Source: dh-nss Version: 1.7 Severity: important Justification: fails autopkgtest on Debian CI infrastructure Tags: forky sid User: [email protected] Usertags: lxc
Hi, Debian CI is switching away from lxc containers in favor of incus Containers. This is motivated by security concerns from us; incus is based on lxc, but orchestrates containers substantially different: containers are not privileged (so root in the container is not uid 0 outside of it, and incus imposes a stricter isolation from the host system. dh-nss passes its tests under lxc, but fails under incus. The relevant part of the failure is (hopefully): > Setting up intltool-debian (0.35.0+20060710.6) ... > Setting up gcc-15-x86-64-linux-gnu (15.3.0-2) ... > Setting up dh-strip-nondeterminism (1.15.1-1) ... > Setting up cpp-15 (15.3.0-2) ... > Setting up groff-base (1.24.1-1) ... > Setting up libc6-dev:amd64 (2.42-17) ... > Setting up cpp-x86-64-linux-gnu (4:15.2.0-5) ... > Setting up gcc-x86-64-linux-gnu (4:15.2.0-5) ... > Setting up po-debconf (1.0.22) ... > Setting up man-db (2.13.1-1) ... > Building database of manual pages ... > Created symlink '/etc/systemd/system/timers.target.wants/man-db.timer' → > '/usr/lib/systemd/system/man-db.timer'. > man-db.service is a disabled or a static unit, not starting it. > Setting up gcc-15 (15.3.0-2) ... > Setting up libstdc++-15-dev:amd64 (15.3.0-2) ... > Setting up cpp (4:15.2.0-5) ... > Setting up g++-15-x86-64-linux-gnu (15.3.0-2) ... > Setting up libtool (2.5.4-11) ... > Setting up gcc (4:15.2.0-5) ... > Setting up dh-autoreconf (22) ... > Setting up g++-x86-64-linux-gnu (4:15.2.0-5) ... > Setting up g++-15 (15.3.0-2) ... > Setting up debhelper (14.3) ... > Setting up g++ (4:15.2.0-5) ... > update-alternatives: using /usr/bin/g++ to provide /usr/bin/c++ (c++) in auto > mode > Setting up build-essential (12.12) ... > Processing triggers for libc-bin (2.42-17) ... > autopkgtest [21:09:55]: test reproducibility: [----------------------- > Enable fr_CH.UTF-8 locale... > /tmp/autopkgtest.5se2IR/build.18F/src/debian/tests/reproducibility: 19: > locale-gen: not found > Error: Command not found > autopkgtest [21:09:56]: test reproducibility: -----------------------] > autopkgtest [21:09:56]: test reproducibility: - - - - - - - - - - results - > - - - - - - - - - > reproducibility FAIL non-zero exit status 127 > autopkgtest [21:09:56]: test shellcheck: preparing testbed > autopkgtest [21:09:59]: testbed dpkg architecture: amd64 > autopkgtest [21:10:00]: testbed apt version: 3.3.2 > autopkgtest [21:10:00]: @@@@@@@@@@@@@@@@@@@@ test bed setup > autopkgtest [21:10:00]: updating testbed package index (apt update) > Get:1 http://deb.debian.org/debian testing InRelease [151 kB] > Get:2 http://deb.debian.org/debian-debug testing-debug InRelease [48.3 kB] > Get:3 http://deb.debian.org/debian testing/non-free-firmware Sources [7856 B] > Get:4 http://deb.debian.org/debian testing/main Sources [11.1 MB] > Get:5 http://deb.debian.org/debian testing/non-free Sources [73.2 kB] > Get:6 http://deb.debian.org/debian testing/contrib Sources [51.7 kB] > Get:7 http://deb.debian.org/debian testing/main amd64 Packages [9907 kB] > Get:8 http://deb.debian.org/debian testing/main Translation-en [6578 kB] > Get:9 http://deb.debian.org/debian testing/contrib amd64 Packages [51.8 kB] > Get:10 http://deb.debian.org/debian testing/contrib Translation-en [49.1 kB] > Get:11 http://deb.debian.org/debian testing/non-free amd64 Packages [91.2 kB] > Get:12 http://deb.debian.org/debian testing/non-free Translation-en [62.4 kB] > Get:13 http://deb.debian.org/debian testing/non-free-firmware amd64 Packages > [10.3 kB] > Get:14 http://deb.debian.org/debian testing/non-free-firmware Translation-en > [6272 B] > Get:15 http://deb.debian.org/debian-debug testing-debug/non-free Sources > [19.0 kB] > Get:16 http://deb.debian.org/debian-debug testing-debug/contrib Sources [27.3 > kB] > Get:17 http://deb.debian.org/debian-debug testing-debug/main Sources [3072 kB] > Get:18 http://deb.debian.org/debian-debug testing-debug/main amd64 Packages > [3754 kB] > Get:19 http://deb.debian.org/debian-debug testing-debug/contrib amd64 > Packages [40.6 kB] > Get:20 http://deb.debian.org/debian-debug testing-debug/non-free amd64 > Packages [15.3 kB] > Fetched 35.2 MB in 3s (13.6 MB/s) > Reading package lists... The full autokpgtest logs are available at: https://ci.debian.net/experiments/8/regressions/ (please beware of pagination) Common types of failure and suggested fixes are being documented at: https://wiki.debian.org/ContinuousIntegration/LxcToIncus Note that for the time being, dh-nss is still being tested under lxc to avoid disturbing its testing migration test results. If you decide to add the `isolation-machine` restriction to get this package tested under qemu, please mention that explicitly when closing this bug (it's fine to do that only in the package changelog entry that closes the bug) so that we can configure your package for qemu on ci.debian.net.
signature.asc
Description: PGP signature
