Building an omnibus-gitlab package locally fails when running license_finder report

Summary

Building a package locally using the steps found in https://gitlab.com/gitlab-org/omnibus-gitlab/-/blob/master/doc/build/build_package.md fails when running license-finder report with the message:

Builder: registry] I | 2022-08-26T03:05:09+00:00 | Build registry: 37.791s
The following shell command exited with status 1:

    $ license_finder report --decisions-file=/omnibus-gitlab/support/dependency_decisions.yml --format=json --columns name version licenses texts notice --save=license.json

Output:

    LicenseFinder::GoModules: is active
LicenseFinder::Bundler: is active

Error:

    /usr/local/lib/ruby/gems/2.7.0/gems/bundler-2.3.15/lib/bundler/resolver.rb:271:in `block in verify_gemfile_dependencies_are_found!': Could not find gem 'gitlab-dangerfiles (~> 3.0)' in locally installed gems. (Bundler::GemNotFound)

Steps to reproduce

Follow the steps in https://gitlab.com/gitlab-org/omnibus-gitlab/-/blob/master/doc/build/build_package.md, e.g.,

1. docker pull registry.gitlab.com/gitlab-org/gitlab/gitlab-assets-ee:master
2. docker create --name gitlab_asset_cache registry.gitlab.com/gitlab-org/gitlab/gitlab-assets-ee:master
3. docker pull registry.gitlab.com/gitlab-org/gitlab-omnibus-builder/debian_11:3.5.0
4. docker run -v omnibus-gitlab:/omnibus-gitlab -v gitlab-assets:/gitlab-assets -it registry.gitlab.com/gitlab-org/gitlab-omnibus-builder/debian_11:3.5.0 bash
5. export ALTERNATIVE_SOURCES=true
6. export ASSET_PATH=/gitlab-assets
7. export ee=true
8. cd /omnibus-gitlab
9. bundle install
10. bundle binstubs --all
11. bundle exec rake build:project

What is the current bug behavior?

The build fails with the following error in registry:

$ license_finder report --decisions-file=/omnibus-gitlab/support/dependency_decisions.yml --format=json --columns name version licenses texts notice --save=license.json

Output:

    LicenseFinder::GoModules: is active
LicenseFinder::Bundler: is active

Error:

    /usr/local/lib/ruby/gems/2.7.0/gems/bundler-2.3.15/lib/bundler/resolver.rb:271:in `block in verify_gemfile_dependencies_are_found!': Could not find gem 'gitlab-dangerfiles (~> 3.0)' in locally installed gems. (Bundler::GemNotFound)
	from /usr/local/lib/ruby/gems/2.7.0/gems/bundler-

What is the expected correct behavior?

Build should succeed.

Relevant logs

Relevant logs

bundle exec rake build:project output

[GitCache: registry] I | 2022-08-26T03:04:27+00:00 | Looking for cache tag: registry-a01564a93ea728fe0af6017952ba70469332579cbf17d502984d2f1b5ef8ffbf-3
     [Software: registry] I | 2022-08-26T03:04:32+00:00 | Could not restore from cache
   [GitFetcher: registry] I | 2022-08-26T03:04:32+00:00 | Cleaning existing clone
      [Builder: registry] I | 2022-08-26T03:04:32+00:00 | Starting build
      [Builder: registry] I | 2022-08-26T03:04:32+00:00 | Environment:
      [Builder: registry] I | 2022-08-26T03:04:32+00:00 |   BUILDTAGS="include_gcs include_oss"
      [Builder: registry] I | 2022-08-26T03:04:32+00:00 |   GOPATH="/var/cache/omnibus/src/registry"
      [Builder: registry] I | 2022-08-26T03:04:32+00:00 |   MAKE="gmake"
      [Builder: registry] I | 2022-08-26T03:04:32+00:00 | $ gmake build
      [Builder: registry] I | 2022-08-26T03:04:34+00:00 | Execute: `gmake build': 2.4446s
      [Builder: registry] I | 2022-08-26T03:04:34+00:00 | Environment:
      [Builder: registry] I | 2022-08-26T03:04:34+00:00 |   BUILDTAGS="include_gcs include_oss"
      [Builder: registry] I | 2022-08-26T03:04:34+00:00 |   GOPATH="/var/cache/omnibus/src/registry"
      [Builder: registry] I | 2022-08-26T03:04:34+00:00 |   MAKE="gmake"
      [Builder: registry] I | 2022-08-26T03:04:34+00:00 | $ gmake binaries
      [Builder: registry] I | 2022-08-26T03:04:37+00:00 | Execute: `gmake binaries': 2.7268s
      [Builder: registry] I | 2022-08-26T03:04:37+00:00 | move `/var/cache/omnibus/src/registry/src/github.com/docker/distribution/bin/*' to `/opt/gitlab/embedded/bin': 0.0008s
      [Builder: registry] I | 2022-08-26T03:04:37+00:00 | $ license_finder report --decisions-file=/omnibus-gitlab/support/dependency_decisions.yml --format=json --columns name version licenses texts notice --save=license.json
      [Builder: registry] W | 2022-08-26T03:04:38+00:00 | [1/2] Failed to execute command. Retrying in 10 seconds...
      [Builder: registry] I | 2022-08-26T03:04:48+00:00 | $ license_finder report --decisions-file=/omnibus-gitlab/support/dependency_decisions.yml --format=json --columns name version licenses texts notice --save=license.json
      [Builder: registry] W | 2022-08-26T03:04:49+00:00 | [2/2] Failed to execute command. Retrying in 20 seconds...
      [Builder: registry] I | 2022-08-26T03:05:09+00:00 | $ license_finder report --decisions-file=/omnibus-gitlab/support/dependency_decisions.yml --format=json --columns name version licenses texts notice --save=license.json
      [Builder: registry] I | 2022-08-26T03:05:09+00:00 | Execute: `license_finder report --decisions-file=/omnibus-gitlab/support/dependency_decisions.yml --format=json --columns name version licenses texts notice --save=license.json': 32.6164s
      [Builder: registry] I | 2022-08-26T03:05:09+00:00 | Build registry: 37.791s
The following shell command exited with status 1:

