Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

ruby tools build fails due to bundler upstream issue #3519

Open
7 tasks
noraj opened this issue Sep 21, 2022 · 8 comments
Open
7 tasks

ruby tools build fails due to bundler upstream issue #3519

noraj opened this issue Sep 21, 2022 · 8 comments
Labels
external::upstream-issue For issues that were created to track upstream issues lang::ruby type::bug Valid bug

Comments

@noraj noraj added type::bug Valid bug external::upstream-issue For issues that were created to track upstream issues labels Sep 21, 2022
@skiss0

This comment was marked as spam.

@noraj noraj changed the title cmsscanner: build fails ruby tools build fails due to bundler upstream issue Sep 21, 2022
@Szewcson
Copy link

also dradis-ce

@noraj
Copy link
Contributor Author

noraj commented Oct 12, 2022

vcsmap

ba-dev -e 'bash -h' -p vcsmap-47.3889964-12-any.pkg.tar.zst

RuntimeError: failed to get urandom
  /usr/lib/ruby/3.0.0/securerandom.rb:102:in `urandom'
  /usr/lib/ruby/3.0.0/securerandom.rb:102:in `singleton class'
  /usr/lib/ruby/3.0.0/securerandom.rb:69:in `<module:SecureRandom>'
  /usr/lib/ruby/3.0.0/securerandom.rb:68:in `<top (required)>'
  <internal:/usr/lib/ruby/3.0.0/rubygems/core_ext/kernel_require.rb>:85:in `require'
  <internal:/usr/lib/ruby/3.0.0/rubygems/core_ext/kernel_require.rb>:85:in `require'
  /usr/lib/ruby/gems/3.0.0/gems/bundler-2.3.22/lib/bundler/fetcher.rb:5:in `<top (required)>'
  <internal:/usr/lib/ruby/3.0.0/rubygems/core_ext/kernel_require.rb>:85:in `require'
  <internal:/usr/lib/ruby/3.0.0/rubygems/core_ext/kernel_require.rb>:85:in `require'
  /usr/lib/ruby/gems/3.0.0/gems/bundler-2.3.22/lib/bundler/cli/install.rb:50:in `run'
  /usr/lib/ruby/gems/3.0.0/gems/bundler-2.3.22/lib/bundler/cli.rb:257:in `block in install'
  /usr/lib/ruby/gems/3.0.0/gems/bundler-2.3.22/lib/bundler/settings.rb:131:in `temporary'
  /usr/lib/ruby/gems/3.0.0/gems/bundler-2.3.22/lib/bundler/cli.rb:256:in `install'
  /usr/lib/ruby/gems/3.0.0/gems/bundler-2.3.22/lib/bundler/vendor/thor/lib/thor/command.rb:27:in `run'
  /usr/lib/ruby/gems/3.0.0/gems/bundler-2.3.22/lib/bundler/vendor/thor/lib/thor/invocation.rb:127:in `invoke_command'
  /usr/lib/ruby/gems/3.0.0/gems/bundler-2.3.22/lib/bundler/vendor/thor/lib/thor.rb:392:in `dispatch'
  /usr/lib/ruby/gems/3.0.0/gems/bundler-2.3.22/lib/bundler/cli.rb:31:in `dispatch'
  /usr/lib/ruby/gems/3.0.0/gems/bundler-2.3.22/lib/bundler/vendor/thor/lib/thor/base.rb:485:in `start'
  /usr/lib/ruby/gems/3.0.0/gems/bundler-2.3.22/lib/bundler/cli.rb:25:in `start'
  /usr/lib/ruby/gems/3.0.0/gems/bundler-2.3.22/exe/bundle:48:in `block in <top (required)>'
  /usr/lib/ruby/gems/3.0.0/gems/bundler-2.3.22/lib/bundler/friendly_errors.rb:120:in `with_friendly_errors'
  /usr/lib/ruby/gems/3.0.0/gems/bundler-2.3.22/exe/bundle:36:in `<top (required)>'
  /usr/bin/bundle:25:in `load'
  /usr/bin/bundle:25:in `<main>'

Environment

Bundler       2.3.22
  Platforms   ruby, x86_64-linux
Ruby          3.0.4p208 (2022-04-12 revision 3fa771ddedac25560be57f4055f1767e6c810f58) [x86_64-linux]
  Full Path   /usr/bin/ruby
  Config Dir  /etc
RubyGems      3.3.19
  Gem Home    /usr/lib/ruby/gems/3.0.0
  Gem Path    /root/.local/share/gem/ruby/3.0.0:/usr/lib/ruby/gems/3.0.0
  User Home   /root
  User Path   /root/.local/share/gem/ruby/3.0.0
  Bin Dir     /usr/bin
OpenSSL
  Compiled    OpenSSL 1.1.1q  5 Jul 2022
  Loaded      OpenSSL 1.1.1q  5 Jul 2022
  Cert File   /etc/ssl/cert.pem
  Cert Dir    /etc/ssl/certs
Tools
  Git         2.37.3
  RVM         not installed
  rbenv       not installed
  chruby      not installed

