bdxkp7lc70gn9mnf4yiybrx8ry5xq-gcc-16.2.0/include/c++/16.2.0/format:315:4: note: frame #2: function 'next_arg_id' calls function '__conflicting_indexing_in_format_string' here 315 | __format::__conflicting_indexing_in_format_string(); | ^ /nix/store/5q6bdxkp7lc70gn9mnf4yiybrx8ry5xq-gcc-16.2.0/include/c++/16.2.0/format:5051:20: note: frame #3: function '_M_scan' calls function 'next_arg_id' here 5051 | _M_format_arg(_M_pc.next_arg_id()); | ^ /nix/store/5q6bdxkp7lc70gn9mnf4yiybrx8ry5xq-gcc-16.2.0/include/c++/16.2.0/format:5325:7: note: frame #4: function '__do_vformat_to' calls function '_M_scan' here 5325 | __scanner._M_scan(); | ^ /nix/store/5q6bdxkp7lc70gn9mnf4yiybrx8ry5xq-gcc-16.2.0/include/c++/16.2.0/format:5356:11: note: frame #5: function '__do_vformat_to, char, std::basic_format_context, char>>' calls function '__do_vformat_to' here 5356 | return __format::__do_vformat_to(__out, __fmt, __ctx); | ^ /nix/store/5q6bdxkp7lc70gn9mnf4yiybrx8ry5xq-gcc-16.2.0/include/c++/16.2.0/format:5445:14: note: frame #6: function 'vformat_to>' calls function '__do_vformat_to, char, std::basic_format_context, char>>' here 5445 | { return __format::__do_vformat_to(std::move(__out), __fmt, __args); } | ^ /nix/store/5q6bdxkp7lc70gn9mnf4yiybrx8ry5xq-gcc-16.2.0/include/c++/16.2.0/print:147:2: note: frame #7: function 'println' calls function 'vformat_to>' here 147 | std::vformat_to(__format::_File_sink(__stream, true).out(), | ^ ../tests/sbpl-test.cc:65:5: note: frame #8: function 'main' calls function 'println' here 65 | std::println(stderr, "sbpl-test: {}", err.what()); | ^ >>> /nix/store/f9hs9r4kcnics2v0l9dbd1b1arx09gza-clang-tools-22.1.8/bin/clang-tidy --use-color -quiet -p /build/source/build /build/source/tests/sandbox-test.cc ../tests/sandbox-test.cc:7:1: error: included header cstdlib is not used directly [misc-include-cleaner,-warnings-as-errors] 7 | #include | ^~~~~~~~~~~~~~~~~~ 8 | #include ../tests/sandbox-test.cc:19:1: error: included header types.h is not used directly [misc-include-cleaner,-warnings-as-errors] 19 | #include | ^~~~~~~~~~~~~~~~~~~~~~ 20 | #include ../tests/sandbox-test.cc:42:29: error: do not call c-style vararg functions [cppcoreguidelines-pro-type-vararg,-warnings-as-errors] 42 | return static_cast(::syscall(SYS_landlock_create_ruleset, nullptr, 0, versionFlag)); | ^ ../tests/sandbox-test.cc:53:61: error: do not cast '' to 'const sockaddr *' through 'const void *'; use reinterpret_cast instead [bugprone-casting-through-void,-warnings-as-errors] 53 | return ::bind(sock.get(), static_cast(static_cast(&addr)), sizeof(addr)) == 0; | ^ ../tests/sandbox-test.cc:93:5: error: no header providing "pid_t" is directly included [misc-include-cleaner,-warnings-as-errors] 14 | pid_t const pid = ::fork(); | ^ ../tests/sandbox-test.cc:105:12: error: no header providing "WIFEXITED" is directly included [misc-include-cleaner,-warnings-as-errors] 105 | return WIFEXITED(status) ? WEXITSTATUS(status) : 2; | ^ ../tests/sandbox-test.cc:105:32: error: no header providing "WEXITSTATUS" is directly included [misc-include-cleaner,-warnings-as-errors] 105 | return WIFEXITED(status) ? WEXITSTATUS(status) : 2; | ^ ../tests/sandbox-test.cc:132:40: error: possibly unsafe 'operator[]', consider bounds-safe alternatives [cppcoreguidelines-pro-bounds-avoid-unchecked-container-access,-warnings-as-errors] 132 | static_cast(::write(ready[1], &byte, 1)); | ^~~ ../tests/sandbox-test.cc:133:41: error: possibly unsafe 'operator[]', consider bounds-safe alternatives [cppcoreguidelines-pro-bounds-avoid-unchecked-container-access,-warnings-as-errors] 