Hello,
Michael Kelly, le sam. 18 juil. 2026 21:35:50 +0100, a ecrit:
> Is there a script or document that is used to construct a buildd machine
> that I could make use of for this comparison ?
"Constructing a buildd machine" is a long thing to do. But you do not
need the whole of it. What actually builds packages is sbuild.
The configuration is as below.
€ cat /home/buildd/.sbuildrc
use Sys::Hostname;
my $myhostname = hostname();
$mailfrom = "Build Daemon <buildd@".$myhostname.".sceen.net>";
$mailto = '[email protected],[email protected]';
$maintainer_name='Debian GNU/Hurd Build Daemon
<buildd_hurd-amd64-'.$myhostname.'@buildd.debian.org>';
$purge_build_directory="always";
$sbuild_mode='buildd';
$mime_build_log_mails = 1;
$compress_build_log_mails = 1;
$apt_keep_downloaded_packages = 1;
#$fakeroot='/usr/bin/fakeroot';
$chroot_mode='schroot';
$schroot='schroot';
$stalled_pkg_timeout = 180;
$build_env_cmnd = "/bin/fixchroot";
$build_environment = {
"FAKEROOTUID" => "0",
"FAKEROOTEUID" => "0",
"FAKEROOTSUID" => "0",
"FAKEROOTFUID" => "0",
"FAKEROOTGID" => "0",
"FAKEROOTEGID" => "0",
"FAKEROOTSGID" => "0",
"FAKEROOTFGID" => "0",
};
# don't remove this, Perl needs it:
1;
€ cat /etc/schroot/chroot.d/sid-hurd-amd64-sbuild
[sid-hurd-amd64-sbuild]
description=Debian unstable/hurd-amd64 autobuilder
groups=root,sbuild
root-groups=root,sbuild
profile=sbuild
type=plain
directory=/home/buildd/chroots/sid
union-type=none
command-prefix=eatmydata
€ cat /home/buildd/chroots/chroots/sid/bin/fixchroot
#!/bin/bash
export FAKEROOTUID=0 FAKEROOTEUID=0 FAKEROOTSUID=0 FAKEROOTFUID=0 FAKEROOTGID=0
FAKEROOTEGID=0 FAKEROOTSGID=0 FAKEROOTFGID=0
USER=$(whoami)
exec "$@"
€ cat /etc/sudoers.d/buildd
Defaults rlimit_as=3000000000
Defaults:buildd env_keep+="APT_CONFIG DEBIAN_FRONTEND SHELL DEB_BUILD_OPTIONS
FAKEROOTUID FAKEROOTEUID FAKEROOTSUID FAKEROOTFUID FAKEROOTGID FAKEROOTEGID
FAKEROOTSGID FAKEROOTFGID KF_IGNORE_PLATFORM_CHECK"
buildd ALL=NOPASSWD: ALL
€ fsysopts /
ext2fs --writable --relatime --no-inherit-dir-group --store-type=typed
part:1:device:wd0
€ fsysopts /home/buildd/chroots
/hurd/ext2fs --writable --relatime --no-inherit-dir-group --sync=5 /dev/wd0s3
The directory-based chroot in /home/buildd/chroots/sid is built with the
attached script.
The boralus VM is running as follows:
2009 ? SLl 5807:21 /usr/bin/qemu-system-x86_64 -name
guest=boralus,debug-threads=on -S -object
{"qom-type":"secret","id":"masterKey0","format":"raw","file":"/var/lib/libvirt/qemu/domain-1-boralus/master-key.aes"}
-machine
pc-q35-7.2,usb=off,dump-guest-core=off,mem-merge=off,memory-backend=pc.ram,acpi=on
-accel kvm -cpu qemu64,x2apic=on,hypervisor=on,lahf-lm=on,svm=off -m
size=3145728k -object
{"qom-type":"memory-backend-file","id":"pc.ram","mem-path":"/hugepages_1g/libvirt/qemu/1-boralus","x-use-canonical-path-for-ramblock-id":false,"prealloc":true,"size":3221225472}
-overcommit mem-lock=on -smp 1,sockets=1,cores=1,threads=1 -uuid
55bf441a-67cb-4b09-8e83-46304477d74f -no-user-config -nodefaults -chardev
socket,id=charmonitor,fd=34,server=on,wait=off -mon
chardev=charmonitor,id=monitor,mode=control -rtc base=utc -no-shutdown -global
ICH9-LPC.disable_s3=1 -global ICH9-LPC.disable_s4=1 -boot strict=on -device
{"driver":"pcie-root-port","port":16,"chassis":1,"id":"pci.1","bus":"pcie.0","multifunction":true,"addr":"0x2"}
-device
{"driver":"pcie-root-port","port":17,"chassis":2,"id":"pci.2","bus":"pcie.0","addr":"0x2.0x1"}
-device
{"driver":"pcie-root-port","port":18,"chassis":3,"id":"pci.3","bus":"pcie.0","addr":"0x2.0x2"}
-device
{"driver":"pcie-root-port","port":19,"chassis":4,"id":"pci.4","bus":"pcie.0","addr":"0x2.0x3"}
-device
{"driver":"pcie-root-port","port":20,"chassis":5,"id":"pci.5","bus":"pcie.0","addr":"0x2.0x4"}
