[From nobody Tue Sep  1 17:39:07 2026
Received: (at submit) by bugs.debian.org; 19 Aug 2026 15:04:34 +0000
X-Spam-Checker-Version: SpamAssassin 4.0.1-bugs.debian.org_2005_01_02
 (2024-03-25) on buxtehude.debian.org
X-Spam-Level: 
X-Spam-Status: No, score=-112.4 required=4.0 tests=ALL_TRUSTED,BAYES_00,
 DKIMWL_WL_HIGH,DKIM_SIGNED,DKIM_VALID,DKIM_VALID_AU,FROMDEVELOPER,
 FUZZY_CPILL,PGPSIGNATURE,SPF_HELO_NONE,SPF_PASS,
 USER_IN_DKIM_WELCOMELIST autolearn=ham autolearn_force=no
 version=4.0.1-bugs.debian.org_2005_01_02
X-Spam-Bayes: score:0.0000 Tokens: new, 23; hammy, 150; neutral, 145; spammy,
 0. spammytokens:
 hammytokens:0.000-+--Hx-spam-relays-external:sk:stravin,
 0.000-+--H*RT:sk:stravin, 0.000-+--Hx-spam-relays-external:311,
 0.000-+--H*RT:311, 0.000-+--H*RT:108
Return-path: &lt;terceiro@debian.org&gt;
Received: from stravinsky.debian.org ([2001:41b8:202:deb::311:108]:59810)
 by buxtehude.debian.org with esmtps
 (TLS1.3:ECDHE_SECP256R1__RSA_PSS_RSAE_SHA256__AES_256_GCM:256)
 (Exim 4.96) (envelope-from &lt;terceiro@debian.org&gt;) id 1wwhqE-002LHR-1z
 for submit@bugs.debian.org; Wed, 19 Aug 2026 15:04:34 +0000
DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=debian.org; 
 s=smtpauto.stravinsky;
 h=X-Debian-User:Content-Type:MIME-Version:Message-ID:
 Subject:To:From:Date:Reply-To:Cc:Content-Transfer-Encoding:Content-ID:
 Content-Description:In-Reply-To:References;
 bh=zFDz4EQzq1yPOF+HGnrL1J6UGdUZX60WDr6PyyOVpwU=; b=ABd8/nw81WoR/sDhEKW8Bexq93
 RejqJHQHZwXUv+No4IaBxG66CnbBh0GEtPW0kJ8YTN9KQkjr5x/1nweaLZl9uGcA1BRI2f4HOa8nh
 qfKtMdshNXjW8xlsI9Hul/rTRAGh9Jbs9+9vZlUVYAmb94Ar/BmKc6CqMBF16HHKmTGjQbzXh90vJ
 vVy/9fIe8Ih1y2dTkMUmqKgYb84pMON56Y6Hx6aiisXsMdwfKPvPDMlWuOCJ3IGHjvTBJ0ZFb9AyZ
 bPZkZuskiaAkq20IZFCOGhSeyBDKdPA9/1fOi5PXbmfR0qEfkkmj9j3uW9ZwLLcyetGUkHatiDLNd
 E+g4OaHQ==;
Received: from authenticated-user by stravinsky.debian.org with esmtpsa
 (TLS1.3:ECDHE_X25519__RSA_PSS_RSAE_SHA256__AES_256_GCM:256)
 (Exim 4.96) (envelope-from &lt;terceiro@debian.org&gt;) id 1wwhqB-009sIf-30
 for submit@bugs.debian.org; Wed, 19 Aug 2026 15:04:33 +0000
Received: from localhost (ava [IPv6:2804:14d:7224:88bd:b38e:cd50:1e1d:e09a])
 by vps.terceiro.xyz (Postfix) with ESMTPSA id 98A294083C
 for &lt;submit@bugs.debian.org&gt;; Wed, 19 Aug 2026 12:04:29 -0300 (-03)
Date: Wed, 19 Aug 2026 12:04:28 -0300
From: Antonio Terceiro &lt;terceiro@debian.org&gt;
To: submit@bugs.debian.org
Subject: systemd: autopkgtest fails under incus-lxc: FileNotFoundError:
 [Errno 2] No such file or directory: 'ip'
Message-ID: &lt;aoXF_GHxtPGD6tlW@debian.org&gt;
MIME-Version: 1.0
Content-Type: multipart/signed; micalg=pgp-sha256;
 protocol=&quot;application/pgp-signature&quot;; boundary=&quot;yV3NigCXXOSEHbs4&quot;
Content-Disposition: inline
X-Debian-User: terceiro
Delivered-To: submit@bugs.debian.org

