[Pkg-openmpi-maintainers] Bug#839387: package builds crashing under fakeroot

Alastair McKinstry mckinstry at debian.org
Mon Oct 3 14:50:05 UTC 2016


Hi,

In OpenMPI 2.0, Michael Banck discovered that some of the packages that
failed were doing so as openmpi no longer works under fakeroot.

Upstream (Gilles Gouaillaerdet) point out:

    from |validate_cred| in
    |opal/mca/pmix/pmix112/pmix/src/sec/pmix_native.c|

    |getsockopt (peer->sd, SOL_SOCKET, SO_PEERCRED, &ucred, &crlen);|

    my understanding is that |fakeroot| tricks the processes into
    believing they are ran as |root|,
    as such, |orted| expects a connection from |root| (e.g. |ucred.uid|
    is |0|)
    /* in singleton mode, an |orted| is fork&exec'ed under the hood */

    but |fakeroot| cannot trick |getsockopt|, which returns the user
    (non zero)

So its a legitimate tightening of credential-checking in pmix. However
it causes problems for us running tests under binary-arch.

What do DDs think should be done about this - move all tests outside
binary-arch?

regards
Alastair

-- 
Alastair McKinstry, <alastair at sceal.ie>, <mckinstry at debian.org>, https://diaspora.sceal.ie/u/amckinstry
Misentropy: doubting that the Universe is becoming more disordered. 

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.alioth.debian.org/pipermail/pkg-openmpi-maintainers/attachments/20161003/1c79cc45/attachment.html>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 819 bytes
Desc: OpenPGP digital signature
URL: <http://lists.alioth.debian.org/pipermail/pkg-openmpi-maintainers/attachments/20161003/1c79cc45/attachment.sig>


More information about the Pkg-openmpi-maintainers mailing list