    $ license_finder report --decisions-file=/omnibus-gitlab/support/dependency_decisions.yml --format=json --columns name version licenses texts notice --save=license.json

Output:

    LicenseFinder::GoModules: is active
LicenseFinder::Bundler: is active

Error:

    /usr/local/lib/ruby/gems/2.7.0/gems/bundler-2.3.15/lib/bundler/resolver.rb:271:in `block in verify_gemfile_dependencies_are_found!': Could not find gem 'gitlab-dangerfiles (~> 3.0)' in locally installed gems. (Bundler::GemNotFound)
	from /usr/local/lib/ruby/gems/2.7.0/gems/bundler-2.3.15/lib/bundler/resolver.rb:254:in `map!'
	from /usr/local/lib/ruby/gems/2.7.0/gems/bundler-2.3.15/lib/bundler/resolver.rb:254:in `verify_gemfile_dependencies_are_found!'
	from /usr/local/lib/ruby/gems/2.7.0/gems/bundler-2.3.15/lib/bundler/resolver.rb:50:in `start'
	from /usr/local/lib/ruby/gems/2.7.0/gems/bundler-2.3.15/lib/bundler/resolver.rb:24:in `resolve'
	from /usr/local/lib/ruby/gems/2.7.0/gems/bundler-2.3.15/lib/bundler/definition.rb:270:in `resolve'
	from /usr/local/lib/ruby/gems/2.7.0/gems/bundler-2.3.15/lib/bundler/definition.rb:473:in `materialize'
	from /usr/local/lib/ruby/gems/2.7.0/gems/bundler-2.3.15/lib/bundler/definition.rb:241:in `specs_for'
	from /usr/local/lib/ruby/gems/2.7.0/gems/license_finder-6.5.0/lib/license_finder/package_managers/bundler.rb:66:in `gem_details'
	from /usr/local/lib/ruby/gems/2.7.0/gems/license_finder-6.5.0/lib/license_finder/package_managers/bundler.rb:51:in `details'
	from /usr/local/lib/ruby/gems/2.7.0/gems/license_finder-6.5.0/lib/license_finder/package_managers/bundler.rb:16:in `current_packages'
	from /usr/local/lib/ruby/gems/2.7.0/gems/license_finder-6.5.0/lib/license_finder/package_manager.rb:101:in `current_packages_with_relations'
	from /usr/local/lib/ruby/gems/2.7.0/gems/license_finder-6.5.0/lib/license_finder/scanner.rb:36:in `each'
	from /usr/local/lib/ruby/gems/2.7.0/gems/license_finder-6.5.0/lib/license_finder/scanner.rb:36:in `flat_map'
	from /usr/local/lib/ruby/gems/2.7.0/gems/license_finder-6.5.0/lib/license_finder/scanner.rb:36:in `active_packages'
	from /usr/local/lib/ruby/gems/2.7.0/gems/license_finder-6.5.0/lib/license_finder/core.rb:83:in `current_packages'
	from /usr/local/lib/ruby/gems/2.7.0/gems/license_finder-6.5.0/lib/license_finder/core.rb:78:in `decision_applier'
	from /usr/local/lib/ruby/2.7.0/forwardable.rb:229:in `acknowledged'
	from /usr/local/lib/ruby/gems/2.7.0/gems/license_finder-6.5.0/lib/license_finder/license_aggregator.rb:51:in `block in aggregate_packages'
	from /usr/local/lib/ruby/gems/2.7.0/gems/license_finder-6.5.0/lib/license_finder/license_aggregator.rb:49:in `each'
	from /usr/local/lib/ruby/gems/2.7.0/gems/license_finder-6.5.0/lib/license_finder/license_aggregator.rb:49:in `flat_map'
	from /usr/local/lib/ruby/gems/2.7.0/gems/license_finder-6.5.0/lib/license_finder/license_aggregator.rb:49:in `aggregate_packages'
	from /usr/local/lib/ruby/gems/2.7.0/gems/license_finder-6.5.0/lib/license_finder/license_aggregator.rb:11:in `dependencies'
	from /usr/local/lib/ruby/gems/2.7.0/gems/license_finder-6.5.0/lib/license_finder/cli/main.rb:148:in `report'
	from /usr/local/lib/ruby/gems/2.7.0/gems/thor-1.0.1/lib/thor/command.rb:27:in `run'
	from /usr/local/lib/ruby/gems/2.7.0/gems/thor-1.0.1/lib/thor/invocation.rb:127:in `invoke_command'
	from /usr/local/lib/ruby/gems/2.7.0/gems/thor-1.0.1/lib/thor.rb:392:in `dispatch'
	from /usr/local/lib/ruby/gems/2.7.0/gems/thor-1.0.1/lib/thor/base.rb:485:in `start'
	from /usr/local/lib/ruby/gems/2.7.0/gems/license_finder-6.5.0/bin/license_finder:6:in `'
	from /usr/local/bin/license_finder:23:in `load'
	from /usr/local/bin/license_finder:23:in `'


