#1144780 dnsmasq: autopkgtest fails under incus-lxc: mount of /sys failed: Operation not permitted

#1144780#5
Date:
2026-08-18 23:18:59 UTC
From:
To:
Hi,

Debian CI is switching away from lxc containers in favor of incus Containers.
This is motivated by security concerns from us; incus is based on lxc, but
orchestrates containers substantially different: containers are not privileged
(so root in the container is not uid 0 outside of it, and incus imposes a
stricter isolation from the host system.

dnsmasq passes its tests under lxc, but fails under incus.
The relevant part of the failure is (hopefully):
The full autokpgtest logs are available at:
https://ci.debian.net/experiments/8/regressions/
(please beware of pagination)

Common types of failure and suggested fixes are being documented at:
https://wiki.debian.org/ContinuousIntegration/LxcToIncus

Note that for the time being, dnsmasq is still being tested under lxc to
avoid disturbing its testing migration test results.

If you decide to add the `isolation-machine` restriction to get this package
tested under qemu, please mention that explicitly when closing this bug (it's
fine to do that only in the package changelog entry that closes the bug) so
that we can configure your package for qemu on ci.debian.net.

#1144780#10
Date:
2026-09-13 13:04:23 UTC
From:
To:
We believe that the bug you reported is fixed in the latest version of
dnsmasq, which is due to be installed in the Debian FTP archive.

A summary of the changes between this version and the previous one is
attached.

Thank you for reporting the bug, which will now be closed.  If you
have further comments please address them to 1144780@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
pp.
Sven Geuer <sge@debian.org> (supplier of updated dnsmasq package)

(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmaster@ftp-master.debian.org)
Format: 1.8
Date: Sun, 13 Sep 2026 14:03:15 +0200
Source: dnsmasq
Architecture: source
Version: 2.93-2
Distribution: unstable
Urgency: medium
Maintainer: Simon Kelley <simon@thekelleys.org.uk>
Changed-By: Sven Geuer <sge@debian.org>
Closes: 1144780
Changes:
 dnsmasq (2.93-2) unstable; urgency=medium
 .
   * d/t/*:
     - Rework autopkgtest so that it can run successfully under incus-lxc.
       (Closes: #1144780)
     - Rework pattern matching from dash-based to perl-based.
   * d/control: Update debhelper-compat to 14. Consequently, drop all
     ${*:Depends} and ${*:Pre-Depends} substvar mentionings.
Checksums-Sha1:
 75a79d21ae8131b3c8a7ce0197aef8432aa1cc4b 2624 dnsmasq_2.93-2.dsc
 e9f2f26781cd5afd0bd044678afa17fe79858bc3 33656 dnsmasq_2.93-2.debian.tar.xz
 1cbb7affd93c8462ec1602340787d1c5d8b9ab57 8191 dnsmasq_2.93-2_amd64.buildinfo
Checksums-Sha256:
 258eb81dc03af91192c847902149b4bea61939f8d75dacd10ba562141f530f64 2624 dnsmasq_2.93-2.dsc
 c711ee3d8f67cdc0f94a60b79bc782f4e689bb256d6514dbd5a18a939566e039 33656 dnsmasq_2.93-2.debian.tar.xz
 8becaf7bb5eabff96b14414d290a8ce3426375a65828382b097cd3eb6c332c53 8191 dnsmasq_2.93-2_amd64.buildinfo
Files:
 b29691cd8b78a93be7840fe203a4f49f 2624 net optional dnsmasq_2.93-2.dsc
 120c10dff2ab5d4473e815bf7c558e71 33656 net optional dnsmasq_2.93-2.debian.tar.xz
 9d6effe3e92f962f60e94d733636c70a 8191 net optional dnsmasq_2.93-2_amd64.buildinfo
-----BEGIN PGP SIGNATURE-----

iQJDBAEBCgAtFiEEPfXoqkP8n9/QhvGVrfUO2vit1YUFAmqmm6IPHHNnZUBkZWJp
YW4ub3JnAAoJEK31Dtr4rdWF5R4P/iI0KDySuDoG2+7bwX1a2BwFNQChlyLtlpGg
RszOXra/lUSALbLkXCJJf/ectEVuzwtrZcDmNqf/naJTM04+MuBhbTQA+ditTNUs
fF5bLRzKjUWP8CfuTWx82Vw5xpcBMKgpPqEov8S76wpVuAKF0qH8686KButOn4+L
UEDlV3TFiIJHCfj8p5oHkjnOwoUIF/5/8s3N6EEsB+YU55FQlYFKLOuAxwl4xheo
vPU8CFi7/4/ZyVOoTHedOgcYKoT8WucimrKyfPdYthHl0Cxyg7k4LtKr254OY07j
Umnqxtq/Y+K5jCHGHLjxfCGePJXi8ca8IlmbrXUuiMgGbKaR1ILhQ5ivqilkWO0N
OjYr0dcM8mvxQMMoP+w1KxQSgIhz/qTiUeBVRTOInOfq0Lpw9mqtkSD9cIGCzg6y
oriN1X8pVM95ULh7eHQ3xeZmrjurKiILCJVjt2BxnmfZIwWwcZmz8WhK4rbGcJuc
Mtz5vcVIN608oyFKPEQ0ut6iob4CaPjzzCkDknyXEpXUbdi7PJ+9jZe0zk0FsyHN
CHvgPp8cwPc83n7yNW6NkEh4JEg0B0EEKXEJWSoNJFF2gHteaA6i9LFYIg/MH2cB
acBAqpk2FFfLQuTyH7gzMZA1PIFvkvU4MshwTstE8E2mLdzsilbZ4qPd5cMRsCVM
JQvzN9ri
=Yf/j
-----END PGP SIGNATURE-----