Source: libvmod-selector Version: 2.6.0+20260705-2 Severity: important Justification: fails autopkgtest on Debian CI infrastructure Tags: forky sid User: [email protected] Usertags: lxc
Hi,
Debian CI is switching away from lxc containers in favor of incus Containers.
This is motivated by security concerns from us; incus is based on lxc, but
orchestrates containers substantially different: containers are not privileged
(so root in the container is not uid 0 outside of it, and incus imposes a
stricter isolation from the host system.
libvmod-selector passes its tests under lxc, but fails under incus.
The relevant part of the failure is (hopefully):
> Creating user 'vcache' (Vinyl Cache daemon) with UID 993 and GID 994.
> Creating user 'vinyllog' (Vinyl Cache logs) with UID 992 and GID 994.
> Created symlink
> '/etc/systemd/system/multi-user.target.wants/vinyl-cache.service' →
> '/usr/lib/systemd/system/vinyl-cache.service'.
> vinylncsa.service is a disabled or a static unit, not starting it.
> Setting up libvmod-selector (2.6.0+20260705-2) ...
> Setting up ruby-rubygems (4.0.18-1) ...
> Setting up rake (13.4.2-1) ...
> Setting up libruby3.3:amd64 (3.3.8-2.2) ...
> Setting up ruby3.3 (3.3.8-2.2) ...
> Setting up libruby:amd64 (1:3.3+b1) ...
> Setting up ruby-bcrypt-pbkdf:amd64 (1.1.2-2) ...
> Setting up ruby-ed25519:amd64 (1.4.0+ds-1+b2) ...
> Setting up ruby (1:3.3+b1) ...
> Setting up ruby-rspec-core (3.13.2c6e5m8s7-2) ...
> Setting up ruby-diff-lcs (1.6.2-1) ...
> Setting up ruby-net-ssh (1:7.3.3-1) ...
> Setting up ruby-rspec-expectations (3.13.2c6e5m8s7-2) ...
> Setting up ruby-rspec-mocks (3.13.2c6e5m8s7-2) ...
> Setting up ruby-rspec-its (2.0.0-1) ...
> Setting up ruby-net-scp (4.1.0-1) ...
> Setting up ruby-rspec (3.13.2c6e5m8s7-2) ...
> Setting up ruby-specinfra (2.95.0-1) ...
> Setting up ruby-serverspec (2.43.0-1) ...
> Processing triggers for libc-bin (2.42-17) ...
> autopkgtest [21:06:52]: test serverspec: [-----------------------
> ...FF.........
>
> Failures:
>
> 1) Port "6081" is expected to be listening with tcp
> Failure/Error: it { should be_listening.with('tcp') }
> expected Port "6081" to be listening with tcp
> /bin/sh -c ss\ -tnl4\ \|\ grep\ -E\ --\ :6081\\\
>
> # ./spec/libvmod-selector/install_spec.rb:17:in `block (2 levels) in <top
> (required)>'
>
> 2) Port "6082" is expected to be listening with tcp
> Failure/Error: it { should be_listening.with('tcp') }
> expected Port "6082" to be listening with tcp
> /bin/sh -c ss\ -tnl4\ \|\ grep\ -E\ --\ :6082\\\
>
> # ./spec/libvmod-selector/install_spec.rb:21:in `block (2 levels) in <top
> (required)>'
>
> Finished in 0.48953 seconds (files took 0.32443 seconds to load)
> 14 examples, 2 failures
>
> Failed examples:
>
> rspec ./spec/libvmod-selector/install_spec.rb:17 # Port "6081" is expected to
> be listening with tcp
> rspec ./spec/libvmod-selector/install_spec.rb:21 # Port "6082" is expected to
> be listening with tcp
>
> autopkgtest [21:06:53]: test serverspec: -----------------------]
> autopkgtest [21:06:53]: test serverspec: - - - - - - - - - - results - - - -
> - - - - - -
> serverspec FAIL non-zero exit status 1
> autopkgtest [21:06:53]: @@@@@@@@@@@@@@@@@@@@ summary
> serverspec FAIL non-zero exit status 1
The full autokpgtest logs are available at:
https://ci.debian.net/experiments/8/regressions/
(please beware of pagination)
Common types of failure and suggested fixes are being documented at:
https://wiki.debian.org/ContinuousIntegration/LxcToIncus
Note that for the time being, libvmod-selector is still being tested under lxc
to
avoid disturbing its testing migration test results.
If you decide to add the `isolation-machine` restriction to get this package
tested under qemu, please mention that explicitly when closing this bug (it's
fine to do that only in the package changelog entry that closes the bug) so
that we can configure your package for qemu on ci.debian.net.
signature.asc
Description: PGP signature
