[From nobody Thu Sep 24 20:36:09 2026
Received: (at submit) by bugs.debian.org; 18 Aug 2026 23:20:46 +0000
X-Spam-Checker-Version: SpamAssassin 4.0.1-bugs.debian.org_2005_01_02
 (2024-03-25) on buxtehude.debian.org
X-Spam-Level: 
X-Spam-Status: No, score=-112.3 required=4.0 tests=ALL_TRUSTED,BAYES_00,
 DKIMWL_WL_HIGH,DKIM_SIGNED,DKIM_VALID,DKIM_VALID_AU,FOURLA,
 FROMDEVELOPER,FUZZY_CPILL,PGPSIGNATURE,SPF_HELO_NONE,SPF_PASS,
 USER_IN_DKIM_WELCOMELIST autolearn=ham autolearn_force=no
 version=4.0.1-bugs.debian.org_2005_01_02
X-Spam-Bayes: score:0.0000 Tokens: new, 22; hammy, 150; neutral, 189; spammy,
 0. spammytokens:
 hammytokens:0.000-+--Hx-spam-relays-external:sk:stravin,
 0.000-+--H*RT:sk:stravin, 0.000-+--Hx-spam-relays-external:311,
 0.000-+--H*RT:311, 0.000-+--H*RT:108
Return-path: &lt;terceiro@debian.org&gt;
Received: from stravinsky.debian.org ([2001:41b8:202:deb::311:108]:44624)
 by buxtehude.debian.org with esmtps
 (TLS1.3:ECDHE_SECP256R1__RSA_PSS_RSAE_SHA256__AES_256_GCM:256)
 (Exim 4.96) (envelope-from &lt;terceiro@debian.org&gt;) id 1wwT6s-0006XX-1j
 for submit@bugs.debian.org; Tue, 18 Aug 2026 23:20:46 +0000
DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=debian.org; 
 s=smtpauto.stravinsky;
 h=X-Debian-User:Content-Type:MIME-Version:Message-ID:
 Subject:To:From:Date:Reply-To:Cc:Content-Transfer-Encoding:Content-ID:
 Content-Description:In-Reply-To:References;
 bh=CjJu3K38QNvtKElHY0qEFiaGpDFyHV2xB9rady4ZczA=; b=rrsplTsqavgSBVo8HvqhTCuTfW
 My8vpupav2h51oNO5LCUY/y5rHGDCf7HmtTG8mKYItg6DjbOTib0c+R7HJMsyczWHQcswLMyEA1NG
 1pIM6v54GA7Apr5jTrbwKVTDrhSo6GtLwVirCkG0bPO6KvS8gFIbQ+C3Sn28Jo0Xe4QvM9GvCfhiM
 pjtaldXBHEFU79xiRYebC0/v+V1HX0YyTO+GSXW7y2vkAtdiTLNeuS/Axcn2NN7y1FJvgfz6VDJGW
 n8TGoz+p0RBrnBkLUj2l7pfgsnAQQke+bEiY1x3vFpnquUkY6CT2BtSLtaifpRAA16/Wg2N4nvSxA
 b94C5wug==;
Received: from authenticated-user by stravinsky.debian.org with esmtpsa
 (TLS1.3:ECDHE_X25519__RSA_PSS_RSAE_SHA256__AES_256_GCM:256)
 (Exim 4.96) (envelope-from &lt;terceiro@debian.org&gt;) id 1wwT6q-009Mla-07
 for submit@bugs.debian.org; Tue, 18 Aug 2026 23:20:45 +0000
Received: from localhost (ava [IPv6:2804:14d:7224:88bd:b38e:cd50:1e1d:e09a])
 by vps.terceiro.xyz (Postfix) with ESMTPSA id 9CC2C401BA
 for &lt;submit@bugs.debian.org&gt;; Tue, 18 Aug 2026 20:20:41 -0300 (-03)
Date: Tue, 18 Aug 2026 20:20:41 -0300
From: Antonio Terceiro &lt;terceiro@debian.org&gt;
To: submit@bugs.debian.org
Subject: fence-agents: autopkgtest fails under incus-lxc: sysctl: setting key
 &quot;net.ipv4.ping_group_range&quot;: Invalid argument
Message-ID: &lt;aoToyPKfpD__MHH9@debian.org&gt;
MIME-Version: 1.0
Content-Type: multipart/signed; micalg=pgp-sha256;
 protocol=&quot;application/pgp-signature&quot;; boundary=&quot;ug6BJ9JrV4m1XoEy&quot;
Content-Disposition: inline
X-Debian-User: terceiro
Delivered-To: submit@bugs.debian.org

--ug6BJ9JrV4m1XoEy
Content-Type: text/plain; charset=utf-8
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable

Source: fence-agents
Version: 4.17.0-1
Severity: important
Justification: fails autopkgtest on Debian CI infrastructure
Tags: forky sid
User: debian-ci@lists.debian.org
Usertags: lxc

Hi,

Debian CI is switching away from lxc containers in favor of incus Container=
s.
This is motivated by security concerns from us; incus is based on lxc, but
orchestrates containers substantially different: containers are not privile=
ged
(so root in the container is not uid 0 outside of it, and incus imposes a
stricter isolation from the host system.

fence-agents passes its tests under lxc, but fails under incus.
The relevant part of the failure is (hopefully):

