On 2026-08-19 Antonio Terceiro <[email protected]> wrote: > Source: gnupg2 > Version: 2.4.9-7 > Severity: important > Justification: fails autopkgtest on Debian CI infrastructure > Tags: forky sid > User: [email protected] > Usertags: lxc
> Hi, > Debian CI is switching away from lxc containers in favor of incus Containers. > This is motivated by security concerns from us; incus is based on lxc, but > orchestrates containers substantially different: containers are not privileged > (so root in the container is not uid 0 outside of it, and incus imposes a > stricter isolation from the host system. > gnupg2 passes its tests under lxc, but fails under incus. > The relevant part of the failure is (hopefully): [...] > > gpg: error running '/usr/bin/gpg-agent': exit status 2 > > gpg: failed to start gpg-agent '/usr/bin/gpg-agent': General error [...] > Common types of failure and suggested fixes are being documented at: > https://wiki.debian.org/ContinuousIntegration/LxcToIncus > Note that for the time being, gnupg2 is still being tested under lxc to > avoid disturbing its testing migration test results. > If you decide to add the `isolation-machine` restriction to get this package > tested under qemu, please mention that explicitly when closing this bug (it's > fine to do that only in the package changelog entry that closes the bug) so > that we can configure your package for qemu on ci.debian.net. Hello Antonio, does the incus virtualisation provide /run/user/nnn? gpg-agent requires it. (I tried the QnD reproduction steps on the linked wiki page, but DNF since debci setup failed at the sudo step with "ametzler is not in the sudoers file.") cu Andreas -- "You people are noisy," Nia said. I made the gesture of agreement.
