[buildd-tools-devel] Bug#566314: Bug#566314: Bug#566314: buildd: Upgrade changed gid, breaks buildds.

[Roger Leigh]

On Sat, Jan 23, 2010 at 01:01:34PM +0100, Kurt Roeckx wrote:
> On Sat, Jan 23, 2010 at 11:37:38AM +0000, Roger Leigh wrote:
> > On Fri, Jan 22, 2010 at 10:31:29PM +0100, Kurt Roeckx wrote:
> > > Package: buildd
> > > Version: 0.59.1~rc1~buildd20100121.0
> > > Severity: grave
> > > 
> > > After the recent upgrade of the buildds, sbuild's gid
> > > got changed from 1000 to 106 or something simular.
> > > 
> > > However, all the chroots still use gid 1000, so nothing
> > > can be build anymore.
> > 
> > The postinst of sbuild does switch the sbuild group from
> > a user group to a system group.  This was done in 0.59.3
> > in May 2009.
> > 
> > We take care to chown all files on the host owned by
> > group sbuild.  Inside /var/lib/sbuild in the chroot,
> > this is taken care of at runtime by
> > Sbuild::ChrootSetup::basesetup which is called when
> > setting up a chroot in Sbuild::Chroot::_setup_options.
> > 
> > On non-buildd hosts, such as all sbuild users using
> > testing or unstable, this group migration went
> > smoothly with no reported breakage.
> > 
> > Could you let me know exactly which files and/or
> > directories are retaining the old group, and are
> > causing breakage as a consequence?
> 
> Atleast everything in /build and /var/lib/sbuild

These two should already be taken care of by basesetup.

This does a chown of /build, and chown -R of /var/lib/sbuild,
on every sbuild invocation in that chroot.  I've verified
that it's working for me by altering the group ownership and
then running sbuild; it's correctly set back to :sbuild.

If you could try a manual run of sbuild in the chroot,
does this set the ownership correctly?


Regards,
Roger

-- 
  .''`.  Roger Leigh
 : :' :  Debian GNU/Linux             http://people.debian.org/~rleigh/
 `. `'   Printing on GNU/Linux?       http://gutenprint.sourceforge.net/
   `-    GPG Public Key: 0x25BFB848   Please GPG sign your mail.
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 197 bytes
Desc: Digital signature
URL: <http://lists.alioth.debian.org/pipermail/buildd-tools-devel/attachments/20100123/7acc6afb/attachment.pgp>