#1140263 ostree-push: FTBFS: User sbuild not allowed because account is locked

#1140263#5
Date:
2026-06-17 16:15:26 UTC
From:
To:
Dear maintainer:

During a rebuild of all packages in unstable, this package failed to build.

Below you will find the last part of the build log (probably the most
relevant part, but not necessarily). If required, the full build log
is available here:

https://people.debian.org/~sanvila/build-logs/202606/

About the archive rebuild: The build was made on virtual machines from AWS,
using sbuild and a reduced chroot with only build-essential packages.

If you cannot reproduce the bug please contact me privately, as I
am willing to provide ssh access to a virtual machine where the bug is
fully reproducible.

If this is really a bug in one of the build-depends, please use
reassign and add an affects on src:ostree-push, so that this is still
visible in the BTS web page for this package.

Thanks.
--------------------------------------------------------------------------------
[...]
 debian/rules clean
dh clean --buildsystem=pybuild
   dh_auto_clean -O--buildsystem=pybuild
   dh_autoreconf_clean -O--buildsystem=pybuild
   dh_clean -O--buildsystem=pybuild
 debian/rules binary
dh binary --buildsystem=pybuild
   dh_update_autotools_config -O--buildsystem=pybuild
   dh_autoreconf -O--buildsystem=pybuild
   dh_auto_configure -O--buildsystem=pybuild
   debian/rules execute_before_dh_auto_build
make[1]: Entering directory '/<<PKGBUILDDIR>>'
ln -sr tests/ostree-receive tests/ostree-receive-0
ln -sr tests/ostree-receive tests/ostree-receive-1
dh execute_before_dh_auto_build --buildsystem=pybuild

[... snipped ...]

DEBUG    otpush.push:push.py:213 Starting SSH master process ssh -N -M -S /tmp/ostree-push-f0rr0a97/socket -p 54252 -i /tmp/pytest-of-sbuild/pytest-1/ssh-data0/id_rsa -o IdentitiesOnly=yes -o StrictHostKeyChecking=no -o UserKnownHostsFile=/dev/null 127.0.0.1
DEBUG    otpush.push:push.py:158 Stopping HTTP server process 701

                       dry_run=True)

tests/test_push.py:304:
_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _
tests/test_push.py:222: in push_refs
    push.push_refs(source_repo, dest, refs=refs, dry_run=dry_run,
otpush/push.py:357: in push_refs
    with SSHMultiplexer(dest.host, socket_path, ssh_options,
otpush/push.py:178: in __enter__
    self.start()
_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _

self = <otpush.push.SSHMultiplexer object at 0x7f6a28e85f40>

    def start(self):
        """Start an SSH master connection

        Run an SSH master connection to host in the background.
        """
        if self.master_proc is not None:
            raise OTPushError(
                f'SSH master process already running in {self.master_proc.pid}'
            )
        if os.path.exists(self.socket):
            raise OTPushError(f'Socket {self.socket} already exists')

        # Create the socket file if necessary
        # Options used:
        # -N: Don't execute a remote command
        # -M: Puts the client in master mode for connection sharing
        # -S: Specify the location of the control socket
        master_cmd = ['ssh', '-N', '-M', '-S', self.socket]
        if self.port:
            master_cmd += ['-p', str(self.port)]
        if self.ssh_options:
            master_cmd += self.ssh_options
        if self.user:
            master_cmd.append(f'{self.user}@{self.host}')
        else:
            master_cmd.append(self.host)
        logger.debug('Starting SSH master process %s',
                     ' '.join(map(shlex.quote, master_cmd)))
        self.master_proc = subprocess.Popen(master_cmd)

        # Loop until the socket shows up
        timeout = 0
        while timeout < RESOURCE_TIMEOUT:
            if self.master_proc.poll() is not None:
otpush/push.py:221: OTPushError
----------------------------- Captured stderr call -----------------------------
drop connection #0 from [127.0.0.1]:40624 on [127.0.0.1]:54252 penalty: attempted authentication by invalid user

kex_exchange_identification: read: Connection reset by peer

Connection reset by 127.0.0.1 port 54252
------------------------------ Captured log call -------------------------------
DEBUG    otpush.push:push.py:332 /tmp/pytest-of-sbuild/pytest-1/test_dry_run1/source-repo/summary does not exist, regenerating
INFO     otpush.push:push.py:346 Regenerating summary file
INFO     otpush.push:push.py:151 Serving /tmp/pytest-of-sbuild/pytest-1/test_dry_run1/source-repo on http://127.0.0.1:46223 from process 704
DEBUG    otpush.push:push.py:213 Starting SSH master process ssh -N -M -S /tmp/ostree-push-tkrl5lnw/socket -p 54252 -i /tmp/pytest-of-sbuild/pytest-1/ssh-data0/id_rsa -o IdentitiesOnly=yes -o StrictHostKeyChecking=no -o UserKnownHostsFile=/dev/null 127.0.0.1
DEBUG    otpush.push:push.py:158 Stopping HTTP server process 704