Bundler Build Metadata

Built At          2022-09-12
Git SHA           44fb4c9ef
Released Version  true

Bundler settings

build.nokogiri
  Set for your local app (/usr/share/cmsscanner/.bundle/config): "--use-system-libraries"
path
  Set for your local app (/usr/share/cmsscanner/.bundle/config): "vendor/bundle"

Gemfile

Gemfile

# frozen_string_literal: true

source 'https://rubygems.org'
gemspec

Gemfile.lock

<No /usr/share/cmsscanner/Gemfile.lock found>

Gemspecs

cms_scanner.gemspec

lib = File.expand_path('../lib', __FILE__)
$LOAD_PATH.unshift(lib) unless $LOAD_PATH.include?(lib)

require 'cms_scanner/version'

Gem::Specification.new do |s|
  s.name                  = 'cms_scanner'
  s.version               = CMSScanner::VERSION
  s.platform              = Gem::Platform::RUBY
  s.required_ruby_version = '>= 2.5'
  s.authors               = ['WPScanTeam']
  s.email                 = ['contact@wpscan.com']
  s.summary               = 'CMS Scanner Framework (experimental)'
  s.description           = 'Framework to provide an easy way to implement CMS Scanners'
  s.homepage              = 'https://github.com/wpscanteam/CMSScanner'
  s.license               = 'MIT'

  s.files                 = Dir.glob('lib/**/*') + Dir.glob('app/**/*') + %w[LICENSE README.md]
  s.test_files            = []
  s.require_paths         = ['lib']

  s.add_dependency 'ethon', '>= 0.14', '< 0.16' # https://github.com/typhoeus/ethon/issues/185
  s.add_dependency 'get_process_mem', '~> 0.2.5'
  s.add_dependency 'nokogiri', '>= 1.11.4', '< 1.14.0'
  s.add_dependency 'opt_parse_validator', '~> 1.9.5'
  s.add_dependency 'public_suffix', '>= 4.0.3', '< 5.1.0'
  s.add_dependency 'ruby-progressbar', '>= 1.10', '< 1.12'
  s.add_dependency 'typhoeus', '>= 1.3', '< 1.5'
  s.add_dependency 'xmlrpc', '~> 0.3'
  s.add_dependency 'yajl-ruby', '~> 1.4.1' # Better JSON parser regarding memory usage

  s.add_dependency 'sys-proctable', '~> 1.2.2' # Required by get_process_mem for Windows OS.

  s.add_development_dependency 'bundler',             '>= 1.6'
  s.add_development_dependency 'rake',                '~> 13.0'
  s.add_development_dependency 'rspec',               '~> 3.11.0'
  s.add_development_dependency 'rspec-its',           '~> 1.3.0'
  s.add_development_dependency 'rubocop',             '~> 1.26.0'
  s.add_development_dependency 'rubocop-performance', '~> 1.13.0'
  s.add_development_dependency 'simplecov',           '~> 0.21.0'
  s.add_development_dependency 'simplecov-lcov',      '~> 0.8.0'
  s.add_development_dependency 'webmock',             '~> 3.17.0'
end

@noraj
Copy link
Contributor Author

noraj commented Oct 12, 2022

wordpress-exploit-framework

ba-dev -e 'wordpress-exploit-framework -h' -p wordpress-exploit-framework-907.e55ded4-6-any.pkg.tar.zst

