Gentoo Websites Logo
Go to: Gentoo Home Documentation Forums Lists Bugs Planet Store Wiki Get Gentoo!
Bug 434002 - media-sound/lilypond-2.16 - sandbox violation
Summary: media-sound/lilypond-2.16 - sandbox violation
Status: RESOLVED FIXED
Alias: None
Product: Gentoo Linux
Classification: Unclassified
Component: Current packages (show other bugs)
Hardware: All Linux
: Normal normal (vote)
Assignee: Scheme Project
URL:
Whiteboard:
Keywords:
Depends on:
Blocks:
 
Reported: 2012-09-05 07:53 UTC by Gerard Neil
Modified: 2012-11-30 22:52 UTC (History)
2 users (show)

See Also:
Package list:
Runtime testing required: ---


Attachments
build log (build.log,9.08 KB, text/plain)
2012-09-05 07:54 UTC, Gerard Neil
Details
strace excerpt (lily.strace.out,3.70 KB, text/plain)
2012-09-05 07:55 UTC, Gerard Neil
Details
no tex patch (lilypond-2.16.0-tex-docs.patch,620 bytes, patch)
2012-09-05 11:30 UTC, Tim Harder
Details | Diff
updates for lilypond-2.16.0 ebuild to apply tex patch (lilypond-2.16.0.diff,468 bytes, patch)
2012-09-05 11:32 UTC, Tim Harder
Details | Diff
2.16.1 build log (build.log,9.22 KB, text/plain)
2012-11-30 22:52 UTC, Vincent Tai
Details

Note You need to log in before you can comment on or make changes to this bug.
Description Gerard Neil 2012-09-05 07:53:44 UTC
Upstream stable lilypond fails to build with a sandbox violation:

--------------------------- ACCESS VIOLATION SUMMARY ---------------------------
LOG FILE "/var/log/sandbox/sandbox-10946.log"

VERSION 1.0
FORMAT: F - Function called
FORMAT: S - Access Status
FORMAT: P - Path as passed to function
FORMAT: A - Absolute Path (not canonical)
FORMAT: R - Canonical Path
FORMAT: C - Command Line

F: mkdir
S: deny
P: ././var/cache/fonts/tfm
A: /var/cache/fonts/tfm
R: /var/cache/fonts/tfm
C: mkdir ././var/cache/fonts/tfm 
--------------------------------------------------------------------------------