-device
{"driver":"pcie-root-port","port":21,"chassis":6,"id":"pci.6","bus":"pcie.0","addr":"0x2.0x5"}
-device
{"driver":"pcie-root-port","port":22,"chassis":7,"id":"pci.7","bus":"pcie.0","addr":"0x2.0x6"}
-device
{"driver":"pcie-root-port","port":23,"chassis":8,"id":"pci.8","bus":"pcie.0","addr":"0x2.0x7"}
-device
{"driver":"pcie-root-port","port":24,"chassis":9,"id":"pci.9","bus":"pcie.0","multifunction":true,"addr":"0x3"}
-device
{"driver":"pcie-root-port","port":25,"chassis":10,"id":"pci.10","bus":"pcie.0","addr":"0x3.0x1"}
-device
{"driver":"pcie-root-port","port":26,"chassis":11,"id":"pci.11","bus":"pcie.0","addr":"0x3.0x2"}
-device
{"driver":"pcie-root-port","port":27,"chassis":12,"id":"pci.12","bus":"pcie.0","addr":"0x3.0x3"}
-device
{"driver":"pcie-root-port","port":28,"chassis":13,"id":"pci.13","bus":"pcie.0","addr":"0x3.0x4"}
-device
{"driver":"pcie-root-port","port":29,"chassis":14,"id":"pci.14","bus":"pcie.0","addr":"0x3.0x5"}
-device {"driver":"qemu-xhci","id":"usb","bus":"pci.2","addr":"0x0"} -device
{"driver":"virtio-serial-pci","id":"virtio-serial0","bus":"pci.3","addr":"0x0"}
-blockdev
{"driver":"file","filename":"/home/kvm/boralus/hd0.img","node-name":"libvirt-1-storage","read-only":false,"cache":{"direct":true,"no-flush":false}}
-device
{"driver":"ide-hd","bus":"ide.0","drive":"libvirt-1-storage","id":"sata0-0-0","bootindex":1,"write-cache":"on"}
-netdev {"type":"tap","fd":"35","id":"hostnet0"} -device
{"driver":"pcnet","netdev":"hostnet0","id":"net0","mac":"02:00:00:83:05:37","bus":"pci.1","addr":"0x0"}
-chardev pty,id=charserial0 -device
{"driver":"isa-serial","chardev":"charserial0","id":"serial0","index":0}
-audiodev {"id":"audio1","driver":"none"} -vnc
vnc=unix:/home/kvm/boralus/vnc_socket,audiodev=audio1 -k fr -device
{"driver":"cirrus-vga","id":"video0","bus":"pcie.0","addr":"0x1"} -global
ICH9-LPC.noreboot=off -watchdog-action reset -incoming defer -device
{"driver":"virtio-balloon-pci","id":"balloon0","bus":"pci.4","addr":"0x0"}
-sandbox
on,obsolete=deny,elevateprivileges=deny,spawn=deny,resourcecontrol=deny -msg
timestamp=on
The host cpu is:
processor : 7
vendor_id : GenuineIntel
cpu family : 6
model : 86
model name : Intel(R) Xeon(R) CPU D-1521 @ 2.40GHz
stepping : 3
microcode : 0x700001c
cpu MHz : 2701.002
cache size : 6144 KB
physical id : 0
siblings : 8
core id : 3
cpu cores : 4
apicid : 7
initial apicid : 7
fpu : yes
fpu_exception : yes
cpuid level : 20
wp : yes
flags : fpu vme de pse tsc msr pae mce cx8 apic sep mtrr pge mca cmov
pat pse36 clflush dts acpi mmx fxsr sse sse2 ss ht tm pbe syscall nx pdpe1gb
rdtscp lm constant_tsc arch_perfmon pebs bts rep_good nopl xtopology
nonstop_tsc cpuid aperfmperf pni pclmulqdq dtes64 monitor ds_cpl vmx smx est
tm2 ssse3 sdbg fma cx16 xtpr pdcm pcid dca sse4_1 sse4_2 x2apic movbe popcnt
tsc_deadline_timer aes xsave avx f16c rdrand lahf_lm abm 3dnowprefetch
cpuid_fault epb cat_l3 cdp_l3 pti intel_ppin ssbd ibrs ibpb stibp tpr_shadow
flexpriority ept vpid ept_ad fsgsbase tsc_adjust bmi1 hle avx2 smep bmi2 erms
invpcid rtm cqm rdt_a rdseed adx smap intel_pt xsaveopt cqm_llc cqm_occup_llc
cqm_mbm_total cqm_mbm_local dtherm ida arat pln pts vnmi md_clear flush_l1d
vmx flags : vnmi preemption_timer posted_intr invvpid ept_x_only ept_ad
ept_1gb flexpriority apicv tsc_offset vtpr mtf vapic ept vpid
unrestricted_guest vapic_reg vid ple shadow_vmcs pml ept_violation_ve
bugs : cpu_meltdown spectre_v1 spectre_v2 spec_store_bypass l1tf mds
swapgs taa itlb_multihit mmio_stale_data vmscape
bogomips : 4800.57
clflush size : 64
cache_alignment : 64
address sizes : 46 bits physical, 48 bits virtual
power management:
I hope I didn't forget something in the setup.
