GNU bug report logs - #21410
[TEST-FAIL] 2 tests failed when running `make check' on Debian

Previous Next

To add a comment to this bug, you must first unarchive it, by sending
a message to control AT debbugs.gnu.org, with unarchive 21410 in the body.
You can then email your comments to 21410 AT debbugs.gnu.org in the normal way.

Toggle the display of automated, internal messages from the tracker.

Message #5 received at submit <at> debbugs.gnu.org (full text, mbox):

From: Alex Vong <alexvong1995 <at> gmail.com>
To: bug-guix <at> gnu.org
Subject: [TEST-FAIL] 2 tests failed when running `make check' on Debian
Date: Fri, 4 Sep 2015 14:44:40 +0800

Hi everyone,

I tried to compile Guix on Debian Sid,
the compilation succeeded,
but the 2 of the tests in the Testsuit failed.

The following is what commands I have run,
all commands are run as non-root:

$ git clone git://git.savannah.gnu.org/guix.git
$ cd guix
$ ./bootstrap
$ ./configure
$ make -j4
$ make -j4 check

The Testsuite summary (test-suite.log) is inlined below:

======================================
   GNU Guix 0.8.3: ./test-suite.log
======================================

# TOTAL: 47
# PASS:  45
# SKIP:  0
# XFAIL: 0
# FAIL:  2
# XPASS: 0
# ERROR: 0

.. contents:: :depth: 2

FAIL: tests/syscalls
====================

;;; note: source file ./srfi/srfi-64.scm
;;;       newer than compiled /usr/lib/x86_64-linux-gnu/guile/2.0/ccache/srfi/srfi-64.go
ERROR: In procedure primitive-load:
ERROR: In procedure scm_i_lreadparen: tests/syscalls.scm:128:14: end of file
%%%% Starting test syscalls  (Writing full log to "syscalls.log")
tests/syscalls.scm:85: FAIL clone
tests/syscalls.scm:98: FAIL setns
;;; note: source file ./srfi/srfi-64.scm
;;;       newer than compiled /usr/lib/x86_64-linux-gnu/guile/2.0/ccache/srfi/srfi-64.go
%%%% Starting test syscalls  (Writing full log to "syscalls.log")
tests/syscalls.scm:85: FAIL clone
tests/syscalls.scm:98: FAIL setns
tests/syscalls.scm:127: FAIL pivot-root
# of expected passes      15
# of unexpected failures  3

FAIL: tests/containers
======================

%%%% Starting test containers  (Writing full log to "containers.log")
tests/containers.scm:37: FAIL call-with-container, user namespace
tests/containers.scm:45: FAIL call-with-container, uts namespace
tests/containers.scm:55: FAIL call-with-container, pid namespace
tests/containers.scm:70: FAIL call-with-container, mnt namespace
tests/containers.scm:77: FAIL call-with-container, all namespaces
tests/containers.scm:83: FAIL container-excursion
# of unexpected failures  6
;;; note: source file ./srfi/srfi-64.scm
;;;       newer than compiled /usr/lib/x86_64-linux-gnu/guile/2.0/ccache/srfi/srfi-64.go
FAIL tests/containers.scm (exit status: 1)

Message #8 received at 21410 <at> debbugs.gnu.org (full text, mbox):

From: "Thompson, David" <dthompson2 <at> worcester.edu>
To: Alex Vong <alexvong1995 <at> gmail.com>
Cc: 21410 <at> debbugs.gnu.org
Subject: Re: bug#21410: [TEST-FAIL] 2 tests failed when running `make check'
 on Debian
Date: Fri, 4 Sep 2015 10:12:43 -0400

Hello Alex,

On Fri, Sep 4, 2015 at 2:44 AM, Alex Vong <alexvong1995 <at> gmail.com> wrote:
> Hi everyone,
>
> I tried to compile Guix on Debian Sid,
> the compilation succeeded,
> but the 2 of the tests in the Testsuit failed.
>
> The following is what commands I have run,
> all commands are run as non-root:
>
> $ git clone git://git.savannah.gnu.org/guix.git
> $ cd guix
> $ ./bootstrap
> $ ./configure
> $ make -j4
> $ make -j4 check
>
> The Testsuite summary (test-suite.log) is inlined below:
>
> ======================================
>    GNU Guix 0.8.3: ./test-suite.log
> ======================================
>
> # TOTAL: 47
> # PASS:  45
> # SKIP:  0
> # XFAIL: 0
> # FAIL:  2
> # XPASS: 0
> # ERROR: 0
>
> .. contents:: :depth: 2
>
> FAIL: tests/syscalls
> ====================
>
> ;;; note: source file ./srfi/srfi-64.scm
> ;;;       newer than compiled /usr/lib/x86_64-linux-gnu/guile/2.0/ccache/srfi/srfi-64.go
> ERROR: In procedure primitive-load:
> ERROR: In procedure scm_i_lreadparen: tests/syscalls.scm:128:14: end of file
> %%%% Starting test syscalls  (Writing full log to "syscalls.log")
> tests/syscalls.scm:85: FAIL clone
> tests/syscalls.scm:98: FAIL setns
> ;;; note: source file ./srfi/srfi-64.scm
> ;;;       newer than compiled /usr/lib/x86_64-linux-gnu/guile/2.0/ccache/srfi/srfi-64.go
> %%%% Starting test syscalls  (Writing full log to "syscalls.log")
> tests/syscalls.scm:85: FAIL clone
> tests/syscalls.scm:98: FAIL setns
> tests/syscalls.scm:127: FAIL pivot-root
> # of expected passes      15
> # of unexpected failures  3
>
> FAIL: tests/containers
> ======================
>
> %%%% Starting test containers  (Writing full log to "containers.log")
> tests/containers.scm:37: FAIL call-with-container, user namespace
> tests/containers.scm:45: FAIL call-with-container, uts namespace
> tests/containers.scm:55: FAIL call-with-container, pid namespace
> tests/containers.scm:70: FAIL call-with-container, mnt namespace
> tests/containers.scm:77: FAIL call-with-container, all namespaces
> tests/containers.scm:83: FAIL container-excursion
> # of unexpected failures  6
> ;;; note: source file ./srfi/srfi-64.scm
> ;;;       newer than compiled /usr/lib/x86_64-linux-gnu/guile/2.0/ccache/srfi/srfi-64.go
> FAIL tests/containers.scm (exit status: 1)

Could you attach the containers.log and syscalls.log files so I could
see some more detail?

Also,  what version of Linux and glibc are you using?

Thanks!