Reproducible: Always




I straced the emerge: it looks like the build is trying to make a 'tfm' file for a font called 'lcircle10', and ends up calling /usr/share/texmf/web2c/mktexdir which causes the problem. That's as far as I got. I don't know tex and I'm no build system expert, but it's info anyway. I've attached the relevant strace excerpt.
Comment 1 Gerard Neil 2012-09-05 07:54:44 UTC
Created attachment 322970 [details]
build log
Comment 2 Gerard Neil 2012-09-05 07:55:21 UTC
Created attachment 322972 [details]
strace excerpt
Comment 3 Gerard Neil 2012-09-05 07:57:23 UTC
$ emerge --info lilypond
Portage 2.1.11.9 (default/linux/amd64/10.0/desktop/gnome, gcc-4.5.4, glibc-2.15-r2, 3.4.9-gentoo-powertop x86_64)
=================================================================
                        System Settings
=================================================================
System uname: Linux-3.4.9-gentoo-powertop-x86_64-Intel-R-_Core-TM-_i7_CPU_Q_720_@_1.60GHz-with-gentoo-2.1
Timestamp of tree: Mon, 03 Sep 2012 05:15:01 +0000
app-shells/bash:          4.2_p37
dev-java/java-config:     2.1.11-r3
dev-lang/python:          2.7.3-r2
dev-util/cmake:           2.8.7-r5
dev-util/pkgconfig:       0.27
sys-apps/baselayout:      2.1-r1
sys-apps/openrc:          0.9.8.4
sys-apps/sandbox:         2.5
sys-devel/autoconf:       2.13, 2.68
sys-devel/automake:       1.11.6
sys-devel/binutils:       2.22-r1
sys-devel/gcc:            4.5.4
sys-devel/gcc-config:     1.7.3
sys-devel/libtool:        2.4-r1
sys-devel/make:           3.82-r3
sys-kernel/linux-headers: 3.4-r2 (virtual/os-headers)
sys-libs/glibc:           2.15-r2
Repositories: gentoo local local_compiz
ACCEPT_KEYWORDS="amd64"
ACCEPT_LICENSE="*"
CBUILD="x86_64-pc-linux-gnu"
CFLAGS="-O2 -pipe -march=native"
CHOST="x86_64-pc-linux-gnu"
CONFIG_PROTECT="/etc /usr/share/gnupg/qualified.txt /usr/share/openvpn/easy-rsa"
CONFIG_PROTECT_MASK="/etc/ca-certificates.conf /etc/dconf /etc/env.d /etc/env.d/java/ /etc/fonts/fonts.conf /etc/gconf /etc/gentoo-release /etc/revdep-rebuild /etc/sandbox.d /etc/terminfo /etc/texmf/language.dat.d /etc/texmf/language.def.d /etc/texmf/updmap.d /etc/texmf/web2c"
CXXFLAGS="-O2 -pipe -march=native"
DISTDIR="/var/portage/distfiles"
EMERGE_DEFAULT_OPTS="--jobs=3 --autounmask-keep-masks"
FCFLAGS="-O2 -pipe"
FEATURES="assume-digests binpkg-logs config-protect-if-modified distlocks ebuild-locks fixlafiles news notitles parallel-fetch parse-eapi-ebuild-head protect-owned sandbox sfperms strict unknown-features-warn unmerge-logs unmerge-orphans userfetch xattr"
FFLAGS="-O2 -pipe"
GENTOO_MIRRORS="http://dandelion.schanck.lan/gentoo ftp://ftp.iinet.net.au/pub/Gentoo"
LANG="en_AU.utf8"
LDFLAGS="-Wl,-O1 -Wl,--as-needed"
LINGUAS="en_AU en_GB en"
MAKEOPTS="-j9 -l8"
PKGDIR="/var/portage/packages"
PORTAGE_CONFIGROOT="/"
PORTAGE_RSYNC_EXTRA_OPTS="-q --exclude=metadata/cache/*"
PORTAGE_RSYNC_OPTS="--recursive --links --safe-links --perms --times --compress --force --whole-file --delete --stats --human-readable --timeout=180 --exclude=/distfiles --exclude=/local --exclude=/packages"
PORTAGE_TMPDIR="/var/tmp"
PORTDIR="/usr/portage"
PORTDIR_OVERLAY="/var/portage/overlay/local /var/portage/overlay/compiz"
SYNC="rsync://dandelion.schanck.lan/gentoo-portage"
USE="X a52 aac aalib acl acpi alsa amd64 applet bash-completion branding bzip2 cairo caps cdda cddb cdr cli consolekit cracklib crypt cscope css cups curl cxx dbus dell dhcp dri dts dvd dvdr emboss encode exif fat fax ffmpeg firefox flac gconf gdbm geoip gif gimp gnome gnome-keyring gnome-online-accounts gpm gstreamer gtk iconv icu jpeg lame lcms libnotify lua lzo mad matroska mmap mmx mmxext mng modules mp3 mp4 mpeg mudflap multilib nautilus ncurses nls nptl ntfs nvidia offensive ogg opengl openmp pam pango pch pcre pdf png policykit pppd readline rtmp samba session smi smp socialweb speex spell srt sse sse2 ssl ssse3 startup-notification svg system-sqlite tcpd theora threads tiff truetype udev udisks unicode upower usb v4l2 vdpau vhosts vim-syntax vim-with-x vorbis wma wmf wxwidgets x264 xattr xcb xcomposite xfs xinerama xinetd xml xv xvid xvmc zlib" ALSA_CARDS="ens1371 hda_intel" ALSA_PCM_PLUGINS="adpcm alaw asym copy dmix dshare dsnoop empty extplug file hooks iec958 ioplug ladspa lfloat linear meter mmap_emul mulaw multi null plug rate route share shm softvol" APACHE2_MODULES="alias auth_basic authn_alias authn_anon authn_default authn_file authz_default authz_groupfile authz_host authz_owner authz_user autoindex cgid deflate dir env expires filter headers include info log_config mime mime_magic negotiation rewrite speling status" APACHE2_MPMS="event" CALLIGRA_FEATURES="kexi words flow plan sheets stage tables krita karbon braindump" CAMERAS="ptp2" COLLECTD_PLUGINS="df interface irq load memory rrdtool swap syslog" DRACUT_MODULES="lvm" ELIBC="glibc" GPSD_PROTOCOLS="ashtech aivdm earthmate evermore fv18 garmin garmintxt gpsclock itrax mtk3301 nmea ntrip navcom oceanserver oldstyle oncore rtcm104v2 rtcm104v3 sirf superstar2 timing tsip tripmate tnt ubx" INPUT_DEVICES="keyboard mouse evdev synaptics" KERNEL="linux" LCD_DEVICES="bayrad cfontz cfontz633 glk hd44780 lb216 lcdm001 mtxorb ncurses text" LIBREOFFICE_EXTENSIONS="presenter-console presenter-minimizer" LINGUAS="en_AU en_GB en" PHP_TARGETS="php5-3" PYTHON_TARGETS="python3_2 python2_7" RUBY_TARGETS="ruby18" USERLAND="GNU" VIDEO_CARDS="none nvidia" XTABLES_ADDONS="quota2 psd pknock lscan length2 ipv4options ipset ipp2p iface geoip fuzzy condition tee tarpit sysrq steal rawnat logmark ipmark dhcpmac delude chaos account"
Unset:  CPPFLAGS, CTARGET, INSTALL_MASK, LC_ALL, PORTAGE_BUNZIP2_COMMAND, PORTAGE_COMPRESS, PORTAGE_COMPRESS_FLAGS, USE_PYTHON