/usr/local/lib/ruby/gems/2.7.0/bundler/gems/omnibus-e0dbfc250db7/lib/omnibus/util.rb:139:in `rescue in shellout!'
  /usr/local/lib/ruby/gems/2.7.0/bundler/gems/omnibus-e0dbfc250db7/lib/omnibus/util.rb:134:in `shellout!'
  /usr/local/lib/ruby/gems/2.7.0/bundler/gems/omnibus-e0dbfc250db7/lib/omnibus/builder.rb:911:in `shellout!'
  /usr/local/lib/ruby/gems/2.7.0/bundler/gems/omnibus-e0dbfc250db7/lib/omnibus/builder.rb:85:in `block in command'
  /usr/local/lib/ruby/gems/2.7.0/bundler/gems/omnibus-e0dbfc250db7/lib/omnibus/builder.rb:1101:in `instance_eval'
  /usr/local/lib/ruby/gems/2.7.0/bundler/gems/omnibus-e0dbfc250db7/lib/omnibus/builder.rb:1101:in `run'
  /usr/local/lib/ruby/gems/2.7.0/bundler/gems/omnibus-e0dbfc250db7/lib/omnibus/builder.rb:929:in `block (3 levels) in execute'
  /usr/local/lib/ruby/gems/2.7.0/bundler/gems/omnibus-e0dbfc250db7/lib/omnibus/builder.rb:951:in `with_retries'
  /usr/local/lib/ruby/gems/2.7.0/bundler/gems/omnibus-e0dbfc250db7/lib/omnibus/builder.rb:928:in `block (2 levels) in execute'
  /usr/local/lib/ruby/gems/2.7.0/bundler/gems/omnibus-e0dbfc250db7/lib/omnibus/instrumentation.rb:23:in `measure'
  /usr/local/lib/ruby/gems/2.7.0/bundler/gems/omnibus-e0dbfc250db7/lib/omnibus/builder.rb:927:in `block in execute'
  /usr/local/lib/ruby/gems/2.7.0/bundler/gems/omnibus-e0dbfc250db7/lib/omnibus/builder.rb:1002:in `with_clean_env'
  /usr/local/lib/ruby/gems/2.7.0/bundler/gems/omnibus-e0dbfc250db7/lib/omnibus/builder.rb:926:in `execute'
  /usr/local/lib/ruby/gems/2.7.0/bundler/gems/omnibus-e0dbfc250db7/lib/omnibus/builder.rb:818:in `block (2 levels) in build'
  /usr/local/lib/ruby/gems/2.7.0/bundler/gems/omnibus-e0dbfc250db7/lib/omnibus/builder.rb:817:in `each'
  /usr/local/lib/ruby/gems/2.7.0/bundler/gems/omnibus-e0dbfc250db7/lib/omnibus/builder.rb:817:in `block in build'
  /usr/local/lib/ruby/gems/2.7.0/bundler/gems/omnibus-e0dbfc250db7/lib/omnibus/instrumentation.rb:23:in `measure'
  /usr/local/lib/ruby/gems/2.7.0/bundler/gems/omnibus-e0dbfc250db7/lib/omnibus/builder.rb:816:in `build'
  /usr/local/lib/ruby/gems/2.7.0/bundler/gems/omnibus-e0dbfc250db7/lib/omnibus/software.rb:1271:in `execute_build'
  /usr/local/lib/ruby/gems/2.7.0/bundler/gems/omnibus-e0dbfc250db7/lib/omnibus/software.rb:1154:in `build_me'
  /usr/local/lib/ruby/gems/2.7.0/bundler/gems/omnibus-e0dbfc250db7/lib/omnibus/project.rb:1117:in `block (2 levels) in build'
  /usr/local/lib/ruby/gems/2.7.0/bundler/gems/omnibus-e0dbfc250db7/lib/omnibus/project.rb:1116:in `each'
  /usr/local/lib/ruby/gems/2.7.0/bundler/gems/omnibus-e0dbfc250db7/lib/omnibus/project.rb:1116:in `block in build'
