[pkg-apparmor] Bug#1050256: autopkgtest fails on debci

[Michael Biebl]

Am 01.09.23 um 13:23 schrieb Michael Biebl:
> The only way to fix the container was to use the aforementioned 
> `lxc.apparmor.profile = unconfined`.
> I think we should do that as the breakage is rather widespread and I 
> already see individual packages trying to work around that to at least 
> keep debci afloat.
> 
> See e.g.:
> https://salsa.debian.org/systemd-team/systemd/-/merge_requests/211
> https://salsa.debian.org/debian/pdns/-/commit/637e54ef73386541086da430553b82db78266bac
> 
> or disabling the systemd hardening options completely_
> https://salsa.debian.org/utopia-team/polkit/-/blob/master/debian/patches/debian/Don-t-use-PrivateNetwork-yes-for-the-systemd-unit.patch
> 
> This is not a good outcome of this and the problem will become more 
> apparent with debci running on bookworm now.
> 

I went ahead and submitted
https://salsa.debian.org/lxc-team/lxc/-/merge_requests/18
since I don't see another solution atm.

Looping in the release team as well for their input.


Regards,
Michael
-------------- next part --------------
A non-text attachment was scrubbed...
Name: OpenPGP_signature.asc
Type: application/pgp-signature
Size: 840 bytes
Desc: OpenPGP digital signature
URL: <http://alioth-lists.debian.net/pipermail/pkg-systemd-maintainers/attachments/20230901/83ba0319/attachment.sig>