Hi Benjamin,

On Fri, Jun 26, 2026 at 12:53:21AM +0200, Benjamin Drung wrote:
> debifevm-create can be used to build Debian VMs, but it fails to build
> Ubuntu VMs. I tried to make it work and found following issues:
> 
> 1. systemd-resolved is not installed on Ubuntu:
> 
> ```
> $ debefivm-create -r stonking
> [...]
> I: running --customize-hook directly: 
> /usr/bin/../share/debvm/customize-resolved.sh /tmp/mmdebstrap.cwH3vDtSTy
> Failed to enable unit: Unit systemd-resolved.service does not exist
> E: setup failed: E: command failed: 
> /usr/bin/../share/debvm/customize-resolved.sh
> W: hooklistener errored out: E: received eof on socket
> ```

The error message displayed here is very suboptimal, because it does not
hint at the root of the problem. When the hook runs, it examines the
libnss-resolve version and when it fails to find the package, it
concludes that an old systemd version is in use, but stonking is recent.
In theory, the main script should have installed libnss-resolve, but
that can go wrong when you fail to pass the right components. I have
improved the hook to explicitly install libnss-resolve when the systemd
version is recent. When you see an installation failure of
libnss-resolve, it should be much easier to connect the failure to the
missing components. Do you think this is enough to handle this aspect?

https://salsa.debian.org/helmutg/debvm/-/commit/8369544a773e572ab8fd46a53128836d1060a04e

> 2. The symlinks vmlinuz and initrd.img do not exist in / but in /boot:
> 
> ```
> $ debefivm-create -r stonking -- --include=systemd-resolved
> [...]
> I: running special hook: download vmlinuz '/tmp/tmp.imUUTHadEa/kernel'
> W: hooklistener errored out: E: received error on socket
> ```

Can you file a bug against the relevant Ubuntu package to restore the
symlinks and record the bug here?

> 3. The efi.stub package is not installed by default.

This is tricky. What you see is caused by failure to pass required
components (as with libnss-resolve), but it is more difficult to address
this in a better way.  Since the packages got renamed, I match them
using ?narrow and that makes them go missing when components are
missing. Their use happens via a download hook, so I cannot easily
branch there. I'm also hesitant to add another hook just for validating
that the efi stub was properly installed. In the end, this will likely
not be practically relevant, because the resolved failure comes first
and once you fix that, the stub is there. Do you agree with dropping
this aspect?

> 4. dracut should be used instead of initramfs-tools on Ubuntu 26.04 and
> newer.

First and foremost, you can pass --include=dracut and that'll stop debvm
from installing initramfs-tools. That's a workaround. The real issue you
see is that dracut has become the default and debvm should use the
default generator. I think this needs to be solved at a higher level. In
order to sanely select the initramfs tool, we need a
default-linux-initramfs-tool virtual package and dracut should be the
only one providing it. You see dracut exists for a long time, but only
recently has become the default. If I were to just prefer dracut over
initramfs-tools, I would be breaking older releases. Can you get this
going on the Ubuntu side and record the bug here?

Helmut

Reply via email to