Error: Command failed: df -Pk when using macos-14 runners (macos-latest)

[ebickle]

After GitHub migrated the macos-latest label to MacOS 14 (from 12) we noticed the following warning in our CodeQL logs:

arning: Failed to check available disk space: Error: Command failed: df -Pk -- /Users/runner/work/repo-name/directory-name
dyld[4412]: terminating because inserted dylib '/Users/runner/hostedtoolcache/CodeQL/2.17.6/arm64/codeql/tools/osx64/libtrace.dylib' could not be loaded: tried: '/Users/runner/hostedtoolcache/CodeQL/2.17.6/arm64/codeql/tools/osx64/libtrace.dylib' (fat file, but missing compatible architecture (have 'x86_64,arm64', need 'arm64e')), '/System/Volumes/Preboot/Cryptexes/OS/Users/runner/hostedtoolcache/CodeQL/2.17.6/arm64/codeql/tools/osx64/libtrace.dylib' (no such file), '/Users/runner/hostedtoolcache/CodeQL/2.17.6/arm64/codeql/tools/osx64/libtrace.dylib' (fat file, but missing compatible architecture (have 'x86_64,arm64', need 'arm64e'))
dyld[4412]: tried: '/Users/runner/hostedtoolcache/CodeQL/2.17.6/arm64/codeql/tools/osx64/libtrace.dylib' (fat file, but missing compatible architecture (have 'x86_64,arm64', need 'arm64e')), '/System/Volumes/Preboot/Cryptexes/OS/Users/runner/hostedtoolcache/CodeQL/2.17.6/arm64/codeql/tools/osx64/libtrace.dylib' (no such file), '/Users/runner/hostedtoolcache/CodeQL/2.17.6/arm64/codeql/tools/osx64/libtrace.dylib' (fat file, but missing compatible architecture (have 'x86_64,arm64', need 'arm64e'))

There isn't too much to the workflow up until that point - it runs actions/checkout, pod install, then github/codeql-action/init with languages:swift on a runner: macos-latest.

As a double check, I cleared all of the GitHub workflow caches and verified I see "Did not find CodeQL tools version 2.17.6 in the toolcache" in the build output.

[ginsbach]

May I ask which version of CodeQL Action you are using? We have previously fixed a similar-looking issue, so it might be sufficient for you to upgrade to the newest version.

[ebickle]

Hi @ginsbach, the workflow in question is using v3 of init and analyze:
github/codeql-action/init@v3
github/codeql-action/analyze@v3

The build itself is a direct call to XCode:
xcodebuild build -workspace "app/app.xcworkspace" -scheme "${{ env.scheme }}" -destination "${{env.destination }}"

[angelapwen]

👋 thank you for the report @ebickle. The warning about df should be unrelated to the actual failure – the PR in the CodeQL Action that @ginsbach linked above is in fact where we made the df command failure a warning rather than a failure.

That said, the following lines look like a new issue with the build tracer. We've raised it with the appropriate team internally!

[criemen]

Hi @ebickle , any chance you could rerun your workflow in debug mode and provide the debug artifact to us?

If it contains sensitive data, reach out to github support to privately send it to us, otherwise attaching it on this issue is also fine.

[ebickle]

@criemen I've uploaded the raw debug logs over at https://support.github.com/ticket/personal/0/2886802

[criemen]

@ebickle Can you upload the debug artifact, not the debug logs? The codeql-action should produce a debug artifact. If that contains too much confidential data, I'm mostly interested in the build-tracer.log from <database>/log/build-tracer.log, but the whole thing would be useful.

[ebickle]

@criemen Artifacts attached now too!

[criemen]

Thanks, that was very helpful! We're discussing the problem and possible solutions internally and will get back to you.

[angelapwen]

Thanks to @criemen we have a better understanding of the problem related to the build tracer here. We'll work on a fix in the CodeQL Action and update here when we have one!

[angelapwen]

👋 we've just released v3 and v2 of the CodeQL Action with this change: github/codeql-action#2434, which removes our call to df and therefore should prevent these warnings 😸 @ebickle do you mind checking to see if this also resolves the warnings on your end?

[ebickle]

Still seeing issues on my side, but different warnings and errors. I've tossed the details into support ticket # 2886802. It occurs when running github/codeql-action/init@v3 on with the languages: swift input set on a macos-latest runner. The csrutil command fails with a similar error about an incompatible CPU architecture. The null exit code (due to the failure) causes the warning Warning: Failed to determine if System Integrity Protection was enabled

[angelapwen]

Got it — I see, the csrutil command is going to fail for the same reason. I'll make that change shortly and release. Thanks for the quick response!

[angelapwen]

github/codeql-action#2441 should have the fix in!