Source: booth Version: 1.2-3 Severity: important Justification: fails autopkgtest on Debian CI infrastructure Tags: forky sid User: [email protected] Usertags: lxc
Hi, Debian CI is switching away from lxc containers in favor of incus Containers. This is motivated by security concerns from us; incus is based on lxc, but orchestrates containers substantially different: containers are not privileged (so root in the container is not uid 0 outside of it, and incus imposes a stricter isolation from the host system. booth passes its tests under lxc, but fails under incus. The relevant part of the failure is (hopefully): > × corosync.service - Corosync Cluster Engine > Loaded: loaded (/usr/lib/systemd/system/corosync.service; enabled; preset: > enabled) > Drop-In: /run/systemd/system/service.d > └─zzz-lxc-service.conf > Active: failed (Result: exit-code) since Fri 2026-08-14 20:52:14 UTC; 8ms ago > Invocation: dae728dc35cb4e0ab95eb8e3ad73ced8 > Docs: man:corosync > man:corosync.conf > man:corosync_overview > Process: 4185 ExecStart=/usr/sbin/corosync -f $COROSYNC_OPTIONS (code=exited, > status=15) > Main PID: 4185 (code=exited, status=15) > Mem peak: 9.7M > CPU: 16ms > > Aug 14 20:52:14 autopkgtest-incus-fxzwpq corosync[4185]: [TOTEM ] > Initializing transport (Kronosnet). > Aug 14 20:52:14 autopkgtest-incus-fxzwpq corosync[4185]: [TOTEM ] > knet_handle_new failed: File name too long (36) > Aug 14 20:52:14 autopkgtest-incus-fxzwpq corosync[4185]: [KNET ] > transport: Failed to set socket buffer via force option 33: Operation not > permitted > Aug 14 20:52:14 autopkgtest-incus-fxzwpq corosync[4185]: [KNET ] > transport: Unable to set local socketpair receive buffer: File name too long > Aug 14 20:52:14 autopkgtest-incus-fxzwpq corosync[4185]: [KNET ] handle: > Unable to initialize internal dstsockpair: File name too long > Aug 14 20:52:14 autopkgtest-incus-fxzwpq corosync[4185]: [MAIN ] Can't > initialize TOTEM layer > Aug 14 20:52:14 autopkgtest-incus-fxzwpq corosync[4185]: [MAIN ] Corosync > Cluster Engine exiting with status 15 at main.c:1619. > Aug 14 20:52:14 autopkgtest-incus-fxzwpq systemd[1]: corosync.service: Main > process exited, code=exited, status=15/n/a > Aug 14 20:52:14 autopkgtest-incus-fxzwpq systemd[1]: corosync.service: Failed > with result 'exit-code'. > Aug 14 20:52:14 autopkgtest-incus-fxzwpq systemd[1]: Failed to start > corosync.service - Corosync Cluster Engine. > Aug 14 20:52:10 autopkgtest-incus-fxzwpq systemd[1]: Starting > corosync.service - Corosync Cluster Engine... > Aug 14 20:52:10 autopkgtest-incus-fxzwpq (corosync)[3558]: corosync.service: > Referenced but unset environment variable evaluates to an empty string: > COROSYNC_OPTIONS > Aug 14 20:52:10 autopkgtest-incus-fxzwpq corosync[3558]: [MAIN ] Corosync > Cluster Engine 3.1.10 starting up > Aug 14 20:52:10 autopkgtest-incus-fxzwpq corosync[3558]: [MAIN ] Corosync > built-in features: dbus monitoring watchdog augeas systemd xmlconf vqsim > nozzle snmp pie relro bindnow > Aug 14 20:52:10 autopkgtest-incus-fxzwpq corosync[3558]: [MAIN ] Can't > close cgroups tasks file > Aug 14 20:52:10 autopkgtest-incus-fxzwpq corosync[3558]: [MAIN ] Could not > set SCHED_RR at priority 99: Operation not permitted (1) > Aug 14 20:52:10 autopkgtest-incus-fxzwpq corosync[3558]: [MAIN ] Could not > set priority -2147483648: Permission denied (13) > Aug 14 20:52:10 autopkgtest-incus-fxzwpq corosync[3558]: [MAIN ] Could not > increase RLIMIT_MEMLOCK, not locking memory: Operation not permitted (1) > Aug 14 20:52:10 autopkgtest-incus-fxzwpq corosync[3558]: [TOTEM ] > Initializing transport (Kronosnet). > Aug 14 20:52:10 autopkgtest-incus-fxzwpq corosync[3558]: [TOTEM ] > knet_handle_new failed: File name too long (36) > Aug 14 20:52:10 autopkgtest-incus-fxzwpq corosync[3558]: [KNET ] > transport: Failed to set socket buffer via force option 33: Operation not > permitted > Aug 14 20:52:10 autopkgtest-incus-fxzwpq corosync[3558]: [KNET ] > transport: Unable to set local socketpair receive buffer: File name too long > Aug 14 20:52:10 autopkgtest-incus-fxzwpq corosync[3558]: [KNET ] handle: > Unable to initialize internal dstsockpair: File name too long > Aug 14 20:52:10 autopkgtest-incus-fxzwpq corosync[3558]: [MAIN ] Can't > initialize TOTEM layer > Aug 14 20:52:10 autopkgtest-incus-fxzwpq corosync[3558]: [MAIN ] Corosync > Cluster Engine exiting with status 15 at main.c:1619. > Aug 14 20:52:10 autopkgtest-incus-fxzwpq systemd[1]: corosync.service: Main > process exited, code=exited, status=15/n/a > Aug 14 20:52:10 autopkgtest-incus-fxzwpq systemd[1]: corosync.service: Failed > with result 'exit-code'. > Aug 14 20:52:10 autopkgtest-incus-fxzwpq systemd[1]: Failed to start > corosync.service - Corosync Cluster Engine. > Aug 14 20:52:12 autopkgtest-incus-fxzwpq systemd[1]: Starting > corosync.service - Corosync Cluster Engine... > Aug 14 20:52:12 autopkgtest-incus-fxzwpq (corosync)[4033]: corosync.service: > Referenced but unset environment variable evaluates to an empty string: > COROSYNC_OPTIONS > Aug 14 20:52:12 autopkgtest-incus-fxzwpq corosync[4033]: [MAIN ] Corosync > Cluster Engine 3.1.10 starting up > Aug 14 20:52:12 autopkgtest-incus-fxzwpq corosync[4033]: [MAIN ] Corosync > built-in features: dbus monitoring watchdog augeas systemd xmlconf vqsim > nozzle snmp pie relro bindnow > Aug 14 20:52:12 autopkgtest-incus-fxzwpq corosync[4033]: [MAIN ] Can't > close cgroups tasks file > Aug 14 20:52:12 autopkgtest-incus-fxzwpq corosync[4033]: [MAIN ] Could not > set SCHED_RR at priority 99: Operation not permitted (1) > Aug 14 20:52:12 autopkgtest-incus-fxzwpq corosync[4033]: [MAIN ] Could not > set priority -2147483648: Permission denied (13) > Aug 14 20:52:12 autopkgtest-incus-fxzwpq corosync[4033]: [MAIN ] Could not > increase RLIMIT_MEMLOCK, not locking memory: Operation not permitted (1) > Aug 14 20:52:12 autopkgtest-incus-fxzwpq corosync[4033]: [TOTEM ] > Initializing transport (Kronosnet). > Aug 14 20:52:13 autopkgtest-incus-fxzwpq corosync[4033]: [TOTEM ] > knet_handle_new failed: File name too long (36) > Aug 14 20:52:13 autopkgtest-incus-fxzwpq corosync[4033]: [KNET ] > transport: Failed to set socket buffer via force option 33: Operation not > permitted > Aug 14 20:52:13 autopkgtest-incus-fxzwpq corosync[4033]: [KNET ] > transport: Unable to set local socketpair receive buffer: File name too long > Aug 14 20:52:13 autopkgtest-incus-fxzwpq corosync[4033]: [KNET ] handle: > Unable to initialize internal dstsockpair: File name too long > Aug 14 20:52:13 autopkgtest-incus-fxzwpq corosync[4033]: [MAIN ] Can't > initialize TOTEM layer > Aug 14 20:52:13 autopkgtest-incus-fxzwpq corosync[4033]: [MAIN ] Corosync > Cluster Engine exiting with status 15 at main.c:1619. > Aug 14 20:52:13 autopkgtest-incus-fxzwpq systemd[1]: corosync.service: Main > process exited, code=exited, status=15/n/a > Aug 14 20:52:13 autopkgtest-incus-fxzwpq systemd[1]: corosync.service: Failed > with result 'exit-code'. > Aug 14 20:52:13 autopkgtest-incus-fxzwpq systemd[1]: Failed to start > corosync.service - Corosync Cluster Engine. > Aug 14 20:52:14 autopkgtest-incus-fxzwpq systemd[1]: Starting > corosync.service - Corosync Cluster Engine... The full autokpgtest logs are available at: https://ci.debian.net/experiments/8/regressions/ (please beware of pagination) Common types of failure and suggested fixes are being documented at: https://wiki.debian.org/ContinuousIntegration/LxcToIncus Note that for the time being, booth is still being tested under lxc to avoid disturbing its testing migration test results. If you decide to add the `isolation-machine` restriction to get this package tested under qemu, please mention that explicitly when closing this bug (it's fine to do that only in the package changelog entry that closes the bug) so that we can configure your package for qemu on ci.debian.net.
signature.asc
Description: PGP signature