- Dave

Message #11 received at 21410 <at> debbugs.gnu.org (full text, mbox):

From: Alex Vong <alexvong1995 <at> gmail.com>
To: "Thompson, David" <dthompson2 <at> worcester.edu>, 21410 <at> debbugs.gnu.org
Subject: Re: bug#21410: [TEST-FAIL] 2 tests failed when running `make check'
 on Debian
Date: Fri, 4 Sep 2015 23:02:57 +0800

[Message part 1 (text/plain, inline)]

Hi Dave,

Please see the reply below.

2015-09-04 22:12 GMT+08:00, Thompson, David <dthompson2 <at> worcester.edu>:
> Hello Alex,
> 
> On Fri, Sep 4, 2015 at 2:44 AM, Alex Vong <alexvong1995 <at> gmail.com> wrote:
>> Hi everyone,
>>
>> I tried to compile Guix on Debian Sid,
>> the compilation succeeded,
>> but the 2 of the tests in the Testsuit failed.
>>
>> The following is what commands I have run,
>> all commands are run as non-root:
>>
>> $ git clone git://git.savannah.gnu.org/guix.git
>> $ cd guix
>> $ ./bootstrap
>> $ ./configure
>> $ make -j4
>> $ make -j4 check
>>
>> The Testsuite summary (test-suite.log) is inlined below:
>>
>> ======================================
>>    GNU Guix 0.8.3: ./test-suite.log
>> ======================================
>>
>> # TOTAL: 47
>> # PASS:  45
>> # SKIP:  0
>> # XFAIL: 0
>> # FAIL:  2
>> # XPASS: 0
>> # ERROR: 0
>>
>> .. contents:: :depth: 2
>>
>> FAIL: tests/syscalls
>> ====================
>>
>> ;;; note: source file ./srfi/srfi-64.scm
>> ;;;       newer than compiled
>> /usr/lib/x86_64-linux-gnu/guile/2.0/ccache/srfi/srfi-64.go
>> ERROR: In procedure primitive-load:
>> ERROR: In procedure scm_i_lreadparen: tests/syscalls.scm:128:14: end of
>> file
>> %%%% Starting test syscalls  (Writing full log to "syscalls.log")
>> tests/syscalls.scm:85: FAIL clone
>> tests/syscalls.scm:98: FAIL setns
>> ;;; note: source file ./srfi/srfi-64.scm
>> ;;;       newer than compiled
>> /usr/lib/x86_64-linux-gnu/guile/2.0/ccache/srfi/srfi-64.go
>> %%%% Starting test syscalls  (Writing full log to "syscalls.log")
>> tests/syscalls.scm:85: FAIL clone
>> tests/syscalls.scm:98: FAIL setns
>> tests/syscalls.scm:127: FAIL pivot-root
>> # of expected passes      15
>> # of unexpected failures  3
>>
>> FAIL: tests/containers
>> ======================
>>
>> %%%% Starting test containers  (Writing full log to "containers.log")
>> tests/containers.scm:37: FAIL call-with-container, user namespace
>> tests/containers.scm:45: FAIL call-with-container, uts namespace
>> tests/containers.scm:55: FAIL call-with-container, pid namespace
>> tests/containers.scm:70: FAIL call-with-container, mnt namespace
>> tests/containers.scm:77: FAIL call-with-container, all namespaces
>> tests/containers.scm:83: FAIL container-excursion
>> # of unexpected failures  6
>> ;;; note: source file ./srfi/srfi-64.scm
>> ;;;       newer than compiled
>> /usr/lib/x86_64-linux-gnu/guile/2.0/ccache/srfi/srfi-64.go
>> FAIL tests/containers.scm (exit status: 1)
> 
> Could you attach the containers.log and syscalls.log files so I could
> see some more detail?
> 
Sure, they are in the attahment.

> Also,  what version of Linux and glibc are you using?
> 
kernel version:

$ uname -a
Linux debian 4.1.0-2-amd64 #1 SMP Debian 4.1.6-1 (2015-08-23) x86_64 GNU/Linux

libc version:

$ LC_ALL=C ldd --version

ldd (Debian GLIBC 2.19-19) 2.19
Copyright (C) 2014 Free Software Foundation, Inc.
This is free software; see the source for copying conditions.  There is NO
warranty; not even for MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.
Written by Roland McGrath and Ulrich Drepper.

> Thanks!
> 
> - Dave
>

Thanks for the quick reply as well!

Cheers,
Alex

[containers.log (text/x-log, attachment)]

[syscalls.log (text/x-log, attachment)]

Message #14 received at 21410 <at> debbugs.gnu.org (full text, mbox):

From: ludo <at> gnu.org (Ludovic Courtès)
To: Alex Vong <alexvong1995 <at> gmail.com>
Cc: 21410 <at> debbugs.gnu.org, "Thompson, David" <dthompson2 <at> worcester.edu>
Subject: Re: bug#21410: [TEST-FAIL] 2 tests failed when running `make check'
 on Debian
Date: Fri, 04 Sep 2015 22:07:42 +0200

Alex Vong <alexvong1995 <at> gmail.com> skribis:

>   actual-error: (system-error "open-file" "~A: ~S" ("No such file or directory" "/proc/-1/setgroups") (2))

David, I think this is a shortcoming in the ‘clone’ wrapper: It should
throw to ‘system-error’ when the return value is -1, like the ‘setns’
wrapper does.

WDYT?

Ludo’.

Message #17 received at 21410 <at> debbugs.gnu.org (full text, mbox):

From: "Thompson, David" <dthompson2 <at> worcester.edu>
To: Ludovic Courtès <ludo <at> gnu.org>
Cc: 21410 <at> debbugs.gnu.org, Alex Vong <alexvong1995 <at> gmail.com>
Subject: Re: bug#21410: [TEST-FAIL] 2 tests failed when running `make check'
 on Debian
Date: Sat, 5 Sep 2015 08:49:02 -0400

On Fri, Sep 4, 2015 at 4:07 PM, Ludovic Courtès <ludo <at> gnu.org> wrote:
> Alex Vong <alexvong1995 <at> gmail.com> skribis:
>
>>   actual-error: (system-error "open-file" "~A: ~S" ("No such file or directory" "/proc/-1/setgroups") (2))
>
> David, I think this is a shortcoming in the ‘clone’ wrapper: It should
> throw to ‘system-error’ when the return value is -1, like the ‘setns’
> wrapper does.
>
> WDYT?

Yes, indeed.  I will push a patch and ask Alex to run the tests again
so we can see the real error string.

