Gentoo Websites Logo
Go to: Gentoo Home Documentation Forums Lists Bugs Planet Store Wiki Get Gentoo!
Bug 732970 - app-emulation/xen-tools-4.13.1-r2: sandbox violation "C: sudo -n docker version"
Summary: app-emulation/xen-tools-4.13.1-r2: sandbox violation "C: sudo -n docker version"
Status: RESOLVED FIXED
Alias: None
Product: Gentoo Linux
Classification: Unclassified
Component: Current packages (show other bugs)
Hardware: All Linux
: Normal normal
Assignee: Tomáš Mózes
URL:
Whiteboard:
Keywords: PullRequest
Depends on:
Blocks:
 
Reported: 2020-07-17 02:29 UTC by Rafael Kitover
Modified: 2021-05-11 15:47 UTC (History)
4 users (show)

See Also:
Package list:
Runtime testing required: ---


Attachments
build log (build.log.xz,58.18 KB, application/x-xz)
2020-07-17 02:31 UTC, Rafael Kitover
Details
emerge --info (emerge-info.txt.xz,6.47 KB, application/x-xz)
2020-07-17 02:32 UTC, Rafael Kitover
Details

Note You need to log in before you can comment on or make changes to this bug.
Description Rafael Kitover 2020-07-17 02:29:18 UTC
app-emulation/xen-tools-4.13.1-r1::gentoo was built with the following:
USE="-api -debug -doc -flask hvm ipxe -ocaml -ovmf pam -pygrub -python qemu qemu-traditional rombios -screen sdl -static-libs -system-ipxe -system-qemu -system-seabios" ABI_X86="(64)" PYTHON_SINGLE_TARGET="-python3_6 python3_7 -python3_8"
CFLAGS="-fno-strict-overflow"
CXXFLAGS="-march=native -O3 -pipe -fno-strict-overflow"
FEATURES="assume-digests binpkg-docompress binpkg-dostrip binpkg-logs buildpkg ccache config-protect-if-modified distlocks ebuild-locks fixlafiles ipc-sandbox merge-sync multilib-strict news parallel-fetch pid-sandbox preserve-libs protect-owned qa-unresolved-soname-deps sandbox sfperms split-elog split-log strict unknown-features-warn unmerge-logs unmerge-orphans userfetch usersync"
LDFLAGS=""

>>> Source compiled.
 * --------------------------- ACCESS VIOLATION SUMMARY ---------------------------
 * LOG FILE: "/var/tmp/portage/app-emulation/xen-tools-4.13.1-r2/temp/sandbox.log"
 * 
VERSION 1.0
FORMAT: F - Function called
FORMAT: S - Access Status
FORMAT: P - Path as passed to functionFORMAT: A - Absolute Path (not canonical)
FORMAT: R - Canonical PathFORMAT: C - Command Line

F: open_wr
S: deny
P: /var/run/faillock/root
A: /var/run/faillock/root
R: /run/faillock/root
C: sudo -n docker version 

F: open_wr
S: deny
P: /var/run/faillock/root
A: /var/run/faillock/root
R: /run/faillock/root
C: sudo -n docker version 
 * --------------------------------------------------------------------------------

Reproducible: Always
Comment 1 Rafael Kitover 2020-07-17 02:31:43 UTC
Created attachment 649600 [details]
build log
Comment 2 Rafael Kitover 2020-07-17 02:32:03 UTC
Created attachment 649602 [details]
emerge --info
Comment 3 Johannes Lode 2020-12-13 12:45:39 UTC
Exact the same symptoms for me here.

Building inside a Xen virtualized machine, having docker installed, but not running on the build machine.
Comment 4 Richard Hering 2021-01-05 12:13:55 UTC
same here with app-emulation/xen-tools-4.14.0-r5 inside a virtual machine (systemd-nspawn). I've to unemerge docker to be able to emerge xen-tools ...
Comment 5 Dexter Summering 2021-01-28 00:13:18 UTC
I'm having the same issue, uninstalling docker doesn't seem to fix it.
Comment 6 Rafael Kitover 2021-01-28 07:43:08 UTC
For a workaround, you can do this:

FEATURES="-sandbox" emerge app-emulation/xen-tools

(if using sudo, use sudo -E)
Comment 7 Tomáš Mózes 2021-01-28 08:40:51 UTC
I've docker installed and containers running with docker-compose but I can build xen-tools. Any other hints?
Comment 8 Tomáš Mózes 2021-05-07 13:46:51 UTC
First time reproduced when building xen-tools with docker daemon installed but not started.
Comment 9 Larry the Git Cow gentoo-dev 2021-05-11 15:47:40 UTC
The bug has been closed via the following commit(s):

https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=5e7b006eceaaf9e7a9b403a22c6aec10ce0c0cd4

commit 5e7b006eceaaf9e7a9b403a22c6aec10ce0c0cd4
Author:     Tomáš Mózes <hydrapolic@gmail.com>
AuthorDate: 2021-04-30 21:15:05 +0000
Commit:     Thomas Deutschmann <whissi@gentoo.org>
CommitDate: 2021-05-11 15:47:32 +0000

    app-emulation/xen-tools: bump to 4.14.2
    
    Closes: https://bugs.gentoo.org/732970
    Closes: https://bugs.gentoo.org/782967
    Signed-off-by: Tomáš Mózes <hydrapolic@gmail.com>
    Signed-off-by: Thomas Deutschmann <whissi@gentoo.org>

 app-emulation/xen-tools/Manifest                  |   1 +
 app-emulation/xen-tools/files/gentoo-patches.conf |  16 +
 app-emulation/xen-tools/xen-tools-4.14.2.ebuild   | 525 ++++++++++++++++++++++
 3 files changed, 542 insertions(+)

https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=76c79a20941443d30d858a8c9a2668dc50574f04

commit 76c79a20941443d30d858a8c9a2668dc50574f04
Author:     Tomáš Mózes <hydrapolic@gmail.com>
AuthorDate: 2021-04-30 20:20:04 +0000
Commit:     Thomas Deutschmann <whissi@gentoo.org>
CommitDate: 2021-05-11 15:47:32 +0000

    app-emulation/xen-tools: bump to 4.15.0
    
    Closes: https://bugs.gentoo.org/732970
    Closes: https://bugs.gentoo.org/768468
    Signed-off-by: Tomáš Mózes <hydrapolic@gmail.com>
    Signed-off-by: Thomas Deutschmann <whissi@gentoo.org>

 app-emulation/xen-tools/Manifest                  |   5 +
 app-emulation/xen-tools/files/gentoo-patches.conf |  14 +
 app-emulation/xen-tools/xen-tools-4.15.0.ebuild   | 532 ++++++++++++++++++++++
 3 files changed, 551 insertions(+)