E         - Could not find commands /tmp/pytest-of-sbuild/pytest-1/test_commands0/nonexistent on server
E         + SSH master process 709 exited

tests/test_push.py:325: AssertionError
----------------------------- Captured stderr call -----------------------------
drop connection #0 from [127.0.0.1]:40628 on [127.0.0.1]:54252 penalty: attempted authentication by invalid user

kex_exchange_identification: read: Connection reset by peer

Connection reset by 127.0.0.1 port 54252
------------------------------ Captured log call -------------------------------
DEBUG    otpush.push:push.py:332 /tmp/pytest-of-sbuild/pytest-1/test_commands0/source-repo/summary does not exist, regenerating
INFO     otpush.push:push.py:346 Regenerating summary file
INFO     otpush.push:push.py:151 Serving /tmp/pytest-of-sbuild/pytest-1/test_commands0/source-repo on http://127.0.0.1:38587 from process 707
DEBUG    otpush.push:push.py:213 Starting SSH master process ssh -N -M -S /tmp/ostree-push-bttng8v9/socket -p 54252 -i /tmp/pytest-of-sbuild/pytest-1/ssh-data0/id_rsa -o IdentitiesOnly=yes -o StrictHostKeyChecking=no -o UserKnownHostsFile=/dev/null 127.0.0.1
DEBUG    otpush.push:push.py:158 Stopping HTTP server process 707

              ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

tests/test_sshd.py:26:
_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _
/usr/lib/python3.13/subprocess.py:472: in check_output
    return run(*popenargs, stdout=PIPE, timeout=timeout, check=True,
_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _

input = None, capture_output = False, timeout = None, check = True
popenargs = (['ssh', '-p', '54252', '-i', '/tmp/pytest-of-sbuild/pytest-1/ssh-data0/id_rsa', '-o', ...],)
kwargs = {'stdout': -1}
process = <Popen: returncode: 255 args: ['ssh', '-p', '54252', '-i', '/tmp/pytest-of-s...>
stdout = b'', stderr = None, retcode = 255

    def run(*popenargs,
            input=None, capture_output=False, timeout=None, check=False, **kwargs):
        """Run command with arguments and return a CompletedProcess instance.

        The returned instance will have attributes args, returncode, stdout and
        stderr. By default, stdout and stderr are not captured, and those attributes
        will be None. Pass stdout=PIPE and/or stderr=PIPE in order to capture them,
        or pass capture_output=True to capture both.

        If check is True and the exit code was non-zero, it raises a
        CalledProcessError. The CalledProcessError object will have the return code
        in the returncode attribute, and output & stderr attributes if those streams
        were captured.

        If timeout (seconds) is given and the process takes too long,
         a TimeoutExpired exception will be raised.

        There is an optional argument "input", allowing you to
        pass bytes or a string to the subprocess's stdin.  If you use this argument
        you may not also use the Popen constructor's "stdin" argument, as
        it will be used internally.

        By default, all communication is in bytes, and therefore any "input" should
        be bytes, and the stdout and stderr will be bytes. If in text mode, any
        "input" should be a string, and stdout and stderr will be strings decoded
        according to locale encoding, or by "encoding" if set. Text mode is
        triggered by setting any of text, encoding, errors or universal_newlines.

        The other arguments are the same as for the Popen constructor.
        """
        if input is not None:
            if kwargs.get('stdin') is not None:
                raise ValueError('stdin and input arguments may not both be used.')
            kwargs['stdin'] = PIPE

        if capture_output:
            if kwargs.get('stdout') is not None or kwargs.get('stderr') is not None:
                raise ValueError('stdout and stderr arguments may not be used '
                                 'with capture_output.')
            kwargs['stdout'] = PIPE
            kwargs['stderr'] = PIPE

        with Popen(*popenargs, **kwargs) as process:
            try:
                stdout, stderr = process.communicate(input, timeout=timeout)
            except TimeoutExpired as exc:
                process.kill()
                if _mswindows:
                    # Windows accumulates the output in a single blocking
                    # read() call run on child threads, with the timeout
                    # being done in a join() on those threads.  communicate()
                    # _after_ kill() is required to collect that and add it
                    # to the exception.
                    exc.stdout, exc.stderr = process.communicate()
                else:
                    # POSIX _communicate already populated the output so
                    # far into the TimeoutExpired exception.
                    process.wait()
                raise
            except:  # Including KeyboardInterrupt, communicate handled that.
                process.kill()
                # We don't call process.wait() as .__exit__ does that for us.
                raise
            retcode = process.poll()
            if check and retcode:
/usr/lib/python3.13/subprocess.py:577: CalledProcessError
----------------------------- Captured stderr call -----------------------------
drop connection #0 from [127.0.0.1]:53148 on [127.0.0.1]:54252 penalty: attempted authentication by invalid user

kex_exchange_identification: read: Connection reset by peer

Connection reset by 127.0.0.1 port 54252
--------------------------- Captured stderr teardown ---------------------------
Received signal 15; terminating.
---------------------------- Captured log teardown -----------------------------
DEBUG    tests.util:util.py:357 Stopping sshd process 627
=============================== warnings summary ===============================
../../../../../../usr/lib/python3/dist-packages/gi/overrides/__init__.py:159
  /usr/lib/python3/dist-packages/gi/overrides/__init__.py:159: PyGIDeprecationWarning: GLib.unix_signal_add_full is deprecated; use GLibUnix.signal_add_full instead
    value = getattr(proxy, attr)

.pybuild/cpython3_3.13_ostree-push/build/tests/test_push.py: 5 warnings
.pybuild/cpython3_3.13_ostree-push/build/tests/test_receive.py: 19 warnings
  /usr/lib/python3.13/multiprocessing/popen_fork.py:73: DeprecationWarning: This process (pid=624) is multi-threaded, use of fork() may lead to deadlocks in the child.
    self.pid = os.fork()