This package now gets a sandbox violation in the configure stage: -- Check for working CUDA compiler: /opt/cuda/bin/nvcc - skipped * ACCESS DENIED: fopen_wr: /proc/self/task/364/comm FEATURES=-sandbox does not resolve this. Reproducible: Always Steps to Reproduce: 1. USE="cuda" emerge -1 sci-libs/caffe2 Actual Results: Does not install. Expected Results: Should build and install. * ----------------------- SANDBOX ACCESS VIOLATION SUMMARY ----------------------- * LOG FILE: "/var/tmp/portage/sci-libs/caffe2-2.1.2-r6/temp/sandbox.log" * VERSION 1.0 FORMAT: F - Function called FORMAT: S - Access Status FORMAT: P - Path as passed to function FORMAT: A - Absolute Path (not canonical) FORMAT: R - Canonical Path FORMAT: C - Command Line F: fopen_wr S: deny P: /proc/self/task/364/comm A: /proc/self/task/364/comm R: /proc/363/task/364/comm C: /var/tmp/portage/sci-libs/caffe2-2.1.2-r6/work/pytorch-2.1.2_build/CMakeFiles/3.28.3/CMakeDetermineCompilerABI_CUDA.bin * -------------------------------------------------------------------------------- Running /var/tmp/portage/sci-libs/caffe2-2.1.2-r6/work/pytorch-2.1.2_build/CMakeFiles/3.28.3/CMakeDetermineCompilerABI_CUDA.bin on its own correctly outputs the ABI integer. Portage 3.0.63 (python 3.11.8-final-0, default/linux/amd64/17.1/desktop/plasma/systemd/merged-usr, gcc-13, glibc-2.39-r2, 6.7.8-gentoo-limelight x86_64) ================================================================= System uname: Linux-6.7.8-gentoo-limelight-x86_64-11th_Gen_Intel-R-_Core-TM-_i9-11900K_@_3.50GHz-with-glibc2.39 KiB Mem: 65707812 total, 54641592 free KiB Swap: 0 total, 0 free Timestamp of repository gentoo: Mon, 04 Mar 2024 01:19:01 +0000 Head commit of repository gentoo: 87a4d63361ae422e2b0e4f261d65305eba720a2c Head commit of repository brave-overlay: 80c911a716ef040c903845f420538e85120cec7a Head commit of repository guru: 5b840c5c178b4cff941c14f8ecaec4b15525e4d8 Timestamp of repository menelkir: Fri, 01 Mar 2024 21:04:19 +0000 Head commit of repository menelkir: db2ab721df35d838093eafd7d881113c696ee417 Timestamp of repository pentoo: Sat, 02 Mar 2024 13:20:11 +0000 Head commit of repository pentoo: cb5090ec3a952af0b7aaf61ff4c959a4d53e70d2 Timestamp of repository steam-overlay: Fri, 01 Mar 2024 21:04:13 +0000 Head commit of repository steam-overlay: 5430c80485da80c2a4be25f761799e2a2636e909 Head commit of repository tatsh-overlay: ae79523794a47ec4701db0d7521fdced4c4966c3 sh bash 5.2_p26 ld GNU ld (Gentoo 2.42 p3) 2.42.0 app-misc/pax-utils: 1.3.7::gentoo app-shells/bash: 5.2_p26::gentoo dev-build/autoconf: 2.13-r8::gentoo, 2.72-r1::gentoo dev-build/automake: 1.16.5-r2::gentoo dev-build/cmake: 3.28.3::gentoo dev-build/libtool: 2.4.7-r2::gentoo dev-build/make: 4.4.1-r1::gentoo dev-build/meson: 1.3.2::gentoo dev-java/java-config: 2.3.3-r1::gentoo dev-lang/perl: 5.38.2-r2::gentoo dev-lang/python: 3.10.13_p3::gentoo, 3.11.8_p1::gentoo, 3.12.2_p1::gentoo dev-lang/rust: 1.75.0-r1::gentoo sys-apps/baselayout: 2.14-r2::gentoo sys-apps/sandbox: 2.38::gentoo sys-apps/systemd: 255.4::gentoo sys-devel/binutils: 2.42-r1::gentoo sys-devel/binutils-config: 5.5::gentoo sys-devel/clang: 15.0.7-r3::gentoo, 17.0.6::gentoo sys-devel/gcc: 12.3.1_p20240209::gentoo, 13.2.1_p20240210::gentoo sys-devel/gcc-config: 2.11::gentoo sys-devel/lld: 17.0.6::gentoo sys-devel/llvm: 14.0.6-r5::tatsh-overlay, 15.0.7-r3::gentoo, 17.0.6::gentoo sys-kernel/linux-headers: 6.7::gentoo (virtual/os-headers) sys-libs/glibc: 2.39-r2::gentoo Repositories: gentoo