GNU bug report logs - #76810
guix lint when nvd.nist.gov is down

Previous Next

To reply to this bug, email your comments to 76810 AT debbugs.gnu.org.

Toggle the display of automated, internal messages from the tracker.

Message #5 received at submit <at> debbugs.gnu.org (full text, mbox):

From: Nicolas Graves <ngraves <at> ngraves.fr>
To: bug-guix <at> gnu.org
Subject: guix lint when nvd.nist.gov is down
Date: Fri, 07 Mar 2025 13:57:32 +0100

Looks like for some reason nvd.nist.gov is down.
Discovery from that is that it makes it impossible to use one's cache
even in the case it might be pretty up-to-date :/
A warning would be better than an error here.

In srfi/srfi-1.scm:
    634:9  9 (for-each #<procedure 7f04b797ba80 at guix/scripts/lin…> …)
In guix/scripts/lint.scm:
    74:21  8 (_ _)
In guix/lint.scm:
   1606:4  7 (check-vulnerabilities #<package snappy <at> 1.1.9 /home/gr…> …)
  1593:10  6 (_ _)
In unknown file:
           5 (force #<promise #<procedure 7f04c74a63e0 at guix/lint.…>)
In guix/lint.scm:
   1572:2  4 (_)
    927:2  3 (call-with-networking-fail-safe _ _ _)
In ice-9/boot-9.scm:
  1752:10  2 (with-exception-handler _ _ #:unwind? _ # _)
  1685:16  1 (raise-exception _ #:continuable? _)
  1683:16  0 (raise-exception _ #:continuable? _)

ice-9/boot-9.scm:1683:16: In procedure raise-exception:
ERROR:
  1. &http-get-error:
      uri: #<<uri> scheme: https userinfo: #f host: "nvd.nist.gov" port: #f path: "/feeds/json/cve/1.1/nvdcve-1.1-2025.json.gz" query: #f fragment: #f>
      code: 503
      reason: "Service Unavailable"
      headers: ((content-length . 107) (cache-control no-cache) (content-type text/html) (connection close))
  2. &message: "https://nvd.nist.gov/feeds/json/cve/1.1/nvdcve-1.1-2025.json.gz: HTTP download failed: 503 (\"Service Unavailable\")"
zsh: exit 1     ./pre-inst-env guix lint -c cve snappy


-- 
Best regards,
Nicolas Graves

Message #8 received at 76810 <at> debbugs.gnu.org (full text, mbox):

From: Leo Famulari <leo <at> famulari.name>
To: Nicolas Graves <ngraves <at> ngraves.fr>
Cc: 76810 <at> debbugs.gnu.org
Subject: Re: bug#76810: guix lint when nvd.nist.gov is down
Date: Fri, 7 Mar 2025 14:56:05 -0500

On Fri, Mar 07, 2025 at 01:57:32PM +0100, Nicolas Graves wrote:
> Looks like for some reason nvd.nist.gov is down.

We should prepare for this site to disappear permanently. Very sorry to
say, but it's likely this kind of public service from the US government
goes away soon.

Message #11 received at 76810 <at> debbugs.gnu.org (full text, mbox):

From: Greg Hogan <code <at> greghogan.com>
To: Nicolas Graves <ngraves <at> ngraves.fr>
Cc: 76810 <at> debbugs.gnu.org, 68189 <at> debbugs.gnu.org
Subject: Re: bug#76810: guix lint when nvd.nist.gov is down
Date: Fri, 7 Mar 2025 17:17:05 -0500

On Fri, Mar 7, 2025 at 7:58 AM Nicolas Graves <ngraves <at> ngraves.fr> wrote:
>
> Looks like for some reason nvd.nist.gov is down.
> Discovery from that is that it makes it impossible to use one's cache
> even in the case it might be pretty up-to-date :/
> A warning would be better than an error here.

Given the similarity, can we merge #68189 and #76810?

Previous Next

GNU bug tracking system
Copyright (C) 1999 Darren O. Benham, 1997,2003 nCipher Corporation Ltd, 1994-97 Ian Jackson.