From mboxrd@z Thu Jan 1 00:00:00 1970 X-GM-THRID: 6616615978640867328 X-Received: by 2002:a17:906:404f:: with SMTP id y15-v6mr280625ejj.5.1541754893308; Fri, 09 Nov 2018 01:14:53 -0800 (PST) X-BeenThere: isar-users@googlegroups.com Received: by 2002:a17:906:5818:: with SMTP id m24-v6ls191295ejq.1.gmail; Fri, 09 Nov 2018 01:14:52 -0800 (PST) X-Google-Smtp-Source: AJdET5eHknlgGhcpCPmSl2zyO2310o/mb+6taSM39KnQ5yqWPu8E7Xa3N/4hO2ji7Z7fNJDiQvYv X-Received: by 2002:a17:906:e82:: with SMTP id p2-v6mr281015ejf.13.1541754892759; Fri, 09 Nov 2018 01:14:52 -0800 (PST) ARC-Seal: i=1; a=rsa-sha256; t=1541754892; cv=none; d=google.com; s=arc-20160816; b=dVRs2GypypcU7vATonC9jnpoDIl2sadr2wKRpscCck9V+rsVmwMQaDL/JmpQJy1lBN RPVGLkAADG2Isp+BVNcpxwvvUQkI5iHMNIQ4OlusEJfCQmLq1Js4tEv/lAO0YK+YQ6Vx gx/Ox9xvWKt8GFZnnIDeo9GL/dpnTvbDEGR7mPPSYkuY+Y0JMYgn41s5/3wClbmmvToW hJTsRYol9e2KA2MoFkzeKY25b7u01FppGJz8CcqDuIkiGgvqaNfT1O8SdvDTGXLFPZ8n 3S3aDADhksLfInYWeIO7TKfLHx4glVsACB0fTr6Eq94oaGQERSBPdh/HvKJqxNwf0FwK ypQg== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20160816; h=content-transfer-encoding:content-language:in-reply-to:mime-version :user-agent:date:message-id:from:references:cc:to:subject; bh=l1J2kkkcljdt13bNcHTuenvSggZ7smeh5eC4sA5OBXU=; b=oNAcGfTO21Za5eqxsY2PO8dvlvxYvQ+/rrh+a+8bjLcGHqECBF77ZAK6cbcsnRfvLS pLjrao4wIylyGr9f/kjD5/Up9K36i4A0Hod7KwJz0tadPnlfOxkO6AoRiYZl6ZVKV8hK alyFVMqgeFw3jv1XcnW8R4DcEbnDmG2auCUuQWwH77C/R/iI6CuTk3RkNye7AOEgdf1f lZfgCF7wB0LICG9grRsNBDjPZp50Gujc6MQk0uLWRBXjiUKZAeFQT8PtRuzCm4jvAGMj ypXp7iEt/3OxonX5lMkxjEN7UE9/Jf8z5ruQtYM4+xjZDLV2NcamfAhDIajXB+mqkSSP yFxA== ARC-Authentication-Results: i=1; gmr-mx.google.com; spf=pass (google.com: domain of jan.kiszka@siemens.com designates 192.35.17.14 as permitted sender) smtp.mailfrom=jan.kiszka@siemens.com Return-Path: Received: from david.siemens.de (david.siemens.de. [192.35.17.14]) by gmr-mx.google.com with ESMTPS id a35-v6si371502edd.1.2018.11.09.01.14.52 for (version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128); Fri, 09 Nov 2018 01:14:52 -0800 (PST) Received-SPF: pass (google.com: domain of jan.kiszka@siemens.com designates 192.35.17.14 as permitted sender) client-ip=192.35.17.14; Authentication-Results: gmr-mx.google.com; spf=pass (google.com: domain of jan.kiszka@siemens.com designates 192.35.17.14 as permitted sender) smtp.mailfrom=jan.kiszka@siemens.com Received: from mail2.sbs.de (mail2.sbs.de [192.129.41.66]) by david.siemens.de (8.15.2/8.15.2) with ESMTPS id wA99EqEA024348 (version=TLSv1.2 cipher=DHE-RSA-AES256-GCM-SHA384 bits=256 verify=OK); Fri, 9 Nov 2018 10:14:52 +0100 Received: from [139.22.36.91] ([139.22.36.91]) by mail2.sbs.de (8.15.2/8.15.2) with ESMTP id wA99EpaE007213; Fri, 9 Nov 2018 10:14:51 +0100 Subject: Re: [PATCH] buildchroot: build debian packages as "builder" not "root" To: Henning Schild , Maksim Osipov Cc: isar-users@googlegroups.com References: <20181026104914.25581-1-henning.schild@siemens.com> <9fc6082e-49ae-2e9c-6331-90b80b66baf0@siemens.com> <20181108155423.590f43de@md1za8fc.ad001.siemens.net> From: Jan Kiszka Message-ID: <72142f4d-4ce4-b4a2-9fe4-8199a8fb6fa2@siemens.com> Date: Fri, 9 Nov 2018 10:14:51 +0100 User-Agent: Mozilla/5.0 (X11; U; Linux i686 (x86_64); de; rv:1.8.1.12) Gecko/20080226 SUSE/2.0.0.12-1.1 Thunderbird/2.0.0.12 Mnenhy/0.7.5.666 MIME-Version: 1.0 In-Reply-To: <20181108155423.590f43de@md1za8fc.ad001.siemens.net> Content-Type: text/plain; charset=utf-8; format=flowed Content-Language: en-US Content-Transfer-Encoding: 7bit X-TUID: j1tAeUq2Mwo0 On 08.11.18 15:54, Henning Schild wrote: > Am Thu, 8 Nov 2018 14:32:42 +0100 > schrieb Jan Kiszka : > >> On 26.10.18 12:49, [ext] Henning Schild wrote: >>> We used to build packages as "root" and now do that as a regular >>> user. Not building as "root" allows us to find mistakes in >>> debian/rules where privileged operations are used while they should >>> not (a sudo was found in a rules-file). Further some build steps >>> might actually expect to not run as root (seen in openssl test >>> suite). >>> >>> Not building as root should increase overall quality and brings us >>> closer to how debian packages are build by others. >> >> I strongly suspect this is the cause for more and more rebuild errors >> of this kind: >> >> | make[1]: Leaving directory '/home/builder/u-boot/u-boot-v2018.09' >> | dh_clean -O--parallel >> | dpkg-source -I -b u-boot-v2018.09 >> | dpkg-source: warning: no source format specified in >> debian/source/format, see dpkg-source(1) | dpkg-source: warning: >> source directory 'u-boot-v2018.09' is not >> - 'u-boot-2018.09' | dpkg-source: >> info: using source format '1.0' | dpkg-source: info: building u-boot >> in u-boot_2018.09.tar.gz | dpkg-source: error: cannot write >> u-boot_2018.09.dsc: Permission denied | dpkg-source: info: building >> u-boot in u-boot_2018.09.dsc | dpkg-buildpackage: error: dpkg-source >> -I -b u-boot-v2018.09 gave error exit status 13 | WARNING: exit code >> 13 from a shell command. | ERROR: Function failed: do_build (log file >> is located >> at /work/build/tmp/work/long-life-ebsy-armhf/u-boot-2018.09-r0/temp/log.do_build.15761) >> >> Are we missing some cleandirs in dpkg[-base].class? > > Does the file exist and can not be written by builder, or does it not > exist and the dir must not receive new files. I am guessing the former > but have not clue why. > Maybe you can tell be how to reproduce this. The breakage comes from the UID and GID of builder inside the chroot. They are not in sync with the IDs used on the host side, so we can end up chown'ing to unknown user:group from host perspective. Either ensure that the IDs are synchronized or revert this commit for now. Jan -- Siemens AG, Corporate Technology, CT RDA IOT SES-DE Corporate Competence Center Embedded Linux