  /usr/local/lib/ruby/gems/2.7.0/bundler/gems/omnibus-e0dbfc250db7/lib/omnibus/licensing.rb:59:in `block in create_incrementally'
  /usr/local/lib/ruby/gems/2.7.0/bundler/gems/omnibus-e0dbfc250db7/lib/omnibus/licensing.rb:54:in `tap'
  /usr/local/lib/ruby/gems/2.7.0/bundler/gems/omnibus-e0dbfc250db7/lib/omnibus/licensing.rb:54:in `create_incrementally'
  /usr/local/lib/ruby/gems/2.7.0/bundler/gems/omnibus-e0dbfc250db7/lib/omnibus/project.rb:1115:in `build'
  /usr/local/lib/ruby/gems/2.7.0/bundler/gems/omnibus-e0dbfc250db7/lib/omnibus/cli.rb:89:in `build'
  /usr/local/lib/ruby/gems/2.7.0/gems/thor-1.2.1/lib/thor/command.rb:27:in `run'
  /usr/local/lib/ruby/gems/2.7.0/gems/thor-1.2.1/lib/thor/invocation.rb:127:in `invoke_command'
  /usr/local/lib/ruby/gems/2.7.0/gems/thor-1.2.1/lib/thor.rb:392:in `dispatch'
  /usr/local/lib/ruby/gems/2.7.0/bundler/gems/omnibus-e0dbfc250db7/lib/omnibus/cli/base.rb:33:in `dispatch'
  /usr/local/lib/ruby/gems/2.7.0/gems/thor-1.2.1/lib/thor/base.rb:485:in `start'
  /usr/local/lib/ruby/gems/2.7.0/bundler/gems/omnibus-e0dbfc250db7/lib/omnibus/cli.rb:42:in `execute!'
  /usr/local/lib/ruby/gems/2.7.0/bundler/gems/omnibus-e0dbfc250db7/bin/omnibus:16:in `'
  /usr/local/lib/ruby/gems/2.7.0/bin/omnibus:23:in `load'
  /usr/local/lib/ruby/gems/2.7.0/bin/omnibus:23:in `'
  /usr/local/lib/ruby/gems/2.7.0/gems/bundler-2.3.15/lib/bundler/cli/exec.rb:58:in `load'
  /usr/local/lib/ruby/gems/2.7.0/gems/bundler-2.3.15/lib/bundler/cli/exec.rb:58:in `kernel_load'
  /usr/local/lib/ruby/gems/2.7.0/gems/bundler-2.3.15/lib/bundler/cli/exec.rb:23:in `run'
  /usr/local/lib/ruby/gems/2.7.0/gems/bundler-2.3.15/lib/bundler/cli.rb:483:in `exec'
  /usr/local/lib/ruby/gems/2.7.0/gems/bundler-2.3.15/lib/bundler/vendor/thor/lib/thor/command.rb:27:in `run'
  /usr/local/lib/ruby/gems/2.7.0/gems/bundler-2.3.15/lib/bundler/vendor/thor/lib/thor/invocation.rb:127:in `invoke_command'
  /usr/local/lib/ruby/gems/2.7.0/gems/bundler-2.3.15/lib/bundler/vendor/thor/lib/thor.rb:392:in `dispatch'
  /usr/local/lib/ruby/gems/2.7.0/gems/bundler-2.3.15/lib/bundler/cli.rb:31:in `dispatch'
  /usr/local/lib/ruby/gems/2.7.0/gems/bundler-2.3.15/lib/bundler/vendor/thor/lib/thor/base.rb:485:in `start'
  /usr/local/lib/ruby/gems/2.7.0/gems/bundler-2.3.15/lib/bundler/cli.rb:25:in `start'
  /usr/local/lib/ruby/gems/2.7.0/gems/bundler-2.3.15/exe/bundle:48:in `block in '
  /usr/local/lib/ruby/gems/2.7.0/gems/bundler-2.3.15/lib/bundler/friendly_errors.rb:117:in `with_friendly_errors'
  /usr/local/lib/ruby/gems/2.7.0/gems/bundler-2.3.15/exe/bundle:36:in `'
  /usr/local/bin/bundle:23:in `load'
  /usr/local/bin/bundle:23:in `'
rake aborted!

