Gentoo Websites Logo
Go to: Gentoo Home Documentation Forums Lists Bugs Planet Store Wiki Get Gentoo!
Bug 953470 - dev-lang/python-3.12.9[pgo] with sys-apps/util-linux[uuidd] sandbox violation
Summary: dev-lang/python-3.12.9[pgo] with sys-apps/util-linux[uuidd] sandbox violation
Status: UNCONFIRMED
Alias: None
Product: Gentoo Linux
Classification: Unclassified
Component: Current packages (show other bugs)
Hardware: All Linux
: Normal normal
Assignee: Gentoo's Team for Core System packages
URL:
Whiteboard:
Keywords:
Depends on:
Blocks:
 
Reported: 2025-04-09 09:29 UTC by Krzysztof Nowicki
Modified: 2025-04-10 07:49 UTC (History)
2 users (show)

See Also:
Package list:
Runtime testing required: ---


Attachments
emerge --info (emerge-info.txt,6.12 KB, text/plain)
2025-04-09 13:42 UTC, Krzysztof Nowicki
Details
build.log (build.log,475.61 KB, text/x-log)
2025-04-09 14:29 UTC, Krzysztof Nowicki
Details
util-linux-uuidd-sandbox.patch (util-linux-uuidd-sandbox.patch,465 bytes, patch)
2025-04-10 07:49 UTC, Krzysztof Nowicki
Details | Diff

Note You need to log in before you can comment on or make changes to this bug.
Description Krzysztof Nowicki 2025-04-09 09:29:01 UTC
When attempting to emerge python-3.12.9 with USE="pgo" I'm getting a sandbox violation:

 * ----------------------- SANDBOX ACCESS VIOLATION SUMMARY -----------------------
 * LOG FILE: "/var/tmp/portage/dev-lang/python-3.12.9/temp/sandbox.log"
 *
VERSION 1.0
FORMAT: F - Function called
FORMAT: S - Access Status
FORMAT: P - Path as passed to function
FORMAT: A - Absolute Path (not canonical)
FORMAT: R - Canonical Path
FORMAT: C - Command Line

F: open_wr
S: deny
P: /var/lib/libuuid/clock.txt
A: /var/lib/libuuid/clock.txt
R: /var/lib/libuuid/clock.txt
C: /var/tmp/portage/dev-lang/python-3.12.9/work/Python-3.12.9/python -u -m test.libregrtest.worker {"tests": ["test_uuid"], "fail_fast": false, "fail_env_changed": false, "match_tests": [], "match_tests_dict": null, "rerun": false, "forever": false, "pgo": true, "pgo_extended": true, "output_on_failure": false, "timeout": 1200.0, "verbose": 0, "quiet": false, "hunt_refleak": null, "test_dir": null, "use_junit": false, "memory_limit": null, "gc_threshold": null, "use_resources": [], "python_cmd": null, "randomize": false, "random_seed": 158337264, "json_file": {"file": 8, "file_type": "UNIX_FD"}, "__runtests__": true}
 * --------------------------------------------------------------------------------

The relevant build.log snippet:

0:07:48 load avg: 4.09 [404/442] test_urlparse passed
0:07:48 load avg: 4.09 [405/442] test_unittest passed
0:07:49 load avg: 4.09 [406/442] test_utf8source passed
0:07:50 load avg: 4.08 [407/442] test_uu passed
 * ACCESS DENIED:  open_wr:            /var/lib/libuuid/clock.txt
0:07:51 load avg: 4.08 [408/442] test_uuid passed
0:07:51 load avg: 4.08 [409/442] test_utf8_mode passed
0:07:52 load avg: 4.08 [410/442] test_userstring passed
0:07:55 load avg: 3.91 [411/442] test_venv passed
0:07:57 load avg: 3.91 [412/442] test_wait3 passed

This is most likely due to a new/updated test in the default test suite, which are executed during the build in order to generate the PGO feedback.

Reproducible: Always

Steps to Reproduce:
1. Enable "pgo" USE flag for dev-lang/python
2. Emerge python-3.12.9
Actual Results:  
Emerge fails due to sandbox violation

Expected Results:  
Emerge succeeds
Comment 1 Sam James archtester Gentoo Infrastructure gentoo-dev Security 2025-04-09 09:35:32 UTC
test_uuid, even. The full build.log and emerge --info is missing.

Do you have sys-apps/util-linux[uuidd]?
Comment 2 Krzysztof Nowicki 2025-04-09 13:42:00 UTC
Created attachment 924217 [details]
emerge --info
Comment 3 Krzysztof Nowicki 2025-04-09 14:29:49 UTC
Created attachment 924219 [details]
build.log
Comment 4 Krzysztof Nowicki 2025-04-09 14:30:26 UTC
(In reply to Sam James from comment #1)
> test_uuid, even. The full build.log and emerge --info is missing.

Missing logs attached.

> Do you have sys-apps/util-linux[uuidd]?

Yes, correct.
Comment 5 Mike Gilbert gentoo-dev 2025-04-09 16:30:31 UTC
I don't think it makes sense to work around this in the Python ebuild.

We could add a sandbox config in util-linux, or WONTFIX and leave this to the user to resolve.
Comment 6 Krzysztof Nowicki 2025-04-10 07:49:48 UTC
Created attachment 924253 [details, diff]
util-linux-uuidd-sandbox.patch

This patch allows me to build python correctly.