Your message dated Sat, 22 Aug 2026 16:21:21 +0000
with message-id <[email protected]>
and subject line Bug#1144768: fixed in arno-iptables-firewall 2.1.2a-5
has caused the Debian Bug report #1144768,
regarding arno-iptables-firewall: autopkgtest fails under incus-lxc: ps: not
found
to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact [email protected]
immediately.)
--
1144768: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1144768
Debian Bug Tracking System
Contact [email protected] with problems
--- Begin Message ---
Source: arno-iptables-firewall
Version: 2.1.2a-4
Severity: important
Justification: fails autopkgtest on Debian CI infrastructure
Tags: forky sid
User: [email protected]
Usertags: lxc
Hi,
Debian CI is switching away from lxc containers in favor of incus Containers.
This is motivated by security concerns from us; incus is based on lxc, but
orchestrates containers substantially different: containers are not privileged
(so root in the container is not uid 0 outside of it, and incus imposes a
stricter isolation from the host system.
arno-iptables-firewall passes its tests under lxc, but fails under incus.
The relevant part of the failure is (hopefully):
> Get:4 http://deb.debian.org/debian testing/main amd64 gawk amd64 1:5.3.2-1
> [772 kB]
> Get:5 http://deb.debian.org/debian testing/main amd64 libcap2 amd64 1:2.78-1
> [26.9 kB]
> Get:6 http://deb.debian.org/debian testing/main amd64 libcap2-bin amd64
> 1:2.78-1 [36.7 kB]
> Get:7 http://deb.debian.org/debian testing/main amd64 libelf1t64 amd64
> 0.195-1 [58.1 kB]
> Get:8 http://deb.debian.org/debian testing/main amd64 libbpf1 amd64 1:1.7.0-1
> [179 kB]
> Get:9 http://deb.debian.org/debian testing/main amd64 libmnl0 amd64
> 1.0.5-3+b2 [12.2 kB]
> Get:10 http://deb.debian.org/debian testing/main amd64 libkrb5support0 amd64
> 1.22.1-3 [31.1 kB]
> Get:11 http://deb.debian.org/debian testing/main amd64 libcom-err2 amd64
> 1.47.4-1 [19.2 kB]
> Get:12 http://deb.debian.org/debian testing/main amd64 libk5crypto3 amd64
> 1.22.1-3 [79.0 kB]
> Get:13 http://deb.debian.org/debian testing/main amd64 libkeyutils1 amd64
> 1.6.3-6+b2 [9348 B]
> Get:14 http://deb.debian.org/debian testing/main amd64 libkrb5-3 amd64
> 1.22.1-3 [335 kB]
> Get:15 http://deb.debian.org/debian testing/main amd64 libgssapi-krb5-2 amd64
> 1.22.1-3 [137 kB]
> Get:16 http://deb.debian.org/debian testing/main amd64 libtirpc-common all
> 1.3.7+ds-1 [10.0 kB]
> Get:17 http://deb.debian.org/debian testing/main amd64 libtirpc3t64 amd64
> 1.3.7+ds-1 [82.9 kB]
> Get:18 http://deb.debian.org/debian testing/main amd64 libxtables12 amd64
> 1.8.13-1 [30.5 kB]
> Get:19 http://deb.debian.org/debian testing/main amd64 iproute2 amd64 7.1.0-1
> [1149 kB]
> Get:20 http://deb.debian.org/debian testing/main amd64 libkmod2 amd64
> 34.2-2+b2 [62.5 kB]
> Get:21 http://deb.debian.org/debian testing/main amd64 kmod amd64 34.2-2+b2
> [95.7 kB]
> Get:22 http://deb.debian.org/debian testing/main amd64 netbase all 6.5 [12.4
> kB]
> Get:23 http://deb.debian.org/debian testing/main amd64 libncursesw6 amd64
> 6.6+20260608-2 [137 kB]
> Get:24 http://deb.debian.org/debian testing/main amd64 libproc2-1 amd64
> 2:4.0.6-3 [69.4 kB]
> Get:25 http://deb.debian.org/debian testing/main amd64 procps amd64 2:4.0.6-3
> [983 kB]
> Get:26 http://deb.debian.org/debian testing/main amd64 libip4tc2 amd64
> 1.8.13-1 [18.6 kB]
> Get:27 http://deb.debian.org/debian testing/main amd64 libip6tc2 amd64
> 1.8.13-1 [18.9 kB]
> Get:28 http://deb.debian.org/debian testing/main amd64 libnfnetlink0 amd64
> 1.0.2-3+b2 [14.9 kB]
> Get:29 http://deb.debian.org/debian testing/main amd64
> libnetfilter-conntrack3 amd64 1.1.1-1 [43.5 kB]
> Get:30 http://deb.debian.org/debian testing/main amd64 libnftnl11 amd64
> 1.3.1-1+b1 [66.3 kB]
> Get:31 http://deb.debian.org/debian testing/main amd64 iptables amd64
> 1.8.13-1 [361 kB]
> Get:32 http://deb.debian.org/debian testing/main amd64 arno-iptables-firewall
> all 2.1.2a-4 [149 kB]
> Preconfiguring packages ...