- Dave

Message #20 received at 21410 <at> debbugs.gnu.org (full text, mbox):

From: "Thompson, David" <dthompson2 <at> worcester.edu>
To: Ludovic Courtès <ludo <at> gnu.org>
Cc: 21410 <at> debbugs.gnu.org, Alex Vong <alexvong1995 <at> gmail.com>
Subject: Re: bug#21410: [TEST-FAIL] 2 tests failed when running `make check'
 on Debian
Date: Sat, 5 Sep 2015 13:43:57 -0400

On Fri, Sep 4, 2015 at 4:07 PM, Ludovic Courtès <ludo <at> gnu.org> wrote:
> Alex Vong <alexvong1995 <at> gmail.com> skribis:
>
>>   actual-error: (system-error "open-file" "~A: ~S" ("No such file or directory" "/proc/-1/setgroups") (2))
>
> David, I think this is a shortcoming in the ‘clone’ wrapper: It should
> throw to ‘system-error’ when the return value is -1, like the ‘setns’
> wrapper does.
>
> WDYT?

Fixed in cf897cb.

Alex, could you pull the master branch, run the tests, and send the
new log files?

Thanks!

- Dave

Message #23 received at 21410 <at> debbugs.gnu.org (full text, mbox):

From: "Thompson, David" <dthompson2 <at> worcester.edu>
To: Alex Vong <alexvong1995 <at> gmail.com>
Cc: 21410 <at> debbugs.gnu.org, Ludovic Courtès <ludo <at> gnu.org>
Subject: Re: bug#21410: [TEST-FAIL] 2 tests failed when running `make check'
 on Debian
Date: Sun, 6 Sep 2015 07:25:44 -0400

[ re-CCing Ludo and bug-guix ]

On Sun, Sep 6, 2015 at 12:30 AM, Alex Vong <alexvong1995 <at> gmail.com> wrote:
> Hi Dave,
>
> 2015-09-06 1:43 GMT+08:00, Thompson, David <dthompson2 <at> worcester.edu>:
>>
>> Fixed in cf897cb.
>>
>> Alex, could you pull the master branch, run the tests, and send the
>> new log files?
>>
>> Thanks!
>>
>> - Dave
>>
>
> Sure, they are in the attachment.
>
> The build is done using fresh git-clone.

Thanks.  So, the issue is that the clone(2) system call is failing
with the EPERM error code, meaning the operation is not permitted.
This is odd because all users are allowed to call 'clone' with the
CLONE_NEWUSER flag to create a process in a new user namespace.
However, the clone(2) man page specifies a couple of cases in which
this can fail:

    EPERM  CLONE_NEWUSER  was  specified in flags, but either the effective
           user ID or the effective group ID of the caller does not have  a
           mapping in the parent namespace (see user_namespaces(7)).

    EPERM (since Linux 3.9)
           CLONE_NEWUSER  was  specified  in  flags  and the caller is in a
           chroot environment (i.e., the caller's root directory  does  not
           match  the  root  directory  of  the mount namespace in which it
           resides).

Do any of these apply to you?  Are you in a chroot or otherwise
virtualized environment?  Anything else you can think of that could
cause this error would be appreciated.

Thanks,

- Dave

Message #26 received at 21410 <at> debbugs.gnu.org (full text, mbox):

From: Alex Vong <alexvong1995 <at> gmail.com>
To: dthompson2 <at> worcester.edu
Cc: 21410 <at> debbugs.gnu.org, ludo <at> gnu.org
Subject: Re: bug#21410: [TEST-FAIL] 2 tests failed when running `make check'
 on Debian
Date: Mon, 7 Sep 2015 09:47:41 +0800

Hi Dave,

I have searched the internet according to the information you provided,
I find this bug report <https://github.com/lxc/lxc/issues/250> provides useful information.
I have written an example program after going through the clone(2) man page.
It demonstrates the problem and is inlined below.

First, compile the program as `a.out'.

Consider shell session 1:

    root# echo 0 > /proc/sys/kernel/unprivileged_userns_clone
    user$ ./a.out
    I am your parent
    Start cloning...
    Cannot clone!

Consider shell session 2:

    root# echo 1 > /proc/sys/kernel/unprivileged_userns_clone
    user$ ./a.out
    I am your parent
    Start cloning...
    Cloned!
    I am your child

Any idea what's happenning?
I don't know Linux much, for instance I don't know what is container and namespace in Linux.

Thanks!

Cheers,
Alex

#define _GNU_SOURCE
#include <stdio.h>
#include <stdlib.h>
#include <string.h>
#include <errno.h>
#include <sched.h>
#include <sys/wait.h>
#include <unistd.h>

#define STACK_SIZE (1024 * 1024)

int
child(void *str)
{
  if (puts(str) < 0)
    return EXIT_FAILURE;
  else
    return EXIT_SUCCESS;
}

int
main(void)
{ void *func_ptr = &child;
  void *stack_base = malloc(STACK_SIZE);
  void *stack_top;
  int flag = CLONE_NEWUSER | SIGCHLD;
  char *msg = "I am your child";
  int errsv = 0;

  puts("I am your parent");
  puts("Start cloning...");

  stack_top = stack_base + STACK_SIZE;
  clone(func_ptr, stack_top, flag, msg);
  errsv = errno;

  if (!errsv)
    puts("Cloned!");
  else
    puts("Cannot clone!");
  return errsv;
}

Message #29 received at 21410 <at> debbugs.gnu.org (full text, mbox):

From: "Thompson, David" <dthompson2 <at> worcester.edu>
To: Alex Vong <alexvong1995 <at> gmail.com>
Cc: 21410 <at> debbugs.gnu.org, Ludovic Courtès <ludo <at> gnu.org>
Subject: Re: bug#21410: [TEST-FAIL] 2 tests failed when running `make check'
 on Debian
Date: Mon, 7 Sep 2015 15:42:34 -0400

[Message part 1 (text/plain, inline)]

On Sun, Sep 6, 2015 at 9:47 PM, Alex Vong <alexvong1995 <at> gmail.com> wrote:
> Hi Dave,
>
> I have searched the internet according to the information you provided,
> I find this bug report <https://github.com/lxc/lxc/issues/250> provides useful information.
> I have written an example program after going through the clone(2) man page.
> It demonstrates the problem and is inlined below.
>
> First, compile the program as `a.out'.
>
> Consider shell session 1:
>
>     root# echo 0 > /proc/sys/kernel/unprivileged_userns_clone
>     user$ ./a.out
>     I am your parent
>     Start cloning...
>     Cannot clone!
>
> Consider shell session 2:
>
>     root# echo 1 > /proc/sys/kernel/unprivileged_userns_clone
>     user$ ./a.out
>     I am your parent
>     Start cloning...
>     Cloned!
>     I am your child
>
> Any idea what's happenning?
> I don't know Linux much, for instance I don't know what is container and namespace in Linux.