bundle install output

Don't run Bundler as root. Bundler can ask for sudo if it is needed, and installing your bundle as root will break this application for all non-root users on this machine.
Fetching https://gitlab.com/gitlab-org/omnibus.git
Fetching gem metadata from https://packagecloud.io/cinc-project/stable/...
Fetching gem metadata from https://rubygems.org/......
Fetching rake 13.0.6
Installing rake 13.0.6
Fetching abstract_type 0.0.7
Fetching concurrent-ruby 1.1.8
Fetching zeitwerk 2.4.2
Fetching awesome_print 1.9.2
Fetching jmespath 1.6.1
Fetching binding_ninja 0.2.3
Fetching builder 3.2.4
Using bundler 2.3.15
Fetching byebug 9.0.5
Fetching minitest 5.14.4
Fetching ice_nine 0.11.2
Fetching thread_safe 0.3.6
Fetching public_suffix 4.0.7
Fetching ast 2.4.2
Fetching aws-partitions 1.584.0
Fetching aws-eventstream 1.2.0
Fetching fuzzyurl 0.9.0
Installing minitest 5.14.4
Installing abstract_type 0.0.7
Installing builder 3.2.4
Installing aws-eventstream 1.2.0
Installing ice_nine 0.11.2
Installing ast 2.4.2
Installing thread_safe 0.3.6
Installing zeitwerk 2.4.2
Installing byebug 9.0.5 with native extensions
Installing public_suffix 4.0.7
Installing jmespath 1.6.1
Installing awesome_print 1.9.2
Installing fuzzyurl 0.9.0
Installing binding_ninja 0.2.3 with native extensions
Installing aws-partitions 1.584.0
Installing concurrent-ruby 1.1.8
Using tomlrb 1.3.0
Fetching mixlib-log 3.0.9
Fetching chef-vault 4.1.10
Fetching libyajl2 2.1.0
Fetching hashie 4.1.0
Fetching rack 2.2.4
Fetching uuidtools 2.2.0
Installing mixlib-log 3.0.9
Fetching webrick 1.7.0
Fetching ffi 1.15.5
Fetching diff-lcs 1.3
Fetching erubis 2.7.0
Fetching iniparse 1.5.0
Installing uuidtools 2.2.0
Installing hashie 4.1.0
Installing webrick 1.7.0
Installing libyajl2 2.1.0 with native extensions
Fetching faraday-em_http 1.0.0
Fetching faraday-em_synchrony 1.0.0
Installing rack 2.2.4
Installing erubis 2.7.0
Installing diff-lcs 1.3
Installing iniparse 1.5.0
Installing chef-vault 4.1.10
Fetching faraday-excon 1.1.0
Installing ffi 1.15.5 with native extensions
Fetching faraday-net_http 1.0.1
Installing faraday-em_http 1.0.0
Fetching faraday-net_http_persistent 1.2.0
Fetching multipart-post 2.1.1
Fetching ruby2_keywords 0.0.5
Fetching tty-color 0.6.0
Installing faraday-em_synchrony 1.0.0
Installing faraday-net_http 1.0.1
Fetching strings-ansi 0.2.0
Fetching unicode-display_width 1.8.0
Installing faraday-excon 1.1.0
Installing multipart-post 2.1.1
Installing ruby2_keywords 0.0.5
Installing faraday-net_http_persistent 1.2.0
Fetching unicode_utils 1.4.0
Installing tty-color 0.6.0
Fetching tty-cursor 0.7.1
Fetching tty-screen 0.8.1
Installing unicode-display_width 1.8.0
Fetching wisper 2.0.1
Fetching method_source 1.0.0
Installing strings-ansi 0.2.0
Installing tty-cursor 0.7.1
Fetching parallel 1.19.2
Installing method_source 1.0.0
Installing tty-screen 0.8.1
Fetching parslet 1.8.2
Fetching coderay 1.1.3
Fetching rspec-support 3.9.3
Using rubyzip 2.3.2
Fetching semverse 3.0.0
Installing parallel 1.19.2
Fetching sslshake 1.3.1
Fetching thor 1.2.1
Installing wisper 2.0.1
Installing semverse 3.0.0
Fetching json 2.6.1
Installing parslet 1.8.2
Installing coderay 1.1.3
Installing unicode_utils 1.4.0
Fetching net-ssh 6.1.0
Installing sslshake 1.3.1
Installing thor 1.2.1
Installing json 2.6.1 with native extensions
Fetching mixlib-authentication 3.0.10
Fetching mixlib-cli 2.1.8
Installing rspec-support 3.9.3
Fetching ipaddress 0.8.3
Installing net-ssh 6.1.0
Fetching plist 3.6.0
Fetching wmi-lite 1.0.7
Fetching proxifier 1.0.3
Installing mixlib-cli 2.1.8
Installing wmi-lite 1.0.7
