Bug#879662: apt: debian-installer FTBFS: E: Method copy has died unexpectedly!

2017-10-25 Thread Julian Andres Klode 
On Tue, Oct 24, 2017 at 07:48:52AM +0200, Cyril Brulebois wrote:
> Package: apt
> Version: 1.4.8
> Severity: serious
> Tags: d-i
> Justification: FTBFS
> 
> [ Please keep both debian-boot@ and me in copy. ]
> 
> It seems the “most secure file downloading on the planet” can no longer
> copy files around:
> | get-packages udeb  
> | make[5]: 'sources.list.udeb' is up to date.
> | Ign:1 copy:/home/kibi/debian-installer/installer/build localudebs/ InRelease
> | Ign:2 copy:/home/kibi/debian-installer/installer/build localudebs/ Release
> | Ign:3 copy:/home/kibi/debian-installer/installer/build localudebs/ Packages
> | Ign:4 copy:/home/kibi/debian-installer/installer/build localudebs/ 
> Translation-en
> | Ign:5 copy:/home/kibi/debian-installer/installer/build localudebs/ Contents 
> (deb)
> | Ign:6 copy:/home/kibi/debian-installer/installer/build localudebs/ Contents 
> (deb)
> | Ign:7 copy:/home/kibi/debian-installer/installer/build localudebs/ Contents 
> (udeb)
> | Get:8 http://localhost/debian unstable InRelease [235 kB]
> | Ign:9 copy:/home/kibi/debian-installer/installer/build localudebs/ Contents 
> (udeb)
> | Ign:3 copy:/home/kibi/debian-installer/installer/build localudebs/ Packages
> | Ign:4 copy:/home/kibi/debian-installer/installer/build localudebs/ 
> Translation-en
> | Ign:5 copy:/home/kibi/debian-installer/installer/build localudebs/ Contents 
> (deb)
> | Ign:6 copy:/home/kibi/debian-installer/installer/build localudebs/ Contents 
> (deb)
> | Ign:7 copy:/home/kibi/debian-installer/installer/build localudebs/ Contents 
> (udeb)
> | Ign:9 copy:/home/kibi/debian-installer/installer/build localudebs/ Contents 
> (udeb)
> | Ign:3 copy:/home/kibi/debian-installer/installer/build localudebs/ Packages
> | Ign:4 copy:/home/kibi/debian-installer/installer/build localudebs/ 
> Translation-en
> | Ign:5 copy:/home/kibi/debian-installer/installer/build localudebs/ Contents 
> (deb)
> | Ign:6 copy:/home/kibi/debian-installer/installer/build localudebs/ Contents 
> (deb)
> | Ign:7 copy:/home/kibi/debian-installer/installer/build localudebs/ Contents 
> (udeb)
> | Ign:9 copy:/home/kibi/debian-installer/installer/build localudebs/ Contents 
> (udeb)
> | Reading package lists...
> | E: Method copy has died unexpectedly!
> | E: Sub-process copy received signal 31.
> 
> Error reporting is a bit underwhelming. :(

This is caused by fakeroot using more syscalls than we have whitelisted, adding 
the
following to apt.conf makes it work again (or well, fail in non-seccomp ways 
for me
with signing issues).

APT::Sandbox::Seccomp::Allow {
"semop";
"semget";
"msgsnd";
"msgrcv";
"msgget";
"msgctl";
};

This is somewhat bad. I guess we should allow them when running under fakeroot, 
like this:

if (getenv("FAKED_MODE")) {
ALLOW(semop);
ALLOW(semget);
ALLOW(msgsnd);
ALLOW(msgrcv);
ALLOW(msgget);
ALLOW(msgctl);
}

rather than just turning them on in general. But please check if
it builds with the apt.conf options first, as I said, I get some
signing problems in my "dirty" environment.
-- 
Debian Developer - deb.li/jak | jak-linux.org - free software dev
Ubuntu Core Developer

Bug#879662: apt: debian-installer FTBFS: E: Method copy has died unexpectedly!

2017-10-24 Thread Philipp Kern 

On 2017-10-24 10:34, Julian Andres Klode wrote:

It says SIGSYS, which means a system call trapped by seccomp. Can you
get a coredump
and run gdb on it and get me a backtrace :) Or guess from the lists:

https://people.debian.org/~jak/syscalls-allowed.txt
https://people.debian.org/~jak/syscalls-trapped.txt (all syscalls I
found - first list)

Or play with the settings in the NEWS file,
APT::Sandbox::Seccomp "false"; to disable it
APT::Sandbox::Seccomp::Allow { "syscall1"; "syscall2"; }; to allow
more syscalls by name

I was wondering if we could install a SIGSYS signal handler to print
which syscall was blocked, but did not find anything yet.


