Re: haskell package build corruptions

Hello,

Michael Kelly, le sam. 18 juil. 2026 21:35:50 +0100, a ecrit:
> Is there a script or document that is used to construct a buildd machine
> that I could make use of for this comparison ?

"Constructing a buildd machine" is a long thing to do. But you do not
need the whole of it. What actually builds packages is sbuild.

The configuration is as below.


€ cat /home/buildd/.sbuildrc
use Sys::Hostname;
my $myhostname = hostname();

$mailfrom = "Build Daemon <buildd@".$myhostname.".sceen.net>";
$mailto = '[email protected],[email protected]';
$maintainer_name='Debian GNU/Hurd Build Daemon <buildd_hurd-amd64-'.$myhostname.'@buildd.debian.org>';
$purge_build_directory="always";
$sbuild_mode='buildd';
$mime_build_log_mails = 1;
$compress_build_log_mails = 1;
$apt_keep_downloaded_packages = 1;

#$fakeroot='/usr/bin/fakeroot';
$chroot_mode='schroot';
$schroot='schroot';

$stalled_pkg_timeout = 180;

$build_env_cmnd = "/bin/fixchroot";

$build_environment = {
        "FAKEROOTUID" => "0",
        "FAKEROOTEUID" => "0",
        "FAKEROOTSUID" => "0",
        "FAKEROOTFUID" => "0",
        "FAKEROOTGID" => "0",
        "FAKEROOTEGID" => "0",
        "FAKEROOTSGID" => "0",
        "FAKEROOTFGID" => "0",
};


# don't remove this, Perl needs it:
1;


€ cat /etc/schroot/chroot.d/sid-hurd-amd64-sbuild
[sid-hurd-amd64-sbuild]
description=Debian unstable/hurd-amd64 autobuilder
groups=root,sbuild
root-groups=root,sbuild
profile=sbuild
type=plain
directory=/home/buildd/chroots/sid
union-type=none
command-prefix=eatmydata


€ cat /home/buildd/chroots/chroots/sid/bin/fixchroot
#!/bin/bash
export FAKEROOTUID=0 FAKEROOTEUID=0 FAKEROOTSUID=0 FAKEROOTFUID=0 FAKEROOTGID=0 FAKEROOTEGID=0 FAKEROOTSGID=0 FAKEROOTFGID=0
USER=$(whoami)
exec "$@"

€ cat /etc/sudoers.d/buildd
Defaults rlimit_as=3000000000
Defaults:buildd env_keep+="APT_CONFIG DEBIAN_FRONTEND SHELL DEB_BUILD_OPTIONS FAKEROOTUID FAKEROOTEUID FAKEROOTSUID FAKEROOTFUID FAKEROOTGID FAKEROOTEGID FAKEROOTSGID FAKEROOTFGID KF_IGNORE_PLATFORM_CHECK"
buildd  ALL=NOPASSWD: ALL


€ fsysopts /
ext2fs --writable --relatime --no-inherit-dir-group --store-type=typed part:1:device:wd0
€ fsysopts /home/buildd/chroots
/hurd/ext2fs --writable --relatime --no-inherit-dir-group --sync=5 /dev/wd0s3


The directory-based chroot in /home/buildd/chroots/sid is built with the
attached script.



The boralus VM is running as follows:

