On Mon, 16 Nov 2020 00:28:57 +0100 Johannes Schauer wrote:

[...]
> Do you have the time to investigate further on this issue?

As you can see, not much time, unfortunately!    :-(
And I am sad about this, believe me.

> This does not seem
> to be a problem of initramfs-tools or a problem of fakechroot not being 
> enabled
> but a weird problem with fakechroot.

I don't know whether I can get around to investigating the fakechroot
failure, but, in the meanwhile I noticed that #898446 has been closed
and a decision has been made.
It was apparently concluded that enabling
"kernel.unprivileged_userns_clone=1" by default is better than
disabling it by default.

As I have [previously said], I am not brave enough (and knowledgeable
enough on this topic) to diverge from the default Debian settings.

[previously said]: <https://bugs.debian.org/944485#26>

However, now the Debian default has changed:

  $ /sbin/sysctl kernel.unprivileged_userns_clone
  kernel.unprivileged_userns_clone = 1

As a consequence, I feel like giving the "unshare" mode of mmdebstrap a
try.

I tried again with my work-in-progress script:

  $ cd ~/Downloads/
  $ mmdebstrap-autopkgtest-qemu 8GiB
  I: automatically chosen mode: unshare
  I: chroot architecture amd64 is equal to the host's architecture
  I: automatically chosen format: tar
  I: using ${HOME}/Downloads/mmdebstrap.43LR3zoGLq as tempdir
  E: cannot create ${HOME}/Downloads: Permission denied; cannot create 
${HOME}/Downloads/mmdebstrap.43LR3zoGLq: Permission denied; cannot create 
${HOME}/Downloads/mmdebstrap.43LR3zoGLq//etc: Permission denied; cannot create 
${HOME}/Downloads/mmdebstrap.43LR3zoGLq//etc/apt: Permission denied; cannot 
create ${HOME}/Downloads/mmdebstrap.43LR3zoGLq//etc/apt/apt.conf.d: Permission 
denied
  W: listening on child socket failed: 
  I: removing tempdir ${HOME}/Downloads/mmdebstrap.43LR3zoGLq...
  E: unable to chdir() to parent directory of 
${HOME}/Downloads/mmdebstrap.43LR3zoGLq: Permission denied
  E: remove_tree failed


OK, this does not work at all.
I tried to read the relevant section in the mmdebstrap(1) man page, and
there's some recommendation about an --unshare-helper option.

But to be honest, I failed to understand what I am supposed to do with
this --unshare-helper option.
Could you please clarify?

Please remember that my script exports TMPDIR='.', in order to avoid
using a tightly sized /tmp partition, where several GB of data would
definitely not fit.

Thanks for your time and patience.


-- 
 http://www.inventati.org/frx/
 There's not a second to spare! To the laboratory!
..................................................... Francesco Poli .
 GnuPG key fpr == CA01 1147 9CD2 EFDF FB82  3925 3E1C 27E1 1F69 BFFE

Attachment: pgpEsD_Y8fIdz.pgp
Description: PGP signature

Reply via email to