It seems that the kernel you are using has disabled the use of
unprivileged user namespaces by default.  After doing that echo as
root, you should be able to run the tests successfully.  Could you
apply the attached patch and let me know if 'make check
TESTS=tests/syscalls.scm' and 'make check TESTS=tests/containers.scm'
pass in both when unprivileged user namespaces are disabled and when
they are enabled?

Thank you!

- Dave

[0001-tests-Detect-when-user-namespaces-are-disabled-for-u.patch (text/x-diff, attachment)]

Message #32 received at 21410 <at> debbugs.gnu.org (full text, mbox):

From: Alex Vong <alexvong1995 <at> gmail.com>
To: "Thompson, David" <dthompson2 <at> worcester.edu>
Cc: 21410 <at> debbugs.gnu.org, ludo <at> gnu.org
Subject: Re: bug#21410: [TEST-FAIL] 2 tests failed when running `make check'
 on Debian
Date: Wed, 9 Sep 2015 18:02:57 +0800

[Message part 1 (text/plain, inline)]

Hi Dave,

It appears that the patch doesn't quite work, now 20 tests failed
instead of 2. The log files are attached as a tar ball. I have tried
running the tests on the old source as well as on fresh new git clone.
In any case, 20 tests failed. I wonder why this happens.

Cheers,
Alex

2015-09-08 3:42 GMT+08:00, Thompson, David <dthompson2 <at> worcester.edu>:
> On Sun, Sep 6, 2015 at 9:47 PM, Alex Vong <alexvong1995 <at> gmail.com> wrote:
>> Hi Dave,
>>
>> I have searched the internet according to the information you provided,
>> I find this bug report <https://github.com/lxc/lxc/issues/250> provides
>> useful information.
>> I have written an example program after going through the clone(2) man
>> page.
>> It demonstrates the problem and is inlined below.
>>
>> First, compile the program as `a.out'.
>>
>> Consider shell session 1:
>>
>>     root# echo 0 > /proc/sys/kernel/unprivileged_userns_clone
>>     user$ ./a.out
>>     I am your parent
>>     Start cloning...
>>     Cannot clone!
>>
>> Consider shell session 2:
>>
>>     root# echo 1 > /proc/sys/kernel/unprivileged_userns_clone
>>     user$ ./a.out
>>     I am your parent
>>     Start cloning...
>>     Cloned!
>>     I am your child
>>
>> Any idea what's happenning?
>> I don't know Linux much, for instance I don't know what is container and
>> namespace in Linux.
>
> It seems that the kernel you are using has disabled the use of
> unprivileged user namespaces by default.  After doing that echo as
> root, you should be able to run the tests successfully.  Could you
> apply the attached patch and let me know if 'make check
> TESTS=tests/syscalls.scm' and 'make check TESTS=tests/containers.scm'
> pass in both when unprivileged user namespaces are disabled and when
> they are enabled?
>
> Thank you!
>
> - Dave
>

[guix.tar.xz (application/x-xz, attachment)]

Message #35 received at 21410 <at> debbugs.gnu.org (full text, mbox):

From: Alex Vong <alexvong1995 <at> gmail.com>
To: "Thompson, David" <dthompson2 <at> worcester.edu>
Cc: 21410 <at> debbugs.gnu.org, ludo <at> gnu.org
Subject: Re: bug#21410: [TEST-FAIL] 2 tests failed when running `make check'
 on Debian
Date: Tue, 15 Sep 2015 19:24:07 +0800

Hi everyone,

Any idea on the latest test failure?

By the way, is the failure critical? Can I start doing packaging work for guix?

Cheers,
Alex

2015-09-09 18:02 GMT+08:00, Alex Vong <alexvong1995 <at> gmail.com>:
> Hi Dave,
>
> It appears that the patch doesn't quite work, now 20 tests failed
> instead of 2. The log files are attached as a tar ball. I have tried
> running the tests on the old source as well as on fresh new git clone.
> In any case, 20 tests failed. I wonder why this happens.
>
> Cheers,
> Alex
>
> 2015-09-08 3:42 GMT+08:00, Thompson, David <dthompson2 <at> worcester.edu>:
>> On Sun, Sep 6, 2015 at 9:47 PM, Alex Vong <alexvong1995 <at> gmail.com> wrote:
>>> Hi Dave,
>>>
>>> I have searched the internet according to the information you provided,
>>> I find this bug report <https://github.com/lxc/lxc/issues/250> provides
>>> useful information.
>>> I have written an example program after going through the clone(2) man
>>> page.
>>> It demonstrates the problem and is inlined below.
>>>
>>> First, compile the program as `a.out'.
>>>
>>> Consider shell session 1:
>>>
>>>     root# echo 0 > /proc/sys/kernel/unprivileged_userns_clone
>>>     user$ ./a.out
>>>     I am your parent
>>>     Start cloning...
>>>     Cannot clone!
>>>
>>> Consider shell session 2:
>>>
>>>     root# echo 1 > /proc/sys/kernel/unprivileged_userns_clone
>>>     user$ ./a.out
>>>     I am your parent
>>>     Start cloning...
>>>     Cloned!
>>>     I am your child
>>>
>>> Any idea what's happenning?
>>> I don't know Linux much, for instance I don't know what is container and
>>> namespace in Linux.
>>
>> It seems that the kernel you are using has disabled the use of
>> unprivileged user namespaces by default.  After doing that echo as
>> root, you should be able to run the tests successfully.  Could you
>> apply the attached patch and let me know if 'make check
>> TESTS=tests/syscalls.scm' and 'make check TESTS=tests/containers.scm'
>> pass in both when unprivileged user namespaces are disabled and when
>> they are enabled?
>>
>> Thank you!
>>
>> - Dave
>>
>

Message #38 received at 21410 <at> debbugs.gnu.org (full text, mbox):

From: "Thompson, David" <dthompson2 <at> worcester.edu>
To: Alex Vong <alexvong1995 <at> gmail.com>
Cc: 21410 <at> debbugs.gnu.org, Ludovic Courtès <ludo <at> gnu.org>
Subject: Re: bug#21410: [TEST-FAIL] 2 tests failed when running `make check'
 on Debian
Date: Tue, 15 Sep 2015 10:20:50 -0400

On Tue, Sep 15, 2015 at 7:24 AM, Alex Vong <alexvong1995 <at> gmail.com> wrote:
> Hi everyone,
>
> Any idea on the latest test failure?

