On Tue, Oct 24, 2017 at 07:48:52AM +0200, Cyril Brulebois wrote: > Package: apt > Version: 1.4.8 > Severity: serious > Tags: d-i > Justification: FTBFS > > [ Please keep both debian-boot@ and me in copy. ] > > It seems the “most secure file downloading on the planet” can no longer > copy files around: > | get-packages udeb > | make[5]: 'sources.list.udeb' is up to date. > | Ign:1 copy:/home/kibi/debian-installer/installer/build localudebs/ InRelease > | Ign:2 copy:/home/kibi/debian-installer/installer/build localudebs/ Release > | Ign:3 copy:/home/kibi/debian-installer/installer/build localudebs/ Packages > | Ign:4 copy:/home/kibi/debian-installer/installer/build localudebs/ > Translation-en > | Ign:5 copy:/home/kibi/debian-installer/installer/build localudebs/ Contents > (deb) > | Ign:6 copy:/home/kibi/debian-installer/installer/build localudebs/ Contents > (deb) > | Ign:7 copy:/home/kibi/debian-installer/installer/build localudebs/ Contents > (udeb) > | Get:8 http://localhost/debian unstable InRelease [235 kB] > | Ign:9 copy:/home/kibi/debian-installer/installer/build localudebs/ Contents > (udeb) > | Ign:3 copy:/home/kibi/debian-installer/installer/build localudebs/ Packages > | Ign:4 copy:/home/kibi/debian-installer/installer/build localudebs/ > Translation-en > | Ign:5 copy:/home/kibi/debian-installer/installer/build localudebs/ Contents > (deb) > | Ign:6 copy:/home/kibi/debian-installer/installer/build localudebs/ Contents > (deb) > | Ign:7 copy:/home/kibi/debian-installer/installer/build localudebs/ Contents > (udeb) > | Ign:9 copy:/home/kibi/debian-installer/installer/build localudebs/ Contents > (udeb) > | Ign:3 copy:/home/kibi/debian-installer/installer/build localudebs/ Packages > | Ign:4 copy:/home/kibi/debian-installer/installer/build localudebs/ > Translation-en > | Ign:5 copy:/home/kibi/debian-installer/installer/build localudebs/ Contents > (deb) > | Ign:6 copy:/home/kibi/debian-installer/installer/build localudebs/ Contents > (deb) > | Ign:7 copy:/home/kibi/debian-installer/installer/build localudebs/ Contents > (udeb) > | Ign:9 copy:/home/kibi/debian-installer/installer/build localudebs/ Contents > (udeb) > | Reading package lists... > | E: Method copy has died unexpectedly! > | E: Sub-process copy received signal 31. > > Error reporting is a bit underwhelming. :(
This is caused by fakeroot using more syscalls than we have whitelisted, adding the following to apt.conf makes it work again (or well, fail in non-seccomp ways for me with signing issues). APT::Sandbox::Seccomp::Allow { "semop"; "semget"; "msgsnd"; "msgrcv"; "msgget"; "msgctl"; }; This is somewhat bad. I guess we should allow them when running under fakeroot, like this: if (getenv("FAKED_MODE")) { ALLOW(semop); ALLOW(semget); ALLOW(msgsnd); ALLOW(msgrcv); ALLOW(msgget); ALLOW(msgctl); } rather than just turning them on in general. But please check if it builds with the apt.conf options first, as I said, I get some signing problems in my "dirty" environment. -- Debian Developer - deb.li/jak | jak-linux.org - free software dev Ubuntu Core Developer