Source: irker Version: 2.24+dfsg-3 Severity: important Justification: fails autopkgtest on Debian CI infrastructure Tags: forky sid User: [email protected] Usertags: lxc
Hi,
Debian CI is switching away from lxc containers in favor of incus Containers.
This is motivated by security concerns from us; incus is based on lxc, but
orchestrates containers substantially different: containers are not privileged
(so root in the container is not uid 0 outside of it, and incus imposes a
stricter isolation from the host system.
irker passes its tests under lxc, but fails under incus.
The relevant part of the failure is (hopefully):
> Setting up libgnutls30t64:amd64 (3.8.13-1) ...
> Setting up libpython3.14-stdlib:amd64 (3.14.6-1) ...
> Setting up libpsl5t64:amd64 (0.23.1-1) ...
> Setting up python3.14 (3.14.6-1) ...
> Setting up libngtcp2-crypto-gnutls8:amd64 (1.24.0-1) ...
> Setting up libpython3-stdlib:amd64 (3.14.6-1) ...
> Setting up libcurl4-gnutls:amd64 (8.21.0-2) ...
> Setting up libcurl3t64-gnutls:amd64 (8.21.0-2) ...
> Setting up python3 (3.14.6-1) ...
> Setting up python3-six (1.17.0-3) ...
> Setting up git (1:2.53.0-1) ...
> Setting up python3-irc (8.5.3+dfsg-5) ...
> /usr/lib/python3/dist-packages/irc/client.py:87: SyntaxWarning: "\d" is an
> invalid escape sequence. Such sequences will not work in the future. Did you
> mean "\\d"? A raw string is also an option.
> VERSION = tuple(int(res) for res in re.findall('\d+', VERSION_STRING))
> /usr/lib/python3/dist-packages/irc/server.py:213: SyntaxWarning: "\-" is an
> invalid escape sequence. Such sequences will not work in the future. Did you
> mean "\\-"? A raw string is also an option.
> if re.search('[^a-zA-Z0-9\-\[\]\'`^{}_]', nick):
> Setting up irker (2.24+dfsg-3) ...
> Creating group 'irker' with GID 994.
> Creating user 'irker' (irker daemon) with UID 994 and GID 994.
> Created symlink '/etc/systemd/system/irker.service' →
> '/usr/lib/systemd/system/irkerd.service'.
> Created symlink '/etc/systemd/system/multi-user.target.wants/irkerd.service'
> → '/usr/lib/systemd/system/irkerd.service'.
> Processing triggers for systemd (261.2-1) ...
> Processing triggers for libc-bin (2.42-17) ...
> autopkgtest [20:46:37]: test test-simple: [-----------------------
> Initialized empty Git repository in /tmp/tmp.hwIySFbxxc/test_repo/.git/
> [master (root-commit) 0f4d587] Test commit
> 1 file changed, 0 insertions(+), 0 deletions(-)
> create mode 100644 start
> /tmp/autopkgtest.XetPAq/build.TWU/src/debian/tests/test-simple: 115: pkill:
> not found
> /tmp/autopkgtest.XetPAq/wrapper.sh: Killing leaked background processes: 2063
> 2070
> Error: Command not found
> autopkgtest [20:46:48]: test test-simple: -----------------------]
> autopkgtest [20:46:48]: test test-simple: - - - - - - - - - - results - - -
> - - - - - - -
> test-simple FAIL non-zero exit status 127
> autopkgtest [20:46:48]: test test-simple: - - - - - - - - - - stderr - - - -
> - - - - - -
> /tmp/autopkgtest.XetPAq/build.TWU/src/debian/tests/test-simple: 115: pkill:
> not found
> autopkgtest [20:46:49]: @@@@@@@@@@@@@@@@@@@@ summary
> test-simple FAIL non-zero exit status 127
The full autokpgtest logs are available at:
https://ci.debian.net/experiments/8/regressions/
(please beware of pagination)
Common types of failure and suggested fixes are being documented at:
https://wiki.debian.org/ContinuousIntegration/LxcToIncus
Note that for the time being, irker is still being tested under lxc to
avoid disturbing its testing migration test results.
If you decide to add the `isolation-machine` restriction to get this package
tested under qemu, please mention that explicitly when closing this bug (it's
fine to do that only in the package changelog entry that closes the bug) so
that we can configure your package for qemu on ci.debian.net.
signature.asc
Description: PGP signature