133 | static_cast(::read(rotated[0], &byte, 1)); | ^~~ ../tests/sandbox-test.cc:137:35: error: possibly unsafe 'operator[]', consider bounds-safe alternatives [cppcoreguidelines-pro-bounds-avoid-unchecked-container-access,-warnings-as-errors] 137 | static_cast(::read(ready[0], &byte, 1)); | ^~~ ../tests/sandbox-test.cc:140:38: error: possibly unsafe 'operator[]', consider bounds-safe alternatives [cppcoreguidelines-pro-bounds-avoid-unchecked-container-access,-warnings-as-errors] 140 | static_cast(::write(rotated[1], &byte, 1)); | ^~~ ../tests/sandbox-test.cc:143:20: error: variable name 'fd' is too short, expected at least 3 characters [readability-identifier-length,-warnings-as-errors] 143 | for (int const fd : {ready[0], ready[1], rotated[0], rotated[1]}) { | ^ ../tests/sandbox-test.cc:143:31: error: possibly unsafe 'operator[]', consider bounds-safe alternatives [cppcoreguidelines-pro-bounds-avoid-unchecked-container-access,-warnings-as-errors] 143 | for (int const fd : {ready[0], ready[1], rotated[0], rotated[1]}) { | ^~~ ../tests/sandbox-test.cc:143:41: error: possibly unsafe 'operator[]', consider bounds-safe alternatives [cppcoreguidelines-pro-bounds-avoid-unchecked-container-access,-warnings-as-errors] 143 | for (int const fd : {ready[0], ready[1], rotated[0], rotated[1]}) { | ^~~ ../tests/sandbox-test.cc:143:53: error: possibly unsafe 'operator[]', consider bounds-safe alternatives [cppcoreguidelines-pro-bounds-avoid-unchecked-container-access,-warnings-as-errors] 143 | for (int const fd : {ready[0], ready[1], rotated[0], rotated[1]}) { | ^~~ ../tests/sandbox-test.cc:143:65: error: possibly unsafe 'operator[]', consider bounds-safe alternatives [cppcoreguidelines-pro-bounds-avoid-unchecked-container-access,-warnings-as-errors] 143 | for (int const fd : {ready[0], ready[1], rotated[0], rotated[1]}) { | ^~~ ../tests/sandbox-test.cc:151:6: error: an exception may be thrown in function 'main' which should not throw exceptions [bugprone-exception-escape,-warnings-as-errors] 151 | auto main() -> int | ^ /nix/store/5q6bdxkp7lc70gn9mnf4yiybrx8ry5xq-gcc-16.2.0/include/c++/16.2.0/format:243:5: note: frame #0: unhandled exception of type 'format_error' may be thrown in function '__throw_format_error' here 243 | { _GLIBCXX_THROW_OR_ABORT(format_error(__what)); } | ^ /nix/store/5q6bdxkp7lc70gn9mnf4yiybrx8ry5xq-gcc-16.2.0/include/c++/16.2.0/x86_64-unknown-linux-gnu/bits/c++config.h:262:42: note: expanded from macro '_GLIBCXX_THROW_OR_ABORT' 262 | # define _GLIBCXX_THROW_OR_ABORT(_EXC) (throw (_EXC)) | ^ /nix/store/5q6bdxkp7lc70gn9mnf4yiybrx8ry5xq-gcc-16.2.0/include/c++/16.2.0/format:264:5: note: frame #1: function '__conflicting_indexing_in_format_string' calls function '__throw_format_error' here 264 | { __throw_format_error("format error: conflicting indexing style in format string"); } | ^ /nix/store/5q6bdxkp7lc70gn9mnf4yiybrx8ry5xq-gcc-16.2.0/include/c++/16.2.0/format:315:4: note: frame #2: function 'next_arg_id' calls function '__conflicting_indexing_in_format_string' here 315 | __format::__conflicting_indexing_in_format_string(); | ^ /nix/store/5q6bdxkp7lc70gn9mnf4yiybrx8ry5xq-gcc-16.2.0/include/c++/16.2.0/format:5051:20: note: frame #3: function '_M_scan' calls function 'next_arg_id' here 5051 | _M_format_arg(_M_pc.next_arg_id()); | ^ /nix/store/5q6bdxkp7lc70gn9mnf4yiybrx8ry5xq-gcc-16.2.0/include/c++/16.2.0/format:5325:7: note: frame #4: function '__do_vformat_to' calls function '_M_scan' here 5325 | __scanner._M_scan(); | ^ /nix/store/5q6bdxkp7lc70gn9mnf4yiybrx8ry5xq-gcc-16.2.0/include/c++/16.2.0/format:5356:11: note: frame #5: function '__do_vformat_to, char, std::basic_format_context, char>>' calls function '__do_vformat_to' here 5356 | return __format::__do_vformat_to(__out, __fmt, __ctx); | ^ /nix/store/5q6bdxkp7lc70gn9mnf4yiybrx8ry5xq-gcc-16.2.0/include/c++/16.2.0/format:5445:14: note: frame #6: function 'vformat_to>' calls function '__do_vformat_to, char, std::basic_format_context, char>>' here 5445 | { return __format::__do_vformat_to(std::move(__out), __fmt, __args); } | ^ /nix/store/5q6bdxkp7lc70gn9mnf4yiybrx8ry5xq-gcc-16.2.0/include/c++/16.2.0/print:147:2: note: frame #7: function 'println' calls function 'vformat_to>' here 147 | std::vformat_to(__format::_File_sink(__stream, true).out(), | ^ ../tests/sandbox-test.cc:219:5: note: frame #8: function 'main' calls function 'println' here 219 | std::println(stderr, "sandbox-test: {}", err.what()); | ^ ../tests/sandbox-test.cc:165:34: error: no header providing "mkdtemp" is directly included [misc-include-cleaner,-warnings-as-errors] 13 | auto const base = fs::path(::mkdtemp(tmpl.data())); | ^ >>> /nix/store/f9hs9r4kcnics2v0l9dbd1b1arx09gza-clang-tools-22.1.8/bin/clang-tidy --use-color -quiet -p /build/source/build /build/source/src/client/channel.cc [1/1] (1/2) Processing file /build/source/src/client/channel.cc. [1/1] (2/2) Processing file /build/source/src/client/channel.cc. >>> /nix/store/f9hs9r4kcnics2v0l9dbd1b1arx09gza-clang-tools-22.1.8/bin/clang-tidy --use-color -quiet -p /build/source/build /build/source/src/daemon/sandbox-linux.cc [1/1] (1/2) Processing file /build/source/src/daemon/sandbox-linux.cc. [1/1] (2/2) Processing file /build/source/src/daemon/sandbox-linux.cc. ../src/daemon/sandbox-linux.cc:151:22: error: do not call c-style vararg functions [cppcoreguidelines-pro-type-vararg,-warnings-as-errors] 151 | auto const res = ::syscall(number, args...); | ^ ../src/daemon/sandbox-linux.cc:167:16: error: avoid repeating the return type from the declaration; use a braced initializer list instead [modernize-return-braced-init-list,-warnings-as-errors] 167 | return nix::AutoCloseFD(static_cast(ruleset)); | ^~~~~~~~~~~~~~~~~ ~ | { } ../src/daemon/sandbox-linux.cc:224:30: error: parameter name 'fd' is too short, expected at least 3 characters [readability-identifier-length,-warnings-as-errors] 224 | Ruleset(nix::AutoCloseFD fd, Fs handledFs) | ^ ../src/daemon/sandbox-linux.cc:234:39: error: do not call c-style vararg functions [cppcoreguidelines-pro-type-vararg,-warnings-as-errors] 234 | nix::AutoCloseFD const target(::open(path.c_str(), O_PATH | O_CLOEXEC)); | ^ >>> /nix/store/f9hs9r4kcnics2v0l9dbd1b1arx09gza-clang-tools-22.1.8/bin/clang-tidy --use-color -quiet -p /build/source/build /build/source/src/daemon/main.cc Errors encountered while running clang-tidy ../src/daemon/main.cc:894:6: error: function 'sandboxPolicy' can be made static or moved into an anonymous namespace to enforce internal linkage [misc-use-internal-linkage,-warnings-as-errors] 894 | auto sandboxPolicy(const nixgrpc::Options & options, bool listenFdsEmpty) -> nixgrpc::sandbox::Policy | ^ | static ../src/daemon/main.cc:914:76: error: 5 is a magic number; consider replacing it with a named constant [cppcoreguidelines-avoid-magic-numbers,readability-magic-numbers,-warnings-as-errors] 914 | policy.listenSockets.push_back(CanonicalPath::from(addr.substr(5))); | ^ FAILED: [code=1] meson-internal__clang-tidy /nix/store/r72868g8znkk4m8pmwsn3cf8v3h84mr0-meson-1.12.1/bin/meson --internal clangtidy /build/source /build/source/build --color always ninja: build stopped: subcommand failed.