location: /var/db/repos/gentoo sync-type: git sync-uri: https://anongit.gentoo.org/git/repo/sync/gentoo.git priority: -1000 volatile: False sync-git-verify-commit-signature: no brave-overlay location: /var/db/repos/brave-overlay sync-type: git sync-uri: https://gitlab.com/jason.oliveira/brave-overlay.git masters: gentoo volatile: False crossdev location: /var/db/repos/crossdev masters: gentoo volatile: False guru location: /var/db/repos/guru sync-type: git sync-uri: git+ssh://git@git.gentoo.org/repo/proj/guru.git masters: gentoo volatile: False sync-git-verify-commit-signature: no menelkir location: /var/db/repos/menelkir sync-type: git sync-uri: https://github.com/gentoo-mirror/menelkir.git masters: gentoo volatile: False pentoo location: /var/db/repos/pentoo sync-type: git sync-uri: https://github.com/gentoo-mirror/pentoo.git masters: gentoo volatile: False steam-overlay location: /var/db/repos/steam-overlay sync-type: git sync-uri: https://github.com/gentoo-mirror/steam-overlay.git masters: gentoo volatile: False tatsh-overlay location: /var/db/repos/tatsh sync-type: git sync-uri: https://github.com/Tatsh/tatsh-overlay.git masters: gentoo volatile: False sync-git-verify-commit-signature: no Installed sets: @admin, @android, @bashcomp, @cdr, @charles, @chrome, @cups, @dbeaver, @disney, @emulators, @exfat, @firefox, @fonts, @gimp, @git, @haskell, @i3, @ibus, @kde, @kernel, @libimobiledevice, @libreoffice, @media, @misc, @mlocate, @mupen64plus, @nfs, @pass, @portage-utilities, @python, @qemu, @rar, @retroarch, @sm64, @stepmania, @thunderbird, @tmux, @vim, @virtualbox, @vscode, @wine, @x11, @xirvik-vpn, @yt-dlp ACCEPT_KEYWORDS="amd64 ~amd64" ACCEPT_LICENSE="*" CBUILD="x86_64-pc-linux-gnu" CFLAGS="-O2 -flto=auto -ggdb -march=native -mtune=native -pipe" CHOST="x86_64-pc-linux-gnu" CONFIG_PROTECT="/etc /usr/lib64/libreoffice/program/sofficerc /usr/share/config /usr/share/gnupg/qualified.txt" CONFIG_PROTECT_MASK="/etc/ca-certificates.conf /etc/dconf /etc/env.d /etc/fonts/fonts.conf /etc/gconf /etc/gentoo-release /etc/revdep-rebuild /etc/sandbox.d /etc/texmf/language.dat.d /etc/texmf/language.def.d /etc/texmf/updmap.d /etc/texmf/web2c" CXXFLAGS="-O2 -flto=auto -ggdb -march=native -mtune=native -pipe" DISTDIR="/var/cache/distfiles" EMERGE_DEFAULT_OPTS="--jobs 17 --load-average 17 --quiet-build=y --usepkg --verbose-conflicts --buildpkg-exclude 'acct-*/* app-arch/rar app-emulation/virtualbox-extpack-oracle app-emulation/virtualbox-modules */*-bin dev-util/intel-ocl-sdk games-util/steam-launcher media-fonts/* media-video/magewell-pro-capture media-video/makemkv net-im/ripcord sys-kernel/linux-firmware sys-kernel/*-sources virtual/* media-video/cxadc *-drivers/* www-client/google-chrome*'" ENV_UNSET="CARGO_HOME DBUS_SESSION_BUS_ADDRESS DISPLAY GDK_PIXBUF_MODULE_FILE GOBIN GOPATH PERL5LIB PERL5OPT PERLPREFIX PERL_CORE PERL_MB_OPT PERL_MM_OPT XAUTHORITY XDG_CACHE_HOME XDG_CONFIG_HOME XDG_DATA_HOME XDG_RUNTIME_DIR XDG_STATE_HOME" FCFLAGS="-O2 -flto=auto -ggdb -march=native -mtune=native -pipe" FEATURES="assume-digests binpkg-docompress binpkg-dostrip binpkg-logs binpkg-multi-instance buildpkg buildpkg-live clean-logs compressdebug config-protect-if-modified distlocks ebuild-locks fixlafiles ipc-sandbox merge-sync merge-wait multilib-strict network-sandbox news parallel-fetch pid-sandbox pkgdir-index-trusted preserve-libs protect-owned qa-unresolved-soname-deps sandbox sfperms splitdebug strict strict-keepdir unknown-features-warn unmerge-logs unmerge-orphans