Your message dated Tue, 15 Sep 2026 19:19:52 +0000
with message-id <[email protected]>
and subject line Bug#1144840: fixed in suricata 1:8.0.7-1
has caused the Debian Bug report #1144840,
regarding suricata: autopkgtest fails under incus-lxc:
debian/tests/systemd-service-test.sh: 9: ip: not found
to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact [email protected]
immediately.)
--
1144840: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1144840
Debian Bug Tracking System
Contact [email protected] with problems
--- Begin Message ---
Source: suricata
Version: 1:8.0.6-1
Severity: important
Justification: fails autopkgtest on Debian CI infrastructure
Tags: forky sid
User: [email protected]
Usertags: lxc
Hi,
Debian CI is switching away from lxc containers in favor of incus Containers.
This is motivated by security concerns from us; incus is based on lxc, but
orchestrates containers substantially different: containers are not privileged
(so root in the container is not uid 0 outside of it), and incus imposes a
stricter isolation from the host system).
suricata passes its tests under lxc, but fails under incus.
The relevant part of the failure is (hopefully):
> Setting up librte-argparse26:amd64 (25.11.2-1) ...
> Setting up libpython3.14-stdlib:amd64 (3.14.6-1) ...
> Setting up librte-eal26:amd64 (25.11.2-1) ...
> Setting up librte-pci26:amd64 (25.11.2-1) ...
> Setting up librte-ring26:amd64 (25.11.2-1) ...
> Setting up librte-meter26:amd64 (25.11.2-1) ...
> Setting up librte-bus-pci26:amd64 (25.11.2-1) ...
> Setting up python3.14 (3.14.6-1) ...
> Setting up libpython3-stdlib:amd64 (3.14.6-1) ...
> Setting up librte-bus-vdev26:amd64 (25.11.2-1) ...
> Setting up python3 (3.14.6-1) ...
> Setting up librte-rcu26:amd64 (25.11.2-1) ...
> Setting up librte-mempool26:amd64 (25.11.2-1) ...
> Setting up librte-mbuf26:amd64 (25.11.2-1) ...
> Setting up librte-sched26:amd64 (25.11.2-1) ...
> Setting up librte-net26:amd64 (25.11.2-1) ...
> Setting up librte-ethdev26:amd64 (25.11.2-1) ...
> Setting up librte-hash26:amd64 (25.11.2-1) ...
> Setting up librte-ip-frag26:amd64 (25.11.2-1) ...
> Setting up librte-net-bond26:amd64 (25.11.2-1) ...
> Setting up suricata (1:8.0.6-1) ...
> Created symlink
> '/etc/systemd/system/multi-user.target.wants/suricata.service' →
> '/usr/lib/systemd/system/suricata.service'.
> Processing triggers for systemd (261.2-1) ...
> Processing triggers for libc-bin (2.42-17) ...
> autopkgtest [20:56:25]: test systemd-service-test.sh: [-----------------------
> + SERVICE=suricata.service
> + ETC_SERVICE_FILE=/etc/systemd/system/suricata.service
> + LIB_SERVICE_FILE=/lib/systemd/system/suricata.service
> + CONFIG_FILE=/etc/suricata/suricata.yaml
> + ip route show
> /tmp/autopkgtest.5SRe42/build.zA9/src/debian/tests/systemd-service-test.sh:
> 9: ip: not found
> + awk /default/ {print $5}
> + IFACE=
> + [ ! -r /lib/systemd/system/suricata.service ]
> + [ ! -w /etc/suricata/suricata.yaml ]
> + echo
> %YAML 1.1
> ---
> default-rule-path: /etc/suricata/rules
> rule-files:
> - tor.rules
> - http-events.rules
> - smtp-events.rules
> - dns-events.rules
> - tls-events.rules
> classification-file: /etc/suricata/classification.config
> reference-config-file: /etc/suricata/reference.config
> default-log-dir: /var/log/suricata/
> af-packet:
> - interface:
> cluster-id: 99
> cluster-type: cluster_flow
> defrag: yes
> - interface: default
> tpacket-v3: yes
> block-size: 131072
> app-layer:
> protocols:
> ssh:
> enabled: yes
> host-mode: auto
The full autokpgtest logs are available at:
https://ci.debian.net/experiments/8/regressions/
(please beware of pagination)
Common types of failure and suggested fixes are being documented at:
https://wiki.debian.org/ContinuousIntegration/LxcToIncus
Note that for the time being, suricata is still being tested under lxc to
avoid disturbing its testing migration test results.
