Gentoo Websites Logo
Go to: Gentoo Home Documentation Forums Lists Bugs Planet Store Wiki Get Gentoo!
Bug 599696 - sci-misc/boinc-7.6.33-r1 causes sandbox access violations
Summary: sci-misc/boinc-7.6.33-r1 causes sandbox access violations
Status: RESOLVED INVALID
Alias: None
Product: Gentoo Linux
Classification: Unclassified
Component: Current packages (show other bugs)
Hardware: All Linux
: Normal normal
Assignee: Sven Eden
URL:
Whiteboard:
Keywords:
Depends on:
Blocks:
 
Reported: 2016-11-14 10:20 UTC by peter@prh.myzen.co.uk
Modified: 2016-11-17 17:04 UTC (History)
2 users (show)

See Also:
Package list:
Runtime testing required: ---


Attachments
emerge info (emerge.info,6.02 KB, application/x-info)
2016-11-14 10:20 UTC, peter@prh.myzen.co.uk
Details
Complete build log (boinc.log,21.08 KB, text/x-log)
2016-11-14 10:26 UTC, peter@prh.myzen.co.uk
Details
Sandbox violation log (sandbox-22038.log,5.72 KB, text/x-log)
2016-11-14 10:27 UTC, peter@prh.myzen.co.uk
Details

Note You need to log in before you can comment on or make changes to this bug.
Description peter@prh.myzen.co.uk 2016-11-14 10:20:38 UTC
Created attachment 453278 [details]
emerge info

sci-misc/boinc-7.6.33-r1 causes 24 sandbox access violations at the end of the build phase. They're all caused by invocations of /usr/bin/convert, from imagemagick.
Comment 1 peter@prh.myzen.co.uk 2016-11-14 10:26:14 UTC
Created attachment 453280 [details]
Complete build log
Comment 2 peter@prh.myzen.co.uk 2016-11-14 10:27:47 UTC
Created attachment 453282 [details]
Sandbox violation log
Comment 3 peter@prh.myzen.co.uk 2016-11-15 09:26:30 UTC
Today's upgrade of sys-apps/sandbox-2.10-r2 to -2.11-r2 hasn't made any discernible difference.
Comment 4 Sven Eden 2016-11-16 11:12:39 UTC
The convert process fails to open /dev/dri/renderD128.

I daresay you enabled opencl support in imagemagick? It is in your USE flags.

These are the most direct solutions:


1) The quickest way
 # FEATURES="-sandbox -usersandbox" emerge boinc


2) The "do-I-really-need-it"-way:
 # echo "media-gfx/imagemagick -opencl" >> /etc/portage/package.use/imagemagick_no_opencl
 # emerge -1Nu imagemagick
 # emerge boinc


However, how does /dev/dri/renderD128 look on your system?

It should be like this:

 # ls -lh /dev/dri/renderD128
crw-rw----+ 1 root video 226, 128 16. Nov 09:15 /dev/dri/renderD128


Do you have a file 99imagemagick in /etc/sandbox.d/ ? What is in there?
It should contain:
 # cat /etc/sandbox.d/99imagemagick
SANDBOX_PREDICT="/dev/nvidiactl:/dev/ati/card:/dev/dri/card"
Comment 5 peter@prh.myzen.co.uk 2016-11-17 15:39:04 UTC
Ah, yes, that was it.

I've moved opencl from make.conf:
$ cat /etc/portage/package.use/opencl
media-gfx/imagemagick   -opencl
media-libs/mesa         opencl
media-libs/x264         opencl

Boinc now compiles fine.

$ ls -lh /dev/dri/renderD128
crw-rw---- 1 root video 226, 128 Nov 17 11:42 /dev/dri/renderD128

I have no /etc/sandbox.d/99imagemagick. It was there, with the content you quoted, but it's gone. I upgraded sandbox to 2.11-r3 today, as well as setting USE=-opencl on imagemagick. I assume one those operations removed it.

Thanks again, Sven.
Comment 6 Sven Eden 2016-11-17 17:04:01 UTC
/etc/sandbox.d/99imagemagick is installed by the imagemagick ebuild if USE="opencl" is set. So disabling opencl on imagemagick removed that file.

I'm glad we could sort that out.

Please don't worry about the "RESOLVED/INVALID", I'd have chosen "SOLVED" if that option was available. ;-)