Source: kore Version: 4.2.3-2 Severity: important Justification: fails autopkgtest on Debian CI infrastructure Tags: forky sid User: [email protected] Usertags: lxc
Hi, Debian CI is switching away from lxc containers in favor of incus Containers. This is motivated by security concerns from us; incus is based on lxc, but orchestrates containers substantially different: containers are not privileged (so root in the container is not uid 0 outside of it, and incus imposes a stricter isolation from the host system. kore passes its tests under lxc, but fails under incus. The relevant part of the failure is (hopefully): > Setting up libpq-dev (18.4-1+b2) ... > Setting up gcc-15 (15.3.0-2) ... > Setting up cpp (4:15.2.0-5) ... > Setting up kore (4.2.3-2) ... > Setting up wget (1.25.0-3) ... > Setting up gcc (4:15.2.0-5) ... > Processing triggers for libc-bin (2.42-17) ... > autopkgtest [21:04:18]: test myapp: [----------------------- > created myapp/src/myapp.c > created myapp/conf/myapp.conf > created myapp/conf/build.conf > created myapp/.gitignore > myapp created successfully! > WARNING: DO NOT USE THE GENERATED CERTIFICATE IN PRODUCTION > active flavor dev > output type dso > kore binary /usr/bin/kore > kore features -DTLS_BACKEND_OPENSSL -DKORE_USE_PGSQL -DKORE_USE_TASKS > -I/usr/include/postgresql > 2026-08-14 21:04:18.193 UTC [parent]: TLS backend OpenSSL 3.5.0 8 Apr 2025 > 2026-08-14 21:04:18.193 UTC [parent]: tls serving https on 127.0.0.1:8888 > 2026-08-14 21:04:18.193 UTC [parent]: privsep: no root path set > 2026-08-14 21:04:18.193 UTC [parent]: privsep: no runas user set > 2026-08-14 21:04:18.193 UTC [parent]: privsep: no keymgr runas set > 2026-08-14 21:04:18.193 UTC [parent]: privsep: no keymgr root set > 2026-08-14 21:04:18.193 UTC [parent]: privsep: skipping all runas options > 2026-08-14 21:04:18.193 UTC [parent]: privsep: skipping all chroot options > 2026-08-14 21:04:18.193 UTC [parent]: kore 4.2.3 starting, built=2025-07-05 > 2026-08-14 21:04:18.193 UTC [parent]: built-ins: seccomp pgsql tasks > 2026-08-14 21:04:18.197 UTC [parent]: more worker processes than cpu cores > 2026-08-14 21:04:18.197 UTC [parent]: starting worker processes > /tmp/autopkgtest.Ba4trs/build.qBZ/src/debian/tests/myapp: line 21: pgrep: > command not found > /tmp/autopkgtest.Ba4trs/wrapper.sh: Killing leaked background processes: 1920 > 1922 1929 1930 1931 1932 1933 1934 1935 1936 1937 1938 1939 1940 1941 1942 > 1943 1944 1945 1946 1947 1948 1949 1950 1951 1952 1953 1954 1955 1956 1957 > 1958 1959 1960 1961 1962 1963 1964 1965 1966 1967 1968 1969 1970 1971 1972 > 1973 1974 1975 1976 1977 > Error: Command not found > autopkgtest [21:04:23]: test myapp: -----------------------] > autopkgtest [21:04:23]: test myapp: - - - - - - - - - - results - - - - - - > - - - - > myapp FAIL non-zero exit status 127 > autopkgtest [21:04:23]: test myapp-clang: preparing testbed > autopkgtest [21:04:26]: testbed dpkg architecture: amd64 > autopkgtest [21:04:26]: testbed apt version: 3.3.2 > autopkgtest [21:04:26]: @@@@@@@@@@@@@@@@@@@@ test bed setup > autopkgtest [21:04:26]: updating testbed package index (apt update) > Get:1 http://deb.debian.org/debian testing InRelease [151 kB] > Get:2 http://deb.debian.org/debian-debug testing-debug InRelease [48.3 kB] > Get:3 http://deb.debian.org/debian testing/contrib Sources [51.7 kB] > Get:4 http://deb.debian.org/debian testing/non-free Sources [73.2 kB] > Get:5 http://deb.debian.org/debian testing/non-free-firmware Sources [7856 B] > Get:6 http://deb.debian.org/debian testing/main Sources [11.1 MB] > Get:7 http://deb.debian.org/debian testing/main amd64 Packages [9907 kB] > Get:8 http://deb.debian.org/debian testing/main Translation-en [6578 kB] > Get:9 http://deb.debian.org/debian testing/contrib amd64 Packages [51.8 kB] > Get:10 http://deb.debian.org/debian testing/contrib Translation-en [49.1 kB] > Get:11 http://deb.debian.org/debian testing/non-free amd64 Packages [91.2 kB] > Get:12 http://deb.debian.org/debian testing/non-free Translation-en [62.4 kB] > Get:13 http://deb.debian.org/debian testing/non-free-firmware amd64 Packages > [10.3 kB] > Get:14 http://deb.debian.org/debian testing/non-free-firmware Translation-en > [6272 B] > Get:15 http://deb.debian.org/debian-debug testing-debug/main Sources [3072 kB] > Get:16 http://deb.debian.org/debian-debug testing-debug/non-free Sources > [19.0 kB] > Get:17 http://deb.debian.org/debian-debug testing-debug/contrib Sources [27.3 > kB] > Get:18 http://deb.debian.org/debian-debug testing-debug/main amd64 Packages > [3754 kB] > Get:19 http://deb.debian.org/debian-debug testing-debug/contrib amd64 > Packages [40.6 kB] > Get:20 http://deb.debian.org/debian-debug testing-debug/non-free amd64 > Packages [15.3 kB] The full autokpgtest logs are available at: https://ci.debian.net/experiments/8/regressions/ (please beware of pagination) Common types of failure and suggested fixes are being documented at: https://wiki.debian.org/ContinuousIntegration/LxcToIncus Note that for the time being, kore is still being tested under lxc to avoid disturbing its testing migration test results. If you decide to add the `isolation-machine` restriction to get this package tested under qemu, please mention that explicitly when closing this bug (it's fine to do that only in the package changelog entry that closes the bug) so that we can configure your package for qemu on ci.debian.net.
signature.asc
Description: PGP signature