> /var/cache/debconf/tmp.ci/arno-iptables-firewall.config.uNnupG: 1: ps: not
> found
> /var/cache/debconf/tmp.ci/arno-iptables-firewall.config.uNnupG: 12: [: =:
> unexpected operator
> /var/cache/debconf/tmp.ci/arno-iptables-firewall.config.uNnupG: 1: ps: not
> found
> /var/cache/debconf/tmp.ci/arno-iptables-firewall.config.uNnupG: 11: [: -gt:
> unexpected operator
> Fetched 5984 kB in 0s (15.3 MB/s)
> Selecting previously unselected package libmpfr6:amd64.
> (Reading database ... (Reading database ... 5% (Reading database ... 10%
> (Reading database ... 15% (Reading database ... 20% (Reading database ... 25%
> (Reading database ... 30% (Reading database ... 35% (Reading database ... 40%
> (Reading database ... 45% (Reading database ... 50% (Reading database ... 55%
> (Reading database ... 60% (Reading database ... 65% (Reading database ... 70%
> (Reading database ... 75% (Reading database ... 80% (Reading database ... 85%
> (Reading database ... 90% (Reading database ... 95% (Reading database ...
> 100% (Reading database ... 10006 files and directories currently installed.)
> Preparing to unpack .../libmpfr6_4.2.2-3_amd64.deb ...
> Unpacking libmpfr6:amd64 (4.2.2-3) ...
> Selecting previously unselected package readline-common.
> Preparing to unpack .../readline-common_8.3-4_all.deb ...
> Unpacking readline-common (8.3-4) ...
> Selecting previously unselected package libreadline8t64:amd64.
> Preparing to unpack .../libreadline8t64_8.3-4_amd64.deb ...
> Adding 'diversion of /lib/x86_64-linux-gnu/libhistory.so.8 to
> /lib/x86_64-linux-gnu/libhistory.so.8.usr-is-merged by libreadline8t64'
> Adding 'diversion of /lib/x86_64-linux-gnu/libhistory.so.8.2 to
> /lib/x86_64-linux-gnu/libhistory.so.8.2.usr-is-merged by libreadline8t64'
> Adding 'diversion of /lib/x86_64-linux-gnu/libreadline.so.8 to
> /lib/x86_64-linux-gnu/libreadline.so.8.usr-is-merged by libreadline8t64'
> Adding 'diversion of /lib/x86_64-linux-gnu/libreadline.so.8.2 to
> /lib/x86_64-linux-gnu/libreadline.so.8.2.usr-is-merged by libreadline8t64'
> Unpacking libreadline8t64:amd64 (8.3-4) ...
> Setting up libmpfr6:amd64 (4.2.2-3) ...
> Setting up readline-common (8.3-4) ...
> Setting up libreadline8t64:amd64 (8.3-4) ...
> Selecting previously unselected package gawk.
> (Reading database ... (Reading database ... 5% (Reading database ... 10%
> (Reading database ... 15% (Reading database ... 20% (Reading database ... 25%
> (Reading database ... 30% (Reading database ... 35% (Reading database ... 40%
> (Reading database ... 45% (Reading database ... 50% (Reading database ... 55%
> (Reading database ... 60% (Reading database ... 65% (Reading database ... 70%
> (Reading database ... 75% (Reading database ... 80% (Reading database ... 85%
> (Reading database ... 90% (Reading database ... 95% (Reading database ...
> 100% (Reading database ... 10049 files and directories currently installed.)
> Preparing to unpack .../00-gawk_1%3a5.3.2-1_amd64.deb ...
> Unpacking gawk (1:5.3.2-1) ...
> Selecting previously unselected package libcap2:amd64.
> Preparing to unpack .../01-libcap2_1%3a2.78-1_amd64.deb ...