--yV3NigCXXOSEHbs4
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline

Source: systemd
Version: 261.2-1
Severity: important
Justification: fails autopkgtest on Debian CI infrastructure
Tags: forky sid
User: debian-ci@lists.debian.org
Usertags: lxc

Hi,

Debian CI is switching away from lxc containers in favor of incus Containers.
This is motivated by security concerns from us; incus is based on lxc, but
orchestrates containers substantially different: containers are not privileged
(so root in the container is not uid 0 outside of it), and incus imposes a
stricter isolation from the host system).

systemd passes its tests under lxc, but fails under incus.
The relevant part of the failure is (hopefully):

&gt; ======================================================================
&gt; ERROR: test_bridge_init (__main__.BridgeTest.test_bridge_init)
&gt; ----------------------------------------------------------------------
&gt; Traceback (most recent call last):
&gt;   File &quot;/tmp/autopkgtest.Ce5g9R/build.iYO/src/test/networkd-test.py&quot;, line 314, in tearDown
&gt;     subprocess.check_call(['ip', 'link', 'del', 'mybridge'])
&gt;     ~~~~~~~~~~~~~~~~~~~~~^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
&gt;   File &quot;/usr/lib/python3.14/subprocess.py&quot;, line 415, in check_call
&gt;     retcode = call(*popenargs, **kwargs)
&gt;   File &quot;/usr/lib/python3.14/subprocess.py&quot;, line 396, in call
&gt;     with Popen(*popenargs, **kwargs) as p:
&gt;          ~~~~~^^^^^^^^^^^^^^^^^^^^^^
&gt;   File &quot;/usr/lib/python3.14/subprocess.py&quot;, line 1039, in __init__
&gt;     self._execute_child(args, executable, preexec_fn, close_fds,
&gt;     ~~~~~~~~~~~~~~~~~~~^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
&gt;                         pass_fds, cwd, env,
&gt;                         ^^^^^^^^^^^^^^^^^^^
&gt;     ...&lt;5 lines&gt;...
&gt;                         gid, gids, uid, umask,
&gt;                         ^^^^^^^^^^^^^^^^^^^^^^
&gt;                         start_new_session, process_group)
&gt;                         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
&gt;   File &quot;/usr/lib/python3.14/subprocess.py&quot;, line 1990, in _execute_child
&gt;     raise child_exception_type(errno_num, err_msg, err_filename)
&gt; FileNotFoundError: [Errno 2] No such file or directory: 'ip'

The full autokpgtest logs are available at:
https://ci.debian.net/experiments/8/regressions/
(please beware of pagination)

Common types of failure and suggested fixes are being documented at:
https://wiki.debian.org/ContinuousIntegration/LxcToIncus

Note that for the time being, systemd is still being tested under lxc to
avoid disturbing its testing migration test results.

If you decide to add the `isolation-machine` restriction to get this package
tested under qemu, please mention that explicitly when closing this bug (it's
fine to do that only in the package changelog entry that closes the bug) so
that we can configure your package for qemu on ci.debian.net.

--yV3NigCXXOSEHbs4
Content-Type: application/pgp-signature; name=signature.asc

-----BEGIN PGP SIGNATURE-----
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=s8BJ
-----END PGP SIGNATURE-----

--yV3NigCXXOSEHbs4--
]