Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

cmd/go: go mod tidy randomly removes indirect dependency #58216

Closed
tobiaszheller opened this issue Feb 1, 2023 · 6 comments
Closed

cmd/go: go mod tidy randomly removes indirect dependency #58216

tobiaszheller opened this issue Feb 1, 2023 · 6 comments
Labels
FrozenDueToAge GoCommand cmd/go modules NeedsInvestigation Someone must examine and confirm this is a valid issue and not a duplicate of an existing one. WaitingForInfo Issue is not actionable because of missing required information, which needs to be provided.
Milestone
Backlog

Comments

@tobiaszheller
Copy link

tobiaszheller commented Feb 1, 2023 •
edited

What version of Go are you using (go version)?

$ go version
go version go1.19.5 linux/arm64

Does this issue reproduce with the latest release?

Yes

What operating system and processor architecture are you using (go env)?

go env Output
$ go env
GO111MODULE=""
GOARCH="arm64"
GOBIN=""
GOCACHE="/root/.cache/go-build"
GOENV="/root/.config/go/env"
GOEXE=""
GOEXPERIMENT=""
GOFLAGS=""
GOHOSTARCH="arm64"
GOHOSTOS="linux"
GOINSECURE=""
GOMODCACHE="/go/pkg/mod"
GONOPROXY=""
GONOSUMDB=""
GOOS="linux"
GOPATH="/go"
GOPRIVATE=""
GOPROXY="https://proxy.golang.org,direct"
GOROOT="/usr/local/go"
GOSUMDB="sum.golang.org"
GOTMPDIR=""
GOTOOLDIR="/usr/local/go/pkg/tool/linux_arm64"
GOVCS=""
GOVERSION="go1.19.5"
GCCGO="gccgo"
AR="ar"
CC="gcc"
CXX="g++"
CGO_ENABLED="1"
GOMOD="/go/src/teleport/teleport/go.mod"
GOWORK=""
CGO_CFLAGS="-g -O2"
CGO_CPPFLAGS=""
CGO_CXXFLAGS="-g -O2"
CGO_FFLAGS="-g -O2"
CGO_LDFLAGS="-g -O2"
PKG_CONFIG="pkg-config"
GOGCCFLAGS="-fPIC -pthread -Wl,--no-gc-sections -fmessage-length=0 -fdebug-prefix-map=/tmp/go-build2007327935=/tmp/go-build -gno-record-gcc-switches"

What did you do?

Running go mod tidy on gravitational/teleport@ce86ad5 (not only this commit, other on master as well)

What did you expect to see?

No changes after running go mod tidy.

What did you see instead?

$ go mod tidy -v
unused github.com/coreos/pkg

It happens on my machine both on mac and inside docker, it also happens on dependabot running on GHA. However for at least 3 other people running the same version of Go (they checked on darwin/amd64), go mod tidy returns no changes.

Running go mod graph returns following modules for given indirect package:

$ go mod graph | grep coreos/pkg
github.com/spf13/viper@v1.4.0 github.com/coreos/pkg@v0.0.0-20180928190104-399ea9e2e55f
go.etcd.io/etcd@v0.0.0-20191023171146-3cf2f69b5738 github.com/coreos/pkg@v0.0.0-20160727233714-3ac0863d7acf
@seankhliao
Copy link
Member

Do the people with no change add it back if it's removed?

@tobiaszheller
Copy link
Author

yes, running go mod tidy on "valid" machines bring it back.

@seankhliao
Copy link
Member

This looks like module graph pruning https://go.dev/ref/mod#graph-pruning, the github.com/coreos/pkg looks to only be required for tests far out in the dependency graph.

Can you find a way to reliably reproduce keeping the entry?
You say running in docker will remove it.

cc @bcmills @matloob

@seankhliao seankhliao added NeedsInvestigation Someone must examine and confirm this is a valid issue and not a duplicate of an existing one. GoCommand cmd/go modules labels Feb 1, 2023
@tobiaszheller
Copy link
Author

tobiaszheller commented Feb 1, 2023 •
edited

@seankhliao I have just pushed new branch (gravitational/teleport@630226e) where I use newest package of our fork go-oidc. https://github.com/gravitational/go-oidc/blob/master/go.mod as you can see here github.com/coreos/pkg is linked there are direct dependency.

And it is still removed on my machine/docker.

@bcmills
Copy link
Contributor

bcmills commented Feb 1, 2023

In a fresh checkout of gravitational/teleport@630226e, go mod why -m github.com/coreos/pkg reports that the dependency is unused.

For the folks who are not seeing the dependency removed, what do the following commands report?

  • go mod why -m github.com/coreos/pkg
  • go env GOMOD GOWORK GOVERSION
  • git status --short --untracked=all | grep '\.go'

@bcmills bcmills added the WaitingForInfo Issue is not actionable because of missing required information, which needs to be provided. label Feb 1, 2023
@bcmills bcmills added this to the Backlog milestone Feb 1, 2023
@tobiaszheller
Copy link
Author

It turned out that given module was used in enterprise package which is checkout as git submodule. We were able to solve the issue, thanks for help.

@golang golang locked and limited conversation to collaborators Feb 7, 2024
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Assignees
No one assigned
Labels
FrozenDueToAge GoCommand cmd/go modules NeedsInvestigation Someone must examine and confirm this is a valid issue and not a duplicate of an existing one. WaitingForInfo Issue is not actionable because of missing required information, which needs to be provided.
Projects
None yet
Milestone
Backlog
Development

No branches or pull requests
4 participants
@bcmills @gopherbot @seankhliao @tobiaszheller