RuntimeError: failed to get urandom
  /usr/lib/ruby/3.0.0/securerandom.rb:102:in `urandom'
  /usr/lib/ruby/3.0.0/securerandom.rb:102:in `singleton class'
  /usr/lib/ruby/3.0.0/securerandom.rb:69:in `<module:SecureRandom>'
  /usr/lib/ruby/3.0.0/securerandom.rb:68:in `<top (required)>'
  <internal:/usr/lib/ruby/3.0.0/rubygems/core_ext/kernel_require.rb>:85:in `require'
  <internal:/usr/lib/ruby/3.0.0/rubygems/core_ext/kernel_require.rb>:85:in `require'
  /usr/lib/ruby/3.0.0/resolv.rb:8:in `<top (required)>'
  <internal:/usr/lib/ruby/3.0.0/rubygems/core_ext/kernel_require.rb>:85:in `require'
  <internal:/usr/lib/ruby/3.0.0/rubygems/core_ext/kernel_require.rb>:85:in `require'
  /usr/lib/ruby/3.0.0/net/http.rb:25:in `<top (required)>'
  <internal:/usr/lib/ruby/3.0.0/rubygems/core_ext/kernel_require.rb>:85:in `require'
  <internal:/usr/lib/ruby/3.0.0/rubygems/core_ext/kernel_require.rb>:85:in `require'
  /usr/lib/ruby/3.0.0/bundler/vendor/net-http-persistent/lib/net/http/persistent.rb:1:in `<top (required)>'
  /usr/lib/ruby/3.0.0/bundler/vendored_persistent.rb:11:in `require_relative'
  /usr/lib/ruby/3.0.0/bundler/vendored_persistent.rb:11:in `<top (required)>'
  /usr/lib/ruby/3.0.0/bundler/fetcher.rb:3:in `require_relative'
  /usr/lib/ruby/3.0.0/bundler/fetcher.rb:3:in `<top (required)>'
  <internal:/usr/lib/ruby/3.0.0/rubygems/core_ext/kernel_require.rb>:85:in `require'
  <internal:/usr/lib/ruby/3.0.0/rubygems/core_ext/kernel_require.rb>:85:in `require'
  /usr/lib/ruby/3.0.0/bundler/cli/install.rb:50:in `run'
  /usr/lib/ruby/3.0.0/bundler/cli.rb:257:in `block in install'
  /usr/lib/ruby/3.0.0/bundler/settings.rb:131:in `temporary'
  /usr/lib/ruby/3.0.0/bundler/cli.rb:256:in `install'
  /usr/lib/ruby/3.0.0/bundler/vendor/thor/lib/thor/command.rb:27:in `run'
  /usr/lib/ruby/3.0.0/bundler/vendor/thor/lib/thor/invocation.rb:127:in `invoke_command'
  /usr/lib/ruby/3.0.0/bundler/vendor/thor/lib/thor.rb:392:in `dispatch'
  /usr/lib/ruby/3.0.0/bundler/cli.rb:31:in `dispatch'
  /usr/lib/ruby/3.0.0/bundler/vendor/thor/lib/thor/base.rb:485:in `start'
  /usr/lib/ruby/3.0.0/bundler/cli.rb:25:in `start'
  /usr/lib/ruby/gems/3.0.0/gems/bundler-2.3.23/exe/bundle:48:in `block in <top (required)>'
  /usr/lib/ruby/3.0.0/bundler/friendly_errors.rb:120:in `with_friendly_errors'
  /usr/lib/ruby/gems/3.0.0/gems/bundler-2.3.23/exe/bundle:36:in `<top (required)>'
  /usr/bin/bundle:25:in `load'
  /usr/bin/bundle:25:in `<main>'

Environment

Bundler       2.3.23
  Platforms   ruby, x86_64-linux
Ruby          3.0.4p208 (2022-04-12 revision 3fa771ddedac25560be57f4055f1767e6c810f58) [x86_64-linux]
  Full Path   /usr/bin/ruby
  Config Dir  /etc
RubyGems      3.3.23
  Gem Home    /usr/lib/ruby/gems/3.0.0
  Gem Path    /root/.local/share/gem/ruby/3.0.0:/usr/lib/ruby/gems/3.0.0
  User Home   /root
  User Path   /root/.local/share/gem/ruby/3.0.0
  Bin Dir     /usr/bin
OpenSSL
  Compiled    OpenSSL 1.1.1q  5 Jul 2022
  Loaded      OpenSSL 1.1.1q  5 Jul 2022
  Cert File   /etc/ssl/cert.pem
  Cert Dir    /etc/ssl/certs
Tools
  Git         2.38.0
  RVM         not installed
  rbenv       not installed
  chruby      not installed

Bundler Build Metadata

Built At          2022-10-08
Git SHA           unknown
Released Version  true

Bundler settings

build.nokogiri
  Set for your local app (/usr/share/wordpress-exploit-framework/.bundle/config): "--use-system-libraries"
path
  Set for your local app (/usr/share/wordpress-exploit-framework/.bundle/config): "vendor/bundle"

Gemfile

Gemfile

# frozen_string_literal: true

source 'https://rubygems.org'
gemspec

Gemfile.lock

<No /usr/share/wordpress-exploit-framework/Gemfile.lock found>

Gemspecs

wpxf.gemspec

# frozen_string_literal: true

Gem::Specification.new do |s|
  s.name = 'wpxf'
  s.version = '2.0.1'
  s.date = '2018-10-06'
  s.summary = 'WordPress Exploit Framework'
  s.description = 'A Ruby framework designed to aid in the penetration testing of WordPress systems'
  s.authors = ['rastating']
  s.email = 'robert.carr@owasp.org'
  s.files = %w[lib db data bin].map { |d| Dir["#{d}/**/*"] }.flatten + ['wpxf.gemspec']
  s.homepage = 'https://github.com/rastating/wordpress-exploit-framework'
  s.license = 'GPL-3.0'
  s.executables << 'wpxf'
  s.required_ruby_version = '>= 2.4.4'