I'm not sure yet, sorry.  Haven't been able to dig back into it.

> By the way, is the failure critical? Can I start doing packaging work for guix?

This isn't a blocking issue.  These tests are for an incoming feature
that is separate from the standard packaging workflow.  Don't let
these test failures stop you from contributing. :)

We'll figure out the failures soon when I have more time to dedicate
to bug hunting.

Thanks and sorry for the delay,

- Dave

Message #41 received at 21410 <at> debbugs.gnu.org (full text, mbox):

From: Alex Vong <alexvong1995 <at> gmail.com>
To: "Thompson, David" <dthompson2 <at> worcester.edu>
Cc: 21410 <at> debbugs.gnu.org, ludo <at> gnu.org
Subject: Re: bug#21410: [TEST-FAIL] 2 tests failed when running `make check'
 on Debian
Date: Tue, 15 Sep 2015 23:06:55 +0800

Hi Dave,

Thanks for the reply! No need to feel sorry, you are being very active
on the guile-user mailing list. I will start to read the documentation
then.

Cheers,
Alex

2015-09-15 22:20 GMT+08:00, Thompson, David <dthompson2 <at> worcester.edu>:
> On Tue, Sep 15, 2015 at 7:24 AM, Alex Vong <alexvong1995 <at> gmail.com> wrote:
>> Hi everyone,
>>
>> Any idea on the latest test failure?
>
> I'm not sure yet, sorry.  Haven't been able to dig back into it.
>
>> By the way, is the failure critical? Can I start doing packaging work for
>> guix?
>
> This isn't a blocking issue.  These tests are for an incoming feature
> that is separate from the standard packaging workflow.  Don't let
> these test failures stop you from contributing. :)
>
> We'll figure out the failures soon when I have more time to dedicate
> to bug hunting.
>
> Thanks and sorry for the delay,
>
> - Dave
>

Message #44 received at 21410 <at> debbugs.gnu.org (full text, mbox):

From: Alex Vong <alexvong1995 <at> gmail.com>
To: Ludovic Courtès <ludo <at> gnu.org>
Cc: guix-devel <guix-devel <at> gnu.org>, 21410 <at> debbugs.gnu.org, "Thompson,
 David" <dthompson2 <at> worcester.edu>
Subject: Re: Environment containers
Date: Wed, 28 Oct 2015 21:10:11 +0800

[Message part 1 (text/plain, inline)]

Hi everyone,

On 27/10/2015, Ludovic Courtès <ludo <at> gnu.org> wrote:
> Alex Vong <alexvong1995 <at> gmail.com> skribis:
>
>> On 26/10/2015, Thompson, David <dthompson2 <at> worcester.edu> wrote:
>>> On Mon, Oct 26, 2015 at 10:37 AM, Taylan Ulrich Bayırlı/Kammer
>>> <taylanbayirli <at> gmail.com> wrote:
>>>
>>>> Also, for Debian 8 users and maybe others, this might help:
>>>>
>>>>     sudo sysctl -w kernel.unprivileged_userns_clone=1
>>>
>>> Yes, user namespaces are a must-have for this to work.  I will prepare
>>> patches that mention this in the manual and add a test to 'guix
>>> environment' that can detect if user namespaces are unavailable and
>>> display a more helpful error message.
>>>
>> I think the patch could be considered a fix for
>> <https://debbugs.gnu.org/cgi/bugreport.cgi?bug=21410> as well. How do
>> you think?
>
> Do you still experience the test failures mentioned in that report?  If
> not, could you email 21410 <at> debbugs.gnu.org, specifying which commit
> works for you?
>
Yes, there are 4 tests still failing with the latest master branch
without unprivileged container.
But there is a new problem, tests/guix-environment-container.sh fails
even when running the tests as root. The test log is in the
attachment. I am running Debian 8, could anyone verify this? I would
also like to try it on Debian unstable, but currently my PC cannot
boot, I am using my old laptop.

> I suspect 0e3cc31 helped.
>
> Thanks,
> Ludo’.
>

Cheers,
Alex

[guix-environment-container.log (text/x-log, attachment)]

Message #47 received at 21410 <at> debbugs.gnu.org (full text, mbox):

From: ludo <at> gnu.org (Ludovic Courtès)
To: Alex Vong <alexvong1995 <at> gmail.com>
Cc: guix-devel <guix-devel <at> gnu.org>, 21410 <at> debbugs.gnu.org, "Thompson,
 David" <dthompson2 <at> worcester.edu>
Subject: Re: Environment containers
Date: Wed, 28 Oct 2015 15:45:01 +0100

[Message part 1 (text/plain, inline)]

Alex Vong <alexvong1995 <at> gmail.com> skribis:

> On 27/10/2015, Ludovic Courtès <ludo <at> gnu.org> wrote:

[...]

>> Do you still experience the test failures mentioned in that report?  If
>> not, could you email 21410 <at> debbugs.gnu.org, specifying which commit
>> works for you?
>>
> Yes, there are 4 tests still failing with the latest master branch
> without unprivileged container.

Which tests?  Does tests/container.scm pass?

> But there is a new problem, tests/guix-environment-container.sh fails
> even when running the tests as root. The test log is in the
> attachment.

[...]

> (for-each (lambda (mount)
>             (display mount)
>             (newline))
>           mappings)'
> accepted connection from pid 9627, user root (trusted)
> ++ wc -l
> + test 4 -eq 3

Could you apply the patch below, run:

  make check TESTS=tests/guix-environment-container.sh

and send ‘guix-environment-container.log’?

Also, what does:

  make check TESTS=tests/container.scm

report?

TIA!

Ludo’.