   2009 ?        SLl  5807:21 /usr/bin/qemu-system-x86_64 -name guest=boralus,debug-threads=on -S -object {"qom-type":"secret","id":"masterKey0","format":"raw","file":"/var/lib/libvirt/qemu/domain-1-boralus/master-key.aes"} -machine pc-q35-7.2,usb=off,dump-guest-core=off,mem-merge=off,memory-backend=pc.ram,acpi=on -accel kvm -cpu qemu64,x2apic=on,hypervisor=on,lahf-lm=on,svm=off -m size=3145728k -object {"qom-type":"memory-backend-file","id":"pc.ram","mem-path":"/hugepages_1g/libvirt/qemu/1-boralus","x-use-canonical-path-for-ramblock-id":false,"prealloc":true,"size":3221225472} -overcommit mem-lock=on -smp 1,sockets=1,cores=1,threads=1 -uuid 55bf441a-67cb-4b09-8e83-46304477d74f -no-user-config -nodefaults -chardev socket,id=charmonitor,fd=34,server=on,wait=off -mon chardev=charmonitor,id=monitor,mode=control -rtc base=utc -no-shutdown -global ICH9-LPC.disable_s3=1 -global ICH9-LPC.disable_s4=1 -boot strict=on -device {"driver":"pcie-root-port","port":16,"chassis":1,"id":"pci.1","bus":"pcie.0","multifunction":true,"addr":"0x2"} -device {"driver":"pcie-root-port","port":17,"chassis":2,"id":"pci.2","bus":"pcie.0","addr":"0x2.0x1"} -device {"driver":"pcie-root-port","port":18,"chassis":3,"id":"pci.3","bus":"pcie.0","addr":"0x2.0x2"} -device {"driver":"pcie-root-port","port":19,"chassis":4,"id":"pci.4","bus":"pcie.0","addr":"0x2.0x3"} -device {"driver":"pcie-root-port","port":20,"chassis":5,"id":"pci.5","bus":"pcie.0","addr":"0x2.0x4"} -device {"driver":"pcie-root-port","port":21,"chassis":6,"id":"pci.6","bus":"pcie.0","addr":"0x2.0x5"} -device {"driver":"pcie-root-port","port":22,"chassis":7,"id":"pci.7","bus":"pcie.0","addr":"0x2.0x6"} -device {"driver":"pcie-root-port","port":23,"chassis":8,"id":"pci.8","bus":"pcie.0","addr":"0x2.0x7"} -device {"driver":"pcie-root-port","port":24,"chassis":9,"id":"pci.9","bus":"pcie.0","multifunction":true,"addr":"0x3"} -device {"driver":"pcie-root-port","port":25,"chassis":10,"id":"pci.10","bus":"pcie.0","addr":"0x3.0x1"} -device {"driver":"pcie-root-port","port":26,"chassis":11,"id":"pci.11","bus":"pcie.0","addr":"0x3.0x2"} -device {"driver":"pcie-root-port","port":27,"chassis":12,"id":"pci.12","bus":"pcie.0","addr":"0x3.0x3"} -device {"driver":"pcie-root-port","port":28,"chassis":13,"id":"pci.13","bus":"pcie.0","addr":"0x3.0x4"} -device {"driver":"pcie-root-port","port":29,"chassis":14,"id":"pci.14","bus":"pcie.0","addr":"0x3.0x5"} -device {"driver":"qemu-xhci","id":"usb","bus":"pci.2","addr":"0x0"} -device {"driver":"virtio-serial-pci","id":"virtio-serial0","bus":"pci.3","addr":"0x0"} -blockdev {"driver":"file","filename":"/home/kvm/boralus/hd0.img","node-name":"libvirt-1-storage","read-only":false,"cache":{"direct":true,"no-flush":false}} -device {"driver":"ide-hd","bus":"ide.0","drive":"libvirt-1-storage","id":"sata0-0-0","bootindex":1,"write-cache":"on"} -netdev {"type":"tap","fd":"35","id":"hostnet0"} -device {"driver":"pcnet","netdev":"hostnet0","id":"net0","mac":"02:00:00:83:05:37","bus":"pci.1","addr":"0x0"} -chardev pty,id=charserial0 -device {"driver":"isa-serial","chardev":"charserial0","id":"serial0","index":0} -audiodev {"id":"audio1","driver":"none"} -vnc vnc=unix:/home/kvm/boralus/vnc_socket,audiodev=audio1 -k fr -device {"driver":"cirrus-vga","id":"video0","bus":"pcie.0","addr":"0x1"} -global ICH9-LPC.noreboot=off -watchdog-action reset -incoming defer -device {"driver":"virtio-balloon-pci","id":"balloon0","bus":"pci.4","addr":"0x0"} -sandbox on,obsolete=deny,elevateprivileges=deny,spawn=deny,resourcecontrol=deny -msg timestamp=on

The host cpu is:

processor	: 7
vendor_id	: GenuineIntel
cpu family	: 6
model		: 86
model name	: Intel(R) Xeon(R) CPU D-1521 @ 2.40GHz
stepping	: 3
microcode	: 0x700001c
cpu MHz		: 2701.002
cache size	: 6144 KB
physical id	: 0
siblings	: 8
core id		: 3
cpu cores	: 4
apicid		: 7
initial apicid	: 7
fpu		: yes
fpu_exception	: yes
cpuid level	: 20
wp		: yes
flags		: fpu vme de pse tsc msr pae mce cx8 apic sep mtrr pge mca cmov pat pse36 clflush dts acpi mmx fxsr sse sse2 ss ht tm pbe syscall nx pdpe1gb rdtscp lm constant_tsc arch_perfmon pebs bts rep_good nopl xtopology nonstop_tsc cpuid aperfmperf pni pclmulqdq dtes64 monitor ds_cpl vmx smx est tm2 ssse3 sdbg fma cx16 xtpr pdcm pcid dca sse4_1 sse4_2 x2apic movbe popcnt tsc_deadline_timer aes xsave avx f16c rdrand lahf_lm abm 3dnowprefetch cpuid_fault epb cat_l3 cdp_l3 pti intel_ppin ssbd ibrs ibpb stibp tpr_shadow flexpriority ept vpid ept_ad fsgsbase tsc_adjust bmi1 hle avx2 smep bmi2 erms invpcid rtm cqm rdt_a rdseed adx smap intel_pt xsaveopt cqm_llc cqm_occup_llc cqm_mbm_total cqm_mbm_local dtherm ida arat pln pts vnmi md_clear flush_l1d
vmx flags	: vnmi preemption_timer posted_intr invvpid ept_x_only ept_ad ept_1gb flexpriority apicv tsc_offset vtpr mtf vapic ept vpid unrestricted_guest vapic_reg vid ple shadow_vmcs pml ept_violation_ve
bugs		: cpu_meltdown spectre_v1 spectre_v2 spec_store_bypass l1tf mds swapgs taa itlb_multihit mmio_stale_data vmscape
bogomips	: 4800.57
clflush size	: 64
cache_alignment	: 64
address sizes	: 46 bits physical, 48 bits virtual
power management:

