Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

fatal: unable to find remote helper for 'https' due to snap confinement #11195

Closed
nobuto-m opened this issue Jul 1, 2023 · 13 comments · Fixed by #11198
Closed

fatal: unable to find remote helper for 'https' due to snap confinement #11195

nobuto-m opened this issue Jul 1, 2023 · 13 comments · Fixed by #11198
Labels
Bug NeedsTriage Outdated

Comments

@nobuto-m
Copy link

nobuto-m commented Jul 1, 2023

What version of Hugo are you using (hugo version)?

$ hugo version
hugo v0.115.0-67caf50698783d3b3d78559ac81483d83e5e1a35+extended linux/amd64 BuildDate=2023-06-29T15:56:39Z VendorInfo=snap:0.115.0

Does this issue reproduce with the latest release?

Yes, it happens with the following build too:

$ hugo version
hugo v0.116.0-DEV-0ff8e13c1cb603109204f88116746067f0344f77+extended linux/amd64 BuildDate=2023-06-30T13:57:46Z VendorInfo=snap:0.115.0+git4.0ff8e13c

How to reproduce

On Ubuntu 22.04.2 LTS,

$ sudo snap install --channel extended/stable hugo

$ git clone https://github.com/wowchemy/starter-hugo-academic.git
$ cd starter-hugo-academic/

$ hugo

Then, the following error happens.

go: github.com/wowchemy/wowchemy-hugo-themes/modules/wowchemy-plugin-netlify@v1.0.0: invalid version: git ls-remote -q origin in /tmp/hugo_cache_nobuto/modules/filecache/modules/pkg/mod/cache/vcs/0c88995f39c54fe356dd74460b6359b56b0fb376c52289c9656c86270b2c006d: exit status 128:
	fatal: unable to find remote helper for 'https'
go: github.com/wowchemy/wowchemy-hugo-themes/modules/wowchemy-plugin-netlify-cms@v1.0.0: invalid version: git ls-remote -q origin in /tmp/hugo_cache_nobuto/modules/filecache/modules/pkg/mod/cache/vcs/0c88995f39c54fe356dd74460b6359b56b0fb376c52289c9656c86270b2c006d: exit status 128:
	fatal: unable to find remote helper for 'https'
go: github.com/wowchemy/wowchemy-hugo-themes/modules/wowchemy-plugin-reveal@v1.0.0: invalid version: git ls-remote -q origin in /tmp/hugo_cache_nobuto/modules/filecache/modules/pkg/mod/cache/vcs/0c88995f39c54fe356dd74460b6359b56b0fb376c52289c9656c86270b2c006d: exit status 128:
	fatal: unable to find remote helper for 'https'
go: github.com/wowchemy/wowchemy-hugo-themes/modules/wowchemy/v5@v5.7.1-0.20230420205746-951c7b6f709d: invalid version: git ls-remote -q origin in /tmp/hugo_cache_nobuto/modules/filecache/modules/pkg/mod/cache/vcs/0c88995f39c54fe356dd74460b6359b56b0fb376c52289c9656c86270b2c006d: exit status 128:
	fatal: unable to find remote helper for 'https'
hugo: collected modules in 897 ms
Total in 906 ms
Error: failed to load modules: failed to download modules: failed to execute 'go [mod download]': failed to execute binary "go" with args [mod download]: go: github.com/wowchemy/wowchemy-hugo-themes/modules/wowchemy-plugin-netlify@v1.0.0: invalid version: git ls-remote -q origin in /tmp/hugo_cache_nobuto/modules/filecache/modules/pkg/mod/cache/vcs/0c88995f39c54fe356dd74460b6359b56b0fb376c52289c9656c86270b2c006d: exit status 128:
	fatal: unable to find remote helper for 'https'
go: github.com/wowchemy/wowchemy-hugo-themes/modules/wowchemy-plugin-netlify-cms@v1.0.0: invalid version: git ls-remote -q origin in /tmp/hugo_cache_nobuto/modules/filecache/modules/pkg/mod/cache/vcs/0c88995f39c54fe356dd74460b6359b56b0fb376c52289c9656c86270b2c006d: exit status 128:
	fatal: unable to find remote helper for 'https'
go: github.com/wowchemy/wowchemy-hugo-themes/modules/wowchemy-plugin-reveal@v1.0.0: invalid version: git ls-remote -q origin in /tmp/hugo_cache_nobuto/modules/filecache/modules/pkg/mod/cache/vcs/0c88995f39c54fe356dd74460b6359b56b0fb376c52289c9656c86270b2c006d: exit status 128:
	fatal: unable to find remote helper for 'https'
go: github.com/wowchemy/wowchemy-hugo-themes/modules/wowchemy/v5@v5.7.1-0.20230420205746-951c7b6f709d: invalid version: git ls-remote -q origin in /tmp/hugo_cache_nobuto/modules/filecache/modules/pkg/mod/cache/vcs/0c88995f39c54fe356dd74460b6359b56b0fb376c52289c9656c86270b2c006d: exit status 128:
	fatal: unable to find remote helper for 'https'
 *errors.errorString

