[🐛 Bug]: Can't build the (dotnet) project on a Windows machine without admin rights

[arnonax-tr]

Description

I cloned the repo and tried to build the dotnet library (as I wanted to send a PR) according to this README file, on my work machine which doesn't have admin privileges.

Reproducible Code

bazel build dotnet/...

Debugging Logs

INFO: Repository rules_rust instantiated at:
  C:/temp/selenium/WORKSPACE:27:13: in <toplevel>
Repository rule http_archive defined at:
  C:/users/<username>/_bazel_<username>/tbbdyysj/external/bazel_tools/tools/build_defs/repo/http.bzl:387:31: in <toplevel>
INFO: repository @@rules_rust' used the following cache hits instead of downloading the corresponding file.
 * Hash '7845e21d7486507eaa0f56dd23929767f074e26d302147a8c8cee99ae8f36db4' for https://github.com/bazelbuild/rules_rust/releases/download/0.55.5/rules_rust-0.55.5.tar.gz
If the definition of 'repository @@rules_rust' was updated, verify that the hashes were also updated.
ERROR: C:/users/<username>/_bazel_<username>/tbbdyysj/external/bazel_tools/tools/build_defs/repo/http.bzl:136:45: An error occurred during the fetch of repository 'rules_rust':
   Traceback (most recent call last):
        File "C:/users/<username>/_bazel_<username>/tbbdyysj/external/bazel_tools/tools/build_defs/repo/http.bzl", line 136, column 45, in _http_archive_impl
                download_info = ctx.download_and_extract(
Error in download_and_extract: java.io.IOException: Error extracting C:/users/<username>/_bazel_<username>/tbbdyysj/external/rules_rust/temp16874040712485521303/rules_rust-0.55.5.tar.gz to C:/users/<username>/_bazel_<username>/tbbdyysj/external/rules_rust/temp16874040712485521303: Cannot create symlink (name=C:\users\<username>\_bazel_<username>\tbbdyysj\external\rules_rust\examples\bzlmod\all_crate_deps\.bazelversion, target=C:\users\<username>\_bazel_<username>\tbbdyysj\external\rules_rust\examples\bzlmod\.bazelversion): ERROR: src/main/native/windows/file-jni.cc(140): nativeCreateSymlink(\\?\C:\users\<username>\_bazel_<username>\tbbdyysj\external\rules_rust\examples\bzlmod\all_crate_deps\.bazelversion, \\?\C:\users\<username>\_bazel_<username>\tbbdyysj\external\rules_rust\examples\bzlmod\.bazelversion): ERROR: src/main/native/windows/file.cc(523): CreateSymlink(\\?\C:\users\<username>\_bazel_<username>\tbbdyysj\external\rules_rust\examples\bzlmod\.bazelversion): createSymbolicLinkW failed (permission denied). Either Windows developer mode or admin privileges are required.
ERROR: Error computing the main repository mapping: no such package '@@rules_rust//rust': java.io.IOException: Error extracting C:/users/<username>/_bazel_<username>/tbbdyysj/external/rules_rust/temp16874040712485521303/rules_rust-0.55.5.tar.gz to C:/users/<username>/_bazel_<username>/tbbdyysj/external/rules_rust/temp16874040712485521303: Cannot create symlink (name=C:\users\<username>\_bazel_<username>\tbbdyysj\external\rules_rust\examples\bzlmod\all_crate_deps\.bazelversion, target=C:\users\<username>\_bazel_<username>\tbbdyysj\external\rules_rust\examples\bzlmod\.bazelversion): ERROR: src/main/native/windows/file-jni.cc(140): nativeCreateSymlink(\\?\C:\users\<username>\_bazel_<username>\tbbdyysj\external\rules_rust\examples\bzlmod\all_crate_deps\.bazelversion, \\?\C:\users\<username>\_bazel_<username>\tbbdyysj\external\rules_rust\examples\bzlmod\.bazelversion): ERROR: src/main/native/windows/file.cc(523): CreateSymlink(\\?\C:\users\<username>\_bazel_<username>\tbbdyysj\external\rules_rust\examples\bzlmod\.bazelversion): createSymbolicLinkW failed (permission denied). Either Windows developer mode or admin privileges are required.
Computing main repo mapping:

[selenium-ci]

@arnonax-tr, thank you for creating this issue. We will troubleshoot it as soon as we can.

Selenium Triage Team: remember to follow the Triage Guide

[arnonax-tr]

I'm currently trying to solve this issue with the help of ChatGPT. If I'll manage to solve it, I'll update the README and probably create a batch file that will solve it, and then I'll send a PR. But If you have a better solution please let me know.

[nvborisenko]

@arnonax-tr

Either Windows developer mode or admin privileges are required

Just enable Windows developer mode.

