Source: keychain Version: 2.9.8-2 Severity: important Justification: fails autopkgtest on Debian CI infrastructure Tags: forky sid User: [email protected] Usertags: lxc
Hi, Debian CI is switching away from lxc containers in favor of incus Containers. This is motivated by security concerns from us; incus is based on lxc, but orchestrates containers substantially different: containers are not privileged (so root in the container is not uid 0 outside of it, and incus imposes a stricter isolation from the host system. keychain passes its tests under lxc, but fails under incus. The relevant part of the failure is (hopefully): > Unpacking openssh-client (1:10.4p1-4) ... > Selecting previously unselected package keychain. > Preparing to unpack .../11-keychain_2.9.8-2_all.deb ... > Unpacking keychain (2.9.8-2) ... > Setting up libkeyutils1:amd64 (1.6.3-6+b2) ... > Setting up libcbor0.10:amd64 (0.10.2-2.2) ... > Setting up libedit2:amd64 (3.1-20260512-1) ... > Setting up libcom-err2:amd64 (1.47.4-1) ... > Setting up libkrb5support0:amd64 (1.22.1-3) ... > Setting up libk5crypto3:amd64 (1.22.1-3) ... > Setting up libkrb5-3:amd64 (1.22.1-3) ... > Setting up libfido2-1:amd64 (1.17.0-2) ... > Setting up openssh-common (1:10.4p1-4) ... > Setting up libgssapi-krb5-2:amd64 (1.22.1-3) ... > Setting up openssh-client (1:10.4p1-4) ... > Creating group '_ssh' with GID 994. > Created symlink '/etc/systemd/user/sockets.target.wants/ssh-agent.socket' → > '/usr/lib/systemd/user/ssh-agent.socket'. > Setting up keychain (2.9.8-2) ... > Processing triggers for libc-bin (2.42-17) ... > autopkgtest [20:45:58]: test ssh.sh: [----------------------- > + export LC_ALL=C > + id -un > + uid=test > + id > + echo Starting up as uid test, full id output: uid=1000(test) gid=1000(test) > groups=1000(test) > + echo Process list: > + ps uwwx > /tmp/autopkgtest.zpD2PA/build.yeh/src/debian/tests/ssh.sh: 11: ps: not found > Starting up as uid test, full id output: uid=1000(test) gid=1000(test) > groups=1000(test) > Process list: > Error: Command not found > autopkgtest [20:45:59]: test ssh.sh: -----------------------] > autopkgtest [20:45:59]: test ssh.sh: - - - - - - - - - - results - - - - - - > - - - - > ssh.sh FAIL non-zero exit status 127 > autopkgtest [20:45:59]: @@@@@@@@@@@@@@@@@@@@ summary > ssh.sh FAIL non-zero exit status 127 The full autokpgtest logs are available at: https://ci.debian.net/experiments/8/regressions/ (please beware of pagination) Common types of failure and suggested fixes are being documented at: https://wiki.debian.org/ContinuousIntegration/LxcToIncus Note that for the time being, keychain is still being tested under lxc to avoid disturbing its testing migration test results. If you decide to add the `isolation-machine` restriction to get this package tested under qemu, please mention that explicitly when closing this bug (it's fine to do that only in the package changelog entry that closes the bug) so that we can configure your package for qemu on ci.debian.net.
signature.asc
Description: PGP signature