It's likely from the snap confinement because I see the following kernel messages:

Jul 01 21:34:13 t14 kernel: audit: type=1400 audit(1688214853.951:2485): apparmor="DENIED" operation="open" profile="snap.hugo.hugo" name="/proc/334993/mountinfo" pid=334993 comm="hugo" requested_mask="r" denied_mask="r" fsuid=1000 ouid=1000
Jul 01 21:34:13 t14 kernel: audit: type=1400 audit(1688214853.955:2486): apparmor="DENIED" operation="open" profile="snap.hugo.hugo" name="/snap/core20/1950/usr/lib/x86_64-linux-gnu/libpthread-2.31.so" pid=335035 comm="go" requested_mask="r" denied_mask="r" fsuid=1000 ouid=0
Jul 01 21:34:13 t14 kernel: audit: type=1400 audit(1688214853.955:2487): apparmor="DENIED" operation="open" profile="snap.hugo.hugo" name="/snap/core20/1950/usr/lib/x86_64-linux-gnu/libc-2.31.so" pid=335035 comm="go" requested_mask="r" denied_mask="r" fsuid=1000 ouid=0
Jul 01 21:34:13 t14 kernel: audit: type=1400 audit(1688214853.963:2488): apparmor="DENIED" operation="open" profile="snap.hugo.hugo" name="/snap/core20/1950/usr/lib/x86_64-linux-gnu/libnss_files-2.31.so" pid=335035 comm="go" requested_mask="r" denied_mask="r" fsuid=1000 ouid=0
Jul 01 21:34:13 t14 kernel: audit: type=1400 audit(1688214853.963:2489): apparmor="DENIED" operation="open" profile="snap.hugo.hugo" name="/snap/core20/1950/usr/lib/x86_64-linux-gnu/libnss_mdns4_minimal.so.2" pid=335035 comm="go" requested_mask="r" denied_mask="r" fsuid=1000 ouid=0
Jul 01 21:34:13 t14 kernel: audit: type=1400 audit(1688214853.963:2490): apparmor="DENIED" operation="open" profile="snap.hugo.hugo" name="/snap/core20/1950/usr/lib/x86_64-linux-gnu/libresolv-2.31.so" pid=335035 comm="go" requested_mask="r" denied_mask="r" fsuid=1000 ouid=0
Jul 01 21:34:13 t14 kernel: audit: type=1400 audit(1688214853.963:2491): apparmor="DENIED" operation="open" profile="snap.hugo.hugo" name="/snap/core20/1950/usr/lib/x86_64-linux-gnu/libnss_dns-2.31.so" pid=335035 comm="go" requested_mask="r" denied_mask="r" fsuid=1000 ouid=0

And it's not reproducible if I by-pass the confinement.

$ /snap/hugo/current/bin/hugo 
hugo: downloading modules …
hugo: collected modules in 6550 ms
Start building sites … 
hugo v0.115.0-67caf50698783d3b3d78559ac81483d83e5e1a35+extended linux/amd64 BuildDate=2023-06-29T15:56:39Z VendorInfo=snap:0.115.0


                   | EN  
-------------------+-----
  Pages            | 55  
  Paginator pages  |  0  
  Non-page files   | 16  
  Static files     |  9  
  Processed images | 69  
  Aliases          | 15  
  Sitemaps         |  1  
  Cleaned          |  0  

Total in 8944 ms

For the record, I didn't see this issue on June 17, 2023 so it might be a new issue with snap builds since then.
@jmooring
Copy link
Member

jmooring commented Jul 1, 2023

Unable to reproduce with hugo v0.115.0-67caf50698783d3b3d78559ac81483d83e5e1a35+extended linux/amd64 BuildDate=2023-06-29T15:56:39Z VendorInfo=snap:0.115.0.

@nobuto-m
Copy link
Author

nobuto-m commented Jul 1, 2023

@jmooring Thank you for trying to reproduce it. May I ask what host OS version did you run the hugo snap on?

@jmooring
Copy link
Member

jmooring commented Jul 1, 2023

Ubuntu 22.04.2 LTS for x86_64

@nobuto-m
Copy link
Author

nobuto-m commented Jul 1, 2023

Somehow it's reliably reproducible on a clean VM.

At least in my case, there is a clear difference between:

[known to fail - fatal: unable to find remote helper for 'https']

extended/stable: 0.115.0 2023-06-29 (16457) 103MB -

hugo v0.115.0-67caf50698783d3b3d78559ac81483d83e5e1a35+extended linux/amd64 BuildDate=2023-06-29T15:56:39Z VendorInfo=snap:0.115.0

[known to work]

$ sudo snap refresh --channel extended/stable --revision 16307 hugo

installed: 0.114.1 (16307) 103MB -

hugo v0.114.1-e9b716ad9869b79e7c374bbdae4daf5ee6406bd4+extended linux/amd64 BuildDate=2023-06-23T11:02:58Z VendorInfo=snap:0.114.1

So on my env, it looks like the update on Jun 30 started to see the failure.