[Message part 2 (text/x-patch, inline)]

--- a/tests/guix-environment-container.sh
+++ b/tests/guix-environment-container.sh
@@ -66,6 +66,7 @@ mount_test_code="
 guix environment --container --ad-hoc --bootstrap guile-bootstrap \
      -- guile -c "$mount_test_code" > $tmpdir/mounts
 
+cat $tmpdir/mounts
 test `wc -l < $tmpdir/mounts` -eq 3
 
 grep -e "$PWD$" $tmpdir/mounts # current directory

Message #50 received at 21410 <at> debbugs.gnu.org (full text, mbox):

From: Alex Vong <alexvong1995 <at> gmail.com>
To: Ludovic Courtès <ludo <at> gnu.org>
Cc: guix-devel <guix-devel <at> gnu.org>, 21410 <at> debbugs.gnu.org, "Thompson,
 David" <dthompson2 <at> worcester.edu>
Subject: Re: Environment containers
Date: Wed, 28 Oct 2015 23:14:54 +0800

[Message part 1 (text/plain, inline)]

On 28/10/2015, Ludovic Courtès <ludo <at> gnu.org> wrote:
> Alex Vong <alexvong1995 <at> gmail.com> skribis:
>
>> On 27/10/2015, Ludovic Courtès <ludo <at> gnu.org> wrote:
>
> [...]
>
>>> Do you still experience the test failures mentioned in that report?  If
>>> not, could you email 21410 <at> debbugs.gnu.org, specifying which commit
>>> works for you?
>>>
>> Yes, there are 4 tests still failing with the latest master branch
>> without unprivileged container.
>
> Which tests?  Does tests/container.scm pass?
>
It doesn't pass if I run as unprivileged user. It passes if I run as
root. I will be mailing the test logs on another mail.

>> But there is a new problem, tests/guix-environment-container.sh fails
>> even when running the tests as root. The test log is in the
>> attachment.
>
> [...]
>
>> (for-each (lambda (mount)
>>             (display mount)
>>             (newline))
>>           mappings)'
>> accepted connection from pid 9627, user root (trusted)
>> ++ wc -l
>> + test 4 -eq 3
>
> Could you apply the patch below, run:
>
>   make check TESTS=tests/guix-environment-container.sh
>
> and send ‘guix-environment-container.log’?
>
Sure! It is in the attachment. (Note that I run the test as root to
bypass the unprivileged container issue.)

> Also, what does:
>
>   make check TESTS=tests/container.scm
>
> report?
>
I will send the test log in another mail.

> TIA!
>
> Ludo’.
>
>

Cheers,
Alex

[guix-environment-container.log (text/x-log, attachment)]

Message #53 received at 21410 <at> debbugs.gnu.org (full text, mbox):

From: "Thompson, David" <dthompson2 <at> worcester.edu>
To: Alex Vong <alexvong1995 <at> gmail.com>
Cc: guix-devel <guix-devel <at> gnu.org>, 21410 <at> debbugs.gnu.org,
 Ludovic Courtès <ludo <at> gnu.org>
Subject: Re: Environment containers
Date: Wed, 28 Oct 2015 11:20:03 -0400

On Wed, Oct 28, 2015 at 11:14 AM, Alex Vong <alexvong1995 <at> gmail.com> wrote:
> On 28/10/2015, Ludovic Courtès <ludo <at> gnu.org> wrote:
>> Alex Vong <alexvong1995 <at> gmail.com> skribis:
>>
>>> On 27/10/2015, Ludovic Courtès <ludo <at> gnu.org> wrote:
>>
>> [...]
>>
>>>> Do you still experience the test failures mentioned in that report?  If
>>>> not, could you email 21410 <at> debbugs.gnu.org, specifying which commit
>>>> works for you?
>>>>
>>> Yes, there are 4 tests still failing with the latest master branch
>>> without unprivileged container.
>>
>> Which tests?  Does tests/container.scm pass?
>>
> It doesn't pass if I run as unprivileged user. It passes if I run as
> root. I will be mailing the test logs on another mail.

This is because Debian doesn't let unprivileged users create user
namespaces without explicitly overriding some configuration.

- Dave

Message #56 received at 21410 <at> debbugs.gnu.org (full text, mbox):

From: ludo <at> gnu.org (Ludovic Courtès)
To: "Thompson\, David" <dthompson2 <at> worcester.edu>
Cc: guix-devel <guix-devel <at> gnu.org>, 21410 <at> debbugs.gnu.org,
 Alex Vong <alexvong1995 <at> gmail.com>
Subject: Re: Environment containers
Date: Wed, 28 Oct 2015 16:56:40 +0100

"Thompson, David" <dthompson2 <at> worcester.edu> skribis:

> On Wed, Oct 28, 2015 at 11:14 AM, Alex Vong <alexvong1995 <at> gmail.com> wrote:
>> On 28/10/2015, Ludovic Courtès <ludo <at> gnu.org> wrote:
>>> Alex Vong <alexvong1995 <at> gmail.com> skribis:
>>>
>>>> On 27/10/2015, Ludovic Courtès <ludo <at> gnu.org> wrote:
>>>
>>> [...]
>>>
>>>>> Do you still experience the test failures mentioned in that report?  If
>>>>> not, could you email 21410 <at> debbugs.gnu.org, specifying which commit
>>>>> works for you?
>>>>>
>>>> Yes, there are 4 tests still failing with the latest master branch
>>>> without unprivileged container.
>>>
>>> Which tests?  Does tests/container.scm pass?
>>>
>> It doesn't pass if I run as unprivileged user. It passes if I run as
>> root. I will be mailing the test logs on another mail.
>
> This is because Debian doesn't let unprivileged users create user
> namespaces without explicitly overriding some configuration.

How could we determine whether this restriction is in place?  That would
allow us to skip the test on these systems.

Ludo’.

Message #59 received at 21410 <at> debbugs.gnu.org (full text, mbox):

From: "Thompson, David" <dthompson2 <at> worcester.edu>
To: Ludovic Courtès <ludo <at> gnu.org>
Cc: guix-devel <guix-devel <at> gnu.org>, 21410 <at> debbugs.gnu.org,
 Alex Vong <alexvong1995 <at> gmail.com>
Subject: Re: Environment containers
Date: Wed, 28 Oct 2015 12:08:01 -0400

On Wed, Oct 28, 2015 at 11:56 AM, Ludovic Courtès <ludo <at> gnu.org> wrote:
> "Thompson, David" <dthompson2 <at> worcester.edu> skribis:
>
>> On Wed, Oct 28, 2015 at 11:14 AM, Alex Vong <alexvong1995 <at> gmail.com> wrote:
>>> On 28/10/2015, Ludovic Courtès <ludo <at> gnu.org> wrote:
>>>> Alex Vong <alexvong1995 <at> gmail.com> skribis:
>>>>
>>>>> On 27/10/2015, Ludovic Courtès <ludo <at> gnu.org> wrote:
>>>>
>>>> [...]
>>>>
>>>>>> Do you still experience the test failures mentioned in that report?  If
>>>>>> not, could you email 21410 <at> debbugs.gnu.org, specifying which commit
>>>>>> works for you?
>>>>>>
>>>>> Yes, there are 4 tests still failing with the latest master branch
>>>>> without unprivileged container.
>>>>
>>>> Which tests?  Does tests/container.scm pass?
>>>>
>>> It doesn't pass if I run as unprivileged user. It passes if I run as
>>> root. I will be mailing the test logs on another mail.
>>
>> This is because Debian doesn't let unprivileged users create user
>> namespaces without explicitly overriding some configuration.
>
> How could we determine whether this restriction is in place?  That would
> allow us to skip the test on these systems.