If you decide to add the `isolation-machine` restriction to get this package
tested under qemu, please mention that explicitly when closing this bug (it's
fine to do that only in the package changelog entry that closes the bug) so
that we can configure your package for qemu on ci.debian.net.
signature.asc
Description: PGP signature
--- End Message ---
--- Begin Message ---
Source: suricata
Source-Version: 1:8.0.7-1
Done: Andreas Dolp <[email protected]>
We believe that the bug you reported is fixed in the latest version of
suricata, which is due to be installed in the Debian FTP archive.
A summary of the changes between this version and the previous one is
attached.
Thank you for reporting the bug, which will now be closed. If you
have further comments please address them to [email protected],
and the maintainer will reopen the bug report if appropriate.
Debian distribution maintenance software
pp.
Andreas Dolp <[email protected]> (supplier of updated suricata package)
(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing [email protected])
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Tue, 15 Sep 2026 19:44:38 +0200
Source: suricata
Architecture: source
Version: 1:8.0.7-1
Distribution: unstable
Urgency: medium
Maintainer: Sascha Steinbiss <[email protected]>
Changed-By: Andreas Dolp <[email protected]>
Closes: 1049171 1144840
Changes:
suricata (1:8.0.7-1) unstable; urgency=medium
.
* New upstream version 8.0.7
* d/tests/control: Add missing test dependencies on iproute2 and awk
for test script 'systemd-service-test.sh'.
Closes: #1144840
* Fix FTBFS after successful builds:
* d/rules: Apply 'dh_auto_clean' in 'override_dh_auto_clean'.
* rust/Makefile.am: Do not clean orig-tarball folders 'vendor' and 'dist'
in distclean-local target.
Closes: #1049171
* d/control: Add dependency on 'procps' for binary package because it uses
the 'kill' command in systemd reload and logrotate.
Checksums-Sha1:
bd989591a1b323b0ee1d7b1cb0283968c17f4941 2548 suricata_8.0.7-1.dsc
b41a5353976e3ce6cbaa762c2225d5e927f8fcd3 44520405 suricata_8.0.7.orig.tar.gz
31bd05304fe2df5cd7c27b8f4f349283169cbadd 833 suricata_8.0.7.orig.tar.gz.asc
4b05c93a12f1c85e017e62681d7b6fcfdeed7bf9 24696 suricata_8.0.7-1.debian.tar.xz
890d07fc94a0557a0d6091dd3f8113c1356ab4d0 17179 suricata_8.0.7-1_arm64.buildinfo
Checksums-Sha256:
f34fc3cddc7d3b0eee8691b6ea7020708af084b300b5742c0ec2556446008507 2548
suricata_8.0.7-1.dsc
a9d46a9c8f40e81f8a6df3ecc2c5a9a8e8da985876299108d92da547c013ba8c 44520405
suricata_8.0.7.orig.tar.gz
fbf43f3e7d317f1feb28f386d060568465d98ca549b06ec6dc62410ea7bd6c39 833
suricata_8.0.7.orig.tar.gz.asc
b3d0454f42f81a3d1baea755829a4cfe1c8b317c19167a07e7bd90316d6a8d57 24696
suricata_8.0.7-1.debian.tar.xz
f706d96667a03b7c84f594fbf75fb26b4adc6a7eb6039adcf79b8db409bea2c7 17179
suricata_8.0.7-1_arm64.buildinfo
Files:
57c1d2b56a5c0822889d1f1f6dba5473 2548 net optional suricata_8.0.7-1.dsc
a235c7547099f566d7ef7920adf70f61 44520405 net optional
suricata_8.0.7.orig.tar.gz
9db889b23a1e01bdbb02d44f35c322fc 833 net optional
suricata_8.0.7.orig.tar.gz.asc
3a2e20fe41a49efed26414a755112e67 24696 net optional
suricata_8.0.7-1.debian.tar.xz
74e48ac45ad78704a997acb1c040ad81 17179 net optional
suricata_8.0.7-1_arm64.buildinfo
-----BEGIN PGP SIGNATURE-----
iIoEARYKADIWIQTjqpLKhithiGov9EruqOTPfpjPmQUCaqmU8RQcZGV2QGFuZHJl
YXMtZG9scC5kZQAKCRDuqOTPfpjPmSBGAQDBmpXtJHsUJkeHAFelkBATl3hy8kYP
E1fwNifJb60+4wEAkZ9ohq1KlhCTGx10wZ/LIKQ2X/g7Ax3iBRBA7jik1AA=
=Xphw
-----END PGP SIGNATURE-----
pgpnghr6_7qec.pgp
Description: PGP signature
--- End Message ---