userfetch userpriv usersandbox usersync warn-on-large-env xattr" FFLAGS="-O2 -flto=auto -ggdb -march=native -mtune=native -pipe" GENTOO_MIRRORS="http://gentoo.osuosl.org/ http://www.gtlib.gatech.edu/pub/gentoo https://mirrors.rit.edu/gentoo/" INSTALL_MASK="/boot/amd-uc.img /etc/avahi/services/sftp-ssh.service /etc/conf.d /etc/cron.daily /etc/cron.monthly /etc/cron.weekly /etc/dracut.conf /etc/grub.d /etc/init.d /etc/modules-load.d/ddccontrol-i2c-dev.conf /etc/portage/savedconfig/sys-kernel/linux-firmware-* /etc/xdg/menus/applications-merged/lsp-plugins.menu /etc/xdg/autostart/org.kde.plasma-welcome.desktop /usr/lib/modules-load.d/fwupd-msr.conf /usr/lib/modules-load.d/joycond.conf /usr/lib/rc" LANG="en_GB.utf8" LDFLAGS="-Wl,-O1 -Wl,--as-needed" LEX="flex" LINGUAS="en en_GB en_US" MAKEOPTS="--jobs=17 --load-average=17" PKGDIR="/var/cache/binpkgs" PORTAGE_CONFIGROOT="/" PORTAGE_RSYNC_OPTS="--recursive --links --safe-links --perms --times --omit-dir-times --compress --force --whole-file --delete --stats --human-readable --timeout=180 --exclude=/distfiles --exclude=/local --exclude=/packages --exclude=/.git" PORTAGE_TMPDIR="/var/tmp" SHELL="/bin/bash" USE="X a52 aac aacs acl acpi activities aio alsa amd64 aptx avahi bash-completion bluetooth bluray branding bzip2 cairo cdda cddb cdio cdr cjk clang cli colord crypt cuda cups curl dav1d dbus declarative dri dts dvb dvd dvdr egl encode exif faudio ffmpeg flac fluidsynth fortran gamepad gdbm gif gles2 gpm gsm gstreamer gui hardened heif hwaccel ibus iconv icu idn ipv6 jack jemalloc joystick jpeg jpeg2k kde kwallet lame lcms ldac libass libcaca libnotify libretro libtirpc lm-sensors lto lv2 lvm lz4 lzma mad man matroska mng mod modplug modules-sign mp3 mp4 mpeg multilib ncurses nls nvenc offensive ogg opencl opengl openmp opus pam pango pcre pdf pgo pic pipewire plasma png policykit ppds pulseaudio qml qt5 qt6 rar readline samba screencast sdl seccomp semantic-desktop snappy sound speex spell ssl startup-notification svg syslog system-av1 system-binutils system-boost system-bootloader system-cmark system-crontab system-ffmpeg system-harfbuzz system-heimdal system-info system-ipxe system-jpeg system-jsoncpp system-lcms system-leveldb system-libcxx system-libevent system-libs system-libvpx system-libyaml system-llvm system-lua system-lz4 system-mathjax system-mesa system-mitkrb5 system-numpy system-png system-python system-qemu system-seabios system-sqlite system-ssl system-tbb system-webp system-wfconfig system-wide system-wlroots system-zlib systemd taglib test-rust theora threads tiff tpm truetype twolame udev udisks unicode upower usb v4l vaapi vcd vdpau vim-syntax vlc vorbis vpx vulkan wavpack wayland webengine webp widgets wmf wxwidgets x264 x265 xattr xcb xft xinerama xml xpm xv xvid xxhash zeroconf zlib zstd" ABI_X86="64" ADA_TARGET="gnat_2021" APACHE2_MODULES="authn_core authz_core socache_shmcb unixd actions alias auth_basic authn_anon authn_dbm authn_file authz_dbm authz_groupfile authz_host authz_owner authz_user autoindex cache cgi cgid dav dav_fs dav_lock deflate dir env expires ext_filter file_cache filter headers include info log_config logio mime mime_magic negotiation rewrite setenvif speling status unique_id userdir usertrack vhost_alias" CALLIGRA_FEATURES="karbon sheets words" COLLECTD_PLUGINS="df interface irq load memory rrdtool swap syslog" CPU_FLAGS_X86="aes avx avx2 avx512f avx512dq avx512cd avx512bw avx512vl avx512vbmi f16c fma3 mmx mmxext pclmul popcnt rdrand sha