Source: pbuilder Version: 0.231.3 Severity: important Justification: fails autopkgtest on Debian CI infrastructure Tags: forky sid User: [email protected] Usertags: lxc
Hi,
Debian CI is switching away from lxc containers in favor of incus Containers.
This is motivated by security concerns from us; incus is based on lxc, but
orchestrates containers substantially different: containers are not privileged
(so root in the container is not uid 0 outside of it, and incus imposes a
stricter isolation from the host system.
pbuilder passes its tests under lxc, but fails under incus.
The relevant part of the failure is (hopefully):
> ++ eval local 'args=()'
> +++ args=()
> +++ local args
> ++ echo ''
> + DPKG_COMMANDLINE='env PATH="/usr/sbin:/usr/bin:/sbin:/bin"
> HOME="/nonexistent" dpkg-buildpackage -us -uc && env
> PATH="/usr/sbin:/usr/bin:/sbin:/bin" HOME="/nonexistent" dpkg-genchanges -S
> > ../procenv_0.51-0.2_source.changes'
> + unset DISPLAY
> + '[' yes = no ']'
> + BUILD_PID=9655
> + '[' -n '' ']'
> + KILL_WAIT_PID=
> + : Build process
> + '[' -n '' ']'
> + wait 9655
> + DPKG_COMMANDLINE='cd /build/procenv-0.51/ && env
> PATH="/usr/sbin:/usr/bin:/sbin:/bin" HOME="/nonexistent" dpkg-buildpackage
> -us -uc && env PATH="/usr/sbin:/usr/bin:/sbin:/bin" HOME="/nonexistent"
> dpkg-genchanges -S > ../procenv_0.51-0.2_source.changes'
> + log.i 'Running cd /build/procenv-0.51/ && env
> PATH="/usr/sbin:/usr/bin:/sbin:/bin" HOME="/nonexistent" dpkg-buildpackage
> -us -uc && env PATH="/usr/sbin:/usr/bin:/sbin:/bin" HOME="/nonexistent"
> dpkg-genchanges -S > ../procenv_0.51-0.2_source.changes'
> + case "${LOGLEVEL-I}" in
> + log 'I: Running cd /build/procenv-0.51/ && env
> PATH="/usr/sbin:/usr/bin:/sbin:/bin" HOME="/nonexistent" dpkg-buildpackage
> -us -uc && env PATH="/usr/sbin:/usr/bin:/sbin:/bin" HOME="/nonexistent"
> dpkg-genchanges -S > ../procenv_0.51-0.2_source.changes'
> + set +x
> I: Running cd /build/procenv-0.51/ && env
> PATH="/usr/sbin:/usr/bin:/sbin:/bin" HOME="/nonexistent" dpkg-buildpackage
> -us -uc && env PATH="/usr/sbin:/usr/bin:/sbin:/bin" HOME="/nonexistent"
> dpkg-genchanges -S > ../procenv_0.51-0.2_source.changes
> + echo 'cd /build/procenv-0.51/ && env PATH="/usr/sbin:/usr/bin:/sbin:/bin"
> HOME="/nonexistent" dpkg-buildpackage -us -uc && env
> PATH="/usr/sbin:/usr/bin:/sbin:/bin" HOME="/nonexistent" dpkg-genchanges -S
> > ../procenv_0.51-0.2_source.changes'
> + systemd-run --quiet --scope
> --description=pbuilder_build_procenv_0.51-0.2.dsc
> '--slice=system-pbuilder-build-procenv_0.51\x2d0.2-8091.slice'
> --expand-environment=no chroot /var/cache/pbuilder/build/8091 env LD_PRELOAD=
> LOGNAME=pbuilder USER=pbuilder /sbin/start-stop-daemon --start --pidfile
> /dev/null --chuid pbuilder --startas /bin/sh
> dpkg-buildpackage: info: source package procenv
> dpkg-buildpackage: info: source version 0.51-0.2
> dpkg-buildpackage: info: source distribution unstable
> dpkg-buildpackage: info: source changed by Gianfranco Costamagna
> <[email protected]>
> dpkg-source --before-build .
> dpkg-buildpackage: info: host architecture amd64
> debian/rules clean
> dh clean --with autoreconf
> dh: warning: Compatibility levels before 10 are deprecated (level 9 in use)
> sh: 1: cannot create /dev/null: Permission denied
> dh_clean
> dh_clean: warning: Compatibility levels before 10 are deprecated (level 9 in
> use)
> dpkg-source -b .
> dpkg-source: warning: upstream signing key but no upstream tarball signature
> dpkg-source: info: using source format '3.0 (quilt)'
> dpkg-source: info: building procenv using existing ../procenv_0.51.orig.tar.gz
> dpkg-source: info: using patch list from debian/patches/series
> dpkg-source: info: building procenv in ../procenv_0.51-0.2.debian.tar.xz
> dpkg-source: info: building procenv in ../procenv_0.51-0.2.dsc
> debian/rules binary
> dh binary --with autoreconf
> dh: warning: Compatibility levels before 10 are deprecated (level 9 in use)
> sh: 1: cannot create /dev/null: Permission denied
> dh_update_autotools_config
> dh_autoreconf
> autoreconf: export WARNINGS=
> autoreconf: Entering directory '.'
> /usr/bin/autopoint: 237: cannot create /dev/null: Permission denied
> autoreconf: configure.ac: no obvious need to run autopoint
> autoreconf: running: aclocal --force -I m4
> sh: 1: cannot create /dev/null: Permission denied
> autom4te: error: need GNU m4 1.4 or later: /usr/bin/m4
> aclocal: error: /usr/bin/autom4te failed with exit status: 1
> autoreconf: error: aclocal failed with exit status: 1
> dh_autoreconf: error: autoreconf -f -i -v returned exit code 1
> make: *** [debian/rules:5: binary] Error 255
> dpkg-buildpackage: error: debian/rules binary subprocess failed with exit
> status 2
> + trap umountproc_cleanbuildplace_trap exit sighup sigpipe
> + eval ''
> + '[' yes = no ']'
The full autokpgtest logs are available at:
https://ci.debian.net/experiments/8/regressions/
(please beware of pagination)
Common types of failure and suggested fixes are being documented at:
https://wiki.debian.org/ContinuousIntegration/LxcToIncus
Note that for the time being, pbuilder is still being tested under lxc to
avoid disturbing its testing migration test results.
If you decide to add the `isolation-machine` restriction to get this package
tested under qemu, please mention that explicitly when closing this bug (it's
fine to do that only in the package changelog entry that closes the bug) so
that we can configure your package for qemu on ci.debian.net.
signature.asc
Description: PGP signature
