APT whitelist request for qt5-default

[BanzaiMan]

This replaces travis-ci/travis-ci#4518.

The original text by @mcmire follows

---

This is necessary in order to run capybara-webkit tests against a project that requires Qt 5 (using features that weren't available in Qt 4, such as ES5 getters/setters). (Source)

Thanks!

[BanzaiMan]

Ran tests and found setuid bits by purely textual search. Further analysis is required.

If these are found to be benign, add:

libqt5core5a libqt5gui5 libqt5libqgtk2 libqt5network5 libqt5opengl5 libqt5sql5 libqt5sql5-mysql libqt5sql5-odbc libqt5sql5-psql libqt5sql5-sqlite libqt5sql5-tds libqt5xml5 libqt5dbus5 libqt5test5 libqt5concurrent5 libqt5widgets5 libqt5printsupport5 qtbase5-dev qtbase5-private-dev libqt5opengl5-dev qtbase5-dev-tools qt5-qmake qtbase5-examples qtbase5-dbg qtbase5-dev-tools-dbg qtbase5-examples-dbg qt5-default qtbase5-doc-html

See https://travis-ci.org/travis-ci/apt-whitelist-checker/builds/72545681.

[rochers]

We also need this whitelisted. 👍

[Predelnik]

Also 👍

[basiszwo]

👍 to get this onto the whitelist

[The-Compiler]

This is currently the blocker keeping me on legacy infrastructure as well, and the checks seem to be false-positives.

Also, #316 #365 #408 all seem to be covered by this issue as well.

[bjorn]

👍

[JesseTG]

Any updates on this?

[jonasschnelli]

👍

[bjorn]

What may be useful for people stumbling over this issue, is that you can use apt-get to install Qt 5 on the new Docker-enabled images. Somewhere in your .travis.yml you'd need:

sudo: required
services:
  - docker

And then you can do:

before_install:
  - sudo apt-get update -qq
  - sudo apt-get install -qq qt5-default qttools5-dev-tools
  - qmake -version

You'll see it installed Qt version 5.2.1, as available on Ubuntu 14.04.

[mcmire]

Oh that's sweet, I didn't know about this.

Well then this makes this issue kind of obsolete, now doesn't it...

[bjorn]

Well then this makes this issue kind of obsolete, now doesn't it...

Well, it relies on a somewhat experimental environment that was announced in this blog post: http://blog.travis-ci.com/2015-08-19-using-docker-on-travis-ci/

So far I'm not aware of more recent news on whether this new environment would replace the container based one, which as of that blog post was still preferable in terms of boot times. So whitelisting qt5-default could still be helpful for now.

[JesseTG]

Docker is all fine and good, but I want a newer version of Qt, and I want dependency caching. When that's introduced into the docker infrastructure, I'll bite.

[jpsecher]

👍

[BanzaiMan]

Does anyone know what these are? https://travis-ci.org/travis-ci/apt-whitelist-checker/builds/72545681#L544-L545

./qtbase-opensource-src-5.4.2+dfsg/src/corelib/doc/snippets/code/src_corelib_io_qprocess.cpp:    ::setgid(safeGid);
./qtbase-opensource-src-5.4.2+dfsg/src/corelib/doc/snippets/code/src_corelib_io_qprocess.cpp:    ::setuid(safeUid);

Other occurrences are benign; I just want to be sure that these are, too.

[The-Compiler]

@BanzaiMan I think those are from the code snippet in the docs here:

http://doc.qt.io/qt-5/qprocess.html#setupChildProcess

[travisbot]

_This is an automated comment._

Ran tests and found setuid bits by purely textual search. Further analysis is required.

If these are found to be benign, examine http://github.com/travis-ci/apt-package-whitelist/compare/test-apt-package-whitelist-442 and its PR.

Packages found: libqt5core5a libqt5gui5 libqt5libqgtk2 libqt5network5 libqt5opengl5 libqt5sql5 libqt5sql5-mysql libqt5sql5-odbc libqt5sql5-psql libqt5sql5-sqlite libqt5sql5-tds libqt5xml5 libqt5dbus5 libqt5test5 libqt5concurrent5 libqt5widgets5 libqt5printsupport5 qtbase5-dev qtbase5-private-dev libqt5opengl5-dev qtbase5-dev-tools qt5-qmake qtbase5-examples qtbase5-dbg qtbase5-dev-tools-dbg qtbase5-examples-dbg qt5-default qtbase5-doc-html

See https://travis-ci.org/travis-ci/apt-whitelist-checker/builds/86679088 for details.

[BanzaiMan]

I closed this with #1148 (which resolves #1135, which is an effective duplicate of this issue).

[MartinDelille]

I just tried to use qt5 but the apt step failed: https://travis-ci.org/Phonations/TravisTest#L83-L84

What's wrong?

[BanzaiMan]

It's in the debian-sid source. So you need that source added as well.

https://travis-ci.org/travis-ci/apt-whitelist-checker/builds/86679088#L467-L473

[JesseTG]

🎉

[jonasschnelli]

Nice!

[techtonik]

This stuff worked for me:

addons:
  apt:
    sources:
    - debian-sid
    packages:
    - qt5-default

[annejan]

Unfortunately this solution currently gives me an error:

W: There is no public key available for the following key IDs: 7638D0442B90D010

Which is a secondary key for Debian archive it seems . .

[DamienCassou]

@annejan I have the same issue with silversearcher-ag