=================================================================
                        Package Settings
=================================================================

media-sound/lilypond-2.16.0 was built with the following:
USE="(multilib) vim-syntax -debug -emacs -profile"
Comment 4 Gerard Neil 2012-09-05 08:02:00 UTC
I set FEATURES='-sandbox', then I end up with a mode 1777 directory /var/cache/fonts/tfm
Comment 5 Tim Harder gentoo-dev 2012-09-05 11:30:00 UTC
Created attachment 322992 [details, diff]
no tex patch

Patch to skip running make in the tex directory when documentation isn't getting built.
Comment 6 Tim Harder gentoo-dev 2012-09-05 11:32:05 UTC
Created attachment 322994 [details, diff]
updates for lilypond-2.16.0 ebuild to apply tex patch

Please test this patch to the 2.16.0 ebuild along with the previous one to make sure they fix the problem for you.
Comment 7 Gerard Neil 2012-09-05 15:14:03 UTC
Thanks Tim, it builds and runs fine with that patch.

Off-topic but about building the documentation... I'd like to get that going, at the moment I'm using lilypond's .sh installer to install the .html docs locally.

I changed the lilypond ebuild to support USE=doc and I created an ebuild for the missing dependency texi2html 1.82 (trivial); the lilypond build then errors out after a long time building docs with message saying to look in an empty log file (I think I just have to tell it to do more logging) blah blah blah ... before I go any further is there some particular issue having texi2html 1.82 in the tree / or with getting the docs going? I'd appreciate any pointers...
Comment 8 Tim Harder gentoo-dev 2012-09-05 18:17:25 UTC
(In reply to comment #7)
> Thanks Tim, it builds and runs fine with that patch.

Committed for 2.16.0.

> Off-topic but about building the documentation... I'd like to get that
> going, at the moment I'm using lilypond's .sh installer to install the .html
> docs locally.
> 
> I changed the lilypond ebuild to support USE=doc and I created an ebuild for
> the missing dependency texi2html 1.82 (trivial); the lilypond build then
> errors out after a long time building docs with message saying to look in an
> empty log file (I think I just have to tell it to do more logging) blah blah
> blah ... before I go any further is there some particular issue having
> texi2html 1.82 in the tree / or with getting the docs going? I'd appreciate
> any pointers...

I've had doc support sitting around for a while in uncommitted ebuilds but have been experiencing errors as well since 2.14.* and just haven't committed the time to look into it. I'll try to get it working in the near future.
Comment 9 Gerard Neil 2012-09-06 12:32:38 UTC
(In reply to comment #8)
> I've had doc support sitting around for a while in uncommitted ebuilds but
> have been experiencing errors as well since 2.14.* and just haven't
> committed the time to look into it. I'll try to get it working in the near
> future.

Up to now I was using pdfs and acrobat search; I just discovered frescobaldi.. sort of like a cut-down Eclipse for lilypond! It's terrific, has support for multiple lilypond versions, and it has a really convenient PyQt4 + webkit based browser window for looking at the HTML docs, hence my interest.

Anyway I've got some time over this weekend, I might have a poke about myself. I notice there's an existing bug #179178 for the docs, if I come up with anything I'll put it there.

Thanks again.
Comment 10 Vincent Tai 2012-11-30 22:47:13 UTC
2.16.1 fails to build, apparently the same sandbox violation problem.
Comment 11 Tim Harder gentoo-dev 2012-11-30 22:50:14 UTC
(In reply to comment #10)
> 2.16.1 fails to build, apparently the same sandbox violation problem.

If you have an issue, file a new bug.
Comment 12 Vincent Tai 2012-11-30 22:52:39 UTC
Created attachment 331088 [details]
2.16.1 build log