> Unpacking libcap2:amd64 (1:2.78-1) ...
> Selecting previously unselected package libcap2-bin.
> Preparing to unpack .../02-libcap2-bin_1%3a2.78-1_amd64.deb ...
The full autokpgtest logs are available at:
https://ci.debian.net/experiments/8/regressions/
(please beware of pagination)
Common types of failure and suggested fixes are being documented at:
https://wiki.debian.org/ContinuousIntegration/LxcToIncus
Note that for the time being, arno-iptables-firewall is still being tested
under lxc to
avoid disturbing its testing migration test results.
If you decide to add the `isolation-machine` restriction to get this package
tested under qemu, please mention that explicitly when closing this bug (it's
fine to do that only in the package changelog entry that closes the bug) so
that we can configure your package for qemu on ci.debian.net.
signature.asc
Description: PGP signature
--- End Message ---
--- Begin Message ---
Source: arno-iptables-firewall
Source-Version: 2.1.2a-5
Done: Sven Geuer <[email protected]>
We believe that the bug you reported is fixed in the latest version of
arno-iptables-firewall, which is due to be installed in the Debian FTP archive.
A summary of the changes between this version and the previous one is
attached.
Thank you for reporting the bug, which will now be closed. If you
have further comments please address them to [email protected],
and the maintainer will reopen the bug report if appropriate.
Debian distribution maintenance software
pp.
Sven Geuer <[email protected]> (supplier of updated arno-iptables-firewall
package)
(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing [email protected])
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Sat, 22 Aug 2026 17:40:20 +0200
Source: arno-iptables-firewall
Architecture: source
Version: 2.1.2a-5
Distribution: unstable
Urgency: medium
Maintainer: Debian Security Tools <[email protected]>
Changed-By: Sven Geuer <[email protected]>
Closes: 1144768
Changes:
arno-iptables-firewall (2.1.2a-5) unstable; urgency=medium
.
* d/t/*:
- Drop meanwhile unneeded test 'implicit-directories'.
- Switch remaining test to 'isolation-machine' (Closes: #1144768).
arno-iptables-firewall configures netfilter modules, so accesses the
kernel in a way not available under incus-lxc.
Checksums-Sha1:
ba53100299d10383e49d83799223bee12783c1c1 2395
arno-iptables-firewall_2.1.2a-5.dsc
f71defe8612b4343123f4142a640ee9477468b08 60504
arno-iptables-firewall_2.1.2a-5.debian.tar.xz
2e918d24bf276971785a9c83242889e7598ec3ea 405636
arno-iptables-firewall_2.1.2a-5.git.tar.xz
aac454b972332496e39a3edf52e31b55dd38ecb7 17724
arno-iptables-firewall_2.1.2a-5_source.buildinfo
Checksums-Sha256:
5fbff7b3595eb35802cbf3d910751696eaa6fba12cc80bae256fa2140b41ca66 2395
arno-iptables-firewall_2.1.2a-5.dsc
c3668c8e3781262117cd0fb7982fb91a07760a9137299b6d0dcb1c7fc14ada9a 60504
arno-iptables-firewall_2.1.2a-5.debian.tar.xz
f173b0ff81d7f570fd7abb9c4d9586e663748229638c2c5609cccfab3852bb6c 405636
arno-iptables-firewall_2.1.2a-5.git.tar.xz
21e583671ab02d749673e9d8a065b544279c4889085a322e486a3351cb5e3784 17724
arno-iptables-firewall_2.1.2a-5_source.buildinfo
Files:
9120cd754db34ebcca26a43a94f3add5 2395 net optional
arno-iptables-firewall_2.1.2a-5.dsc
dfea46acc85a4684ec1a9d74120e8c8a 60504 net optional
arno-iptables-firewall_2.1.2a-5.debian.tar.xz
2f3715b8187128de794635e274a5e7b0 405636 net None
arno-iptables-firewall_2.1.2a-5.git.tar.xz
3f1a0f59661c9b3fba456f6d76b4b512 17724 net optional
arno-iptables-firewall_2.1.2a-5_source.buildinfo
Git-Tag-Info: tag=00f5689afb53f9596b6cf686a228783d8f996cf3
fp=3df5e8aa43fc9fdfd086f195adf50edaf8add585
Git-Tag-Tagger: Sven Geuer <[email protected]>
-----BEGIN PGP SIGNATURE-----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=ZApL
-----END PGP SIGNATURE-----
pgp2DLxEfN1KQ.pgp
Description: PGP signature
--- End Message ---