$ grep hugo /var/log/syslog | grep revision
Jun 26 10:38:21 t14 systemd[1]: Mounting Mount unit for hugo, revision 16307...
Jun 26 10:38:21 t14 systemd[1]: Mounted Mount unit for hugo, revision 16307.
Jun 26 14:01:41 t14 systemd[1]: Mounting Mount unit for hugo, revision 16238...
Jun 26 14:01:41 t14 systemd[1]: Mounting Mount unit for hugo, revision 16307...
Jun 26 14:01:41 t14 systemd[1]: Mounted Mount unit for hugo, revision 16238.
Jun 26 14:01:41 t14 systemd[1]: Mounted Mount unit for hugo, revision 16307.
Jun 30 17:42:03 t14 systemd[1]: Mounting Mount unit for hugo, revision 16457...
Jun 30 17:42:03 t14 systemd[1]: Mounted Mount unit for hugo, revision 16457.

@jmooring
Copy link
Member

jmooring commented Jul 1, 2023

What host OS version did you run the hugo snap on?

@nobuto-m
Copy link
Author

nobuto-m commented Jul 1, 2023

What host OS version did you run the hugo snap on?

Ubuntu 22.04.2 LTS with amd64 so it should be the same as your version so I'm wondering what's a difference on my side.

@jmooring
Copy link
Member

jmooring commented Jul 1, 2023

I'll spin up a virgin VM and repeat the test.

@jmooring
Copy link
Member

jmooring commented Jul 1, 2023

I can reproduce on a virgin VM, and am trying to track down the cause.

@mihovilkolaric
Copy link

Experiencing the same issue with

$ hugo version
hugo v0.115.0-67caf50698783d3b3d78559ac81483d83e5e1a35+extended linux/amd64 BuildDate=2023-06-29T15:56:39Z VendorInfo=snap:0.115.0

on ubuntu 20.04 (worked yesterday, before I did the update)

jmooring added a commit to jmooring/hugo that referenced this issue Jul 1, 2023
@jmooring
snap: Restore security.exec.osenv whitelist
0b116c0 
Fixes gohugoio#11195
This was referenced Jul 1, 2023
Merged
Closed
jmooring added a commit that referenced this issue Jul 1, 2023
@jmooring
snap: Restore security.exec.osenv whitelist
3c8256a 
Fixes #11195
@jmooring
Copy link
Member

jmooring commented Jul 1, 2023

The Snap package is fixed on the "edge" channel, but will not be promoted to the "stable" channel until we roll the next Hugo release. In the interim, switch to the "edge" channel:

sudo snap refresh hugo --channel=edge

@nobuto-m @mihovilkolaric Please confirm that this is resolved. Thanks.

@nobuto-m
Copy link
Author

nobuto-m commented Jul 2, 2023

Brilliant. I've confirmed it works with the extended/edge channel. Thank you for the prompt turnaround.

extended/edge: 0.115.0+git10.c1eac616 2023-07-02 (16547) 103MB -

hugo v0.116.0-DEV-c1eac616d55945c28ea364f44d1e9ae12e672e11+extended linux/amd64 BuildDate=2023-07-02T00:55:23Z VendorInfo=snap:0.115.0+git10.c1eac616

$ hugo
hugo: downloading modules …
hugo: collected modules in 9673 ms
Start building sites … 
hugo v0.116.0-DEV-c1eac616d55945c28ea364f44d1e9ae12e672e11+extended linux/amd64 BuildDate=2023-07-02T00:55:23Z VendorInfo=snap:0.115.0+git10.c1eac616


                   | EN  
-------------------+-----
  Pages            | 55  
  Paginator pages  |  0  
  Non-page files   | 16  
  Static files     |  9  
  Processed images | 36  
  Aliases          | 15  
  Sitemaps         |  1  
  Cleaned          |  0  

Total in 15691 ms

@jmooring
Copy link
Member

jmooring commented Jul 3, 2023

@nobuto-m With the release this morning of 0.115.1, you can use the "latest/stable" track/channel. The "latest" and "extended" tracks are identical, and "latest" is the default track. Using the "stable" channel will auto-update on releases (major, minor, and patch).

@github-actions
Copy link

This issue has been automatically locked since there has not been any recent activity after it was closed. Please open a new issue for related bugs.

@github-actions github-actions bot locked as resolved and limited conversation to collaborators Jul 25, 2023
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Assignees
No one assigned
Labels
Bug NeedsTriage Outdated
Projects
None yet
Milestone
No milestone
Development

Successfully merging a pull request may close this issue.

snap: Restore security.exec.osenv whitelist jmooring/hugo
3 participants
@jmooring @nobuto-m @mihovilkolaric