Bug 878091 – sys-apps/sandbox-2.29 : dev-lang/rust build fails inside docker container

• Status: RESOLVED OBSOLETE
• Product: Gentoo Linux

[Description APN-Pucky 2022-10-23 12:16:18 UTC]

Created attachment 825115 [details]
build.log

Compiling dev-lang/rust fails in my docker image with this error and similar (it works as a normal install):


 * /var/tmp/portage/sys-apps/sandbox-2.29/work/sandbox-2.29/libsandbox/trace.c:do_peekstr():134: failure (Operation not permitted):
 * ISE:do_peekstr:process_vm_readv(2615, 0x00007f5496d129b0{0x00007f5497579010, 0x400}, 1, 0x00007f5496d129c0{0x00007f53e6a53c00, 0x400}, 1, 0) failed: Operation not permitted
 * /var/tmp/portage/sys-apps/sandbox-2.29/work/sandbox-2.29/libsandbox/trace.c:do_peekstr():134: failure (Operation not permitted):
 * ISE:do_peekstr:process_vm_readv(2623, 0x00007f5496b119b0{0x00007f5497570010, 0x400}, 1, 0x00007f5496b119c0{0x00007f8dfe4d4c00, 0x400}, 1, 0) failed: Operation not permitted
 * /var/tmp/portage/sys-apps/sandbox-2.29/work/sandbox-2.29/libsandbox/trace.c:do_peekstr():134: failure (Operation not permitted):
 * ISE:do_peekstr:process_vm_readv(2622, 0x00007f54969109b0{0x00007f5497570010, 0x400}, 1, 0x00007f54969109c0{0x00007f15df05fc00, 0x400}, 1, 0) failed: Operation not permitted
 * /var/tmp/portage/sys-apps/sandbox-2.29/work/sandbox-2.29/libsandbox/trace.c:do_peekstr():134: failure (Operation not permitted):
 * ISE:do_peekstr:process_vm_readv(2626, 0x00007f5496f139b0{0x00007f5497570010, 0x400}, 1, 0x00007f5496f139c0{0x00007faf4ec2bc00, 0x400}, 1, 0) failed: Operation not permitted
 * /var/tmp/portage/sys-apps/sandbox-2.29/work/sandbox-2.29/libsandbox/trace.c:do_peekstr():134: failure (Operation not permitted):
 * ISE:do_peekstr:process_vm_readv(2627, 0x00007f54973159b0{0x00007f5497570010, 0x400}, 1, 0x00007f54973159c0{0x00007f55903f7c00, 0x400}, 1, 0) failed: Operation not permitted
 * /var/tmp/portage/sys-apps/sandbox-2.29/work/sandbox-2.29/libsandbox/trace.c:do_peekstr():134: failure (Operation not permitted):
 * ISE:do_peekstr:process_vm_readv(2643, 0x00007f5495f0b9b0{0x00007f5497570010, 0x400}, 1, 0x00007f5495f0b9c0{0x00007f7a615a0c00, 0x400}, 1, 0) failed: Operation not permitted
  **  /var/tmp/portage/sys-apps/sandbox-2.29/work/sandbox-2.29/libsandbox/trace.c/var/tmp/portage/sys-apps/sandbox-2.29/work/sandbox-2.29/libsandbox/trace.c:do_peekstr():1:3do_peekstr4():: failure (1Operation not permitted34: failure (Operation not permitted):
):
  ** ISE:do_peekstr:process_vm_readv(264 ISE:do_peekstr:process_vm_readv(7, 20x00630407f54, 0x00007f54959089b0{0x00007f5497570010, 0x400}, 1, 0x00007f54959089c0{0x00007fe562e3ec00, 0x400}, 1, 0) failed: Operation not permitted
error: could not compile `proc-macro2`


I tried dev-lang/rust-bin instead of dev-lang/rust as dependency of dev-python/cryptography but compiling cryptography then fails.

[Comment 1 APN-Pucky 2022-10-23 12:17:04 UTC]

Created attachment 825117 [details]
environment

[Comment 2 APN-Pucky 2022-10-23 12:17:35 UTC]

Created attachment 825119 [details]
emerge --info '=dev-lang/rust-1.64.0-r1::gentoo'

[Comment 3 Georgy Yakovlev 2022-10-27 02:48:42 UTC]

re-assigning to sandbox maintainers.
this looks like sandbox-inside-docker bug, not a rust bug.

[Comment 4 APN-Pucky 2022-11-01 11:33:57 UTC]

https://github.com/gentoo/gentoo-docker-images/issues/98#issuecomment-1229566708

From what I read here, it might be fixed in a later docker version. 
Or one can use docker build --allow security.insecure.

[Comment 5 Mike Gilbert 2023-07-09 02:12:32 UTC]

Closing this as it seems the issue was resolved in docker.