Bug#833503: autopkgtest: accesses the internet during build

[Chris Lamb]

Source: autopkgtest
Version: 4.0.3
Severity: serious
Justification: Policy 4.9
User: lamby at debian.org
Usertags: network-access

Dear Maintainer,

Whilst autopkgtest builds successfully on unstable/amd64, according to
Debian Policy 4.9 packages may not attempt network access during
a build.

The culprit seems to be:

 testbed.satisfy_dependencies_string('git, ca-certificates', 'install git for --git-source')

in runner/autopkgtest.

  2016-08-05 08:57:30.904700 IP 172.16.42.255.39212 > 10.0.1.1.domain: 1138+ SRV? _http._tcp.httpredir.debian.org. (49)
  2016-08-05 08:57:30.906362 IP 10.0.1.1.domain > 172.16.42.255.39212: 1138 NXDomain* 0/0/0 (49)
  2016-08-05 08:57:30.906785 IP 172.16.42.255.41134 > httpredir.debian.org.http: Flags [S], seq 1490473331, win 29200, options [mss 1460,sackOK,TS val 105543481 ecr 0,nop,wscale 7], length 0
  2016-08-05 08:57:30.906856 IP httpredir.debian.org.http > 172.16.42.255.41134: Flags [S.], seq 875435214, ack 1490473332, win 28960, options [mss 1460,sackOK,TS val 105543481 ecr 105543481,nop,wscale 7], length 0
  2016-08-05 08:57:30.906868 IP 172.16.42.255.41134 > httpredir.debian.org.http: Flags [.], ack 1, win 229, options [nop,nop,TS val 105543481 ecr 105543481], length 0
  2016-08-05 08:57:30.906960 IP 172.16.42.255.41134 > httpredir.debian.org.http: Flags [P.], seq 1:158, ack 1, win 229, options [nop,nop,TS val 105543481 ecr 105543481], length 157: HTTP: GET /debian/pool/main/c/ca-certificates/ca-certificates_20160104_all.deb HTTP/1.1
  2016-08-05 08:57:30.906988 IP httpredir.debian.org.http > 172.16.42.255.41134: Flags [.], ack 158, win 235, options [nop,nop,TS val 105543481 ecr 105543481], length 0
  2016-08-05 08:57:30.907110 IP httpredir.debian.org.http > 172.16.42.255.41134: Flags [.], seq 1:7241, ack 158, win 235, options [nop,nop,TS val 105543481 ecr 105543481], length 7240: HTTP: HTTP/1.1 200 OK
  2016-08-05 08:57:30.907134 IP 172.16.42.255.41134 > httpredir.debian.org.http: Flags [.], ack 7241, win 342, options [nop,nop,TS val 105543481 ecr 105543481], length 0
  2016-08-05 08:57:30.907197 IP httpredir.debian.org.http > 172.16.42.255.41134: Flags [.], seq 7241:14481, ack 158, win 235, options [nop,nop,TS val 105543481 ecr 105543481], length 7240: HTTP

  [..]

The full build log (including tcpdump output) is attached.


Regards,

-- 
      ,''`.
     : :'  :     Chris Lamb
     `. `'`      lamby at debian.org / chris-lamb.co.uk
       `-
-------------- next part --------------
A non-text attachment was scrubbed...
Name: autopkgtest.4.0.3.unstable.amd64.log.txt.gz
Type: application/octet-stream
Size: 41716 bytes
Desc: not available
URL: <http://lists.alioth.debian.org/pipermail/autopkgtest-devel/attachments/20160805/c6c383e8/attachment-0001.obj>