[From nobody Sun Sep 27 17:57:07 2026
Received: (at submit) by bugs.debian.org; 19 Aug 2026 10:22:15 +0000
X-Spam-Checker-Version: SpamAssassin 4.0.1-bugs.debian.org_2005_01_02
 (2024-03-25) on buxtehude.debian.org
X-Spam-Level: 
X-Spam-Status: No, score=-112.3 required=4.0 tests=ALL_TRUSTED,BAYES_00,
 DKIMWL_WL_HIGH,DKIM_SIGNED,DKIM_VALID,DKIM_VALID_AU,FOURLA,
 FROMDEVELOPER,FUZZY_CPILL,PGPSIGNATURE,SPF_HELO_NONE,SPF_PASS,
 USER_IN_DKIM_WELCOMELIST autolearn=ham autolearn_force=no
 version=4.0.1-bugs.debian.org_2005_01_02
X-Spam-Bayes: score:0.0000 Tokens: new, 28; hammy, 150; neutral, 137; spammy,
 0. spammytokens:
 hammytokens:0.000-+--Hx-spam-relays-external:sk:stravin,
 0.000-+--H*RT:sk:stravin, 0.000-+--Hx-spam-relays-external:311,
 0.000-+--H*RT:311, 0.000-+--H*RT:108
Return-path: &lt;terceiro@debian.org&gt;
Received: from stravinsky.debian.org ([2001:41b8:202:deb::311:108]:46304)
 by buxtehude.debian.org with esmtps
 (TLS1.3:ECDHE_SECP256R1__RSA_PSS_RSAE_SHA256__AES_256_GCM:256)
 (Exim 4.96) (envelope-from &lt;terceiro@debian.org&gt;) id 1wwdR1-001dG3-0H
 for submit@bugs.debian.org; Wed, 19 Aug 2026 10:22:15 +0000
DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=debian.org; 
 s=smtpauto.stravinsky;
 h=X-Debian-User:Content-Type:MIME-Version:Message-ID:
 Subject:To:From:Date:Reply-To:Cc:Content-Transfer-Encoding:Content-ID:
 Content-Description:In-Reply-To:References;
 bh=mCMnAbzHfVoBs6oSwxYVgVpcG9LDvamO8q3aHzmP13E=; b=suoljonKYiwZpr95zTfW5Xytdn
 0uc7yqSFbLS7gE2k6TRNcfjpNTRxI6k1a6eWuko4PCQfuVHJrL1k1TaTomNc30aXjGFAjukPHVAUt
 apJQx5+MWb8WNfEDtqNqob2C5c+B2wH8taJhxa3JqBGuEYWNuxprjUhwn3ViPLfduwXmMqCK7M/LK
 ksfNVqG0tIkbH38mFhDqaZ6MrbtaBHrD7VfSPt2UKEjtGKOVn+WL8miOxowee0x7tJT22wDbxQCiU
 2MCcT6a79eNzgS2bxfphuePJ6h3aMDHFftKN0LGQHJAUpORoiTxY7ouTeSD6/aMy5xEwYuOo7Edzn
 lZLbt/3g==;
Received: from authenticated-user by stravinsky.debian.org with esmtpsa
 (TLS1.3:ECDHE_X25519__RSA_PSS_RSAE_SHA256__AES_256_GCM:256)
 (Exim 4.96) (envelope-from &lt;terceiro@debian.org&gt;) id 1wwdQy-009iwb-2Y
 for submit@bugs.debian.org; Wed, 19 Aug 2026 10:22:13 +0000
Received: from localhost (ava [IPv6:2804:14d:7224:88bd:b38e:cd50:1e1d:e09a])
 by vps.terceiro.xyz (Postfix) with ESMTPSA id 5644C40227
 for &lt;submit@bugs.debian.org&gt;; Wed, 19 Aug 2026 07:22:10 -0300 (-03)
Date: Wed, 19 Aug 2026 07:22:09 -0300
From: Antonio Terceiro &lt;terceiro@debian.org&gt;
To: submit@bugs.debian.org
Subject: tango: autopkgtest fails under incus-lxc: Failed to connect to
 database
Message-ID: &lt;aoWD0UaNC7jmAzxW@debian.org&gt;
MIME-Version: 1.0
Content-Type: multipart/signed; micalg=pgp-sha256;
 protocol=&quot;application/pgp-signature&quot;; boundary=&quot;5ssItsZh5NZ2YBxN&quot;
Content-Disposition: inline
X-Debian-User: terceiro
Delivered-To: submit@bugs.debian.org