sse sse2 sse3 sse4_1 sse4_2 ssse3" ELIBC="glibc" GPSD_PROTOCOLS="ashtech aivdm earthmate evermore fv18 garmin garmintxt gpsclock greis isync itrax mtk3301 ntrip navcom oceanserver oncore rtcm104v2 rtcm104v3 sirf skytraq superstar2 tsip tripmate tnt ublox" INPUT_DEVICES="evdev libinput joystick wacom" KERNEL="linux" L10N="en en-GB en-US" LCD_DEVICES="bayrad cfontz glk hd44780 lb216 lcdm001 mtxorb text" LUA_SINGLE_TARGET="lua5-1" LUA_TARGETS="lua5-1" OFFICE_IMPLEMENTATION="libreoffice" PHP_TARGETS="php8-1" POSTGRES_TARGETS="postgres15" PYTHON_SINGLE_TARGET="python3_11" PYTHON_TARGETS="python3_11" QEMU_SOFTMMU_TARGETS="ppc x86_64" RUBY_TARGETS="ruby31" VIDEO_CARDS="nvidia v4l" XTABLES_ADDONS="quota2 psd pknock lscan length2 ipv4options ipp2p iface geoip fuzzy condition tarpit sysrq proto logmark ipmark dhcpmac delude chaos account" Unset: ADDR2LINE, AR, ARFLAGS, AS, ASFLAGS, CC, CCLD, CONFIG_SHELL, CPP, CPPFLAGS, CTARGET, CXX, CXXFILT, ELFEDIT, EXTRA_ECONF, F77FLAGS, FC, GCOV, GPROF, LC_ALL, LD, LFLAGS, LIBTOOL, MAKE, MAKEFLAGS, NM, OBJCOPY, OBJDUMP, PORTAGE_BINHOST, PORTAGE_BUNZIP2_COMMAND, PORTAGE_COMPRESS, PORTAGE_COMPRESS_FLAGS, PORTAGE_RSYNC_EXTRA_OPTS, PYTHONPATH, RANLIB, READELF, RUSTFLAGS, SIZE, STRINGS, STRIP, YACC, YFLAGS
Created attachment 886634 [details] build log
Created attachment 886635 [details] sandbox.log
I have exactly the same problem.
Finally got time to try something and here are the results: After adding path "/proc/self/task" to /etc/sandbox.conf to be writable, emerge was successful. This is just a temporary workaround that "worked for me", really not sure how to solve this the correct way..
I have the same problem
You can fix the ebuild by adding 'addpredict "/proc/self/task"' to src_configure().
I ran into this today too
This seems to be preventing me from installing media-libs/oidn as well; same error: >>> Source compiled. * ----------------------- SANDBOX ACCESS VIOLATION SUMMARY ----------------------- * LOG FILE: "/var/tmp/portage/media-libs/oidn-2.1.0/temp/sandbox.log" * VERSION 1.0 FORMAT: F - Function called FORMAT: S - Access Status FORMAT: P - Path as passed to function FORMAT: A - Absolute Path (not canonical) FORMAT: R - Canonical Path FORMAT: C - Command Line F: fopen_wr S: deny P: /proc/self/task/550/comm A: /proc/self/task/550/comm R: /proc/549/task/550/comm C: /var/tmp/portage/media-libs/oidn-2.1.0/work/oidn-2.1.0_build/devices/cuda/build/CMakeFiles/3.28.3/CMakeDetermineCompilerABI_CUDA.bin * --------------------------------------------------------------------------------
(In reply to Satori80a from comment #8) > This seems to be preventing me from installing media-libs/oidn as well; same > error: > > >>> Source compiled. > * ----------------------- SANDBOX ACCESS VIOLATION SUMMARY > ----------------------- > * LOG FILE: "/var/tmp/portage/media-libs/oidn-2.1.0/temp/sandbox.log" > * > VERSION 1.0 > FORMAT: F - Function called > FORMAT: S - Access Status > FORMAT: P - Path as passed to function > FORMAT: A - Absolute Path (not canonical) > FORMAT: R - Canonical Path > FORMAT: C - Command Line > > F: fopen_wr > S: deny > P: /proc/self/task/550/comm > A: /proc/self/task/550/comm > R: /proc/549/task/550/comm > C: > /var/tmp/portage/media-libs/oidn-2.1.0/work/oidn-2.1.0_build/devices/cuda/ > build/CMakeFiles/3.28.3/CMakeDetermineCompilerABI_CUDA.bin > * > ----------------------------------------------------------------------------- > --- Ștefan Talpalaru's (comment #6) solution worked for oidn, too.