  s.add_dependency 'colorize', '~> 0.8'
  s.add_dependency 'mime-types', '~> 3.2'
  s.add_dependency 'nokogiri', '~> 1.8'
  s.add_dependency 'require_all', '~> 2.0'
  s.add_dependency 'rubyzip', '~> 1.2'
  s.add_dependency 'sequel', '~> 5.13'
  s.add_dependency 'slop', '~> 4.6'
  s.add_dependency 'sqlite3', '~> 1.3'
  s.add_dependency 'typhoeus', '~> 1.3'

  s.add_development_dependency 'coveralls', '~> 0.8'
  s.add_development_dependency 'database_cleaner', '~> 1.7'
  s.add_development_dependency 'rspec', '~> 3.8'
  s.add_development_dependency 'rspec_sequel_matchers', '~> 0.5'
  s.add_development_dependency 'yard', '~> 0.9'
end

@noraj
Copy link
Contributor Author

noraj commented Oct 12, 2022

dawnscanner

ba-dev -e 'dawnscanner -h' -p dawnscanner-1:v2.0.0.rc4.r0.gd6150be-3-any.pkg.tar.zst

RuntimeError: failed to get urandom
  /usr/lib/ruby/3.0.0/securerandom.rb:102:in `urandom'
  /usr/lib/ruby/3.0.0/securerandom.rb:102:in `singleton class'
  /usr/lib/ruby/3.0.0/securerandom.rb:69:in `<module:SecureRandom>'
  /usr/lib/ruby/3.0.0/securerandom.rb:68:in `<top (required)>'
  <internal:/usr/lib/ruby/3.0.0/rubygems/core_ext/kernel_require.rb>:85:in `require'
  <internal:/usr/lib/ruby/3.0.0/rubygems/core_ext/kernel_require.rb>:85:in `require'
  /usr/lib/ruby/3.0.0/resolv.rb:8:in `<top (required)>'
  <internal:/usr/lib/ruby/3.0.0/rubygems/core_ext/kernel_require.rb>:85:in `require'
  <internal:/usr/lib/ruby/3.0.0/rubygems/core_ext/kernel_require.rb>:85:in `require'
  /usr/lib/ruby/3.0.0/net/http.rb:25:in `<top (required)>'
  <internal:/usr/lib/ruby/3.0.0/rubygems/core_ext/kernel_require.rb>:85:in `require'
  <internal:/usr/lib/ruby/3.0.0/rubygems/core_ext/kernel_require.rb>:85:in `require'
  /usr/lib/ruby/3.0.0/bundler/vendor/net-http-persistent/lib/net/http/persistent.rb:1:in `<top (required)>'
  /usr/lib/ruby/3.0.0/bundler/vendored_persistent.rb:11:in `require_relative'
  /usr/lib/ruby/3.0.0/bundler/vendored_persistent.rb:11:in `<top (required)>'
  /usr/lib/ruby/3.0.0/bundler/fetcher.rb:3:in `require_relative'
  /usr/lib/ruby/3.0.0/bundler/fetcher.rb:3:in `<top (required)>'
  <internal:/usr/lib/ruby/3.0.0/rubygems/core_ext/kernel_require.rb>:85:in `require'
  <internal:/usr/lib/ruby/3.0.0/rubygems/core_ext/kernel_require.rb>:85:in `require'
  /usr/lib/ruby/3.0.0/bundler/cli/install.rb:50:in `run'
  /usr/lib/ruby/3.0.0/bundler/cli.rb:257:in `block in install'
  /usr/lib/ruby/3.0.0/bundler/settings.rb:131:in `temporary'
  /usr/lib/ruby/3.0.0/bundler/cli.rb:256:in `install'
  /usr/lib/ruby/3.0.0/bundler/vendor/thor/lib/thor/command.rb:27:in `run'
  /usr/lib/ruby/3.0.0/bundler/vendor/thor/lib/thor/invocation.rb:127:in `invoke_command'
  /usr/lib/ruby/3.0.0/bundler/vendor/thor/lib/thor.rb:392:in `dispatch'
  /usr/lib/ruby/3.0.0/bundler/cli.rb:31:in `dispatch'
  /usr/lib/ruby/3.0.0/bundler/vendor/thor/lib/thor/base.rb:485:in `start'
  /usr/lib/ruby/3.0.0/bundler/cli.rb:25:in `start'
  /usr/lib/ruby/gems/3.0.0/gems/bundler-2.3.23/exe/bundle:48:in `block in <top (required)>'
  /usr/lib/ruby/3.0.0/bundler/friendly_errors.rb:120:in `with_friendly_errors'
  /usr/lib/ruby/gems/3.0.0/gems/bundler-2.3.23/exe/bundle:36:in `<top (required)>'
  /usr/bin/bundle:25:in `load'
  /usr/bin/bundle:25:in `<main>'

