Re: [pkg-apparmor] Bug#1050256: autopkgtest fails on debci

[Michael Biebl <biebl@debian.org>]

Am 01.09.23 um 13:23 schrieb Michael Biebl:
> The only way to fix the container was to use the aforementioned 
> `lxc.apparmor.profile = unconfined`.
> I think we should do that as the breakage is rather widespread and I 
> already see individual packages trying to work around that to at least 
> keep debci afloat.
>
> See e.g.:
> https://salsa.debian.org/systemd-team/systemd/-/merge_requests/211
> https://salsa.debian.org/debian/pdns/-/commit/637e54ef73386541086da430553b82db78266bac
>
> or disabling the systemd hardening options completely_
> https://salsa.debian.org/utopia-team/polkit/-/blob/master/debian/patches/debian/Don-t-use-PrivateNetwork-yes-for-the-systemd-unit.patch
>
> This is not a good outcome of this and the problem will become more 
> apparent with debci running on bookworm now.

I went ahead and submitted
https://salsa.debian.org/lxc-team/lxc/-/merge_requests/18
since I don't see another solution atm.

Looping in the release team as well for their input.


Regards,
Michael

Attachment: OpenPGP_signature.asc
Description: OpenPGP digital signature