Your message dated Thu, 27 Aug 2026 17:04:33 +0000
with message-id <[email protected]>
and subject line Bug#1144849: fixed in wireguard 1.0.20260223-2
has caused the Debian Bug report #1144849,
regarding wireguard: autopkgtest fails under incus-lxc: mount of /sys failed:
Operation not permitted
to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact [email protected]
immediately.)
--
1144849: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1144849
Debian Bug Tracking System
Contact [email protected] with problems
--- Begin Message ---
Source: wireguard
Version: 1.0.20260223-1
Severity: important
Justification: fails autopkgtest on Debian CI infrastructure
Tags: forky sid
User: [email protected]
Usertags: lxc
Hi,
Debian CI is switching away from lxc containers in favor of incus Containers.
This is motivated by security concerns from us; incus is based on lxc, but
orchestrates containers substantially different: containers are not privileged
(so root in the container is not uid 0 outside of it), and incus imposes a
stricter isolation from the host system).
wireguard passes its tests under lxc, but fails under incus.
The relevant part of the failure is (hopefully):
> dracut: Generating /boot/initrd.img-7.1.7+deb14-amd64
> dracut-install: WARNING: could not locate dlopen dependency for gcrypt
> feature requested by
> '/usr/lib/x86_64-linux-gnu/systemd/libsystemd-shared-261.so'
> Setting up linux-image-amd64 (7.1.7-1) ...
> Setting up wireguard (1.0.20260223-1) ...
> Processing triggers for libc-bin (2.42-17) ...
> Processing triggers for dracut (112-1) ...
> update-initramfs: Generating /boot/initrd.img-7.1.7+deb14-amd64
> dracut-install: WARNING: could not locate dlopen dependency for gcrypt
> feature requested by
> '/usr/lib/x86_64-linux-gnu/systemd/libsystemd-shared-261.so'
> autopkgtest [20:53:53]: test wg-quick: [-----------------------
> Setting things up
> Generating keys
> Generating wireguard config
> Cleaning up old namespaces
> Creating new namespaces left_ns and right_ns and adding loopback interface to
> them
> mount of /sys failed: Operation not permitted
> mount of /sys failed: Operation not permitted
> Creating veth interface connecting both namespaces
> mount of /sys failed: Operation not permitted
> mount of /sys failed: Operation not permitted
> mount of /sys failed: Operation not permitted
> mount of /sys failed: Operation not permitted
> Bringing up LEFT wireguard interface in namespace left_ns
> mount of /sys failed: Operation not permitted
> Bringing up RIGHT wireguard interface in namespace right_ns
> mount of /sys failed: Operation not permitted
> Failed vpn test setup
> Some test failed, here is some debugging
> dmesg: read kernel buffer failed: Operation not permitted
> autopkgtest [20:53:53]: test wg-quick: -----------------------]
> autopkgtest [20:53:53]: test wg-quick: - - - - - - - - - - results - - - - -
> - - - - -
> wg-quick FAIL non-zero exit status 1
The full autokpgtest logs are available at:
https://ci.debian.net/experiments/8/regressions/
(please beware of pagination)
Common types of failure and suggested fixes are being documented at:
https://wiki.debian.org/ContinuousIntegration/LxcToIncus
Note that for the time being, wireguard is still being tested under lxc to
avoid disturbing its testing migration test results.
If you decide to add the `isolation-machine` restriction to get this package
tested under qemu, please mention that explicitly when closing this bug (it's
fine to do that only in the package changelog entry that closes the bug) so
that we can configure your package for qemu on ci.debian.net.
signature.asc
Description: PGP signature
--- End Message ---
--- Begin Message ---
Source: wireguard
Source-Version: 1.0.20260223-2
Done: Lukas Märdian <[email protected]>
We believe that the bug you reported is fixed in the latest version of
wireguard, which is due to be installed in the Debian FTP archive.
A summary of the changes between this version and the previous one is
attached.
Thank you for reporting the bug, which will now be closed. If you
have further comments please address them to [email protected],
and the maintainer will reopen the bug report if appropriate.
Debian distribution maintenance software
pp.
Lukas Märdian <[email protected]> (supplier of updated wireguard package)
(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing [email protected])
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Thu, 27 Aug 2026 18:44:03 +0200
Source: wireguard
Built-For-Profiles: derivative.ubuntu noudeb
Architecture: source
Version: 1.0.20260223-2
Distribution: unstable
Urgency: medium
Maintainer: Daniel Kahn Gillmor <[email protected]>
Changed-By: Lukas Märdian <[email protected]>
Closes: 1144849
Changes:
wireguard (1.0.20260223-2) unstable; urgency=medium
.
* Team upload.
.
[ Grayson Wolf ]
* d/t/control: make wg-quick test require isolation-machine,
for compatibility with incus-lxc. (Closes: #1144849)
Checksums-Sha1:
f160678b99dad928a0eb5d200751d9155ef7fa8e 2089 wireguard_1.0.20260223-2.dsc
de7a4af8f04d1fea9abcfbba79370c7a9d3ba193 13032
wireguard_1.0.20260223-2.debian.tar.xz
ccc0bfc0fbb352b0e9709c5d9ad235576a1f5d88 8046
wireguard_1.0.20260223-2_source.buildinfo
Checksums-Sha256:
83560a06bc742261e10a1fffadc1c68b8e1e8b1b5d0991afdfc751f4ded79ac4 2089
wireguard_1.0.20260223-2.dsc
d9756b5a321bf6283443b3a23c75f6de07a303b2722aca63dc2a1b42d5e40923 13032
wireguard_1.0.20260223-2.debian.tar.xz
b57e33e1462515fea3ea42926f4a81a45d88905fbbd8e9c037fa50325c6c520f 8046
wireguard_1.0.20260223-2_source.buildinfo
Files:
92d2897e02384ac7a712372f19eb1984 2089 net optional wireguard_1.0.20260223-2.dsc
7d36212c225129468ace341c87f7ab87 13032 net optional
wireguard_1.0.20260223-2.debian.tar.xz
0a395a7faa8898c1a32a57b1569657a4 8046 net optional
wireguard_1.0.20260223-2_source.buildinfo
-----BEGIN PGP SIGNATURE-----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=ctVb
-----END PGP SIGNATURE-----
pgp3KbHFTh0Qe.pgp
Description: PGP signature
--- End Message ---
