touch-packages team mailing list archive

[Martin Pitt <martin.pitt@xxxxxxxxxx>]

This is trivially reproducible on an amd64 desktop (I'm running wily,
the production machines run vivid) with

  adt-build-lxc ubuntu wily
  echo "lxc.aa_profile = unconfined" | tee -a /var/lib/lxc/adt-wily/config
  adt-run lxc --- lxc -s adt-wily

so setting to "triaged".

** Changed in: auto-package-testing
       Status: New => Triaged

** Changed in: lxc (Ubuntu)
       Status: New => Triaged

** Description changed:

  This spawned from
  https://plus.google.com/u/0/+MartinPitti/posts/JE8be51XRZy : lxc's
  autopkgtests currently fail on armhf/ppc64el where we run autopkgtests
  in an LXC container
- (http://autopkgtest.ubuntu.com/packages/l/lxc/wily/armhf/). This isn't a
- bug in LXC itself, but I started with this to get some appropriate
- subscribers.
+ (http://autopkgtest.ubuntu.com/packages/l/lxc/wily/armhf/).
  
  The testbeds use a custom and more liberal apparmor profile than the
  default LXC one (see http://bazaar.launchpad.net/~auto-package-testing-
  dev/auto-package-testing/trunk/view/head:/slave-admin/setup-adt-
  lxc.commands):
  
  profile lxc-container-adt flags=(attach_disconnected,mediate_deleted) {
    #include <abstractions/lxc/container-base>
    #include <abstractions/lxc/start-container>
  
    # Nesting
    mount fstype=cgroup -> /sys/fs/cgroup/**,
    mount fstype=proc -> /var/cache/lxc/**,
    mount fstype=sysfs -> /var/cache/lxc/**,
    mount options=(rw,bind) /var/cache/lxc/**/dev/shm/ -> /var/cache/lxc/**/run/shm/,
  
    # Required for lxc-tests
    mount options=(rw,bind) /lib/** -> /var/lib/lxc**,
    mount options=(rw,rbind) /var/lib/lxcsnaps/** -> /var/lib/lxcsnaps/**,
  
    # Allow containers to mount /proc, e. g. for sbuild/pbuilder tests
    mount options=(rw,bind),
    mount fstype=devpts,
    mount fstype=proc,
    mount fstype=sysfs,
  }
  
  But with just this they hang eternally and time out, and there are also
  some test failures.
+ 
+ Reproducer: (tested on wily amd64):
+ 
+   adt-build-lxc ubuntu wily
+   echo "lxc.aa_profile = unconfined" | tee -a /var/lib/lxc/adt-wily/config
+   adt-run lxc --- lxc -s adt-wily

-- 
You received this bug notification because you are a member of Ubuntu
Touch seeded packages, which is subscribed to lxc in Ubuntu.
https://bugs.launchpad.net/bugs/1502604

Title:
  autopkgtests fail in LXC testbed

Status in Auto Package Testing:
  Triaged
Status in lxc package in Ubuntu:
  Triaged

Bug description:
  This spawned from
  https://plus.google.com/u/0/+MartinPitti/posts/JE8be51XRZy : lxc's
  autopkgtests currently fail on armhf/ppc64el where we run autopkgtests
  in an LXC container
  (http://autopkgtest.ubuntu.com/packages/l/lxc/wily/armhf/).

  The testbeds use a custom and more liberal apparmor profile than the
  default LXC one (see http://bazaar.launchpad.net/~auto-package-
  testing-dev/auto-package-testing/trunk/view/head:/slave-admin/setup-
  adt-lxc.commands):

  profile lxc-container-adt flags=(attach_disconnected,mediate_deleted) {
    #include <abstractions/lxc/container-base>
    #include <abstractions/lxc/start-container>

    # Nesting
    mount fstype=cgroup -> /sys/fs/cgroup/**,
    mount fstype=proc -> /var/cache/lxc/**,
    mount fstype=sysfs -> /var/cache/lxc/**,
    mount options=(rw,bind) /var/cache/lxc/**/dev/shm/ -> /var/cache/lxc/**/run/shm/,

    # Required for lxc-tests
    mount options=(rw,bind) /lib/** -> /var/lib/lxc**,
    mount options=(rw,rbind) /var/lib/lxcsnaps/** -> /var/lib/lxcsnaps/**,

    # Allow containers to mount /proc, e. g. for sbuild/pbuilder tests
    mount options=(rw,bind),
    mount fstype=devpts,
    mount fstype=proc,
    mount fstype=sysfs,
  }

  But with just this they hang eternally and time out, and there are
  also some test failures.

  Reproducer: (tested on wily amd64):

    adt-build-lxc ubuntu wily
    echo "lxc.aa_profile = unconfined" | tee -a /var/lib/lxc/adt-wily/config
    adt-run lxc --- lxc -s adt-wily

To manage notifications about this bug go to:
https://bugs.launchpad.net/auto-package-testing/+bug/1502604/+subscriptions