Environment

Bundler       2.3.23
  Platforms   ruby, x86_64-linux
Ruby          3.0.4p208 (2022-04-12 revision 3fa771ddedac25560be57f4055f1767e6c810f58) [x86_64-linux]
  Full Path   /usr/bin/ruby
  Config Dir  /etc
RubyGems      3.3.23
  Gem Home    /usr/lib/ruby/gems/3.0.0
  Gem Path    /root/.local/share/gem/ruby/3.0.0:/usr/lib/ruby/gems/3.0.0
  User Home   /root
  User Path   /root/.local/share/gem/ruby/3.0.0
  Bin Dir     /usr/bin
OpenSSL
  Compiled    OpenSSL 1.1.1q  5 Jul 2022
  Loaded      OpenSSL 1.1.1q  5 Jul 2022
  Cert File   /etc/ssl/cert.pem
  Cert Dir    /etc/ssl/certs
Tools
  Git         2.38.0
  RVM         not installed
  rbenv       not installed
  chruby      not installed

Bundler Build Metadata

Built At          2022-10-08
Git SHA           unknown
Released Version  true

Bundler settings

build.nokogiri
  Set for your local app (/usr/share/dawnscanner/.bundle/config): "--use-system-libraries"
path
  Set for your local app (/usr/share/dawnscanner/.bundle/config): "vendor/bundle"

Gemfile

Gemfile

source 'https://rubygems.org'

# Specify your gem's dependencies in codesake_dawn.gemspec
gemspec

Gemfile.lock

<No /usr/share/dawnscanner/Gemfile.lock found>

Gemspecs

dawnscanner.gemspec

# -*- encoding: utf-8 -*-
lib = File.expand_path('../lib', __FILE__)
$LOAD_PATH.unshift(lib) unless $LOAD_PATH.include?(lib)
require 'dawn/version'

Gem::Specification.new do |gem|
  gem.name          = "dawnscanner"
  gem.version       = Dawn::VERSION
  gem.authors       = ["Paolo Perego"]
  gem.email         = ["paolo@dawnscanner.org"]
  gem.description   = %q{Dawnscanner is a security source code scanner for ruby powered code. It is especially designed for web applications, but it works also with general purpose ruby scripts. Dawn supports all major MVC frameworks like ruby on rails, padrino and sinatra; it provides more than 150 security checks with their own mitigation suggestion.}
  gem.summary       = %q{Dawnscanner is a security source code scanner for ruby powered code. It is crafted with love to make your sinatra, padrino and ruby on rails web applications secure.}
  gem.homepage      = "https://dawnscanner.org"
  gem.files         = `git ls-files`.split($/)
  gem.license       = "MIT"
  gem.executables   = gem.files.grep(%r{^bin/}).map{ |f| File.basename(f) }
  gem.test_files    = gem.files.grep(%r{^(test|spec|features)/})
  gem.require_paths = ["lib"]

  gem.required_ruby_version = '>= 2.3.0'

  gem.add_dependency 'cvss'
  gem.add_dependency 'haml'
  gem.add_dependency 'ruby_parser'
  gem.add_dependency 'sys-uname'
  gem.add_dependency 'terminal-table'
  gem.add_dependency 'justify'
  gem.add_dependency 'logger-colors'
  gem.add_dependency 'ptools'
  gem.add_dependency 'psych'

  # For CLI we will use thor
  gem.add_dependency 'thor'

  # gem.add_dependency 'sqlite3'
  # gem.add_dependency 'datamapper'
  # gem.add_dependency 'dm-sqlite-adapter'

  # To be added back in 1.5.5
  # gem.add_dependency 'code_metrics'
  # gem.add_dependency 'metric_fu-Saikuro'
  # gem.add_dependency 'flay'
  # gem.add_dependency 'churn'
  # gem.add_dependency 'flog'
  # gem.add_dependency 'reek'
  # gem.add_dependency 'cane'

  # This gem is used to extract info from a git archives. This feature will be
  # available in dawnscanner 2.0.0. Disabling the dependency right now.
  # gem.add_dependency 'grit'

  # Marked to be unused right now
  # gem.add_dependency 'parser'

  gem.add_development_dependency ('coveralls')
  gem.add_development_dependency 'rake'
  gem.add_development_dependency 'rspec'
  gem.add_development_dependency('tomdoc')
  gem.add_development_dependency('aruba')
  gem.add_development_dependency('simplecov')
end