Samuel
#!/bin/bash
set -x
set -e
shopt -s nullglob
ARCH=$(dpkg-architecture -qDEB_HOST_ARCH)
CHROOTS=$HOME/chroots
if [ ! -d $CHROOTS/lost+found ]
then
echo chroots/ is not mounted
exit 1
fi
rm -f $HOME/build/build-progress
rm -f $HOME/build/SBUILD-GIVEN-BACK
remove()
{
SUITE=$1
case $SUITE in
d-i) BASE=sid-d-i ;;
unstable) BASE=sid ;;
experimental) BASE=experimental ;;
esac
CHROOT=$CHROOTS/$BASE
SCHROOT=/etc/schroot/chroot.d/$BASE-$ARCH-sbuild
sudo rm -f $SCHROOT-* $SCHROOT
[ -d $CHROOT ] || return 0
for i in build dev servers tmp var/lib/dbus run/dbus proc home/buildd/.dbus
/repo ; do
[ ! -e "$CHROOT/$i" ] || sudo settrans -fg "$CHROOT/$i"
done
sudo settrans -afg $CHROOT/proc || true
for i in $CHROOT/dev/* $CHROOT/servers/* $CHROOT/servers/socket/*
$CHROOT/servers/bus/*
do
sudo settrans -fg $i
done
sudo mv $CHROOT $CHROOTS/toremove-$$-$SUITE
(cd $CHROOTS ; sudo rm -fr toremove-$$-$SUITE ) &
}
#sudo rm -f /tmp/.X*-lock
#remove unstable
#remove unstable-test
#remove d-i
remove experimental
#( sudo sh -c "for i in /lost+found/* ; do settrans -fg \$i ; done ; for i in
/lost+found/*/*/* ; do settrans -fg \$i ; done ; for i in /lost+found/*/* ; do
settrans -fg \$i ; done ; for i in /lost+found/*/*/* ; do settrans -fg \$i ;
done ; rm -fr /lost+found/*" ) &
#( cd $CHROOTS ; sudo sh -c "for i in lost+found/* ; do settrans -fg \$i ; done
; for i in lost+found/*/* ; do settrans -fg \$i ; done ; for i in
lost+found/*/*/* ; do settrans -fg \$i ; done ; rm -fr lost+found/*" ) &
[ -L $HOME/build/chroot-experimental ] || ln -s ../chroots/experimental
$HOME/build/chroot-experimental
[ -L $HOME/build/chroot-sid ] || ln -s ../chroots/sid $HOME/build/chroot-sid
[ -L $HOME/build/chroot-unstable ] || ln -s ../chroots/sid
$HOME/build/chroot-unstable
create()
{
SUITE=$1
case $SUITE in
unstable) BASE=sid ;;
unstable-test) BASE=sid-test ;;
d-i) BASE=sid-d-i ;;
experimental) BASE=experimental ;;
esac
CHROOT=$CHROOTS/$BASE
SCHROOT=/etc/schroot/chroot.d/$BASE-$ARCH-sbuild
sudo env eatmydata sbuild-createchroot \
--chroot-prefix=$BASE \
--command-prefix=eatmydata \
--include=eatmydata,debian-ports-archive-keyring,ca-certificates \
--exclude=lsb-base \
--extra-suites=unreleased \
--merged-usr \
--keyring=/usr/share/keyrings/debian-ports-archive-keyring.gpg \
unstable $CHROOT "http://deb.debian.org/debian-ports";
sudo settrans -kp $CHROOT/servers /hurd/firmlink /servers
sudo settrans -kp $CHROOT/dev /hurd/firmlink /dev
sudo settrans -kp $CHROOT/proc /hurd/firmlink /proc
sudo chroot $CHROOT apt -f install -y || true
#echo y | sudo chroot $CHROOT apt -y upgrade || true
#sudo chroot $CHROOT apt install -o APT::Install-Recommends=false -y
--allow-unauthenticated gnupg
sudo chroot $CHROOT apt install -o APT::Install-Recommends=false -y
--allow-unauthenticated adduser
sudo chroot $CHROOT groupadd -r _ssh
sudo mv $SCHROOT-* $SCHROOT
sudo sed -i -e 's/^type=directory$/type=plain/' $SCHROOT