Installing mixlib-authentication 3.0.10
Installing proxifier 1.0.3
Installing ipaddress 0.8.3
Installing plist 3.6.0
Fetching syslog-logger 1.6.8
Fetching erubi 1.11.0
Fetching rexml 3.2.4
Fetching httpclient 2.8.3
Fetching little-plugger 1.1.4
Fetching multi_json 1.15.0
Installing rexml 3.2.4
Fetching nori 2.6.0
Fetching rubyntlm 0.6.3
Fetching chef-cleanroom 1.0.4
Fetching minitar 0.9
Fetching molinillo 0.8.0
Installing little-plugger 1.1.4
Installing syslog-logger 1.6.8
Installing nori 2.6.0
Installing erubi 1.11.0
Installing httpclient 2.8.3
Installing rubyntlm 0.6.3
Installing multi_json 1.15.0
Fetching citrus 3.0.2
Installing chef-cleanroom 1.0.4
Installing minitar 0.9
Fetching equalizer 0.0.11
Installing molinillo 0.8.0
Fetching contracts 0.16.1
Fetching docile 1.4.0
Installing citrus 3.0.2
Fetching excon 0.76.0
Fetching unf_ext 0.0.7.5
Installing equalizer 0.0.11
Fetching mime-types-data 3.2020.0512
Fetching multi_xml 0.6.0
Fetching rainbow 2.2.2
Installing docile 1.4.0
Fetching regexp_parser 2.1.1
Installing multi_xml 0.6.0
Installing unf_ext 0.0.7.5 with native extensions
Fetching ruby-progressbar 1.11.0
Fetching http-form_data 2.1.1
Fetching http_parser.rb 0.6.0
Installing contracts 0.16.1
Installing excon 0.76.0
Fetching iostruct 0.0.4
Installing rainbow 2.2.2 with native extensions
Fetching knapsack 1.17.1
Fetching mixlib-versioning 1.2.12
Installing http-form_data 2.1.1
Installing regexp_parser 2.1.1
Installing mime-types-data 3.2020.0512
Fetching zhexdump 0.0.2
Installing ruby-progressbar 1.11.0
Installing http_parser.rb 0.6.0 with native extensions
Fetching omnibus-ctl 0.3.6
Installing iostruct 0.0.4
Installing zhexdump 0.0.2
Installing knapsack 1.17.1
Installing mixlib-versioning 1.2.12
Fetching procto 0.0.3
Fetching simplecov-html 0.12.3
Installing omnibus-ctl 0.3.6
Fetching simplecov_json_formatter 0.1.4
Fetching yard 0.9.26
Fetching mixlib-config 3.0.9
Installing procto 0.0.3
Fetching aws-sigv4 1.5.0
Installing simplecov-html 0.12.3
Fetching parser 3.1.1.0
Fetching addressable 2.8.0
Installing simplecov_json_formatter 0.1.4
Installing aws-sigv4 1.5.0
Fetching memoizable 0.4.2
Installing mixlib-config 3.0.9
Installing addressable 2.8.0
Fetching i18n 1.8.10
Fetching tzinfo 2.0.4
Installing yard 0.9.26
Fetching chef-utils 17.10.0
Fetching mixlib-archive 1.1.7
Installing memoizable 0.4.2
Installing tzinfo 2.0.4
Fetching faraday 1.4.3
Installing parser 3.1.1.0
Fetching pastel 0.8.0
Installing i18n 1.8.10
Installing mixlib-archive 1.1.7
Fetching terminal-table 1.8.0
Installing pastel 0.8.0
Installing faraday 1.4.3
Fetching tty-reader 0.9.0
Installing terminal-table 1.8.0
Fetching rspec-core 3.9.2
Fetching rspec-expectations 3.9.2
Fetching rspec-mocks 3.9.1
Installing tty-reader 0.9.0
Installing chef-utils 17.10.0
Fetching pry 0.14.1
Fetching strings 0.2.1
Installing rspec-core 3.9.2
Installing rspec-expectations 3.9.2
Installing pry 0.14.1
Installing strings 0.2.1
Fetching net-scp 3.0.0
Installing rspec-mocks 3.9.1
Fetching net-sftp 3.0.0
Fetching fauxhai-ng 8.7.0
Fetching gyoku 1.4.0
Installing net-scp 3.0.0
Installing net-sftp 3.0.0
Fetching logging 2.3.0
Fetching solve 4.0.4
Fetching ffi-yajl 2.4.0
Installing gyoku 1.4.0
Fetching toml-rb 2.2.0
Installing logging 2.3.0
Fetching mime-types 3.3.1
Fetching docker-api 2.0.0
Installing solve 4.0.4
Installing ffi-yajl 2.4.0 with native extensions
Installing fauxhai-ng 8.7.0
Installing toml-rb 2.2.0
Fetching aws-sdk-core 3.130.2
Fetching vault 0.16.0
Installing docker-api 2.0.0
Installing mime-types 3.3.1
Fetching cookbook-omnifetch 0.11.1