I think it is /proc/sys/kernel/unprivileged_userns_clone, but I don't
know what the contents are exactly.  0 when off, 1 when on?  Can
someone on Debian confirm?

If we can get the test suite passing, I'd like to extract these user
namespace presence tests to a procedure that 'guix environment' can
use to give the user an informative error message in these cases.

- Dave

Message #62 received at 21410 <at> debbugs.gnu.org (full text, mbox):

From: Alex Vong <alexvong1995 <at> gmail.com>
To: "Thompson, David" <dthompson2 <at> worcester.edu>
Cc: guix-devel <guix-devel <at> gnu.org>, 21410 <at> debbugs.gnu.org,
 Ludovic Courtès <ludo <at> gnu.org>
Subject: Re: Environment containers
Date: Thu, 29 Oct 2015 00:20:38 +0800

On 29/10/2015, Thompson, David <dthompson2 <at> worcester.edu> wrote:
> On Wed, Oct 28, 2015 at 11:56 AM, Ludovic Courtès <ludo <at> gnu.org> wrote:
>> "Thompson, David" <dthompson2 <at> worcester.edu> skribis:
>>
>>> On Wed, Oct 28, 2015 at 11:14 AM, Alex Vong <alexvong1995 <at> gmail.com>
>>> wrote:
>>>> On 28/10/2015, Ludovic Courtès <ludo <at> gnu.org> wrote:
>>>>> Alex Vong <alexvong1995 <at> gmail.com> skribis:
>>>>>
>>>>>> On 27/10/2015, Ludovic Courtès <ludo <at> gnu.org> wrote:
>>>>>
>>>>> [...]
>>>>>
>>>>>>> Do you still experience the test failures mentioned in that report?
>>>>>>> If
>>>>>>> not, could you email 21410 <at> debbugs.gnu.org, specifying which commit
>>>>>>> works for you?
>>>>>>>
>>>>>> Yes, there are 4 tests still failing with the latest master branch
>>>>>> without unprivileged container.
>>>>>
>>>>> Which tests?  Does tests/container.scm pass?
>>>>>
>>>> It doesn't pass if I run as unprivileged user. It passes if I run as
>>>> root. I will be mailing the test logs on another mail.
>>>
>>> This is because Debian doesn't let unprivileged users create user
>>> namespaces without explicitly overriding some configuration.
>>
>> How could we determine whether this restriction is in place?  That would
>> allow us to skip the test on these systems.
>
> I think it is /proc/sys/kernel/unprivileged_userns_clone, but I don't
> know what the contents are exactly.  0 when off, 1 when on?  Can
> someone on Debian confirm?
>
Yes, I think that's the case.
Before I run `$ sysctl -w kernel.unprivileged_userns_clone=1',
`$ cat /proc/sys/kernel/unprivileged_userns_clone' returns 0.
After I run `$ sysctl -w kernel.unprivileged_userns_clone=1',
`$ cat /proc/sys/kernel/unprivileged_userns_clone' returns 1.

> If we can get the test suite passing, I'd like to extract these user
> namespace presence tests to a procedure that 'guix environment' can
> use to give the user an informative error message in these cases.
>
> - Dave
>

Message #65 received at 21410 <at> debbugs.gnu.org (full text, mbox):

From: ludo <at> gnu.org (Ludovic Courtès)
To: "Thompson\, David" <dthompson2 <at> worcester.edu>
Cc: guix-devel <guix-devel <at> gnu.org>, 21410 <at> debbugs.gnu.org,
 Alex Vong <alexvong1995 <at> gmail.com>
Subject: Re: Environment containers
Date: Thu, 29 Oct 2015 20:24:04 +0100

"Thompson, David" <dthompson2 <at> worcester.edu> skribis:

> I think it is /proc/sys/kernel/unprivileged_userns_clone, but I don't
> know what the contents are exactly.  0 when off, 1 when on?  Can
> someone on Debian confirm?
>
> If we can get the test suite passing, I'd like to extract these user
> namespace presence tests to a procedure that 'guix environment' can
> use to give the user an informative error message in these cases.

That would be perfect.

The test machinery would still need to test them explicitly, though, to
mark tests as skipped instead of failed.

Ludo’.

Message #68 received at 21410 <at> debbugs.gnu.org (full text, mbox):

From: "Thompson, David" <dthompson2 <at> worcester.edu>
To: Ludovic Courtès <ludo <at> gnu.org>
Cc: guix-devel <guix-devel <at> gnu.org>, 21410 <at> debbugs.gnu.org,
 Alex Vong <alexvong1995 <at> gmail.com>
Subject: Re: Environment containers
Date: Thu, 29 Oct 2015 15:25:50 -0400

On Thu, Oct 29, 2015 at 3:24 PM, Ludovic Courtès <ludo <at> gnu.org> wrote:
> "Thompson, David" <dthompson2 <at> worcester.edu> skribis:
>
>> I think it is /proc/sys/kernel/unprivileged_userns_clone, but I don't
>> know what the contents are exactly.  0 when off, 1 when on?  Can
>> someone on Debian confirm?
>>
>> If we can get the test suite passing, I'd like to extract these user
>> namespace presence tests to a procedure that 'guix environment' can
>> use to give the user an informative error message in these cases.
>
> That would be perfect.
>
> The test machinery would still need to test them explicitly, though, to
> mark tests as skipped instead of failed.

Yes, of course.  I have no intention of removing those checks from the tests.

- Dave

Message #71 received at 21410 <at> debbugs.gnu.org (full text, mbox):

From: ludo <at> gnu.org (Ludovic Courtès)
To: "Thompson\, David" <dthompson2 <at> worcester.edu>
Cc: guix-devel <guix-devel <at> gnu.org>, 21410 <at> debbugs.gnu.org,
 Alex Vong <alexvong1995 <at> gmail.com>
Subject: Re: bug#21410: Environment containers
Date: Fri, 20 Nov 2015 15:51:42 +0100

What’s the status of this now?  I would think b7d48312 addressed at
least part of it?

Alex: Are you still getting test failures with current ‘master’?

TIA,
Ludo’.

