Source: swtpm Version: 0.10.1+ds-1 Severity: important Justification: fails autopkgtest on Debian CI infrastructure Tags: forky sid User: [email protected] Usertags: lxc
Hi, Debian CI is switching away from lxc containers in favor of incus Containers. This is motivated by security concerns from us; incus is based on lxc, but orchestrates containers substantially different: containers are not privileged (so root in the container is not uid 0 outside of it), and incus imposes a stricter isolation from the host system). swtpm passes its tests under lxc, but fails under incus. The relevant part of the failure is (hopefully): > Selecting previously unselected package swtpm-dev:amd64. > Preparing to unpack .../17-swtpm-dev_0.10.1+ds-1+b1_amd64.deb ... > Unpacking swtpm-dev:amd64 (0.10.1+ds-1+b1) ... > Selecting previously unselected package swtpm-tools. > Preparing to unpack .../18-swtpm-tools_0.10.1+ds-1+b1_amd64.deb ... > Unpacking swtpm-tools (0.10.1+ds-1+b1) ... > Setting up libevent-2.1-7t64:amd64 (2.1.13-stable-1) ... > Setting up libunbound8:amd64 (1.26.0-1) ... > Setting up libunistring5:amd64 (1.4.2-1) ... > Setting up libatomic1:amd64 (16.1.0-3) ... > Setting up libffi8:amd64 (3.7.1-2) ... > Setting up libtasn1-6:amd64 (4.21.0-2+b1) ... > Setting up libjson-glib-1.0-common (1.10.8+ds-2) ... > Setting up libtpms0:amd64 (0.10.2-5) ... > Setting up libidn2-0:amd64 (2.3.8-5) ... > Setting up libglib2.0-0t64:amd64 (2.88.3-2) ... > No schema files found: doing nothing. > Setting up libp11-kit0:amd64 (0.26.4-1) ... > Setting up libgnutls30t64:amd64 (3.8.13-1) ... > Setting up libjson-glib-1.0-0:amd64 (1.10.8+ds-2+b1) ... > Setting up libgnutls-dane0t64:amd64 (3.8.13-1) ... > Setting up gnutls-bin (3.8.13-1) ... > Setting up swtpm-libs:amd64 (0.10.1+ds-1+b1) ... > Setting up swtpm (0.10.1+ds-1+b1) ... > Setting up swtpm-dev:amd64 (0.10.1+ds-1+b1) ... > Setting up swtpm-tools (0.10.1+ds-1+b1) ... > Creating group 'tss' with GID 994. > Creating user 'tss' (TPM software stack) with UID 994 and GID 994. > Processing triggers for libc-bin (2.42-17) ... > autopkgtest [21:11:03]: test commandline: [----------------------- > tests/common: line 247: ss: command not found > tests/common: line 247: ss: command not found > tests/common: line 247: ss: command not found > tests/common: line 247: ss: command not found > tests/common: line 247: ss: command not found > tests/common: line 247: ss: command not found > tests/common: line 247: ss: command not found > tests/common: line 247: ss: command not found > tests/common: line 247: ss: command not found > tests/common: line 247: ss: command not found > tests/common: line 247: ss: command not found > tests/common: line 247: ss: command not found > tests/common: line 247: ss: command not found > tests/common: line 247: ss: command not found > tests/common: line 247: ss: command not found > tests/common: line 247: ss: command not found > tests/common: line 247: ss: command not found > tests/common: line 247: ss: command not found > tests/common: line 247: ss: command not found > tests/common: line 247: ss: command not found > tests/common: line 247: ss: command not found > tests/common: line 247: ss: command not found > tests/common: line 247: ss: command not found > tests/common: line 247: ss: command not found > tests/common: line 247: ss: command not found > tests/common: line 247: ss: command not found > tests/common: line 247: ss: command not found > tests/common: line 247: ss: command not found > tests/common: line 247: ss: command not found > tests/common: line 247: ss: command not found > tests/common: line 247: ss: command not found The full autokpgtest logs are available at: https://ci.debian.net/experiments/8/regressions/ (please beware of pagination) Common types of failure and suggested fixes are being documented at: https://wiki.debian.org/ContinuousIntegration/LxcToIncus Note that for the time being, swtpm is still being tested under lxc to avoid disturbing its testing migration test results. If you decide to add the `isolation-machine` restriction to get this package tested under qemu, please mention that explicitly when closing this bug (it's fine to do that only in the package changelog entry that closes the bug) so that we can configure your package for qemu on ci.debian.net.
signature.asc
Description: PGP signature