Installing vault 0.16.0
Fetching simplecov 0.21.2
Fetching adamantium 0.2.0
Installing aws-sdk-core 3.130.2
Installing cookbook-omnifetch 0.11.1
Fetching activesupport 6.1.3.1
Fetching tty-prompt 0.23.1
Fetching mixlib-shellout 3.2.7
Installing adamantium 0.2.0
Installing simplecov 0.21.2
Installing mixlib-shellout 3.2.7
Installing tty-prompt 0.23.1
Installing activesupport 6.1.3.1
Fetching faraday_middleware 1.2.0
Fetching tty-box 0.7.0
Fetching tty-table 0.12.0
Installing tty-box 0.7.0
Fetching rspec_junit_formatter 0.4.1
Installing faraday_middleware 1.2.0
Installing tty-table 0.12.0
Installing rspec_junit_formatter 0.4.1
Fetching rspec 3.9.0
Fetching rspec-its 1.3.0
Fetching rubocop-ast 1.4.1
Installing rspec 3.9.0
Fetching httparty 0.18.1
Fetching chef-config 17.10.0
Fetching simplecov-cobertura 2.1.0
Fetching concord 0.1.5
Installing rspec-its 1.3.0
Fetching license-acceptance 2.1.13
Fetching unf 0.1.4
Installing rubocop-ast 1.4.1
Installing simplecov-cobertura 2.1.0
Installing httparty 0.18.1
Installing license-acceptance 2.1.13
Installing concord 0.1.5
Installing unf 0.1.4
Fetching fantaskspec 1.2.0
Fetching pedump 0.6.5
Installing chef-config 17.10.0
Installing fantaskspec 1.2.0
Fetching domain_name 0.5.20170404
Fetching unparser 0.4.7
Fetching aws-sdk-ec2 1.197.0
Fetching aws-sdk-kms 1.48.0
Fetching aws-sdk-secretsmanager 1.60.0
Fetching aws-sdk-marketplacecatalog 1.7.0
Fetching rubocop 0.93.1
Installing domain_name 0.5.20170404
Fetching chef-telemetry 1.1.1
Installing unparser 0.4.7
Installing pedump 0.6.5
Fetching gitlab 4.17.0
Installing aws-sdk-kms 1.48.0
Installing aws-sdk-marketplacecatalog 1.7.0
Installing chef-telemetry 1.1.1
Installing aws-sdk-secretsmanager 1.60.0
Installing rubocop 0.93.1
Fetching http-cookie 1.0.3
Installing gitlab 4.17.0
Installing aws-sdk-ec2 1.197.0
Fetching aws-sdk-s3 1.103.0
Installing http-cookie 1.0.3
Fetching proc_to_ast 0.1.0
Installing aws-sdk-s3 1.103.0
Installing proc_to_ast 0.1.0
Fetching http 4.1.1
Fetching rspec-parameterized 0.4.2
Installing http 4.1.1
Installing rspec-parameterized 0.4.2
Fetching rubocop-gitlab-security 0.1.1
Fetching rubocop-rspec 1.44.1
Fetching rubocop-performance 1.9.2
Fetching rubocop-rails 2.9.1
Installing rubocop-performance 1.9.2
Installing rubocop-gitlab-security 0.1.1
Installing rubocop-rspec 1.44.1
Installing rubocop-rails 2.9.1
Fetching gitlab-styles 6.1.0
Installing gitlab-styles 6.1.0
Fetching ffi-libarchive 1.1.3
Fetching corefoundation 0.3.13
Fetching gssapi 1.3.1
Installing gssapi 1.3.1
Installing corefoundation 0.3.13
Installing ffi-libarchive 1.1.3
Fetching winrm 2.3.6
Installing winrm 2.3.6
Fetching winrm-fs 1.3.5
Installing winrm-fs 1.3.5
Fetching winrm-elevated 1.2.3
Installing winrm-elevated 1.2.3
Fetching train-winrm 0.2.13
Installing train-winrm 0.2.13
Fetching train-core 3.9.2
Installing train-core 3.9.2
Fetching inspec-core 4.56.20
Installing inspec-core 4.56.20
Fetching chef-zero 15.0.11
Fetching ohai 17.9.0
Installing ohai 17.9.0
Using omnibus 8.2.1 from https://gitlab.com/gitlab-org/omnibus.git (at 8.2.1.9@e0dbfc2)
Installing chef-zero 15.0.11
Fetching chef 17.10.0
Installing chef 17.10.0
Fetching chef-cli 5.6.1
Installing chef-cli 5.6.1
Fetching chefspec 9.3.3
Installing chefspec 9.3.3
Bundle complete! 30 Gemfile dependencies, 179 gems now installed.
Use `bundle info [gemname]` to see where a bundled gem is installed.
Post-install message from minitar:
The `minitar` executable is no longer bundled with `minitar`. If you are
expecting this executable, make sure you also install `minitar-cli`.
Post-install message from contracts:

