Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Autobuild: Upgrade Windows build environment #2649

Merged
merged 1 commit into from
Jun 19, 2022

Conversation

ann0see
Copy link
Member

@ann0see ann0see commented Jun 15, 2022

Visual Studio and CodeQl now work on windows-2022 according to github/codeql-action#850

Short description of changes

CHANGELOG: Autobuild: Build Windows version on latest build environment. This upgrades the Windows build process

Context: Fixes an issue?

Fixes: #2259

Does this change need documentation? What needs to be documented and how?

No.

Status of this Pull Request

Needs testing on Windows. Hopefully the upgrade has only positive side-effects.

What is missing until this pull request can be merged?

Checklist

  • I've verified that this Pull Request follows the general code principles
  • I tested my code and it does what I want (ASIO build installs and runs)
  • My code follows the style guide
  • I waited some time after this Pull Request was opened and all GitHub checks completed without errors.
  • I've filled all the content above

@ann0see ann0see added this to the Release 3.9.0 milestone Jun 15, 2022
@ann0see ann0see requested a review from pljones June 15, 2022 20:01
@ann0see ann0see requested a review from hoffie June 15, 2022 20:41
@@ -159,13 +159,13 @@ jobs:

- config_name: Windows (artifact+codeQL)
target_os: windows
building_on_os: windows-2019
building_on_os: windows-latest
Copy link
Collaborator

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Is there a pinnable version?

Copy link
Member Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Yes. windows-2022 probably

Copy link
Collaborator

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I'd prefer that rather than something that could change.

@pljones
Copy link
Collaborator

pljones commented Jun 16, 2022

Have you run the auto-build on this branch on Github? Are the artifacts available?

@ann0see
Copy link
Member Author

ann0see commented Jun 16, 2022

Yes. You can test the artifices. According to the log they‘ve been built on the latest windows version with VS 22

@pljones
Copy link
Collaborator

pljones commented Jun 16, 2022

Well the ASIO(tm) build lets me listen okay. I've not had a chance to test anything more than that but I can't think it would have a problem if it works that far. I can't test JACK (it still crashes for me - JACK, not Jamulus).

@ann0see
Copy link
Member Author

ann0see commented Jun 17, 2022

@henkdegroot can test JACK on Windows, I suppose. But I doubt there's anything wrong with it

Copy link
Member

@hoffie hoffie left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Great, thanks!
As @pljones mentioned, please try the pinned OS version. Besides that, approving (I can't test on Windows, but I guess it's fine if @pljones and @henkdegroot do).

@henkdegroot
Copy link
Contributor

henkdegroot commented Jun 18, 2022

@ann0see / @hoffie, annoying fact (again) I can't download the artifact. After the download completes, Microsoft detects a trojan in the jack exe. Can you try to download and see if you get the same result?

https://www.microsoft.com/en-us/wdsi/threats/malware-encyclopedia-description?name=Trojan%3aScript%2fWacatac.B!ml&threatid=2147735503

FYI, I suspect it is a falls positive and have submitted the zip file to microsoft (just in case that helps).

@pljones
Copy link
Collaborator

pljones commented Jun 18, 2022

@henkdegroot the Windows JACK build opens fine for me -- you mean the installer, I take it? Or do you mean after install?

@henkdegroot
Copy link
Contributor

@pljones I mean that when I download the jack zip file from the autobuild, Windows detects a threat and blocks the download after it completed.

@pljones
Copy link
Collaborator

pljones commented Jun 18, 2022

I don't get that at all - but then, I've optimised my PC for real-time audio heavily by turning off background stuff I don't want.

All that message usually means is you've got checking enabled and Microsoft hasn't had the content of the file confirmed as safe. As it's a "one off" payload, it's never going to get that. So you'll need to override it's "wisdom".

Fixes: jamulussoftware#2259
Visual Studio and CodeQl now work on windows-2022 according to 
github/codeql-action#850
@ann0see ann0see requested review from hoffie and pljones June 18, 2022 20:18
@hoffie
Copy link
Member

hoffie commented Jun 18, 2022

@ann0see / @hoffie, annoying fact (again) I can't download the artifact. After the download completes, Microsoft detects a trojan in the jack exe. Can you try to download and see if you get the same result?

Is that more prevalent after this PR? I think it is expected that non-famous Jamulus builds cause warnings. However, specific detections sound like something to investigate. Interestingly, on Virustotal the files are not flagged by Microsoft (but by 1-2 other scanners in rather generic ways). Jack and ASIO seem similar though:

Copy link
Member

@hoffie hoffie left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I don't see a VirusTotal regression when comparing the artifacts from here with one of the latest master builds:
https://www.virustotal.com/gui/file-analysis/MmQ1YjQ4N2RlMjRkODY3YjZlOGU2ZTc2OTkyZGMzYjM6MTY1NTU4NDkyMQ==

Therefore, approving.

@henkdegroot
Copy link
Contributor

@hoffie, no problems with warnings. I did not have any problem downloading the ASIO version, only the windows jack version. Interesting to see why Microsoft Defender is triggering this high security and blocks the file. When I unblock the zip file and try to extract it I get more (other) trojan warnings being detected. Just annoying....

@ann0see ann0see merged commit fad60c3 into jamulussoftware:master Jun 19, 2022
@ann0see ann0see deleted the updateWindows branch June 19, 2022 16:07
@henkdegroot
Copy link
Contributor

FWIW, I actually got feedback from Microsoft about the file being false positive and they have updated their signatures....will see if these submissions can really help for future cases as well.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

Github: windows-latest build env will switch to windows-2022 soon and will break CodeQL
4 participants