--5ssItsZh5NZ2YBxN
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable

Source: tango
Version: 10.1.2+dfsg1-5
Severity: important
Justification: fails autopkgtest on Debian CI infrastructure
Tags: forky sid
User: debian-ci@lists.debian.org
Usertags: lxc

Hi,

Debian CI is switching away from lxc containers in favor of incus Container=
s.
This is motivated by security concerns from us; incus is based on lxc, but
orchestrates containers substantially different: containers are not privile=
ged
(so root in the container is not uid 0 outside of it), and incus imposes a
stricter isolation from the host system).

tango passes its tests under lxc, but fails under incus.
The relevant part of the failure is (hopefully):

&gt; autopkgtest [21:11:29]: test starter-basic: [-----------------------
&gt; systemd-+-Databaseds---7*[{Databaseds}]
&gt;         |-Starter---2*[{Starter}]
&gt;         |-agetty
&gt;         |-dbus-daemon
&gt;         |-mariadbd---33*[{mariadbd}]
&gt;         |-systemd-hostnam
&gt;         |-systemd-journal
&gt;         |-systemd-logind
&gt;         |-systemd-network
&gt;         `-systemd-resolve
&gt; systemd-+-Databaseds---7*[{Databaseds}]
&gt;         |-Starter---2*[{Starter}]
&gt;         |-agetty
&gt;         |-dbus-daemon
&gt;         |-mariadbd---33*[{mariadbd}]
&gt;         |-systemd-journal
&gt;         |-systemd-logind
&gt;         |-systemd-network
&gt;         `-systemd-resolve
&gt; Tango exception
&gt; Severity =3D ERROR
&gt; Error reason =3D API_CorbaException
&gt; Desc : TRANSIENT CORBA system exception: TRANSIENT_ConnectFailed
&gt; Origin : void Tango::Connection::connect(const std::string&amp;) at (./lib/cp=
p/src/client/devapi_base.cpp:1261)
&gt;=20
&gt; Tango exception
&gt; Severity =3D ERROR
&gt; Error reason =3D API_CantConnectToDatabase
&gt; Desc : Failed to connect to database on host autopkgtest-incus-iwyjjc.inc=
us with port 10000
&gt; Origin : void Tango::Connection::connect(const std::string&amp;) at (./lib/cp=
p/src/client/devapi_base.cpp:1261)
&gt;=20
&gt; Running the command timed out!
&gt; autopkgtest [21:11:56]: test starter-basic: -----------------------]
&gt; autopkgtest [21:11:57]: test starter-basic:  - - - - - - - - - - results =
- - - - - - - - - -
&gt; starter-basic        FAIL non-zero exit status 1
&gt; autopkgtest [21:11:57]: test starter-basic:  - - - - - - - - - - stderr -=
 - - - - - - - - -
&gt; Tango exception
&gt; Severity =3D ERROR
&gt; Error reason =3D API_CorbaException
&gt; Desc : TRANSIENT CORBA system exception: TRANSIENT_ConnectFailed
&gt; Origin : void Tango::Connection::connect(const std::string&amp;) at (./lib/cp=
p/src/client/devapi_base.cpp:1261)
&gt;=20
&gt; Tango exception
&gt; Severity =3D ERROR
&gt; Error reason =3D API_CantConnectToDatabase
&gt; Desc : Failed to connect to database on host autopkgtest-incus-iwyjjc.inc=
us with port 10000
&gt; Origin : void Tango::Connection::connect(const std::string&amp;) at (./lib/cp=
p/src/client/devapi_base.cpp:1261)
&gt;=20
&gt; Running the command timed out!

The full autokpgtest logs are available at:
https://ci.debian.net/experiments/8/regressions/
(please beware of pagination)

Common types of failure and suggested fixes are being documented at:
https://wiki.debian.org/ContinuousIntegration/LxcToIncus

Note that for the time being, tango is still being tested under lxc to
avoid disturbing its testing migration test results.

If you decide to add the `isolation-machine` restriction to get this package
tested under qemu, please mention that explicitly when closing this bug (it=
's
fine to do that only in the package changelog entry that closes the bug) so
that we can configure your package for qemu on ci.debian.net.

--5ssItsZh5NZ2YBxN
Content-Type: application/pgp-signature; name=signature.asc

-----BEGIN PGP SIGNATURE-----
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=kgp3
-----END PGP SIGNATURE-----

--5ssItsZh5NZ2YBxN--
]