Bug 692010 – media-sound/lilypond-2.19.80-r1 : sandbox issue

• Product: Gentoo Linux
• Status: RESOLVED FIXED

[Description Toralf Förster 2019-08-12 18:06:33 UTC]

VERSION 1.0
FORMAT: F - Function called
FORMAT: S - Access Status
FORMAT: P - Path as passed to function
FORMAT: A - Absolute Path (not canonical)
FORMAT: R - Canonical Path
FORMAT: C - Command Line

F: mkostemp
S: deny

  -------------------------------------------------------------------

  This is an unstable amd64 chroot image at a tinderbox (==build bot)
  name: 17.1_developer-abi32+64-20190810-161025

  -------------------------------------------------------------------

gcc-config -l:
 [1] x86_64-pc-linux-gnu-9.1.0 *

Available Python interpreters, in order of preference:
  [1]   python3.6
  [2]   python2.7 (fallback)
Available Ruby profiles:
  [1]   ruby24 (with Rubygems) *

java-config:
The following VMs are available for generation-2:
*)	IcedTea JDK 3.12.0 [icedtea-bin-8]
Available Java Virtual Machines:
  [1]   icedtea-bin-8  system-vm

emerge -qpvO media-sound/lilypond
[ebuild  N    ] media-sound/lilypond-2.19.80-r1  USE="-debug -emacs -guile2 -profile -vim-syntax" PYTHON_TARGETS="python2_7"

[Comment 1 Toralf Förster 2019-08-12 18:06:35 UTC]

Created attachment 586632 [details]
emerge-info.txt

[Comment 2 Toralf Förster 2019-08-12 18:06:38 UTC]

Created attachment 586634 [details]
emerge-history.txt

[Comment 3 Toralf Förster 2019-08-12 18:06:41 UTC]

Created attachment 586636 [details]
environment

[Comment 4 Toralf Förster 2019-08-12 18:06:43 UTC]

Created attachment 586638 [details]
etc.portage.tbz2

[Comment 5 Toralf Förster 2019-08-12 18:06:46 UTC]

Created attachment 586640 [details]
logs.tbz2

[Comment 6 Toralf Förster 2019-08-12 18:06:49 UTC]

Created attachment 586642 [details]
media-sound:lilypond-2.19.80-r1:20190812-132218.log

[Comment 7 Toralf Förster 2019-08-12 18:06:51 UTC]

Created attachment 586644 [details]
sandbox-6.log

[Comment 8 Toralf Förster 2019-08-12 18:06:54 UTC]

Created attachment 586646 [details]
temp.tbz2

[Comment 9 Robert Spillner 2019-12-01 16:28:04 UTC]

This is probably due to the fact that the lilypond configure script uses
fc-list to search for installed URW-fonts. fontconfig however maintains .uuid files and when fc-list is executed it also silently generates or updates these files. This leads to a sandbox violation during configuration phase.

A workaround for me was to execute "fc-list C059:fontformat=CFF file" as root before emerging lilypond so all .uuid files where generated beforehand.

Is this an upstream issue? Should the build system of a tool better not depend on a program that silently writes to the disk somewhere in the filesystem?

[Comment 10 Alexey 2020-07-03 00:09:23 UTC]

Still happens on media-sound/lilypond-2.21.1

[Comment 11 Alexey 2020-07-03 11:10:45 UTC]

This should be marked as blocking https://bugs.gentoo.org/223077

And https://github.com/gentoo/gentoo/pull/16568 fixes it

[Comment 12 Larry the Git Cow 2020-07-05 09:33:39 UTC]

The bug has been closed via the following commit(s):

https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=bd80db217c847c1b4c9d7bccc906610e66fb4b36

commit bd80db217c847c1b4c9d7bccc906610e66fb4b36
Author:     Alexey Sokolov <[e-mail]>
AuthorDate: 2020-07-03 11:07:26 +0000
Commit:     Miroslav Šulc <[e-mail]>
CommitDate: 2020-07-05 09:33:21 +0000

    media-sound/lilypond: fix sandbox violation
    
    Package-Manager: Portage-2.3.99, Repoman-2.3.23
    Signed-off-by: Alexey Sokolov <[e-mail]>
    Closes: https://bugs.gentoo.org/692010
    Closes: https://github.com/gentoo/gentoo/pull/16568
    Signed-off-by: Miroslav Šulc <[e-mail]>

 media-sound/lilypond/lilypond-2.21.1.ebuild | 1 +
 media-sound/lilypond/lilypond-9999.ebuild   | 1 +
 2 files changed, 2 insertions(+)