[Debian-ha-maintainers] Bug#1144831: resource-agents: autopkgtest fails under incus-lxc: ./setup_IPaddr2.sh: line 16: ip: command not found

[Antonio Terceiro]

Source: resource-agents
Version: 1:4.18.0-3
Severity: important
Justification: fails autopkgtest on Debian CI infrastructure
Tags: forky sid
User: debian-ci at lists.debian.org
Usertags: lxc

Hi,

Debian CI is switching away from lxc containers in favor of incus Containers.
This is motivated by security concerns from us; incus is based on lxc, but
orchestrates containers substantially different: containers are not privileged
(so root in the container is not uid 0 outside of it), and incus imposes a
stricter isolation from the host system).

resource-agents passes its tests under lxc, but fails under incus.
The relevant part of the failure is (hopefully):

> resource-agents-deps.target is a disabled or a static unit, not starting it.
> Processing triggers for systemd (261.2-1) ...
> Processing triggers for libc-bin (2.42-17) ...
> autopkgtest [20:49:41]: test IPaddr2: [-----------------------
> /tmp/autopkgtest.XYbvoO/build.bdd/src/debian/tests/IPaddr2: 13: ip: not found
> Using  as default route interface
> Running: ocft make -d /tmp/autopkgtest.XYbvoO/autopkgtest_tmp IPaddr2
> Making 'IPaddr2': 
> - case 0: check base env
> - case 1: check base env: unset 'OCF_RESKEY_ip'
> - case 2: check base env: set invalid 'OCF_RESKEY_ip'
> - case 3: check base env: set 'OCF_RESKEY_cidr_netmask'
> - case 4: check base env: set invalid 'OCF_RESKEY_cidr_netmask'
> - case 5: check base env: set 'OCF_RESKEY_broadcast'
> - case 6: check base env: set invalid 'OCF_RESKEY_broadcast'
> - case 7: check base env: set 'OCF_RESKEY_nic'
> - case 8: check base env: set invalid 'OCF_RESKEY_nic'
> - case 9: normal start
> - case 10: normal stop
> - case 11: double start
> - case 12: double stop
> - case 13: monitor with running
> - case 14: monitor with not running
> - case 15: unimplemented command
> - case 16: Attachment to loopback interface
> - case 17: check additional env: set 'OCF_RESKEY_iflabel'
> - case 18: check additional env: specify iflabel in 'OCF_RESKEY_nic'
> - case 19: monitor failure when 'OCF_RESKEY_nic' is vanished
> Running: ocft test -v IPaddr2
> Initializing 'IPaddr2' ...
> ./setup_IPaddr2.sh: line 16: ip: command not found
> ERROR: 'SETUP-AGENT' failed, the return code is 127.
> WARNING: SETUP failed, break all tests of 'IPaddr2'.
> autopkgtest [20:49:43]: test IPaddr2: -----------------------]
> IPaddr2              FAIL non-zero exit status 1
> autopkgtest [20:49:44]: test IPaddr2:  - - - - - - - - - - results - - - - - - - - - -
> autopkgtest [20:49:44]: test IPaddr2:  - - - - - - - - - - stderr - - - - - - - - - -
> /tmp/autopkgtest.XYbvoO/build.bdd/src/debian/tests/IPaddr2: 13: ip: not found
> autopkgtest [20:49:44]: test named: preparing testbed
> autopkgtest [20:49:48]: testbed dpkg architecture: amd64
> autopkgtest [20:49:48]: testbed apt version: 3.3.2
> autopkgtest [20:49:48]: @@@@@@@@@@@@@@@@@@@@ test bed setup
> autopkgtest [20:49:48]: updating testbed package index (apt update)
> Get:1 http://deb.debian.org/debian testing InRelease [151 kB]
> Get:2 http://deb.debian.org/debian-debug testing-debug InRelease [48.3 kB]
> Get:3 http://deb.debian.org/debian testing/contrib Sources [51.7 kB]
> Get:4 http://deb.debian.org/debian testing/non-free Sources [73.2 kB]
> Get:5 http://deb.debian.org/debian testing/non-free-firmware Sources [7856 B]
> Get:6 http://deb.debian.org/debian testing/main Sources [11.1 MB]
> Get:7 http://deb.debian.org/debian testing/main amd64 Packages [9907 kB]
> Get:8 http://deb.debian.org/debian testing/main Translation-en [6578 kB]
> Get:9 http://deb.debian.org/debian testing/contrib amd64 Packages [51.8 kB]
> Get:10 http://deb.debian.org/debian testing/contrib Translation-en [49.1 kB]
> Get:11 http://deb.debian.org/debian testing/non-free amd64 Packages [91.2 kB]
> Get:12 http://deb.debian.org/debian testing/non-free Translation-en [62.4 kB]
> Get:13 http://deb.debian.org/debian testing/non-free-firmware amd64 Packages [10.3 kB]
> Get:14 http://deb.debian.org/debian testing/non-free-firmware Translation-en [6272 B]
> Get:15 http://deb.debian.org/debian-debug testing-debug/contrib Sources [27.3 kB]
> Get:16 http://deb.debian.org/debian-debug testing-debug/main Sources [3072 kB]
> Get:17 http://deb.debian.org/debian-debug testing-debug/non-free Sources [19.0 kB]
> Get:18 http://deb.debian.org/debian-debug testing-debug/main amd64 Packages [3754 kB]


The full autokpgtest logs are available at:
https://ci.debian.net/experiments/8/regressions/
(please beware of pagination)

Common types of failure and suggested fixes are being documented at:
https://wiki.debian.org/ContinuousIntegration/LxcToIncus

Note that for the time being, resource-agents is still being tested under lxc to
avoid disturbing its testing migration test results.

If you decide to add the `isolation-machine` restriction to get this package
tested under qemu, please mention that explicitly when closing this bug (it's
fine to do that only in the package changelog entry that closes the bug) so
that we can configure your package for qemu on ci.debian.net.
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 833 bytes
Desc: not available
URL: <http://alioth-lists.debian.net/pipermail/debian-ha-maintainers/attachments/20260819/ff3a4e79/attachment.sig>