Source: iputils
Version: 3:20250605-1
Severity: important
Justification: fails autopkgtest on Debian CI infrastructure
Tags: forky sid
User: [email protected]
Usertags: lxc

Hi,

Debian CI is switching away from lxc containers in favor of incus Containers.
This is motivated by security concerns from us; incus is based on lxc, but
orchestrates containers substantially different: containers are not privileged
(so root in the container is not uid 0 outside of it, and incus imposes a
stricter isolation from the host system.

iputils passes its tests under lxc, but fails under incus.
The relevant part of the failure is (hopefully):

> Get:1 http://deb.debian.org/debian testing/main amd64 libcap2 amd64 1:2.78-1 
> [26.9 kB]
> Get:2 http://deb.debian.org/debian testing/main amd64 libunistring5 amd64 
> 1.4.2-1 [480 kB]
> Get:3 http://deb.debian.org/debian testing/main amd64 libidn2-0 amd64 2.3.8-5 
> [109 kB]
> Get:4 http://deb.debian.org/debian testing/main amd64 iputils-ping amd64 
> 3:20250605-1 [52.0 kB]
> Get:5 http://deb.debian.org/debian testing/main amd64 sudo amd64 1.9.17p2-7 
> [2062 kB]
> Fetched 2729 kB in 0s (19.1 MB/s)
> Selecting previously unselected package libcap2:amd64.
> (Reading database ...  (Reading database ... 5% (Reading database ... 10% 
> (Reading database ... 15% (Reading database ... 20% (Reading database ... 25% 
> (Reading database ... 30% (Reading database ... 35% (Reading database ... 40% 
> (Reading database ... 45% (Reading database ... 50% (Reading database ... 55% 
> (Reading database ... 60% (Reading database ... 65% (Reading database ... 70% 
> (Reading database ... 75% (Reading database ... 80% (Reading database ... 85% 
> (Reading database ... 90% (Reading database ... 95% (Reading database ... 
> 100% (Reading database ... 10006 files and directories currently installed.)
> Preparing to unpack .../libcap2_1%3a2.78-1_amd64.deb ...
> Unpacking libcap2:amd64 (1:2.78-1) ...
> Selecting previously unselected package libunistring5:amd64.
> Preparing to unpack .../libunistring5_1.4.2-1_amd64.deb ...
> Unpacking libunistring5:amd64 (1.4.2-1) ...
> Selecting previously unselected package libidn2-0:amd64.
> Preparing to unpack .../libidn2-0_2.3.8-5_amd64.deb ...
> Unpacking libidn2-0:amd64 (2.3.8-5) ...
> Selecting previously unselected package iputils-ping.
> Preparing to unpack .../iputils-ping_3%3a20250605-1_amd64.deb ...
> Unpacking iputils-ping (3:20250605-1) ...
> Selecting previously unselected package sudo.
> Preparing to unpack .../sudo_1.9.17p2-7_amd64.deb ...
> Unpacking sudo (1.9.17p2-7) ...
> Setting up libcap2:amd64 (1:2.78-1) ...
> Setting up libunistring5:amd64 (1.4.2-1) ...
> Setting up sudo (1.9.17p2-7) ...
> Setting up libidn2-0:amd64 (2.3.8-5) ...
> Setting up iputils-ping (3:20250605-1) ...
> Processing triggers for libc-bin (2.42-17) ...
> autopkgtest [21:16:37]: Setting up user "test" to sudo without password...
> autopkgtest [21:16:37]: test ping-localhost: [-----------------------
> sudo: sysctl: command not found
> autopkgtest [21:16:38]: test ping-localhost: -----------------------]
> autopkgtest [21:16:38]: test ping-localhost:  - - - - - - - - - - results - - 
> - - - - - - - -
> ping-localhost       FAIL non-zero exit status 1
> autopkgtest [21:16:38]: test ping-localhost:  - - - - - - - - - - stderr - - 
> - - - - - - - -
> sudo: sysctl: command not found
> autopkgtest [21:16:38]: @@@@@@@@@@@@@@@@@@@@ summary
> ping-localhost       FAIL non-zero exit status 1


The full autokpgtest logs are available at:
https://ci.debian.net/experiments/8/regressions/
(please beware of pagination)

Common types of failure and suggested fixes are being documented at:
https://wiki.debian.org/ContinuousIntegration/LxcToIncus

Note that for the time being, iputils is still being tested under lxc to
avoid disturbing its testing migration test results.

If you decide to add the `isolation-machine` restriction to get this package
tested under qemu, please mention that explicitly when closing this bug (it's
fine to do that only in the package changelog entry that closes the bug) so
that we can configure your package for qemu on ci.debian.net.

Attachment: signature.asc
Description: PGP signature

Reply via email to