I hope I didn't forget something in the setup.

Samuel

#!/bin/bash

set -x
set -e

shopt -s nullglob

ARCH=$(dpkg-architecture -qDEB_HOST_ARCH)

CHROOTS=$HOME/chroots

if [ ! -d $CHROOTS/lost+found ]
then
  echo chroots/ is not mounted
  exit 1
fi

rm -f $HOME/build/build-progress
rm -f $HOME/build/SBUILD-GIVEN-BACK

remove()
{
  SUITE=$1
  case $SUITE in
    d-i) BASE=sid-d-i ;;
    unstable) BASE=sid ;;
    experimental) BASE=experimental ;;
  esac
  CHROOT=$CHROOTS/$BASE
  SCHROOT=/etc/schroot/chroot.d/$BASE-$ARCH-sbuild

  sudo rm -f $SCHROOT-* $SCHROOT

  [ -d $CHROOT ] || return 0

  for i in build dev servers tmp var/lib/dbus run/dbus proc home/buildd/.dbus /repo ; do
    [ ! -e "$CHROOT/$i" ] || sudo settrans -fg "$CHROOT/$i"
  done
  sudo settrans -afg $CHROOT/proc || true
  for i in $CHROOT/dev/* $CHROOT/servers/* $CHROOT/servers/socket/* $CHROOT/servers/bus/*
  do
    sudo settrans -fg $i
  done
  sudo mv $CHROOT $CHROOTS/toremove-$$-$SUITE
  (cd $CHROOTS ; sudo rm -fr toremove-$$-$SUITE ) &
}

#sudo rm -f /tmp/.X*-lock

#remove unstable
#remove unstable-test
#remove d-i
remove experimental
#( sudo sh -c "for i in /lost+found/* ; do settrans -fg \$i ; done ; for i in /lost+found/*/*/* ; do settrans -fg \$i ; done ; for i in /lost+found/*/* ; do settrans -fg \$i ; done ; for i in /lost+found/*/*/* ; do settrans -fg \$i ; done ; rm -fr /lost+found/*" ) &
#( cd $CHROOTS ; sudo sh -c "for i in lost+found/* ; do settrans -fg \$i ; done ; for i in lost+found/*/* ; do settrans -fg \$i ; done ; for i in lost+found/*/*/* ; do settrans -fg \$i ; done ; rm -fr lost+found/*" ) &

[ -L $HOME/build/chroot-experimental ] || ln -s ../chroots/experimental $HOME/build/chroot-experimental
[ -L $HOME/build/chroot-sid ] || ln -s ../chroots/sid $HOME/build/chroot-sid
[ -L $HOME/build/chroot-unstable ] || ln -s ../chroots/sid $HOME/build/chroot-unstable

create()
{
  SUITE=$1
  case $SUITE in
    unstable) BASE=sid ;;
    unstable-test) BASE=sid-test ;;
    d-i) BASE=sid-d-i ;;
    experimental) BASE=experimental ;;
  esac
  CHROOT=$CHROOTS/$BASE
  SCHROOT=/etc/schroot/chroot.d/$BASE-$ARCH-sbuild

  sudo env eatmydata sbuild-createchroot \
	 --chroot-prefix=$BASE \
	 --command-prefix=eatmydata \
	--include=eatmydata,debian-ports-archive-keyring,ca-certificates \
	--exclude=lsb-base \
	--extra-suites=unreleased \
	--merged-usr \
	--keyring=/usr/share/keyrings/debian-ports-archive-keyring.gpg \
	unstable $CHROOT "http://deb.debian.org/debian-ports"