@noraj
Copy link
Contributor Author

noraj commented Oct 12, 2022

evil-winrm

ba-dev -e 'evil-winrm -h' -p evil-winrm-1:v3.4.r0.g381b126-2-any.pkg.tar.zst

RuntimeError: failed to get urandom
  /usr/lib/ruby/3.0.0/securerandom.rb:102:in `urandom'
  /usr/lib/ruby/3.0.0/securerandom.rb:102:in `singleton class'
  /usr/lib/ruby/3.0.0/securerandom.rb:69:in `<module:SecureRandom>'
  /usr/lib/ruby/3.0.0/securerandom.rb:68:in `<top (required)>'
  <internal:/usr/lib/ruby/3.0.0/rubygems/core_ext/kernel_require.rb>:85:in `require'
  <internal:/usr/lib/ruby/3.0.0/rubygems/core_ext/kernel_require.rb>:85:in `require'
  /usr/lib/ruby/3.0.0/resolv.rb:8:in `<top (required)>'
  <internal:/usr/lib/ruby/3.0.0/rubygems/core_ext/kernel_require.rb>:85:in `require'
  <internal:/usr/lib/ruby/3.0.0/rubygems/core_ext/kernel_require.rb>:85:in `require'
  /usr/lib/ruby/3.0.0/net/http.rb:25:in `<top (required)>'
  <internal:/usr/lib/ruby/3.0.0/rubygems/core_ext/kernel_require.rb>:85:in `require'
  <internal:/usr/lib/ruby/3.0.0/rubygems/core_ext/kernel_require.rb>:85:in `require'
  /usr/lib/ruby/3.0.0/bundler/vendor/net-http-persistent/lib/net/http/persistent.rb:1:in `<top (required)>'
  /usr/lib/ruby/3.0.0/bundler/vendored_persistent.rb:11:in `require_relative'
  /usr/lib/ruby/3.0.0/bundler/vendored_persistent.rb:11:in `<top (required)>'
  /usr/lib/ruby/3.0.0/bundler/fetcher.rb:3:in `require_relative'
  /usr/lib/ruby/3.0.0/bundler/fetcher.rb:3:in `<top (required)>'
  <internal:/usr/lib/ruby/3.0.0/rubygems/core_ext/kernel_require.rb>:85:in `require'
  <internal:/usr/lib/ruby/3.0.0/rubygems/core_ext/kernel_require.rb>:85:in `require'
  /usr/lib/ruby/3.0.0/bundler/cli/install.rb:50:in `run'
  /usr/lib/ruby/3.0.0/bundler/cli.rb:257:in `block in install'
  /usr/lib/ruby/3.0.0/bundler/settings.rb:131:in `temporary'
  /usr/lib/ruby/3.0.0/bundler/cli.rb:256:in `install'
  /usr/lib/ruby/3.0.0/bundler/vendor/thor/lib/thor/command.rb:27:in `run'
  /usr/lib/ruby/3.0.0/bundler/vendor/thor/lib/thor/invocation.rb:127:in `invoke_command'
  /usr/lib/ruby/3.0.0/bundler/vendor/thor/lib/thor.rb:392:in `dispatch'
  /usr/lib/ruby/3.0.0/bundler/cli.rb:31:in `dispatch'
  /usr/lib/ruby/3.0.0/bundler/vendor/thor/lib/thor/base.rb:485:in `start'
  /usr/lib/ruby/3.0.0/bundler/cli.rb:25:in `start'
  /usr/lib/ruby/gems/3.0.0/gems/bundler-2.3.23/exe/bundle:48:in `block in <top (required)>'
  /usr/lib/ruby/3.0.0/bundler/friendly_errors.rb:120:in `with_friendly_errors'
  /usr/lib/ruby/gems/3.0.0/gems/bundler-2.3.23/exe/bundle:36:in `<top (required)>'
  /usr/bin/bundle:25:in `load'
  /usr/bin/bundle:25:in `<main>'

Environment

Bundler       2.3.23
  Platforms   ruby, x86_64-linux
Ruby          3.0.4p208 (2022-04-12 revision 3fa771ddedac25560be57f4055f1767e6c810f58) [x86_64-linux]
  Full Path   /usr/bin/ruby
  Config Dir  /etc
RubyGems      3.3.23
  Gem Home    /usr/lib/ruby/gems/3.0.0
  Gem Path    /root/.local/share/gem/ruby/3.0.0:/usr/lib/ruby/gems/3.0.0
  User Home   /root
  User Path   /root/.local/share/gem/ruby/3.0.0
  Bin Dir     /usr/bin
OpenSSL
  Compiled    OpenSSL 1.1.1q  5 Jul 2022
  Loaded      OpenSSL 1.1.1q  5 Jul 2022
  Cert File   /etc/ssl/cert.pem
  Cert Dir    /etc/ssl/certs
Tools
  Git         2.38.0
  RVM         not installed
  rbenv       not installed
  chruby      not installed

