Package: autopkgtest
Version: 5.4.1

autopkgtest dumps all the output from all the tests into
$AUTOPKGTEST_ARTIFACTS.

Sometimes, as can be observed here
  https://ci.debian.net/data/autopkgtest/unstable/amd64/d/dgit/601985/log.gz
this can make it actually fall over if different tests puts the same
objects into the artifacts directory.

The semantics should at the very least be documented, and the bug
fixed.

But I am concerned that trying to document what it means for multiple
tests to produce overlapping artifacts may be too complex.  Also,
there may be a risk of symlink-based attacks from tests against the
test controller environment.

IMO it would be better for the spec to say that each test gets a fresh
empty $AUTOPKGTEST_ARTIFACTS, and for autopkgtest to make the test
name part of the name in --output-dir.

For now, I will tar up my artifacts and copy them to a file named
after the test.

Ian.

-- 
Ian Jackson <[email protected]>   These opinions are my own.

If I emailed you from an address @fyvzl.net or @evade.org.uk, that is
a private address which bypasses my fierce spamfilter.

Reply via email to