  sudo settrans -kp $CHROOT/servers /hurd/firmlink /servers
  sudo settrans -kp $CHROOT/dev /hurd/firmlink /dev
  sudo settrans -kp $CHROOT/proc /hurd/firmlink /proc

  sudo chroot $CHROOT apt -f install -y || true
  #echo y | sudo chroot $CHROOT apt -y upgrade || true
  #sudo chroot $CHROOT apt install -o APT::Install-Recommends=false -y --allow-unauthenticated gnupg 
  sudo chroot $CHROOT apt install -o APT::Install-Recommends=false -y --allow-unauthenticated adduser
  sudo chroot $CHROOT groupadd -r _ssh
  sudo mv $SCHROOT-* $SCHROOT
  sudo sed -i -e 's/^type=directory$/type=plain/' $SCHROOT

  sudo chroot $CHROOT adduser --uid $UID  --disabled-password --gecos buildd buildd 
  #sudo settrans $CHROOT/tmp /hurd/firmlink /tmp
  sudo settrans -c $CHROOT/var/lib/dbus /hurd/firmlink /var/lib/dbus
  sudo settrans -c $CHROOT/run/dbus /hurd/firmlink /run/dbus
  sudo settrans -c $CHROOT/repo /hurd/firmlink $HOME/repo
  #sudo settrans $CHROOT/build /hurd/firmlink /home/buildd/chroots/build
  sudo chown buildd.sbuild $CHROOT/home/buildd
  chmod 02775 $CHROOT/home/buildd
  sudo settrans -c $CHROOT/home/buildd/.dbus /hurd/firmlink /home/buildd/.dbus
  sudo ln -s /proc/mounts $CHROOT/etc/mtab

  sudo cp ~buildd/fixchroot $CHROOT/bin/
  sudo dd conv=notrunc oflag=append of=$CHROOT/etc/apt/apt.conf.d/99buildd << EOF
Acquire::PDiffs "false"; 
Acquire::Languages "none"; 
DPkg::Options {"--force-unsafe-io";};
EOF
  sudo chroot $CHROOT update-alternatives --set fakeroot  /usr/bin/fakeroot-hurd
  sudo dd of=$CHROOT/etc/apt/sources.list << EOF
#deb [arch=all] http://deb.debian.org/debian unstable main
#deb [arch=all] http://incoming.debian.org/debian-buildd buildd-unstable main

deb http://deb.debian.org/debian-ports unstable main
deb-src http://deb.debian.org/debian unstable main

deb http://incoming.ports.debian.org/buildd unstable main
deb-src http://incoming.debian.org/debian-buildd buildd-unstable main

deb http://deb.debian.org/debian-ports unreleased main

deb file:/repo ./
EOF
  if [ $SUITE = experimental ]
  then
    sudo dd conv=notrunc oflag=append of=$CHROOT/etc/apt/sources.list << EOF
#deb [arch=all] http://deb.debian.org/debian experimental main contrib
#deb [arch=all] http://incoming.debian.org/debian-buildd buildd-experimental main

deb http://deb.debian.org/debian-ports experimental main
deb-src http://deb.debian.org/debian experimental main

deb http://incoming.ports.debian.org/buildd experimental main
deb-src http://incoming.debian.org/debian-buildd buildd-experimental main
EOF
  fi
  gpg --keyserver keyring.debian.org --recv-key 900CB024B67931D40F82304BD0178C767D069EE6
  rm -f /tmp/sthibault.gpg
  gpg --export -o /tmp/sthibault.gpg 900CB024B67931D40F82304BD0178C767D069EE6
  sudo cp /tmp/sthibault.gpg $CHROOT/etc/apt/trusted.gpg.d/sthibault.gpg

  sudo chroot $CHROOT apt update || true
  sudo chroot $CHROOT apt upgrade -y --allow-unauthenticated

  sudo dd conv=notrunc oflag=append of=$CHROOT/etc/hosts << EOF
127.0.1.1       $(hostname).debian.net  $(hostname)
EOF

  #(cd ~/build ; sbuild-update -udc $BASE)
}

(cd $CHROOTS && for i in build/*/dev build/*/servers build/*/proc ; do sudo settrans -fg $i ; done && for i in build/*/dev/* build/*/servers/* ; do sudo settrans -fg $i ; done && for i in build/*/servers/*/* ; do sudo settrans -fg $i && rm -fr build/* ; done ) &
create unstable
#create unstable-test
#create d-i
#sudo chmod 1777 $CHROOTS/sid-d-i/build
#sudo chroot $CHROOTS/sid-d-i apt build-dep debian-installer
#create experimental
#sudo chroot $CHROOTS/experimental apt -y --allow-unauthenticated install aptitude