Source: swugenerator
Version: 0.6-8
Severity: important
Justification: fails autopkgtest on Debian CI infrastructure
Tags: forky sid
User: [email protected]
Usertags: lxc

Hi,

Debian CI is switching away from lxc containers in favor of incus Containers.
This is motivated by security concerns from us; incus is based on lxc, but
orchestrates containers substantially different: containers are not privileged
(so root in the container is not uid 0 outside of it), and incus imposes a
stricter isolation from the host system).

swugenerator passes its tests under lxc, but fails under incus.
The relevant part of the failure is (hopefully):

> Setting up libgpgme45:amd64 (2.1.2-1) ...
> Setting up libngtcp2-crypto-gnutls8:amd64 (1.24.0-1) ...
> Setting up libpython3-stdlib:amd64 (3.14.6-1) ...
> Setting up libcurl4-gnutls:amd64 (8.21.0-2) ...
> Setting up libsofthsm2 (2.6.1-3) ...
> Setting up softhsm2 (2.6.1-3) ...
> Setting up libcurl4t64:amd64 (8.21.0-2) ...
> Setting up opensc (0.27.1-2) ...
> Setting up python3 (3.14.6-1) ...
> Setting up libengine-pkcs11-openssl:amd64 (0.4.18-1) ...
> Setting up zchunk (1.5.3+ds1-1) ...
> Setting up python3-libconf (2.0.1-7) ...
> Setting up swupdate (2026.05.1+dfsg-1) ...
> Creating group 'swupdate' with GID 993.
> Creating user 'swupdate' (swupdate system user) with UID 993 and GID 993.
> Created symlink 
> '/etc/systemd/system/multi-user.target.wants/swupdate.service' → 
> '/usr/lib/systemd/system/swupdate.service'.
> Created symlink '/etc/systemd/system/sockets.target.wants/swupdate.socket' → 
> '/usr/lib/systemd/system/swupdate.socket'.
> Created symlink 
> '/etc/systemd/system/multi-user.target.wants/swupdate-progress.service' → 
> '/usr/lib/systemd/system/swupdate-progress.service'.
> Setting up swugenerator (0.6-8) ...
> Processing triggers for systemd (261.2-1) ...
> Processing triggers for libc-bin (2.42-17) ...
> autopkgtest [21:10:31]: Setting up user "test" to sudo without password...
> autopkgtest [21:10:31]: test swusign: [-----------------------
> + groups
> + grep -q softhsm
> ++ whoami
> + echo 'User test is not in '\''softhsm'\'' group. Fixing permissions...'
> User test is not in 'softhsm' group. Fixing permissions...
> ++ whoami
> + sudo adduser test softhsm
> sudo: adduser: command not found
> autopkgtest [21:10:31]: test swusign: -----------------------]
> autopkgtest [21:10:31]: test swusign:  - - - - - - - - - - results - - - - - 
> - - - - -
> swusign              FAIL non-zero exit status 1
> autopkgtest [21:10:32]: @@@@@@@@@@@@@@@@@@@@ summary
> swusign              FAIL non-zero exit status 1


The full autokpgtest logs are available at:
https://ci.debian.net/experiments/8/regressions/
(please beware of pagination)

Common types of failure and suggested fixes are being documented at:
https://wiki.debian.org/ContinuousIntegration/LxcToIncus

Note that for the time being, swugenerator is still being tested under lxc to
avoid disturbing its testing migration test results.

If you decide to add the `isolation-machine` restriction to get this package
tested under qemu, please mention that explicitly when closing this bug (it's
fine to do that only in the package changelog entry that closes the bug) so
that we can configure your package for qemu on ci.debian.net.

Attachment: signature.asc
Description: PGP signature

Reply via email to