Bug#1050256: [pkg-apparmor] Bug#1050256: autopkgtest fails on debci

From	intrigeri <intrigeri@debian.org>
Newsgroups	linux.debian.bugs.dist, linux.debian.kernel
Subject	Bug#1050256: [pkg-apparmor] Bug#1050256: autopkgtest fails on debci
Date	2023-09-17 08:40 +0200
Message-ID	<HeTBM-9xuN-15@gated-at.bofh.it> (permalink)
References	(5 earlier) <HanK9-6If8-1@gated-at.bofh.it> <Hc5g5-7NE1-1@gated-at.bofh.it> <HcNAt-8fKU-5@gated-at.bofh.it> <H5AeZ-3Dvv-9@gated-at.bofh.it> <HcNAt-8fKU-5@gated-at.bofh.it>
Organization	linux.* mail to news gateway

Cross-posted to 2 groups.

Show all headers | View raw

Control: reassign -1 src:linux
Control: retitle -1 AppArmor breaks locking non-fs Unix sockets
Control: affects -1 src:apparmor src:lxc src:systemd src:pdns src:policykit-1
Control: found -1 6.1.38-1
Control: found -1 6.1.38-2
Control: notfound -1 6.3.1-1~exp1

Hi Debian Kernel Team,

In the last month or so, a number of people from various Debian teams
and other distributions have been tracking down a regression that
affects systems upgraded to Bookworm: services that use certain
systemd facilities such as PrivateNetwork=yes fail to start in LXC/LXD
containers. Among other things, this breaks the autopkgtests of many
packages, such as systemd, on ci.debian.net (#1050256). This was
tracked down to a kernel regression, for which a fix landed in Linux
6.2:

  1cf26c3d2c4c apparmor: fix apparmor mediating locking non-fs unix sockets

Work is ongoing to backport the fix to linux-stable/linux-6.1.y.
I'm Cc'ing John and Mathias who have been working on this.

FYI, ideally this would be fixed in the upcoming Bookworm
point-release (12.2, early October).

Current workarounds:

 - ci.debian.net was upgraded to the bookworm-backports kernel
 - various packages maintainers have added workarounds such as disabling
   PrivateNetwork=yes for autopkgtests

Cheers,
-- 
intrigeri

Back to linux.debian.kernel | Previous | Next — Next in thread | Find similar | Unroll thread

Thread

Bug#1050256: [pkg-apparmor] Bug#1050256: autopkgtest fails on debci intrigeri <intrigeri@debian.org> - 2023-09-17 08:40 +0200
  Processed: Re: [pkg-apparmor] Bug#1050256: autopkgtest fails on debci "Debian Bug Tracking System" <owner@bugs.debian.org> - 2023-09-17 08:40 +0200
  Bug#1050256: [pkg-apparmor] Bug#1050256: autopkgtest fails on debci Salvatore Bonaccorso <carnil@debian.org> - 2023-09-19 07:20 +0200
    Processed: Re: [pkg-apparmor] Bug#1050256: autopkgtest fails on debci "Debian Bug Tracking System" <owner@bugs.debian.org> - 2023-09-19 07:20 +0200
    Bug#1050256: [pkg-apparmor] Bug#1050256: autopkgtest fails on debci Mathias Gibbens <gibmat@debian.org> - 2023-09-24 16:10 +0200

csiph-web