Source: nsd
Version: 4.15.0-1
Severity: important
Justification: fails autopkgtest on Debian CI infrastructure
Tags: forky sid
User: [email protected]
Usertags: lxc

Hi,

Debian CI is switching away from lxc containers in favor of incus Containers.
This is motivated by security concerns from us; incus is based on lxc, but
orchestrates containers substantially different: containers are not privileged
(so root in the container is not uid 0 outside of it, and incus imposes a
stricter isolation from the host system.

nsd passes its tests under lxc, but fails under incus.
The relevant part of the failure is (hopefully):

> Selecting previously unselected package libfstrm0:amd64.
> Preparing to unpack .../4-libfstrm0_0.6.1-1+b4_amd64.deb ...
> Unpacking libfstrm0:amd64 (0.6.1-1+b4) ...
> Selecting previously unselected package libprotobuf-c1:amd64.
> Preparing to unpack .../5-libprotobuf-c1_1.5.1-1+b2_amd64.deb ...
> Unpacking libprotobuf-c1:amd64 (1.5.1-1+b2) ...
> Selecting previously unselected package libxdp1:amd64.
> Preparing to unpack .../6-libxdp1_1.6.3-1_amd64.deb ...
> Unpacking libxdp1:amd64 (1.6.3-1) ...
> Selecting previously unselected package nsd.
> Preparing to unpack .../7-nsd_4.15.0-1_amd64.deb ...
> Unpacking nsd (4.15.0-1) ...
> Setting up libfstrm0:amd64 (0.6.1-1+b4) ...
> Setting up libevent-2.1-7t64:amd64 (2.1.13-stable-1) ...
> Setting up libprotobuf-c1:amd64 (1.5.1-1+b2) ...
> Setting up libcap2:amd64 (1:2.78-1) ...
> Setting up libelf1t64:amd64 (0.195-1) ...
> Setting up libbpf1:amd64 (1:1.7.0-1) ...
> Setting up libxdp1:amd64 (1.6.3-1) ...
> Setting up nsd (4.15.0-1) ...
> Creating group 'nsd' with GID 994.
> Creating user 'nsd' (n/a) with UID 994 and GID 994.
> Created symlink '/etc/systemd/system/multi-user.target.wants/nsd.service' → 
> '/usr/lib/systemd/system/nsd.service'.
> Could not execute systemctl:  at /usr/bin/deb-systemd-invoke line 148.
> Processing triggers for libc-bin (2.42-17) ...
> autopkgtest [20:51:27]: test simpletest: [-----------------------
> Job for nsd.service failed because the control process exited with error code.
> See "systemctl status nsd.service" and "journalctl -xeu nsd.service" for 
> details.
> autopkgtest [20:51:28]: test simpletest: -----------------------]
> autopkgtest [20:51:28]: test simpletest:  - - - - - - - - - - results - - - - 
> - - - - - -
> simpletest           FAIL non-zero exit status 1


The full autokpgtest logs are available at:
https://ci.debian.net/experiments/8/regressions/
(please beware of pagination)

Common types of failure and suggested fixes are being documented at:
https://wiki.debian.org/ContinuousIntegration/LxcToIncus

Note that for the time being, nsd is still being tested under lxc to
avoid disturbing its testing migration test results.

If you decide to add the `isolation-machine` restriction to get this package
tested under qemu, please mention that explicitly when closing this bug (it's
fine to do that only in the package changelog entry that closes the bug) so
that we can configure your package for qemu on ci.debian.net.

Attachment: signature.asc
Description: PGP signature

Reply via email to