Build 1017 for 7.17 with status FAILURE

[elasticmachine]

💔 Build Failed

the below badges are clickable and redirect to their specific view in the CI or DOCS

Expand to view the summary

Build stats

• Duration: 96 min 49 sec

Pipeline error

This error is likely related to the pipeline itself. Click here
and then you will see the error (either incorrect syntax or an invalid configuration).

[elasticmachine]

Pinging @elastic/elastic-agent-data-plane (Team:Elastic-Agent-Data-Plane)

[elasticmachine]

Pinging @elastic/security-external-integrations (Team:Security-External Integrations)

[pierrehilbert]

@nfritts / @andrewkroh every builds in 7.17 are failing on:

Build&Test / x-pack/auditbeat-build / x-pack.auditbeat.tests.system.test_system_socket.Test.test_connected_udp_ipv4
Build&Test / x-pack/auditbeat-build / x-pack.auditbeat.tests.system.test_system_socket.Test.test_connected_udp_ipv6
Build&Test / x-pack/auditbeat-build / x-pack.auditbeat.tests.system.test_system_socket.Test.test_dns_enrichment
Build&Test / x-pack/auditbeat-build / x-pack.auditbeat.tests.system.test_system_socket.Test.test_dns_long_request
Build&Test / x-pack/auditbeat-build / x-pack.auditbeat.tests.system.test_system_socket.Test.test_dns_udp_ipv6
Build&Test / x-pack/auditbeat-build / x-pack.auditbeat.tests.system.test_system_socket.Test.test_dns_unidirectional_udp
Build&Test / x-pack/auditbeat-build / x-pack.auditbeat.tests.system.test_system_socket.Test.test_multi_udp_upv4
Build&Test / x-pack/auditbeat-build / x-pack.auditbeat.tests.system.test_system_socket.Test.test_no_dns_enrichment
Build&Test / x-pack/auditbeat-build / x-pack.auditbeat.tests.system.test_system_socket.Test.test_tcp_ipv4
Build&Test / x-pack/auditbeat-build / x-pack.auditbeat.tests.system.test_system_socket.Test.test_tcp_ipv6_disabled
Build&Test / x-pack/auditbeat-build / x-pack.auditbeat.tests.system.test_system_socket.Test.test_udp_ipv4
Build&Test / x-pack/auditbeat-build / x-pack.auditbeat.tests.system.test_system_socket.Test.test_udp_ipv6
Build&Test / x-pack/auditbeat-build / x-pack.auditbeat.tests.system.test_system_socket.Test.test_udp_ipv6_disabled

Any idea?

[elasticmachine]

Pinging @elastic/sec-linux-platform (Team:Security-Linux Platform)

[andrewkroh]

From the logs at https://storage.googleapis.com/beats-ci-temp/Beats/beats/7.17-1017/system-tests-x-pack-auditbeat.tar.gz

{
  "system_info": {
    "host": {
      "architecture": "x86_64",
      "boot_time": "2024-02-09T12:13:10Z",
      "containerized": false,
      "name": "3d294162ccae",
      "ip": [
        "127.0.0.1",
        "::1",
        "172.18.0.2"
      ],
      "kernel_version": "6.5.0-1013-gcp",
      "mac": [
        "02:42:ac:12:00:02"
      ],
      "os": {
        "type": "linux",
        "family": "debian",
        "platform": "debian",
        "name": "Debian GNU/Linux",
        "version": "12 (bookworm)",
        "major": 12,
        "minor": 0,
        "patch": 0,
        "codename": "bookworm"
      },
      "timezone": "UTC",
      "timezone_offset_sec": 0,
      "id": "c3825ed44c8a5600626292ba1e6efcde"
    }
  }
}

Exiting: 1 error: system/socket dataset setup failed: unable to guess one or more required parameters: guess_struct_creds failed: timeout while waiting for event

So I think we need to backport #36905 into 7.17 to fix this.

[andrewkroh]

Backport fix: #38027