Source: vnu Version: 26.5.2.1+dfsg-2 Severity: important Justification: fails autopkgtest on Debian CI infrastructure Tags: forky sid User: [email protected] Usertags: lxc
Hi, Debian CI is switching away from lxc containers in favor of incus Containers. This is motivated by security concerns from us; incus is based on lxc, but orchestrates containers substantially different: containers are not privileged (so root in the container is not uid 0 outside of it), and incus imposes a stricter isolation from the host system). vnu passes its tests under lxc, but fails under incus. The relevant part of the failure is (hopefully): > nu.validator.servlet.VerifierServletTransaction - Converted config to arrays. > nu.validator.servlet.VerifierServletTransaction - Prepared namespace array. > nu.validator.servlet.VerifierServletTransaction - Parsed doctype numbers into > ints. > nu.validator.servlet.VerifierServletTransaction - The cache path prefix is: > null > nu.validator.servlet.VerifierServletTransaction - Parsing set up. Starting to > read schemas. > nu.validator.servlet.VerifierServletTransaction - Will load schema: > http://s.validator.nu/html5.rnc > nu.validator.servlet.VerifierServletTransaction - Will load schema: > http://s.validator.nu/html5-all.rnc > nu.validator.servlet.VerifierServletTransaction - Will load schema: > http://s.validator.nu/xhtml5.rnc > nu.validator.servlet.VerifierServletTransaction - Will load schema: > http://s.validator.nu/xhtml5-all.rnc > nu.validator.servlet.VerifierServletTransaction - Will load schema: > http://s.validator.nu/svg-xhtml5-rdf-mathml.rnc > nu.validator.servlet.VerifierServletTransaction - Schemas read. > nu.validator.servlet.VerifierServletTransaction - Reading spec. > nu.validator.servlet.VerifierServletTransaction - Trying built-in spec > nu.validator.servlet.VerifierServletTransaction - Spec read in 825 > milliseconds. > nu.validator.servlet.VerifierServletTransaction - Reading filter file > resources/message-filters.txt > nu.validator.servlet.VerifierServletTransaction - Filter file read. > > WARNING: Future checker releases will bind by default to 127.0.0.1. > Your checker deployment might become unreachable unless you use the > nu.validator.servlet.bind-address system property or --bind-address > script option to bind the checker to a different address: > > python ./checker.py --bind-address 10.6.94.150 run > java -Dnu.validator.servlet.bind-address=10.6.94.150 -cp vnu.jar > nu.validator.servlet.Main 8888 > Elapsed time is 2.075 seconds. > Success. > vnu-runtime-image/bin/java -Dnu.validator.servlet.bind-address=10.6.94.150 > nu.validator.servlet.Main 8888 > vnu-runtime-image\bin\java.exe > -Dnu.validator.servlet.bind-address=10.6.94.150 nu.validator.servlet.Main 8888 > > Checker service started at http://0.0.0.0:8888/ > /usr/bin/vnu-server: line 75: pgrep: command not found > /tmp/autopkgtest.3ogDnC/wrapper.sh: Killing leaked background processes: 3518 > Error: Command not found > autopkgtest [21:25:45]: test vnu-server: -----------------------] > autopkgtest [21:25:45]: test vnu-server: - - - - - - - - - - results - - - - > - - - - - - > vnu-server FAIL non-zero exit status 127 > autopkgtest [21:25:46]: test vnu-server: - - - - - - - - - - stderr - - - - > - - - - - - > /usr/bin/vnu-server: line 75: pgrep: command not found > autopkgtest [21:25:46]: @@@@@@@@@@@@@@@@@@@@ summary > vnu_version PASS > vnu_format PASS > vnu_noformat PASS > vnu-jetty12-with-client PASS (superficial) > vnu-tomcat11-with-client PASS (superficial) > vnu-server FAIL non-zero exit status 127 The full autokpgtest logs are available at: https://ci.debian.net/experiments/8/regressions/ (please beware of pagination) Common types of failure and suggested fixes are being documented at: https://wiki.debian.org/ContinuousIntegration/LxcToIncus Note that for the time being, vnu is still being tested under lxc to avoid disturbing its testing migration test results. If you decide to add the `isolation-machine` restriction to get this package tested under qemu, please mention that explicitly when closing this bug (it's fine to do that only in the package changelog entry that closes the bug) so that we can configure your package for qemu on ci.debian.net.
signature.asc
Description: PGP signature