The bug has been closed via the following commit(s): https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=0e0bdd6727d7ee97d887470c7952862ed933c00a commit 0e0bdd6727d7ee97d887470c7952862ed933c00a Author: Huang Rui <vowstar@gmail.com> AuthorDate: 2024-03-30 18:34:57 +0000 Commit: David Seifert <soap@gentoo.org> CommitDate: 2024-03-30 18:34:57 +0000 dev-util/nvidia-cuda-toolkit: add 12.4.0 Closes: https://github.com/gentoo/gentoo/pull/35777 Closes: https://bugs.gentoo.org/926116 Closes: https://bugs.gentoo.org/926612 Signed-off-by: Huang Rui <vowstar@gmail.com> Signed-off-by: David Seifert <soap@gentoo.org> dev-util/nvidia-cuda-toolkit/Manifest | 1 + .../nvidia-cuda-toolkit-12.4.0.ebuild | 338 +++++++++++++++++++++ 2 files changed, 339 insertions(+)
The bug has been closed via the following commit(s): https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=07e13e6234fcd1c25b5b54a70de4ecaae294b669 commit 07e13e6234fcd1c25b5b54a70de4ecaae294b669 Author: Alfredo Tupone <tupone@gentoo.org> AuthorDate: 2024-03-30 19:35:22 +0000 Commit: Alfredo Tupone <tupone@gentoo.org> CommitDate: 2024-03-30 19:35:53 +0000 sci-libs/caffe2: addpredict /proc/self/task Closes: https://bugs.gentoo.org/926116 Signed-off-by: Alfredo Tupone <tupone@gentoo.org> sci-libs/caffe2/caffe2-2.2.1-r1.ebuild | 1 + 1 file changed, 1 insertion(+)
The bug has been referenced in the following commit(s): https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=789f92e9d42874af6d16b4026f18d404be539ce2 commit 789f92e9d42874af6d16b4026f18d404be539ce2 Author: Paul Zander <negril.nx+gentoo@gmail.com> AuthorDate: 2024-03-28 18:06:05 +0000 Commit: Sam James <sam@gentoo.org> CommitDate: 2024-04-02 11:27:00 +0000 media-libs/oidn: add 2.2.2, fix cuda Bug: https://bugs.gentoo.org/926116#c8 Signed-off-by: Paul Zander <negril.nx+gentoo@gmail.com> Closes: https://github.com/gentoo/gentoo/pull/35972 Signed-off-by: Sam James <sam@gentoo.org> media-libs/oidn/Manifest | 1 + .../oidn/files/oidn-2.2.2-amdgpu-targets.patch | 46 +++++++++++ media-libs/oidn/metadata.xml | 3 + media-libs/oidn/oidn-2.2.2.ebuild | 95 ++++++++++++++++++++++ profiles/arch/powerpc/ppc64/64le/use.mask | 7 ++ profiles/arch/powerpc/ppc64/use.mask | 7 ++ profiles/arch/x86/use.mask | 4 + 7 files changed, 163 insertions(+)
The bug has been closed via the following commit(s): https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=c6a96e9169b96c35d91263b113b334655f752e60 commit c6a96e9169b96c35d91263b113b334655f752e60 Author: David Seifert <soap@gentoo.org> AuthorDate: 2024-04-07 09:37:40 +0000 Commit: David Seifert <soap@gentoo.org> CommitDate: 2024-04-07 09:37:40 +0000 dev-util/nvidia-cuda-toolkit: add CMake sandbox workaround to all versions Closes: https://bugs.gentoo.org/926116 Signed-off-by: David Seifert <soap@gentoo.org> .../nvidia-cuda-toolkit-11.8.0-r4.ebuild | 9 +++++++-- .../nvidia-cuda-toolkit/nvidia-cuda-toolkit-12.3.2.ebuild | 6 ++++++ .../nvidia-cuda-toolkit/nvidia-cuda-toolkit-12.4.0.ebuild | 14 +------------- 3 files changed, 14 insertions(+), 15 deletions(-)
