Source: pgaudit-18 Version: 18.0-3 Severity: important Justification: fails autopkgtest on Debian CI infrastructure Tags: forky sid User: [email protected] Usertags: lxc
Hi, Debian CI is switching away from lxc containers in favor of incus Containers. This is motivated by security concerns from us; incus is based on lxc, but orchestrates containers substantially different: containers are not privileged (so root in the container is not uid 0 outside of it), and incus imposes a stricter isolation from the host system). pgaudit-18 passes its tests under lxc, but fails under incus. The relevant part of the failure is (hopefully): > @@ -2540,9 +2541,13 @@ > SET pgaudit.log = 'NONE'; > DROP EXTENSION pgaudit; > DROP OPERATOR <> (text, text); > +ERROR: cannot drop operator <>(text,text) because it is required by the > database system > DROP FUNCTION my_ne(text, text); > +ERROR: function my_ne(text, text) does not exist > DROP FUNCTION lower(text); > +ERROR: cannot drop function lower(text) because it is required by the > database system > DROP FUNCTION upper(text); > +ERROR: cannot drop function upper(text) because it is required by the > database system > -- Create/drop extension. Note that the log level here must be warning > because the create extension code will reset any higher log > -- levels like notice > SET pgaudit.log = 'all,-misc_set'; > @@ -2626,10 +2631,12 @@ > DROP TABLE test.account_copy; > DROP TABLE test.test_insert; > DROP SCHEMA test; > +ERROR: cannot drop schema test because other objects depend on it > DROP TABLE foo.bar; > DROP TABLE foo.baz; > DROP SCHEMA foo; > DROP TABLE hoge; > +ERROR: table "hoge" does not exist > DROP TABLE account; > DROP TABLE account_role_map; > DROP USER regress_user2; > ### End 18 installcheck (FAILED with exit code 1) ### > autopkgtest [21:18:22]: test installcheck: -----------------------] > autopkgtest [21:18:22]: test installcheck: - - - - - - - - - - results - - - > - - - - - - - > installcheck FAIL non-zero exit status 1 The full autokpgtest logs are available at: https://ci.debian.net/experiments/8/regressions/ (please beware of pagination) Common types of failure and suggested fixes are being documented at: https://wiki.debian.org/ContinuousIntegration/LxcToIncus Note that for the time being, pgaudit-18 is still being tested under lxc to avoid disturbing its testing migration test results. If you decide to add the `isolation-machine` restriction to get this package tested under qemu, please mention that explicitly when closing this bug (it's fine to do that only in the package changelog entry that closes the bug) so that we can configure your package for qemu on ci.debian.net.
signature.asc
Description: PGP signature
