Source: chiark-tcl Version: 1.3.7 Severity: important Justification: fails autopkgtest on Debian CI infrastructure Tags: forky sid User: [email protected] Usertags: lxc
Hi,
Debian CI is switching away from lxc containers in favor of incus Containers.
This is motivated by security concerns from us; incus is based on lxc, but
orchestrates containers substantially different: containers are not privileged
(so root in the container is not uid 0 outside of it, and incus imposes a
stricter isolation from the host system.
chiark-tcl passes its tests under lxc, but fails under incus.
The relevant part of the failure is (hopefully):
> Setting up libtcl-chiark-1:amd64 (1.3.7+b2) ...
> Setting up libtcl8.6:amd64 (8.6.18+dfsg-1) ...
> Setting up tcl8.6 (8.6.18+dfsg-1) ...
> Setting up tcl (8.6.18) ...
> Processing triggers for libc-bin (2.42-17) ...
> autopkgtest [20:55:03]: test adns--def: [-----------------------
> % adns synch a www.mythic-beasts.com
> create adns resolver: bad protocol option
> while executing
> "adns synch a www.mythic-beasts.com"
> ("eval" body line 1)
> invoked from within
> "eval $q"
> (procedure "query" line 4)
> invoked from within
> "query a www.mythic-beasts.com"
> ("eval" body line 1)
> invoked from within
> "eval query $args"
> (procedure "query_ok" line 2)
> invoked from within
> "query_ok a www.mythic-beasts.com"
> (file "adns/runtest.tcl" line 22)
> invoked from within
> "source $t "
> invoked from within
> "if {[file exists $t]} { source $t }"
> (file "/tmp/autopkgtest.N56cbx/build.gWh/src/debian/tests/adns--def" line 4)
> autopkgtest [20:55:03]: test adns--def: -----------------------]
> autopkgtest [20:55:03]: test adns--def: - - - - - - - - - - results - - - -
> - - - - - -
> adns--def FAIL non-zero exit status 1
The full autokpgtest logs are available at:
https://ci.debian.net/experiments/8/regressions/
(please beware of pagination)
Common types of failure and suggested fixes are being documented at:
https://wiki.debian.org/ContinuousIntegration/LxcToIncus
Note that for the time being, chiark-tcl is still being tested under lxc to
avoid disturbing its testing migration test results.
If you decide to add the `isolation-machine` restriction to get this package
tested under qemu, please mention that explicitly when closing this bug (it's
fine to do that only in the package changelog entry that closes the bug) so
that we can configure your package for qemu on ci.debian.net.
signature.asc
Description: PGP signature