[arnonax-tr]

I can't. It is also disabled by IT :(
Why do you require admin privileges to build the solution?
ChatGPT suggested to download the needed dependencies and use --override_repository to override them instead of using symlinks. It still doesn't work and I'm still trying, so I don't know yet if it will work or not (I'm not familiar with Bazel so I don't know if the Chat hallucinates or not...)

[cgoldberg]

I ran into this same issue a few months ago and gave up due to not being able to create symlinks without Admin access (I tried every workaround and registry hack I could find).

If you can figure out any easy way to get the build working without creating symlinks, that would be great.

[nvborisenko]

I can! Don't use bazel!

[nvborisenko]

Let me explain... Selenium build process shouldn't be dependent on bazel dependencies. I want to open .NET solution and build it. Every external dependency can be managed as pre-build binaries (like SM is currently managed).

Why.. one more contributor wants to jump into the train, but he cannot, because of strange bazel with complicated setup.

[cgoldberg]

Bazel's a little unwieldy, but do you have a better solution for building/testing for 6 languages on 3 platforms? This project has already been down the road with several build systems.

If you want to put together a small toolchain just for easier contributions on Windows/.NET, you can... but that's like 1/10 of replacing Bazel for the project. For Linux/Python, I mostly use Bazel once to setup my system, then I do all local development and testing just using native Python tooling. It's quick and simple, and I know the tools well. Occasionally,I rebuild with Bazel to upgrade Selenium Manager, CDP, and other stuff.

If you can make development environment setup for your specific platform and language easier, I'm sure that would be welcome.

[nvborisenko]

Easy decision for me. What if we will support Borland Delphi language binding? Bazel doesn't support it. What we will do? Right, use native tools for building. The same logic can be applied for all bindings - use native tools. Selenium is finding something universal.. but nobody can be universal.

#10371 - this issue is good example where bazel was bad. Moreover somebody wrote "it is shame" (probably comment has been deleted), and I support this phrase. Moreover, I tweak bazel setup in .NET just to recognize common features (like pre-processor directives). And I remember many situations when we were waiting bazel's fix. Selenium is dependent on bazel... why... I don't see reasons why.

Why Selenium Manager is not dependent on bazel?

Solution:

• Analyze what we use as an external dependency (atoms, SM, anything else?)
• Provide the dependencies as built binaries

Happy!!! Everybody is happy. Believe me, you will get more PRs, when people will be able just to build bindings in theirs native toolchain. 8.6K forks - 796 contributors. Why people is forking...

[arnonax-tr]

UPDATE: After I posted this message I realized that all tests fail. I'll try to investigate it now. Anyway, probably the information below is still relevant.

Finally I managed to make it work on my machine without Admin.
At first I thought to create a batch file or add few notes to the README to explain exactly how to do it, but it got a bit complicated and somewhat specific.

However, here's the summary of the Chat, that may help others. It even suggests such a batch file (because I previously asked for it) and the changes in the README, but I'm afraid that they're not comprehensive enough, and anyway I haven't tested them (in a clean environment, after I already fixed my environment):

---

"""
If you’re up for it, here’s a short “wrap-up + tidy-up” so it keeps working from both CLI and Visual Studio, and so you can upstream a tiny helper + docs if you want.

What made it work (keepers)

• Disable Windows symlink features unless Dev Mode/admin is allowed:

  • startup --nowindows_enable_symlinks and build --noenable_runfiles. Bazel’s Windows docs note symlinks require Dev Mode/admin; otherwise avoid them. ([Stack Overflow]1)

• Real Bash for genrules: Git Bash via --shell_executable="C:/Program Files/Git/usr/bin/bash.exe" (or by setting BAZEL_SH). Genrules/shell rules need Bash on Windows. ([GitHub]2)

• Make Bash ignore CRLF for non-interactive shells (BASH_ENV with set -o igncr), which eliminates the $'\r' error pattern. (Standard MSYS/Cygwin workaround.) ([Bazel]3)

• Shorter output root helps with path lengths: startup --output_user_root=C:/bzl. ([Bazel]3)

• Status script under locked policies: quote the entire value so Bazel treats it as one arg:
  build --workspace_status_command="powershell -NonInteractive -NoProfile -ExecutionPolicy Bypass -File scripts/build-info.ps1". (It’s a supported flag; -ExecutionPolicy Bypass is a common, process-scoped bypass.) ([Bazel]3)

• Local overrides for archives that contain symlinks:
  --override_repository=<name>=C:/… avoids extracting symlinked tarballs. (Officially supported; no source edits.) ([Bazel]4)

• User .bazelrc so VS builds inherit the same flags/env; later rc files win, and the user rc lives at %USERPROFILE%\.bazelrc. ([Bazel]3)

• Crate Universe generator: provide it via CARGO_BAZEL_GENERATOR_URL=file:///C:/…/cargo-bazel.exe when using a local rules_rust checkout. (Supported in rules_rust docs.) ([Bazel Build]5)

Minimal helper you can commit

Drop this as scripts/windows/build-dotnet-no-admin.cmd (no downloads; just wires flags). It’s intentionally tiny + vendor-neutral.