    0.16.x will be the supporting Ruby 2.x and be feature frozen (only fixes will be released)
    For Ruby 3.x use 0.17.x or later (might not be released yet)
  Post-install message from httparty:
When you HTTParty, you must party hard!

Details of package version

N/A

Environment details

Docker images:

• registry.gitlab.com/gitlab-org/gitlab/gitlab-assets-ee master b6e589e85ad3
• registry.gitlab.com/gitlab-org/gitlab-omnibus-builder/debian_11 3.5.0 fae5bd810ad7

Configuration details

See Steps to reproduce

added typebug label

assigned to @apatterson2

changed the description

added groupdistribution label

The Gemfile shows that gitlab-dangerfiles is optional:

group :danger, optional: true do
  gem 'gitlab-dangerfiles', '~> 3.0', require: false
end

If the commands:

bundle config set --local with name danger
bundle install

are used, the build completes normally.

One work-around is to run:

export BUNDLE_WITH=danger

before running bundle install which has the same effect as using bundle config set --local with name danger.

The license_finder utility should probably not checking licenses on ruby gems for a golang project like registry. @twk3 pointed out that this can be disabled using:

license_finder report --enabled-package-managers godep gomodules ...

but that requires a newer version of license_finder. Other non-ruby projects may have the same issue, e.g., prometheus.

marked this issue as related to gitlab-omnibus-builder#49 (closed)

added sectioncore platform label

added devopssystems group::distributionbuild labels

marked this issue as related to #49 (closed)

removed the relation with #49 (closed)

removed the relation with gitlab-omnibus-builder#49 (closed)

marked this issue as related to gitlab-omnibus-builder#49 (closed)

mentioned in commit gitlab-omnibus-builder@4701882c

mentioned in commit gitlab@6bb17812

created branch 6998-building-an-omnibus-gitlab-package-locally-fails-when-running-license_finder-report to address this issue

mentioned in merge request !6318 (merged)

When using the 6.14.2 version of license_finder, we get the following build errors:

Problematic softwares: 9
./api -  - unknown - Unknown license
./sdk -  - unknown - Unknown license
github.com/circonus-labs/circonus-gometrics - v2.3.1 - unknown - Unknown license
github.com/circonus-labs/circonusllhist - v0.1.3 - unknown - Unknown license
github.com/gorhill/cronexpr - v0.0.0-20180427100037-88b0669f7d75 - unknown - Unknown license
github.com/rcrowley/go-metrics - v0.0.0-20200313005456-10cdbea86bc0 - unknown - Unknown license
github.com/tj/go-redirects - v0.0.0-20180508180010-5c02ead0bbc5 - unknown - Unknown license
github.com/alicebob/gopher-json - v0.0.0-20200520072559-a9ecdc9d1d3a - unknown - Unknown license
github.com/pavelmemory/go-license-detector/v4 - v4.3.1-0.20220801101717-a7c9e28533cf - unknown - Unknown license

mentioned in commit gitlab@d153bb96

This seems to have been broken in license_finder 6.6.2 and later. Here are some relevant excerpts from the 6.6.2 changelog:

Added

• Support for Go modules projects outside of the current working directory - 56b3bec6

Changed

• Change Go modules to only report imported packages (as with other Go package managers) - 34361fda and dffae4ab
• Detect Go modules based on go.mod (instead of go.sum) - 667f6be7

marked this issue as blocked by #7083 (closed)

mentioned in merge request !6323 (merged)

mentioned in commit gitlab-omnibus-builder@c129e447

mentioned in issue gitlab-org/quality/pipeline-triage#164 (closed)

The change for registry was merged with !6368 (merged). We should probably apply the same change to other pure go dependencies.

mentioned in commit 81748b9d

mentioned in commit bd5bc95c

closed with merge request !6318 (merged)

mentioned in commit a0f1b005