Does a seccomp kill land in dmesg?

Kind regards
Philipp Kern

Bug#879662: apt: debian-installer FTBFS: E: Method copy has died unexpectedly!

2017-10-24 Thread Cyril Brulebois 
Control: notfound -1 1.4.8
Control: found -1 1.6~alpha1

Hi,

Julian Andres Klode  (2017-10-24):
> On Tue, Oct 24, 2017 at 07:48:52AM +0200, Cyril Brulebois wrote:
> > Package: apt
> > Version: 1.4.8
> 
> I assume you mean 1.6~alpha1? Because that's what the error
> seems to indicate.

Certainly. Sorry, I filed this from my laptop, in a hurry, and forgot to
edit the Version field.

> It says SIGSYS, which means a system call trapped by seccomp. Can you get a 
> coredump
> and run gdb on it and get me a backtrace :) Or guess from the lists:
> 
> https://people.debian.org/~jak/syscalls-allowed.txt
> https://people.debian.org/~jak/syscalls-trapped.txt (all syscalls I found - 
> first list)
> 
> Or play with the settings in the NEWS file,
>   APT::Sandbox::Seccomp "false"; to disable it
>   APT::Sandbox::Seccomp::Allow { "syscall1"; "syscall2"; }; to allow more 
> syscalls by name
> 
> I was wondering if we could install a SIGSYS signal handler to print
> which syscall was blocked, but did not find anything yet.

Thanks for the pointers. I've really be meaning to file this to make
sure it's documented/known. I won't have much time until tomorrow,
that's why I was suggesting just debcheckout (or apt-get source)
debian-installer and cd build && ./daily-build build-only in the
meanwhile.

See you.


KiBi.


signature.asc
Description: PGP signature

Bug#879662: apt: debian-installer FTBFS: E: Method copy has died unexpectedly!

2017-10-24 Thread Julian Andres Klode 
On Tue, Oct 24, 2017 at 07:48:52AM +0200, Cyril Brulebois wrote:
> Package: apt
> Version: 1.4.8

I assume you mean 1.6~alpha1? Because that's what the error
seems to indicate.

> Severity: serious
> Tags: d-i
> Justification: FTBFS
> 
> [ Please keep both debian-boot@ and me in copy. ]
> 
> It seems the “most secure file downloading on the planet” can no longer
> copy files around:
> | get-packages udeb  
> | make[5]: 'sources.list.udeb' is up to date.
> | Ign:1 copy:/home/kibi/debian-installer/installer/build localudebs/ InRelease
> | Ign:2 copy:/home/kibi/debian-installer/installer/build localudebs/ Release
> | Ign:3 copy:/home/kibi/debian-installer/installer/build localudebs/ Packages
> | Ign:4 copy:/home/kibi/debian-installer/installer/build localudebs/ 
> Translation-en
> | Ign:5 copy:/home/kibi/debian-installer/installer/build localudebs/ Contents 
> (deb)
> | Ign:6 copy:/home/kibi/debian-installer/installer/build localudebs/ Contents 
> (deb)
> | Ign:7 copy:/home/kibi/debian-installer/installer/build localudebs/ Contents 
> (udeb)
> | Get:8 http://localhost/debian unstable InRelease [235 kB]
> | Ign:9 copy:/home/kibi/debian-installer/installer/build localudebs/ Contents 
> (udeb)
> | Ign:3 copy:/home/kibi/debian-installer/installer/build localudebs/ Packages
> | Ign:4 copy:/home/kibi/debian-installer/installer/build localudebs/ 
> Translation-en
> | Ign:5 copy:/home/kibi/debian-installer/installer/build localudebs/ Contents 
> (deb)
> | Ign:6 copy:/home/kibi/debian-installer/installer/build localudebs/ Contents 
> (deb)
> | Ign:7 copy:/home/kibi/debian-installer/installer/build localudebs/ Contents 
> (udeb)
> | Ign:9 copy:/home/kibi/debian-installer/installer/build localudebs/ Contents 
> (udeb)
> | Ign:3 copy:/home/kibi/debian-installer/installer/build localudebs/ Packages
> | Ign:4 copy:/home/kibi/debian-installer/installer/build localudebs/ 
> Translation-en
> | Ign:5 copy:/home/kibi/debian-installer/installer/build localudebs/ Contents 
> (deb)
> | Ign:6 copy:/home/kibi/debian-installer/installer/build localudebs/ Contents 
> (deb)
> | Ign:7 copy:/home/kibi/debian-installer/installer/build localudebs/ Contents 
> (udeb)
> | Ign:9 copy:/home/kibi/debian-installer/installer/build localudebs/ Contents 
> (udeb)
> | Reading package lists...
> | E: Method copy has died unexpectedly!
> | E: Sub-process copy received signal 31.
> 
> Error reporting is a bit underwhelming. :(

