Debian Bug report logs - #932357
debootstrap: failed to create a pbuilder base.tgz inside a systemd-nspawn unprevilledged container

version graph

Package: debootstrap; Maintainer for debootstrap is Debian Install System Team <[email protected]>; Source for debootstrap is src:debootstrap (PTS, buildd, popcon).

Reported by: Alberto Garcia <[email protected]>

Date: Thu, 18 Jul 2019 11:21:06 UTC

Severity: normal

Found in version debootstrap/1.0.115

Full log


🔗 View this message in rfc822 format

X-Loop: [email protected]
Subject: Bug#932357: debootstrap: failed to create a pbuilder base.tgz inside a systemd-nspawn container
Reply-To: Alberto Garcia <[email protected]>, [email protected]
Resent-From: Alberto Garcia <[email protected]>
Resent-To: 
Resent-Date: Mon, 09 Mar 2020 17:18:02 +0000
Resent-Message-ID: <[email protected]>
Resent-Sender: [email protected]
X-Loop: [email protected]
X-Debian-PR-Message: followup 932357
X-Debian-PR-Package: debootstrap
X-Debian-PR-Keywords: 
References: <[email protected]> <[email protected]> <[email protected]>
X-Debian-PR-Source: debootstrap
Received: via spool by [email protected] id=Q932357.15837741069462
          (code Q ref 932357); Mon, 09 Mar 2020 17:18:02 +0000
Received: (at 932357-quiet) by bugs.debian.org; 9 Mar 2020 17:15:06 +0000
X-Spam-Checker-Version: SpamAssassin 3.4.2-bugs.debian.org_2005_01_02
	(2018-09-13) on buxtehude.debian.org
X-Spam-Level: 
X-Spam-Status: No, score=-15.9 required=4.0 tests=BAYES_00,DKIM_SIGNED,
	DKIM_VALID,DKIM_VALID_AU,DKIM_VALID_EF,HAS_BUG_NUMBER,SPF_HELO_NONE,
	SPF_PASS,TXREP autolearn=ham autolearn_force=no
	version=3.4.2-bugs.debian.org_2005_01_02
X-Spam-Bayes: score:0.0000 Tokens: new, 11; hammy, 124; neutral, 41; spammy,
	0. spammytokens: hammytokens:0.000-+--H*UA:2014-03-12,
	0.000-+--H*u:2014-03-12, 0.000-+--H*UA:1.5.23, 0.000-+--H*u:1.5.23,
	0.000-+--pbuilder
Received: from fanzine.igalia.com ([178.60.130.6]:32911)
	by buxtehude.debian.org with esmtps (TLS1.2:ECDHE_RSA_AES_128_GCM_SHA256:128)
	(Exim 4.92)
	(envelope-from <[email protected]>)
	id 1jBLzd-0002QS-Ac
	for [email protected]; Mon, 09 Mar 2020 17:15:06 +0000
DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=igalia.com; s=20170329;
	h=In-Reply-To:Content-Type:MIME-Version:References:Message-ID:Subject:To:From:Date; bh=AlsYN4S7yPnjO4tTK0kD0gQhfJMW6iq/DhKJKHWSo0s=;
	b=bRl/Rdwo37ev45RHH/P1RoPyPvgtymyo6G6qxrC2jSvIyNr0zfIDDX8ZYfcBl8nJ5o3WhJyfTEGyrILDSGP0OHf6+/BjY9qk0+McVeckzTXLOFmXtmERz6LCrSkhvMv8+pK85x2rRuiMPPA+cjl48bdISotEpYqaZyPZRP7/1XqdFUcxfaOugJ9uNRu54ubCLykRVM/9Yy8W03EEMzp/vNJ/cNi/JtgfIt5ZThbM6+ZrbykLmmyAqstT9aQV6U5aAb2Aa7CMjCD194ffkXF5gyKUuZui3yVWnjPDNUIoKXht/87lTaGRnDPXhn6iwfz3OWx2yf/QaS0MRrubasctdA==;
Received: from maestria.local.igalia.com ([192.168.10.14] helo=mail.igalia.com)
	by fanzine.igalia.com with esmtps 
	(Cipher TLS1.2:ECDHE_RSA_AES_128_GCM_SHA256:128) (Exim)
	id 1jBLzW-0005cq-P1; Mon, 09 Mar 2020 18:14:58 +0100
Received: from berto by mail.igalia.com with local (Exim)
	id 1jBLzW-0008Qz-Em; Mon, 09 Mar 2020 18:14:58 +0100
Date: Mon, 9 Mar 2020 18:14:58 +0100
From: Alberto Garcia <[email protected]>
To: Hideki Yamane <[email protected]>, [email protected]
Message-ID: <[email protected]>
MIME-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
In-Reply-To: <[email protected]>
User-Agent: Mutt/1.5.23 (2014-03-12)
On Sun, Feb 23, 2020 at 08:36:15PM +0900, Hideki Yamane wrote:

>  It would be succeeded inside systemd-nspawn container but fails
>  with "unprivileged" container. So, could you give some information
>  about difference between privileged and unprivileged container,
>  please?  It there's it, can detect and change its behavior.

I'm not an expert in systemd containers, but as far as I can see when
you run an unprivileged container the root user inside a container
is actually mapped to a random (non-root) user ID and cannot create
devices, that's why mknod fails.

I don't know if fixing that check and using an alternative system is
enough to solve the problem though, a quick test shows that there are
also problems when mounting /sys inside the pbuilder chroot.

Berto

Send a report that this bug log contains spam.


Debian bug tracking system administrator <[email protected]>. Last modified: Tue May 13 11:29:34 2025; Machine Name: bembo

Debian Bug tracking system

Debbugs is free software and licensed under the terms of the GNU General Public License version 2. The current version can be obtained from https://bugs.debian.org/debbugs-source/.

Copyright © 1999 Darren O. Benham, 1997,2003 nCipher Corporation Ltd, 1994-97 Ian Jackson, 2005-2017 Don Armstrong, and many other contributors.