Bundler Build Metadata

Built At          2022-10-08
Git SHA           unknown
Released Version  true

Bundler settings

build.nokogiri
  Set for your local app (/usr/share/evil-winrm/.bundle/config): "--use-system-libraries"
path
  Set for your local app (/usr/share/evil-winrm/.bundle/config): "vendor/bundle"

Gemfile

Gemfile

source 'https://rubygems.org'

gemspec
gem 'rexml'

Gemfile.lock

<No /usr/share/evil-winrm/Gemfile.lock found>

Gemspecs

evil-winrm.gemspec

# frozen_string_literal: true

Gem::Specification.new do |spec|
  spec.name = "evil-winrm"
  spec.version = '3.4'
  spec.license = 'LGPL-3.0'
  spec.authors = ["CyberVaca", "OscarAkaElvis", "Jarilaos", "Arale61"]
  spec.email = ["oscar.alfonso.diaz@gmail.com"]

  spec.summary = "Evil-WinRM"
  spec.description = "The ultimate WinRM shell for hacking/pentesting"
  spec.homepage = "https://github.com/Hackplayers/evil-winrm#readme"
  spec.required_ruby_version = ">= 2.3"

  spec.metadata["homepage_uri"]    = spec.homepage
  spec.metadata["source_code_uri"] = "https://github.com/Hackplayers/evil-winrm"
  spec.metadata["changelog_uri"]   = "https://github.com/Hackplayers/evil-winrm/blob/master/CHANGELOG.md"

  spec.files = Dir.chdir(File.expand_path(__dir__)) do
    `git ls-files -z`.split("\x0").reject do |f|
      (f == __FILE__) || f.match(%r{\A(?:(?:bin|test|spec|features)/|\.(?:git|travis|circleci)|appveyor)})
    end
  end
  spec.bindir = "bin"
  spec.executables = ["evil-winrm"]

  spec.add_dependency "winrm",     "~> 2.3", ">= 2.3.2"
  spec.add_dependency "winrm-fs",  "~> 1.3", ">= 1.3.2"
  spec.add_dependency "stringio",  "~> 3.0"
  spec.add_dependency "logger",    "~> 1.4", ">= 1.4.3"
  spec.add_dependency "fileutils", "~> 1.0"

  spec.add_development_dependency "bundler", "~> 2.0"

  spec.post_install_message = "Happy hacking! :)"
end

@noraj
Copy link
Contributor Author

noraj commented Oct 12, 2022

hoper

ba-dev -e 'hoper -h' -p hoper-14.ee337ee-2-any.pkg.tar.zst

RuntimeError: failed to get urandom
  /usr/lib/ruby/3.0.0/securerandom.rb:102:in `urandom'
  /usr/lib/ruby/3.0.0/securerandom.rb:102:in `singleton class'
  /usr/lib/ruby/3.0.0/securerandom.rb:69:in `<module:SecureRandom>'
  /usr/lib/ruby/3.0.0/securerandom.rb:68:in `<top (required)>'
  <internal:/usr/lib/ruby/3.0.0/rubygems/core_ext/kernel_require.rb>:85:in `require'
  <internal:/usr/lib/ruby/3.0.0/rubygems/core_ext/kernel_require.rb>:85:in `require'
  /usr/lib/ruby/3.0.0/resolv.rb:8:in `<top (required)>'
  <internal:/usr/lib/ruby/3.0.0/rubygems/core_ext/kernel_require.rb>:85:in `require'
  <internal:/usr/lib/ruby/3.0.0/rubygems/core_ext/kernel_require.rb>:85:in `require'
  /usr/lib/ruby/3.0.0/net/http.rb:25:in `<top (required)>'
  <internal:/usr/lib/ruby/3.0.0/rubygems/core_ext/kernel_require.rb>:85:in `require'
  <internal:/usr/lib/ruby/3.0.0/rubygems/core_ext/kernel_require.rb>:85:in `require'
  /usr/lib/ruby/3.0.0/bundler/vendor/net-http-persistent/lib/net/http/persistent.rb:1:in `<top (required)>'
  /usr/lib/ruby/3.0.0/bundler/vendored_persistent.rb:11:in `require_relative'
  /usr/lib/ruby/3.0.0/bundler/vendored_persistent.rb:11:in `<top (required)>'
  /usr/lib/ruby/3.0.0/bundler/fetcher.rb:3:in `require_relative'
  /usr/lib/ruby/3.0.0/bundler/fetcher.rb:3:in `<top (required)>'
  <internal:/usr/lib/ruby/3.0.0/rubygems/core_ext/kernel_require.rb>:85:in `require'
  <internal:/usr/lib/ruby/3.0.0/rubygems/core_ext/kernel_require.rb>:85:in `require'
  /usr/lib/ruby/3.0.0/bundler/cli/install.rb:50:in `run'
  /usr/lib/ruby/3.0.0/bundler/cli.rb:257:in `block in install'
  /usr/lib/ruby/3.0.0/bundler/settings.rb:131:in `temporary'
  /usr/lib/ruby/3.0.0/bundler/cli.rb:256:in `install'
  /usr/lib/ruby/3.0.0/bundler/vendor/thor/lib/thor/command.rb:27:in `run'
  /usr/lib/ruby/3.0.0/bundler/vendor/thor/lib/thor/invocation.rb:127:in `invoke_command'
  /usr/lib/ruby/3.0.0/bundler/vendor/thor/lib/thor.rb:392:in `dispatch'
  /usr/lib/ruby/3.0.0/bundler/cli.rb:31:in `dispatch'
  /usr/lib/ruby/3.0.0/bundler/vendor/thor/lib/thor/base.rb:485:in `start'
  /usr/lib/ruby/3.0.0/bundler/cli.rb:25:in `start'
  /usr/lib/ruby/gems/3.0.0/gems/bundler-2.3.23/exe/bundle:48:in `block in <top (required)>'
  /usr/lib/ruby/3.0.0/bundler/friendly_errors.rb:120:in `with_friendly_errors'
  /usr/lib/ruby/gems/3.0.0/gems/bundler-2.3.23/exe/bundle:36:in `<top (required)>'
  /usr/bin/bundle:25:in `load'
  /usr/bin/bundle:25:in `<main>'