@echo off
setlocal enableextensions enabledelayedexpansion

if not defined BAZEL_OUTPUT_USER_ROOT set "BAZEL_OUTPUT_USER_ROOT=C:\bzl"
set "STARTUP=--nowindows_enable_symlinks --output_user_root=%BAZEL_OUTPUT_USER_ROOT%"
set "COMMON=--noenable_runfiles -s --verbose_failures"

rem Prefer Git Bash for genrules if available
if not defined BAZEL_SH (
  for %%G in ("C:\Program Files\Git\usr\bin\bash.exe" ^
              "C:\Program Files\Git\bin\bash.exe") do if exist "%%~G" set "BAZEL_SH=%%~G"
)
if defined BAZEL_SH echo [INFO] Using BAZEL_SH=%BAZEL_SH%

rem Make Bash ignore CRLF for non-interactive shells
if not defined BASH_ENV (
  set "BASH_ENV=%TEMP%\bashenv_igncr.sh"
  >"%BASH_ENV%" (echo set -o igncr)
)

set "WS=--workspace_status_command=powershell -NonInteractive -NoProfile -ExecutionPolicy Bypass -File scripts/build-info.ps1"

echo [INFO] bazelisk %STARTUP% build //dotnet/... %COMMON% %WS% %*
bazelisk %STARTUP% build //dotnet/... %COMMON% %WS% %*
exit /b %ERRORLEVEL%

Users can still append --override_repository=… args when they hit a symlinked external.

README nib (Windows)

• Prereqs (official):

  • VS 2022 Build Tools + Windows 10/11 SDK (MSVC v143). (Install via VS Installer; this is the standard way Bazel finds cl.exe.) (Bazel)
  • Git for Windows (provides Git Bash; Portable build available). ([git-scm.com]6)
  • Bazelisk.

• Build once before opening the VS solution (Selenium’s .NET README calls this out):
  bazel build dotnet/... ([chromium.googlesource.com]7)

• If Dev Mode/admin is blocked, run:
  scripts\windows\build-dotnet-no-admin.cmd

• If a fetch fails with “Cannot create symlink…”, clone that dependency’s tag and pass:
  --override_repository=<name>=C:/path/to/local/checkout. (Official escape hatch.) ([Bazel]4)

Handy diagnostics to keep

• Show which rc files/options were used:
  bazelisk help --announce_rc (user rc should appear last). ([Bazel]3)
• Confirm VS inherits env (after you set them as User vars): BAZEL_SH, CARGO_BAZEL_GENERATOR_URL, optional BAZEL_VC.

If you want, I can prep a little PR patch (helper script + README hunk) tailored to Selenium’s tree layout, or a super-short checklist for contributors (“Windows quick start”) that mirrors the official docs.

"""

[arnonax-tr]

I managed to solve this too, but for that I had to change some code which I tried to avoid...
First, I had to add the following lines to %USERPROFILE%\.bazelrc:

build   --noenable_runfiles
test    --noenable_runfiles

The code change is at TestWebServer.cs. Replace the current if (standaloneAppserverPath is null) block with the following block:

if (standaloneAppserverPath is null)
{
    // Use the repo root as working dir (same as before)
    projectRootPath = Path.Combine(AppContext.BaseDirectory, "../../../../../..");

    if (System.Runtime.InteropServices.RuntimeInformation.IsOSPlatform(
            System.Runtime.InteropServices.OSPlatform.Windows))
    {
        // Windows: avoid `bazel run` (needs runfile symlinks). Launch the built EXE.
        var appserverExe = Path.GetFullPath(Path.Combine(
            projectRootPath,
            "bazel-bin/java/test/org/openqa/selenium/environment/appserver.exe"));

        if (!File.Exists(appserverExe))
        {
            // Build it once (doesn't require runfile symlinks)
            var build = new System.Diagnostics.ProcessStartInfo(
                "bazel", "build //java/test/org/openqa/selenium/environment:appserver")
            {
                WorkingDirectory = projectRootPath,
                UseShellExecute = false,
            };
            using (var p = System.Diagnostics.Process.Start(build))
            {
                p?.WaitForExit(10 * 60 * 1000); // up to 10 minutes
            }
        }

        processFileName = appserverExe;
        processArguments = $"{port}";
    }
    else
    {
        // Non-Windows: keep the existing behavior
        processFileName = "bazel";
        processArguments =
            $"run //java/test/org/openqa/selenium/environment:appserver {port}";
    }
}