Message #74 received at 21410 <at> debbugs.gnu.org (full text, mbox):

From: Alex Vong <alexvong1995 <at> gmail.com>
To: Ludovic Courtès <ludo <at> gnu.org>
Cc: guix-devel <guix-devel <at> gnu.org>, 21410 <at> debbugs.gnu.org, "Thompson,
 David" <dthompson2 <at> worcester.edu>
Subject: Re: bug#21410: Environment containers
Date: Sat, 21 Nov 2015 21:36:31 +0800

[Message part 1 (text/plain, inline)]

Hi,

On 20/11/2015, Ludovic Courtès <ludo <at> gnu.org> wrote:
> What’s the status of this now?  I would think b7d48312 addressed at
> least part of it?
>
> Alex: Are you still getting test failures with current ‘master’?
>
> TIA,
> Ludo’.
>

Yes, I still get a test failure with the latest master branch, the
test log is in the attachment.

Cheers,
Alex

[test-suite.log (text/x-log, attachment)]

Message #77 received at 21410 <at> debbugs.gnu.org (full text, mbox):

From: ludo <at> gnu.org (Ludovic Courtès)
To: Alex Vong <alexvong1995 <at> gmail.com>
Cc: guix-devel <guix-devel <at> gnu.org>, 21410 <at> debbugs.gnu.org, "Thompson,
 David" <dthompson2 <at> worcester.edu>
Subject: Re: bug#21410: Environment containers
Date: Sat, 21 Nov 2015 16:57:30 +0100

[Message part 1 (text/plain, inline)]

Alex Vong <alexvong1995 <at> gmail.com> skribis:

> FAIL: tests/guix-environment-container
> ======================================
>
> + set -e
> + guix environment --version
> guix environment (GNU Guix) 0.9.0
> Copyright (C) 2015 the Guix authors
> License GPLv3+: GNU GPL version 3 or later <http://gnu.org/licenses/gpl.html>
> This is free software: you are free to change and redistribute it.
> There is NO WARRANTY, to the extent permitted by law.
> + tmpdir=t-guix-environment-29930
> + trap 'rm -r "$tmpdir"' EXIT
> + mkdir t-guix-environment-29930
> + guix environment --container --ad-hoc --bootstrap guile-bootstrap -- guile -c '(exit 42)'
> guix environment: error: cannot create container: unprivileged user cannot create user namespaces
> guix environment: error: please set /proc/sys/kernel/unprivileged_userns_clone to "1"

Oh I see, that part fell through the cracks.

Could you confirm that the test is skipped with the attached patch?

TIA!

Ludo’.

[Message part 2 (text/x-patch, inline)]

--- a/tests/guix-environment-container.sh
+++ b/tests/guix-environment-container.sh
@@ -24,6 +24,12 @@ set -e
 
 guix environment --version
 
+if ! guile -c '((@@ (guix scripts environment) assert-container-features))'
+then
+    # User containers are not supported; skip this test.
+    exit 77
+fi
+
 tmpdir="t-guix-environment-$$"
 trap 'rm -r "$tmpdir"' EXIT
 

Message #80 received at 21410 <at> debbugs.gnu.org (full text, mbox):

From: Mathieu Lirzin <mthl <at> gnu.org>
To: ludo <at> gnu.org (Ludovic Courtès)
Cc: guix-devel <guix-devel <at> gnu.org>, 21410 <at> debbugs.gnu.org,
 Alex Vong <alexvong1995 <at> gmail.com>
Subject: Re: bug#21410: Environment containers
Date: Sat, 21 Nov 2015 18:47:34 +0100

ludo <at> gnu.org (Ludovic Courtès) writes:

>
>> FAIL: tests/guix-environment-container
>> ======================================
>>
>> + set -e
>> + guix environment --version
>> guix environment (GNU Guix) 0.9.0
>> Copyright (C) 2015 the Guix authors
>> License GPLv3+: GNU GPL version 3 or later <http://gnu.org/licenses/gpl.html>
>> This is free software: you are free to change and redistribute it.
>> There is NO WARRANTY, to the extent permitted by law.
>> + tmpdir=t-guix-environment-29930
>> + trap 'rm -r "$tmpdir"' EXIT
>> + mkdir t-guix-environment-29930
>> + guix environment --container --ad-hoc --bootstrap guile-bootstrap -- guile -c '(exit 42)'
>> guix environment: error: cannot create container: unprivileged user cannot create user namespaces
>> guix environment: error: please set /proc/sys/kernel/unprivileged_userns_clone to "1"
>
> Oh I see, that part fell through the cracks.
>
> Could you confirm that the test is skipped with the attached patch?

this test was failing on my system too, and it is skipped successfully
with this patch.

--
Mathieu Lirzin

Message #85 received at 21410-done <at> debbugs.gnu.org (full text, mbox):

From: ludo <at> gnu.org (Ludovic Courtès)
To: Mathieu Lirzin <mthl <at> gnu.org>
Cc: guix-devel <guix-devel <at> gnu.org>, 21410-done <at> debbugs.gnu.org,
 Alex Vong <alexvong1995 <at> gmail.com>
Subject: Re: bug#21410: Environment containers
Date: Sat, 21 Nov 2015 22:27:37 +0100

Mathieu Lirzin <mthl <at> gnu.org> skribis:

> ludo <at> gnu.org (Ludovic Courtès) writes:
>
>>
>>> FAIL: tests/guix-environment-container
>>> ======================================
>>>
>>> + set -e
>>> + guix environment --version
>>> guix environment (GNU Guix) 0.9.0
>>> Copyright (C) 2015 the Guix authors
>>> License GPLv3+: GNU GPL version 3 or later <http://gnu.org/licenses/gpl.html>
>>> This is free software: you are free to change and redistribute it.
>>> There is NO WARRANTY, to the extent permitted by law.
>>> + tmpdir=t-guix-environment-29930
>>> + trap 'rm -r "$tmpdir"' EXIT
>>> + mkdir t-guix-environment-29930
>>> + guix environment --container --ad-hoc --bootstrap guile-bootstrap -- guile -c '(exit 42)'
>>> guix environment: error: cannot create container: unprivileged user cannot create user namespaces
>>> guix environment: error: please set /proc/sys/kernel/unprivileged_userns_clone to "1"
>>
>> Oh I see, that part fell through the cracks.
>>
>> Could you confirm that the test is skipped with the attached patch?
>
> this test was failing on my system too, and it is skipped successfully
> with this patch.

Thanks, pushed as 6493fd0.

Ludo’.

Previous Next

GNU bug tracking system
Copyright (C) 1999 Darren O. Benham, 1997,2003 nCipher Corporation Ltd, 1994-97 Ian Jackson.