Environment

Bundler       2.3.23
  Platforms   ruby, x86_64-linux
Ruby          3.0.4p208 (2022-04-12 revision 3fa771ddedac25560be57f4055f1767e6c810f58) [x86_64-linux]
  Full Path   /usr/bin/ruby
  Config Dir  /etc
RubyGems      3.3.23
  Gem Home    /usr/lib/ruby/gems/3.0.0
  Gem Path    /root/.local/share/gem/ruby/3.0.0:/usr/lib/ruby/gems/3.0.0
  User Home   /root
  User Path   /root/.local/share/gem/ruby/3.0.0
  Bin Dir     /usr/bin
OpenSSL
  Compiled    OpenSSL 1.1.1q  5 Jul 2022
  Loaded      OpenSSL 1.1.1q  5 Jul 2022
  Cert File   /etc/ssl/cert.pem
  Cert Dir    /etc/ssl/certs
Tools
  Git         2.38.0
  RVM         not installed
  rbenv       not installed
  chruby      not installed

Bundler Build Metadata

Built At          2022-10-08
Git SHA           unknown
Released Version  true

Bundler settings

build.nokogiri
  Set for your local app (/usr/share/hoper/.bundle/config): "--use-system-libraries"
path
  Set for your local app (/usr/share/hoper/.bundle/config): "vendor/bundle"

Gemfile

Gemfile

source 'https://rubygems.org'

# Specify your gem's dependencies in hoper.gemspec
gemspec

Gemfile.lock

<No /usr/share/hoper/Gemfile.lock found>

Gemspecs

hoper.gemspec

# coding: utf-8
require_relative 'lib/hoper/version'

Gem::Specification.new do |spec|
  spec.name          = "hoper"
  spec.version       = Hoper::VERSION
  spec.authors       = ["Gabriel Aramburu"]
  spec.email         = ["aramburu.gabriel@gmail.com"]

  spec.summary       = %q{Trace the URL's of a link.}
  spec.description   = %q{Trace URL's jumps across the rel links to obtain the last URL}
  spec.homepage      = "http://garamburu.com"
  spec.license       = "MIT"

  spec.files         = `git ls-files -z`.split("\x0").reject { |f| f.match(%r{^(test|spec|features)/}) }
  spec.bindir        = "exe"
  spec.executables   = ["hoper"]
  # spec.executables   = spec.files.grep(%r{^exe/}) { |f| File.basename(f) }
  spec.require_paths = ["lib"]

  spec.add_dependency "curb"

  spec.add_development_dependency "bundler"
  spec.add_development_dependency "rake", "~> 10.0"
end

@noraj
Copy link
Contributor Author

noraj commented Oct 12, 2022

@noptrix It seems all those tools build and install correctly outside of ba-dev. I can't reproduce the issue without ba-dev even the target nspawn container.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
external::upstream-issue For issues that were created to track upstream issues lang::ruby type::bug Valid bug
Projects
None yet
Development

No branches or pull requests

3 participants