&gt; string), pattern: ((\d+).)?(\d\d):(60|([0-5][0-9])):(60|([0-5][0-9])).
&gt; /usr/lib/python3/dist-packages/azure/synapse/artifacts/models/_models_py3=
=2Epy:74677: SyntaxWarning: &quot;\d&quot; is an invalid escape sequence. Such sequen=
ces will not work in the future. Did you mean &quot;\\d&quot;? A raw string is also a=
n option.
&gt; string), pattern: ((\d+).)?(\d\d):(60|([0-5][0-9])):(60|([0-5][0-9])).
&gt; Setting up fence-agents-azure-arm (4.17.0-1) ...
&gt; Setting up libmpathpersist0 (0.14.3-3) ...
&gt; Setting up multipath-tools (0.14.3-3) ...
&gt; Created symlink '/etc/systemd/system/sysinit.target.wants/multipathd.serv=
ice' =E2=86=92 '/usr/lib/systemd/system/multipathd.service'.
&gt; multipathd-queueing.service is a disabled or a static unit, not starting =
it.
&gt; Setting up fence-agents-mpath (4.17.0-1) ...
&gt; Processing triggers for libc-bin (2.42-17) ...
&gt; Processing triggers for systemd (261.2-1) ...
&gt; Processing triggers for sgml-base (1.31+nmu1) ...
&gt; Setting up docutils-common (0.22.4+dfsg-1) ...
&gt; Processing triggers for sgml-base (1.31+nmu1) ...
&gt; Setting up python3-docutils (0.22.4+dfsg-1) ...
&gt; Setting up python3-cliff (4.13.3-1) ...
&gt; Setting up python3-oslo.config (1:10.3.0-2) ...
&gt; Setting up python3-keystoneclient (1:5.8.0-4) ...
&gt; Setting up python3-osc-lib (4.4.0-2) ...
&gt; Setting up python3-oslo.log (8.1.0-3) ...
&gt; Setting up python3-openstackclient (9.0.0-3) ...
&gt; Setting up python3-neutronclient (1:11.8.0-2) ...
&gt; Setting up fence-agents-ironic (4.17.0-1) ...
&gt; Setting up fence-agents-all (4.17.0-1) ...
&gt; Processing triggers for initramfs-tools (0.151) ...
&gt; autopkgtest [21:03:58]: Setting up user &quot;test&quot; to sudo without password...
&gt; autopkgtest [21:03:59]: test delay: [-----------------------
&gt; sysctl: setting key &quot;net.ipv4.ping_group_range&quot;: Invalid argument
&gt; autopkgtest [21:03:59]: test delay: -----------------------]
&gt; autopkgtest [21:03:59]: test delay:  - - - - - - - - - - results - - - - =
- - - - - -
&gt; delay                FAIL non-zero exit status 1


The full autokpgtest logs are available at:
https://ci.debian.net/experiments/8/regressions/
(please beware of pagination)

Common types of failure and suggested fixes are being documented at:
https://wiki.debian.org/ContinuousIntegration/LxcToIncus

Note that for the time being, fence-agents is still being tested under lxc =
to
avoid disturbing its testing migration test results.

If you decide to add the `isolation-machine` restriction to get this package
tested under qemu, please mention that explicitly when closing this bug (it=
's
fine to do that only in the package changelog entry that closes the bug) so
that we can configure your package for qemu on ci.debian.net.

--ug6BJ9JrV4m1XoEy
Content-Type: application/pgp-signature; name=signature.asc

-----BEGIN PGP SIGNATURE-----

iQIzBAABCAAdFiEEst7mYDbECCn80PEM/A2xu81GC94FAmqE6MgACgkQ/A2xu81G
C96F6Q//SiHwpFlsrvHOqyoy79XcK6svvNkkzSr19eFKu+Z9zjn7to2Y8oYxHZMi
2o2yCTtB11cpn86ZUbU8H3WmwvICWaVs884W/c1qyV52xb26RTY6VA2ODAuCgR0i
RLImoowUXpTPPrWXd/gmZw7QwGGuwXsgEh3z4xJxeDs6mS37Ll3dU73NMd8pCyWt
EaTPadT3GcHBuCuqAuf4aP7TyDba6uaXsY1LenX/J4IJxjpyYkVUAhl1sKGzwgcl
RWSe5RvRqsxTAa0yps77s/RQzf/XZPf5Va8aT1PyrPt0okR7eVxf9QoCmOqo6gAz
JhaDMzXL13zGprxSKw5QsSMBSQkCdJpl9LvYkzPL1ppUyaxAW2ulSglgEkQwAGnO
HNilMRGLFfz59JT9IQQJwemXDaDXfzi+zTFjNG0M2/E4L6V9G5Yi53hzRqONlOPu
FqJQCJfYktv3i31UGzhshYWn/fA44SGF0j0g5FROT+zxcDWB6jdZXVcF7gxB8Vrg
ytMQyKnH235VcNMZh1r40Bw2YQ9KMH9Slv29NHPLKCLQkA3YZ7HzvOBE5xxmrLpx
FljnkpKi9FQMVTneOMMqpUtUDrd9MPVfDrltlxt5PcQOl13WdZlxvLg9DJXmoOTT
WqRtv1oghhkO/RXFyhLkGWzPUHzfVGjGlF/4WeWJOFkHkjTppBY=
=QOwM
-----END PGP SIGNATURE-----

--ug6BJ9JrV4m1XoEy--
]