#1121888 debci: Should offer a nonetwork restriction

#1121888#5
Date:
2025-12-04 09:54:10 UTC
From:
To:
hi,

I will like for testing dhcp a restriction that block external network when
package are installed for safety purpose

rouca

#1121888#10
Date:
2025-12-04 10:10:59 UTC
From:
To:
Hi Bastien,

The right package is autopkgtest.


Inside the testbed, you can do what you want (I guess you'd need the
right set of other restrictions to have the proper privileges). Why
don't you prevent network while testing inside the test?

I guess autopkgtest could in principle do this, but it seems to be a
niche feature. I'm also not sure if it should be a restriction (it's
more the other way around).

Paul

#1121888#19
Date:
2025-12-04 10:17:09 UTC
From:
To:
Le jeudi 4 décembre 2025, 11:10:59 heure normale d’Europe centrale Paul Gevers a écrit :

because i believe testing network service like dhcp on salsaCI is not a good idea.

Maybe canonical way to remove network should be documented
May be it is a documentation problem

#1121888#24
Date:
2025-12-04 11:40:27 UTC
From:
To:
Agreed. If you use the `needs-root` restriction, you can then do
whatever you want inside the testbed, including disabling the network.
The code needs to be written carefully to be robust, but in principle
there is nothing preventing you from doing that.