Bug#1144856: x32 builders not properly isolated from network

Mattias Ellert <[email protected]> Wed, 19 Aug 2026 14:20:05 +0200

Newsgroups	gmane.linux.debian.ports.amd64
Message-ID	<0d2f8379cf8d60a1068788ea02b8ae3fd6b12c2d.camel__11339.7341383219$1787142211$gmane$org@physics.uu.se>

Package: buildd.debian.org
Severity: important
User: [email protected]
Usertags: x32
X-Debbugs-CC: [email protected]

The xrootd package runs tests during the build. Some of these tests use
some precompiled binaries that are donwloaded from google to run. This
download attempt happens on amd64, arm64 and x32 -- the software is
available for x86_64 and aarch64 only, but the processor match in the
cmake script also triggers on x32 since it checks processor type and
not build target. If the download fails the tests needing this software
are disabled and not run.

On amd64 and arm64 buildds this works as expected -- the downloads fail
because the network is not available and the tests are akipped:

-- Could not find minio. Attempting to download it.
-- Downloading https://dl.min.io/server/minio/release/linux-amd64/minio
to /build/reproducible-path/xrootd-6.1.1/obj-x86_64-linux-
gnu/tests/XrdClS3/minio
-- Could not download minio: "Could not resolve hostname", skipping
XrdClS3 tests

However, on the x32 buildds the downloads succeed, which they
shouldn't.

-- Could not find minio. Attempting to download it.
-- Downloading https://dl.min.io/server/minio/release/linux-amd64/minio
to /build/reproducible-path/xrootd-6.1.1/obj-x86_64-linux-
gnux32/tests/XrdClS3/minio
-- Could not find mc. Attempting to download it.
-- Downloading https://dl.min.io/client/mc/release/linux-amd64/mc to
/build/reproducible-path/xrootd-6.1.1/obj-x86_64-linux-
gnux32/tests/XrdClS3/mc

This is true for both the x32-do-01 and the x32-do-02 x32 buildd. The
debian/rules file currently disables the tests using this software by
adding them to the -E flags to ctest, so the software isn't used during
the build.

But it shouldn't be possible to doenload it during the build in the
first place.

	Mattias

signature.asc (application/pgp-signature, 833 B)