sudo chroot $CHROOT adduser --uid $UID --disabled-password --gecos buildd
buildd
#sudo settrans $CHROOT/tmp /hurd/firmlink /tmp
sudo settrans -c $CHROOT/var/lib/dbus /hurd/firmlink /var/lib/dbus
sudo settrans -c $CHROOT/run/dbus /hurd/firmlink /run/dbus
sudo settrans -c $CHROOT/repo /hurd/firmlink $HOME/repo
#sudo settrans $CHROOT/build /hurd/firmlink /home/buildd/chroots/build
sudo chown buildd.sbuild $CHROOT/home/buildd
chmod 02775 $CHROOT/home/buildd
sudo settrans -c $CHROOT/home/buildd/.dbus /hurd/firmlink /home/buildd/.dbus
sudo ln -s /proc/mounts $CHROOT/etc/mtab
sudo cp ~buildd/fixchroot $CHROOT/bin/
sudo dd conv=notrunc oflag=append of=$CHROOT/etc/apt/apt.conf.d/99buildd <<
EOF
Acquire::PDiffs "false";
Acquire::Languages "none";
DPkg::Options {"--force-unsafe-io";};
EOF
sudo chroot $CHROOT update-alternatives --set fakeroot /usr/bin/fakeroot-hurd
sudo dd of=$CHROOT/etc/apt/sources.list << EOF
#deb [arch=all] http://deb.debian.org/debian unstable main
#deb [arch=all] http://incoming.debian.org/debian-buildd buildd-unstable main
deb http://deb.debian.org/debian-ports unstable main
deb-src http://deb.debian.org/debian unstable main
deb http://incoming.ports.debian.org/buildd unstable main
deb-src http://incoming.debian.org/debian-buildd buildd-unstable main
deb http://deb.debian.org/debian-ports unreleased main
deb file:/repo ./
EOF
if [ $SUITE = experimental ]
then
sudo dd conv=notrunc oflag=append of=$CHROOT/etc/apt/sources.list << EOF
#deb [arch=all] http://deb.debian.org/debian experimental main contrib
#deb [arch=all] http://incoming.debian.org/debian-buildd buildd-experimental
main
deb http://deb.debian.org/debian-ports experimental main
deb-src http://deb.debian.org/debian experimental main
deb http://incoming.ports.debian.org/buildd experimental main
deb-src http://incoming.debian.org/debian-buildd buildd-experimental main
EOF
fi
gpg --keyserver keyring.debian.org --recv-key
900CB024B67931D40F82304BD0178C767D069EE6
rm -f /tmp/sthibault.gpg
gpg --export -o /tmp/sthibault.gpg 900CB024B67931D40F82304BD0178C767D069EE6
sudo cp /tmp/sthibault.gpg $CHROOT/etc/apt/trusted.gpg.d/sthibault.gpg
sudo chroot $CHROOT apt update || true
sudo chroot $CHROOT apt upgrade -y --allow-unauthenticated
sudo dd conv=notrunc oflag=append of=$CHROOT/etc/hosts << EOF
127.0.1.1 $(hostname).debian.net $(hostname)
EOF
#(cd ~/build ; sbuild-update -udc $BASE)
}
(cd $CHROOTS && for i in build/*/dev build/*/servers build/*/proc ; do sudo
settrans -fg $i ; done && for i in build/*/dev/* build/*/servers/* ; do sudo
settrans -fg $i ; done && for i in build/*/servers/*/* ; do sudo settrans -fg
$i && rm -fr build/* ; done ) &
create unstable
#create unstable-test
#create d-i
#sudo chmod 1777 $CHROOTS/sid-d-i/build
#sudo chroot $CHROOTS/sid-d-i apt build-dep debian-installer
#create experimental
#sudo chroot $CHROOTS/experimental apt -y --allow-unauthenticated install
aptitude