It says SIGSYS, which means a system call trapped by seccomp. Can you get a 
coredump
and run gdb on it and get me a backtrace :) Or guess from the lists:

https://people.debian.org/~jak/syscalls-allowed.txt
https://people.debian.org/~jak/syscalls-trapped.txt (all syscalls I found - 
first list)

Or play with the settings in the NEWS file,
APT::Sandbox::Seccomp "false"; to disable it
APT::Sandbox::Seccomp::Allow { "syscall1"; "syscall2"; }; to allow more 
syscalls by name

I was wondering if we could install a SIGSYS signal handler to print
which syscall was blocked, but did not find anything yet.


-- 
Debian Developer - deb.li/jak | jak-linux.org - free software dev
  |  Ubuntu Core Developer |
When replying, only quote what is necessary, and write each reply
directly below the part(s) it pertains to ('inline').  Thank you.

Bug#879662: apt: debian-installer FTBFS: E: Method copy has died unexpectedly!

2017-10-23 Thread Cyril Brulebois 
Package: apt
Version: 1.4.8
Severity: serious
Tags: d-i
Justification: FTBFS

[ Please keep both debian-boot@ and me in copy. ]

It seems the “most secure file downloading on the planet” can no longer
copy files around:
| get-packages udeb  
| make[5]: 'sources.list.udeb' is up to date.
| Ign:1 copy:/home/kibi/debian-installer/installer/build localudebs/ InRelease
| Ign:2 copy:/home/kibi/debian-installer/installer/build localudebs/ Release
| Ign:3 copy:/home/kibi/debian-installer/installer/build localudebs/ Packages
| Ign:4 copy:/home/kibi/debian-installer/installer/build localudebs/ 
Translation-en
| Ign:5 copy:/home/kibi/debian-installer/installer/build localudebs/ Contents 
(deb)
| Ign:6 copy:/home/kibi/debian-installer/installer/build localudebs/ Contents 
(deb)
| Ign:7 copy:/home/kibi/debian-installer/installer/build localudebs/ Contents 
(udeb)
| Get:8 http://localhost/debian unstable InRelease [235 kB]
| Ign:9 copy:/home/kibi/debian-installer/installer/build localudebs/ Contents 
(udeb)
| Ign:3 copy:/home/kibi/debian-installer/installer/build localudebs/ Packages
| Ign:4 copy:/home/kibi/debian-installer/installer/build localudebs/ 
Translation-en
| Ign:5 copy:/home/kibi/debian-installer/installer/build localudebs/ Contents 
(deb)
| Ign:6 copy:/home/kibi/debian-installer/installer/build localudebs/ Contents 
(deb)
| Ign:7 copy:/home/kibi/debian-installer/installer/build localudebs/ Contents 
(udeb)
| Ign:9 copy:/home/kibi/debian-installer/installer/build localudebs/ Contents 
(udeb)
| Ign:3 copy:/home/kibi/debian-installer/installer/build localudebs/ Packages
| Ign:4 copy:/home/kibi/debian-installer/installer/build localudebs/ 
Translation-en
| Ign:5 copy:/home/kibi/debian-installer/installer/build localudebs/ Contents 
(deb)
| Ign:6 copy:/home/kibi/debian-installer/installer/build localudebs/ Contents 
(deb)
| Ign:7 copy:/home/kibi/debian-installer/installer/build localudebs/ Contents 
(udeb)
| Ign:9 copy:/home/kibi/debian-installer/installer/build localudebs/ Contents 
(udeb)
| Reading package lists...
| E: Method copy has died unexpectedly!
| E: Sub-process copy received signal 31.

Error reporting is a bit underwhelming. :(

This happens with this sources.list file:
| (sid-amd64-devel)kibi@wodi:~/debian-installer/installer/build$ cat 
sources.list.udeb 
| # This file is automatically generated, edit sources.list.udeb.local instead.
| deb [trusted=yes] copy:/home/kibi/debian-installer/installer/build/ 
localudebs/
| deb http://localhost/debian unstable main/debian-installer

This can be reproduced on all archs by triggering a daily build in the
debian-installer directory, in a sid chroot:
| cd build && ./daily-build build-only


KiBi.